skysight-inc/HackerNews huggingface dataset:
At that point you’re comparing apples to oranges. There is a white hat market for company vulnerabilities, but not a black hat market for them. Whereas for stolen data, there is a black hat market, but not a white hat market.

The reason for this is obvious: bug reports have value to a company, but dumps of their own internal data do not. The only buyers of vulnerabilities on a white hat market are the companies who are victims of the vulnerabilities. The bug reports are valuable to those companies because it allows them to patch previously unknown vulnerabilities. But data breaches are not valuable to them in the same way. Why would they pay you for their own data that they already have? It’s not analogous to buying vulnerabilities, because the company gains nothing new.

Therefore the argument that the stolen data would be worth more on the black market than the white market is a moot point, because there is no white market for stolen data. If you’ve stolen data, you’ve overstepped the bounds of any reasonable bug bounty program, at a greatly increased risk of prosecution. Your options are to 1) stop and do nothing, 2) sell the data on the black market, 3) attempt to responsibly disclose the breach, knowing you are in a vulnerable legal position having downloaded the data, or 4) extort the company.

(Notice that “sell the data on a white hat market” is not an option.)

What we do not know in this case is if the hacker chose #3 or #4. It seems like he used social engineering to get the GitHub credentials, which would normally fall out of bounds for bug bounty programs (never mind the data breach itself). That seems to support the speculative conclusion that the hacker went into this with malicious intent. So does the fact that he resorted to hackerone seemingly post-facto, as the article mentions, so Uber could “verify his identity.” But perhaps he was just naive. We don’t know.

I second what others have said. The fact that this is Uber makes me inclined to believe they initiated the offer of $100k.
Ask HN: Is there HN App that will notice me on new reply to my comment?
Literally HN Reader is like todomvc app, there so many HN Reader apps.

But I didn't found any that will take advantage of push notifications to notify me about new replies to my comment. Do you guys know any? Also I would like to know which one are u using and why? Thanks.
Cryptocurrency: Lets hear your honest thoughts
Open discussion on what your thoughts are for the current state and future of bitcoin, and alt coins. There seems to be a polarised view of the cryptocurrency world: complete bulls on the market or absolute critics claiming it's a bubble. It's obviously much more complex than that - I'd love to hear your opinions.
SysAdvent: Fast and dirty RPMs
Always use software RAID. I'd rather loose 30% on efficiency than creating a single point of failure with a random hardware. Software RAID on modern OSes (Linux, FreeBSD, ... ) are pretty darn reliable and fast.
Should first class seating on airplanes be eliminated?

Should seats to sporting events all cost the same?

Should all of us drive the same model car or should all models just be priced the same?

Should steak be priced the same as hamburger?

I observe that economic discussions here on HN are dominated by two interesting perspectives:

(1) We should have a Star Trek like economy: no one wants for anything.

(2) If smart people like us had our hands on the steering wheel we could regulate the economy into good shape—-Friedrich Hayek described this as “The Fatal Conceit” in his book with that title.
That someone wasn't aware, or involved in a process doesn't make their opinion invalid.

I would like to add that clearly, those that was involved in the process have made a less than perfect decision in allowing .dev to be bought by anyone.

It's been in widespread - informal - use for decades, and the decision to allow it to be sold has now directly affected multiple third parties negatively. If one assumes the people involved in the process knowledge in the area of domain names, they knew this but choose to ignore it for no good reason.

TLD's with widespread historical, albeit informal use should absolutely have been reserved.
There are a lot of people who do this type of work for status rather than money. The bug bounty programs are a way for otherwise would-be hackers to gain recognition, and a small chunk of change for stuff they would be doing anyway, which would likely net them less money and more legal trouble.
So if Bitcoin is unusable as currency (i.e. for exchange), what's its use-case then? Hoarding?
That's what clang's static analyzer is for. The analysis is pretty difficult and would slow down compilation unnecessarily.
Agree. It's amazing how such an ugly and inconsistent language can have so many great packages.
You need the .so's on the replica's simply for the database structure, but afaik, it's only the on-disk format that's being synchronized, functions are not executed on the replicas. I'm not even sure this would throw errors if the .so's would be missing - but it will give problems when a replica is promoted to the new master.
Bitcoin Cash
It's more than that even. As a consumer, you should have a right to know when data you entrusted to someone has been compromised. Uber needed to report this even assuming this was a "white hat" hacker.
Google's AlphaZero Beats Stockfish In 100-Game Match
The exchange would require a large amount of various currencies in stock.

With bitcoin in the example I gave earlier, the only currency required by both local exchanges would be Bitcoin, simplifying.
if you run scripts non interactively, you could try commandArgs? That should contain the file path. For Rstudio maybe the rstudioapi package has a function like that...
You can do that with Monzo already
So, if we could set aside our selfishness and try to snap out of the getting-rich craze, and ask "Can we possibly stop this?" it would probably be one of the most impactful ways you could spend a few minutes.

Asking humanity in general to stop wanting more money seems if anything like a waste of time!

Of course you can't stop it. It's an avalanche, a toxic event from outer space, an act of God.

The governments can't even take down The Pirate Bay.

One thing that might help is to accelerate AI so we can leave the financial system behind in favor of total cybernetic luxury communism...
It doesn’t have to replace Docker – just becoming a better container engine as backend for Kubernetes will be very useful.
Jeremy Wagner’s Web Performance in Action
https://www.ftc.gov/news-events/press-releases/2010/06/twitt...
I'm not arguing for "the most rabid anti-tax people" and whatever their position may be. I'm arguing against a specific claim made by CydeWeys - that it's "hypocritical to argue against the downsides of civilization while taking advantages of all of its benefits" - and my analogies are specifically written to fit that claim.

If the claim was that anti-tax people demand both not paying tax and that others do, then I wouldn't have posted. Although I'd say that just selfish, not hypocritical.
That outline reads at some point "page 1 of 18", but it seems too short to have been 18 pages. Is it the complete article?
Many 'family farms' even in the dainty UK are multi-million $ businesses, run by people who know how to shear sheep and bunt hurdles and wurzels. They complain about the effect of market prices, and the worry they create, but they are taking on these risks unhedged (and farmers being unhedged makes me giggle). Similar size businesses would we hedging their FX risk through their local bank with simple FX forwards. Farmers could directly hedge corn prices (commodities futures), and indirectly hedge fertilizer and diesel prices with oil futures. They could virtually remove market risk and concentrate on the risk inherent in the business (weather, disease etc)

I would offer this advice, but they are all so clever you can't tell them anything. They are a very insular bunch in general and their tie to their land is a bit more than the blood sweat and tears mentioned below, its a bit more like being the Lord of their Manor. I agree with the top post, they would happily be less profitable to save tax. It is intriguing (but not surprising to me) that many UK farmers voted to leave the EU, despite it being their main source of unearned income and the main market for their goods, and despite the National Farmers Union coming out in favor of remaining. I have noticed the young generation of farmers be openly aggressive towards foreign people (not that they actually meet any). It is kind of sad, but when they all lose their farms after Brexit they will still blame the French for it.

Disclosure: worked a lot with farmers, and have some in the family
Windows 10 redstone will support PWAs as first class desktop citizens. Even going as far to index them in the Windows store.
Lol, yep. And I'm 99% certain they are created by the review sites themselves. Our business went from having 1-3 negative reviews to literally over a 100 negative reviews(mostly couple sentences long at most) within 2 weeks, and suspiciously we got an email from the site saying "we noticed you have a large number of negative reviews - for just $3000/year you can remove all of them if you like!". We declined to pay, after which the number of negative reviews has doubled but then stayed relatively constant.

This tells me two things:

1) the whole review site business is a huge scam

2) even if we assume some of these reviews are legitimate, they don't mean anything since you can just pay to have them removed
Or a wind turbine.
That is not the use case I had in mind, think of amazon, ebay, etsy for international customers looking for a friction-less exchange.

And bear in mind, my original point is that bitcoin is moving away from the original intent.
This PWA Chrome apps is something I see as ultimate goal for all Electron apps: Have a one point JVM like instance, share resources across all Electron apps. So now many major Chrome Apps go Electron and I have 4-5 big Electron Chrome instances running... what a step backward on my 8GB RAM Mac!

Personal side note: I will miss Postmann Interceptor because I can catch cookies from a web login with the pwa app without any copy&pasting data and continue using our REST api with this cookes. <- not possible with Electron Postman.
Putting aside all the nefarious ways bitcoin can be exchanged, I still see it as a great way to transfer huge sums of money without a typical chain of custody.

For example, suppose you need to transfer $10M from the US to China, you'll need a prominent and trustworthy bank on each side of the transaction that will ensure it gets from point A to B. Transfers of this nature often take several days, and each bank will take a nice cut for that peace of mind.

Bitcoin can potentially allow that same money to be transferred in minutes without huge banks on either side.
Overleaf (www.overleaf.com) | REMOTE | Ops Engineer & Growth Hacker
At overleaf we help academics collaborate more effectively and make LaTeX easier to work with. We recently acquired ShareLaTeX.com and are merging the two platforms into Overleaf v2.
1. Ops Engineer: We want to migrate our infrastructure to Google Cloud/AWS/Docker from our current setup based around Chef-server running on Linode. The technologies we currently use and will still need to support before any migration include Ubuntu, Redis, MongoDB, Haproxy, Nginx, Node.js, Jenkins and Docker. The Ops job will involve responsibilities like:

- Modifying our Node.js services to work with different architectures as they evolve

- Improving auto-scaling for our LaTeX compiling backend

- Management & maintenance of our infrastructure

- Improving our CI and deployment process

- Testing and improving our backup & backup verification process, and emergency procedures

- Keeping our emergency monitoring services tested and up to date

- Improving and automating the Docker build process of our open source and onsite package

- Being on call to deal with out of hours emergencies

Send us an email with a CV and cover letter: jobs@overleaf.com
We know that some sheep-dip chemicals have caused problems, but there's very little evidence that agro-chemicals in general are a causitive problem for mental ill health.

Suicide prevention talks about access to means and methods.

Internationally agro-chemicals are a problem because they're one of the most commonly used methods for death by suicide.

But in the US there's easy access to guns, and so restricting access to agro-chemcials is unlikely to have much effect.
When the I-66 HOV lanes originally opened, there was a problem of some percentage of drivers being willing to risk an $X citation (and the delay while being written up) every few months in exchange for using the road every day.

The solution that VA put in place to combat that is that the HOV violation citation not only has a money cost, but second or subsequent infractions within a five year window result in assessment of points [1] against your drivers license. Only a small number of points [2] is necessary to risk losing your license.

[1] https://law.lis.virginia.gov/vacode/title33.2/chapter5/secti...

[2] https://www.dmv.org/va-virginia/point-system.php
It will certainly be interesting if bitcoin fails because it is less efficient than humans.
These hexagonal pods could solve New York's homeless problem
I see you got downvoted too. So much for facts.
Go to your GP. If you get frequent colds, feel lethargic, or have pretty much any ache or pain which can't be ascribed to a physical damage, they will test you for VitD deficiency. You can also ask to be tested.
Potentially unsafe optimizations, undefined behavior and random crashes that are hard to reproduce are normally nothing one wants to have in production builds.

It's nice that UBSan will detect the problem at runtime, but that requires one to actually use UBSan in development and have all relevant code paths triggered in a UBSan-instrumented build. Which is unrealistic at least when 3rd party code (libraries etc.) comes into play that is not entirely under the application's control.
So I would really favor optimizations that do not make a program less safe, or are only applied when can be proven that they do not cause any harm.
Really? You do? Rather weird for a company by that name.
Will Regulating A.I. Lead to a Brave New World or the End of It?
Socialism, Capitalism Seen in New Light by Younger Americans
Maplesoft Maple 2017.3 Full Crack for Mac Download Free
Playing KTLS in Python
Indeed. And that is likely one of many reasons why bug bounty programs typically forbid downloading any more data than necessary to prove a bug.
Because there are relatively few buyers and sellers in the market and the amounts of transactions are small, so one big mover can shift the price a lot.

According to some blockchain site[0] the average transaction volume for BTC is something like $2.25m USD equivalent

For comparison, on an average day, SPY[1], which is just one security (albeit a popular one) trades something around $17,160m (e.g. $17.16b).

[0] https://blockchain.info/charts/estimated-transaction-volume-...

[1] https://finance.yahoo.com/quote/SPY
its papers
Gujarat Ayurved University Jobs 2017–Recruitment for Junior Research Fellow Post
Gujarat Ayurved University is regulates the education in Ayurveda. Apply for career opportunities at www.ayurveduniversity.edu.in/recruitments.Gujarat Ayurved University, Jamnagar was established on 5th January 1965 by Government of Gujarat. It is considered as 5th Veda and Upaveda of AtharvaVeda.
Yes, but so is a business and it doesn't seem to induce the same type of ownership.
I don't understand, can you give an example?

For most of the classical applications determinants are computationally terrible compared to factorization methods, e.g. for matrix inverse elimination is O(n^3) and Cramer's rule is something like O(n!).
rstudioapi::getActiveDocumentContext()$path

I believe thats is what you are looking for.
if (Math.random() > 0.2) { // rate of false accounts at last review was ~20%
return false;
} else {
return true;
}
Or even just to hand it out as yearly lump sum all citizens: than even the poorest person can afford the tolls, as long as they use the average amount or less of road capacity.

The problem with _not_ charging any money for road capacity is that you are still rationing, but now the price is measured in people's willingness to waste time in traffic. And that time is just that, wasted. The money collected can be re-routed to other purposes.
Andreas Hallberg has a great talk about this[1]: crash early, use explicit types (value objects) and so on.

[1] https://www.youtube.com/watch?v=igFRvriDMqk (GOTO 2015 • Secure Coding Patterns • Andreas Hallberg)
Add in that subsidising commuting by comparison punishes locating closer to your destination.
Review: Comodo Essential Wildcard SSL Certificate
Well yes, there are several workarounds; to the point that there are packages that wrap up all methods and try to decide which one is the correct one in the given invocation. This is the problem with R - there are many things for which you need only a single line to do something very complicated, but there are also many things that are just a tiny bit different from the standard cases, and are absurdly complex. Everything is just slapped together, without thought for the overall picture or overarching design.

Google stack overflow for 'R get current script path' some time, and weep not only at how often this is asked and upvoted (i.e., how many people suffer from this), but also at the suggestions offered - how divergent they are, and how complicated. But this is just one example. R is death by a thousand cuts.
It's kind of interesting that it's only in the Linux world that containers cannot be thought of as isolated or secure. Seeing it from a jails and zones perspective, rather sad, actually :)
It is very easy to fall to low levels of Vitamin D even with supplementation (you need an abnormally high dose at times to get to 'normal'). So, please do check with your doctor. If you do have a deficiency and get supplements, it makes a lot of difference.
Does Windows have anything like this?
The point of the allocator is security, not debugging.

Perhaps it would help even from a security perspective, though. It would make it harder to scan the heap for deallocated memory regions, for what that's worth.
I hesitate to defend Uber, but I think you're mixing the post-hoc reward of $100,000, with the propter hoc expected value of the guy's work.

Such reward schemes are set up as a sort of competition, or bet. You invest time not knowing if you will find anything worthy of a reward. If you expect to have a 10% chance of finding a vulnerability, the reward needs to be 10x the value of the work for it to a worthwhile use of your time.
> and is basically the entire reason for choosing strongly typed language like Java in the first place.

Technical nitpicking: It's best to avoid using the terms "strong" and "weak" when referring to type systems, since they don't have clear, agreed upon definitions.

Some would say that Java is not a strongly typed language since its type system isn't sound.
“could cause N deaths” is very different from “have caused N deaths beyond any reasonable doubt”.
Los Angeles Engagement Rings
Bugs, no. Bad/smelly code: yes, all the time. That's what separates senior from junior devs: over the years you'll learn it'll come back to haunt you eventually, so better to deal with it earlier than later.
>> a market mechanism like every other resource.

Well... the mechanism is prices. A market machaninism, but not really a market in the full sense...

Anyway the result of this mechanism are fairly predictable. Fixed, scarce, resource. Price system. Unequal distribution of wealth/income. Most of the scarce resource will be allocated to the wealthy, who will outbid the rest.

At present, the non market price-like mechanism is generally time, and all people get 24 hrs per day.
Regarding the UNIBUS, this needs a picture of the wire-wrapped backplane of a PDP-8 (especially the denser later versions with the flip-chips.) The front looks neat and tidy, but opening the back is still a part of my nightmares.
Are you trolling?

Radio spectrum auctions are fairly commonplace these days.

Organ markets work reasonably well in Iran, and would be great for the rest of the world as well.

Electrical transmission and generation work really well in a market setting in most places that's been tried. What does Enron have to do with it?
>This life is so much easier, everyday, I'm warm and dry.

This cannot be understated. No matter the weather, waiting for the train or walking to the office will never be bad compared to the past.
> Limit (or drop) meat, fish and eggs

What are you smoking?
DDD and co., part 6: From model to code
What's wrong about using a tax/fee to fund the general expenditures of the collecting authority?

(That's what eg income tax does.)
And, alas, sending back a check to everybody would probably just drive up rents.
The best „normal“ dietary source is Gouda cheese, and almost an order of magnitude better, Natto (though that’s hard on the taste buds).
Yes, and now I want to also make it work when not invoked from RStudio; and for various R version. So now I find myself wrapping all these options into a function, which I have to copy for every 10 line script. So then I make a package for it; or use the functions in someone else's package and add a dependency which I'm not sure will still work a year from now.

Or I could just use a sane language and go home in time for dinner.

(I mean I know about all the solutions and non-solutions; I've looked into this at least a dozen times over the last 5+ years. My point is that this shouldn't have been an issue in the first place.)
Three Ways to Define Your Internet of Things Strategy
> guess I'm at a loss here because I've lived in DC almost 6 years now and it never occurred to me that I-66 was HOV only during certain portions of the day.

Here is a photo of one of the HOV restriction signs:

https://upload.wikimedia.org/wikipedia/commons/thumb/1/17/20...

This sign seems perfectly clear, provided of course one has learned the acronym "HOV".

These signs (and they are large signs, the small no-truck sign in the photo above it itself about 2 feet by 2 feet) exist at every on-ramp for I-66, sometimes more than one of them.
Agree that dollars are not the ideal measure of utility, primarily because of of diminishing marginal returns as you get more wealthy. But they are pretty good for the majority.

Appealing to a right to an egalitarian "family dinner time" is also not terribly convincing. There are plenty of rich people who don't care much about family dinner time. There are plenty of poor who would eagerly spend half their day's wages to make it home on time.

Also, I'm not sure I buy the whole no competition argument regarding highways. The competition are the non-toll highways and driving on streets. There are several free options, and a paid option. The paid option has to compete against the free ones by setting a price that corresponds to the value it provides. If all roads were a toll road, then that would be a monopoly and a broken market, but this one seems okay.
I tried a few years ago and found that it didn't implement much and didn't work correctly. Since then I usually use something like rpy2 to run standard ggplot2 from Python.

Hopefully it has improved.
Yes – HyperV containers (which Kata is actually inspired by) are much more secure than Linux’ namespaces.
I was once told by an IT manager of a supermarket chain, that no db was able to handle the high-volume of transaction they had during the peak hours. It was anecdotal without any hard proof and he did not want to get to the details as it will reveal their inner workings. They have 50 branches with each store having 30 counters.

Any truth to that?
I can't believe you start counting at 0 ;)
Free Computer Science and Technology Books
I'm not sure I get the connection. Also: https://en.m.wikipedia.org/wiki/Depopulation_of_Chagossians_...