skysight-inc/HackerNews huggingface dataset:
> could impose a security risk

How?

Installing a Mac OS update could be considered a security risk? That makes little sense since the security risks you're alluding to were solved by updates. 10.13.2 partially fixed the Intel problem in December and 10.13.3 will have more fixes. If you were still running 10.13.1, you'd have both the root login bug and the Intel security issues.

If you were still running Sierra, keeping Sierra updated results in solving the following security issues: https://support.apple.com/en-us/HT207483

The Mac OS version out right now is more secure than the previous minor or major version. There really isn't any credible evidence to the contrary.

It's irresponsible to not update your system. I understand not moving up to a new version of an OS because of compatibility issues (i.e. audio interfaces often are sluggish to update, libraries you need might not work, etc.,) but not updating because of security fears -- that's just ridiculous. 10.13.3 is more secure than 10.12.2.

Also, in order to "exploit" the reported bug, you would have to already be signed into the computer AS AN ADMIN. Which means that you could already change the updating behavior. So unless you are sharing your admin login/account with non admin users, the risk you cite is pretty trivial.

If you are in a higher risk computing environment, it would be logical that you would sign out of your account after you've finished using the system -- you would essentially have to provide an unauthorized person access to your Mac while you were signed in before this would be an actual threat. That doesn't make the bug less "real," but it does make the real-world security ramifications much less dire than being implied.
McGuire Computer Graphics Archive
That music is probably more for the employees nowadays.
You are using vi? And complaining? And you are using more?

Be a proper lad/lass, and use ed!
I see no reason why one could not develop a DAG based crypto-currency that is Turing complete to compete with Ethereum.
I think future versions of the robot should have self-defense measures appropriate for the United States.
Zoning laws are mostly to blame for lack of affordable housing. That, and the usage of houses as an investment.

When you spruce up a house, that attracts different renters. The other renters will take up housing otherwise they wouldn't have bothered with, and it goes on down the ladder.

The argument that market rate housing causes lack of affordable housing is just not true. Look at San Francisco. They have strict zoning laws, laws against construction of market rate housing, and rent control laws. Is it a paradise for low-income renters?
They could likely sign up an account with the Living Computer Museum in Seattle, and possibly find an appropriate machine running actual Unix V7.

Aside, the Living Computer Museum is amazing, and well worth a trip for anyone. Most of the computers are set up with the expectation that you can play with them.
No, just Philadelphia.
Maybe the US version should have one seat :)
Drunken Droning Criminalised
Good point. Clearly with sudo, aside from it following the UNIX convention for sudo, it is just a consciously made tradeoff between security and ease of use. Whereas with the security pane, the lack of checking of the password that is entered is most likely a bug.

Maybe you already saw this but I see they also made the same security/ease of use tradeoff for the (non-buggy) locks in the other preference panes. After unlocking, it stays unlocked for a period of time while you are in preferences, even if you visit different areas within preferences and come back.
Hell, I was one of those people before I needed to get a passport (I guess I had it when I got my first DL, but it must have been with my dad or something). Thank god Oregon will mail one to you easily, if I was Californian the process would have been in for much more hurt (as I found out with my son!).
Over the next 48 hours we will be building a list of vulnerable providers and their associated IP addresses. Our tentative plan, once the list is completed, is to re-enable the TLS-SNI-01 challenge type with vulnerable providers blocked from using it.

This is a terrible solution.

You're assuming you can scour the internet and find every shared hosting provider affected, and add them to a list. And then you're also going to keep that list updated. That's crazy.. an impossible task.

So after this is done, Let's Encrypt will continue issuing certificates improperly on any shared hosting providers that didn't get added to this list. Attackers just need to find a provider and check a list now.

I'm actually kind of appalled that this is what you've come up with.
Probably some convergence between the two. You're probably used to changing some syntax around to get Siri/Alexa/* to understand you. That puts some mental tax on you, but you get used to it. Devices will seek to lower that mental tax, but ultimately you'll probably get used to it enough that the tax will feel free and devices won't need to evolve the syntax much past a certain point.

What seems missing in a lot of these threads is the idea of "context", and I think that's where there's lots of room for innovation. Current voice-assistants work "okay" for single-sentence queries, but if the device doesn't understand (or if I fail to phrase things in a way that it's expecting), it doesn't ask clarifying questions, and it doesn't use past exchanges to inform future ones (beyond perhaps some voice training data). It also limits the kinds of things it can do by requiring that all of the necessary information be presented in one utterance. It also raises the "mental tax" on doing "real things" because I know I have to say a long phrase just right or start over, and that's sure to raise anyone's anxiety-levels...
My brain turned Mauritania into Marijuana.
Reminds me of Aaron Swartz's I Hate The News:

http://www.aaronsw.com/weblog/hatethenews

Honestly, most of the time I tend to agree and can't fathom what reading the news does for me. Small outlets like HN sometimes contain things that affect me directly and I can do something about, but general politics is completely out of my reach, especially politics about a country I'm not a member of.
Apps like Threema manage groups entirely on the client. Group messages are sent to every member separately. The server doesn't know what groups you have created, or who's in them.

This comes with some usability tradeoffs of course. But it's possible.
Why do you need a block chain for this? The functionality can also be created without this.
> I think there's likely to end up being a third option: Public transport with self-driving cars for last mile at each end.

And maybe a fourth one: self-driving road based mass-transit (autonomous buses basically).
Yeah, overall, that plan was terrible, but the point stands that the US spends billions for the deduction and most of it goes to people who are already pretty well off.

https://www.theatlantic.com/business/archive/2017/05/shame-m...
This is really great.

Many years ago, I was neck deep in frontend coding. I got so good that when given a mockup, I could code the skeleton of the page "blind" without viewing it in the browser. I would load the page at the end and grade myself on how accurate I was. I've always wanted to do a contest with other frontend coders to see who could get closest to a complex layout—like the NYTimes—in one go.

One day, this type of skill will become a curiosity—a relic of the past similar to horseback riding. I would be happy to see the automation of pure translation of boxes into code.
I still feel that way about cars. Those horse riders were right.
It's about power, control, fear, and envy. I doubt bullying is totally a gender specific thing in the workplace.

My worst ever bullying experience was from a tech illiterate woman CTO. She treated most of the tech team like utter crap. I think because I was a woman she saw me as an intruder on her turf, and got it worse than the others.

I quit as fast and soon,as I had another job lined up.
In the landlord business properties are given a letter grade based on rent potential, neighborhood, area schools, etc. These are likely C and D properties and in the due diligence phrase the current rents will be revealed. Improvements to a property in a low income/low rent area destroys cash flow since the ceiling on rents is only so much given the area. A "good landlord" probably isn't going to touch these with a 10 foot pole.
Why wouldn't you be able to train it to recognize expected behavior from a mockup? You could easily create a nomenclature of symbols to define standard behavior (⇑ could mean draggable upload for example). Even if you can get it to take you 80%, that would be huge.
I don’t think any DAGs are running in the real world without a central conductor for security. Which is a huge attack vector and downside
Depending on what you're doing, you could try npx: https://medium.com/@maybekatz/introducing-npx-an-npm-package...
It varies a bit between sitting and standing, but about 100 cm to the closest point. To the furthest corner it's another 20 cm.
"In the shorter term, the technology would enable scenarios like someone asking the TV what is in the refrigerator, then having it display a recipe then send that recipe to the stove."

From now on, I will interpret this being the first idea floated as the use for some IoT tech as "we have no f'ing clue what we're going to use this for".

Thirty years ago, this problem was perhaps unsolved. Now it's solved in at least two ways, with tablets and voice interactions, and those are better.

Sorry, Sony, Samsung, etc, there is no way my TV, which is in the ENTIRELY WRONG ROOM, is going to wedge its way into my recipe workflow, and if that is the best idea you have, as evidenced by it being the first idea mentioned in this article... you have no ideas. Note how even in the example I quote above, WTF is the TV doing in that interaction flow in the first place? What I should be "asking" what is in the fridge is my cell phone, and by extension since they share OSes, optionally a tablet.

(The core problem here is that Smart TVs are now mature. Ignoring surveillance and privacy issues, what we need are just more responsive UIs, and preferably, some sort of plan for how we're going to maintain these TVs in the future because especially at the high end these things are too expensive to be treated like cell phones that don't get updates after a year and a half. But that sure doesn't win any CES awards.)
Let me help: PABT == Port Authority Bus Terminal
Even 4'33" of silence might!
Laws with criminal penalties.
Why is home ownership a net good? A home is not an appreciating investment - it's an expensive asset that requires regular upkeep, maintenance, and property taxes. Using that as your main store of value seems imprudent.
> Please state the fact: programmers are not trained, nor have the time to go far enough asking the questions.

Why be so hostile towards Romero's comment, which seemed to be made in a light-hearted context? He's describing the situation as he has seen it; perhaps he is mistakenly inclined to put the onus on programmers rather than cultural and historical factors because of how programmer culture is so steeped in self-driven destiny-controlling meritocracy. I agree that culture (which includes training) is a factor -- OTOH, that doesn't mean Romero's quip isn't useful to programmers who can use it to better themselves.
Also the site is effectively broken on iPad, in both landscape and portrait. Something funky with your layout makes most of the objects appear half offscreen to the sides.
Unlike the US, who would never think of applying US law outside of the US to e.g. get emails off a server located in another country or trying to extradite somebody who has never set foot in the US? Right...

Besides, this situation only came about because companies did nothing, especially US companies w.r.t. EU data protection laws. It's a bit like the loot box thing, they thought they could get away with it, pushed it too far, and now they're dealing with the backlash of being huge, amoral scumbags.
I have a Microsoft Office 365 subscription, which comes with a free (well, no additional cost) 1TB of OneDrive storage. I plan to use something like duplicity to encrypt and backup my files on that.

I don't expect this to be widely used option by other commenters here :-)

Edit: another way to look at it is that the subscription price (£80 per year in the UK) is fairly reasonable fot 1TB of cloud storage but you also get MS Office for free. Again, this won't be very convincing to most on HN, but to me it's an unbeatable deal.
It seems obvious that a well taken care of home costs more ('less affordable') than a poorly taken care of home?

So your solution is keep the place a dump to keep housing costs low?
My gym, the Sports Centre of Montréal's Olympic Stadium, very much has no music and has signs saying that if you want music, bring your own device. Most of the cardio machines also have access to various forms of entertainment, including YouTube and local TV stations, so you can just hook up your earbuds to them.

I really love that gym.
Interestingly, they actually have a chatbot interface: All Erin Griffith has to do is say, "Update Virtual Assistant article for Bixby," and an AI will substitute in references to Samsung and Bixby and immediately publish.
Please find in this Deadspin artical a rebuttal to the "tragedy" of Hitchbot:

https://theconcourse.deadspin.com/hitchbot-was-a-literal-pil...

While I don't agree with all of the points made here, I do agree with some of them very strongly.
Ultimately, if you're attempting to prove hostname control, it would seem fundamentally incorrect to make a request with a Host header or SNI hostname set to anything other than the hostname requested for issuance.

I don't really understand why this didn't come up while considering the protocol initially.

Why aren't we using ALPN for this?

(ALPN is used to negotiate HTTP/2 without prior knowledge of the server's capability - https://en.wikipedia.org/wiki/Application-Layer_Protocol_Neg...)
Wait, are you claiming you grew up in poverty and still got an ID before you struck out on your own (I was young, worked for minimum wage, got around by bus, but I was far from poor considering my family background)? Did you grow up in a trailer in the middle of the boonies way off some highway somewhere? Did you burn your trash in your backyard in a barrel?

I mean, there is, I was young, living on my own, getting around by bus poor, and then there is poor poor.
Well the raw data says that it wasn’t so peachy under Obama - home ownership fell significantly every year he was in office.

I’m not a member of either party.

https://en.wikipedia.org/wiki/Home-ownership_in_the_United_S...
GPL as the Best Licence – Governance and Philosophy
400 lbs capacity for passengers / cargo is in line with an R22, a common 2 seater helicopter (389 lbs for Pilot, Passenger and Baggage). However the SureFly situation is likely worse than that. Typically the empty weight does not include fuel weight, which might be another 100 lbs.

It seems that SureFly has designed an aircraft with less than half the range of an R22, that can't autorotate, and costs roughly the same. The SureFly might be easier to fly though.

https://robinsonheli.com/r22-series/
I think everyone must have felt this way about automobiles. And by and large, it's worked out just as horribly as they imagined: our communities are divided by dangerous moats we call "roads" -- death traps which we must painstakingly teach our children to avoid, if we dare let our children wander outside on their own anywhere near them in the first place.
Can you open companies/bank accounts remotely in SG or HK?
Is Ethereum Gearing Up for a Flippening 2.0?
I'd love to know the story about how # ended up being DEL and DEL ended up being SIGINT. There must be some funky terminal hardware explanation.

My very first Unix experience was bash on a VAX 11/785. Which was great until the time I sat at the teletype console for that VAX and typed Ctrl-P to bring up the previous command line I'd typed. On that console, Ctrl-P is "halt immediately".
In case you missed it yesterday, the the second article is an interview with Tim Sweeney.

Article here: https://www.gamasutra.com/blogs/DavidLightbown/20180109/3094...

And relevant HN discussion: https://news.ycombinator.com/item?id=16110133
From reading the comments, it looks like a lot of people are bored of mundane web design. I'm right there with you. Give me something interesting to do!
For example a car body repair guy will weld and sand the tin and will have something tangible and beautiful to show for it at the end of the day; I’ll work on a piece of code and even if my program is 100% correct and works great... it’s all electrons on pieces of rust at the end of the day transforming one non-existant thing into another non-existant thing. Anybody hiring for race car drivers?

And the only recall on my car is the isolator on the supercharger. Even that’s a maybe.
Are paywalls ok?

It's ok to post stories from sites with paywalls that have workarounds.

In comments, it's ok to ask how to read an article and to help other users do so. But please don't post complaints about paywalls. Those are off topic.

https://news.ycombinator.com/newsfaq.html
I'm not sure Apple had any choice here. They can still be good for privacy in your country but they still have to play by the rules of the country they are operating in.
have substantially more gerrymanders in their favour than against

I could be wrong, but this seems to be because Republicans control more states than Democrats do.
Well, they used not to notice it as they were writing off the local taxes against fed taxes. I cannot wait until 2018 tax bills hit home. They should be eye opening to Manhattan/Williamsburg/Park Slope set
I think you missed the point. The point isn't chat == text-only, it's that chat == natural-language-style UX. This could well be augmented with images (like is with Siri). Basically "is there a button to do what I want" versus "do I indicate what I want in a human-ish way" - imho that's the defining feature of a "chatbot", not that it's text-driven per se.
Maybe we’re all just characters in a movie the Galactic Empire is producing?
Interesting post. How many times have packages arrived damaged in a way that it may be entirely possible someone checked its contents first to see if it was stealing before delivering.
I don’t think an AI assistant and visual feedback like google search are mutually exclusive at all.

Imagine a fashion designer having a chat with a human assistant. The designer might tell them a kind of shirt they want to use for a shoot, and if it’s not obvious what to buy the assistant will come back to them with a list of options (pictures of each on a piece of paper, for ex). The designer can ask questions about each one, ask for different shirts, and simply speak when they decide: points “this one”.

This all seems very doable with current AI assistants. Google for ex already has results from recent voice searches waiting for you on your phone.
What about home-brewn? Buy a 8TB hard disk for ~200EUR (source: https://geizhals.eu/?cat=hde7s), a cheap computer like an Intel NUC, Raspberry PI or Mini-ITX based one (another 200EUR) and you have a reasonable online system which you can run at home. Then you can still order a long-term backup service (such as Amazon glacier -- or just encode your data as photos and store them for free at Google photos) with the big advantage that you can encrypt your data before uploading them there.
Robot aside, is this endemic of the feelings held outside the San Francisco towards robots, technology, and the rich? The robot didn't really have much to it except it wanted to go to San Francisco.

The disconnection of pollsters with the reality of the world later showed up in the american elections a few years later.

Part of me thinks that this journey might have at least been a bit longer if it had started on the west coast and moved east.

I'll go google the follow-up to this version of the robot...
And how could Apple accomplish that?
Matthew Desmond’s Evicted is quite good on this topic. It points out that slumlords can get around any tenant protection by being lenient to poor tenants who inevitably get behind on the rent. When they invoke tenant protections, evict for non-payment.
Dropbox fares quite well in terms of reliability, data safety and security. In general I'd say they're trustworthy.

There's one trust issue I have with Dropbox though, which goes by the name of Condoleezza Rice. Since 2014 she's been serving on the Dropbox board of directors.

While Dropbox probably approached her because she undoubtedly is a very talented woman and not because of her political background the agenda implemented by the administration she was part of, particular the surveillance measure, leaves a sour aftertaste.

As a company for which protection of user privacy rights should have paramount importance how do you justify hiring someone who obviously couldn't care less about these rights?
"One of Bitcoin’s biggest advantages over other payment networks like Visa (V) and MasterCard (MA) is minimal transactions fees. While other payments networks typically charge the greater of ~3% and $0.15, Bitcoin’s transaction fee tends to be a negligible fraction of the transaction, if any at all."
I'm an avid gym-goer and I like the music on in the background. I don't wear earbuds because I value "awareness". I like being able to hear other happenings around me without them being blocked out. Same idea for public transportation. Anyways, the employees at my gym just play Spotify Premium and are friendly enough to take requests. Maybe you can ask your gym to play some music you like?
China Quietly Orders Closing of Bitcoin Mining Operations
The CSS Grid Explained in 7 Minutes (with diagrams and code)
Release Notes for Safari Technology Preview 47
Adding a photo of the actual aircraft would also be nice. From the website it's hard to tell whether this is a real business that's currently in operation, or just a site mock-up. Have you actually started flying yet? I can't tell.
This looks pretty cool. If I was foolish enough to live in the Bay area and had reason to visit family in the LA area I might sign up for this. If you have more than two weeks notice you can do better with Southwest though. They've got OAK-to-BUR (and vice versa) at $55-$67 depending on the day of the week.

That said, why LAX and SFO? Why not pick cheaper airports like OAK and BUR? I'd imagine the runway fees would be less too. Plus just driving out of LAX at a reasonable time of day adds an hour to any itinerary.

EDIT: After reading other comments and skimming through the FAQ I think this website needs to be re-done. The landing page should say in bold letters "Last minute. Private terminal. Zero lines!". Other airlines might match you on price if booked in advance but they can't win on intangibles like skipping the sardine line and government mandated TSA massage.
The title is intentionally misleading.

Alfred Anaya was a willingly complicit part of a drug trafficking operation in return for large financial gain, so he was put in prison.

This is also from 2013.
Another fascinating short question answered by Tim Sweeney about a neat hack / feature of the excellent Unreal 1 software rasterizer:

http://www.flipcode.com/archives/Texturing_As_In_Unreal.shtm...
The overwhelming majority of Americans do not have $2k lying around for a risky investment, nor do they understand the risks associated with crypto (especially the speculative coins).

In order for someone to invest in crypto as diversification, on the order of 5-10%, they'd need to have $20-40k lying around.

Needless to say, outside of the tech bubble that situation is quite rare.
They aren't the first. Microsoft/Skype had to outsource PRC Skype account's to TomTom, Azure has to outsource its PRC cloud operation to a Shanghai utility company, and so on.