skysight-inc/HackerNews huggingface dataset:
A lot of things really don't warrant an actual apology (bumping into someone, forgetting something) - there isn't a lot you could have done to prevent it. Or you are forced to apologized, even though you weren't actually regretful. Or we are forced to apologize for things we aren't actually sorry for: words that were said instead of apologizing for your contribution to the situation that led up to the words or for the situation the words caused.

If polite society doesn't allow folks to express how we actually feel and expects a lot of empty apologies for politeness sake, the genuine apologies are going to be much more rare. It isn't so much a struggle with apologies as a struggle with the expectations of others and the society we live in.

To be fair, this is mostly about American culture as I'm more familiar with it. They don't seem as necessary here in Norway for such little offenses (bumping into someone on the bus is a wordless thing, for example).
> … something that is badly missing currently: a common language that devices can speak.

<hat type=cynical>
Like SNMP, but Invented Here.
</hat>
Very interesting: Uber built a sex-blind system, and behavioural differences between the sexes appear to drive (pun intended) all the pay difference: women choose to work less-profitable routes, work for a shorter time and drive more slowly.
You make it sound easy, but NASA's current heavy lift rocket has spent billions more than SpaceX and the project is still years away from test launch.
The problem is it does not stop someone from building proprietary systems. Do you really think the Apples of the world are going to want to use an open protocol when then use vendor lock in to basically rent seek?
> The person reporting the bug is not a professional bug hunter, he is a user.

I am aware. This is why I said we need to make sure to attempt to inform people on how to handle these responsibly.

> an incognito session wouldn't have had any impact on the situation. It's still the same IP the request comes form. Or a proxy? He's a user, not a security expert.

An incognito session would mean he is not using his previous session to gain access. Authentication is more frequently tied to a session than an IP address - this is why you are still logged into HN if you change from your home network to a public wifi, or turn on a VPN.

> He did report it to Sentinel directly over non-open communication channels: https://www.reddit.com/user/notarealhacker/comments/7vpfdl/i.... This is also clear from the text, I don't know where you got that from.

He previously provided a link to a telegram chat specifically with 'You can verify what I said in the chat here'. He has since edited the post and is now claiming differently.

> He didn't dispute that 21 people were affected. He disputed the number of 2000, because he tried numbers over 6000 - and since the id is apparently just an increment (which in itself is already a problem) the number is likely to be false.

He disputed both.

>From my POV he didn't do anything wrong. He noticed a possible bug, verified it and notified the company.

Your POV is dangerous. I am not saying he needs to be blamed, but this is quite clearly the incorrect way to handle a data breach and we should educate people on how to do it better.

> Quite on the contrary - if he _had_ used a proxy and the authorities would've started an investigation to follow all requests it would've looked a lot worse for him.

Not if he only accessed his own data, which is part of my point. When looking for security holes or verifying they work you should /NEVER EVER/ purposefully access the data of anyone else. In some cases this is unavoidable - bugs can leak random data, you can't always set up a reproduction environment, etc - but in this case it was totally avoidable.

He should not be prosecuted. He should be educated. Everyone else should also be educated. The point isn't to berate him. He should be in contact with the authorities because he now has access to privileged information, and for all parties' good they need to be aware of who has access to that data so they know who they should speak to if it is used maliciously.
Falcon Heavy Center Core failed to relight all three engines, missed drone ship
Why the down votes? If have been dealing with hardware you surely have seen the madness I am talking about.
Hi All!

I'm one of the Software Engineers in Test at [FloQast](https://floqast.com/) and we're hosting a networking event to meet people to potentially join our team. We have several positions open across all departments including business, security, quality, and IT. If you're interested please sign up through the link provided, and if you have any other questions you can send me an email at winston (at) floqast (dot) com.
His story has now changed - prior to the edit, he was directly linking to the telegram history and saying 'You can verify what I said about things here'
Ah, that makes sense - thanks!
The difference between jumping on bridges and SQLi is that at least in these parts of the world I would find it absurd to think that bridge would really fall by jumping on it; on the other hand anyone trying out SQLi knows that it can actually succeed, even with a quite high chance.

Also we have building codes etc that regulate construction work, which gives me such confidence on bridges etc, but there is not equivalent for computers. Maybe there should be (that is another discussion) but that does not affect people doing things today.

Furthermore, even in case of criminal negligence (/lack of due diligence or something along those lines) two wrongs do not make a right; abusing such negligence can still be illegal too.
FPGAs are definitely not a dead end. By virtue of being reconfigurable, they will never be obsolete as long as ASICs are a thing. Now, some whole new technology will come along eventually, supplanting present day ASICs and FPGAs... but until then...

Program as a term means something different with chip design than it does with software. An analogy is that to program an FPGA is to paint a canvas. The source code in chip design is instructions for how the canvas should be painted.

Another analogy would be to program an FPGA is to cook a meal. The source code is the recipe for the meal. But one doesn't run a recipe on a meal.

These analogies break down because a painting and a meal is passive... it doesn't do anything by itself, or react to the outside world.

So another analogy would be building a car. Here "programming" and "building" are the analogous terms. The instructions for the assembly line to construct the car is the source code. Once built, the car responds to stimulus (steering wheel, pedals) and does stuff. Same with the FPGA. It has inputs, it responds and does stuff. If you painted a picture of a CPU in your FPGA, it could run software.

There is tremendous overlap in designing for an FPGA and an ASIC. Most ASICs start life as an FPGA simply to prototype an idea.

The difference between an ASIC and an FPGA, at a high level from a design perspective, is the difference between writing with a pen vs a pencil. Learning to write is equally applicable.

It's probably not helpful to think about right now, but an FPGA is actually an ASIC.
I always wondered about that too- I recently came across a discussion somewhere that the password limit should be the max allowed for the POST to that website. Or maybe a bit less, to help prevent DOS attacks.

I always thought the password should be hashed client-side. Supposedly that has some problems and it would still need to be hashed server-side as well.

So I have a proposal: client-side, hash the password. Can use any hash, although hash selection does limit the password security to its output. That hash is the new password sent over the wires to the server, that does proper password handling, but it is guaranteed a password of (say for SHA-256) 256 bits; if it receives a password that doesn't look like SHA-256 output it can automatically throw it out without even checking.

The client can then store the hash-input in his password manager, and it can be literally anything that can be thrown at the SHA hash. Is this feasible?
Strictly speaking, every time you watch something you're witnessing history.
> Another way is to make the apology conditional, which is really a form of polite demand (ie, demanding the conditional aspect of the apology with the threat of doing whatever the apology was for). This is subtle and can be quite manipulative. People sometimes recognise there is a problem but can't quite identify it.

I’m having trouble grokking this: do you have an example?
There is a pretty big difference between the level of speech recognition that is offered by these smart devices, and what was being done 10-20 years ago. We're talking 80% accuracy (missing every fifth word), to now 95% accuracy (the entire sentence will likely be perfect).

I have worked with several speech recognition softwares, and the ones which can run on a low-powered device in real-time today are not the ones reaching 95% accuracy.
Lifestraw is a decent emergency filter to have around. You can also use a SteriPen UV light - which is great. It's light, fast and you can use it on the go. Scoop up a full Nalgene bottle of untreated water, then treat with SteriPen. Used both many times camping and on long portages with great success.
Isn't the key part of Sci-fi that it contains a society that has in some way advanced beyond our own? Saying it's not sci-fi because the fictional advance is set in our past (but at a development technologically beyond our own) seems quite a strange distinction.
yeah, you tell yourself that. it’s totally fair to be woke about shitty bigotry because being a constant pain in the ass for no reason will definitely “fix” anything at all ever
> a terrible page for attracting new developers

This is a better way of identifying my frustration: open source projects don't just need good docs, they need to attract and inspire... especially visual frameworks like a GUI.
It seems like you're going out of your way to avoid describing the value these products provided. Especially in your characterization of Google.

Pinterest provides entertainment, product discovery, and community.

Snapchat enabled a new type of communication by removing self consciousness.

Airbnb provides quality lodging at low prices.

Facebook provided authenticity, exclusivity, and increased information density through timeline.

Google provided far better search results.
Don't just tell them you did, but actually create two accounts and only access your own data. Don't try to access others' data. When changing IDs try to stick to ones you know you own on other accounts. If you're lazily trying the ID "1" and it works, or for example you find a /list endpoint which outputs everyone's data, then stop there and report immediately before doing any further testing.

Financial companies are unlikely to be receptive to unsolicited penetration testing and more likely to come down hard because of a need to demonstrate compliance, the same goes for any healthcare related sites. There's a reason you rarely see them popping up on lists of bug bounty programmes.
There was an odd hole where machine lifetimes got really short. They didn't used to be. An Apple //c (manufactured 1984) with an ImageWriter printer and a second floppy drive was happily in use for school papers, spreadsheets, correspondence, basic accounting, casual games and kids learning to program through about 1996. And it was passed on to another family after that, where it was used for another 3 years or so. Mainly as a Number Munchers/Carmen Sandiego/Oregon Trail/ChopLifter/Moon Patrol machine, I think. And while I'll grant that was a longer-than-average useful life for the time, we weren't the only ones I knew to keep an 80s machine with a 70s core in service well into the 90s.

Then somewhere around when people started to expect Windows on a computer the lifespans got quite a bit shorter, and that seemed to stick into the late 00s. And it's swung back the other direction now... my late 2011 MacBook Pro is good with current Mac OS or current Windows 10 installations, and is only being retired because its soldered-on discrete GPU has started to flake in a way that makes it unusable. (And a replacement motherboard would be stupid expensive.)
Yeah I'm not really getting the reason for caring whether it is likely to get sick from unfiltered water or not. Why not just always filter? (Assuming cost is low)
Lol. *.35W I missed the decimal point.
I hope it's not close to our generational moonshot. We've had quite a few impressive launchers in the past - not commercial, of course, but also built without current level of accumulated experience - so to consider FH their modern version would be to accept lowering the standards.

Nevertheless :) FH first launch is an impressive feat.
If you are storing the property of others behind your door and you fail to properly secure the door you bear responsibility for that negligence aside and apart from the guilt of the thief.
There's a balance. Sometimes I enjoy watching someone nerding out about a subject. Charisma means they'll sometimes start banter with the co-host rather than continue with things interesting to them. Or they'll try to "make" things entertaining and exciting.

I guess it depends if you're looking more for entertainment or information.
Same here.

Might I suggest pairing it with Pink Floyd's _Echoes_[0]?

- 0 - https://open.spotify.com/album/468ZwCchVtzEbt9BHmXopb
This message is a pretty good summary of why the shared library issue is important to the BSDs and might make one pause about using Pale Moon. https://lists.freebsd.org/pipermail/freebsd-ports/2018-Febru...
That's so important. Tooling can make or break a platform for me. I've tried Haskell like 5 times and just never felt motivated enough to make it past the various little issues that kept popping up.

So far OCaml seems like a bit of a smoother experience.
This seems like a strawman. No one is arguing that the 20th iteration of a major auto model is providing a new way of doing things.
I don't think I understand, you can throw from a destructor. However, in C++11 it gets tricky because destructors are implicitly declared noexcept, so if you want to do so you need to mark them noexcept(false). As for implementing scope(exit) yeah, apparently this isn't possible.
The same would have been true if your first phones were Android and your most recent ones were iPhone.

In other words, your experience has nothing to do with Android vs iPhone, rather that earlier devices simply didn't have the same amount of resource headroom as more recent ones.

Ever since the iPhone 4S, they've been usable for at least 3 years before expectations catch up to them. And now I think since the 6S and SE—which have the same hardware generation—iPhones can claim to have 4+ year lifetimes.

(At 3.5 years old, the iPhone 6 is still a great device today, particularly with a cheap battery replacement.)
The number of people with the experience, knowledge, cash, and who are not bound by NDA is very small.
> To be pedantic, the poster did say "looks like"

The phrase "looks like" is commonly used as short hand for "seems like", "feels like", "gives the impression of", etc. It would be the same as if someone said they "appeared to be" professional actors, that doesn't necessarily indicate that it's based on visual cues.

Seems like bad form to assign malice to someone based on a likely misinterpretation of their comments, then accuse them of racism and sexism.
I remember using it in my layout class in 2004 or so. I didn't realize it was open source, I'm sort of tempted to find it and give it a spin.
To be fair, he might have been actually sorry, but not actually able to get over his addiction to alcohol enough to break the cycle. I'd say it wasn't an excuse if medical & science based treatment was available within the addicted's price range, along with social help for both the addict and their family as needed.

It does qualify as abusive to a point, but it really depends on the person and how they react to the addiction.

Abusive spouses do have similar behavior, and some addicts are also abusive. These folks should be prosecuted, and given help while in jail so they aren't as likely to commit the same crimes (psychological help for anger management, halfway houses to adjust, medical/science based addiction services that continue after release).
Sure drinking it out of desperation is a tale. A shit ton of us grew up drinking water on the philosophy "clear+fast=safe" it's just that "I was a kid and half a mile from my house and thirsty" isn't much of a story to tell. Not that I under the impression that it's inherently safe just that none of the umpteen millions of us who surive and don't think it's a story.
Many ranchers have (scandalously low-priced, but that is another story) leases to run their cattle on specific federal lands. Cattle drop poop pretty much everywhere they go. (Weirdly, donkeys apparently collect theirs into big piles. Oddest thing I've ever seen.) If cow manure is unsettling, you may want to be careful what parts of the outdoors you visit.
Show HN: Simple React State Management with ES6 Proxies
They could've launched a wheel of cheese.
And fundamentally he did the most important thing: told them about it. They seem to have got the message that they needed to shut this thing down ASAP. It seems highly unlikely from the nature of the alleged negligence that they found this unauthorized access for themselves in the way they give the impression of.

The reddit post has been edited recently and takes away most of the content, but from the emails it definitely looks as if their "compliance team" is trying to scare.

My own personal experience having received many very scary letters is that it tends to be the ones that look the most terrifying that turn out to be the least to be feared, but there are definitely exceptions to this.

In any case, their message to the victims of their alleged negligence states that there was no malicious intent and should make any civil consequences rather difficult.
Or, in many areas, downstream of a paper mill.
I visualise $1b as about the cost of building a shiny new casino in Vegas, or a large cruise ship.

I like these comparisons because I can see them, and marvel at the sheer bigness of them.
Always boil the water.

Source: Binge watching 7 seasons of Naked and Afraid.
Sure, but if you don't have events of your own to process, either you're constantly calling processEvents() and spinning the CPU, or you're in a loop that does so every second, which is both high-latency and inefficient (and bad for battery life). You generally want to process an event when it suits the event, not when it suits you :-)

It looks like this is done by subclassing QAbstractEventDispatcher and filling out virtual functions registerSocketNotifier(), registerTimer(), etc. I suppose you could do this for asyncio/Twisted, but I'd prefer to import something where someone has done this for me and is accepting bug reports from the community, because this is the sort of thing that's made of edge cases that are hard to notice in testing.
There's a reason that "You have died of dysentery" is a thing.
How does it taste?
> Saying it's not sci-fi because the fictional advance is set in our past (but at a development technologically beyond our own) seems quite a strange distinction.

I didn't say that at all. It is in the past, and also, it is not science fiction. Star Wars is quite fantasy, offering no explanation in science for the force, hyperspace, lightsabers, etc.

I love Star Wars with all my heart. But it is not about the future and it is not science fiction. It takes place "a long time ago" and it centers around magical, unexplained powers.

Edit:

And,

> Isn't the key part of Sci-fi that it contains a society that has in some way advanced beyond our own?

No, I don't agree with this at all. I would even say that in nearly all science fiction published, the societies have not advanced beyond our own that much - or if they have, they are also demonstrated to be far behind us in other ways. Science fiction is a lot of things, but certainly there is no requirement for it to show a more advanced society than ours.
If it's that far downstream, it's probably not much of a wilderness.
Did she like it?
The Ancient Greeks filtered their water and sought out purer water sources.

I didn’t claim that people died in their 30s or that waterborne pathogens were a major cause of shortened life. The latter certainly seems plausible though. My point there was only that basing your water sanitation on the habits of primitive people is obviously misguided.
> What makes you think you won't get a doorlock that gets stuck in an open/close loop and just oscillates, allowing a burglar to just stick their shoulder against the door and wait for the bolt to retract?

Door locks are security theater anyways. If someone really wants to rob you, it's not difficult to get into a house.

> Are you going to remember to check after every firmware update? Are you even going to know if a firmware update is issued?

No, for the same reason I don't check if my computer requires my specific password every time I log in. I'm not that paranoid.'

> Will it still be magical if you get declared a legacy customer and your door is programmed to unlock and stay unlocked?

That has never happened. Even in the example you cite, they caved and offered users a full refund.

> Myself, I'd prefer a door lock that locks only when locked, and unlocks only when the correct key is inserted into it. I've /certainly/ seen one too many crazy software errors to believe in a stove that has the ability to turn itself on and off.

Go for it. While you're at it, make sure you don't get a car that has a remote start or an unlocking keyfob, or a safe that unlocks with a code. Wouldn't want that scary technology near your locks.
it's unfortunately not the top response to jeremy but apparently no they don't have 177 million in the bank.
Thanks for the question. The entire comment is kind of defensive and impolite, but I'll focus on what you asked. In my opinion, approaching it like the parent did as an individual making a statement that can be disagreeing is polite to me. However, your question is asking me to define a polite way to introduce and acknowledge implicit bias into a conversation that is meant to be used in the same way as above, and I can't. Using the idea of implicit bias as a means for an accusation of prejudice and 'outdated' opinions by appealing to various forms of groups that the parent could OR could not be identifying with as 'your' own opinion as an 'individual' is a hammer. Its powerful and sometimes is needed, but again its not a screwdriver :)

I interpreted the parents comment as a joke more about the engineer not looking like a TV star than the others not looking like an engineer by the way...

So to close this comment, CANT ENGINEERS LOOK LIKE TV STARS TOO?? to which I will respond and say 'not always'.
Maybe that's a way to respond politely to implicit bias...
My experience has been different, I found dragon back in the day to be about 90-95% accurate, but today I find google to be about 50% accurate. An that's 50% accurate for some limited voice commands, which is a much lower standard than full voice dictation that dragon offered.

Dragon was trained for me, google is trained for some mythical "everyone".
Between the effectiveness of chlorine and the simplicity of a pump, there's just no way I'm going to save ~8oz for the risk of explosive diarrhea. Having both diarrhea and having to walk back t the trail head to get help would be an awful combination.
> I don't think I understand, you can throw from a destructor

Read what I wrote carefully:

>> destructors invoked via exceptions can't throw their own exceptions

i.e. if you are in a block where an exception is thrown, and a destructor is called during the exception's propagation, then that destructor cannot throw its own exception, as it will terminate the program. (This is unrelated to noexcept.) See here for more info: https://stackoverflow.com/a/130123