skysight-inc/HackerNews huggingface dataset:
But a self employed painter is self employed - whereas the legal Q is are these "gig" economy really self employed.

The self employed painter could send some one else to do the work for example - I know employment law is a trickily area for civilians (ie non hr specialist and lawyers) to get there head around
> Middlebox vendors brought this upon themselves.

Not really, I'm sure they don't care much, most of internet users will blame their browsers instead.
Twitter turns profit for the first time in 12 years
The quote is:

“Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety”

And it was about taxes.
I'd have a look at https://neocities.org/ if what you actually need is a static page.
It’s really an issue, and why am I setting up another server app to fix something that should be a switch for the administrator in software that worked before?
Yep. This is about Google maintaining their monopoly on your data and nothing else.
Need to be careful with AI.. Its high time we focus on what kind of intelligence we are developing
I made an IFTTT recipe that would email me the links to the HN story based on specific keywords in its title like "learn", "how to", "books" etc. And I check my emails mostly once a day, so by the time I click the link in the email, most of the time, I would find a good number of quality comments to read and enjoy.
This sounds a little extreme at first, but I actually totally agree. It's in murky waters when it comes to GDPR, for starters.

Where do they draw the line? Why not run a keylogger through embedded like buttons and widgets? That sounds worse, but isn't all that much worse.
Free Easy Digital Download Themes
Precedent is a terribly principle to apply to science. In fact it must be the worst possible way of approaching science. Science almost by definition is about challenging and upending established conventions and "truths".

Imagine if we were to continue to treat desease spreading as a product of bad smell and insist on doing it rather than focus on hygiene because there is PRECEDENCE for doing so.

head shaking
Every hotel room in which I've stayed has a placard on the table with the BSSID name, userID and password for the portal login.

It would be identical with 802.1X. The only difference in the UI flow is that the authentication prompt is generated by the OS, not on some HTTP page that I only remember about when I wonder why my VPN isn't coming-up.
Talk about moving parts; mongo, memcached and redis. 3 different "competing" datastores.

I can understand maybe nginx has better memcached integration, redis cluster better, and mongo... well it is js so any dev can use it.

Would be interesting to know how much it cost to get the experts on site. Sad to see that the design it fast; let it break; and market the hell out of if strategy making profit, to the point where you need experts on site.
This looks promising, i will look forward to the windows version, but the MacOSX as a first supported platform seems a bit odd, I used to think most DBA worked under Windows/Linux.
i dont quite get the point, praise is better, but it is also placebo?
CSS is pretty simple but modern sites have hundreds to thousands selectors. If you want to do anything worthwhile you need to modify big part of those. And hope new updates won't change anything making your custom layout a total mess at some random point.

I tried to theme some popular sites to my taste of dark themes and it's really tedious.
> we figured out that facebooks Facebot crawler will crawl _every_ url that was recorded by their tracking pixel.

I would be more surprised to find out that they didn't crawl everything they can, specifically pages that invite them in.

> 1. they are crawling potentially sensitive information granted by links with tokens

If the page contains sensitive information you absolutely should not have code that you do not control (any code loaded from third party hosts, not just facebook's bits).

As a matter of security due diligence if you have third party hosted code linked into any such pages you should remove it with some urgency and carefully review the design decisions that lead to the situation. If you really must have the third party code in that area then you'll need to find a way of removing the need for the tokens being present.

Furthermore, if the information is sensitive to a particular user then your session management should not permit a request from facebook (or any other entity that has not correctly followed your authentication procedure) to see the content anyway.

> 2. they are triggering potentially harmful and/or confusing actions in your website by repeating links

Possibly true, but again that suggests a design flaw in the page in question. I assume that they are not sending POST or PUT requests? GET and HEAD requests should at very least be idempotent (so repeated calls are not a problem) and ideally lack any lasting side effect (with the exception of logging).

> 3. they are repeating requests in a broken way by not encoding url-parameters correctly

That does sound like a flaw, but one that your code should be immune to being broken by. Inputs should always be verified and action not taken unless they are valid. This is standard practise for good security and stability. The Internet is a public place, the public includes both deliberately nasty people and damagingly stupid ones so your code needs to take proper measures to not allow malformed inputs to cause problems.

You can't use "the page isn't normally linked from other sources so won't normally be found by a crawler" as a valid mitigation because the page could potentially be found by a malicious entity via URL fuzzing.

> 4. I could not find a warning or note on their tracking-pixel documentation that pages tracked would be crawled later

A warning would be nice, but again unless they explicitly say they won't do such things I would be surprised to find that they didn't not that they do.
To me, Alexandra Elbakyan is kind of like a Martin Luther of science. That is, she enables the lay public to read and interpret science rather than awaiting the interpretation and approval of academics from high-status institutions. That may be a ‘sacrilege’ view here, given the audience of HN. And, in a way, I do feel somewhat nervous of people making decisions based on papers they read without understanding of the philosophy and practice of science. Yet, it’s unavoidable and already being done through popular journalism.

With sci-hub (and with some reference books obtained via libgen), science becomes accessible to everyone with basic scientific literacy - a surprising large number of people. I see these two tools together as enablers of a new generation of scientists. For instance, recently I have seen many of my collegues and friends sending me direct links to research papers. That’s crazy and would have never happened just a few years ago. These tools will drive the democratization of science. Just as I now see the religious kids at the coffee shop discussing their scripture, I hope to soon see science kids there discussing classic science papers - doing it not for economic or career reasons, but simply to understand and discover.

To me, that’s not an economic issue but one of morality.
On iOS this is simply not possible without the user being explicitly notified.

Can you provide some evidence of this happening on Android ?

Also Facebook categorically denies this:
http://www.bbc.com/news/technology-41776215
Why? The whole point of authentication and encryption is to allow secure communications over insecure networks. So what if DHCP is unencrypted? If you have E2E auth/encryption, all a malicious DHCP server can do is prevent your communications, it can't spy or MITM them.
Horizon State | Melbourne AU, Wellington NZ | Full time/Contract | Onsite & Remote.

Redesigning democracy on the Blockchain.

We want engineers who have a broad set of skills, because you’ll need to be comfortable performing in different areas. You may be coding in the morning, testing someone else’s code before lunch, designing a screen in the afternoon and jumping on a conference call with a customer in the early evening.

We don’t mind what technologies you develop with. We’re not just looking for Java, C#, JS, Solidity, Golang or any other specific language. If you don’t use anything in our stack but make a good case and seem like a great fit — we’ll still consider you.

Apply: instantregret@horizonstate.com

Details: https://medium.com/horizonstate/horizon-state-is-hiring-d0a8...

Company: https://horizonstate.com
Toyota invests $69M in Japanese Uber rival backed by the taxi industry
Eight Queens in SQL
I used to think I was a night owl. It turns out that I was just highly sensitive to caffeine, moderately sensitive to blue light and young. Remove all three factors, and it turns out I'm a severe lark.

It's still quite likely you're an owl, but I recommend trying to get rid of anything that's making it worse for you.
I hope this faculty shortage is still in effect when I finish my Ph.D. :)

Anecdotally, many of my peers are going to industry instead of academia, because 1) better pay, 2) no begging for funding, 3) they don't want to teach. Academia is seen as signing up for a difficult life. Many industry research labs are allowing their staff to publish papers, so you can even participate in the academic research community. Look at how many NIPS papers come from Google-owned companies.

Personally, I'm interested in academia mainly because I'd rather not be part of an institution whose main goal is making money - but that attitude is not common in CS.
It is the fucking internet, if you put something on there you should expect someone to find it, be it a crawler or an attacker.

> 1. they are crawling potentially sensitive information granted by links with tokens

If tokens in GET params are your security concept: please leave the entire field.

2. they are triggering potentially harmful and/or confusing actions in your website by repeating links

So you built something that can be triggered by a simple HTTP request and may have a harmful potential? Wow.

3. they are repeating requests in a broken way by not encoding url-parameters correctly

You are kidding right? That's a problem to you? Either your Webserver drops these or your routes don't match, end of story.

4. I could not find a warning or note on their tracking-pixel documentation that pages tracked would be crawled later

Not a problem, you put it on the web and it will be crawled. Did you ever use Chrome? They report every URL you type to the Google Crawler. Read that anywhere lately?
> I don't consider it possible to steal information, because when I make my copy it doesn't deprive anybody else of their own copies.

According to that definition, it is possible to steal information: just delete their copies after making yours.
True, in my limited experience venv and pip goes hand in hand. But I can see use cases where you use them apart, more so with pip then venv.

Initial pip release was also 2011. Now I wonder what I used pre-pip?!

edit: easy_install, doh!
As far as I'm aware, they have, and once you take that into account placebo only has a very limited effect in controlling self-reported pain and nausea, everything else was just bad statistics.

http://www.dcscience.net/2015/12/11/placebo-effects-are-weak...

Though as that article explains, shysters, whether practicing some kind of standard woo, or working for big pharma, are keen to continue to pretend they don't understand this as long as it's paying their salary.
No it's not. It's common place for other websites to crawl you.

Just add a robots file or block the user agent with your firewall.
Now you're just making things up to support your (incorrect) point. It would be an impossibly rare, uncommon restaurant that would be cool with an employee -- during their shift! -- calling another restaurant where they also work, finding the other restaurant will pay them more to hop on over right that minute, and then following through. That's just not realistic at all, and I'm super disappointed that you're lowering the level of discourse here by insisting on supporting an obviously wrong premise.
Those people should suffer the consequences.

I'm not a fan of facebook in the slightest, but they are crawling websites they were essentially invited to.
> Why this simple concept would elude the US government is beyond me.

At this point the US government pretty much entirely works for monied interests. It has waxed and waned over the years but for the past thirty years or so, it has strongly waxed.
Blind Signature
Does anyone know how they calculated these logarithmic tables back then? Did they use any form of mechanical calculator, abacus, counting table, lookup tables or any other form of aid?

Or did they simply write in out by hand on paper like on is usually taught in elementary school?
Most of hn is skimmable. There are about 5 good discussions a day.
Not entirely, but it's possible to convince flowing traffic through eBPF. The main difference will be the ease of use! Thank you for the suggestion though.
A while ago while looking at the apache logs I noticed that the AdWords remarketing pixel does the same, it was trying to crawl private URLs that are only accessible to 'admins' that are not linked publicly. I'm not sure if this is still valid as I blocked by using robots.txt.

Also, the same crawler ignores the "User-agent: *" directive in the robots.txt file and you have to add specific rules for it: "User-agent: Adsbot-Google"
Google uses UDP 443 for all it's quic services. Chrome will autoconnect to UDP 443 for any https request in parallel with TCP, and prefer QUIC if it works.

Sure you could use another port, but it looks like UDP 443 is becoming the unofficial standard, even if not IETF endorsed...
There are many algorithms already that render ANNs into decision trees and other interpretable forms. Nothing to fear here, citizen.
Well, things are a bit different in the US where your universities are privately funded but in many countries the publishing industry publishes research from researchers employed by state funded institutions and sells the research back to libraries in state funded institutions. So, really they're being doubly financed by the state.
I use the RSS feeds (https://hnrss.org/) for the HN front page and also for the Show HN (I find the average quality of all Show HNs to be surprisingly high - ever of those that don't make it to the front page).

To read the feed, I use Feedly, that fetches pictures from the linked pages that sometimes give a bit more context about the submissions.
You're welcome to think that, but you still haven't articulated a coherent argument.
show me some, that approach is at best experimental as far as I'm aware, and unable to create a 1:1 correspondence with how an ANN classifies.

A far cry from "many algorithms" like its some kind of well established practice and fact.
I think this problem exists in just about every job. If you aren't cut out to do it, you can't do a good job. No matter if you clean a school or build bridges.
I think that's a very good point. My personal opinion is that considering drivers "employees" in these scenarios is ridiculous, but it's possible that "contractor" (as defined by law) isn't a great fit, either.
You might be able to argue that, though you are arguing against accepted practise (are you are wanting to ban all web crawling?).

While two wrongs don't make a right, assuming we accept that facebook is wrong in this instance which I don;t think I do, the code for the page handing out sensitive information to an unauthenticated request or taking action based on malformed inputs is negligent.

"Information wants to be free" is not just a hippie ideal it is a technical warning. Unless you take proper measures to control and protect sensitive data it will find a way out.
Sorry, if you are using their tracking pixel then you deserve no sympathy for the consequences.
"Sheerly Genius" looks like a really interesting product for a trillion market, and the presentation video is really well done and funny.
Amazon to Launch Delivery Service That Would Vie with FedEx, UPS
Except I don't have control about the edge nodes either, because the one edge is a remote server while the other edge is a locked-down smartphone or IoT device.
Cloudflare has a new feature wherein they can use HTTPS Everywhere's translation list to rewrite http references to use https where possible. It's almost certainly not perfect, but for many people it should at least reduce the amount of effort required. It's explicitly intended for the deep-within-your-codebase/CMS case you mention.
The reply all podcast did a decent discussion of the topic.

The messenger app probably doesn’t listen to you, but it’s abusive in other ways and shouldn’t be uninstalled. The main creepy feature of Facebook apps is that they continuously track your location. That’s a source of much of the creepy targeting that people notice.

Also, Facebook’s weasel-worded response to the issue implies that they do not use pervasive audio targeting, but buy data from people who do. The Wired article that claimed that using audio was impractical is nonsense.
Yeah, I too like that aspect of the fine.

And while the particular amount is tiny considering the whole of Google, it is apparently 5% of what Google earned in those years from its "Indian operations" - and that revenue drop and profit/loss implications will matter in internal decisions, and will be significant when the profitability of this arm of operations is considered internally. And that will in turn have direct and indirect implications for internal management and decision-making. Nothing dramatic of course, given they can still get away with a lot, but this is not a trivial fine or ruling like many seem to be assuming.
It's already happening. Some funds have starting founding their own suite startups because they can't find enough places to put their money.
All right, but then why are most open-access papers under $3000?

If an editor can survive with these fees even when the paper will be publicly available, how can Nature need $30,000 for a paper people will pay to read?
might consider live-regions https://developer.mozilla.org/en-US/docs/Web/Accessibility/A...
although not so much for adding structure, but catching extra data.
Everything you said was technically correct yet the message will probably be lost due to the manner in which you decided to delivered it.
How to Get More Instagram Likes
But you can still end up with a loss if you do not put considerable stress on promotional techniques. The clients will never opt for your service if they are not aware of your presence in the arena. For this, you need to send the message to these customers. To get in touch with your customers and probable clients quickly, you can take the help of modern technology. Opening an Instagram account to promote your business is one such step. If you succeed to get Instagram likes, you will be able to create adequate awareness in the market with ease.

http://idleexperts.com/public/article/index/id/179428
How is this instance an abuse of power or shady?

I would be surprised if service wouldn't index my site after I put one of their pixels on my site.
There were previous rules enacted by the Treasury in the 20th C, and also Common Law dating back at least 1000 years: https://en.wikipedia.org/wiki/Treasure_trove#England_and_Wal...

Also people pay attention to the act as the police will prosecute: (sorry for Daily Mail link) http://www.dailymail.co.uk/news/article-1253991/Woman-coin-w...
Also payroll taxes, extra FICA/Medicare taxes, unemployment insurance...
Not even 50 cal, a regular old assault rifle will do.

Could you hit a moving drone with a rifle? Even when I shot competitively at 500m, I probably couldn't. You can hit clay pigeons with a shotgun but a drone can easily manoeuvre beyond range.
Why American police officers use deadly force more often than Europeans
Ahh, thanks!
And yet this is reality: again 99% of applications manipulate objects in code, persist the data in relational databases, and map rows to objects just fine. Some mapping is necessary anyway, and from my experience modern ORM frameworks actually handle complex objects and relations much better than fragile hand-written code.

As mentioned, if you're in the 1% scenario where this approach doesn't work then you already know you should be using something else. Not knowing when to use what is a far bigger issue than any problem an ORM can cause.
> I do want to send connections over more than one WAN

QUIC has something which can help with that (from https://tools.ietf.org/html/draft-ietf-quic-transport-09):

"QUIC connections are identified by a Connection ID, a 64-bit unsigned number randomly generated by the server. QUIC's consistent connection ID allows connections to survive changes to the client's IP and port, such as those caused by NAT rebindings or by the client changing network connectivity to a new address."

If that's not enough for your use cases, now is a good opportunity to mention them and suggest enhancements, since the IETF standard is still under development.
I believe it would though. It's already happening higher up the supply chain where conveyor belts of produce are graded using computer vision (and other techniques, I'm sure).

This is about moving these techniques further down the chain. A robot picker arm with a few cameras attached that can tell whether something is rotten is well within our grasp. (Awful pun intended!)
No question. I support PeerJ to the fullest extent and the price is more than fair. (It's actually unfair, honestly, it's far too low.)

But there is a fee. And it's important for supporters to be honest so it doesn't appear one-sided, so, here I am.
Fertility 'breakthrough' as human eggs grown in lab for first time
Looks quite nice.

Currently stuck on pgAdmin 1.22, as I won't touch the "modern" Electron version of it.
Zero benefit, except the benefits described in the first paragraph of every HTTPS article.

Anyone can inject content and scripts into your HTTP pages.

Migrating isn't always easy, but it can always be done.
> Let's maybe hope that they'll make an exception for the RFC1918/4193 ranges. Of course, the other side of the coin of is that even a "private" network could be anything from your private home to your workplace intranet to an airport wi-fi hotspot, and can't be assumed to be safe from snooping/injection.

That would be idiotic not just because unrusted parties can use those addresses, but more importantly because those are more or less terrible hacks that should be avoided completely if possible. You rather should have globally unique addresses on your internal network if you can, which would just break this.

> Perhaps a rather drastic change like this will lead to more user friendly ways to install self-signed certificates on home networks.

That's also not sensible. The whole idea of linking stuff to specific networks is bad. There is no reason why access to a device on your home network should in any way be linked to your client device being connected to that same network. It's the internet, not "the home network and the cloud".

What is needed is a way to establish a trust relationship between two devices that you have control over. Where those devices happen to be connected to the internet should be absolutely irrelevant. There might be an argument to be had to maybe support for a simplified peering procedure on a local network might be a good idea--but the point is that once the trust trelationship is established, you should be able to move your client device to a different network on the other side of the planet and still be able to talk to your device on your home network.
QMidi Pro 2.7.0.3 Full Activated Crack with Keygen