skysight-inc/HackerNews huggingface dataset:
The usual rationale from companies forcing SMS two factor is that you need to have a convenient account-recovery mechanism before you enable something strict and lock yourself out. They don't want the support cost of dealing with these lockouts.

Unfortunately, these same companies often then claim that there is no harm in SMS two factor since "clearly it is stronger than one factor". But they are blind to their own systematic design flaw which is that the same SMS setting to enable two factor also usually enables one-factor password-recovery via this supposedly trusted phone.

Given what we know about SMS security, it is pretty obvious that one-factor SMS is weaker than one-factor good strong password. And if the good strong password can be merrily reset by whomever hijacks your phone, you have really just decreased your security posture while performing this whole security theater around two-factor and hardware tokens.
ModernSQL in MySQL
Helpful, but note that present content is limited to South Tahoe (Highway 50), not the more-travelled I-80 Donner Pass route north of the lake.
You're not paranoid-- its common sense. We have ABSOLUTELY no control over these devices we're inviting into our homes. We are voluntarily paying for a surveillance apparatus that can be turned against us at any moment.

Even if you believe Apple/Google/Amazons intentions are honorable-- these devices will be attacked by every intelligence agency. It is an act of insanity to but this stuff.
That one was released in June 2011, according to Wikipedia, so not useful as prior at to a patent filed in the 2000s.
Wow, that is unbelievable and embarrassing that they allow that. With Prime shipping!
You had CAPTCHA. Very advanced for the '90s.
Perpetual is just licensed software.

If you sell it for $100/user, you charge $20-30 per year for maintenance annually.

The OP is making no margin on his SaaS already and the client probably knows it. This is an opportunity to actually generate a return.
I want to know who has the job of naming these things and coming up with badass style acronyms that still sort of explain what they do. All weapons have seem to have cool names so it must be really important to get funded.
A link points to non USA based. But in general, you agree a small percentage of comments.

For example, compared to antifa and such.
But your party are left of the TEA party you'd agree.
> Code that's dynamically disabled is at least checked by the compiler

You can still trivially ensure that kernel with CONFIG_ARCH_TOASTER compiles fine by setting up a build server which automatically checks each and every option.
For sure, I’m by trying to say it’s a real theory, it’s just a way to interpret the quantum mechanics that we can test in a way that provide us with some sort of intuition when working with the physics.
Reading Epictetus' "Enchiridion" at the moment. I enjoy Marcus Aurelius. Can't say I've read a lot of the texts. I'm not a voracious reader (any more). However, I kick off every day with a page from Ryan Haliday's "The Daily Stoic" (while his interpretations are sometimes lacking, the original quote that he expands on usually needs no exposition).
> Only, who would do such a thing these days?

I would. The corporate sites you mention are cumbersome and detrimental.

Yes, creating a web app is too much, and so is a project, in my opinion. A web document is all that might be needed:

<html><head><title>website</title></head>
<body><img src="newborn.png"></body></html>
Which era was that? Back in the 90s average people did not post anything to the Internet _at all).
"The only solution "? I think you missed my sarcasm and the edit. I am 100% for privacy and 101% for solving the root problem if you didn't get the hint
The documentary "I am another you" (on Amazon, last I looked) is a great film about mental illness. The documentarian is attracted to the subject of her film based on his perceived freedom, which turns out to be an illusion.

My Best Picture of 2017.
> nature has no obligation to us

This is an excellent point indeed, but what if it also applies to the disagreement between QM and GR? That is, does Nature have an obligation that QM and GR, both being mere reflections, in the human mind, of its particular aspects, should ever become in agreement with each other? What if mathematics (the human logic) can in principle only provide models that are local approximations of reality?
This is a great question and a pretty common misconception.

No, because the revenue test is one of the criteria the judge/IRS looks at. There are other criteria like where and how the "contractor" wants the job done and the relationship between the parties.

Youtube does not tell these Youtubers how to present their videos

Youtube does not tell these Youtubers how long their videos should be

Youtube does not tell these Youtubers when they should release the video

Youtube does not tell these Youtubers what target audience they should be making videos for

Youtube does not tell these Youtubers what income they will get per video made regardless of how popular the video is (surge pricing anyone?)

Uber does.
BIND to add QNAME Minimization
I had a mental image of Dr Evil issuing his demand.
> a mechanical pattern matching algorithm on steroids.

Firstly I would like to point out that there are no (good) "mechanical pattern matching algorithms". I would love for you to point out some, but as far as I know, outside of AI no such algorithms exist.

As for the entire argument, the problem with this reasoning is that it only works at the lowest level. And even then, it sort of works for fully connected and CNN based image classification. But autoencoders certainly have what I'd consider "concepts". Not in a language we understand, but they do. They have a signaling mechanism "explaining" high-level features to other neural networks. RNNs have concepts. RL policy networks don't just have concepts, they have strategies. They have lies, truths, and even political lies: truths explicitly designed to make it really really easy to believe something that's not actually happening. Usually they even exhibit meta-lying: systematically not deceiving with just one (but important) deception in an unpredictable location.

(and I would like to add that the CNN features, looking at the numbers, look VERY similar to concepts in more abstract neural networks. Perhaps the "difference" is merely one of those philosophical differences we keep hitting). GAE networks have concepts (of course they are autoencoders usually).

So in truth this is a matter : neural networks that have no use for concepts have only an incomplete notion of concepts. Neural networks that have to "teach" or otherwise interact at a high level with either humans or other neural nets very much do have concepts.

And I would like to say, this is yet another "humans are magical because X" argument. None of those arguments has ever stood the test of time. This one won't either. AGI is coming, sorry to disappoint you, and the current theories of neural networks will be shown to be "insect-level" (or whatever level) AGI.
Not that hard. I wrote a thing... jeez... 20 odd years ago https://ctan.org/tex-archive/support/pstab?lang=en ... which let you typeset guitar tablature, chords, and so on.

I expect you really mean: find a way to play a given chord without breaking your fingers, but when playing classical guitar you'll move your hand while playing arpeggios, so you're not constrained to just positions you can strum. You can solve for that, it's just not that useful.

The code's a bit embarrassing, the only program of any size I wrote in postscript - at the time it seemed the best way to 'write once, run anywhere useful' given the 286's, mac classics, and Sparc 2's I had access to; it ran on on the office Laserwriter.

Best thing about writing it is, I got a letter from a guy who used it to publish a book of banjo music in new zealand, because it was the only thing he could find at the time that handled 5 stringed instruments.
The world's last male northern white rhino is on death watch
I wish I could find the selective breeding paper I read years ago. It is as you say. The human practice of keeping the largest fish in both sport and commercial catches is to blame. A 75 year king salmon derby here shows progressively smaller fish winning every year. Its not really hard to reason that if you kill the big fish before they breed the fish are going to get smaller.

We even see short unnaturally fat fish that are just under the minimum length that has been the same for 30+ years. The gene pool is being pressured to shorter fish for survival.
Your link to yamahausa is mistyped as yahahausa.com. But then again, most of the links are dead. Carry on!
Why it’s time to upgrade to TLS 1.3
About your reply to my removed comment- I think you missed my sarcasm and the edit. I am 100% for privacy and 101% for solving the root problem if you didn't get the hint. Won't mention here lest I get banned
> Nobody has to give you the truth.

Then you have to figure it out for yourself. For everything. Which, again, doesn't scale.

At some point you do need to trust some people to make some decisions for you. But what kind of fool trusts someone with a conflict of interest?
Was that leave supposedly paid, or unpaid?

If paid, it was likely a disability insurance policy, so paying you wouldn't even affect their bottom line.
Slack App – Looking for Early Adopters
Hi, everyone!
I'm George; a 15-year-old High-School student from California, and I've recently been working on a tool to help company's track/boost their culture.
I am in the processing of developing a Slack app, which tracks your team workspace, and using ML/AI builds culture reports based off 6 key aspects of company culture (e.g. each week you get a report pertaining to that week, and what you low/strong points are, and how you can improve them).
No more wasting your team's time with tedious assessments!
I'm looking for companies that use Slack on a daily basis, and have ~10-20+ team members.
If you decide to become an early adopter, you'll receive 3 months access free-of-charge, plus some company goodies from us :)

Interested or want to chat more? Join our early adopters Slack: https://join.slack.com/t/betaculture/shared_invite/enQtMzIzOTk3MTk5NjM2LTNhNDc1NGQ0OGRiMzk4ZDVhMGFiYmJkYzgxZTgyMDNiOTMwZDJiYzliNWE2MjU5MGVmZGQ0MjgyZWM2YzgwMDQ

Thank you,
-George W.
Flash Lite worked on mobile phones before iPhone was a thing. I think it still runs in great many applications for mobile and stationary devices as embedded graphical toolkit. On the other side of the spectrum, some AAA games have in-game UIs made in Flash.

The only thing I remember about using Web technology in games is this: https://www.youtube.com/watch?v=tV7ei1Z40fQ
>So don't do that.

How about you tell users to simply not enter their password into phishing sites?

When users want to do something (sign in) and there are instructions on the page telling them to do something (enter password or accept usb) then the users will do it.
I still have my 1994 looking website on-line. Because of the content, it still averages 310 GB of traffic a month (if I'm to believe awstats).

http://www.w6rz.net
Great read. Most of my knowledge in this area is for macOS and Linux, so it’s interesting to see how obfuscation is done on Windows. The core ideas are the same: add weird instructions to fool disassemblers, indirect through a VM, disable debugging and tracing, etc. but the techniques are different on each platform. Plus you have creative solutions like the one mentioned in the article: taking a screenshot of the screen and displaying it over everything to give the impression that nothing malicious is going on, all while you’re running code that displays security messages that you couldn’t figure out how to subvert.
List of Australian mass shootings since the gun ban https://i.redd.it/i0ovzrr4bgj01.jpg
You forgot hotdog professional. Hated how frontpage mangled the code!!
This is huge. Looking forward to see what sort of front-end toolkits will pop up for this new platform (Go for the client-side web).
No that's not how lasers and flight paths work. It's impossible to line up aircraft so precisely.
Note - works great on mobile =)
> The social media bigs aren't attacking political opponents, they're attacking hate groups.

Who defines what is a hate group? So if saudi arabia labels atheist groups as hate groups, should social media ban atheists? If china labels democracy groups as hate groups, should social media ban democracy groups?

https://news.ycombinator.com/item?id=16506887

What about political groups who hate trump? Should they be banned from social media? What about socialists who hate capitalism? When russia labeled lgbt groups as hate groups, you agree with them banning lgbt groups from social media?

> If your political ideology is hate, then you should expect to be increasingly ostracized and driven away into the shadows.

Wouldn't you want to shine the light on hate groups? Isn't that the last thing you want to do? To push hate groups into the shadows where they can fester?

What happened to liberalism? It's something every college student learned about when I went to school. Free speech and why it is fundamental to defend "hate speech" or ideology/speech you find offensive or disgusting in order to protect free speech. It's philosophy 101. Is logic and philosophy no longer taught in schools anymore? This is basic stuff.
We Dare You to Explain Luke’s Plan to Rescue Han in ‘Return of the Jedi’
That's how it works for discrimination in general. If you can convince a judge or jury that the choice was based in discriminaton (your simple plotline vs their excuse of how random it was, or whatever), you win. It's a hard fight.

At a big company, likely other people tried to claim paternity leave as well, and non-paternity leave people were laid off, and (with legal discovery) you can do the math on ratios of layoffs across the cohrots.
Great! Some suggestions for improvement:
- make the keyboard bigger on screen
- put a play button on screen
- allow the whole chord to be played at once aswell as arpeggiated
- allow chord inversions (left/right key?)
Current limits are fine, but also meaningless since you can trivially bypass them? If so why not raise the limits if they're only serving to have everyone implement their own bespoke stacks.
California ranks last in quality of life in new report
Perhaps this is me being overly cynical, but a state-run social media platform seems like a recipe for massive, invisible, unchecked government surveillance and/or censorship. The last several years have made it abundantly clear that many parts of the US government do not consider privacy a right, and while our rights to free speech remain intact, I do not believe it is safe to assume this will remain the case across future administrations. In the worst case, a sufficiently popular administration could abuse state-run social platforms to locate, silence, and/or arrest dissidents, paving the way towards China-esque authoritarianism.

While such an extreme scenario is, needless to say, unlikely, the idea of centralizing the majority of social media under the control of a government that has shown increasing interest in mass surveillance remains something I am exceedingly dubious about.
Because Amazon hasn't been ruled a monopoly yet.
CORS is irrelevant.

>The attackers would need to get that nonce from the site.

The attackers have their own machine with a browser running on it that visits the real site and gets the nonce, then hands that nonce to the victim to be signed by their key.
A browser is more secure than a linux namespace with SELinux rules that require explicit approval for any access?

A browser is more secure than Qubes?

The flaw is in legacy software, not in what is possible. Had humanity spent the effort that was spent on browsers on operating systems instead, we'd have had the same security improvements without all the negatives.
Yep, we started doing it in 1997 and have plenty of documentation to that effect.
It's not just between foreign whites and American whites.
Take a wealthy, white, highly-educated person from Connecticut, and a dirt-poor, white, high-school dropout from rural W. Virginia.

Both have "white privilege".

And so the poor, under-educated W. Virginian who claws his way up to being a self-educated programmer will be disregarded by Google along with the wealthy Connecticuter.

That simple fact bothers me immensely.
> With bitcoin you have... what?

You have a government losing its sovereignty over its own money supply, for all practical purposes. After being invaded, or losing territory due to an invasion, that's about as serious a threat as any on offer.
Nod, thanks. Makes no difference to our prior art, happily, as we were three years before that.
I assume he was talking about non-paid search results in which case: how so?

It's no like you're going to change your search engine to Bing because Google stopped showing organic search results for Amazon.

I just searched for e.g. "Acer Predator Helios 300" and Amazon is second non-paid result.

I would imagine that's the case for a lot of searches and not being in search results would hurt them a lot.

And to be clear: I think it should be illegal for Google to selectively and anti-competitively tweak search results just as it should be illegal for Amazon to selectively and anti-competitively refuse to sell products.
There are certainly people who defend the concept of intellectual property in general and patents in particular as ethical. I don't agree but it's arguably even a mainstream position. I imagine at least some of them would argue that patent trolling is at least a necessary evil to achieve the greater good of intellectual property laws. I can think of a number of at least somewhat defensible arguments why patent trolls are on net a good thing if you accept the basic flawed premise that intellectual property is ethical.
> Be So Good They Can't Ignore You.

That's pretty much the story of Asian Americans (and Jewish Americans, for that matter).
If you live in the US about 1/3 of your taxes go to making sure we have the means to break things and kill people. It's been that way for a long long time. Whether that is good or bad is a whole different discussion, but throughout history having the biggest stick has proved to be beneficial at least for awhile.
The purpose of a Yubikey is to prevent users from making mistakes.

This phishing attack removes the benefit that Yubikeys provided.

Sure a smart users can decline the permission prompt. But a smart user can also simply not enter their password into phishing pages.
Note that they changed it to 280. It's possible to express a slightly more nuanced view in a tweet now. You've got room for a brief hedge or caveat along with your main point.
No, they didn't. The NYT tried to insinuate that while concealing the relevant details.

http://www.ccianet.org/2018/01/ccia-files-supreme-court-amic...

Washington — The Computer & Communications Industry Association has filed an amicus brief on how the Supreme Court should look at multi-sided business models from an antitrust perspective when it hears the upcoming Ohio v. American Express case.

While CCIA does not weigh in on the substance of the financial services issues impacting merchant fees,
the tech trade association does argue that constraints on all sides of a multi-sided firms should be considered when analyzing if a plaintiff has made out a prima facie case of anticompetitive conduct. The American Express case represents the first time that an antitrust dispute involving “multi-sided markets” — where a third party service provider is in the business of uniting buyers with sellers — has come before the Supreme Court of the United States.

...

“Two-sided markets” or “multi-sided firms” is a term of art in the theoretical economics literature that refers to business models that have multiple sets of customers, such as many of CCIA’s members.
Multi-sided businesses operate under complex economic dynamics as they must consider the effects of their pricing and output decisions on both sets of customers, as well as the interrelationship among the customers on each side of their business.
Whether a multi-sided firm has market power or not requires consideration of the actual effects of multi-sidedness. Ignoring these competitive realities would risk penalizing healthy competition to the detriment of consumers.
This isn't about western power, it's about western values being protected in the west. I'm sure that people wouldn't be so concerned if China kept its censorship within its borders. As far as I know the west doesn't systematically subvert Chinese values within China.
> Paying back that loan in the normal way is neutral, preserving the money that was created.

Actually it destroys the portion of the money that was created.

Sort of.

The bank doesn't get to keep the principal it originally created, it gets destroyed. But then they're back to having some slack against their reserve ratio, so they can immediately go recreate the money again and loan it to someone else.

Which is how banks actually create money, and inflation -- by over time increasing the net amount of outstanding loan principal across all debtors.

This is also why it's important to have the government create a certain amount of money -- it's necessary in order to allow people on net to pay down their loans without causing deflation. Or even to prevent people from having to increase their net real debt as the economy expands.

And despite all the whinging about QE, the banks are still way ahead on the "average real debt per citizen" front.
I'm working on a problem kinda similar to that with a binary classification on a class imbalanced dataset, but fastText and Bidirectional LSTMs appear to work pretty terribly even with oversampling. Is there a better alternative?
Hacking Ice: 8th Annual Northampton Ice Art Festival – Night Photos and Videos
It’s possible, but maybe not likely. I’ll tell you though, if reality is that unpredictable, thst unfriendly to rules, expect a rash of suicides in the physics community the day it’s confirmed.
That said, we definitely do remote interviews if you wanted to apply anyway. We don’t require someone to be on site for any stage of the process (though it’s nice to meet applicants face to face).
"A privilege is a certain entitlement to immunity granted by the state or another authority to a restricted group, either by birth or on a conditional basis. Land-titles and taxi medallions are pronounced examples of transferable privilege. These can be revoked in certain circumstances."[0]

Who grants the "special government privilege"?

One could dare say that this "special government privilege" could be challenged by any group of actors with varying degrees of sufficient power, at any time, and/or become effectively revoked, especially when a government overextends itself in trying to execute it's influence over an economy.

[0] https://en.wikipedia.org/wiki/Privilege_(legal_ethics)
It doesn't help me to post on 4chan if the people I want to attack aren't there.
How would that help? Couldn't the webusb simply lie to the u2f device about what the channel is?
Makes me miss the pre-Goog/Face-ification version of the web, when people created sites because they wanted to, and not because they thought they could monetize them or use them to gather private data.
>For some reason the FIDO alliance decided they didnt want OTP.

OTP is regularly phishable, not requiring any webusb. Before this webusb attack, u2f was unphishable.
Yes there are two distinct policies, both offered by Intact or their subsidiaries:

1. A commercial policy paid for by Uber which covers all Uber drivers while online.

2. A personal policy paid for by the driver which covers them while offline and explicitly permits ridesharing at no extra cost. This personal policy is the same price as the competitors without ridesharing, so it is not an added expense.