skysight-inc/HackerNews huggingface dataset:
maybe me now?
How security alerts are keeping your code safer – The GitHub Blog
In any hacking group there has always been a large contingent who criticize using the worst case scenario. It's pretty par for the course when engaged in any critical thinking.

If I had the space and need to build a powerwall. I probably wouldn't do it with a bunch of 18650s. Calb and Winston cells make a lot more sense.
My personal advice: don't move back unless you have a good reason to. If you're a big enough customer to talk directly to a Google sales person, use that as a bargaining chip to get a cheaper offer.
IMO these are a great improvement but one still needs to be aware of the underlying container limits. E.g., understanding why setting MaxRAMFraction=1 might not be a good idea as the container might get killed...
Right SF is better than what the parent comment describes but it very oftentimes is still devoid of true diversity. I worked at a company based in SF and made the conscious decision not to live there. It felt like every time I would go out to a bar or coffee shop all I would hear is tech workers and business investors having the same types of conversations everywhere. More than being crummy for expanding one's perspective on a whole host of issues, it was just plain depressing to be around.
When words get diluted like that, you can easily counter through elaboration and specificity, as the parent did. In doing so, you can retain the meaning as you see fit.

All people are free to define their own definitions. In fact, we all do, without exception: no two people hold identical definitions for the same words. The only thing that matters is the ability to be understood, ideally to a high degree. Elaboration on what you mean provides for that even in the case of widespread dilution.
I had a contract like that at a call centre! Yeah, I needed work. Made me wonder about the paintings I made during that time that I managed to sell. One went for the price of a weeks wages. And, with several Labour governments in the modern era i wonder how they are allowed along withe those zero hour contracts?
That had to have been a joke - that's a common old person meme in IT.
No need to recite from memory when the log is trivially viewed or copied at a later date.
If that's true, that's a pretty handy description of what many US leftists call "privilege." There are many marginalized people, including in developed western nations, for whom the politics you're able to ignore can have decisive impact on their day to day lives. Many of these people, like many people in general, will not have the knowledge of internet technology and policy they need to protect themselves.
yeah, agree this instruction is sucks
. Can you maybe suggest how I can improve it?
Hmm, do you have any examples of this? I'm curious as I've been running LineageOS without Play Services... seems to work quite well, but maybe I'm missing something?
How You Can Let Millennials Better Manage You
Deleting Facebook? Here Are the Most Private and Secure Alternatives
Reading this made my day. Thank you for sharing!
I think the implications are way beyond what you see in your browser and perceive as ads.

Imagine a billboard, you drive and the content changes because your GPS is close to that billboard and stuff like that - real world changes like that will happen, if not already.

There is also the product placement and as Cambridge Analytica describes entire personas and website being made just to target individuals and change their perception and opinions - this can all be automated at scale with current technology.
It provides a complete unanonymous way for the government (or whatever power that be) to track every purchase you've ever made, under the guise of anonymity and transparency.
My career so far:

Delphi -> Microsoft stack -> Rails/Ruby -> Scala -> Clojure -> Rust

The stuff I remember well starts from Ruby. Good things:

- Ah man code is like a book.

- Lots of people were writing Ruby back then, so lots of libraries.

Bad:

- Deployments in general, this was before Docker, but I prefer having single binary/jar deployments

- Slow

- Lots of runtime errors

- You need lots of tests

Scala, good:

- If using IntelliJ, the development experience is kind of slick

- Quite modern, JVM libs work

- You can go functional or OOP, whatever you wish

- Fast

- Type system helps you out, so no need for that many tests

Bad:

- IntelliJ, I need my Emacs

- SBT is not very nice in the end, making a huge jar file can cause trouble sometimes

- Not the biggest fan of implicits

Clojure, good:

- Lisps are SO MUCH FUN to write

- ...especially if writing pure functions, stuff like code generators

- Emacs is good here, Cider rocks!

- JVM libs are available

- Leiningen is definitely nicer than SBT

- Everything is pretty easy and straightforward

Bad:

- Concurrency and effects can cause trouble, especially if doing it through Java libraries

- Leiningen is nice, but slow. You must use Cider.

- Runtime errors, as with every dynamic language

- Again lots of tests, but at least they're fun to write

Rust, good:

- Concurrency, IO and so on. Just damn nice with Rust

- Refactoring without fear

- Cargo is the best dependency management / build tool ever

- Small binaries

- Total control of CPU/RAM, you can do pretty fast systems

- If it compiles, it usually works

- Type system is great, libraries are quite nice already

- Community feels like the good old Ruby days, but better

Bad:

- Borrow checker still sometimes hurts, hopefully non-lexical lifetimes land to stable soon

- Problems with the current 0.1 tokio and futures can be pretty daunting. It's not a good idea to do super complex stuff with them yet

- Write your own libraries, especially if you started two years ago. That was fun though

I think the next thing I must grasp well is Haskell, just for the fun of it.
>Compare that to our email, where I can go into anyone's messages immediately if need-be

The only opening for reading employees' communications that I can find by some quick googling, are (1) if there is good reason to believe that information contained there is required to keep the concern going or (2) if there is suspicion of serious dereliction of duties. And even then, there is a significant checklist required in order to do it legally. (Obviously, legal police requests can be fulfilled without necessarily alerting the owner).

My point being, this is a far cry from legally being able to go into anyone's communications immediately if need-be.

Are you aware of further openings than this, apart from the obvious in the case of a court-ordered request? I am basing this on the statement from Datatilsynet at https://www.datatilsynet.no/rettigheter-og-plikter/personver.... General monitoring would seem like a big no-no.
It depends where you live. I've sat on a jury in a wealthy urban area in the UK, and I'm happy to say my fellow jurors had excellent critical thinking skills. Each of us had different expertise which we could contribute.

The system worked exactly as intended. Because jurors are paid almost no money to be there, I had a strong feeling that I didn't want to live with the guilt of sending a person to prison unless they were completely guilty and completely deserving of it.

While a judge will usually act fairly, a jury has a selfish incentive to actively look for ways to avoid sending someone to prison.

I don't think juries are a good solution everywhere. The UK does not have the remnants of racial segregation that the US does; racialism is endemic in US thought patterns. Additionally, the average person where I live is university educated. For that reason, I feel that every defendant should be given the option of a bench trial.
And imagine if you had a house fire and had your coverage denied. Would you be at all shy of posting those details on a public forum? I'm not saying that denials like this can't/haven't happened, just that I've never seen a first-hand account of such an occurrence (it's always somebody's cousin's co-worker's son).
But if you record the ephemeral, there is essentially no difference.
The US security establishment unfortunately is an unreliable source for such claims. For example, off the top of my head consider the original stories about Jessica Lynch, Pat Tillman, the people imprisoned in Guantanamo (who originally were identified as all serious threats, but turned out to be mostly otherwise), testimony on NSA activities, exaggerations of the consequences of Snowden's leaks (IIRC), and many more. They seem to claim what suits them until proven otherwise, and like to attack leakers and journalism.

That's a problem in a democracy, where we need to vote on these issues, because we rarely have other sources for secret information. But trusting an inaccurate source because you lack another, while tempting, is flawed reasoning. Better to say, 'I don't know'.

I wonder if some parts of the security establishment are more reliable than others. There are some individuals I trust more than others, at least.
While a hacker gaining access to the developers' GitHub account would be bad, they would still have to actually push the malicious code to GitHub before they can serve it from airborn.io. So, if people pay attention to pushes to GitHub, this attack could still be detected (but not prevented). For prevention, one possibility would be to require all commits to have been on GitHub for at least 24h or so. Then, the devs would have some time to try and get their accounts back. We don't implement that today, though.

That section attempts to explain how web apps work today, if you don't use that library. Reading the entire thing back, I agree that the how is never explained very well, although https://www.airborn.io/docs/security does explain it.
Manage Visual Studio 2017 Performance – Hide Source Control Explorer at Startup
You pick the law of one of the weakest privacy jurisdictions and argue that Slack should standardize privacy on most invasive level this country's law allows.

What is this declaration of rights for corporate eavesdropping?
Does diffusion of oxygen really need active mixing?
I would have assumed even with a low oxygen atmosphere the oceans would slowly get saturated with oxygen by diffusion and existing currently

Or do they mean that the rate needs to be diffusion higher than at what the animals are consuming it? That's a interesting question. Do animals actually make a dent in the ocean's oxygen content? If their rate of consumption is small enough it probably doesn't matter too much.
The initial examples the author uses really do reflect the magnitude of the third problem. All of them were big breakthrough results in their fields - and hence people cared enough to do proper reviews - especially in the latter two cases. As an academic, I have participated in reviews of papers that I would have never otherwise read, but could still contribute to the process. Without something pushing all academics to participate in the system, then a more open solution risks moving science even closer to “only interesting problems/solutions/results get published”.
A battery is a battery, any lithium battery from a drill to a tesla is simply a 1.5 volt cylindrical cell stacked in series to produce the desired Voltage, then these stacks are connected in parallel or series again as needed (depends on application) to increase the load it can handle (Amperage).

The safety features you're so worried about are just fuses. And maybe some diodes if you're that worried. I can say that installing a bank on a piece of plywood on your garage wall is obviously stupid, but a simple opening of the NEC book will show the code for a battery bank, shall have clearance from a wall and rest on non-flammable/non-conductive material, usually in a nuclear power plant or a substation we would build a rack out of metal then install ABS plastic shields.

Source: I'm an industrial electrician and went through an IBEW apprenticeship,
I remember back in 1995 getting on Yahoo one day and going through every single category and clicking every website link in the entire directory (I was in college and bored). I like to tell my kids that at one point it was possible to visit every singe website on the WWW ;-)
Yeah, the lack of overlap in support between LTS releases is the real killer. I predict that in 5 years there will be few people using the Oracle JVM. People will migrate to the JVM supported on their OS (for example, RedHat supports OpenJDK for the life of the OS as part of their OS/middleware offerings).
On the dropbox security issue, does anyone have a way to get a proper changelog for new versions? It does not seem to exist.
IIRC, Google was one of the first search engines to AND your search terms by default, returning relevant pages from long tail sites. Other search engines at the time would OR your search terms, returning irrelevant pages from popular sites. I think this simple difference in defaults had almost as big an impact as Google's PageRank/BackRub algorithm.
Discussion: https://news.ycombinator.com/item?id=16631739
It depends on what you mean by 'beating' the theorem, doesn't it?

If you mean that the theorem is actually wrong, then I agree— the proof works and you can't actually avoid its conclusions given its assumptions.

But I think we can agree that for many (most?) practical symbol-systems in their particular contexts, the signals are actually high redundant as viewed against a particular basis, so slavishly applying the conclusions of the sampling theorem will cause you to miss the possibility of side-stepping its assumptions entirely.

Whether you're really in a position to take advantage of the latent priors in the signal very much depend on the tools at your disposal—obviously you will not be extracting speech with smart priors if all you have is analog filters at your disposal.
And every time someone says "Bee", it's replaced with "We Are Number One"
For a second I thought it was an SDK for temple os and I got excited.
Thanks for sharing this, I just turned 30 and started a CompSci Master's track 1.5 years ago. Very encouraging to hear your success!
I'm speaking more from the database/XSS side of things, where a blacklist is about as useful as no list at all.

There are absolutely times where security has to be compromised, even abandoned, in the name of usability, and times where security must be ironclad, even user-hostile. Civil rights law is definitely the former.
Actually, that example doesn't sound at all insane to me. What if Workday then sells the information that I'm sick a lot to future prospective employers or to health insurers? The employer should have a duty to adequately protect that information. It's not just "their" data.
And to think, that post was 6 years ago.
Do you have some more specific criticism on the design?
I wrote a draft of an essay:
http://yuhongbao.blogspot.ca/2018/03/google-doubleclick-essa...
I hasn't even mentioned Urchin/Google Analytics and Mozilla yet.
Six months ago I speculated (https://news.ycombinator.com/item?id=15242367) that Kaspersky was banned from US Govt use due to not playing ball with a political entity in the government. Now we know that simply by pursuing their normal business objectives, Kaspersky has hurt the government's counterterrorism efforts.

This could've happened by accident, but the way they were treated over several years by the intelligence services, military and Congress to me says Government knew this would eventually happen and tried (and failed) to get them to not flag this kind of malware. It's possible that by not agreeing to curtail research of certain malware, they were punished by having their contracts taken away.
You're saying you don't mind being profiled and don't see the harm in it, but in several places downthread you describe in detail how little you use the platform, how poorly it understands you, and how little exposure you get to it. If these things are true, you're not a good example of how harmless their profiling is for other people.
You'll be OK as long as you're dropping off suitcases of money at Oracle's door, but currently it appears that freely available fixes/security updates will cease as soon as the next LTS is released.
Be aware that theres some ongoing issues like this one for 9.9.0: https://github.com/nodejs/node/issues/19519
Other than that, congratz to the Node team!
Personally I assumed that capability was always available. So it was interesting when I received a private SMS about this story from a coworker.
The free email account at Yahoo was a nice one too. The web client was really nicely done.
When dealing with bits, the situation is different since algebraic degrees of freedom (dimensions or coefficients of sinusoids) are different than information degrees of freedom (bits). This difference in the context of the sampling theorem is explored in https://arxiv.org/abs/1601.06421, where it is shown that sampling below the Nyquist rate (without additional loss) is possible when the samples must be quantized to satisfy some bit (information) constraint.
Thanks for the document. I think it still says that the employer should notify the employee beforehand of any potential monitoring of communications, which is different from assuming that every byte is being monitored.
I'm not sure what happened between a month ago and today but it seems like all of a sudden it started raining lightning bolt of fury against Facebook.

I'm definitely not a fan of the company and could care less if they died but this seems too orchestrated to be pure coincidence. Who's interest is this serving?
what if your company hires more than 1000? Does that mean you should compromise your values and integrity?
Governments think of technology as products, but of course it is people that possess knowledge. Unless you cut off connections amongst people, eventually knowledge will diffuse.
On Tue 3/27 – an opportunity to tell the world about your Python powered startup
Hi early stage startup folks in the Bay Area:

If your Python-powered startup is less than 2.5 years old and has less than 15 employees, SF Python's members want to know what you are doing at our meetup next Tue 3/27 at NubHub's SF office.

And, we want to give your company more exposure to the Python Community worldwide by giving you a chance to showcase your company at the always sold out PyCon in Ohio this May. Dig?

How to get your startup the maximum visibility next Tue?

- be able to pitch in person in San Francisco on Tue 3/21 between 7-8:30p.
- take a few minutes to apply at http://bit.ly/StartupRowSF18 NOW (application deadline is Thursday but there are limited slots left to pitch, so the sooner you act, the better)
- send jasondonaldrowley+startuprow@gmail.com an email with available times for a 15 minutes call
- figure out a good pitch for your company to win the Startup Row title

Our friends Don Sheu and Jason Rowley who run the Startup Row have invited Bebe Chueh, co-founder of Atrium LLP, and Lisa Dusseault of Compaas on our judging panel.

The winner of next Tue's Startup Row will get:
- Two free passes to PyCon US in Cleveland, OH, this May
- Free booth space on Startup Row
- Access to the PyCon Jobs Fair
- A Startup Row alumni breakfast
- A happy hour for the broader entrepreneurial community at PyCon
- Eternal glory! Previous presenters on Startup Row include Docker, OfferUp, Quantopian, and X.ai.

I hope to see your pitch at the event! Feel free to reach out to Jason with any questions.

Thanks,

Grace Law
PyBay, Regional Python Conference Chair and SF Python Organizer
The amercian government secrets Kapsersky was "stealing" turned out to be US sponsored malware. Which is exactly what a good anti-virus is supposed to do. But if you want something more NSA friendly, you can always use McAffee who announced a few years ago that they will happily turn a blind eye on NSA&FBI malware.
There is disappointingly little information available on jimage so it's hard to compare. jimage does require you to be fully modular while CDS does not. OTOH CDS is quite a bit tedious to set up.
Rooting is needed for backups and migrating your data to a new device or over a firmware wipe. And good ad blocking.

I agree the majority of users make do without this, and so have little choice but to send their phone data to Google servers for migrating / backup.
Why they let undisclosed spies in in the first place?
Forwarding proxy golang
The Y Chromosome's Still-Uncharted Regions
Yahoo Labs was innovative and inspiring. They seemed to make stuff that was useful, wasn't killed immediately and had an independent life. I don't think today's tech behemoths can approach where they were. Maybe it was just the frontier back then...
Leave it to the NYT to write a long piece about the police abuse and not mention the police unions, whose vast political powers are the main force behind the fact that it is so hard to prosecute police abuse, even by a single word.
Why do you feel the need to defend Slack? It was their decision to do this to ensure they wouldn’t be forced out of the corporate market ($$$$$) and, I hate to break it to you, US and EU law are very similar in this regard. Corporations in the EU can listen to your business correspondence just as easily as US ones, and in neither do you have any real expectation of privacy at work.
>social isolation is also increasing in Japan

When was the last time you were there? I spent most of the past month in metro Osaka, as a parent of young children, and I noted:

* Young children freely coming to city parks, fraternizing, and leaving, in absence of any adult supervision, indeed, without any adults other than myself even present

* Groups of young schoolchildren traveling mostly autonomously to and from school among busy urban streets (though sometimes under the watchful eye of many volunteer shepherds along the route)

* Children as young as 8 approaching me to be generally curious, maturely and completely without fear

* Proprietor of a local bar I visited knew everyone around, including my in-laws' family, this in the busy inner-city

* Ample resources and facilities provided by the prefectural and local governments, including staffed play areas and civic center events. My older daughter was broadcast on-air TV with other children attending a Girls' Day event.

* health care including vision/dental costs hard capped to 500 yen/treatment day (~$5) for children under 6

So yeah. I don't think the situation in Japan is comparable at all in any way to what's happened here in the USA. I would not allow even the appearance of my daughter playing alone in my own front yard, for fear of what well-intentioned neighbors might say or do, let alone the boogie-man.
168 pages of New Testament, 44 pages if you remove the fluff, hate and/or bigotry. Sounds about right!
Sql is a bit more "binary" than that - if you can write one query, and read the manual "advanced" isn't really a thing.

However, it is all going to be for naught if you don't understand what is underneath the database - for that I highly recommend "database design for mear mortals" - I think I have bought about 6-8 copies of the book and every single one has been "relocated" (stolen, or not returned or given away).

Understanding HOW an RDBMS works is critical to understanding how to make the best use of one, and then measure the trade offs between any given one.

Unless your starting out with a problem/domain that requires you to do things that might be feature bound - as an example if your working with geospatial data, then by all means that should be a driver in your selection. If your doing basics like sign up, auth, and cms work then pick one and give it a whirl (they are mostly interchangeable at that level).

EVERY database has idiosyncrasies. Learning those takes time, and experiences and sometimes running face first into them.
Not AS vulnerable but in the near future when you search thru voice commands and hear results back, all those google ads that your eyes scan can be thrown out of window.

Here is relevant read: https://www.cnbc.com/2017/01/27/alphabet-investors-voice-sea...