skysight-inc/HackerNews huggingface dataset:
From the linked SE thread:

>One way to work around it is by using SHA-256 first and then BCrypt the result. In your case it would be something like

>hashpw(sha256('pass'), salt)

And if that doesn't roll with you, ignoring the extra characters and giving a warning when the password is set is still a way better UX than forcing your users to remember the arbitrary password length limitation you picked.

"My password for this site should be 'horse battery staple correct', but it doesn't fit. I can type only 'horse battery sta'. Let's see, oh, it doesn't work. Guess I've truncated on word boundary. But did I include the trailing space?..."
Exactly, and sites like Reddit make money on the same sort of thing. It wasn't controversial when Facebook and Google became arms of the Obama and then Clinton campaigns, but now more people are turning on Facebook after learning that their info was sold to the Trump campaign and companies and so on through companies like CA.
Essentially admitting that the amount of information harvested was not unauthorized but rather by design.
Exactly this. This is not a one-off. This is exactly what Facebook exists to do.
this is on spot 1 on the front page already. https://news.ycombinator.com/item?id=16623835
You don’t need to flip the voters, just get them to not show up, and get more republicans to show up. This isn’t about politics, this is about buisiness interests, and professional reputation.

Some examples of ads using this technique:

http://amp.timeinc.net/fortune/2016/11/03/text-vote-hillary-...

https://www.nytimes.com/2017/11/01/us/politics/russia-2016-e...
document.getElementById("password").value = "myvoiceismypassword";

var event = new Event('change');

document.getElementById("password").dispatchEvent(event);

done
Show HN: curldiff – Find the differences between two curl requests
I understand, but the error may be in how it interpreted what it sensed. This is callous language, but if the models interpreted the pedestrian as trash on the street, then how it responded (driving over it) is not inappropriate.
CA may have created retargetting lists and segmented users out to create target lists and lookalike audiences.
Unfair in the sense of paying business to relocate, not that the folks in other places don't deserve it. Some of it has been tax "dumping" at below cost.
I almost didn't believe you because their own password page says to use mix case, but I just tried it... and flipping case totally works. Crazy!
>>I seriously feel like I’m missing something here, why isn’t Facebook fully behind getting to the bottom of this?

Simple: stock price. Even now, FB stock is down nearly 7%. So Facebook will try to limit the damage as much as possible until it is no longer to do so. After that, they will "fully cooperate" with the authorities.
Anyone know how this is handled between Boeing and Airbus? Can we mandate the same mechanism between Uber and Waymo?
Amazon is getting a growing percentage of direct product searches but Google still processes the majority of consumer searches, be it at a diminishing rate.
There are only two paths from here - an escalation of the scramble to real world driving hidden under self-serving rationalisations, ("the bigger picture") or a step back to some industry self-regulation, where self-driving just does not happen till the sensors, the maps and the algorithms are much much much improved.

We know very little about the circumstances here, apart from the obvious tragedy, but given that we learnt from Tesla that you cannot rely on cameras alone, whatever is learnt from this must be shared amoung all the industry and serve as the baseline for future.

I would prefer an outright ban on driverless cars in real world settings (until perhaps each competing car can safely navigate the worst sensor data other companies can offer) but as a minimum we need a neutral clearing house similar to the airline industry.

There are on this forum enough industry insiders, plus a sprinkling of regulators that a global self-regulated path could easily be forged.
I'm not much of a social network user. A few forums and a barely-used Google account are as close as I've been willing to go. But it seems to me that they're just crying out to be regulated as a utility, if they're going to be allowed as a for-profit company at all.
From the CEO of Crambidge Analytica: https://www.youtube.com/watch?time_continue=164&v=mpbeOCKZFf...
This is the elephant in the room. U.S. based interests spent billions to influence public opinion here and abroad.

But less than $1 million spent by a Russia media organization (to maybe attract viewers?) and some trolls tossed the election? I’m more than skeptical.

This is a distraction campaign if here ever was one.
> Mitigations include browsers firing CAs and severely impacting their business (so effectively, there is regulation)

Nit: Not when the browser developer and CA are part of one entity. Excepting some major change to corporate structure, there are presumably no or very nearly no circumstances under which Chrome will permanently remove the Google CAs. Their behavior is therefore essentially unregulated WRT Chrome users.
How about your parents make you a joint account holder on their bank accounts to help them with their finances as they age, and then you allow a fraud to drain their account because you're ethically compromised?
You're not underestimating anything. Rather, the vast majority of developers (much less everyone else) have no familiarity at all with the challenges that self-driving tech has to overcome.
How is it off topic when we're discussing "current-generation self-driving" vehicles?

It's a point of clarification that the originally listed study doesn't take into account, but which could be important to the broader discussion. Especially considering that while this vehicle had LIDAR, the other autonomous vehicle fatality case did not.

> as are basically all other prototype fully-autonomous vehicles

As I pointed out with examples above, no, they are not.
I get that feeling a lot.

I was around on the internet back in the 90's and the stuff that came out in the Snowden revelations wasn't that suprising (Echelon was widely known back then but unconfirmed), We (meaning techies) have had the suspicion that they where doing this shit under the "just because they could, they would" approach.

Where Snowden was incredibly useful was that it confirmed it in a way that was hard to deny since it was straight from the horses mouth.

We might suspect that CA was doing shady shit but stuff like the C4 investigation confirms it and the confirmation is a valuable thing.
Does propaganda work or doesn't it? The idea being pushed that since it does, only approved propaganda should be let through. Trump winning is proof that there's a need for regulation of propaganda.
I haven't had to completely reset my machine in probably five years. Occasionally, I think I should come up with some kind of ansible script that would take me from a bare bones of Ubuntu installed to having all of my software installed and reconfigured.

I do have a script that I wrote that will take me from a default terminal/VPS to ready to code in no time.
It's sad how susceptible people here are to propaganda[1]. You can be completely against H-1B and still find these ads deplorable. Don't let malicious actors brainwash you.

[1]: https://www.splcenter.org/hatewatch/2010/10/08/anti-immigran...
And it’d be morally unacceptable to allow public deployment of software that has not been sufficiently tested. As other comments have pointed out, self-driving cars have undergone ridiculously little testing. In fact, based on only the objective statistics it is very unlikely that they are anywhere near as good at driving as humans.

There is no reason self-driving cars can’t be tested in private. Companies can hire pedestrians to interact with the cars, and the software can go through the same certification process that buildings and vehicles currently go through.

It’s a false dichotomy to say that you can either have self driving cars or minimally safe and accountable development, but not both.

EDIT: Here is a link to a thread replying to a parent which is now auto-collapsed. https://news.ycombinator.com/item?id=16620968
Won't the people of the internet just use this for Source Factory type porn?
Your experience is different from mine then. I have seen a few real world deployments and they are all either completely offline signed or with the signer completely hidden.

Are we talking about the public CA system or TLS in general? The former should be fairly obvious that it is useless in the hards of end users, as Google even had to hard code policy for their own services in their client. The latter argument would depend on what type of attack we're discussing. A wide public attack where you have "hundreds of millions" of clients affected would be impractical to keep undetected in any system. Manipulating a single connection with stolen keys is likely to stay undetected in any case, but where having the information cached at least is a possibility.
My windows machine suggests using TWINUI for pdfs.. whatever the hell that is
Who remembers how the Obama campaign's social media analytics and strategy were breathlessly praised?
> I've heard artists are scared of it due to how amazingly awful some editors managed to make the NURBS editing experience, but with a decent editor it really wouldn't be a problem.

That's simply not true. I started getting into (high end) 3D in the early 90's. I've probably used every NURB or higher order surface modeling tool under the sun since then.

In fact, there are many amazing modeling tools for working with NURBs or other higher order surfaces.

They just all don't even come remotely close to polygon modeling when precision is secondary and workflow/ease of use is paramount.

So the answer in the VFX world, for years, has been subdivision surfaces. They have almost all of the good of bi-cubic patch modeling and almost all of the good of polygon modeling. What's more, existing polygon modeling tools can easily be upgraded to subdivision surface modelers by merely enforcing 2-manifold topology and adding the ability to display an [approximation to] the limit surface in real time.

Some of the schemes have nice properties. For example, after one step of Catmull-Clark, the entire surface consists of quads. And when treating each local grid of quads as the control polyhedron of a cubic b-spline patch (not a NURB but an UNRB, a uniform, non rational b-spline patch), the surface of the patch is equal to the limit surface that would be obtained by the subdivision scheme.
A step further from the sharing economy or “Uberization” model|The Fintech Times
Part of what he's describing is coincidence/confirmation bias, but another part of it is probably some sort of cognition that happens at a level of the mind the driver is not conscious of.
I guess this had already been brewing for a while:

"After his day-to-day responsibilities were reassigned to others in December, Mr. Stamos said he would leave... He was persuaded to stay through August to oversee the transition... executives thought his departure would look bad".
I've actually never had a hard time finding dumb TVs. (I have three 2015 model Samsung dumb TVs on my desk, the smart TV variant cost about $20 more per unit.)

Where it becomes unavoidable is if you want certain features. Like my LG is the last generation of 3D TV, and one of the only TVs with Passive 3D on a 4K panel. I found that all 3D TVs were smart TVs, but if you're just looking for a panel, numerous brands will sell you a panel.

Also, note that smart TVs are only "smart" if you connect them to Wi-Fi. It's not like they have cellular radios. Don't give them Ethernet or Wi-Fi, and they'll do pretty much just what you want them to.
Its corporate speak for "The PR department and/or my boss gave me marching orders to delete them."
Even an article as shallow as this raises some red flags about the code base:

* A common base class is rarely a good pattern in C++. Such classes have a tendency to bloat.

* A custom string implementation is a cliché for new C++ adopters. Everybody thinks they need to reimplement std::string. Most are wrong.

* The code as shown separates declaration and initialization of local variables, which decreases readability and safety of the code.
/bin/rm -r -f (asterisk) (meaning delete everything in UNIX/Linux) is hardly a random "line of text"; it is clear sabotage. And to simply say, "the backup system had failed" is uselessly vague.
No different than Spez @ Reddit saying he knows the Facebook accounts of anonymous users accessing adult content and can cross-reference that with their reddit accounts when they are logged in and sell that information to third parties. Reddit probably makes more money that way than any other, but that's just my guess because they clients are loaded and include sovereign states. Tons of sites are no better, probably worse. A huge chunk of the internet is about trusting to few untrustable flawed human beings (that's everybody) with way to much information, and therefore power.
Are you a current customer of those banks? I'm not, either.
I hope they fix that bug where when I press up at 18th channel it goes to 23 and then if I press down it goes to 22.

And if I eant to go to 5 from 6 by pressing down I need to wait 15 seconds. If I don't wait it skips 1-5 range and lands on channel 1300 something.
You are perhaps over-reacting. It's not a bullshit story, it's real. Yes, it is just more of the same but that doesn't make it any less real. We shouldn't allow one instance of evil to slide just because other instances have gotten away with it.

Anyway from a tech standpoint this might be exciting times. It could very well be the end of $FB. I doubt on its own it would be enough, but if someone has been working on a social network for the past few years now would be a good time to do a big publicity push? G+ are you listening!!
Clearly a lot of butt hurt, faithers can't form an intelligent rebuttal, so, down votes.
Yeah, the red, black, and white color scheme was certainly not chosen by accident.
Kind of, and it's why I liked him initially. But with every Facebook screwup and his defense of that screwup with bogus excuses (possibly directly from Zuckerberg, but irrelevant), I gradually started losing my respect for him, just like I've lost my respect for Carmack. Carmack could have been working for SpaceX and living his biggest dream (working on space stuff), but instead he's wasting his time and potential in a democracy-destroying company like Facebook.

History will not be kind to those that continue to help or defend Facebook to keep its influence in the world and power.
Not the way WebOS did it.

It was really an early state of JS based applications that pre-dated a lot of current JS application development.

In some ways, the ability to build entire mobile apps only in HTML/JS still remains unique compared to iOS/Android.
"We're smart enough to not fall for it but the proles stand no chance" doesn't pass the smell test as anecdotal evidence.

What they are doing is what marketing people have done for years, only we know from years of data and experience that these "profile and target" ad campaigns are barely above baseline for RoI.

The classic one is people who move house are more likely to go on to buy a new car in 12-24 months so they buy house sale data and target you with car info.

Supermarkets do tons of profiling based on your CC and purchase history.

None of this is to say that trying isn't scummy, but we shouldn't lose sight of the possibility that CA could be peddling snake oil.
That seems deeply unexpected. Was there any resolution or response from Nissan in any of the cases you read about?
After running a US/Europe/China based startup for 4-5 years I’d be happy to answer your questions for free (not on my phone though). Feel free to email me at my handle in google’s excellent email service and I’ll do my best when I’m back at the laptop.
I don't think the argument was that Clinton voters switched to Trump. More that Clinton voters were persuaded to stay home. Which is a perfectly valid campaign strategy -- e.g. why campaign funds are so vital to a successful campaign. But political advertising is required to have disclosures. That foreign actors were allowed to push propaganda with the aim of influencing the election with the unknowing assistance of Facebook can still be considered a problem, no matter which candidate it was for.
Not in UK terms "as I recall it from reading the highway code) its over taking slower moving traffic in the lane to your right.
> isn't enough

Nothing is ever enough. America has the richest poor people in history, and yet it's a crisis that they aren't even richer.
This is a very subjective topic, as each developer has their preferences in tools, editors, etc. Also there needs to be consideration for the local dev environment for quick/dirty prototyping and the "official" dev environment for the product or company you are working with.

My personal/local dev environment consists mainly of brew, docker, sublime text, python, golang, ipython, jq, Vagrant/virtualbox, and my git repo of dot files. On a new mac i can be setup in about 2 hours with the majority of the time being spent in downloading or building software in brew.

My work dev environment consists of a series of tagged docker images in a private repo. These are golden masters of what we use in beta/test/prod. Has a continous build and test pipeline that is powered by a CI/CD tool (aka jenkens, circleci, drone.io, etc). Assuming they have credentials and are granted access, new developers can be up to speed w/in 15 mins.

Lastly, I want to share my internal struggle with reducing and optimizing the multi-day dev environment bootstrapping without discounting the inherent value it brings. Shouldn't a new dev run through the bootstrap process manually to gain intimate knowledge about the tools and systems that they will be working with for the next 1-2 years? Just seems like a worthy investment. Honestly, the ramp up the product architecture and code layout will take longer and this remedial task creates an opportunity to get their hands dirty, update outdated wikis, and potentially improve processes based on their experience. As i can see the merit on both sides, the tie breaker for me is team culture.
The Great Python Refactor of 2017 and Also 2018
I miss every Palm device I've ever owned. PalmOS was far more of a productivity platform than much that came after it.

The headstart the Palm folks had in Mobile OS/vision went into WebOS.

If I had the ability to run WebOS on a Pixel or Google device I would seriously consider it.
The Saga of Heartland vs. The United States Beet Sugar Association
Very different. CA offered an unethical and possibly illegal service for sale.

Show me where Spez did that and I'll agree with you.
I’m in California, Bay Area.
Which is why I am only a little bit surprised Uber beat Waymo to killing a pedestrian. Waymo is way too arrogant about it's capabilities, moving way faster than is reasonable or safe, and they use misleading statistics to insinuate their system is more capable than it is.

Note that they already know their cars will need help driving still, which is why they've assembled a call center for remote drivers to take over their cars in Arizona. Of course, those remote drivers likely can't intervene at nearly the speed of an onboard safety driver.
"stood down" sounds very waltish behavior to be.
Let’s take the extreme example where a bug in a self driving semi truck leads to it mowing down 50 people on a busy sidewalk. How are the victims to get justice? In almost all incidents besides a human truck driver having a major health incident, that driver would go to jail but it seems that there will be little repercussions beyond fines for autonomous driving companies. I think once a mass fatality occurs people will scream for autonomous driving execs and programmers to be held liable.
I don’t know about cars, but there is precedent for company officers for being criminally liable for negligent homocide. Even in non-homocide cases, individuals sometimes face criminal charges, as the Volkswagen engineer behind the emissions cheating scandal found out.
Isn't the low amount of money a key part of the allegation? That foreign actors were able to have such (alleged) influence so cheaply and without disclosure is a problem. If it had cost them billions to have that kind of influence, then it would have been an unfeasible or at least inefficient strategy.
Facebook would cease to exist.

I love it! Where do I sign the petition?
Show HN: #LikeNoise: Make FB more expensive for advertisers targeting you
Dear god, however did we survive before Facebook saved us all???
> We need to avoid treating deaths as progress in the pursuit of better things

Au contraire. Go read building codes some time. There's a saying that they're "written in blood" - every bit, no matter how obvious or arbitrary seeming, was earned through some real-world failure.

The death itself isn't progress, of course. But we owe it to the person to who died to learn from what happened.
Sounds like another billion dollar EU investigation.
Why are you so sure? Such absolute certainty -- certain enough to dismiss the loss of life for the greater good -- is the cause of so many bad things.

I'd like to believe this technology will save 20000 lives per year. But today is a time for humility and reflection.
To clarify, no where in my comment did I say we should stop development for making our roads safer. Consumer accessible cars are already far more aware of the surroundings today and will continue to gain more awareness as time goes on.

If you think rushing to market, in some self-inflicted arms race for fully autonomous vehicles is morally acceptable to you, AND human lives are lost in the process, then I find that fascinating.
That jelly keyboard was incredible. If there were a competitive Pre on the market today, I'd buy.

My brother purchased the Pixie. It was kind of neat, too, but... that rubberized backing started pealing off and it started to get pretty gross.
Reminds me of my bank as well, which also makes using a password manager awkward and raises questions able how they are storing the passwords: "Enter character numbers m, n, o from your password".
Not sure where you got most of that from the article, but I think we’re going to find that the data does support the theory that voters were intensely profiled and targeted with stories to make one candidate seem “unpalatable” or another one more attractive.

We’re fortunately deep enough in this story that we may get a concrete answer as to what the extent of the efficacy of this operation was.
Best workaround for all the problems of the class discussed in the article: stop trying to be pixel-perfect.
It is both an over and underhyped field depending on the area you are looking at.

HUGE difference between consumer self driving car [Everywhere, at all times] and the Machines as a Service [Geo, time, weather-fenced operations][1].

Waymo appears to be at the head of the pack; Sacha Arnoud, Director of Engineering for Waymo gave a talk a few weeks ago at MIT[2] and gives a good idea. We are about 5 years out until these start rolling out as MaaS (machines as a service). Probably 10+ years for level 4 highway operations for consumer models according to Frazzoli.

[1]Emilio Frazzoli, CTO of nuTonomy https://www.youtube.com/watch?v=dWSbItd0HEA
[2]https://www.youtube.com/watch?v=LSX3qdy0dFg
For me the best thing about scss is the ability to nest selectors. This makes your code a lot easier to read and more organized. Of course having functions, mixins, extends is also nice.

Saying scss is pointless because it outputs regular css is the same as saying that es6 is pointless because it can be represented as regular es5.
Curl TWENTY YEARS, 1998 – 2018
Innisfil Ontario saves $8M yearly using Uber as alternative to public transit