skysight-inc/HackerNews huggingface dataset:
Right.

- The company is bad because it doesn't hire enough black women.

- The company needs to hire people versed in identity politics to critique what they are doing.

- Programmers should be required to take the kind of course that she teaches.

- Programmers should be only allowed to work alongside the people versed in identity politics who can tell them what they are doing wrong.

In short, this is a power grab. "They done wrong, so people like me need to be given authority to make sure that they don't continue doing it."

That may seem like an extreme example, but it is along a natural progression for people whose profession is figuring out what should be complained about. Everyone wants to believe that what they do is important. That they should be given more power and authority. What that means in practice varies by profession. But that is always the tendency.
FLEXPORT - SAN FRANCISCO, CA - ONSITE - VISA XFERS OK --- 50+ SOFTWARE ENGINEER OPENINGS

Flexport is the tech-driven freight forwarder for modern logistics teams. In just 4 years, we've become the #20 freight forwarder on the Trans-Pacific route and the #2 customer of the Japanese carriers. Our goal is to get to Top 10 (and eventually, Top 5) and in order to do so, we need to expand and grow our teams. We're 50 engineers strong with an ambitious roadmap ahead of us. There's a lot of room for career growth, impact, and product ownership.

Some of the reasons why engineers join Flexport:

- Impressive and smart team members

- Work/life balance

- Promotion from within

- Product-driven

Experience Senior and Staff engineers need apply here: https://www.flexport.com/careers/job/535049

We’re also looking for our first SENIOR INFRASTRUCTURE ENGINEER, SENIOR REACT NATIVE ENGINEER, SOLUTIONS ENGINEER, AND SOLUTIONS MANAGER
https://www.flexport.com/careers/department/engineering

OUR TECH STACK:

Frontend: React, Relay, Flow, Jest, Enzyme

Mobile: React Native, Apollo

Backend: Ruby on Rails, Postgres, GraphQL, Python, RSpec

CI: GitHub, Buildkite

Infrastructure: AWS, Python
It was important for us to treat Eve (at least initially) as the whole world, because part of our task was understanding the implications of building programs in this different fashion. Datalog applications have a rich design space for tooling, and after 3 years poking around in the space we barely scratched the surface. The interoperability between a datalog world and the current state of things is another great research question, and one we made some good progress on this front with v0.4, but there was still much left to do in the end.
Great, now you've incentivized coverup of breaches.
No shit. Name any company that does. Until there are serious consequences for leaks like this, no company will take security seriously. There is no incentive. Jail some executives and take their earnings and I guarantee this will change. Short of that, or some other serious punishment, this isn't really even news anymore. Self-regulating industry is a joke.
I've seen an iPad that acted completely normal despite the case separating due to oxygen expansion while under warranty. Worst part, the owner had to get rid of it since she was on vacation where a Apple store didn't exist.
That’s well before my time at Yahoo. By the time I joined, their IT group preinstalled and named every device with a two-word nonoffensive moniker. By then they weren’t giving out 3rd level domains anymore either. :)
That’s quite a lot of required skills! :)
You are assuming this was merely a technical issue that went unnoticed, but in situations like this it is of course possible that there are other issues with process and governance that are coming into play.

If you want something from a corporation, the best course of action is generally to just write (i.e. snail mail) to the CEO, because they are the only person you can be certain is capable of re-marshaling resources to deal with the root cause of the problem, whatever it may be.
Calling Car Pollution Standards ‘Too High,’ E.P.A. Sets Up Fight with California
It is still helpful to have decent names even if you're treating your machines like "cattle" instead of like "pets".

Inevitably, some bug will occur, and in my experience, it usually happens to occur on a machine (rather than all of them at once; I'm not saying this machine is special — the bug could have happened on any of them, and likely exists on all of them because they're all running the same code, but this particular machine ended up being the lucky one to serve that slightly unusual request).

Getting in and debugging the state of that machine, pulling logs, directing a coworker to look at CPU detail "frobnozz", etc. is all easier if I can easily speak or type out the machine's name. "3.dev.microservice" is much easier to type/speak than say, an IP address, an EC2 instance ID, etc.

(I fully agree on not making one-off changes, and not treating machines as pets. But I think that even after that, decent naming has a place.)

And even with cattle, the other way, I still think it's useful for the name to provide some information. I.e., 3.prod.microservice being the third or fourth instance of the production setup of "microservice" is better than say, some random entry from the periodic table of elements.
FØCAL | Cambridge/Boston | ONSITE, REMOTE-possible | f0cal.com

---FØCAL---

Build once. Build everywhere. -- computer-aided design for computer vision.

Next-generation HPC image processing backplane.

We have an innovative team and are looking for outstanding contributors in a lot of areas

- Product manager

- Developers (web services)

- Developers (image processing)

- Developers (compilers)

Feel free to reach out - email in profile
Dendrites can form in both over and under charge situations, maybe it's just that the over charge to short is blamed on thermal runaway instead..
Actors famously have big egos. What egoist misses a chance to hear audiences ooh and ahh at their work? It's much more likely that Rain saw the movie in public a dozen times, but knows it's sexier to downplay his interest.

"Ah shucks, 'twas no big thang."
Demographics information can still be monetized. It's not as valuable as being able to show you targeted ads, but it's not worthless either.
> Because of PCI you can expect they probably do

We can't expect that because they didn't. Rules and best practices do not magically get followed because they exist, and in this case they definitely did not take security (of their customer data) seriously at all.
I'm the author, and I'm somewhat amused by the negative tone of many of the comments. Seems there are plenty of people with resentments towards research here ;)
So my first attempt was 'this is what we do' -a descriptive paper, documenting a technique. The reviews that came back were basically a mixture of 'so what' and 'what does it show' and 'show something of significance' -I had tried to write it as the ur-paper, to establish a technique, and only described in general terms its applicability. They wanted a lot more demonstrable outcomes. I walked away. I found peer review very upsetting. It felt like nobody actually cared about what I was trying to say.

My second attempt was 'this is a specific thing it can do' combined with a much more rigorous academic 'this is the analytical technique' and 'this is a polemic about lack of statistical rigour in results, here is our data, you repeat it' -Which interestingly got panned as 'too much tutorial, too much argument, more results' -which of course this time, we addressed instead of walking away. Result? we didn't get in the first journal/conference, we made the second. I'm reasonably content, but this feels like 'learn the rules of the game' a lot more than 'say something of merit you find personally interesting'

Oh, and 'this technique is interesting' doesn't seem to cut it as a paper subject.
We get around this by limiting our databases to only 1000000 records per codebase. Then we duplicate the codebase 30 times (with tweaks) for 30000000 records.. but at least in the retrospective we'll say there was 30 lines of code at fault, not just 1
If you needed to name a whole bunch of machines, you could use the list of named minor planets ("asteroids"):

https://en.wikipedia.org/wiki/List_of_named_minor_planets:_A

1,479 just in the letter A.
Come on - Panera Bread just isn’t some auto shop in your city.

Panera Bread is a company with over 2000 locations, almost 50,000 employees and more than $2 billion in revenue. They let highly sensitive information about millions of customers -- such as dietary requirements, contact details, credit card numbers -- remain publicly accessible for eight months, despite being alerted to it and accepting that it was a legitimate report. Then, once the media found out, they were misleading about the extent of the problem and didn’t even fix it properly.

There are not excuses for a company of Panera Bread's size, with someone actually employed as an 'Information Security Director', to be this incompetent.
AI is still oh so much like Clippy. In Google, I keep having to change it from All Results to Verbatim. With Facebook, I keep having to change it from Top Stories to Most Recent.

Try UI before AI. Purely chronological will suffer the spam of frequent-posting friends. Group their posts, which can be flicked through as a cluster.

All in all, am I the only one that thinks that the current fashion in page layout squanders real estate? Make the news feed a huge grid, with each post smaller, like one of those photo walls in a hip restaurant.
It almost certainly is. But we can at least say that our universe is a solution. Still isn't guaranteed to help remove the infinite though since we don't know if our universe is just one flavor of an infinite class of parameters - some which may be unobservable in full precision.
My concern would be around the long-term effects of inhaling vapor from heated metal alloys. I doubt that we have enough safety data, given the newness of the tech and (I assume) the variety of metals being used. That being said, I’m no expert so please chime in if you have information around this concern.
Nice, that was a good explanation for your stance. I am not supporting either, just liked the turnout. Obviously this isn't my usual kind of hn comment.
Obat Pelangsing Fruit Plant Asli – Obat Herbal Aman Tebukti
Your general concern is well taken, but clicking on something once will not "define you and your experience for years." The system will respond to your initial click by introducing similar content to your feed, but if you don't click on those stories, the effect will be transient. Failure to engage is itself a form of feedback, for better or worse.
One exception where it's actually pretty useful to have a location-specific name: printers (or any other resource where people really need to know the physical location of the device, like DVD burners, 3D printers, or whatever). It's nice to know what room to go to to find your printout. :-)

Of course then you do have to make sure to rename it if it gets moved.
One kind of "tinfoil hat" argument in favor of gold is that it can easily become an exchange medium in case of infrastructure collapse, I.e. banks and the internet don't work anymore. In that case its value can be immensely larger than what you're paying for it now.
A few years ago, sure - but now, after countless breaches? Cyber attacks are regularly in the news these days.
I'm not saying there should be two investigations, I'm saying there should be two 'investigations' for the purposes of us talking about it.

Nobody here is actually interested in the case because of the implications for roadside maintenance - they're interested because it's a (semi) autonomous vehicle.
It essentially is asserts just more "fluent".

Not sure if I like it or not.
The reply to Dylan's first email is very bizarre. Is it just me or is asking for a PGP key neither suspicious nor uncommon? It sounds like the least scammy request possible. What scammer would want to go through the trouble of PGP encrypting communication?
The Earth's orbit makes it move towards and away from the probes relative to the probe's distance from the Sun.
I had posted it on the other link as well (1), but since it is relevant to this discussion, reposting it here:

Commenting only on the speed of response (or the glacial interpretation of it in Panera's case):
For companies operating in European Union, the General Data Protection Regulation (GDPR) (2) mandates that such breaches need to be disclosed under 72 hours. The implementation deadline for GDPR is by end of May 2018 (~7 weeks to go).

Underarmor, a US-based sports apparel manufacturer, who operates in EU as well, recently had a breach that affected 150-million users, and went public within 3 days of discovering the breach (3).

I believe UnderArmor's case is the norm we can expect going forward.

(1)https://news.ycombinator.com/item?id=16739753

(2)https://en.wikipedia.org/wiki/General_Data_Protection_Regula...

(3)http://www.bbc.com/news/technology-43592470
First screen from the post [1]

[...] will never respond to a request like the one you sent [...]

Dylan has not asked for a bounty or it wasn't a sales pitch! This Mike guy could not even understand basic underlying tone of the message, not to mention some technical issues the problem relates to. I hope Mr. Mike Gustavison is NOT with the company anymore, or at least is off the public-facing keyboards!

[1] https://cdn-images-1.medium.com/max/2000/1*oJEZOkK6qtq2RreBN...

EDIT: okay update from Kerbs twitter -- Mr. Mike used to work at.. Equifax :)

Oh look,the guy my source initially notified at @panerabread EIGHT MONTHS AGO -- their dir. of info security - was senior dir. of security operations at Equifax until 2013. Shocker.

Maybe he should open his own security company... with all of his experience.
I vaguely remember a joke about a radio that didn't have a volume knob because "it's already set to the correct volume".

It's certainly possible to overload people with settings, but I don't see why we don't see a choice of a few very different feed filters to choose from. It's not like any single algorithm can be what everyone wants.

This seems more important than more photo filters, don't you think?
IMO for MBPs there is no such thing as an ‘average user’. That kinda user buys Chromebooks nowadays. It’s almost all professionals and students with different fields and usecases, and almost everyone is inconvenienced by at least one of Apple’s recent choices, be it lack of USB—A, SD, HDMI, mini-DP, magsafe, more RAM, Ethernet, upgradable components or even optical drives.

Edit: Oh and also lack of CUDA support i.e. NVIDIA cards.
Zuckerberg on Facebook's Role in Ethnic Cleansing in Myanmar: It's a Real Issue
For _this_ particular bug, I would have reported in anonymously in private and given them 48 hours before I went public. Vulnerabilities are one thing: you don't want to rush a patch and create more problems when you started with, and it's safe to assume you don't know everything about the systems involved. But direct data leakage is an entirely different matter.
Slight difference between the average auto shop and a company of this scale (billions in revenue) with dedicated security/technical staff. And it wasn't an expectation of an "immediate" fix, but somewhere well within the eight months it apparently took.

Without shaming them and publicising what happened, what recourse is there to encourage better corporate behaviour?
Of course, tons of folks.
And I did not disagree, however if auto driving cars can’t deal with that situation at least as good a humans, then we have a problem. Obviously we’re at 1.0, so things will get better.
Elementary OS is very polished.
This might clarify the title for you: https://www.troyhunt.com/we-take-security-seriously-otherwis...

The title is intended to be a play on the most common response companies make when they experience a serious security failure: "We take security very seriously."

We should start a blog called We Take Security Seriously that links to these responses, just like Our Incredible Journey[1] for acquisition announcements.

__________

1. https://ourincrediblejourney.tumblr.com/
Not if more are taking up vaping than would otherwise be taking up cigarettes.
What cost?

Happy for someone knowledgeable to turn this into a non-rhetorical question.
The death of the newsfeed, the start of the broadcast. Why deal with a feed at all when you can present everything you need live. https://qkast.com
Hoberman Switch Pitch
>Rather than a "small minority that can".

I'd also like to add my voice as one of those who have used linux for over ten years with excellent out-of-the-box support for hardware. Often, linux will even offer a better experience by including support for obscure hardware out-of-the-box. No internet connectivity or hardware driver media required.

I realize my experience is anecdotal. However, for me and many others it seems, linux just works.
> ...it is of course possible that there are other issues with process and governance that are coming into play.

Likely, but shouldn’t the director of information security be given more power to take action? I’d think that if that was my title for an outfit like Panera, and if I couldn’t enact any kind of change in face of a fairly serious vulnerability in the span of eight months, I would resign from said position. Because what’s the point of my job, if that’s what I’m dealing with?
> I think they do actually take bread seriously.

No they don't. They admit on record using same additives as Subway mostly a rubber-type chemicals invented by BASF that make bread more elastic, won't go dry this quick and has longer shell-life. Basically when you eat their bread some ingredients are the same of the tires your car was put on!

Further good read how horrible quality their food is:

https://www.thealternativedaily.com/panera-bread-additives/
The best thing about Boston Dynamics is that their robots don't work. Maybe spot-mini will but their track record is terrible and I'm thankful for it. I get the distinct impression that these self described 'badboys' would happily hand over a fully functional android to the military complete with gun mounts. There are a lot of great robotics companies to work for that are also deeply principled about doing good, this is not one of them.
Credit card numbers are sort of like symmetric keys... anyone that knows your credit card number can also authorize transactions. Why can't we have ECDSA instead?
> Are you planning write a postmortem on this project?

Chris has a keynote at splashcon 2018 about this: https://2018.splashcon.org/event/splash-2018-keynotes-agains...

I'm trying to pen some of my thoughts as well, but it's taken a long time to try and distill some of these things into something comprehensible. Sometimes I don't even understand why we did some things :P

> From my outsider perspective, it seems like you were trying to build a "silver bullet". For example, both FiveSquare Eve and WikiEve look promising. FiveSquare could be a great WYSIWYG website/app builder. WikiEve could be a great note taking tool. Just because they aren't the future of programming, doesn't mean they aren't useful!

I think you're right about that. I think several times we could have taken a prototype Eve and made it a product people would have paid money to use. Many people said "Why don't you just make relational excel, that would go a long way to being a good useful product" and we basically did that in Grid Eve.

But every time we were tempted to monetize some artifact of Eve and call it a business, we had to remind ourselves that what we had didn't really address the original problem: programming needs to be easier. And this was the right move, because if we had stopped at WikiEve or Grid Eve or whatever version and iterated on it until it was a product, then we would have missed out on learning a lot more.
It will be ARM only.

It's not just feasible for Apple to develop new microarchitecture from scratch. Kalamata will license ARM technology. New microarchitecture takes 6-8 years to develop and it's huge investment even for companies like Intel, Amd and ARM.

Currently only Intel and Amd have high end desktops CPU's. ARM is likely enter as third with ARM architecture that Apple is licensing, but it will have relatively low performance.

Apple will likely take a hit in workstation markets for CAD and image processing application market but they are in the position to gain a lot in more common use cases if customers get better power/performance ratio.
.. which actually is the way HIPAA operates :(

Source: worked too many years in "Healthcare IT" and left some companies after seeing how they mistreat PII.
My CenturyLink provided gateway gobbles up 1.1.1.1 as well, thankfully 1.0.0.1 works.
I don't doubt that works that way sometimes... but man somewhere along the line I googled a Nebraska Cornhusker football score and Google randomly brings it up again and again and again.... even when I give it feedback that I don't want that information, it comes back later on.

I feel like I've seen this behavior on other sites and systems as well. I've no doubt the prioritization initially works, but it seems there are other factors at play that seem to bring up old data.

In my case my team is not nearly as popular as Nebraska so I suspect the logic very roughly ends up something like "Ok he watches college football and oh hey this Nebraska story is really popular and stories about that team are big now so here ya go..."
Most people are not very interested in testing how fast their local machine can talk to itself; regardless of how fast your local cache is, it will have to talk outside pretty often (for expiring TTL if nothing else).
Algorithms Can’t Tell When They’re Broken–And Neither Can We
It makes perfect sense to me - he doesn't know what a PGP key is and just read the word key.
I was fascinated by the "circles" approach Google took with G+. It felt like a great solution to newsfeed overload and directional sharing.

But then Google+ failed, and we never got to find out whether Circles worked or not
I went back from a macbook pro 16gb to a macbook with 8gb. I do iOS, web, hardware and TV development. I have not had a problem. I can have xcode, eclipse, firefox, safari, mail bbedit and a few other programs running fine.
This will have zero impact. Most consumers will not care at all. For me, if I need to build something for x86, ssh to a build server works fine. Heck I have an Intel Mac now and do not build locally. Submit to Jenkins and let the build system sort it for me in parallel. I moved to a MacBook because locally the weight / size matters more than anything else. Hacker news is not the tigers Apple market.
Are you aware of hnrss.org? Not my site but one I find extremely useful.