skysight-inc/HackerNews huggingface dataset:
Ask HN: GDPR impact on security researchers and public disclosures
It is my understanding that one can be sued in Europe for simply probing for security flaws, even if one doesn't attempt to access PII or disrupt the service.

Having said this, will GDPR have any impact on the casual security researcher who found vulnerabilities and intends to publish them?

For example, if I were to be sitting on a significant unfixed vulnerability (after a very reasonable period), would waiting for GDPR to be enforced help mitigate legal problems in the event of a public disclosure before patches?
To go to a blockchain doesn't logically follow as a solution from the premise that credit agencies keep data.
IIRC, Egyptian sources were used because the consistency of Nile River flooding meant their calendars are likely the most accurate.
Same here. I've been using btrfs for years so far on my personal laptop and never had any problems.
The zip drive failure rate was less than 1% and the "click of death" had hundreds of causes in the percentage that failed.

You see, the Zip drive had a parked head. When the head came out to read the disk it would "click" as the head left it's dock and came out to the media. If it failed to read the media it would click again as it re-docked. This all happened fairly quickly and was the "click-click" sound you heard when a drive failed for almost any reason.

That proved to be a very difficult problem that ultimately led to the class action suit that I believe was the companies demise. It survived in name for a number of years, but really only in name.

The lawsuit itself didn't seem to affect the company that much but it affected policy a lot. Their next drive could have been the next big craze. It was ready way before compact flash came along but the company refused to ship it because the failure rate was slightly above 1%. We spent a few years trying to reduce the failure rate by fractions and we all know that a few years is ages is technology.
This article is lacking a critical piece of investigative reporting: Has this issue affected anyone who used — with proof! — an Apple Authorized Service Partner in current standing to repair their phone?

EDIT: They’re very clear that it’s aftermarket screens, but that’s no excuse for failing to say it plainly. Authorized shops have tools that can fix the crypto-pairing between the screen and sensor chip. Unauthorized shops don’t. Either we have secure phones or we have insecure phones. Unauthorized service providers would have you prefer the latter.
I wonder if it's easier to manipulate a backup than to inject data into an app actually on the phone -- make a backup, replace the app's data, then restore the backup. You (presumably) have root on the Mac, so finding any needed encryption keys is probably easier, and adding data to an app on the phone doesn't sound easy unless the app/phone provides an interface for it.
I can't say anything about this particular method, but as far as I know generally dating methods are tested against each other.

For instance, when you dig something out if the ground, you can get a rough idea of how old it is just by looking at the layers of rock and material above and below it. We know something about how fast these layers can be deposited, and usually stuff further down is older (not always, but if the layering is disturbed there's often evidence of it). So if you find that your dating method makes no sense for objects with an obvious date range (based on where you find them) then your dating method is probably broken.

Obviously then if you take a leap over to objects that you find that you can only date in one way, you are taking a leap of faith. But in a few years, dating methods will come along that might let you test it in a different way entirely and either corroborate your first date or contradict it.
You’ll get half the value and it remains stable - versus you get twice the value and then it suddenly nosedives and everyone questions your performance as CEO because “you must have made it happen”.

Is that possible?
Realtek.
Maybe one in five, depending on how you define it?

Look, it comes down to this:

Is there something innate about our intelligence that makes it impossible to match except through human brains? That strikes me as something akin to spiritualism. The answer is almost certainly "no." We're not talking about warping space through some hypothetical state of matter with laws of physics different from our own. We're talking about at least human-level intelligence, which is something we already have an existence proof of (us).

And humans are the most dangerous force on the planet. No animal (beside maybe microscopic organisms) stand a chance against a group determined humans. We're nearly unstoppable due to our intelligence. Our we so unique? Is it so impossible that machines could some day (perhaps in our lifetimes) be built which achieve human-level intelligence? Considering the computer advances that have already been achieved, it is clearly a real possibility if not a certainty.

Human-level intelligence is perhaps the most powerful (thus dangerous) thing on this planet. Making a machine that is at least as intelligent (and perhaps much more so!) is clearly something that could be incredibly dangerous, and we know such a thing is physically possible, unlike many things in science fiction.
Do you feel it’s technically superior or just people following the fancy new tech dragon (or something else like because it also lets you spy on employees, if it does, I don’t know)?

(Not that it’s really fancy new tech - checksum AV have been around even since DOS. I’d have thought the best thing would be a combination of the two).
>We’re in a bubble that’s ready to burst IMO

Why do you think that, though? Is it solely because prices are rising very quickly? There's no indication whatsoever that people will stop buying any time soon. Homes are selling >110% of asking price for all cash within days, and supply is essentially fixed.
Contributing to the issue, I think, is the fact that the like of the media/ad industry and the likes of fb have deliberately eroded the idea and importance of privacy and have encouraged this idea that giving up all your data in return for...nebulous...benefits is a really great thing and you should definitely do it! People have been told (by vested interests) that giving up privacy and all your data is the only possible way x/y/z company can survive.

Once this acceptance of zero privacy cemented and we had the Snowden revelations a lot of people seem to have just capitulated: "they already know everything, why bother fixing it" which itself is a fallacy that only results in sort of fulfilling itself.
It's competitive. There's a finite supply of good deals and if you're profiting from flipping this stuff on ebay as a major source of your income, 0500 is just a number.
> Maybe I am just remembering it wrong or didn't look hard enough...

From what you wrote, it's both.
You are welcome.

I should clarify the snapshots remark. The problem with how this interacts with snapshots is that the snapshots containing orphaned files cannot be repaired by software without BPR. They can only be listed by software for deletion by the administrator. Also, for the dataset’s tip, the future tool to repair it can only put the orphaned files into a lost+found directory without the original file names.
It is fair to say KANN "only applicable for rather small problems". However, KANN is not so "similar" to Tinn. Tinn only implements MLP with a single hidden layer. KANN supports a lot more features such as 1D/2D convolution, RNN/LSTM, weight sharing and mini-batching. It is also more optimized.
For instance it could be the result of ptsd from being in Iraq. Or Vietnam. Or Afghanistan. Where is the support for veterans?

It could be mental health - if you can’t afford healthcare you may not be able keep a job. Once you don’t have a job you very quickly end up homeless. Now you don’t have a home, how do you possibly get treatment or a job? Eventually you are arrested and go to jail, where you can get treatment but now you’re an excon so can’t get a job so end up homeless without treatment.

You were kicked out of your home when you came out as a teenager - you’re homeless, may not have even finished school, and many jobs these days have minimum age rules. So now you’re stuck unless you’re one of the lucky few who manages to get support and a home before drugs and alcohol become the only “escape”

Same as above but you’re a kid abused by a family member, foster family, ...

Note how all of these paths eventually put you in a position where you cannot escape homelessness. You cannot get healthcare or a job without somewhere to live unless you’re very lucky.

So instead you end up cycling through prison, which in just a small amount of time costs much more than covering the cost of housing in the first place.
Most people don't have the IQ, psychometric personality profile, and circumstantial history (the right/rich family, friends, networks, etc.) in conjunction to succeed.

Romanticism, per Goethe and Nietzsche, has always erred toward the side of spiritual sickness - it's often nothing more than an opiate to distract oneself from the mundaneness, difficulties, and responsibilities of authentic, lived experience.

Say what you will of Jordan Peterson, but I believe his experience as a credentialed psychologist and counselor is worth considering as well - one is more likely to preserve his sanity by pursuing (perhaps unpleasant, but stable and providing) responsibility rather than upheaving his life with little more than a mistaken impression via survivorship bias.
Lisa Gades review of the T480, T480S and X1 Carbon
https://www.youtube.com/watch?v=gOsERJzMhLc
Perhaps you need to turn that skepticism inward. There are good answers to your questions.

Yes the dating techniques are verified by corroborating it with a lot of other evidence such as tree rings as well as other dating methods, it's also well corroborated with entirely different fields like geology, history and physics.

As for being close to the surface, there are quite a few geological process that can come into play. There are places on earth that have fossils hundreds of millions of years old on the surface. This is not in any way remarkable.

> So I suppose a similar thing applies here in dating science, except, it’s impossible to validate for another thousand centuries

This sounds alarmingly like an argument you'd get out of Ken Ham. Are you a creationist that has trouble accepting an earth older than 6000 years? The debating style of asking seemingly probing yet actually well understood questions screams creationist (and climate change denialist) as well. You also fit the profile of creationist and climate change deniers, engineers that think they're smarter than the actually are and don't know what they don't know.

As for finds like this, despite the headline it's completely unremarkable and fits easily within what we know of human migrations: https://en.wikipedia.org/wiki/File:Human_migration_out_of_Af...
I come from many years of mdadm use, sorry :-)

Just so I understand, I should be able to run through whatever the final recommendation is for detecting orphans on the new pool with identical results as if it were run on the original pool, then?
Write a simple computer program to calculate your return over time. Assume 7% average real return of the S&P 500. See for yourself.
You read his comment right? He publicly posted "...It's time to strike back. Let’s burn this motherfucker’s house down." About a police officer. It is not right to post that.
People were saying the exact same thing before the crash in 2007.

Not saying a crash is imminent, but prices are even higher than before last crash, even taking inflation into account.
Could you elaborate on the intuition gaps that people have? I have a pretty good understanding of color theory and the physics/biology behind it, but I have no knowledge on the pedagogy of it. Hence learning about the more common false beliefs sounds fascinating.
Another example from archaeology:

https://en.wikipedia.org/wiki/Japanese_Paleolithic_hoax
How would this be different from a purpose of any other company on the face of the Earth? They all exist to make money. And killing off your customers (or poisoning them) is not necessarily a winning long-term strategy.
A full resolver locally would just send out the same plain DNS queries -- it doesn't have any local database to resolve from.
I don't think productivity while fatigued is good at all. But I do think that when one is tired, it may be possible to be less anxious than usual, since one's mind doesn't get distracted by tangential worries as much as usual.
Did you file a bug report?
Randall's done a lot more with color... https://blog.xkcd.com/2010/05/03/color-survey-results/
> but have we ever verified our dating techniques over 5k years? 10k years?

Yes.

> What’s to say that the hot desert sun and strange weather patterns, radiation or whatever couldn’t skew the dating

Lots. For a start - only one of those would possibly affect the outcome of testing and would also be detectable.

> It seems further unlikely that such a bone from, 85k y/ago as they say, would be so close to the surface

Your incredulity doesn't affect the outcome one way or another and unless you want to dispute the fact that artifacts that are much older are often found on or close to the surface it's not based in any way to the real world.

> In mechanical engineering we don’t ever “trust” the calculations until they are thoroughly validated

And neither does the science around these dating techniques. In fact they're usually better supported than any engineering is.

> It seems backwards to hinge all our science on it when (AFAICT) it hasn’t even been validated itself!

And here's the thing: You're incredibly misinformed and that's why it makes no sense to you.
>People were saying the exact same thing before the crash in 2007.

People were buying overvalued homes they couldn't afford in the middle of nowhere on subprime adjustable mortgages, which caused the crash of '07 when the ARM rates kicked in and they couldn't afford payments. This is a fundamentally different situation.

Now, a very small number of elite highly wealthy people from around the world are treating American housing stock as their investment vehicles since there is literally no other better option in 2018. Where we go from here in terms of affordable housing, nobody knows. But I really really doubt we're going to see a housing crash any time soon. It's just simple supply and demand.
Think of it this way, you probably have a lot more energy to use willpower to keep yourself focused when you are rested vs not. When you are so tired you’re physically incapable of focusing on anything else flow can also work, but sometimes the arrow is aimed wrong
Know a guy who was "fired" (de-contracted) first day of a new gig in London for having the K&R C book on his desk.
Bugs, improper testing, and bad assumptions are not the same as incorrect knowledge.
Embracing Video Conference Interview for Better Results
I believe the pricing growth is fueled by tech wage growth which is unsustainable.

I also think the tech sector in general (especially any company that is driven by ads) is due for a major correction soon, if not a full burst.

I can’t tell you exactly why I feel it, it’s more an emotional thing, but I don’t see a better strategy than that when trying to predict long-term housing prices.
I didn't make it personal, he (or she) did when they said "I deleted it a month ago". The given reason was stated fairly ambiguously.

If that person doesn't want to see the narcissistic photos of others, they can simply unfollow those that post that kind of stuff. If, on the other hand, they find themselves indulging in narcissistic displays, well that makes a little more sense for why you would quit for reasons of health.
To someone less knowledgeable in that field, why do you say that?
> We’re in a bubble that’s ready to burst IMO.

Not necessarily. Bubbles are based on speculation. The last bubble was powered by sub-prime mortgages, which is what burst.

The Bay Area has the problem of ongoing immigration, a very highly paid demographic, and housing market that isn't keeping up. Simply, Offer < Demand.

Offer isn't looking to catch up any time soon [1], and demand crashing would mean the tech economy will have crashed as well (or, you know, The Big One).

[1] I'll have to sleuth up the link from 6mo-1y ago about how maximizing consctruction at this point would only keep up with demand, effectively only preventing a further increase.
What is the price to rent ratio?
I think there's a little bit of confirmation bias mixed with a bit of jealousy toward younger developers.

The fact is, technology doesn't really matter that much to the success of a business. Business sense, ability to spot what's next, and a fair bit of risk taking attitude are what matters. Older engineers don't fare better than younger engineers in starting a business not because they're worse at engineering, but that after a certain point engineering skills simply don't matter.

SAP, Adobe, IBM, all have terrible engineering culture, but rake in money. Facebook started with janky PHP. There are only rare instances where the technology itself was the differentiator in business. Maybe if you're working on advanced AI or weapon design or something
try opening the article and then paste this into your browser's URL bar:

javascript:window.location.href='https://m.facebook.com/l.php?u='+encodeURIComponent(window.location.href);
First off, I agree that, in principle, a backdoor is a backdoor, and vulnerable is vulnerable, period. However, there's A5/3 weak, where everyone can hack it, and there's Dual_EC_DRBG, where the right secret is necessary.

What was interesting about Dual_EC_DRBG was that the default points served as sort of a secret master key to generator state leakage. It was harder than usual for another party to gain illicit access, leaving the vulnerability largely in the hands of the NSA.

It was some pretty interesting math, harder for unintended (by the NSA) people to take advantage of, and still, of course, a crippling vulnerability.

At this point, I'd be hard pressed to trust the NSA with anything security related, as they have demonstrated different priorities.
I agree, but my point was that there was significant period of time when folks could and did buy houses here.

Now if the parent poster had said housing stock has remained (generally) constant, I'd be in agreement on that.
>So easy for anyone that has suffered throught Android development.

The pain of Windows phone development was significantly worse especially when you consider they kept on changing it every year because of their inferior development environment and tooling.

>Starting with Eclipse, then rebooting the whole development environment just because some management guys happened to be InteliJ users.

Google switched IDE's. Microsoft changed their development environment and tooling each time they decided to osbourne their still born OS.

>NDK is treated as a 20% project, done by an handfull of engineers.

Well, at least they stuck with it instead of chucking it to the curb each year and starting over.

>Devs were left in the cold when the migration away from Eclipse was decided. It was only due to the coincidence of Clion being developed, that Studio eventually got C++ support.

Isn't being left in the cold an annual event for Windows phone developers?

>The decision to use Gradle has made "how to optimize builds" a recorrent topic in any major Android conference.

This is in contrast to the Windows phone .build conference where there were no sessions because no one was building Windows phone apps.

>Google teams like Android development build tools so much that they rather use blaze, throwing yet another build tool into the mix.

Isn't choice good.

>There isn't a single release of Android Studio or the Support Library, that isn't followed by bug related complaints on online forums, despite being several weeks, months, in testing phase.

Because XCode and Visual Studio are bug free when new versions are released, right? Oh wait.

>Their initial emulator implementations was so lousy, that it required the public shame of Genymotion and Microsoft doing a better job for Google actually improving theirs.

Google has to support 3 platforms unlike Microsoft who couldn't even support 1.
It's much harder to bike in SF without an electric assist. I biked for 2 years in Seattle with no problems, moved to NYC and enjoyed the occasional trip over the Williamsburg bridge. Now in SF and I've only tried to bike once. It was fun bombing the hill outside but I immediately hit another hill and another.. I've essentially given up on riding here.

I use Jump regularly to run errands when I'm downtown and it's much easier to pickup/drop off bikes than it would be worrying about my own expensive bike getting stolen. These aren't quite dockless as they have to locked up properly and are tracked by the app/gps.
Can someone explain the US laws of export control around cryptography in layman's term?
I suppose it depends. Is the average property value increasing faster than the salaries of the people that fuel it? Sometimes folks will pack into a house, pumping up the total salary of the house over time, so you'd also have to consider cohabitation trends.

If property values goes up faster than salary per home, you'll end up with a precarious housing market subject to the whims of investor sentiment. Workers won't be able to move in and back up the house valuation if they are priced too high.
True, but ~45 may be a golden age again. By then your kids may be starting to becoming self sufficient, retirement is still 20 years off, and you've lived through a fair number of financial problems. Your retirement plans might be coming together and the world is starting to look more rosey. Plus, you find yourself feeling like you're nearing the end of your "youth"; you're aged but you still feel good. Perhaps you become less worried about the risk and you're well trained and ready to take on a complex challenge.

I can dream.
Sorry, I didn't mean to sound grumpy. I just wanted to say that as a C#, Python and Javascript developer, I am put off by the arguments put forward in the landing page.

Saying that is as forgiving as Javascript, as productive as Python and as robust as C# is a better way to sell the language than saying it is C# minus typing, Python minus easy syntax and Javascript minus problems...
DNS over TLS uses a new port. If you're on an enterprise network, its firewall probably blocks that port.

DNS over HTTPS is being discussed to resolve that problem. The downside is it doesn't really exist yet.

DNSSEC doesn't do anything for query privacy (in other words: most of the reasons you'd use DNS-over-TLS aren't addressed by DNSSEC). DNSSEC is a bad standard whose primary impact on the Internet would be to replace the LetsEncrypt CA system with a PKI run by world governments. That sounds like something InfoWars would say, but I promise you, DNSSEC is weirder than InfoWars.

For now, the right answer is DNS over TLS.
And the fundamental issue that many here have is that they assume people are too ignorant to make informed decisions. That a user is free to give up their privacy is not automatically a bad thing. It's often parroted that people are willingly giving this information up even after breaches and malfeasance is made known. It's not because they are ignorant or naive, it's because they've made a conscious risk/reward choice.
$ cat /etc/profile.d/timeout.sh
TMOUT=600
readonly TMOUT
export TMOUT

That file is created on (almost, see below) each and every machine I administer as part of the initial configuration/provisioning process. By itself, it's nothing spectacular, but it sounds like it would have prevented this incident (as would have several other things, of course).

For the hosts with csh as the default, it's:

$ cat /etc/profile.d/timeout.csh
set -r autologout=10