skysight-inc/HackerNews huggingface dataset:
This is great, since there were certain stores that would require my signature when I was using Apple Pay but not when I used a credit card. Completely negated the convenience benefit of contactless payment.
What NASA Has Been Doing About Open Science
MDI causes cognitive dissonance, it doesn't remove it!
Australian here. Within Australia, all credit cards are now PIN for almost all transactions (exceptions for stuff like running offline transactions).
In that situation?

Optimally.

It plays out optimally.

If everyone suddenly installed and ran an aggressive ad-blocker, we could strangle all of the tracking networks overnight and the Internet would become a noticeably nicer place.

People who refuse to concede that allowing ads is functionally the same thing as inviting third parties to monitor your browsing patterns and invade your privacy are being disingenuous.
http://toroid.org/vodafone-smtp-mitm too.
Vodafone is nudging the users to turn on https.
I'm kind of upset the squid game doesn't have an on screen counter. I played for about 15 minutes... pretty sure I got 30+
Along with the other suggested methods you can type type `open ~/source` or `open ~/pem` from the command line. I use it all the time to open /tmp in Finder.
TL;DR don't rely on humans to "do the right thing", even if they're supposed to know what they're doing (i.e. ops people).

As part of a team (and an organization) that practices "devops" heavily, all of our devs do ops. We maintain the separation using an oncall/ops rotation and only touching prod from designated "ops" hosts. We also follow a "2 person" rule when touching production. We use a secrets management system to deliver credentials to hosts and alarming setup when the "wrong" hosts (e.g. dev hosts with access to prod creds) have access to certain creds.
Funny thing is that you never say you're 'leaving' Google. This is the difference between Search(AI/ML/NLP) and social media
Wealthy people are those who do, for example.
As for the POS devices looking identical:

I've worked for a large retailer who has purchased a sizable number of verifone devices (hundreds of thousands). The devices do have NFC-enabled readers in them to support Apple Pay, however, the contract that the retailer has with Verifone specifically says that Apple Pay is disabled: The retailer does not want to pay for the development cost for enabling Apple Pay in their Point of Sales stack.

It's a great add-on for Verifone: A couple of bits get flipped in fipay and in their backend and boom: Apple Pay (as long as the payment processors support it).
Total Commander is not free, is it?
Wiivv is hiring software and computer vision engineers
Cthugha pre-dated WinAmp visualizers by a couple of years, as it could take sound input from microphones and CDs. https://en.wikipedia.org/wiki/Cthugha_(software)

(This is a minor nitpick about the background, not the main part of the article.)
> and be happy.

That certainly wouldn't make advertisers or publishers happy. "Quality ads" (from a consumer perspective, I understand what this means) don't make any money, because they aren't nearly as effective. So yeah, if a business carefully balances their spending with their ad earnings, switching to quality ads could destroy their business.

> Running businesses based on shoving shit down people's throats isn't really a smart move to begin with

My house, my rules. If there are strong market forces that are dictating that publishers change what kind of advertisements they show, so be it. Until then, you're choosing to visit my site, for free. In exchange, I serve you ads that I want you to see, and you get the content you came to see for free.

> there were warning signs already, first with people just ignoring the ads (because there are so many), then with ad blockers

Nothing about this is going to change unless people like you (and I) stop leeching off users who view ads with our ad blockers, or we start paying for our use. People don't ignore ads, by the way, they're quite effective. That's why there's a (massive) market for it.
I still don't understand how this differs from list view…
Their shareholders would sue in a nanosecond.
>>The only things that are checked are the digits of the amount, and the account number.

Ha! Not even that. In the cheque clearing process, about the only thing that ever gets checked (even by automated processes) is the MICR line (account/transit and institution number).

Everything else (EVERYTHING ELSE) is just assumed to match whatever the person entered at the ATM/image capture app/teller window. The bank considers it your problem, as the cheque writer, to catch any issues on your next statement, and then they'll review the image of the cheque (in many jurisdictions now, the physical cheque is destroyed pretty early in the process). You should really never ever give a cheque to someone you don't trust. It's pretty silly, but that's the reality.

Although, fun fact, it's the cursive amount that is the 'official' one if there's a mismatch between that and the digits, since it's much more difficult to subtly adjust that.

Source: work for an institution that processes literally millions of cheques (I'm not in that area, but yeah).
An app could look in the "favorites" list to get the same info, which probably is available.
Yes, but if I was in Finder I'd expect to stay in Finder to perform a file-related operation…
The Command+, preferences window lets you change the default folder. I don't think I've really experienced the other things you list.
Visit Japan and you’ll hear ATMs play a little tune as they hand you money. The sound design everywhere you go is amazingly and thoughtful. America can be way too brutalist.
Shouldn’t there be a remediation step of making it impossible to login into another users’ session? E.g. generate a random number for every provisioned user and add it to the token.
My thoughts exactly.

This seems like a very slippery slope.

Who can say for sure that editing the genome of a plant in a certain way could mimic selective breeding?
This is why I've grown to consider some actions to taint terminal windows, and tainted windows must be destroyed asap.

For example, administrative access to vault requires a root token in the environment of the shell, so that shell is tainted with too much access. Having an ssh-command to a productive data storage also taints a shell, because it's really dangerous to accidentally up-arrow-enter and then you end up on a productive data storage.

History has been a bit annoying with that, but since I installed histdb, that has been a non-issue.
https://learning-rust.github.io/index.html

https://rustbyexample.com
Pencil Factory-personalised pencils-promotional pencils
Amazed to see how transparently they have written the post. I think we all can learn from such outages[0]

[0]: https://about.gitlab.com/2017/02/10/postmortem-of-database-o...
Every AAA studio closure takes down a AAA game in development, e.g. Visceral's unnamed SW game as of couple months ago.

A few recent released AAA flops: MoH:Warfighter, Sea of Thieves, Titanfall 1 (and 2?), Battleborn, For Honor, Prey, Lawbreakers, Paragon etc. etc.
Cashier's checks are frequently fraudulent. You've been lucky if they worked for you.

I use a credit card much more often these days, because the CC company takes fraud seriously. The banks don't. At least my bank did not.
Introduction to automated deployments with Ansible
Except that we can't "move somewhere else." Or so least no one has provided a valid plan for such a "move".

We have massively increased yields and cultivated nearly all the best land just to keep pace with the human population boom.

By all accounts, that boom will continue for some time until it peaks and the only viable way to feed that many people is to increase yield density.

If we can grow that density even faster than the pace of population growth we may even be able to turn back some of that land and mitigate the vast habitat destruction we've perpetrated on the biosphere.

IMO, supporting GMOs is one of the most environmentally concious things you can do.
It’s not about being able to “mess with [your] users”. It’s about sites that don’t need EU traffic anyway being unnecessarily exposed to fines for even accidental violations of a very complex law.
“Backpage helped me prolong a bad situation and keep my abusive addict piece of shit ex alive”

yay backpage
Interesting, I thought I remembered something about this, but I always forgot the details. It's worth mentioning that you can discover a lot of these details by opening the edit menu, pressing the option key and seeing how the menu items change. On the Mac, the Option key is frequently used to distinguish related actions: e.g. clicking on the wireless or sound icon will display one menu while option-clicking on either icon will provide another, more detailed, menu.
For all the reports of people leaving and constant breaking scandals, unfortunately, the actual damage to Facebook still seems to be negligible. They've been confidently informing investors that their stock price is ok and membership is rosy.

If Facebook comes through all this rather unscathed then it reinforces that these big companies just don't need to care. It also says much about the values the stock-market supports.
TLDR: someone linked to all the images of an S3 bucket from google sheets, and Google proxies loading the images through Google (smart security process). The worst thing here may be that google ignored the Cache-Control returned by S3.

Where is the actual security incident?
The published article itself (paywall):
https://www.nature.com/articles/nature25979

And EMBL announcement with short video:
https://news.embl.de/science/commonly-used-drugs-affect-gut-...
Image Augmentation: Make it rain or snow. Modify photos to train Autonomous cars
Indeed. Chip & PIN system at least in Europe has been a way to shift the abuse risk to the customer away from the banks. It's a lot easier to contest a signature than prove that you haven't been careless with protecting your PIN.
...Or one could just run one's own DNS servers.
That's true (and an admirable practice for the reasons you specify), but at that point it's no longer a matter of "here's a $50, keep the change".

I and many people I know carry cash infrequently because of the ubiquity of credit card acceptance.

Anyway, none of this is to disagree with you, but just to point out that your example might be less common in the U.S. than you think.
In addition to cmd-shift-g, cmd-shift-h will open a new finder window in your home directory from the desktop and will change the current directory of any finder window or file dialog to your home directory.
>be prepared to either: a.) pay your worth or b.) see many of the sites you use go out of business or have their ability to operate severely diminished.

Can't wait for this. The other day Facebook's COO said the same, if users want privacy they have to be willing to pay for it. Yet Facebook offer no such paid service.

Some (most?) people are happy to trade their personal data for free access. I am not. I prefer to pay for services I want. There are almost zero services where this is an option.
Understanding Q-Learning, the Cliff Walking Problem
> Do you think someone needs any education at all in a subject to each it?

Of course I do. I am just bemused by teachers having masters degrees yet be unable to teach any freshman college level class.

> Do you think someone who has never studied calculus should be able to teach it?

Freshman calculus is not rocket science, and I expect someone with a masters degree to be able to handle it.
Why not build your own comp?
While reasonable, a filename typo couldn't result in inserting genes from the chickenpox genome into a potato with traditional cross breeding, whereas it could with CRISPR (at least at some point with digitally specified synthesis like in the Venter artificial cell).

By having an approval/verification step they could avoid accidents (not that chickenpox potato is a realistic scenario or threat).
Data Scientists, Join McKinsey’s 24-hour Healthcare Analytics Hackathon 14 April
Ask HN: Any recommended resources on content marketing?
Holy Flying Spaghetti Monster, those are exciting developments! I've been messing around with Crouton to run VS Code / .NET Core / PowerShell Core, but I'm not very comfortable with how that negates many of the security benefits of Chrome OS.

Crostini will be a game-changer.

I hope that stuff isn't limited to Intel -- I just bought an Acer R 13 and quite like it.
"In democracy it's your vote in elections that counts; In feudalism it's your count that votes" --Jallberg

http://m.timesofindia.com/india/China-mocks-Indias-democrati...
No one who is involved in this kind of work thinks it's the solution to all environmental/production/health woes. Such technologies are however part of a holistic approach.

Additionally, things like climate change (including what's already in the pipeline) are so rapid, that similarly rapid responses are paramount. We could stop generating CO2 today, and traditional plant breeding practices would still struggle to cope with maintaining yield due to the inertia in the system. What we need are effective technologies and and a focus on addressing ecosystem/environment problems, not or.
> The best content - done by passionate individuals for no monetary reasons - will stay.

That's assuming these people have other jobs (which will have to somehow be funded by something other than ads or selling data -- bye bye 90% of Silicon Valley.) Having other jobs means they won't be able to spend as much time on it and quality will suffer.

> The good content will be kept afloat by donations.

Donations often don't stretch beyond what's required to do the work that's been done before (people don't often donate once the donation goal has been reached.) This stifles growth.

> The usual corporate content will be written off as "marketing expense".

So companies that derive their value from the content they produce and sell ads on have to write off their entire business model as a "marketing expense". Good idea. Say goodbye to virtually all online publishing that isn't paywalled already.

> The ad-supported worthless crap will disappear.
You mean like Google, YouTube, Facebook, Spotify, Twitter...?
Agreed. This library is literally a collection of regexes.
> Couldn't the client send SNI after the DH and then the server authenticate the secret?

That means you can't use sni to route your request to a different server.
It is a social consideration. Would you trust the government and jurisdiction of Holland or would you rather use DNS services offered by Turkey?
Tinn: A tiny neural network library written in C99
> What if we could have first class SSL certs for IP addresses?

They're not routable.
Explain to me how some of the world's most popular services would operate without advertising revenue?
That's crazy: Linux isn't rightly usable even now 20+ years later, and you ran it in mid '90's when it could barely boot a shell reliably. And Slackware no less, which meant dumping tape archives everywhere instead of package management.

Crazy.
I've been using a big smiley face or stickfigure for years now.

Always gets a smile out of the people accepting it.
IPs are shared, they don't necessarily tell you what site you're accessing.
Wow, the issue with the signed token is very interesting. Found it surprising the authentication method specifically wasn't mentioned in the remediation.

Food for thought: the security issue wouldn't have happened if (1) travis used UUIDs instead of sequential IDs as a pkey, or (2) used a secret token for auth instead of a signed (presumably) JWT.
I made a quick build: https://i.imgur.com/ZOcOBsl.png

It is neat and i like how it remembers the sizing and open folders, but it really shows how much Microsoft has neglected Win32 and MDI in particular: the theme is still the same used 12 years ago in Vista and while i am not a fan of the Win8 nor the Win10 theme (my favorite theme is the classic theme), the inconsistency sticks out like a sore thumb. And of course beyond the lack of a visual update (that would take perhaps 1 hour to fix), there are visual glitches like this one: https://i.imgur.com/Vfm5ndc.png (notice the black corners on the window at the right - ironically they happen because of the non-rectangular shape of the titlebar, which would not be the case if the Windows 8 or 10 themes were used since those are rectangular). And i suppose at this point it doesn't make much sense to mention missing features, like double clicking the top edge to maximize a window :-P.

Which sucks because i always liked MDI applications. I know that some studies or whatever have shown that novices often get confused, but personally i find the idea of having a "group" of windows inside the application that manage them to make more sense - especially for visual stuff, like image editors where i can open two views of the same document in different zoom levels. And i also find being able to move and resize the subwindows in any way i want (not limited to splits and such which i find more annoying and a waste of space than helpful).

Having said that i always always disliked, from the first day i saw it, the visual change from Windows 3.1 to Windows 95 to make minimized windows look like tiny titlebars (they were called buttons but there is nothing button-y about how they ever looked in any version of Windows from 95 to today) instead of icons. mIRC adding a taskbar-like panel was a much better idea (you could say that novices would again be confused, but from what i remember from the late 90s and early 2000s, that didn't stop people from using mIRC :-P), but just sticking with icons would be fine too (i think icons inside the MDI area were supposed to be used for something else that i don't remember now, but i do not think any program ever used that).

EDIT: added a tiny feature to search multiple wildcards separated by semicolons :-) - https://i.imgur.com/vi7BI7B.png

The code style is kinda weird though (3 spaces for each indentation level?) and seems that several comments are out of date :-P.
So the argument here is that without backpage she would not have been able to efficiently prostitute herself to support her abusive heroin junkie pimp? I'm fairly certain that the argument "backpage is super effective" is the exact argument used to take it down.
> There is no jurisdiction if those companies don't have a presence in the EU. None. Show us international law where this would be applicable.

If you are doing business with people in the EU, then you have to be incorporated or otherwise have agreements (explicit or implicit) with the EU countries you are doing business with. GDPR applies to you or you will no longer be able to do business with the EU. If a company wishes to not have their ability do business with the EU revoked, they have to comply with GDPR (including its fines) as well as all other EU (and local) laws.

I really don't understand how this concept is difficult to grasp. Countries give you permission to do business with them -- if you break their laws they can revoke your ability to do business with their residents. Most large companies would probably lose much more money breaking off ties with the EU than they would complying with GDPR fines. If you continue to violate a country's laws you could be extradited and so on.

> somehow their laws magically apply to everybody in the world "doing business over some fiber".

If you are providing a service to a group of people, for money, then you are doing business with them. Pretending as though this is not the case just because the process is conducted through under-sea fiber cables rather than mail couriers is ridiculous.
How Japan's Rail Network Survived the Earthquake (2011)
Btw. same goes the other way around: if you don’t want or need US customers, it might make sense to block people from the US based on IPs, because if you do business with US citizens, they can sue you according to US laws with their ridiculous high fines.
Maybe this will help:

https://apple.stackexchange.com/questions/161867/file-browse...
It's a bit odd to set CSP headers but not TLS.
American Airlines orders 47 Boeing 787 Dreamliner valued at $12B
Yup - the same applies to any resource or service. As costs go down so o barriers to entry.

The article makes a good point in pointing out that people often overlook this when talking about efficiencies leading to lower consumption of resources.
I think it would be a great feature, too. I'm all for privacy, but also understand the reality of importance that online advertising plays. It would be really interesting if something like GDPR would allow a company to claw back all of the data it provided to 3rd parties if a user decided to change their account from free to paid. Would be really messy technically, but I like it in theory.
> and in case of popular applications, even if you don't, you can be sure that someone already had and would speak up if they noticed anything off.

You can’t be sure of that at all. This isn’t just an epistemological point either - people are still routinely finding vulnerabilities in the most widely used open source software that were introduced two decades ago. This is despite extremely lucrative incentives for finding them. In many cases it’s because no one bothered to look; in other cases it’s because the numerous (ostensibly qualified) people who looked weren’t capable of finding them.

Open source software is a red herring for security. Its benefits are vastly overstated. You gain an incremental improvement in the theoretical ease of review, but this almost always comes at the cost of the overseeing organization having fewer resources to devote to security because its more difficult and uncommon to monetize open source software.

Overall I’d say open source software is at best weakly correlated with improved security posture. As it turns out most people don’t inspect their code before running it, and this includes those who fully buy into the many eyes aphorism. Of those who do inspect it, approximately all of them are woefully incapable of identifying real vulnerabilities beyond all but the lowest hanging fruit. Those who remain are typically extremely well paid for their expertise and will only look at software which features a sizable bounty.

Unfortunately most open source software, including widely used open source software, does not have a bug bounty and isn’t on e.g. Google Project Zero’s radar.
That's not what the article is proposing. Still, your home ISP may not be able to, but the ISP of the machine you're SSHing into can.
Interface Hall of Shame – QuickTime 4.0 (1999)
That is actually very funny. Silicon Valley material.
I've to completely disagree. Only way to learn to "speak" is to be in environment where you can only speak the new language and you have to speak.

You can read 10 years and won't be fluent. You can watch for 10 years and won't learn a thing. I've been watching Japanese animes before high school. Do I speak Japanese, no! Only 10 or so words.

One thing that cements this the fact grammar is something that's not absolute.

Again from experience, very important, you can take 5 semester of esl courses and still sound like you came over here last month.
4 habits that will unlock the creative person in you
For me, using FLO apps is more about freedom from lock-in.

You're right; I don't usually vet apps past the simple "is it FLO?" check (although I will do this before accepting a suspicious permission). However, I do keep a copy of the source of most of the apps I use. As a result, if it were to come out that the app is doing something shady, I could remove that part and keep enjoying the functionality of the app, whereas with a proprietary app I'd be SoL.

I also know that the developers know this, so they have an incentive not to do that stuff if they don't want a competing fork to take off. That is the main reason why I trust FLO apps more.
I just want to know why the author dropped the 'o'.