skysight-inc/HackerNews huggingface dataset:
If you are interested in a list of steps you can take to avoid this happening to your data, here are some suggestions. I don't believe that any single measure is sufficient. And I also believe that it's valid to balance the strictness of your controls against the the amount of protection you really need.

1. Vault the passwords. People and machines should fetch passwords on-demand using identity credentials.

2. Create a read-only database account. In all cases, use the account that matches the need. Running reports? Use the read-only account.

3. Restrict access to read-only and read-write database accounts. Provide this account information to a limited set of people and tools.

4. Provide a fairly straightforward way for people to get temporary elevated access. If it's easy to get elevated access, then users will not be tempted to "hold on" to elevated access longer than they should (e.g. by leaving a terminal open for a very long time).

5. Rotate the credentials of all the accounts regularly. This ensures that temporary elevated access will become long-term access. It also greatly reduces the harm created when credentials are leaked, exposed, or forgotten about (e.g. in an environment variable in an old window).

Note that none of the steps above require a heavy investment in automation. You can start with basic (even fully manual) processes for key management and access management, and evolve to automation as you grow.

Finally, keep in mind that this type of accident is not just a "small company" problem. Recall this AWS ELB outage on Christmas Eve of 2012 - https://aws.amazon.com/message/680587/

"The data was deleted by a maintenance process that was inadvertently run against the production ELB state data."
I believe that second link is now at https://doc.rust-lang.org/rust-by-example/
Digital marketing vs. Traditional marketing
> The current Android approach of granting all permissions the app need at installation time leads to a lot of abuse like this. Just ask for everything because the user just wants to install it and does not read the permission dialog anyway.

This hasn't been true for some years now

https://inthecheesefactory.com/blog/things-you-need-to-know-...
2.7 b$ is not simply cost of doing business. 32 b$ revenue doesn't mean 32 b$ profit, once you deduct cost you are left with a lot less. Under GDPR the maximum fine grows to >4 b$ and that will hurt even more.
How come it was enough to set a different database URL in the development server and BAM you're connected to the production database?

Do they share the same password? Or is the password in the URL?
Exactly. I dont believe we are there yet because there any sexy alternative (seems like nobody is trying to make social networks nowdays).

But seriously facebook is fragile. If lot of people started to leave then they would be gone. It is not diverse company like amazon or google.

They are lucky they own instagram.
You need to be a resident of the EU to be covered. Also,EU nationals living abroad wont be covered.
In Netherlands it's better for you if you are older than 30 because your salary requirements imposed by the government are much higher(4.404 euros per month) than those for under 30 y.o. guys(3.229 euros per month).
Broadband Bonding Service
Mushroom networks Broadband bonding is a unique broadband service. Mushroom networks Broadband simply fuse multiple broadband connections together to give you a much faster and much more reliable connection. The bonded connection combines the bandwidth capacity of each circuit connected, in both uplink and downlink directions and presents itself to the network via a single cable and public IP or address range. With bonding, your VPN, Remote Services, bandwidth sensitive applications and cloud-based applications will perform more effectively. In addition, your business broadband connection will be protected by multiple paths giving you a level of redundancy over a single service connection. Given we can bond any type of service from any carrier; your level of redundancy is greatly increased.
What if we paid for Facebook – instead of letting it spy on us for free?
Show HN: Samovar, a pure-JSON template language and renderer
Hahaha lol I thought Phoenix Framework had suddenly jumped from 1.3 to 2.6
Ready Player One. Pages of atrocious dialog and a complete nostalgia fetish that got in the way of some otherwise interesting ideas.
The database URL usually has the username and password as well.

For example: postgresql://[user[:password]@][netloc][:port][/dbname][?param1=value1&...]
I've read posts stating the exact opposite here on HN. So clearly it is subjective.
I don't think it's open source but this is easily the best visualizer I've ever used, in terms of graphics and simplicity in usage. And it's free.

http://www.plane9.com/
I write “please check ID” on the back of all my cards.

I’m astonished when someone actually does check my ID.

It happens maybe once or twice a year.
This used to be true but the latest generation of mirrorless are competing well on the battery front. Flapping a mirror around vs EVF, while I wouldn't want to give up my optical viewfinder just yet I think it's only a matter of time until they become niche.
'Agile Qualitative Research' is not an oxymoron
Unfortunately, not currently. I'd say of the missing "common" features that people expect out of languages, lambdas are next on my implementation list. But for the most part, my near-term goals are focused more on platform support (both the compiler and for exporting) and localization.
The page referenced is an April Fools Day joke.

"We are finally at our April 1 Release (v4.1.2018)."
In terms of production quality, sometimes it takes years of iteration on art side and tech to get the look.

You want to nail it down early, but in real life concept artist does the image, artists model and texture the scene and then art director comes back and says, those bricks don't look good. Engine guys say, if we put more polys to make them look good, it is going to kill performance. Then someone says, look we can write this shader using this new GPU feature which is going to make everything awesome, but it might not work. And in any game production, there are 1000s of cases like that, where the thing you want does not exist or you don't have people who have the knowledge. So you just roll into production hoping shader works out and that you are going to hire people who are going to solve XYZ.
Generally the corrections were between independent clauses, and I made some research on the matter at that time. It's possible that I just mix the name of the rules since I got them from the back of my memory.

Thanks for clarifying these up. Will keep these in mind too.
Small Victories. If we can get people away from Facebook into a more open ecosystem, that's already a step in the right direction.
The biggest issue is not so much parsing the grammar itself, that part is relatively easy, but reasonable error handing and recovery from errors. I think that is why they use something that is hand-written.
Euros I presume?
I have also been a similar to tool for automatically extracting (informative) features. What I am trying to understand is whether it is possible to store the learned feature definitions for later use. For example, I want to learn interesting features from a large data set and then I want to apply these feature to smaller data sets, say, for prediction.
There are a few cards available in the US that do chip + PIN. Debit cards also work.

I have one credit card that I mostly don't use anymore, and keep the account open only because it does chip + PIN so I can use it at train-station kiosks in Europe.
Of course when they get the payment electronically, it's hard to dodge taxes. Where I live I am usually asked whether I want the receipt or not, which is printed in any case.
In Netflix's case I think that's the point. A ton of their originals had terrible ratings. The new system doesn't display ratings anymore so their originals look better.
Dengan Modal Minimal 10Rb Anda Bisa Menghasilkan Jutaan
That sounds ideal. Please make sure you do this, and convince many of your colleagues and compatriots to do the same. Maybe finally give us some breathing space to grow our own popular services in the face of US dominance.

I used to think protectionism was stupid, but after seeing how The Great Firewall[1] is working out for China and their services, I’m not so sure anymore. The big problem with any inbound restrictions is retaliation, but if you can manage to make a country restrict exports themseleves, well, yes please!

I’m looking forward to seeing EU competitors flourish.

[1] Since visiting China I’m convinced TGF is about protectionism as much as it is about filtering. Internet to any non-China service is terrible and unreliable. The result is simply you can’t depend on it, so you choose a Chinese provider. This has clearly worked out very well for some of their companies!
This article has it completely wrong. I work for an email tracking company and you can still have tracking tools but the ballpark has changed drastically for collecting user information.

Sadly, I feel this will hurt the ones without a proper IT force the most.
IANAL but I believe the GDPR is tolerant of incidental traffic. So if an European accesses a local job board in South Korea, the EU will not go after the Korean company and demand compliance. Now if said Korean company is running a job board for Berlin, in German, charging in Euros, etc. it's a different story.
The Good Habits of Successful Entrepreneurs
Russian here. Entries in gov's blacklist of sites should include IP addresses, domain names and optionally URLs. SNI isn't that helpful for ISPs because they could block traffic by IPs rather using DPI (IIRC only one NIR is using it, but for DNS rather than TLS itself).
AU. Is that Australia or Austria? Was your first comment based entirely on your the experience of your friends?
Yeah they must mean new accounts, if not then I'm lost. I guess it could have reset autoincrement but they said it didn't. The only other thing I can think of is that the signed token that's put in localStorage is sent to the server like "someuser|sometoken", the server inspects sometoken, says it checks out, then takes the client at its word that it's someuser.
Many ML methods require solid knowledge of probability and statistics. Strangely this course does not cover that.
A sign-in can result in an automatic account creation when using federated identity.
In theory, yes. In practice, its license disappointed.
"European countries" is a pretty wide net. Some you'd enjoy living in, some you may not, and preferences vary.

I moved to Finland because I had paid a visit before and had "fell in love with it," so to say. And even though it's an advanced country with an extremely high standard of living, getting in and settling was surprisingly easy.

They did ask me for a degree at the embassy, but I just gave them a good resume and recommendation letters (whom they never contacted). I told them I'm self-taught and don't need a degree. Their official website speaks vaguely on the subject of degrees, but their law does not explicitly require it. If you're in the IT sector, you mainly need a high salary and an offer from preferrably a stable company. That's enough to qualify you for a visa called "Residence permit for a person employed as a special expert."

This visa grants you a lot of freedom. After moving to Finland For example, you have 4 months to choose to stay in your new job. If you decide to leave the job, this visa allows you to stay in the country to find another job. Doing that with a non-specialist visa may cause you trouble when you decide to extend your stay the next year.

The visa also easily renews after one year of working, giving you four additional years, after which you can apply for permanent residence or citizenship.

Since you're a Canadian citizen, the process should be even easier for you. Basically a company gives you an offer and relocates you to a hotel/airbnb in Finland right away, so you can start working before the authorities decide on your visa. Once you're in Finland, you can visit the immigration office and apply for residency there.

Once you have your permit, you can go ahead and get a permanent place to live, which most companies help you with. They usually lend you the rent deposit, pay for a hotel before you find a place, and help you with your rental contract, etc.

There is very little paperwork in the whole process. Setting up a bank account is easy. Taxes are done online and are mostly automatic. Health insurance is granted from day one. Additional insurance is cheap and a single phone call away.

The whole process was so smooth that most of the time I didn't even realise there was a process there. It was only after I had moved to Germany (a country that I love to live in and hate to do paperwork in) that I realised just how well oiled the Finnish system really is. And I hear they've made it even better since I left :)
Hey Adam, I'm not attending NAB this year - Shachar and Hadar would love to talk (shachar@peer5.com or hadar@peer5.com) in terms of technical people attending :)
While that was originally true, I doubt it's true for 3G and 4G. Would appreciate it if someone who knew for a fact would comment.
Using more traditional techniques, you insert a selection marker (e.g. an antibiotic resistance) which helps you selecting clones where the modification successfully took place (all the clones which do not have the antibiotic resistance will die after applying the antibiotic, leaving only clones where the modification was successful).

In a next step this marker is usually removed, but this still leaves some "scars" (e.g. so called "FRT scars", a short DNA sequence), that could theoretically be used to prove that modifications were made.

Because CRISPR-Cas9 is very efficient, these steps are not needed anymore, so in theory there are no artifacts which would hint that any "non-natural" modifications would have occurred.
Because they wouldn't be adding genes from other species.
If it’s a chip card and the vendor doesn’t use the chip, then they are responsible for all fraudulent transactions.

If they do use the chip, then the card issuing bank is responsible for all fraudulent transactions.

This rule was supposed to go into place over a year ago. But most places couldn’t be bothered to update their equipment, so it had to be postponed.

Even now, many places still can’t be bothered. Makes me care about them just that much less.
Don't just shorten your URL, make it suspicious and frightening (2010)
Birth rates are already massively dropping in the countries that can afford it, use it, and have no religious objections to it. This is not a technological problem.
Barcode is how it works in Europe. Recently, also smaller bags for groceries are being taxed in many countries as there are compulsory reduction quotas to be fulfilled.

It's really important for the environment and frankly, the majority of groceries don't need any bag as they have skin.
That seems like a reasonable explanation to me.
Nikon's SnapBridge app is an abomination. There was a recent upgrade that improved things, but it's still unreliable, even for providing the camera with GPS data.
In the UK cards moved to 'chip and pin' in 2006! Fraud in a 'customer present' scenario is very low at our stores. The last fraud in fact was a foreign card that didn't support chip and pin. I can't believe Visa and MasterCard have not made it mandatory world wide...

...except card fraud lossed are recharged to the merchant so perhaps they don't care?

Out of interest there is a special exception for disabled people who cannot use a pin pad btw...
It looks like you're using Visual Studio 2015. Could you rewrite it into .NET Core so that it can run on Linux?

I like your idea.
Also, there should generally be more MDI applications. I use the Otter Browser for this one feature.
For sites like google, blocking IPs would meet resistance.
Nations and NGOs are doing this. Many are working very hard to spread contraception and reproductive hygiene. The growth has been significantly curbed by this effort with peak population estimates being revised down several times.

But many societies have difficult to breach social norms regarding even talking about sex. social norms are very hard to change and we've made amazing progress in just a century.

But it's possible we've reached something like a hard limit on how quickly we can change people's beliefs.

I for one haven't heard of any new revolutionary psychology that will help move this along faster.

We have to tackle this problem from all sides.
This always applies every time when building new roads but is always ignored by governments.
Internet load Balancer Devices
Mushroom Networks provides Bandwidth aggregation of wireless WAN links for portable and mobile Internet solutions by Internet load balancing devices and broadband bonding devices. We are the leading Industry with bandwidth management and balanced load network solutions to optimize the Internet for reliability, speed and cost. By Server Load Balancing products Mushroom Networks gives Network management solutions for ISP's, SMBs, branch offices and enterprises. Small & Medium Businesses; Standalone Truffle provides cost effective dual WAN router for high speed Internet connectivity for companies that require high-end Internet connection speeds. Hospitality: Truffle Network Appliances provide an optimum solution for providing super fast hotel Internet services and bandwidth management. Mushroom Networks ‘combines with multiple network service providers to make the Broadband bonding to give the end user with great bandwidth through channel bonding, Internet load balancing and server load balancing.
Maybe. But I don’t think it helps. The only difference now is that you have to invest your own time to realize that a show is not worth watching.
If you had it at 10x you weren't really watching it.
You're entirely right insofar as (eg) an Android developer will learn iOS far faster than someone without mobile (or any other ui kit) experience. But the specifics are different enough such that it's hard to do both to a high level. Or perhaps I'm just speaking for my own limitations -- I do iOS & Android (native & a bit of react native), but I'm definitely less of an expert with either (or the various server things I also do) than I would be if I specialised.

I was offering AWS as an example of another platform rather than a language. If you're called on to (for example) implement a bunch of microservice type stuff, there's quite a bit to learn about RDS/dynamo/lambdas/IAM etc, and then all the quite complex deployment stuff to make it truly production ready.

I think in all these cases, the language is a relatively trivial component. I generally can get quite productive in a new language (that isn't greatly paradigmatically different, ie. allowing for exceptions like Haskell, Rust etc) in a couple of days to a week. A new platform? More like weeks to months.
Why are so many clients still running stub resolvers?

Just type "apt-get install unbound" already. You won't miss that 200 kB resident memory.
I think we killed it :)
Impressive... Any fact-checked this claim?
Reminds me of this:

"Why Auto Increment Is A Terrible Idea" (2015) https://www.clever-cloud.com/blog/engineering/2015/05/20/why...

(update: link fixed).
With youtube it's clear what a thumbs up means, that I liked the video and I only do that with the particularly good ones. With uber/lyft it's not so clear, is adequately driving me to my destination supposed to be thumbs up worthy?
وظائف خاليه للمحاسبين فى عجمان
I like the 'styled editing' - not seen that before. Is that difficult to achieve?

Agree with the other points on the focus on Go vs functionality.
When Linear Search Is Faster Than Binary Search
Call girls in Kolkata
>CC company takes fraud seriously.

On behalf of the cardholder they do. When a cardholder complains the card company just reverses the payment to the merchant in a 'chargeback', sometimes months later. Then the merchant has to appeal to get it back. So no the credit card companies don't care about fraud.

I would ask for cash...
Population is increasing fastest in the least developed areas. And without economic development, it generally doesn't work to tell people to have fewer kids. And parts of Africa seem stuck. I don't really know why.
To whom do you give your consent by the way? Is it the domain or is it to a company. What if your sales and operations departments are organized into different companies, do you have to give consent twice?
I know that the web wallet for NANO uses wasm to generate hashes, and is _much_ more performant than the JS equivalent.
Well, I agree, but that's definitely a totally bipartisan scam. It's not just the loan subisidies, though. A huge amount of federal policy building over 70 years shovels tax money towards "higher ed". Most major schools are de facto defense contractors.
I have large hands and so I've always had to put battery grips on mine, but as that improves the balance with bigger lenses I never minded :D
I got downvoted, but I was right:

> At launch, there'll be one passive Thunderbolt 3 cable that supports Thunderbolt, USB 3.1, and DisplayPort 1.2, but with a max bandwidth of only 20Gbps.

https://arstechnica.com/gadgets/2015/06/thunderbolt-3-embrac...
The best part is how WSL is installed from the UWP app store.
Microsoft open sources winfile code: File Manager for Windows 10 now available
In Germany, payments with signature are legally just a direct debit (that's the small contract you sign on the bill, the reason there's so much text on there). If the card was stolen, the merchant takes the risk. The account holder can get the money refunded for a very long time (think 3 months but at least several weeks after the monthly statement).

Most stores have an automatic system where they require pin if a payment has bounced before and in random intervals. But using the direct debit system instead of PIN is so much cheaper that even higher fraud rates don't matter much.
Eponymous reviews are a double edged sword. One the one hand there's trust: other customers know it's a real person assessing a service they actually used. On the other hand that person can't be 100% honest because there are social repercussions.

Making the reviews private (as the study suggests) may solve the social pressure issue but it will damage trust (how do I know the 2 stars are legitimate and not a company's way to oust specific contractors/landlords/etc?)
headline should read "a mile away"

also i don't think that methane comes out when a human exhales.
This is extremely relevant and overlooked. Sharing economy relies heavily on ratings for trust. That's literally the only thing that separates Uber from Taxi services and AirBnb from hotel services, and why it is considered OK that they don't have to go through the same licensing and vetting process. I am surprised that the companies themselves are not as concerned about this. This whole gig economy is going to fall apart real quick if this isn't brought under control.

Edit: I think I see why the companies don't need to be too concerned. They only need to remove the worst actors. The ones that could get them into media (e.g, someone ends up with an Uber driver showing criminal tendencies). For that, this system probably works. Anyone who didn't make you feel like your life is at risk is a 5-star. This situation is unlikely to change unless there is competitive pressure on these companies. So it is very important to prevent these companies from monopolizing the sharing economy. Once older cabs and hotels are gone, and these companies have monopoly, we could be left with no option but to take an Uber/AirBnb with unreliable, terrible and probably even dangerous "service" and no legal recourse.
AFAIK, London also has zero subsidy for all the TfL managed transport, and most of the (mainline) rail services receive no subsidy too.