skysight-inc/HackerNews huggingface dataset:
Disable UPnP in the router settings. In theory, that should close the hole.

Disable remote maintenace / web access. Many router web UIs have exploitable flaws that can be used to bypass password authentication.

Ensure that you are always running the latest firmware version. If there are no up-to-date versions / the router is too old, you might complain to the ISP. However, they might try to sell / rent you the latest and greatest router model then.
I'm quite confused about the situation and attack vector you're describing. Could you explain?

If you had direct (root) access to the hardware, you can replace firmwares/BIOS, which is what we are discussing.

However, as I'm suggesting, if that machine was only ever provisioned with a VM, the bad actor is not given access to the hardware directly (hypervisor bugs aside)
Yeah this is a huge part of it, also the public nature of complaints on social media wasn't helping them. They were referred to as the mcdonalds of pubs elsewhere here but the food quality is much worse; its all microwaved packets from filthy 'kitchens'.
Masayashi Son and Softbank have the history of greatest lost of net worth ever:

https://www.bloomberg.com/news/articles/2017-10-11/how-softb...

So, I wonder if everyone who is following Softbank's lead will have the iron stomach to take those kind of losses, if market crashes.
I don't use WebOS anymore so I don't know its current state, but I doubt it because it's not the same team working on it anymore.

Back in the early '10s however it had things like usable widgets on the home screen, application cards, gestures instead of buttons... which all landed in the two major OSs years later.
Yes. It's really important to develop native apps. In our side, no. We have no problems about this. But about User Experience It's really important to develop native apps.
Facebook to release ‘unsend’ feature
Previouslies: https://hn.algolia.com/?query=%22growing%20a%20language%22&s...
> filthy 'kitchens'

Where are you getting that from? I know lots of people who've worked there and the stories of the over-the-top cleaning were constant from all.
You seem to seed the SecureRandom object with the current time. I think this reduces security and it would be better to omit the seed and let SecureRandom seed itself.

It also looks like you do normal String equals to compare secrets, which could be vulnerable to a timing attack.

Are you sure you are qualified to implement crypto?
Excellent points. But how do you "add value" with NNN investments? I've always seen them more as like a fixed income instrument.
I wonder if comparing different populations in Utah and adjusting for % mormon would work? Provo vs SLC for example
Even on P2PE terminals the PoS is in scope of the PCI-DSS if not the PA-DSS certification (alright I’m not sure how any PoS vendor will fly without PA) as they do (or can) pass some CHD through it even if it’s not the card numbers or the track data.

CHD under the PCI standards also covers PII card holder information which does reaches the PoS for handling refunds, managing promotions, club membership etc.

Even vPOS applications like those tiny card readers that hook to an iPAD as the PoS do a lot of leg work despite of them being P2PE.
They check for root, they check for iOS version (security update) they check for proxy etc. That’s all part of the PA-DSS certification for the application developer.

While it’s possible that a retailer who’s big enough so VISA can’t say we won’t gonna allow you to take payments with our cards, and the fines are smaller than the cost of adopting compliance to use these.

I wouldn’t imagine any PoS vendor even going with that since it would essentially put them at huge risk from both the PCI standpoint and general reputation damage.

As for certifying these there isn’t a single PA or PCI-DSS QSA out there that would accept ReactOS as a useable operating system because if something goes wrong the QSA is liable if they certified something they shouldn’t have.
I don't think most wine has oxygen removed and "natural" flavours added back.

And yes, you don't want to be drinking wine that has added sugars. Preservatives might be harder to avoid though.
Git is somewhat similar to blockchains, but the similarity is very loose. Bitcoin has a shared state and enforces strict rules of how it can updated. For example I can't spend non-existing funds in Bitcoin. Also all state transitions are checked by all full nodes in Bitcoin.

This is different to Git that allows to perform any changes to text files without imposing any restrictions or checks on what changes can be performed. The ability to have a shared, verifiable state that can only be changed according to predefined rules, can be checked by anyone, and, theoretically, cannot be censored is the main selling point of public blockchain based systems like Bitcoin and Ethereum.

The main question is how much of that do we really need in practice to solve actual, real-world problems.
"The fact that alcohol is not frowned upon by society in general, hides the devastating effects it can have." Not only is it not frowned upon, in every single movie or series people grab a bottle when they emotionally have a a bad time, every time. It's so normal and cool. Bad experience: Numb yourself with alcohol! All the cool kids do it!

Exactly how ingrained alcohol is in our culture really only starts to hit you when you know someone with an alcohol problem. Try to not drink for a couple of months, the reactions can be pretty strange, "you must be ill or something"... I really see alcohol as Soma from Brave New World. But unlike with tobacco, we still have our heroes use it on the telly all the time.

Yesterday I had a 16 y/o tell me that she doesn't like to drink and she's a bit of an outcast at school now. In fact she says, many kids don't like it but they do it anyway to be part of the group. Sure, that is normal for kids, but that used to be normal for smoking and that (at least here in the Netherlands) is in my experience quickly losing it's coolness by lack of commercials and government crackdown.
Yes, but It's really easy thing to do, they should make this greater than this time. It's not good just based on widget.
I suspect this is more to do with not wanting to handle or let others see the negative comments against wetherspoon e.g. about their Brexit stance or quality of their food. They are a notoriously difficult place to complain to and usually tell you to take up any complaints with the local manager. I found this out first hand when it was the branch manager himself who served me the worst scrambled eggs on toast I have ever seen! Head office was not interested.

Trade at wetherspoon will not be affected by moving off social media and, indeed, others will not see criticisms directed against Wetherspoon e.g. in replies to their social media messages.

Plus this is a good bit of advertising for them by coming off social media.
Depends how much you drink. I realised my mistake after drinking 2 lites of double-strength coffee daily at work for a few months because it was free in my first post graduation job. I have to make a conscious effort to not repeat that.
I feel like we have not cracked the code on how to use software to automate teaching yet. Not sure why: NLP, complex representation of understanding, dynamic edition of video content, monitoring someone’s attention… All those are there and have been for a while.
Ask HN: How effective is outbound cold email (i.e. open rates, best strategies)
That's still cheaper than a private psychologist or psychiatrist (after the initial course).
93% of weatherspoons have a 5/5 food hygiene rating
I maintain that the best way to get to know an area is to get lost in it. Being on a bike combines the flexibility of off-road paths with the speed of travel being about 5x that of walking.

Every time I move to a new city, one of the first things I do is go out with nothing but a bike, my house keys, and a little cash (just in case). Friends are still amazed I can get from one place to another so quickly without resorting to GMaps or similar.
I claim that the law is much more full of bugs than typical code.
Microsoft has more budget for making coffee for the legal department than ReactOS has budget. Even if the lawsuit has no chance of prevailing, it still can force the ReactOS team to shut down. Oracle made a convincing enough case against Google about copying APIs, IIRC.
This feature is also available in "cheaper" cars. My Kia Niro has is, and although I didn't get a chance to make "full" use of this (thankfully), I did incur the "too close" beep which prompted me to break one time I was not paying the road the attention it deserved. As a side note, with auto distance keeping cruise control, lane assist that actually moves the wheel to keep me in lane, side radar that alerts if a car is coming as I try to switch lanes and the AEB, this is great entry into autonomous driving (as far as some core systems that are actually in commercial use already).
Anecdote alert, but I get about 10 hours of exercise a week and at best it's stopping things getting worse.
> You are mixing things up. While it's true that Cryptocurrencies try to solve a different problem than BitTorrent, Git and Email neither of those applications rely on a single centralized server owned by a single company.

I don't thing we disagree here. I am just pointing out that blockchain/Bitcoin/Ethereum is different because it allows to main a shared, verifiable state, something that BitTorrent, Git and Email do not provide. An ability to have this shared state is the main selling point of blockhain based systems.
Intercom – Future of business messaging
While the UI was heavily inspired from Expressions, Expressions does have more features including saving expressions locally. If you want a more feature-full app, then definitely get Expressions. Regxr was just a little project put together over a couple of days for fun, and it's truly not an original idea, haha
> The Guardian have switched to this model and it seems to at least be showing the promise of working.

Not exactly. While it is possible to become a Guardian 'supporter', and contribute financially in exchange for ad-free browsing after you identify yourself by logging in, you are not free from tracking by third-party ad companies as you browse their site.

The parent comment you are responding to said "I think the business model would generally incentivize much more user-friendly operational decisions than an ad-sponsored approach does." and while this gives you a superficially cleaner browsing experience, ad companies continue to track you as you browse the Guardian's website, harvesting data which can be used to manipulate you elsewhere on the web.

The Guardian could choose to disable all third-party trackers for logged-in paying supporters, but they do not. For privacy conscious readers, the only way to achieve what you want is to install an ad-blocker and a browser extension such as Privacy Badger. Contributing to the paper provides little or no privacy benefit, though it's always a good idea to support quality journalism, so if you do it, do it for that reason alone.
Bitcoin web wallet addresses generated with flawed library are exposed to attack
Also having eaten there I'd say mostly not microwaved.
I always wonder why they focus on the effects of say, a few beers, or someone who has a smoke in the morning.

Yet all the health problems caused by the very air we breath in cities, well that is fine.
I think that maybe geographically dependent.

I went to uni in Nottingham and the clientele was a mix of middle-age stag/hen parties and the older working class - I never saw or heard of students going other than as a toilet stop.

But that's a city with a selection of good and reasonably priced pubs, whereas in say London it makes sense due to just how much cheaper it is.
If you’re refusing to hire men this would be illegal. If you hire men but pay them only 90% of their market value, then your company will be known as not paying competitive salaries and won’t attract candidates (not just men — any job applicants).

But the situation is mostly hypothetical anyway because the real pay gap between men and women in the same position with same qualification is much smaller in junior positions (they only become bigger in senior positions, and, yes, companies actively try to fill these with women; which is hard because there are fewer applicants). In junior positions, the gap is too small to build a company on this business model.

That said, of course some companies predominantly hire women to cut personnel cost and consequently lower product prices. Most sweatshops are based on this premise.
One thing your other replies have not yet mentioned is these studies did not account for why some people don’t drink. Once you account for alcoholics with lots of preexisting damage turning teetotal, the effect is reversed.
Make sure companies care about their products and not only about money. My Swiss ISP is providing in-house developed hardware and it's quite good. I was quite surprised.
The problem of getting paid seems to come up a lot here.

Is this more of a process or a cashflow problem?

Many companies optimise their cashflow by paying as late as possible without incurring additional fees. Some are even as intentionally 'forgetful' as to not pay at all if they don't get a reminder.

Other than selecting your clients more carefully in the future you can't really do anything against shady client behaviour.

However, the way I see it for everything else there are existing solutions:

- contracts: Obviously define clear payment terms beforehand.

- processes and tools: Have your accounting software send automatic reminders if the due date has elapsed without payment.

- factoring: There are companies you can sell your receivables to. In exchange for a fee you get paid instantly and the factoring company will take care of collecting the payments.
LifeSpan = HealthSpan + GrimSpan

A reasonable expectation for news coverage would be that coverage is proportional to deaths weighted by years of HealthSpan lost.

That cannot be exactly right. But coverage of loss of GrimSpan is a separate issue. If hip replacements and cataract operations are reducing the GrimSpan by increasing the HealthSpan that is a happier story than better infection control at Alzheimer's units increasing the GrimSpan. It is hard to state an expectation about news coverage of loss of GrimSpan
Your preference for FreeBSD has nothing to do with the early development of Net/2 BSD, its license and the rise of Linux.

Development of BSD was effectively not accessible to the outside world, being a closed playground for the developers at Berkeley. And to get an official version on disk, it also had a pretty steep price.

Even now the various BSD distributions are very rigidly controlled. Yes, they adhere to certain quality standards, but they've also turned off developers from contributing.

BSD is and has been developed in a centralized model, being the Cathedral, whereas Linux's development has been historically very decentralized, being the metaphorical Bazaar. You may like the Cathedral model, MacOS and Windows are developed like that, however in my opinion such a model only works with companies with plenty of resources to spare.
Replace 'a dog park' with 'most dog parks' and valuation starts to make a little more sense.
Completely agree (and came here just to say the same thing).

When I last stayed in a casino's hotel (the late '90s I think), there also weren't clocks in the rooms (but at least there was Kino on TV). Being an east-coaster and an early-riser, I went downstairs looking for breakfast at about 0330 or 0400. It always amazed me at how narrow the entryway and exit were ... you could easily get in but the exit was disguised and who's going to see a lighted exit sign in a room full of other flashing lights?
It is studied, it’s not fine, it’s just not newsworthy at the moment. It’s barely newsworthy around here even when it exceeds legal limits.
With many languages adopting LINQ object querying, I find it more and more suitable to start using math's set operators for them. Many languages have almost identical behavioral sequence operators (.find in js, .Where in C#, etc) but math sort-of standardizes them all with a sound theoretical background. I'm not entirely sure if they all map 1-to-1, but at least most will.

const items = ∅; // empty set
if (myItem ∈ items) { ... } // is element of
const union = items ∪ otherSet;
assert items ≌ ∅; // items are all equal
That sounds about right. The one place I went where the burger was solid as a rock after sitting under a lamp for 20 minutes. Complained and was told that I just needed to chew it more. Asked to see the manager and was told she was the manager.

No twitter to whine about this on means more complaints silenced.

Just don't go there.
I don't really think this is one of those cases unless I missed some trend recently where the govt is using misconfigured routers to access home networks... This is an overly scary article about running upnp on the wrong interface.
Indeed: https://twitter.com/carolecadwalla/status/985793231295311872...
The iPAD solution is certified by the vendor; these employ a PCI P2PE certified terminal and a PA-DSS certified PoS software on the device.
The software enforces security controls on the device as well as performs checks such as root/jailbreak detection, iOS patch level, security/passcode settings etc. and if any of these do not match what the vendor specifies (which is what they certified) it won’t work.

As for the terminals on older PoS as long as the PED is certified and the PoS is certitied its not a problem.
Easy Data Access and Management with DWH and ETL
Another good example that "data" is not always meaningful. The graphs help the idea "media are talking too much about terrorism".

All deaths are not equal.
Most of old people die naturally from an heart failure or cancer, that the natural process of death.
Homicides and accidents are not natural but common.
Terrorism is an exception, that's why it so much covered.

100 old people dying from cancer do not worth 1 minute of press coverage, a family killed by a truck in a christmas market a bit more.
Aziz Sancar'dan Öz Eleştiri
That seems unlikely. The Brexit vote is almost two years away now, and if anything, the negotiations have never looked better (not that that's a high bar). Why only now, and why in a so weirdly unrelated way? If they were sorry about Brexit support, just, uh, say it? Perhaps do some Europe-themed promotions?

It seems much more likely that social media simply isn't a very high ROI marketing channel for them, and they're capitalising on general unease following the CA debacle.
I feel you there. My partner (who doesn't drive) just bought a second hand Corolla. She'd had it just a few days when I nearly t-boned a flatbed Toyota Hilux because it was hidden completely behind the pillar and just happened to have the correct speed relative to me to allow it to match my turn and remain completely hidden. Luckily, I'm quite cautious at intersections.

I've since learned to move around whenever I'm looking for other vehicles.
Fair enough, everything in moderation. Two litres strikes me as truly exceptional. That said, even that amount probably doesn’t have averse long term health effects if you ensure sufficient water and electrolyte uptake to offset its diuretic effect (another very noticeable side-effect is withdrawal but that’s short-term).
Do you have any idea what the dosage is? Is it an immersive 'K-hole' dose where you go deep and become unresponsive for a bit? Or are the infusions smaller doses just meant to build up the anti depressive afterglow effects in the body?
I agree with him completely, but I also know that most 'Data Scientists' are just people who know bit of excel and have a head for numbers.

I think we just need to be realistic, if your job is to collate sales results every month and create a presentation about something interesting the data, your aren't really a scientist and you can probably just use Excel.
Their description sounds like literal thickness. They took the distance to the border (white matter) of all the points in a region. This is like the radius of a circle, and then multiplied by 2, to get a value like the diameter of a circle.

It does sound like quite a convoluted process but I don't see where you are getting anything like "density" from that description.

Also, reading the methods closer makes me think these are cherry picked results:

>"Once segmentation is complete, the original images are interpolated by a factor of 7, resulting in a final voxel size of 0.39 × 0.39 × 0.43 mm. Next, up to 18 connected layers of gray matter are grown out from the boundary of white matter, using a region-expansion algorithm to cover all pixels defined as gray matter."

Why 7? Why 18? These magic numbers shouldn't be there without some kind of sensitivity analysis.

Finally, you can see the dimensions of the voxels is something determined by their methods, not a property of the brains.
Coffee also effects your BP
Detect not well implemented C++ design patterns automatically
Why do you think this?
What is the recommended daily amount of time we should have to lead a happy and healthy lifestyle?
You're surprised Zuckerberg didn't quite tell the full truth outside of oath or deferred the more controversial answers to a time his answers weren't livestreamed to millions around the world?

"My team will get back to you on that" can be replaced with "I'll tell you, but not live" because he knows social media will be burning like magnesium before he's even done with the next question
Insider view of growing to $50,000 in MRR in March 2018
Towards an implementation of the EU GDPR on Internet privacy policy evaluation
Well, git has a lot of that too, atleast internally. Objects need to conform to git's internal format, otherwise the remote will reject it, similar to how Bitcoin only allows transactions if signed. (Git can sign too and with a hook it's enforceable)

The rest is fairly easy since you can enforce restriction with hooks that can do arbitrary edits and checks on the repository.

I imagine you can make git behave exactly like bitcoin with only a few simply hooks.

The main selling point of bitcoin is really only the "cannot be censored" part and that is a bit meh, tbh. The moment you need to use real cash to obtain it, the government can come, kick down your door and threaten you. Such things have happened in ISIS-controlled regions when people tried to buy bitcoin or otherwise get cash out of country.
Futurology as a subreddit
Xi is orders of magnitudes more mature than Phi. You can't compare 76 contributors and 1128 commits vs 1 contributor and 103 commits.
Sounds like you are cherry picking your start date of course during ww2 wine and beer production was supressed in Europe.
Cartoonic Meme Salvation 3D Simulator
Card data isn’t the only data that is covered by PCI SSC standards.

Card holder PII is also covered and is even considered more important these days since CC numbers are easy to rotate but your identify isn’t.

Also even if the PoS doesn’t sees the card details it is part of the payment acceptance process and if it’s compromised the payment process can be affected even with P2PE devices.

If the PED is complete separated from the payment process e.g. those in which the vendor has to type in the amount separately and the PoS doesn’t take any any any customer PII ever you may be able to get away with using something like ReactOS on it.
In Germany all the companies I've worked in have a strict no-alcohol policy. But it's relatively recent (~10-15 years).
This is just one source of the many examples I have read over the years painting a similar picture.

>> In the UK, 8.39% of deaths were due to pollution

It always seems pretty high.

https://www.standard.co.uk/news/uk/uk-has-one-of-the-worst-p...
How to design terrible graphs – freeCodeCamp
Top Trends in Data Science and Analytics You Should Know