skysight-inc/HackerNews huggingface dataset:
This https://puri.sm/posts/tpm-by-default-and-free-international-... says they are moving to including the TPM in all systems, but there are some UK models left in stock without it.

The TPM is a security feature--you don't have to use it. I have not used it on my laptop but I see from the documentation that it is different from some other trusted computing systems in that the end user controls the keys and what is loadable, not the vendor.
No no! There's something going on here. These emails are in the sent email folder, and people who are definitely not compromised (long random passwords, 2fa, and checked the device login log from google are showing nothing.)
If the EFF wants to write an article arguing that privacy violations are widespread, and therefore viable privacy-respecting options aren't available.. then I'm all ears.

Here's what the EFF says about Facebook: "Deleting Facebook is not a choice that most of its 2 billion users can feasibly make. ... Without viable general alternatives, Facebook’s massive user base and associated network effects mean that the costs of leaving it may not outweigh the benefits."

Imagine that, a service a little over a decade old is now a dependency for life. It's not "feasible" to leave. Apparently privacy violations must be weighed against the size of the user base and network effects.

Last I checked, phones still worked. Messaging still worked. All of the solution that existed a decade ago are still there. You CAN leave.

I look forward to the EFF proposing a legal solution to privacy such as GDPR in the US. They haven't done that, and in the meantime, there should be consequences for Facebook. The EFF shouldn't be arguing for the lack of consequences for this specific privacy violation, without proposing a solution to the problem across the industry.
It's essentially the same, just applied to the particular case of smaller height difference and low pressure.
>after introducing proxies my crawl times grew by an order of magnitude from minutes to hours

Yeah, same experience. Right now I use luminati.io datacenter IPs that work ok, anyone know of a cheaper option that works well? Scraping tens of millions of pages a month.
I'm a colemak user with no problems with shortcuts. Try putting in your settings:

"keyboard.dispatch": "keyCode"

and see if it helps.
If I remember correctly, if you are the recipient of an email from "yourself" Google automatically puts it in the sent items label as well.
Fair enough about wanting at least one USB-A port, but I can't wait to upgrade from my 2013 MBPr to something that charges over USB-C. MagSafe is nice, but the magnetic breakaway USB-C cables look fine too, and it'd be much nicer to have chargers set up all around the house that work for all of my devices and don't cost a small fortune.
He has a BS in physics.
ok, do you think we should #deletegoogle too? i hate facebook but a lot of companies do this
best in class user experience != marketing.
Events is probably the only thing keeping me on the platform.
Automatically create mappings between all your data
My house mate has had the same issue today on both of his Google accounts. He is both the sender and recipient and there were several other nonsensical email addresses being CC'd in.

SMTP headers show the emails are relayed from Telus. I'll provide the SMTP headers when I get home.

= = =

No unauthorised attempts to log in from third party sources, seperate passwords and MFA on both services.

It doesn't seem to me that the accounts have been compromised, instead the emails are spoofed. They have all been forwarded from Telus.com. The forum OP posted shows everyone else has the same issue.

Both accounts were sending hundreds of emails today and Google flagged the emails as likely having not been sent by him, but still did not place them in an appropriate spam filters and allowed them through to his inbox?

Edit:

= = = = =

I won't bother adding my headers now, the others that have even added theirs are almost identical to our own, here's a snippet of some one who posted below:

SPF and DMARC results

ARC-Authentication-Results: i=1; mx.google.com;

spf=pass (google.com: domain of reply@telus.com designates 69.64.35.11 as permitted sender)
smtp.mailfrom=Reply@telus.com;
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Authentication-Results: mx.google.com;

spf=pass (google.com: domain of reply@telus.com designates 69.64.35.11 as permitted sender) smtp.mailfrom=Reply@telus.com;

dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com

Received: from gown.ShoppingBrew.com (ec2-13-58-85-245.us-east-2.compute.amazonaws.com. )
by mx.google.com with ESMTP id n59-v6si5794010qtd.116.2018.04.20.00.37.14
for <<myemail@gmail.com>>;

Received-SPF: softfail (google.com: domain of transitioning nkhpw@google.com does not designate 69.64.35.11 as permitted sender) client-ip=13.58.85.245;
Read the thread before you comment!

People are reporting these messages are in their sent mail folder!

Now it's possible that gmail makes it looks like it was "sent mail" if it receives a message "from you" even if you didn't send it, but it's also possible that google has been hacked in a big way.

And some of the people reporting this are knowledgeable people who know what spoofing is, and who have good unique passwords and two-factor enabled.
I got 2 of these a hour ago.

"This may be a spoofed message" Google says, I clicked spam even though it's from myself. It was to me and a bunch of other emails. Wasn't in my sent folder though and no one else has accessed my account.

"Sexy Girls Asian Girls Looking for US Men" is the subject and says it's sent from "----------------- via telus.com"

Really odd, seems to be some ISP in Canada and I live in the USA... Wonder how they got my email.
I would say that cost is the lowest of those concerns for something I need to do my job everyday, and a Librem with MBP-level specs would be worth more to me than a MacBook Pro.
My guess is the sent folder is just a label where from-address matches one of your emails. Spoofing the inbox in the manner mentioned here will naturally also fool the sent folder.
I did read it before I commented. I just proved what I said below (before you commented).

"If I remember correctly, if you are the recipient of an email from "yourself" Google automatically puts it in the sent items label as well."

Google threw it in my Sent Items despite me not sending it from gmail itself.
I had some of these earlier today as well. Mine wasn't from telus however, it was from some .science account. I use a password manager and have 2FA enabled, but I quickly switched my password just to make sure. Sure enough, a few hours later I got another one, for about 5 in total. They seemed to have stopped however.
I encountered the same thing, but different adverts.
https://the-federation.info
The question is: what signal do we want to send ?
Please go on (FB or every over ones sitting on privacy, past or future companies), or the game is over.

Perhaps, with the actual attention of the medias, it’s the right time to make a point, whatever it is.
Another HN thread with more comments about this:
https://news.ycombinator.com/item?id=16894593
Unfortunately I haven't gotten a chance to use them in Prod. We used a homegrown process at my last company and we use Vault at my current company (which I haven't even used directly yet).

I mostly like credstash because I independently arrived at the same design for securing secrets before I knew it existed. And many of my security minded friends are excited to try out the AWS service.
If you have a suspicious or spoofed email and you want people to analyze what happened, it helps a lot if you include the full headers. To do this in gmail, open the menu and pick "Show Original". Particularly useful are the lines that start with "Received:".
I think the bit about not wanting to interrupt the class may also have to do with the lecturer. She's an amazing bad-ass herself:

"Her investigations have led to more than 50 criminal cases against politicians, businessmen and public officials, and pursued by law-enforcement in Costa Rica, the United Kingdom, France, Finland and the United States." (https://journalism.columbia.edu/columbia-journalism-school-a...)
So you read the thread and then edited your statement to make you look like you read it! First class work.
Nope. Nothing (apart from your username, which is public) is ever stored unencrypted anywhere. Even your own Peergos server can't see your friend list. It is decrypted by your client when you log in.

We don't currently allow third party apps in Peergos, and when we do they won't be able to access the social graph, nor will they be able to connect to the internet, nor anything else outside peergos. So that data can't be exfiltrated.
When in doubt just paste it to archive.is

https://archive.is/MwzNr
No... I mean I hear you about not liking emacs/vim/evil-emacs. I happen to like evil-emacs, but I can see why other people would prefer VSCode. That's a matter of taste, and I won't tell people to switch.

But when it comes to magit I'm not so sure. I'm inclined to think that magit is _strictly_ better than any other git interface, so much so that even if you don't like emacs you should suck it up and use magit as your git porcelain, even if you use a different editor for everything else. Magit is that good- I just gave $100.00 to the project, and I never donate to open source stuff. It is that good.
As amazing as Retina/HiDPI is, is it really worth trading "freedom" for? I have found high quality traditional 96ish DPI displays are really quit fine. Objectively, what does HiDPI provide? Do you write code faster? Do you write better words? I don't mean this sarcastically, but in a positive inquisitive manner. HiDPI is one of the few real innovations in the last decade. And yet, as cool as it is it doesn't add much as far as I can tell.

I went to a Dell. 32 GiB RAM. Xeon Quad Core. Heavy. But great.
... an Arizona company came up with an interesting approach to rodent control: poison their reproductive organs. They got approval to sell their formula in 2016.

https://senestech.com and https://en.m.wikipedia.org/wiki/ContraPest

No gene editing required.
This is cool. Thank you for this
Rotating user agents ?
another pro tip: compete only against weaker opponents (this is common in Boxing).
Seems this thread is full of varying definitions for various concepts. I've posted a few comments in this thread myself assuming my own definitions without really reading a dictionary first, so I'll leave my definitions here for anyone who might be interested:

Affective empathy: experiencing some level of suffering or discomfort when visually seeing someone else suffering. This is just a reflex for most of us that scales with how obvious and immediate the other person's pain appears to be. Seeing someone get hit by a car or cry will cause this feeling whereas seeing a depressed person will not as they do not obviously appear to be suffering.

Cognitive empathy: thinking about someone else's circumstances and thus feeling some level of shared suffering. This form of empathy does not require the suffering to be right in front of you for you to feel something and does require cognitive effort (i.e. is not a reflex). We would use this to empathize with someone who is depressed.

Sympathy (as in to feel sympathy for someone): feeling empathy but not taking much time or energy to do anything to help the sufferer and more likely coming up with some rationalization to help yourself deal with your own feelings (i.e. they'll be fine, there is nothing i can do). I guess we also have a concept of "fake sympathy" where someone lies about feeling empathy and then does nothing.

Compassion: a belief that someone is worth helping and having an intention to help them if you can, regardless of the degree to which you empathize with them.

I'm almost certain these definitions are not the "correct ones", but for the sake of me not amending all my previous comments I'll just leave this here.
Hahaha. You've nice collection.
Meet Vicki Robin, the FIRE Early Retirement Community Idol
This Must Be David Byrne
I did, thanks for the tip though.

I missed the "FUCK YOU" in the text message image. Sorry!!
Any reason why Anguar Js should be use for web devlopement?
Good thing someone finally pointed out to the poor Unicode and bidirectional text in terminals.
Again - having used Magit because I heard the same effusive praise - it’s goddamn awful if you don’t like using emacs.

I don’t mean “it’s not my preferred git client”. I mean “I’d rather use almost anything else”.

Why? Because it requires emacs interface, concepts, and controls. And unless you’re ok with those it’s not better at all. In fact it’s _strictly_ worse.

That said: if you like emacs I think you’re correct, it’s almost certainly the best there is.
>We strive to be polite to other people because of who we are, not because of who they are. That’s what ethics is about.

It's a nice concept, but ethics (and the idea of politeness) are largely relativistic to the interpreter/actor. Even with the idea of normative ethics being dictated by culture and point-of-view out of the way, there are layers to every ethical/moral choice within each doctrine of thought.

Ask people around the world about the ethical treatment of animals, prisoners of war, children, spouses -- you'll get different answers from every individual, with strong weights towards certain behaviors dictated by regional culture and upbringing/experience.

tl;dr : I may think that it's being polite not to spit on me for being a member of a lower caste. YOU might think i'm being polite for opening the door for someone behind me.

Neither opinion is wrong, it's framed by the culture and the person.
You'll have to bring that up with this Heroquest fan:
https://www.youtube.com/watch?v=Cx8sl2uC46A
The rock pro 64 will hopefully come out by May 1 from pine64 with faster dual A72 cores + quad A53 cores. Their shipping is slow.
Some proxies will also include your IP address in the form of an "X-Forwarded-For" header.
I think this is a common misunderstanding: Scrum is not just a tool, it's a toolbox. You don't use the whole toolbox for every job, you pick the tools you need and leave the rest.

BTW, Exceptions and OOP are used conceptually in most kernels, RDBMS, and any bigger piece of software, it just doesn't make sense to use languages which force their use if a project has too many edge cases.
Conway's Game of Life Over US Zip Codes
It should be, but too often people write bad tests that test whst they wrote and not what it’s supposed to do.

Writing good tests is a skill and most developers don’t seem to be as skilled in it as they think.

The same concepts power much of Agile too though: XP & Scrum both complement this.
This is so weird, I had a dream 2 nights ago of this very thing, a steady state hydrocyclone that had a steady state net power output and clean water!!
> Objectively, what does HiDPI provide?

My eyes don't strain when I use smaller fonts that let me see more of what I'm working on (graphics, code, whatever) at the same time. The absolute lowest PPI display I use is a 108 PPI 27" 1440p display--but it also sits much further back than I do when I use a laptop and I have the physical real estate to use much larger fonts than I do on a laptop. On a laptop, where I'm under two feet from the screen at all times and am physically constrained, I have different needs.

I would not use a laptop that couldn't at least match a Retina MBP's 220 PPI. It's noticeable. It makes my life worse not having that; the "freedom" to use a laptop that gives me eyestrain is not worth it to me (and Purism's touchpads are pretty bad, too). The tradeoff is worth it to me.
My father and I have been getting these all evening.
Vehicles are too easily weaponized. The amount of energy it takes to move a human and a cabin is more than enough energy to destroy a small building. People have driven their cars into houses and businesses for as long as cars have existed. Not to mention aircraft. And driving cars into cars is a too common tragedy.

The odd part about Star Wars is the relative weakness of their weapons. Star Trek have "warp core breaches in a bottle" AKA the photon torpedo, which is much better at damaging starships than ramming.
Conservation of angular momentum says you can't get energy from the Earth's rotation unless you have a reaction force on something in space.
There's nothing like Boston or NYC in the control states. If the effect is as big as they seem to think--a 21% increase in mortality--that should be visible on a plot of deaths over time.
Water Bridges Over Short Distances with High-Voltage Electricity
> but also by quickly running their facial recognition stuff before the GDPR goes into effect.

Could someone explain what this means? Is Facebook’s facial recognition illegal under GDPR?
I wonder when it will become illegal to produce such laptops as states progresses with surveillance and data collection about citizens. I would really like to buy privacy oriented laptop as I don't feel comfortable that someone can look up my private life.
But this laptop is pretty weak to use it for work I do sadly. When something more up to date is going to come out, I am definitely going to buy.
An Overview of Bitcoin UTXOs
Software Testing Anti-patterns
Yep- I'm actually a pretty old hand when it comes to git, and I know most of what git can do, but... I'm lazy, so when I use git at the command line I do caveman git. Magit lets me remain lazy and do subtle git things,
VS Code certainly makes VS look really bad in some areas.
I had the same thing happen today. At least 6-8 emails in my inbox over the course of an hour or two, from my email address. Mostly ads for "dating" sites with photos of scantily-clad women. The to list includes my address, as well as about 8-10 other addresses, including one at rei.com and another at nih.gov.

Mine are showing Telus in the relay as well. None show up in the sent folder, and I use 2FA on the account.
Bitcoin Price Testing $10,000 USD – Altcoins Rally
> horizontal scaling for writes is currently in preview

I don't expect multi-master to increase write performance much. It will scale out network connections and maybe query processing, but not actual writing of data.

It will replicate all data to all nodes, and the replication will be synchronous to any node it can automatically fail over to. So a client will be able to connect to any master, but that master will have to synchronously write to at minimum all other masters, if not all other nodes, before the server can acknowledge the write back to the client. Every node will need the write performance to write every write. That isn't scaling out writes.
What do the DKIM and SPF checks say?
Perhaps it's a browser extension/plugin that got hacked?
There is another perspective regarding "deleting FB is not viable option". When you encounter a case in your real life, when you are unable to stop using "something" even if it clearly hurts you, it is typically called addiction. Maybe it ia time that people revise if it is really not a viable choice.

Let me give you my example, I am not a FB user. Never was. Do I have problem finding events? Do I have less real friends? Is my quality of life any worse becoase of that? I have hard time going to all events that interest me, I am forced to prioritise meeting my real friends due to lack of time, I still chat with them using email, sms, phone, messanging. I dont see anything that FB could change here to better, only to worse, by alienating those real life friendships that I am having now (by adding endless noise of social network - I am having over 400 phone numbers in my phone, I don't want to get all the possible news about their life, it is impossible to handle).

Social networks don't help you having real friends, for those you need to keep feal life contacts, they help you to loose them, by giving you fake feeling that you have "bytefriends" and dispersing your attention from those you care the most to buch of insignificant acquaintances.
GPU and everything related. 3D graphics now has a very bright future and is not easy!
honest question: aside from the attempted collection of data on non-users of the system, why are people angry about this? to me, anger implies being surprised here. but at the same time, usage of the system implies being smart enough to understand the risks inherent in making your information public, so there really should be no surprise, and therefore, no anger. being angry at this really is just an admission of ignorance and/or stupidity. it's kinda like people being surprised when snowden told them the government was spying on them, except dumber because you're willingly giving up your information here...

fuck, you people make me sad
Exact same thing for me.

Noticed I was getting emails being sent from myself. More worringly was the emails appeared in my SENT folder. For 5mins I was freaking out thinking I was hacked, because I didnt think spoofing emails would show up in MY "sent" folder.

But I run 2FA, long complex unique password etc. I treat OpSec really highly. I checked all Google security settings, no unauthorised access, no apps using my account etc. Still did a password reset "just in case".

However one interesting part is after about 4 hours the emails automatically became marked as "spam" - and they disappeared from my "sent" folder simulatenously.

So it would seem the likely issue is someone worked out a way around the "Spam" setting for Gmail - and a by-product of not flagging spoofed emails as spam is Gmail marks them as "Sent" by you in the labels.

Seems this was flagged as a security risk over a year ago - and Google declined to fix? https://www.zdnet.com/article/spammers-delight-gmail-weirdly...
Parsing C++ is a nightmare....
Paul Graham had a lot of interesting observations about empathy in his 2003 essay "Hackers and Painters":

Like painting, most software is intended for a human audience. And so hackers, like painters, must have empathy to do really great work. You have to be able to see things from the user's point of view.

When I was a kid I was always being told to look at things from someone else's point of view. What this always meant in practice was to do what someone else wanted, instead of what I wanted. This of course gave empathy a bad name, and I made a point of not cultivating it.

Boy, was I wrong. It turns out that looking at things from other people's point of view is practically the secret of success. It doesn't necessarily mean being self-sacrificing. Far from it. Understanding how someone else sees things doesn't imply that you'll act in his interest; in some situations-- in war, for example-- you want to do exactly the opposite.

Most makers make things for a human audience. And to engage an audience you have to understand what they need. Nearly all the greatest paintings are paintings of people, for example, because people are what people are interested in.

Empathy is probably the single most important difference between a good hacker and a great one. Some hackers are quite smart, but when it comes to empathy are practically solipsists. It's hard for such people to design great software, because they can't see things from the user's point of view.

One way to tell how good people are at empathy is to watch them explain a technical question to someone without a technical background. We probably all know people who, though otherwise smart, are just comically bad at this. If someone asks them at a dinner party what a programming language is, they'll say something like ``Oh, a high-level language is what the compiler uses as input to generate object code.'' High-level language? Compiler? Object code? Someone who doesn't know what a programming language is obviously doesn't know what these things are, either.

Quoted from http://www.paulgraham.com/hp.html
My experience is most customers can't read past the first line of a response. The idea that they can get through a 16-page flowchart seems unlikely to me. And I do sell to a mostly technical audience.