skysight-inc/HackerNews huggingface dataset:
The fact that Nova Scotia might have violated a separate obligation to secure sensitive information doesn't make accessing that information not trespass.
It's a process of selection...
He is likely holding it wrong.
pngcrush is fairly old. And terribly unoptimized. If you want a command line solution, I recommend optipng (which does what pngcrush does, but better), and sending the result through advdef, which improves the compression even further.

...but really. ImageOptim is super awesome and zero-effort.
So this is a classic case of a subcontractor doing substandard work, leaving a security hole big enough to drive a truck through, and then trying to sue someone to save face... Sigh.

If some of those documents weren't appropriate to be viewed by the general populace then the company was criminally negligent in their handling of the data, the "hacker" saw an open door with a sign reading "free information" on it and didn't know any better before running a crawler over the documents to grab them.
New CRISPR Model: Longer-Lasting Treatments for Genetic Conditions
Mark went work for MS, as I recall. This was some years ago; I don't know about currently.

MS sucked in the tools/pages onto its domain. Navigation to/of their pages and versions became somewhat shittier (per the... "canonical" MS web experience, I guess). I seem to recall a bit of public pushback on this point, and things improved somewhat. Maybe I mis-recollect; I've been mostly away from Windows for quite a number of years, now.
If your car runs me over, I'm going to sue you.
The full acronym is IOTWSNBCTTI, or Internet Of Things Which Should Not Be Connected To The Internet.
What? The responsibility for Linux being a "bad desktop platform" is entirely that of whoever made it. Between KDE, GNOME and the various alternatives, none of their issues were caused by Microsoft.

Microsoft may have been plenty evil under Gates/Ballmer, but it's hard to argue that they did much actual damage of consequence. If anything, they energized the open source community, and lost developer mindshare as a result.
I think that's a pure business decision, they have Office for Android and iOS. Office for Linux might not make that much sense given the low market share on client - but Office 365 has most as WebApps anyway also.
I doubt that has much to do with "religion"; they simply don't think a Linux version of Office will bring in enough revenue to be worth the development and support costs... and I probably wouldn't disagree with that assessment.

Linux has large (majority?) market share in the server and IoT markets, but a very tiny market share when it comes to desktop.
If anyone deserves to go to jail in this case, it's the contractor that took government money to implement a system that relies on security through obscurity when they knew that sensitive documents may be stored in it, and then screwed that up further by allowing documents to be accessed through nothing more than incremented IDs. It should be a basic premise of the law at this point in all civilized countries that if you can access a document by submitting a normal HTTP request with no authorization headers or cookies, then the server's owners intended that document to be public.
You're right, I was more curt and that came across pretty asshol-ish.

In general, whitepapers mention the blockchain in all the places that matter. Contrast websites and pitch decks mentioning it in all the places it can possibly be mentioned - as it's perceived to increase the odds of getting attention.
https://www.google.ca/search?q=get+paid+to+watch+ads
Of course a computer doesn't choose to do anything, but its actions do represent the choices of its operator. If I put a sign on my door the onus is on me to check if it says "All members of the public are welcome here" or "No trespassing".
To Make Cordial Pepper Water
What is it about headlines involving charges that love to focus on “facing prison”. At the very least this should indicate the RANGE of punishments, and there is a hell of a range.

From the article, he’s been charged with “unauthorized use of a computer”. IANAL but there would seem to be at least two possible interpretations of this charge [1], and the “Summary Election” variant has a MAXIMUM punishment of $5000 fine or 6 months. The other interpretation “Indictable Election” is a maximum of 10 years.

As with any case, details matter. Judges aren’t just sending every hacker to prison for 10 years. He may be judged not guilty (evil intent must be proven; then there’s his age, etc.), or given a way, way, way smaller punishment than this “prison” he “faces”.

[1] http://criminalnotebook.ca/index.php/Unauthorized_Use_of_Com...
Disable upnp. Define port forwarding statically where necessary.
Government documents and web servers are private property. (The information within might be public, but it's illegal to access private property in an unauthorized way to get public information). Ordinary law-abiding people do the things that property owners expect them to do (or what they reasonably infer the property owners intend them to do). If there are signs (literal or figurative) that the property owner doesn't want you doing something, then you don't do it--and you're charged by the law with heeding those signs.

That's not Orwellian or authoritarian--it's a basic part of "social" behavior in a society with private property.
Its more like a bunch of books on a shelf at the library with one 'special' book, unmarked, in the middle where they charge you with theft if you grab it.
> JFK requires an airport train to take you to the train station

It's the same train that takes you from one terminal to the next. The alternative would be to force the LIRR or the A train to stop at literally every terminal on its way to Jamaica/Far Rockaway. That would be way worse.

It's not like transferring between them is any more inconvenient than having to transfer between two subway lines, so it seems like a distinction that not particularly meaningful.
Also, the library was called the "Free Information" library.

IMO this looks like a company that did a poor job trying to cover their mistake by blaming "those hacker folks". I don't think it's inappropriate to confirm the kid was acting without malicious intent, but the subcontractor who setup the security for this site needs to be investigated thoroughly.
I guess I'll "refresh" the OS and tell the user they need to save the installers, next time. Who knows if that will even fix the "laptop running stupidly slow" problem, though.
It's not just a single file that you have been invited to access. This 'someone' has told the world that all of their public documents are in this filing cabinet. And here is how to find a few specific files. It's not a stretch to think the every other file in the (unlocked) cabinet is also public.
You’ve never heard of an API then?

This is silly. Your door analogies have no place at all.

A great many websites work this way.

Unless you’re injecting metacharacters into URLs, or requesting AAAAAAAA * 65535 followed by shellcode, changing paramter values is using HTTP exactly as designed, and a well-formed request has many possible error codes for the exact purpose of letting you know what you are allowed to access.

It’s perfectly normal for people to alter URLs. The fact that people who are unfamiliar with URLs don’t do that is irrelevant, and you could say the same for any subject. Just yesterday I changed lat= and lon= to get a NOAA forecast. Is that snooping or hacking? How about when we change the integer at the end of an XKCD comic to view another one without previously confirming there is a hyperlink somewhere?

At least in the Weev case, people could take his IRC logs out of context as well as argue the fact that it was plainly obvious that the server was misconfigured and he was seeing content that he should not. But getting a response when incrementing an integer, generally speaking, does not mean you are viewing something unintended for you. When you are downloading public documents, it would be entirely unreasonable to assume that the material was non-public.

Also, take a step back to really think about what you are advocating. Is society better off by ruining this kid’s life? It blows my mind that someone even remotely technical can think this particular case is a good use of the justice system, or can even compare it to someone snooping around their neighborhood and trying their doors.
There was no sign that the supposedly private documents were intended to be private. I’ve often fiddled with URLs on public sites because I’ve had the intuition that something hasn’t been indexed that perhaps should have been indexed, or because of a dead link.

If those sensitive documents were on a _public_ website intended to be browsed by the _public_, who presumably did not require authentication, and the documents did not cause an “Authorization required” response when accessed, it feels rather totalitarian to treat that as a crime.

Most of the metaphors I’ve seen about this are not fitting. As excessive as the barrage of metaphors may be, allow me to add my own:

As part of a free treasure hunt, a person gives you the address of their house and says, “Whatever is not locked up is fair game for you to look over, take photos, or copy.”

You go there and have a great time. Then the homeowner has a fit because you discovered a hidden cellar full of pornography, which was apparently off limits but the door was inadvertently left unlocked. Now the homeowner is charging you with breaking and entering, saying you should have known better and it was common sense.
The difference is a laptop is custom built, with the required infrastructure to serve the role of a general purpose computing device.

An eReader can serve the role of a general purpose computing device, but it would not serve that role as well as a laptop.

So if you optimize a rugged poly-carbonate brick you could take through a Monsoon, Typhoon, Sandstorm and/or War Zone for the sole purpose of loading text and simple document files and a low-power display, stuffed with only a battery, enough compute power to accomplish the task it is given and cover any overhead, and enough storage to hold however many books you decide you want it to hold, without any graphics or sound (or perhaps very simple graphics), then you still have something meaningful.

You have a Library of Alexandria that any kid can carry in their arms without any of the ideological attachments that the XO had. It holds information in a human readable format and is capable of displaying that information to the person who holds it so long as they are literate.

Much like a modern day light bulb can be a general-purpose computing device that for some reason has been limited to turning on and off in different colors. It might not seem terribly useful to you, but it thanklessly serves the role it has been tasked with without a source code button, a mesh network, a fancy GUI, or a Squeak environment.

It is a meaningful distinction to make because it will ultimately shape your budget and your ability to actually distribute devices in meaningful quantities to the device's intended users.
If that's the case, then they are absolute morons.
> so really, it doesn't matter how much lawyers cost

I really advise you to read up on some of the literature about plea deals; there are very few people who think that they are something we should have at the scale that we have them, or something that we should have “as long as” we have jury trials. The prevalence of plea deals in the American criminal justice system is primarily due to the fact that there are simply too many crimes for our courts and public defenders to handle promptly (an incentive for prosecutors) and that legal representation is so expensive (an incentive for defendants, and also for shady prosecutors).

Here’s a blog post on the ACLU’s website about it: https://www.aclu.org/blog/mass-incarceration/its-not-just-pr...
A trip down Market Street before the fire
Facebook had revenue of about $40 billion in 2017. Facebook has billions of users, so if every user gave Facebook a dollar a month, that could add up to about as much as they made last year. (I don't think every user would do that, especially the users who live in developing countries and can't afford to spend a dollar, but let's use the best case for the sake of argument.)

What happens when a startup decides to take on Facebook by offering a social network that focuses on protecting user privacy? We would want that startup to succeed, but how could it ever get there by charging a dollar a month? It would start with a small number of users, so the total dollars per month would be small. If Facebook was only charging a dollar, this startup couldn't charge more than that -- a social network that has fewer of your friends on it than Facebook and costs more to use is not a very attractive.

In other words, I think the subscription model would make it difficult for social media startups to succeed.
Yes building tech companies that people love to use and provide high paying jobs does not benefit the citizens of a country
Who really bears that responsibility? Bill Gates? Steve Ballmer? Guess what - they're both out and the new leadership clearly has a different approach in mind.

Microsoft has no blame for Linux being a bad desktop platform - and for the record, I strongly disagree with the assertion that Linux is a bad desktop platform.

Your hyperbole and childish "M$" name-calling do nothing to support your argument.
The problem with that approach is that the ground isn't radioactive at all, and the commenter fell for disinformation on a local antinucleaer hippy website. The houses were built upwind and uphill from the site, and the EPA, state, and local governments have all hired independent third parties to test for contamination. There is none. The area is now a wildlife refuge, and there is no trace of health effects in animals in the area. I bought a home there after investigating the data myself for over a year. I have a wife and two kids, and would never put them at risk. The amount of radiation Colorado residents are exposed to from the sun and ground minerals dwarfs anything from Rocky Flats. There is zero data to back up the hippy claims. I work with data for a living, and have actually found cancer clusters in the US around refineries and chemical plants.

Tldr: a Geiger counter will show nothing here.
> Google keeps their data private because they've already secured their advertising/search territory.

That is one possible self-interested reason for them to keep the data private. They could also just care deeply about guarding user data they collect. This could be for either selfish or unselfish reasons -- it's both good business and moral. It's very hard to tell from the outside, because their actions would look largely the same either way.

Personally I think it's pretty naive to believe any company does any thing for a single reason. There are a constellation of reasons, some more important than others.
After seeing this I think the Amazon AWS/FreeRTOS combo is looking like the better architecture for a node solution. FreeRTOS can run on lowly M3s at 120Mhz, like the LPC2478.

A 500MHz A7 part is way too much silicon for an IoT node. How much external SDRAM and Flash are connected to that MediaTek core?
Wouldn’t one of you clever yc types start up an online service to manage tax collections for small businesses? Since a lot of these folks are using third-party payment systems already, it seems like it would be a solvable problem.
The AirTrain has so few riders because it fucking sucks, this phenomenon doesn't require detailed analysis.

NYC can and should build trains that go from dense center city locations right into airport terminals. Like real countries do. If they did they would be wildly popular.
Right - but being a parser, I don't have those problems. My problem domain is quite well specified and there isn't any place for random numbers of system calls.
Regardless of the specifics, people buying homes and living there should know the details. I don't own or run that site, but people should know the history of that area. It's a simple fact that groundwater and air contamination with radioactive substances occurred there. As you say, it's far more complicated than is or isn't. For me the risk and severity of the consequenced seemed to far outweigh saving some money. The wiki article has some more background : https://en.m.wikipedia.org/wiki/Radioactive_contamination_fr...
The work won't be public. What details are you interested in?
I think the inability to write effective tests is single biggest contributor to technical debt over the past decade. Ineffective tests are arguably more dangerous than no tests at all, due to what you pointed out: the "100% Coverage" banner is about as effective as those Verisign website seals that were so popular in the early 2000s.
Anthony Agnello’s Harmonizer Brought Recording Studios into the Digital Age
Having just done a little over a month of not drinking (for various reasons) - the only real crap I got was from my kids. Showing them that it was possible is certainly one of the reasons.
I have a very simple solution for this. Whenever people checkout on Amazon give them an option to tip people in the originating warehouse.
Office 365 is supposed to be the cross-platform, run-anywhere, version of Office.
The Chemistry of William Gibson’s Neuromancer
You're correct, but I strongly suspect this is a case of the government trying to deflect blame from their horrendous security to "those young hackers" and that this whole situation could probably be resolved peaceably by ensuring the data in question is deleted from the dude's computer.
Isn't the assumption always that accessing a web page programmatically is allowed unless specifically asked not to in robots.txt?
Violating Terms of Use is not a crime [1].

1: https://www.eff.org/deeplinks/2010/07/court-violating-terms-...
Labour unions are like leeches they suck productivity and promote mediocrity. If people are unhappy with the job they should simply resign and take up another.
Botnets are so passé. Nowadays, everything pwned is mining! Now your lightbulb will produce as much heat as it did back when it was incandescent!
If my car runs you over, and you sue me, what does the court do? It tries to figure out my intent. Did I intentionally run you over? If yes, I'm guilty of vehicular assault (not my car). Or did the brakes fail and I had no intent to hurt you? If yes, I'm not guilty of anything.

Likewise, what the computer does is irrelevant, except insofar is it tells you about the owner's intent. So the question is not "did the computer let you access the file." But "what does how the computer let you access the file tell you about what the computer owner intended?"
Short Selling as a Business Model
At what point does the owner or their agents find themselves posessing the onus to clearly communicate their will?

The answer, even in the realm of physical property, is clearly not 'never', so where is it, and what leads you to believe its threshold was not crossed here?
Why wouldn’t google just ship a “libchrome” shared library so that they could share it?
I would agree if it took an actual exploit to obtain the information.
To start with, I didn't know much about charting on the web before this project. (It's much harder than in Python :P)

I briefly looked at all the charting libraries on this list here: https://hackernoon.com/9-best-javascript-charting-libraries-...

If I were doing this project over again, I'd probably use [Chartist](https://gionkunz.github.io/chartist-js/) as out of all the libraries I looked at, it seems to be the easiest to get up and running.

While charts.js is a little more interactive, it was a little painful to get up and running.

The time slider is just an input slider some jQuery I wrote that dynamically loads up a new dataset and calls the redraw function in charts.js to load up a new chart.

Overall, as someone with entry-level experience in both manipulating data and web development, I found the overall process to be a little rough at first, but it got a lot better once I got the hang of the library.

In total, the entire website took me about a week, with 2 hours of work every day. So something like 15 hours, total?
> Ordinary law-abiding people don't go fiddling with URLs

That's complete nonsense. I've often changed a URL because it didn't work and had a typo. It's right there at the top of the web browser asking everyone to fiddle with it. If you were right, the URL bar would not be editable in web browsers, so you should be complaining to Google, Apple, MS, Mozilla for leaving this criminal-use-only feature so prominently on their products.
They FUDed the market out of existence. The workpower left was not enough to produce a competitive product.

Linus on Desktop is improving, but the damage is done.

It happened long ago, but tbe ripples will be felt for centuries. They bear a huge responsibility, and it will not be forgotten.
I don't see any terms of use anywhere else, and it looks like the side is down now, but the official links to this site describes it:

"The Access to Information website allows you to submit, pay and receive FOIPOP requests online. The Nova Scotia Government also posts responses to formal FOIPOP requests online on the Disclosure log. This is a free public repository of FOIPOP responses that have been approved for publication and have met a specific set of criteria (PDF file 800 KB)."

I also have a huge problem with the stance that violating the "Terms of Use" policy of a website can result in criminal charges when accessing publicly available information.
This looks great. Will you be offering any of your own commentary about the items?
Maybe we need to shift the metaphor.

A situation like this (security wise) isn't like leaving a window unlocked and having someone rob your house it's like

1. Leaving a pie on the window sill overhanging the side walk with paper plates and plastic utensils beside it.

2. A man knocking on your door, asking you for your bank account number without impersonating anyone of authority, you offering it up freely, then suing the man because you forgot to ask who he was first.
The market cap of Netflix is passing Disney
Yes - that was my first *nix, on a multi-user TRS-80.
You're wrong about many things but I don't want to correct you because then that would give away some aspects of why Lambda is working so well :)

Much respect!
Intro to Vive SRWorks SDK
Using | will cast it to a 32 bit integer!

2147483648 | 0 = -2147483648
-2147483649 | 0 = 2147483647
4294967296 | 0 = 0
-4294967296 | 0 = 0
6442450944 | 0 = -2147483648
> "tricking the HTTP server,"

I don't think you understand the web. I'm not anthropomorphizing anything. He literally sent a request for each document he wanted to look at and the server sent a response.

You keep referring to this hypothetical "reasonable person" who doesn't understand the very basic facts about technology, but the opinion you attribute to the "reasonable person" is just one you invented that happens to match your own.

> I think most people would assume that documents that can only be accessed by editing an ID were not meant to be accessed.

How would anyone know if the documents could only be accessed by editing the URL? Others in this thread have pointed out that some of those documents were indexed by Google, so actually, editing the URL is not the only way to get to them.
Amazing idea! I'll definitely be tuning in - good luck guys!
I create two lists: needs and wants. I prioritise them as such:

1 = no harm if not done; 2 = annoying if not done; 3 = disappoint someone if not done; 4 = financial or emotional harm if not done; 5 = financial and emotional harm if not done.

This is applied to both sets of items on each type of list.

Now I know what I NEED to do above all else, and then I can get to what I WANT to do later.