skysight-inc/HackerNews huggingface dataset:
Here's one potential scenario?:

Over-zealous developers who think it's appropriate to log all function calls with parameters for trace level logs, or a framework with the same opinion automatically applies such tracing and logging over the whole code-base.

No-one notices because no-one uses trace level logging, until one day another developer is tearing their hair out because they can't reproduce a bug that is only occuring on live. It's an urgent bug that needs resolution asap. So this developer turns on the trace level logging and eventually finds and resolves their bug.

Being the careful person they are, they turn off the logging and go away happy.

Meanwhile they've unknowingly produced a few gigabytes of log outputs which happen to include plaintext passwords.

That's just one of many different scenarios where people acting in 'good faith' can still lead to bad outcomes. That is why a "PUNISH THEM!" attitude to this kind of incident is not helpful.
How many rental properties will you buy for 100k?
> Because 7zip is not a good auto update software

Updates should be handled by the OS anyway IMO
We support cases like this by using domain names as authentication.

We plan to eventually support automatic spinning off of domains into their own account (e.g., for your clients after you're finished with a project). But for now, they could set up their own account with their domain and it would just work for you as a dev.

If you're curious: https://stadiamaps.com.

Please email me at luke@stadiamaps.com if you're interested.
Benioff.
I'm all for YIMBYism, but it's framed in a couple ways that I often disagree with.

First, I actually doubt that loosening zoning restrictions to allow multi apartment dwellings will harm owners of SFR properties. It'll change the neighborhood, and may lower housing costs per square foot of living space. I personally thing that it it's done properly, SF will be a more interesting place (outside of SF, I've lived in NY and Paris, and the denser places were nicer and more interesting to me).

The other thing is... well, NY (Manhattan) and Paris (left bank) are also the only places I've lived that are more expensive than SF. And the higher density neighborhoods in SF are among the most expensive per square foot.

I think a YIMBY SF could well turn out to be more interesting, more livable, and, more expensive. More density might just amplify network effects and create even more economic activity.

This is why I do think that for affordable housing, we really do need a first class light rail and subway, like Paris and New York (and a few others). Just building density isn't going to do it.
I'd put $10k in crypto if you're prepared to lose it. (or whatever ratio you're comfortable with) I won't say it's a sure lock to go up, but given history, returns of X00% are likely at some point.
The Apple podcast app has gotten continuously worse over the past few years, I'm excited to see that 3rd parties are picking up the slack, but I'm still pretty disappointed that Apple has neglected one of the most important aspect of the phone (for me, anyway).
Yes, that's exactly what happened. It would have taken me much longer to notice it myself.
I've been on HN for 10 years and am familiar with the guidelines. I don't think "communism directly killed a bunch of people" is much of an ideology as a fact (some sources argue it was 64 rather than 100M people). But I won't reply to s73v3r_ since you've asked me not to.
Try one of these: https://www.amazon.com/OXO-Good-Grips-Salad-Spinner/dp/B0000...
"[We] are implementing plans to prevent this bug from happening again" sure makes it sound like this bug is still happening. Should we wait a couple of days before changing passwords? Will it end up in this log right now, just like the old one?
They can still do slightly better than chance by ensuring their guesses have the right amount of overlaps. For example, if there were only two prisoners, the right strategy would be for one to pick box 1 and the other one to pick box 2, improving their odds of survival from 25% to 50%.

I suspect the chances are still negligible for 100 prisoners though.
It isn't a new trend.

Section 508 of the Rehabilitation Act legislated that the government purchase accessible software.

HIPAA legislated that your medical data be kept secure.

Minnesota, Nevada, and Washington have enshrined some or all of PCI DSS into law: https://en.wikipedia.org/wiki/Payment_Card_Industry_Data_Sec...

A little farther afield, seat belt technology has been legally mandated to be included in most automobiles sold in the United States since 1968: https://en.wikipedia.org/wiki/Seat_belt_laws_in_the_United_S...
I love the distinction between self-sovereign and administrative identity. Administrative identity is a leaky abstraction of a type that is too precise and binding.
There aren't decent PDF tools for linux? I've always found the opposite.
In general I agree with you, I seems to come up a lot with javascript frameworks. But in this case, it's a pretty specific claim, right? The dev is saying that it's lighter on resources than Postman because it's built with Java and not Electron. I think it's fair even given the current overuse of "lightweight."
What does it encourage?
Facebook security analyst is fired for using private data to stalk women
So what should the logo be? The radioactive trefoil symbol? You'd think that's the most "honest", but that's not an accurate depiction either, because irradiating the food doesn't cause the food itself to become radioactive.
We have truly come full circle
"Pocket Casts users will continue to enjoy: A wide variety of podcasts from hundreds of national and international producers;"

I hope this is just an unintentional underrepresentation of how many podcast producers are out there (many thousands, not just hundreds) and doesn't mean they're limiting which podcasts can be listened to in Pocket Casts.
> Propaganda is used to change peoples' opinions

No, this is misinformation. The purpose of propaganda and disinformation is to reduce a population's ability to discern the truth. To wear down cognitive abilities until people stop trying. You can't use apathy or lack of initiative as a "fact" supporting your pet conclusion.

As for your assertion that there is "no", "none at all" support for any such change it just happens that it's a well studied question.

You should acquaint yourself with the facts that studies have obtained. For instance, Gallup[1] tracks opinion in surveys.

In the recent past as much as 62% of the population supported a constitutional amendment eliminating the Electoral College. After the more recent election year, 2016, it is closer - 47% vs 49%, still in favor of change.

In short, your argument is just baseless noise - just like a lot of what's being emitted by disinformationists in our current environment.

[1] http://news.gallup.com/poll/198917/americans-support-elector...
No one forced you to create a Twitter account.
The "right" way to handle this is to revoke access to all logged-in devices, revoke all previous passwords, send an email notifying users of the revocations, and force a password change upon next login. But Twitter won't do that because a non-trivial percentage of their user base would never jump through the hoops to get things up and running again and Twitter's MAU numbers would sink.
My thought when first hearing about them was that, having an extra point of failure (Helium leakage), they would have higher long-term failure rates.
So it was less than 100 lines of actual needed Perl code in that script? ;)
This is actually a very acute and non-obvious observation. People might get tired during meetings, but this will mostly affect following meetings, rather than engineering. And it's easier to focus on an activity (and optimize it) if it lasts a day rather than an hour. This might end up improving the overall "meeting culture" in the company, teaching people to schedule breaks, be on time and so on.
The obvious one is public-private keys. Servers only ever get your public key.
Twitter's CTO had an odd tweet about this disclosure (emphasis mine):

> We are sharing this information to help people make an informed decision about their account security. We didn’t have to, but believe it’s the right thing to do.

https://twitter.com/paraga/status/992135139994943488
> CA YIMBY literally shouted down minority activists who were opposed to a housing bill at a recent protest.

There should be a ton of videos accompanying this, right? All I could find was https://www.facebook.com/groups/vote123equity2018/permalink/... which looks like pretty standard protesting to me.
Or just cook your leafy vegetables so both risks are reduced.
> Does someone still have the old masks?

You can probably reverse the masks with a microscope with a little elbow grease. Not trivial by any means, but doable by someone in a garage as a hobby.

The real question, does a fab that can work with that process still exist?
He's probably planning to ICO. Worked for Telegram, and taking questions from YouTube is a great first step toward raising billions in cryptocurrency.

Also, recent events have proved that pissing off the entire financial community so much that they refuse to lend you money because you always lose it is no barrier to becoming President of the USA - and, in fact, can help, because the entire electorate hates the financial industry anyway. Maybe we'll see Elon 2020 and a government bailout. Hell, government bailouts of the auto industry is pretty par for the course these days.
So is this basically a confirmation they're giving up on NPR One? It hasn't been updated for 7 months, after about 24 straight monthly updates.

If so, I wonder if they're going to cram livestreaming into Pocket Casts. That'd be enough for me to switch to something else, I much prefer apps that do a single thing extremely well.
It was dropped.
"The people who become devoted to a field or a technology - who make the business their passion, and focus on filling a need - these are the people who earn a fortune."

Let's not leave out the sympathetic wealthy father. It's always played down, and left out of, "How I made my wad" speeches.

I can go through my high school year book, and pick out the wealthy kids. They are all wealthy now, and honestly, would be most likely homeless if not for that family money. Money to risk. That's what the poor/middle class never have--money to risk.

And it's more than dad's money. It's less stress in college. Hell, most of the rich kids I grew up with thought college was boring. It's dad's wisdom over money. Dad's connections. Dad's free lawyer. Dad's wisdom. Dad's low interest loans. Loans--that's a laugh.
Why? I have a small app with a few thousand users that generate almost no money but contain sensitive data - if I were to be fine because of a leak, I would be dead financially. Where do you draw the line between the companies that should be fine and those which don't?

No matter how advance our technology is or the security measures we take, any system connected to internet somehow will have a leak or an intrusion or something that compromise security.
This whole thing is like the .dev TLD debacle.
So the universe is deterministic and nothing happens by chance? I think this is essentially arguing definitions of terms.
This happens constantly.
You'd be surprised what's recorded in logs...
Indeed. This is probably a good reminder for every developer to just go and check through their logs to see what is there. It can be quite a shock sometimes to find how much can get dumped there..
This is a shameless plug for my company, Stadia Maps. We started the company because of situations just like this.

We'd be happy to talk about a much more reasonable cost. :)

Please email if you're interested: luke@stadiamaps.com or take a look at our website https://stadiamaps.com
Quantifying Abstraction in Art: Mondrian
Unless he was confused (quite possible) Musk would have been referring to the CEO of Daimler Trucks North America, Martin Daum.

https://www.bloomberg.com/news/articles/2018-02-21/daimler-t...
Tassel phone for stylish women mini shoulder blanks
As developer, I can tell you this happens more often than I'd like to admit.

debug logs is that necessary evil you need to troubleshoot pesky bugs. Unfortunately some of these debug tools need to be turned on in a live environment to capture those logs for debugging. But also Unfortunately, we are humans and we concentrate on fixing the bug and forget to turn off logging or log unnecessary data.
> if you accept the premise that housing is in crisis

s/accept/believe/g
Remote work would be hugely beneficial, even with a pay cut.
Rents in Seattle have stayed relatively constant over the past several years despite adding tens of thousands of residents because many new apartment buildings have been built.

However, home prices (including condos) have risen drastically because of the limited supply. There's no new space for single family homes, and because of a Washington law which increases liability for developers, few new condominium buildings are built.
Pushing my message again, but if you've not done so in a while, visit https://stackexchange.com/sites# and look at how many utterly non-technical topics are covered by this model. The application of the system is about far more than just traditional software development.
Those acrylic backing plates are going to crack at some point. The author should look into aluminum composite panel (Dibond is one brand name). It's a sheet of HDPE plastic sandwiched between two thin layers of aluminum, and is much stiffer and stronger than acrylic of the same thickness.
It's dumb if you willfully select to view the statement in isolation. Wall Street did not come about to make the world a better place but came about to make investors rich. It is this single-minded focus on wealth that I couldn't give a rats ass about. This focus of wealth from quarter to quarter is short-sighted and unrealistic in certain businesses.
This comment began with a questionable proposition and then just kept going downhill.
It would be helpful for these groups opposing SB 827 on "equity" grounds to propose alternatives that will have a similar impact on housing affordability. I read that article, and those linked from it, and could not find a single proposal to that end.
SumatraPDF and muPDF for really big pdfs. When on the mood, I use my trusty GSView.
It's possible it's just a count of how many podcasts are included in the "Discover" section. I don't know what the process for getting added to that is.

It covers almost all of the "big" podcasts, but there are a handful of local ones I've had to add manually.
You wouldn't even need that -- just a request log that included the request body without sanitizing it first :)
Oppo F7 Defects
This is an important part of the equation, and it's unfortunate that the article doesn't go into sufficient detail about the actual mechanisms by which the infection can happen. If anything, the article's mentions of "people are simply eating more fresh produce these days" and "some contamination can still slip through" foster an attitude of helplessness, as if this is a new normal we need to get used to.

Poor living and working conditions for migrant farmworkers is a contributing factor to outbreaks like this. Workers who are present illegally or are otherwise marginalized and taken advantage of, even if they are part of legal guest-worker programs, suffer conditions where poor housing facilities or the need to work under great time pressures leads to inadequate sanitation.

A 2017 story [0] illustrates this:

>Kristina Espinoza, a labor department investigator who recently visited the farm, described a "makeshift labor camp" that was "dangerous" and "unsanitary," according to court documents. [...] Gonzalez had workers shower in nine stalls inside a cargo container; there was no functional sewage system, so wastewater accumulated underneath the container, Espinoza said. The electrical cord used to light the facility was exposed to standing water, posing a risk of electrocution, according to court documents. The workers shared one toilet in the trailer and had access to port-a-potties.

[0] http://www.latimes.com/business/la-fi-farmworker-abuse-20170...
It's often not worth the overhead to develop for small bits like `likes`. For small, 30-50ms requests they're not going to notice anything either way. A brief flash of an icon isn't useful.
Pretty much. Apparently github did something similar and now people are curious about the library/framework. Why is it so obvious that they both used the same library?
Look at remoteok and search the HN hiring post for remote roles. Review the skill sets listed, and work towards gaining those skills.

If you have those skills then work towards selling yourself better.

Believe in yourself!
You're right in thinking that it's not a simple solution of simply adding density.

More supply is good, but care needs to be taken that it's the right sort of supply and regulations are in place. Without care, more density may simply juice speculation. Both Vancouver and Seattle create lots of new residential buildings, but only Seattle is seeing significant increases in vacancy.

YIMBY activists are on the right track, but they need to ensure they focus on increasing vacancy, not just increasing building construction.
Wtf? Some of my apps have been rejected in the app store submission process the first time for spelling mistakes alone. How can something like this slip through? And how is it possible that scamware like this is in the top ten for two month?
Whether a problem is interesting is orthogonal to whether its important. This is an earnings call and scaling up production is actually an important issue to address for the company's long-term viability.
>Produced using processes that we've tested for centuries. We're not sure they work, but we're sure they're not ridiculously dangerous.

There's a bunch of stuff that we "tested for centuries" and thought were safe... until they weren't. see: lead, smoking, asbestos, cured meats.
This is best survey of the literature that I know on the topic:

http://www.law.nyu.edu/sites/default/files/Been%20Ellen%20O'...
Reminds me (and I'm sure others had the thought) of the Awesome GitHub repo[0] which links to many of the other Awesome-* repos.

[0] https://github.com/sindresorhus/awesome
By professional help do you mean therapy?
Are you arguing that you should be allowed to be reckless because you cannot afford the cost of being careful?
Have you considered getting a dedicated server for this !?
That that is “right” is subjective. Twitter isn’t banking or ATC or healthcare.
If you mean business locations and the like, OSM is more or less empty in the US. Cities and towns and similar should be okay.

What it amounts to is that there aren't any openly licensed business geodatabases and there aren't really that many people working on OSM in the US, especially commercial POIs (where people buy data from Yelp or Foursquare or Factual or whatever instead).
That was nice a for a minutes. It's funny how the web, free software allow for so many games these days that are free that I think we can take it for granted. When I was a kid, getting _any_ game at all was amazing.

Kids these days are overwhelmed with free stuff, it's likely the reason an engine like this has a hard time making money.
Places in the UK that come to mind are railway towns -- Crewe, Swindon, Doncaster, Ashford. They all tend to be doing fine now, despite starting off as a town built around a single employer.
I'm curious if anyone has details on using bcrypt/scrypt at scale. Specifically one way I could see this happening is something like login requests go to a load balancer that puts the requests on a queue to be picked up and validated by some hasher service, and the queue ends up writing the requests to logs to recover from certain kinds of failures.
No, it is just poor oversight. Not incompetence. These could be excellent developers that just overlooked a logging tool.
I really dont understand why I should open a new browser instance (Electron) to view one pdf when I could just open it in my browser..
I'm curious about the same. If I've been riding my existing session cookies for a while, am I in the clear?
Vallejo police have sent Zodiac Killer DNA to a lab. Results could come in weeks
Public Radio Organizations Buy Pocket Casts
He states that they see one drive that is between 94-99%, but that may be a sensor issue. You'd lose the power savings.
Twitter urges users to change passwords after computer glitch – Article [AMP]
That's a solution I do like. I was expecting to hear biometrics, email login tokens, or social account logins.
> stuffed crust from dominos

I realize people play fast and loose with reality when it comes to *coins, but calling Dominos 'pizza' is fraud.
He literally could have said just the first sentence and been applauded. Adding the second sentence adds nothing but arrogance.
>Just try Rowhammer via GLitch on a test iOS device

from TFA:

>the PoC currently works only on a Nexus 5 phone
India's capital of student suicide [video]
The phone that got me to give up on Nexus. Worst phone I ever had.
Thunder Token Inc/Security and Cryptographic Engineer
/Full Time/Sunnyvale, CA

Required Prior Experience:
Designing and implementing secure systems and/or cryptographic algorithms.

Responsibilities:
Design, implement, and optimize core cryptographic libraries.
Design and implement security protocols and mechanisms.
Perform security review on source code and network protocols.

Please email your CV and job title directly to hr@thundertoken.com for considerations
Love Pocketcasts. Though I hope this mean they'll need to make the web app accessible
Do you think the value of your house would go up or down with this zoning change? (totally fine if you think it would go up! I suspect it would up and am curious if you agree)
I remember living in China for an extended period of time and never seeing raw vegetables as part of a meal; locals I spoke with found the very concept unsanitary.

It's unfortunate that some are advocating just abandoning chapters of our local cuisine as being no longer viable in our era. I'd rather we more strongly enforce regulations so we can hold onto our salads.
Try Overcast, I’m a big fan.

I finally gave up on the Apple app years ago after it was unable to sync my place for the 1200th time.

Never had that issue with Overcast.
It's a minor shame that they named their new machine Z. There's already a virtual machine called Z - the one used to run Zork. Imagine if you got the two mixed up! That could make for some very confusing adventuring and/or mathematics indeed.
This is the first time a product I use daily has been acquired that didn't leave me with a sinking feeling. Congrats to the team!
An extensive open source framework for efficient homomorphic encryption would have been so much more exciting and I really hope there will be some kind of breakthrough that reduces the current overhead significantly so it will be more commonly used in the future.. Oh well, at least there is a theoretical foundation (for completely trustless computation) on which we can build on.
Have you tried zxcvbn [1]? It’s a pretty good heuristic, with common names and character replacement built in, alongside the ability to provide a custom dictionary with heavy weighting (eg your user’s names, email, address).

[1] https://github.com/nulab/zxcvbn4j
>provide an historical record that answers "How the hell did our systems end up looking like this?"

Version control?
That isn't how it works though--look up partial pressures of gases. Helium will continue to escape until its partial pressure is at equilibrium with the external environment, i.e. near to zero, and the external gases will enter until they are at equilibrium with the internal environment. At that point the partial pressure of each gas will be equal on both sides.