skysight-inc/HackerNews huggingface dataset:
> from Affinity Health Plan, a New York insurance company, ... we obtained the most disturbing documents: 300 pages of individual medical records. They included everything from drug prescriptions, to blood test results, to a cancer diagnosis. A potentially serious breach of federal privacy law.

> As for Affinity Health Plan, they issued a statement that said, in part, "we are taking the necessary steps to ensure that none of our customers' personal information remains on other previously leased copiers, and that no personal information will be released inadvertently in the future."

For comparison, per https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf - "As required by section 13402(e)(4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals."

Of course, any single breach of a copier would be limited to the individuals whose documents touched that copier, and might come under this threshold. Affinity is not on the list at the moment - this may be because the news only just broke.

But do the regulatory bodies say "Affinity, you were found to not have a procedure for properly disposing of copiers, so we need to assume that you've leaked health information from EVERY disposed copier historically?" Only then would it be treated with the same seriousness that e.g. HIPAA-compliant SaaS services are expected to treat security. Just because copier hard drives aren't networked software doesn't mean that they don't have network-scale security problems.
My essay focuses on Google and DoubleClick specifically: http://yuhongbao.blogspot.ca/2018/04/google-doubleclick-mozi...
> nor do I know anyone that feels that way.

That’d be me (kinda):

I used to make exception for web comics I subscribed to and other websites I visited regularly, using adblocker only for browsing the random internet at large.

Until looking for group served a malware.

So now everything gets blocked.

So I would probably put myself into the “understands ads are your revenue and once upon a time was permissive” category.
Re: homeless, panhandling income is surprisingly tightly tied to general wages. A tech bro making $300k has much more money to give than a blue-collar worker making $30k.

Cost of living (on the street) is pretty similar everywhere, so it makes sense to have the homeless populations migrate to areas with the highest-paying jobs.
That only works on a disk using a format from the 90s. On a modern disk once you overwrite a sector the contents are no longer retrievable. There are no companies that can read a sector that has been overwritten. They can only recover damaged drives and files that have been deleted by the operating system and not been overwritten.

On the other hand, deleting flash memory is very difficult because the controller doesn’t really do what you ask it to do.
Hopping into this. The GDPR ask just that: if you are using ad networks, you should ask your user to give his explicit consent for each network you are serving him. Note that if you are serving malware, you are responsible and can be fined, which is pretty fair, imo.
You still need to make an HTTP request to get the ad data. Ad blockers don't just block the DOM elements, they block the HTTP request too.
There are a few ways.

a) In terms of memory safety, Go is not memory safe in the presence of data races, and Go does not prevent data races at compile time.

On top of this Go does not enable ASLR on most OS's. That means that when Go loads code from other languages, such as C/C++, memory safety issues in those languages are extremely easy to exploit relative to in a language like Rust, which enables tons of mitigation techniques by default.

b) More loosely, Rust has a more expressive type system. It is, in my experience, much simpler to enforce constraints in a 'type driven' way. In my opinion, this leads to safer software.

As an example of (b) I have written authentication code that encodes the authentication protocol's state machine into the Rust type system. What this means is that it is impossible to jump between two states in an undefined way. Beyond that, because of Rust's affine type system, it is impossible to reference invalidated states.

For authentication code, especially when you add complex stateful transitions such as rate limiting, whitelisting, etc, this is an extremely effective way to reason about your security critical code.

I think there is a case to be made that there is a real, significant difference between the languages regarding security.
I use skype pretty regularly outside of work. Its pretty convienient, especially if i need to share a screen quick. I never really have connection issues related to skype.

Most people have it, and its simple
Archive.org has it.
http://web.archive.org/web/20180510203132/https://blog.ladde...
We want crypto and that is all. The sooner you realize this the better.
Not only that, but "work" was often fun back then. These people were basically doing for work what people today do for fun: hunting, crafting, cooking, exercising, etc.
The narrowness of a niche is wholly dependent on how much demand there is for the thing in the grander scheme of things. Programming used to be incredibly narrow, and I would bet ya there were people complaining along similar lines back when engineering meant just mathematics and physics. Clearly the AI and ML rift has been growing, partially evidenced by this program; enough for it to no longer be considered "too narrow for a BS".
> 'unregulated'

In the sense of 'government regulation'. They are the ones who can arbitrarily enforce rules, pick and choose winners, and complicate the barrier to entry so much to discourage competition ...all within the law mind you.

> ...ISPs, who are driven by profits and literally nothing else

They live by the profits, and die by them too. That's how free market works.
yEd is my go to editor. Works on all platforms and is free.

https://www.yworks.com/products/yed
Pushing an ad to my browser is stealing - namely CPU cycles and network bandwidth. My terms and conditions (which they implicitly agree to by answering an HTTP request from me), forbid them from supporting themselves with advertising.

Sound ridiculous? That's because a web request and response is a collaborative effort of the two computers. The World Wide Web wasn't built for this kind of shitty, vaguely-adversarial, commercial-transaction-like interaction that everybody seems to want to turn everything into.

If you place your "content" for "consumption" on the World Wide Web, you are saying clients can connect to that server and request content. To say that certain content is mandatory is completely ridiculous. Restricting content can only be subtractive, that's why a paywall is the only sustainable model for anyone who insists on eternally Septembering their way to profit and riche$ on the WWW.
Yes, and that's why I'm using an ad blocker, too. But the questions remains what is the Web going to look like as a mass medium when taking this to the extreme and there are only ads and propaganda left as rational incentives to publish content.

Btw, you know you're on a site which occasionally does "native" advertising/promotions, if with decency? Also, think of tech coverage in the last decade or so; it's dominated by big media pushing their agenda aka the "consumerization of IT" (cloud stuff, Fb and Google web frameworks).
I'd be curious to know why it chooses to have a register step, why not just use the key of the authenticator/the relying ID as a proof of identity?

You would normally use a scheme like this so that websites cannot connect multiple identities together, but it seems pointless here because the pubkey will be signed with the user identity and the server will have logged your real pubkey
This is practically GDPR.
Did I say agile is a methodology?
> Lower tier isp’s usually pay the big guys for peering.

In most all cases they don't peer with the "big guys" they simply refuse. What they do is peer up with the local public peering exchange that's non profit/almost free, then the packets find the big guys on their own.

What the small isp's usually have to do is pay the big guys for use of the actual lines/access to the clients, as usually the big guys are the only ones allowed to run physical lines to houses ect, as in if everyone was allowed to run their own lines it would be a huge mess (see Mexico as an example for rats nests of cable lines placed by any company with the will to run them through the gauntlet)
Thanks, that is good to know. I am doing a whole degree there. I am not sure how recruiting works at Google but when you say Google do you mean London or US based offices? Obviously I don't know what I will want to do in 4 years but I anticipate moving back to the US after I graduate.
But the versioning guarantees are _exactly_ why having them in the stdlib would be good for me as a user; it means I'd be able to have code that keeps working, but have new improvements available.

It's totally fine to decide to make the trade off, but it's just frustrating to not have the downside acknowledged.
This seems to fail to recognize—and consequently retain—the core failure of Agile. It's too squishy.

Agile is about finding and continually adapting methods that work for the team in its actual concrete environment, but the manifesto doesn't address how to do that, and the Agile literature is all about particular methodology and not about how you manage evaluating and adapting processes as a tesm.

The critical part of Agile has almost no coverage in the Agile literature.
If you can, just stay with a .com. You're just looking for more headaches down your road to success.
> It's rare though, from what I see, for a DUI case to be about anything other than BAC. I have no actual statistics on that.

That's because BAC is easy to measure. If you want to prosecute for BAC, you just need trusted test results. If you want to prosecute for impaired driving in general, you need to prove actual impairment, which is tough. This is why MADD campaigned for the .08 limit nationwide. It's easy to enforce.
Sure that's fine for some, but I personally don't see myself bothering to faux-empathize with a machine since I really don't have a mental-model for that kind of entity, so the empathy would be false in any case. Empathy for machines may in fact be cutting straight to the point and not worrying about emotional impacts since maybe machines value efficiency and conserved-cycles.
Even today for semi- or non-routine tasks I'll do weird stuff like copy text to Notepad to remove formatting then past it back into the same app/web page to enter information. I'll also do some weird things like instead of using an entire screen to read text on a long web page article I'll just keep my eyes near the top of the screen and scroll so my eyes don't have to move. Not sure what I'm trying to say but maybe there are entirely new ways of building existing app types out there that have an audience out there.

I wish we spent as much time on HCI in our field. I get a lot more value out of seeing how people I develop software for do their tasks and then thinking about how that could be improved. An implication of that is that I'm not building a fancy UI for my resume's sake; that I'm actually improving their day-to-day workflows. That takes some cost and time but in my projects nobody wants to pay for that.
No, I said that what you said is true of methodologies, but not of Agile.
Ink-trap development
For some reason listening to metal makes me focus so I will often have that on in Spotify. Some bands include Rosetta, Neurosis, and Amenra.
You seem to think technical implementations matter for some reason. I find that rather odd. Do you think that someone leaving their front door open entitles you to the contents of their home?
If you enabled it (it is by default I believe), the conversations are stored in Outlook.

It sucks... but you can still get to them if you have access to Outlook.
> ... This conversation is ENTIRELY about measurements and their margin of error. This conversation is specifically about how the margin of error relates the legal limit.

I disagree. The person I was replying to was indicating that 0.7 should make you feel bad. They were not saying that because your 0.7 might actually be a 0.8, they were saying that because morally you're playing with fire.

Margin of error does not matter in the discussion we were having, of morals vs law. Morals and margin of error are two completely different discussions.

> You then made the erroneous claim that it doesn't matter if the margin of error is applied "before or after" the limit.

How does this matter to morals? I said it doesn't matter before or after, in the context of how it affects the morals of 0.7 being morally incorrect.

This was a moral discussion, ya'll went sideways with it.
This website is not very active, but it does what you want : http://longbets.org/
My fellow Canadians routinely say "my friend moved to America" and similar.
I'm waiting to pounce on that. Oh, the testing I will do.
> What 'terms'? They're essentially giving third parties the ability to inject anything they want into their websites. How can they meaningfully establish 'terms' if they have willingly given up the ability to hold up their end of those terms?

The terms are that you run the code they give you. If you don't like those terms, don't go. Simple as that.
I agree. Many of the statistical concepts can be extended from advanced undergraduate stats too. I can see how the high salaries paid in these jobs would lead to some serious gatekeeping though.
My concern is that these courses will likely be taught without any deference to the ethics involved in the work done, and I think that will play an increasingly important role in years to come.
Peering exchanges are great, and a more cost-effective way of reaching other participant networks vs paying for transit. Our local exchange is called SFMIX (https://sfmix.org/). They're a great and under-appreciated group working hard to improve connectivity.
It seems improbable that there are multiple ways of putting together the kernel's handling of mov ss.
Couldn't the same be accomplished with a minor or concentration as is common in many universities?

(Registering formally for a minor gives you preference)

I don't really have an issue with this degree, but I think it's mostly a marketing ploy to have a "major in AI" versus "AI concentration" or "AI minor" (set of electives alongside the normal CS degree)
> Completely untrue - I've been a 'subject' in police department intoxication training, and have watched the BAC of myself and my fellow 'subjects' drop rather predicatbly over the course of an hour or two from 'going to jail' to 'probably shouldn't have driven but not over the limit'.

This all depends on your body weight, your sex, your genetic ability to metabolize alcohol, what you're doing, and what you've eaten. It's also important to say most people don't carry around a field breathalyzer, so you can't tell how many hours you'll need to get under the limit because you have no idea what your BAC is.
At a successful restaurant, they don't care about reporting, data analysis, or who sat in what seat, just that all seats were occupied. That is already accounted for by looking around the rounm and by the numbers at the end of the night. The reservations are for the seating not the take.

If there is any data analysis it has to do with where the next restaurant can be built.
> So, security by obscurity?

Obscurity is a perfectly valid layer in a security system. It's just not sufficient as the primary security mechanism.
It did not target wasm yet back then: https://wiki.documentfoundation.org/Development/Emscripten

Feel free to join #libreoffice-dev @ Freenode and chat with samuel_m about it, if you are willing to put in work.
> Pushing an ad to my browser is stealing - namely CPU cycles and network bandwidth. My terms and conditions (which they implicitly agree to by answering an HTTP request from me), forbid them from supporting themselves with advertising.

Great, and if those are your terms and conditions, guess what, nobody forces you to visit their websites.
I've been meaning to keep hacking on this project, but I have this site: https://engineered.at/ that has a ton of rss feeds fronted with an HN/Reddit style voting and commenting interface
I'm under the impression that Devuan's purpose is to actually progress into the future without systemd.

I am not under the impression that Debian strives to make progress on the systemd-less use case, it seems more like a minimally supported mode.

But it's not something I've investigated, so take that with a big grain of salt.
From a quick test SQLite seems to be doing the right thing. I tested inserting single rows, multiple rows, and restricting the conflict-resolution with a WHERE clause -- the "row count" always came out correct.
> I can't believe you're being serious. OK, let's take it a step further. What about this: in the middle of the book the author says you can't finish reading if you don't stand on your head. Will you do it? Classic reductio ad absurdum.

That is not an ad reductio argument in the least. It's a silly condition, but if the author requires it, then you must do it, or you can simply not read the book. What part of basic social contract theory do you not get?
The problem is silicon valley folks talk about ethics in a self serving way. They expect ethics from others but are not willing to give it back.

Whether stalking people and abusing personal data or now dehumanizing people, enabling bad actors and making people suspicious of callers it's always someone else's fault for not understanding 'innovation', not theirs for not considering the ethical implications. This is a tone deaf play dumb approach to ethics for profit.
Yes, but did you just do an update and an insert every time, or did you have some code that checked the return values and not run the extra unnecessary command?
I'm quite certain GP meant intel / information / analysis. Slightly abnormal word choice
I feel like i would rather be going into a DS interview as a CS grad with ML/AI experience than as an AI grad.

Maybe i'm wrong here, but our biggest painpoint hiring for our datascience team is lack of dev skills. Simple stuff like deploying a model to heroku & or writing tests
All joking aside, CMU does very much have a problem with promoting and fetishizing a culture of stress.

I only have anecdotal evidence of this, but more so than just about anywhere else, CMU as a university prides itself on a very difficult workload and a lot of the solutions that students come up with are extremely unhealthy.
Very useful. I started building the same thing a few weeks ago for Chrome, only to realize it's actually impossible because Google doesn't allow dynamic themes.
First sale doctrine has nothing to do with this. First sale doctrine applies to resales, not the initial sale.
Definitely! I'll shoot you an email.
>If I turn off my tv during ads on a cable show, am I now stealing?

The former CEO of Turner Broadcasting, Jamie Kellner, thinks that you are:

https://en.wikipedia.org/wiki/Jamie_Kellner
Don't even get me started on Webex. It's better than SfB sure, but only just. On Windows it will turn off cleartype whenever you do a screenshare, so whatever effort you were putting in to make something look good goes straight out of the window.
I quipped in a retro once that uppercase-Agile is agile the same way the Democratic People's Republic of Korea is a Democratic People's Republic. This was shortly after a teammate of mine described the three-to-four-hour biweekly sprint planning meetings he was subjected to on a previous team.

Here's a tip: calculate the cost of every meeting by taking your salary (or an estimate of the average salary in the room), dividing by 52 and then again by 40, doubling it, and multiplying by the number of people and then again by the number of hours in the meeting. Alternatively, nevermind the salary calculations: subjecting 13 people to a 3 hour meeting wastes roughly a full-time human-week of productivity.
Only just broke eight years ago. Curious...
This makes me think that we know what the effects of cigarettes are; how long will it be until we see the effects of social media addiction?
I'm curious too. I've done controlled substances for studying and still can't do 16 hours a day.
> No, it's in the neighborhood of 1 hour to drop 0.01% from most sources I can find.

Those are general guidelines. If you think they will apply to you then you're gambling. There are so many factors that influence this that the only safe thing to do is just not drive if you've been drinking at all.

> No, slamming two drinks and hopping immediately behind the wheel is not even approximately reasonable behavior.

Hey I'm not at all saying that. I'm saying if you have two beers in an hour -- which is completely reasonable -- and then drive home, you're probably driving drunk under the law.
It's been a while since I've used SQLite (over a decade ago), but didn't they already have this sort of functionality in there with an 'INSERT OR UPDATE' modification to the standard SQL INSERT command?

In fact, it always made me wonder why other systems (at the time) didn't support this critical and useful feature? I was getting tired of writing a SELECT, comparing the returned row against the one I was about to update, then branching to an UPDATE or INSERT command depending. Doing it all in one command was a breeze.
A more apt question would be "why are these files being stored after the device has finished doing whatever it needed to do with them"
Γαλλική υπόθεση στο παμε στοιχημα την Παρασκευή
V8 wrapped objects lifecycle
I hate Enterprise environments now after working in one for just a couple of years.

They are all about conformity, standards, following established routines, established chain of command. Endless meetings due to the need to 'sync' every little decision with team leaders, product owners, scrum masters, who in turn syncs with the team members on other teams, making sure information gets distorted, lost, confused.

I'm never again working in Enterprise until I'm 60 and just want to sit on my ass, do minimum work, get payed and retire.
Low Level Bit Hacks You Absolutely Must Know
If you can teach a kid frequentist (regular) statistics, then you can certainly teach them things like Bayesian statistics.

Add things like decision trees (which you need to build something like a chatbot). In fact, a friend of mine from my freshman year (way back before everyone had computers in college) wrote a chatbot. I had never seen anything like it, and he let it loose on IRC. Was pretty cool back when things like rn and ftp were all there were on the net.

Regression isn't that hard. Heck, most advanced Calculus and further maths are way harder.

Neural networks aren't even that complicated, although tuning and understanding the output sure is. But that comes with time.

Markov Chains are basically advanced flowcharting. If they can teach PERT analysis to Business majors, then Markov should be easily understood.

Sure, there are some hardcore things, but the foundation is based on stuff many smart people should be able to learn in undergrad. Twenty years from now, when we are surrounded by "AI"-everything, we'll wish more schools did this. And I guarantee you'll wish your kids learned this in high school.

Yes, I am serious about that last comment. I have an 8 year old son, and I'm already working on teaching him Markov Chains using sports. Yes, it's super simple, but easy enough to teach him consequences of actions, without getting into nested probabilities.
Every college student already knows English. It's a required subject in high schools. Anecdotally I do know of a Chinese student majoring in English in college telling me the best part of her college life is reading Dickens all day.
Problem is, majoring in English doesn't necessarily mean they actually have the ability to really speak English.