skysight-inc/HackerNews huggingface dataset:
This is what I sent... feel free to mention any issues you see with it which may help other people.

Hello XX,

I am concerned about the security of my cell phone location information.

Yesterday, a vulnerability was found that leaked the real-time location of 95% of the cell phones in the US. That is unacceptable.

US cell phone carriers including AT&T, Sprint, T-Mobile and Verizon share personal information, including phone numbers and real-time location of cell phones, with companies such as LocationSmart, who then resells the information to other companies for marketing and other purposes. Carriers to not provide a way for users to opt-out of such sharing. This is completely legal under the current Electronic Communications Privacy Act. LocationSmart claims that they will not share the gathered information without user consent, but the definition of consent is vague, and that doesn't protect the public from security breaches. I understand that carriers need to have location data to comply with emergency 911 regulations, but it is unacceptable that they are able to share it with 3rd parties who may use it for dubious purposes, and may have lax security standards.

We need to have laws that protect the privacy of cell phone users, and do not allow carriers to sell personal information to 3rd parties. Or, and the very least, customers should be able to opt-out of such sharing from their carriers.

For more information on the vulnerability found yesterday, please see: https://krebsonsecurity.com/2018/05/tracking-firm-locationsm...

Please contact me if you have any questions.

Thank you,
XX
The previous sentences are worth quoting as well:

>This model shows that rolling out just as safe or a little safer partially-autonomous vehicles by 2020 will save 160,000 more lives over 50 years than a scenario that waits until 2025 to roll out almost perfect autonomous vehicles. Delaying the roll-out of partially-autonomous vehicles costs lives.

Sure, rolling out autonomous vehicles will save lives if you assume that they are safer than humans. But right now all the evidence points to autonomous vehicles being substantially more dangerous than humans. Waymo reports disengagements every 5,500 miles, and estimates that something like 10% disengagements would have led to a collision.

https://www.dmv.ca.gov/portal/dmv/detail/vr/autonomous/disen...

And taken as a whole, self-driving cars have already killed one person with only about 10 million miles driven. It would take the average human driver more than 100 million miles to kill someone.

Edit: My comment refers to safety of level 4/5 autonomy, not the current Tesla Autopilot.

The real interesting question is whether it's worth it to deploy dangerous cars, risking today's lives to help save future lives. It's not that interesting to ask whether deploying hypothetically safer cars will save lives.
How Baby Boomers Broke America
He talks smack about OOP but launches into talking about his latest code project instead of explaining why it's bad. This guy would presumably also hate relational databases, since you have to think in a similar way in order to design those.
Note that you can't transfer BTC into or out of Robinhood so you may be stuck if they increase fees in the future.
No. They definitely did not have anything even resembling "perfect teeth". You article only refers to crowding.

Bad teeth and infections were roughly as common 20,000 years ago as they are today. The difference is that back then, they could kill you.
not sure if this would cause a stress field similar to the one of living in capitalism, with the addition of a media machine existing solely on distress, amplifying fear, distraction and anxiety as a means to get business.

No way to check this hypothesis, fortunately or unfortunately.
Cached: https://webcache.googleusercontent.com/search?q=cache:5zk3Sv...
Though the interesting answer to why Microsoft now has to advise against .local is that RFC 6762 reserved it as a special-case for Multicast DNS (mDNS fka Bonjour and a bunch of other names).

https://en.wikipedia.org/wiki/.local
And for any local variables, not just arguments.
In my experience every little bit of verisimilitude makes a huge difference. Little things like Oculus' hands which line up perfectly with your proprioception and have the fingers move depending on your finger position make a huge difference. Just a few of these little things and you get new people in a horror game completely forget that they even have the option of taking the headset off.
A theoretical EM-drive would run on electricity, as well, so thus wouldn't be propellant-less?

Well, assuming one can violate only one law of physics at a time, this is just semantics.
GitHub UI changed – user dashboard got a face lift
Regulation not working in this case.

Interesting how if you incorporated to do this, it actually makes animal abuse more excusable, rather than being interpreted as a criminal conspiracy, and being treated more harshly than random individual abuse.
Just spins on Win10 Chrome.
Please don't just say this is a US perspective. This is a sociopaths perspective that the current US legal system promotes due to the machinations of the same group of sociopaths.

Every business owner here who would complain about how the GPDR is taking their rights to their personally earned data away would be the same people who launch a lawsuit because one of their competitior's products had a typeface that was vaguely similar to theirs

There are regular people here, they just don't go starting businesses that have abusing their customers as a business model because they couldn't sleep at night if they did that
Sad to hear its OK to pass retroactive laws in Germany, but maybe Netflix should just tack on 5% to cover this for any German customers.
It's the person giving consent through the bot. Just like you give consent through e-mail, just a little... different.
yeah, right. because google works on multiple assistants simultaneously
`tail /var/log/nginx/access.log` Oops.

Also the section of the GDPR that talks about pseudonymization using a token how should my user DB table be GDPR compliant? Contains ID (primary key), username, password hash, email, etc and the ID is also in other DB tables for obvious reasons (such as user posts/actions).
"What if you don't want to deal with any of that."

What if you don't want to deal with the rules of the road?
In this blog post under the section Enter 1.1.1.1: https://blog.cloudflare.com/announcing-1111/
Technically you have to explicitly opt in. But software has bugs, sometimes trivial ones.
Witness the many systems that say they can translate something high level to HDL and how poorly they perform compared to an expert. It's so easy to produce logic that will run slowly or be glitchy, and most EE graduates have very limited exposure to designing logic.
Sounds like you could have written a much better article than this one, then! Cautionary tales are much better when they're real and not imaginary.
Explain, please? That doesn't make sense to me. What's so special about 'space' that makes you think the forces would increase there relative to here?
TreasuryDirect is pretty bad about this -- the passwords are not case-sensitive, and they need to be entered using an on-screen keyboard.
I wouldn't trust a live demo in that situation even without the AI in the mix. You have thousands of people in the room and millions online and you get "Hold please" when calling a business. Great demo.
Both of these episodes are clear cases of commingling. "Pockets the money" and "as though it was his personal account" are key phrases that would command any forensic accountant's full attention. Without these or something like them there would be no justification for piercing.
Cool, thanks for clarifying.
> It wont let you vefiry by entering a code

That's odd because I've absolutely verified numerous Signal clients by entering a code, without granting access to my SMS (I use Google Voice so my SMS database is basically empty except for random spam from my shitty carrier)
> However, if you do that, good luck ever getting a mortgage, credit card or other post-paid services ever again if all credit report requests come back with the reponse "no data available". So I wouldn't recommend that.

How does that work for people who never had a Schufa history? If for instance I decided to move today from Brazil to Germany, would I be unable to do all these things there, since they would have "no data available" on me?
Ahh, I see, this makes more sense. Thanks for the clarification!
Not necessarily. Companies should be assuming false negatives in their process and should be encouraging reapplication in most cases. It is in their best interests to provide feedback to the developer and a good experience.
Hakaru: A Simply-Typed Probabilistic Programming Language
For those of you missing context to understand why it's a bad idea...

Typical programming languages run code one line at a time from the top to the bottom, occasionally calling functions or looping.

FPGA's instead have code which specifies a kind of circuit diagram of what is connected to what.

You can make something to translate one to the other, but by translating a programming language to a circuit diagram you usually end up bits of creating circuitry for each line of code, and then extra circuitry which makes each bit be activated in sequence.

That typically leaves 99.9% of the circuitry unused (deactivated) at any point in time. FPGA's don't have much space for circuitry, so by translating a program from C to an FPGA directly you'll usually end up with a huge design with a very low throughput, since the vast majority of the circuit is sitting idle most of the time.

Real FPGA designs will typically aim to use circuitry very sparingly, and keep as much of it in use as possible all the time to get maximal performance. Complex, sequential and non-performance critical tasks are typically not a good fit for an FPGA and are usually offloaded to a programmable processor instead.
Where did that happen? There were earthquakes recently in Italy that tore down super-dangerous but not illegal houses.

In fact the construction sector is a very bad example here, because old buildings are usually covered by separate regulations , thats not true for software.
I think there will be a lot of difficulty with wording and meaning here, because we don't have a consistent terminology for the different kinds and levels of immersion or focus.

For example, the distinction between being deeply involved and distracted in a game (which does not require special tools) versus the extent to which the game will trigger automatic bodily reactions.

In other words, someone deeply "immersed" in a chess-match isn't quite the same as someone "immersed" in a VRv game so that they fall over at a jump-scare.
You have no evidence that they don't.
It is supposed to only occur with explicit user consent. You have to opt in. That is kind of the whole point of this thread. The researcher, who has been active in this thread, found a way to bypass the consent feature.
It's also exceptionally good advice for nights with your partner.
The Signal vulnerabilities did not affect the mobile apps, only the desktop app.
> For small businesses it’s practically impossible to be in compliance for all laws.

I've been in continuous operation with my businesses since 1986 and I guarantee you that I've been compliant with the laws as much as I'm aware of them. The major transgressions involving business assets were parking tickets, speeding tickets (< 10 km/h excess by an employee of the company in a company vehicle). Other than that not so much as a copied piece of software. Oh, and we were once late with a tax filing because the bookkeeper messed up, they absorbed the fine.

Running a small business in a way that is compliant with the law is stupidly easy: know the law.

Now, there is one thing that I did that I know full well was against the law and that came about as a result of me getting very angry about some stuff that happened to a friend of mine. In that particular case I saw my actions as akin to civil disobedience. In the end it got superseded by others doing the same thing much better and at a much larger scale but I would have fully accepted the consequence of breaking the law in that case. But it would have been a conscious decision to break the law.

Incidentally: not knowing you are breaking a law is no excuse for breaking the law, ignorance is not a valid defense.
So we've gone from you can't, to you won't, to you almost certainly won't. I completely agree, I'm just saying the 1% possibility is something you have to live with.
Long story short: Monal developer doesn't understand GDPR, makes a bunch of incorrect claims about it, doesn't want to understand it, and so removes his software from the EU.

That's his right, go him.

He didn't have to write a ton of incorrect nonsense about the GDPR though. He could have just skipped to the last step.

GDPR compliance is not actually that hard - I'm in the middle of doing it for a very large company - as long as you're not storing information about users it's almost trivial tbh, but there are a lot of unfortunate vague terms in the law (the intent is rather clear however).

The reaction to this law in the US is rather funny because the rest of the world has been dealing with strange US laws for decades on the web... finally something bites the other direction and people freak out.
0 arrests, 2 correct matches, no criminals: London facial recog tech slammed
That sounds absolutely horrendous. Even Whatsapp allows you to verify using a fixed line and claim that number on the mobile for privacy.

Coupled with the recent LocationSmart revelations, it would make Signal unusable for those who wish to keep their location private. You absolutely need to provide the mobile number of the actual terminal being used.
Maybe, but imagine if Google, Microsoft, Facebook, Amazon, etc. had decided to pull out of the EU. Not that any of them aren't replaceable, but providing the suite of functionality that any one of them does to their customers would not be a simple feat.

"Second class citizens" might not be the right term, but would "segregation" be an appropriate term?
Open Source at Microsoft
OpenStreetMap US and Telenav announce camera lending program
Because European courts and regulatory authorities are not run by gibbering morons.

Not the courts, but "Brexit"
Ask HN: How do Google recruiters work?
Hi guys!

A google recruited reached out to me on Linkedin.

I'm as giddy and anxious as a high school girl.

The recruiter said it's "casual" but it's clearly more than that. It'd be for a google cloud role.

Technical solution engineer.

Could anyone give me the rundown on what to expect?
Turn your phone off. :)

Seriously. There is no other option. Only niche local providers won't share with these types of companies.
Excellent, thank you for pointing out the exact reasons why that happened. It made good sense from my perspective but to know the exact bits that would flag it is useful information.
By "Facebook" do they mean "Facebook" or "Facebook + Instagram + ..."?
Perhaps this isn't obvious to everyone, but other people are actually not obligated to spend their time doing things you want them to.
I would need a lot more context to answer this question properly. There's no hard and fast rule for when a "pre-seed" becomes a "seed" or "A". These are just labels. The biggest difference is whether you are raising a round of SAFEs or a priced-round. The legal and business consequences of raising SAFEs are more casual than a priced-round, where investors (regardless of location) take things more seriously. Hope this helps and good luck on your company!
And there I think it should be 90% smaller too
I don't know if it's algorithmic, or if most of my close friends just hardly use facebook anymore, but it seems like I just rarely see anything anymore in my feed anymore that I care about. It also seems weird that what does appear is generally from people I'm very faint acquaintances with -- if I am curious about one of my actual friends I pretty much have to go straight to their profile.

Besides that though, I think it just encourages behaviors I don't really enjoy seeing in my friends. I definitely know people who in real-life are totally cool, but their social media presence makes me question why I ever liked them in the first place. Mostly I see a lot of:

1) very overt attention seeking for pretty lame things (like, pretty girls posting selfies of themselves doing nothing interesting, or dudes with gym photos, that kind of thing)
2) Extremely broad and poorly thought out political rants
3) sharing really vapid motivational quotes
4) people being maybe a little too vulnerable to a very broad audience, to the point where it's awkward.
5) This one is the worst of all. People taking passive aggressive swipes at individuals by posting very vague status updates. I hate stuff like that.

I don't think of myself as a super judgmental person, but whenever I get on facebook I spend half my time just thinking "really?" and then feeling kind of gross.
oh, for fucks sake..
This is why I think people need to work and grow up a bit between high school and university. Figure out why you want to go before you commit to it.

I was in the military for 4 years between them (and I was not a good student before), but I decided to go to university specifically to learn something that interested me. And it was sad seeing my peers waste their time doing the same stupid crap I'd outgrown and become bored of in the military. (At least there I wasn't expected to learn anything hard.)
One thing I don’t understand about the current way autonomous vehicles are going is avoiding more of a “positive control” type of setup. I grant it’s more complicated and it means you won’t have it right away, but shouldn’t we come up with some highway design standards that will make autonomous vehicles safer, then some signaling method to say “this is on” or during construction say “this is off”? It just seems a smarter more incremental way to go. That way you can engage “autopilot” only in conditions it’s known to work under.
Well, it's been rolled :)

I'm honestly not the biggest fan of discourse, though I do appreciate it as a project. I like the old school BB style.

One opportunity we have as a forum is to create continuity between the trending conversations and more "long term" discussions that are difficult to have on a platform that is churning out new content constantly and lacks notifications about replies etc
>since the election hasn't been hot new for quite a bit now.

Oh. How I wish that were true. You must not watch the news much because that's pretty much all I hear on virtually all the channels.
mDNS is roughly the equivalent of going door-to-door in the LAN and asking anybody if they've heard of "Greg", so it I don't think it is that confusing that it gets .local, especially given the circumstances that lead to relying on mDNS in that most LANs don't have authoritative DNS servers.
Congrats on the find! How did you know to test requesttype=locreq.json? I googled for "locationsmart locreq.json" and your blog post was the only result.
Because the engineered caries might behave differently and unexpectedly. Regular caries has a pretty hard time getting into the bloodstream and won't infect other regions. Can the immune recognize the new strain? Can the new strain infect other regions of the body? Does it permeate into the bloodstream more often? There are more questions to be answered, experimentally.
> First, I believe software blueprints should be put together by people with 15 to 30 years of expertise.

Well, that is for one simply completely impractical, those people are few compared to the amount of software the world needs and also very expensive. But it's only one of many reasons why there are better approaches so let's move on.

> Secondly, blueprints for a custom home are completely indispensable and are referred to regularly during construction. I believe one of the reasons why is because they are visual, not textual. I believe software requirements should be the same and then they would be easier to adjust and would retain their value.

Many detailed requirements have, as matter of fact, been very visual, with detailed user interface mockups, process diagrams etc. When they are large in scope, they have been found not to be useful compared to the effort required to create them. When they are small in scope, they are actually used in real world agile software projects.

And, I have to ask something about this process where extremely experienced people create detailed visual blueprints for the entire scope of the project and then deviate very little from it. Is it something you've actually seen produce good results (repeatedly) for your run-of-the-mill software projects?

> If you are in a project where there are large numbers of unknowns about the functionality of the project

... that would be vast majority of them.

> I highly recommend shrinking the scope to what you know and actually understand. Build that, and then learn from it. Then come back around and start a new "dave's custom home waterfall" (for lack of a better name) process to implement the next set of functionality.

Well, every time you give concrete proposal about what to do in the face of uncertainty it sounds exactly like agile.

> scope reduction should be used until the unknowns have been reduced to a reasonable risk level.

That would, again, be agile. And I say that as someone who is not even particularly fond of of most standardized agile processes, such as scrum.
The comment I responded to cited environmental regulation. These are oftentimes costly to implement. All regulation costs money to implement. Even if each regulation by itself is cheap, these things add up -- it's death by a thousand cuts.
There's a really great writeup on this in "catastrophic care", a book I'd recommend on this topic.

Rather than "insurance", a better model is that "you'll need to spend a lot with p approaching 1, for some years of your life". So allocating each person a lifetime fixed pool of money (through the tax system) might be a good way to force some cost discipline onto the system, while still ensuring coverage and access are widespread.

What I like about this is that it makes explicit, society's commitment to sharing some of the burden of care. I have a close friend whose wife has Crohn's. It's a real bitch of a disease, essentially no known cure, chronic, you just try to get it "managed" as well as possible. We could probably spend an infinite amount of money trying to improve her quality of life, but that's not fair to society at large. So if we said, here, you get $x, that would encourage the medical system to provide cost-effective management options that would be within some bounded price range everyone agrees would be reasonable.

I think there's a real reluctance to put a precise dollar figure on how far we'll go per person toward "universal coverage of everything", but that's precisely the conversation we need to be having.
I don't know if I'd call that programmable, isn't it just sequencing work to predefined logic blocks? Can you do things that were not contemplated by the opencl design?
Steve Jobs famously called Starbucks to order 4,000 lattes during the original iPhone launch.

https://www.theverge.com/2013/3/4/4063272/meet-starbucks-bar...
Before I earned my degree, I had countless interviewers tell me that they wouldn't consider me until I had one, in spite of my "not insignificant" experience and interest in the field. (It was sysadmin at the time.)

So I got my degree. Suddenly, the interviewers - some of them the same as before - changed their positions to not considering me in spite of having the qualifications, but because I had no experience.

So before it was experience but no degree, then it was degree but no experience. It's been about eight years since I gave up trying to find work appropriate to my training.
Added to my list!