skysight-inc/HackerNews huggingface dataset:
Many countries believe their law applies extraterritorially. The US Foreign Corrupt Practices Act applies to any company that does any business in the US. A German director of a Canadian company that pays a bribe to an Ethiopian government official can be prosecuted under the FCPA if they set foot in the US. Sweden will prosecute citizens, and I presume residents, who purchase the services of a sex worker abroad. I don’t believe Kim Dotcom ever set foot in the US before the New Zealand government arrested him on foot of a US extradition warrant.
The turks access your data (the questions) through Amazon, and I don't see how this will happen without Amazon having access to that data.
Maybe it is the other way around: Todays malware (or a portion of it) is written so good that you don't know about it. Maybe someday another whistleblower will let us know.
Even worse than that, it looks like there _were_ unit tests to check that input was correctly sanitized, but the patch that introduced the bug also explicitly changed the unit tests to ensure that input was _not_ being escaped!

A mistake that seems like it could've been caught in a code review!
Yeah, if you've got a big budget, state sponsoring, and years to plan how to steal a signing key from a foreign company, I'm not going to bet against you.
Linux and Mac have bugs just like Windows. The only reason they have a reputation of being safer is because windows dominates marketshare, so any "spray and pray" type virus will naturally target windows over mac/linux.

On the other hand, if you or your organization is the victim of a targeted hack, it makes no difference what OS you're running. Any sufficiently motivated and skilled attacker will eventually find a way to exploit it.

As long as new software continues to be released, there will always be bugs. There is no security panacea.
Most backdoors in commercial software are due to stupidity, not ill intent: software engineers putting a debug access point "I will remove it later before it goes into production" or business side having weird ideas "it would be so much simpler if we could log in and fix/reconfigure it for consumers".

Finding those only to replace them with a more elaborate bug seems to be ill intent and unlikely for me. The bigger problem IMO is that the mentality above is still prevalent: for every two backdoors found a new one may be put in by another do-gooder.
Triptans do not abort my migraines. Hell, I suspect placebo might even outperform them for me.

The worst part: you pretty much have to pay a $1000 tax if you present at the ER with a migraine, because they will not believe you. People will be in a rush, they will not examine the giant history in the EHR spanning years and years, and you will be likely be suspected of drug seeking. So you have to say yes. $250 for a useless injection of sumatriptan and $750 for an hour of continuing to lie in pain on a bed until they hopefully realize you're telling the truth.
From the headline, I knew it would be about Schmidhuber. Isn't this shtick getting a little old? I don't see how he is being suppressed, when I see him give talks and lead symposiums at conferences all the time ...

> The most prestigious AI conference goes by the unfortunate acronym of NIPS, or Neural Information Processing Systems.

The name is likely getting changed this year.
well to be fair, a nuclear armed country has threatened to bomb Iran back to the stone age (and has a reputation for trumped invasions in the area) as well as a vast history of interfering in the country including coup and assassinations.

Perhaps they feel threatened.

And the "wipe Israel off the face of the map" quote is contested.

https://www.washingtonpost.com/blogs/fact-checker/post/did-a...

> Then, specialists such as Juan Cole of the University of Michigan and Arash Norouzi of the Mossadegh Project pointed out that the original statement in Persian did not say that Israel should be wiped from the map, but instead that it would collapse.

> Cole said this week that in the 1980s Khomeini gave a speech in which he said in Persian “Een rezhim-i eshghalgar-i Quds bayad az sahneh-i ruzgar mahv shaved.” This means, “This occupation regime over Jerusalem must vanish from the arena of time.” But then anonymous wire service translators rendered Khomeini as saying that Israel “must be wiped off the face of the map,” which Cole and Nourouzi say is inaccurate.

Sure there are some in Iran who will probably say that. Just like there are some in the western countries that if inteviewed will say the same of whoever the current bogey man is. Hell, John Bolton is back
Why do people still buy Cisco products? Leaving hardcoded passwords in their software shows such massive incompetence that I don't understand how they can still sell anything.
> based on the whims of politics and the regulators

Political whims? Maybe in the USA judges and prosecutors and police cheifs are elected every few years and these things are political and can change, but this isn't the case in many EU countries.
Maybe try running it under subsystem for Linux!
Sorry, but do you want to say that EU has no left and right in politics (parent post did not mention Democrats or Republicans)? Or that everyone in the EU is unanimously happy with GDPR? Seriously, if a law's getting applied only after a long while it's passed - it's not unheard of to have a debate as people start to actually care.

Maybe I'm wrong, but I think that parent example is not US-specific at all and is applicable to just about any country where there are people that learn toward different beliefs (that "direct consequence of your assumptions about human nature" part of the post)

The assumptions may be wrong, but that was generally constructive.
With that money you can bribe every cop my country 100 times over. I wouldn't worry about it :p
I really hope you're right, but your view assumes rational players which, judging by human history, is far from guaranteed.
>As the phone periodically reports the signal strengths of surrounding cells for the purposes of handover just taking a glimpse of this is enough to triangulate well.

Not when the phone is idle and is not leaving a location area though.

(At least that's my memory from my college class)
I feel as though this is a missed opportunity to use a proxy!
> Imagine the rest of the world reacting to the DMCA this way which has far wider scope and effect.

That would have been a wonderful thing to see. The DMCA has had a chilling effect on speech worldwide, and has created difficult barriers for small businesses to deal with if they want to host user-created content.

I think you unintentionally made your opponent's point!
Actually, none of the countries you mentioned want to nuke any other. It's all propaganda, some from the potential nukers, most of it by those on the receiving end.
[Ruby on Rails] Ror Advanced Tools you'll need as your project grows up
A very nice writeup of Stuxnet, although plainly intended for a lay audience...

Shame the author didn't mention Flame (or any of the other since-discovered super-viruses) at the end.
Best code components for Node.js
They still sell high performance products. And (most important) I suspect the alternatives are no better with respect to security; they just get less scrutiny and thus are less in the news.
Neither Article 83 or 29 impose any actual limits. They say that those imposing fines should take some things into consideration. After which they can impose a multimillion-dollar fine.
it's not because the security team doesn't know

It's also not because they don't think it's 'worth the investment' or due to extra expense.
This is already a “solved problem” though. If you post copyrighted material to Github, Github will have to remove it.

If you’re posting users information to a public repo, then you fully deserve whatever impacts you’ll face when you have to delete it.
By writeable references, I meant replacing one QML reference by another:

RustFoo {id: "foo"}
RustBar {
foo_field: foo
}

This is possible with my branch. Your above example needs to be amended the following way:

"child": {
"type": "Child",
+ "write": "true"
}

The API changes quite a bit unfortunately, and is no longer so nice to use.

Unfortunately, my ideas to use (read-only) objects in itemProperties all end up complicating the API even worse, with abundant Box<>es and wrappers over wrappers. I can't find an elegant way to work around the mismatch between some Rust and C++ concepts (mostly lifetimes), but I expect to come up with something worth discussing within a couple of weeks.
How this conference generated 35+ PRs to vital Ruby OSS infra in one day
You are right... HN is starting to have a visibility issue. But I can't see how it can be fixed. All successful online communities have to deal with this aspect eventually. They all become too popular at one point and it's hard to maintain the quality.

I can't see how it can be fixed.
"throwaway account for obvious reasons - I'm a devops for the C&C servers. Our process is actually quite similar to most other tech companies. We spend half our time arguing over what programming language to use (node/go/rust) and the other half arguing over whether we should use microservices."
You can get FreeBSD to email any log periodically using cron. No go program needed. This seems like an absolute overkill but it was probably fun writing the code.
>and you'll have to engage with it on those terms

Or you can just disengage with Europe all together, which is an obvious choice for many small to medium sized companies, given the risks and costs involved.
Linux Software Repository for Microsoft Products
> "I read on a blog that they'd be nice and send me a warning first"

That's not what happened. Various people pointed out various cases where it's shown over the course of 20 years what happened. Ample history.

> Don't panic, but take the advice of a non-lawyer's blog over your actual lawyer's at your own extreme peril.

Are you from the US or EU? Immediately going to a lawyer seems strange and unique to me. Within a big company, yeah, lawyer. Anything else unless you're doing something specific I don't see why.
Ask HN: Best articles on technical debt?
What's some of the best writing on all aspects of technical debt that you've come across?
As this seems to be a beginner project to learn here's some thoughts on the code:

1) You should really not build your json by manually building the string. That's very error prone and hard to extend.

fmt.Fprintf(f,
"{\n\t\"from\": {\n\t\t\"name\": \"%s\",

Use https://golang.org/pkg/encoding/json/ (https://gobyexample.com/json) instead. Working with json in Go is really one of the nicer features of Go (It's Go, not "GoLang")

2) By setting / typoing a config option you could accidentally delete files from your computer, even your home directory

err := os.Remove(jsonfile)
All repeatable processes are systematic, almost the whole IT goes into the category. And "core" is undefined too.

I agree that it is safer to imply you're liable.
That's what we've chosen to do. The reality is that most businesses outside the EU will wind up blocking EU traffic, simply because they don't want the liability.
What does it mean to "request a GDPR"?
This comment makes no sense to me and it seems like you’re pushing this point with a lot of force.

Of course there is context in how the addresses are used. But the reviewers may not have had access to the context. Since addresses are public data, the question remains.. what is the harm?
Microsoft’s Bing Search Engine Has Banned Crypto Ads
> In England and Wales, you could be fined £10^99 for having a crumb of cannabis in your pocket. There is nothing - and I do mean nothing - written in the Misuse of Drugs Act

Not true.

https://www.legislation.gov.uk/ukpga/1971/38/section/25

> The fourth, fifth and sixth columns show respectively the punishments which may be imposed on a person convicted of the offence in the way specified in relation thereto in the third column (that is to say, summarily or on indictment) according to whether the controlled drug in relation to which the offence was committed was a Class A drug, a Class B drug or a Class C drug; and

https://www.legislation.gov.uk/ukpga/1971/38/schedule/4

Cannabis is currently class B, thus

> [F8 3 months or [F4 £2,500], or both].
At least we learn from the mistake and what kind of strange things can cause this errors like this.

A lot of these things are often scams, but in this case i think everyone involved was genuine and believed they had found something great.
Under the GDPR, consent must be revokable, at any time, and as easy to withdraw consent as to give it. So you could sign that. Then 5 minutes later withdraw consent.

Additionally consent must be "freely given". If you would be punished (e.g. expelled from school) then you haven't given consent, so they can't use it.
Indeed. I think that the mark of sophistication is not complexity but irreducible complexity. Sophisticated solutions are those that have been reduced to their simplest form.
What GDPR says about this is:

> [A]n identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

I think the principle is that since an IP address could be used to identify you, it is considered personal data.
Its sad enough they use GCM at all. Android Apps can works perfectly well without GCM.
Under the GPDR, you can't "sign away" your rights. You always have the right to cancel any "contract"/"agreement" like that.
Or, you know, just block European clients from your service if you don't agree to our laws?

It's not like if the US laws didn't have any extraterritoriality.
Neither the UK nor the EU previously had any general provision for a right to erasure. At EU level, considerable waves were made when the "right to be forgotten" ruling was issued, but that came from a court that was considering a specific case.
You make it sound like US laws don't extend outside the US. Many of them do.
Because those people tend to come from a country which doesn't have laws open to interpretation and thus mark people who drunkenly pee on a fence with the same sex offender tag than child molesters. If you're country functions in a way where laws can't be interpreted according to context it's hard to think of a different system.
Israelis don't want to wipe out Iran (as much as Iran doesn't want to wipe out Israel- I think they have a more generic aspiration to the end of what they call Israeli regime)- but they surely want a weak, divided, impoverished Iran, and they have been lobbying the US for a long time to wage war against it. The US unilateral withdrawal from the nuclear agreement has been in Israel's wishlist for years. Not because it improves the chances of peace or because it makes Iran less of a threat- quite the opposite. But because it weakens it and improves the chances of a war.
Mifepristone Online
This doesn't have to be the case. For example, if you're paying mturk workers to fill out a survey you can give them a link to some third party (ie: Qualtrics) which will generate a code upon survey completion which the mturker enters as the answer to the only question on Amazon.

If you're really concerned about a third party having access to your data, you could just host the survey yourself.
This is true, I have never received a fine -- and furthermore, I personally don't even know anyone who has received a fine! Could of course be that some did and kept it to themselves.
People who browse threads in places where actual engineers working on this stuff post their thoughts
vs.
People who get all their information about self-driving cars from "journalists"

The former group will pretty much unanimously tell you we are at least 10 years from a full solution, if it's even possible. Most of the latter group seem to think it's already here.
“You, Baby and I” Accepted into Collective Global Accelerator
What will software engineering be like in 2022?
Whatever one thinks about the subject matter, the writing in this piece is awful. You can get the substance of what the writer is saying by skipping 90% of the content. Moreover, the tone is talking down at the audience - unless that audience is already excited about gdpr. This comes across as not being interested in convincing anyone but in cheerleading their position.
20 years ago, I liked Yanni enough to see him in concert, maybe thats why I heard only Yanny for days (though I pronounce them differently). Once I heard Laurel, I haven't been able to hear Yanny since. I don't know what caused me not to be able to listen to Yanni anymore though.
Any reason for not using Logwatch ?

https://wiki.archlinux.org/index.php/Logwatch
In my experience, a server response time of several 100ms is "slow" for example Laravel with a bunch of Eloquent relationships. Drupal can also easily run thousands of queries per page load and Magento is possibly even worse. This can be easily cached and optimised though.

And it doesn't really make that much of a difference compared to asset loading. As in, a dozen js / css files and a bunch of images. Even when you compress / gzip them as best as you can and load from CDN, they still tend to take up an excruciating amount of time.

The article is good but very "beginner". The more challenging stuff is browser caching with htaccess rules etc.

Google Page Speed tests are actually very useful here and if you follow all their advice you end up with a very noticeably faster site.
And then people make a fuss about Russia "hacking" the election with some dumb Facebook ads which cost less than maxed out Ford Mustang.

When on the other hand we have the state-sponsored military grade/purpose viruses used to attack other nations/regions (Flume attacked a large number of targets and countries) and nobody blinks an eye.
> The EU is under constant attack at the moment from many sides, and people feel they need to defend it at all costs, even it they are wrong.

As you mention that "they are wrong" in reference to saying that the regulators aren't to be trusted, could you explain how the Dutch regulator behaved badly?

I'm Dutch and have followed what they've been doing over at least 10+ years. I don't think I'm wrong in my assertion, but feel free to point out the details. Also, I'd like to know how often you've followed what the Dutch regulator has been doing. I get the feeling you're not aware of their name.
To be fair, Iran is not trying to build a nuclear weapon, as it has been proven again and again by the thorough inspections and controls allowed by the JCPOA agreement, which the US have just undermined and probably killed for good.
Its actually quite simple - push the thread with the latest comments to the top. But in order to stop such threads from hogging the front page, there can be another tab for 'active' threads that people can visit to check out latest discussions. The current front page remains unchanged, with whatever algorithm that's used to order the threads.
On Windows and macOS, by default Qt will use the native file dialog.
How did this get so many upvotes?

* Doesn't actually explain why speed matters (hint: over 3 seconds people perceive a slow experience and over 10 seconds people will assume the site is broken)

* Doesn't say how to fix speed issues other than one specific small image/tiling "fix"

* If you worked at a real company this would never fly. The solution isn't to change the background altogether and go with tiling vs a big image.

I actually wrote an article on how to improve performance for everyone [1], and it's the biggest bang for your buck that anyone can do (designers, developers, or product folks).

[1] https://userinterfacing.com/the-fastest-way-to-increase-your...
> Ad-supported websites are probably the most common case here, even if the sites don't store any data themselves.

Internet advertising is a viper pit of privacy invasion. They didn't get their house in order, and let it turn into the horrible mess it is today, so they shouldn't be surprised that the regulators stepped in.
The "lack of predictability" is a good thing.

"You're making efforts to comply with the regulations, but could you have a look at how you're storing this and that?"

vs

"You're not compliant with the regulation so we have to impose a fine"

Are you really saying you'd prefer the second?
I have a question. Since the worm travels from USB to USB, does that mean that it infected thousands (or more) of regular people USBs but did nothing, until it found itself in a purity facility? Or was the worm somehow directly sent (physically or digitally) to the facility?
I hear ya bro--just turned 45. Am realizing that the moves I made just 10 years ago aren't working as easily now. Been in a dev role for 12 mos. I don't hate, but don't love either and started to look again, yes, is a bit too soon. Ageism is happening to my friends, especially the contractors, there's no denying it, even with full employment.

Am looking hard at what else I can do now and am not planning on having the salary level I have now for many more years. I totally hear you on the sleep/wake thing--it's all on us to provide and all of a sudden that ability to provide could be pulled away. I'm still in front of it, there's still time. The first step is to recognize the problem, then not dwell on it, but rather work on a solution.

On wife part--don't show weakness in front of your wife. Women seek strength so find other places to vent, trust me. Man up.

Agreed with the prison sentiment, but to be honest the whole US is like a prison _in some ways_. For example, I could probably retire now except for the cost of health insurance--mortgage is paid off, but the monthly on insurance for me, wife and 2 kids is the same as a mortgage! They moved the damn bar when I wasn't looking and I'm right back to "no FIRE for you!"

Been trying to figure out any angle that gets me more freedom and less hassle. Wife works part-time, but only $9.50/hr so far--getting her back into the job market after a 12 year hiatus took my help and encouragement and six months of hard work. Nobody tells you this shit. I consider us very fortunate.

Our kids are becoming more expensive, not less, and we need to be able to support them and try to give them the best start we can. It's all I care about. Our local schools are a mess, though and that means a potential move to a different district.

It's all very...frustrating.

Then I get feedback from people I work with "he's very negative." Fucking hell, if there are guys in their 40s that aren't negative, they have their heads up their asses. If had any idea what I don't tell them about--two cancer scares in the past 18 mos, a death in the family that hit us hard, a guy who did my taxes all wrong (but luckily I caught it) and plenty of other typical first-world problems crap like brand-new broken appliances, neighbors doing stupid shit, high taxes, traffic. Inside, I'm in a revolutionary mood most of the time! But I smile and wave.

Hang in there.