skysight-inc/HackerNews huggingface dataset:
That's not how it works. You need the private key to sign the drivers. This is not a file that developers of those companies have access too.

These keys are usually stored on a HSM. Even if you want to, you wouldn't be able to access the keys stored inside. This is specifically designed to protect against rogue/bribed personnel.

So it's highly unlikely that the stuxnet developers had possession of the key. I'd bet that they somehow had access to the HSM, to have it sign the driver for them.

Companies of this size are audited regularly, so access to the HSM is expected to be strictly controlled.

So yes, it is a pretty secure location, and a highly guarded secret. The fact that they pulled it of to break into not one, but two of those secrets is extremely impressive on it's own.
This was the subject of the novel Blackout by Marc Elsberg (https://en.wikipedia.org/wiki/Blackout_(Elsberg_novel))
I work on the OpenStack deployment for a hedge fund where all internet access goes through a proxy. (We have the same concern about public cloud although we're slowly figuring it out.) The initial deployment predated me, but there's nothing in our config that does anything special with OpenStack and internet access, and it works. We also have a Kubernetes deployment that also (AFAIK) just works. We're not able to `docker pull` very easily because of the proxy, but if we generate our own images they work fine.

What is trying to connect to the public internet?

(If you mean that they expect a direct connection between client machines and servers, then, yes, they probably do and that's not a scenario I've run into personally.)
Note on NodeBB's QA process: https://github.com/nodebb/nodebb/issues/4600

I would love to be corrected in this, (and in fact I'm prototyping a NodeJS+NuxtJS+VueJS forum on the weekends, but don't expect a release this year) but I think you're better off sticking with the PHP variety of forums. I think that's where maturity, stability, and extensions ecosystem shine.
I'd prioritise "engage with your wife and kids" over hobbies - a lot of divorces happen when one partner feels they're doing all the work raising kids and feels the other partner is taking up hobbies to avoid it. Engaging with your wife and kids, if treated as an emotional investment (i.e. got to be careful how you do it just like picking stocks for an investment fund), over time will yield dividends in terms of less nags and less screaming.
I did read that part. It seemed like more of the same ("in each of these places, there are some interesting light patterns on specific bits of art at different times").

If it's the same coincidences (e.g. all of them light up the dancer on the same day) that's different. But since the article wants this to be interesting, the fact that they don't say this suggests it's not the case (or maybe the article is unclear).
Why I am not a fan of Cabal or Stack
It doesn‘t need to be written there. It has been written elsewhere, long ago.

All state action is subject to judicial review, where proportionality is a big factor.

It‘s an aspect of due process that is being reviewed and enforced by every court, up to the constitutional courts.

Example: the German criminal code threatens „up to five years“ in prison for theft.

That does not mean that a first-time theft of a not-too-valuable object could get you five years. Impossible. But not written in the statute itself. But even if a court was mad enough to hand out such a sentence, the revision stage would be swift and without any uncertainty.

Actually, it‘s hard to conceive of a first-time theft-offender going to prison, instead of paying a fine or at least having the prison sentence suspended.
Introducing Thanos: Prometheus at Scale
To be clear, I'm not comparing death to starvation.

I'm comparing death by obliteration to death by starvation.
At my startup we pay interviewees a decent hourly consulting rate for take-home problems or full-day followup onsites (after the first interview).

We only do them when we are pretty excited about a candidate but need more information to make a hiring decision.

It's cheap, really, considering the cost of sourcing candidates and the cost of making a bad hiring decision.
Very good point! I tried adding a caveat to my comment but can no longer edit. Confirmed negligible impact in aluminum pot and large stainless bowl.
Perl for one: http://perldoc.perl.org/perlsub.html#Autoloading
I usually need like good 5-10 minutes of quite time to think about the problem in peace. I just can't seem to do with interviewer staring at me and hounding me to 'think out loud', sorry I can't talk and think at the same time. I have no practise at 'thinking out loud' , i never do it in real life.
No, because you wouldn't be independent enough. A CFO or a CTO would tell its board things are okay because it isn't in its interest to do otherwise.

That's why some independent DPO jobs are appearing.

But the DPO is a small cog in the machine. Updating the processes is the most time and resource consuming regarding the GDPR.
Trains (toy) were my first conceptual introduction to programming.

The pieces of track are the instruction set. The layout is the program. Running the train is the execution.
> 60 years of treating every other country as a box in a threat model to be manipulated against other boxes has been a completely unmitigated disaster

Has it? The last 60 years have been relatively peaceful, by historical standards.
Make new into the front page then unlock access to the real HN by reading X articles for Y seconds and upvoting Z of them.

Then have 1000 euro/month pro accounts to bypass having to work for your precious.
"On Day 2, John was to meet with Steve. I never knew whether it was by design or not, but on that day John wore a T-shirt that featured a smiley face with a bullet hole in the forehead from which trickled a few drops of blood."

Was it the watchmen comedian logo?
This is easily proven false by simply looking at professionals which either by necessity or regulation require a strict secure environment.

How common is it that the military use iphone apps for classified information or to interface with military equipment. Do operators in powerplants or other sensitive infrastructure use iphone apps as interface to their systems. When security is a primary objective then having it hooked up with a third-party that continuously collects information that you have no control over sounds as a very bad security recommendation, especially when it has a independent GPS, GSM, and network capability which bypass normal network security tools.

If signal crashes and a crash report is generated, who get access to it on a iphone? Who might get a potential memory dump with plaintext? If that party is apple I would strongly recommend that one is first okey with the idea that apple has access to the plaintext before using such app.
Sex and procreation can be found throughout recorded human history, regardless of locale. In mythology (from Zeus boning anything that moved to "be fruitful and multiply" to the Immaculate Conception and numerous creation myths besides), religious teachings regarding sex being for procreation and not mere pleasure, laws governing property rights, inheritance and royal succession, in literature, in plays and songs, in fairy tales and old wives' tales, etc.

For example, here's an article on Samuel Pepys and a sexual manual from 1680 which quite clearly demonstrates that the nature of carnal knowledge was generally known at the time[0]. Along with death and mortal fear, sex and birth comprises one of the archetypal constants of the human experience. It's everywhere. It also happens to be knowledge that's necessary to continue the species, which humans have proven quite good at.

I guarantee that our parents knew how babby was formed, as did their parents, as did their parents, etc. Even our hominid ancestors before the formation of language understood it, because even animals understand it at an instinctive level.

[0]http://theappendix.net/posts/2013/06/this-misterie-of-fuckin...
I was not familiar with this case. He received a sentence of 41 months!

From wikipedia:

“noting that no circumvention of passwords had occurred and that only publicly accessible information was obtained”

My personal opinion is corporations have excessive influence over the US government.
Who stands to benefit by destabilizing the western world to such a degree? Clearly some big players like Russia and China, as well as some smaller players can benefit from destabilizing the western world a little bit. But if they destroy it to the point where millions of people are suffering, they'll bring suffering on themselves as well. It seems to me that they're probably motivated to level the playing field and gain dominance more than completely destroying or starving people on a large scale.
9 Weird Predictions About the Future of Healthcare
So your preferred way would be to have 28 different data protection laws?
A big thanks to the developers for this library. I've been using this with kotlin and react. Thanks for also including comprehensive typescript definitions. Great slibrary for spinning up web apps.
MySpace was often an assault on the senses, and disorienting. Reddit can be like that these days, perhaps worse since the interface elements also love around and can disappear. In the early days of FB, users had even less ability to customize the visual presentation of their pages than they do now. It’s about like the simplicity of HN vs a 10 highly customized subs on reddit - on one hand, users like to express their personalities. On the other, inconsistency can make for a terrible user experience.
Someone could say that about an opponent's chess strategy only to be beaten.
Another article trying to spread resentment between generations.

Divide et impera!
Did you actually look into the GDPR before jumping to these conclusions about the effects on your business? For example, if you have a legitimate need for user data (e.g. "I need to collect it and store it to comply with other laws") then the GDPR does not apply. This is very plainly laid out for those that care to actually inform themselves.
Makes me wonder where he's from. Maybe with a South African accent or similar. They sound very different with my Ohio accent though.
Actually the reply to the ping originates from the network itself and not the phone and it would work with any class of SMS - you just need to set the “delivery receipt” bit in the SMS. Then the network will send a receipt to the sender when the message has been delivered.
For those who are confused: "1x nm" means a number between 10 and 19nm, not "one times a variable nanometers".

I was confused for a bit.
Just addressing the last thing you said, I think sophistication has to do with the level of knowledge required to implement. Whether that means knowledge politely asked for or through other means has implications for the difficulty of implementation but perhaps not sophistication of the software.
> Compliance and privacy are not the same thing

I remember the time we had very good privacy policies but getting that project to be compliant with COPPA was still a significant effort, so I think I get where you're coming from.

Once we became compliant, quite frankly, I felt a lot safer and more confident in affirming that our privacy policies were very good. Maybe it was some kind of sunk cost syndrome, but I was glad we did (were forced to do) it.
Galileo was put under house arrest, not executed.
I'm loving the Do Not Track header in your python script. Great work!
I suspect it wouldn’t work in the US. Principles based regulation requires some level of concensus on principles. We don’t have that in the US. Polarization breeds rules worship because you don’t trust the other people to use their discretion.

Consider, for example, how every major social issue devolves into a Constitutional litigation. Whereas in Europe people just vote on stuff.

And as to regulatory approaches I think you’d be surprised. European regulation is often quite conservative.
I’ve found that, much like reddit, it’s best experienced by tailoring your feed to what you actually want to see. In my case, I unfollowed all posts from anyone I don’t actually care about, and removed my interests section entirely (fan pages and such contributed at least 50% of the spam on my feed - random sports autoplay videos are not what I’m looking for when i go on facebook). Facebook is a tool for making sure I’m not out of the loop with my actual friends. I don’t need to keep up to date with some person from my calculus class halfway across the country - and if i do run into them again, i can simply ask.
Ask HN: Do you know any reliable and unbiased news site?
Fed up with biased and fake news with all the big news channel, big online sites including google. I want to know if there are any news sites/channels that present then as is (and definitely donot want their opinion)
If a brain isn't doing what formal logic says, then it's doing it wrong. Sometimes models are more important.
I'm suggesting perhaps a little less hubris and a little more actually replying to my relevant points might serve you better in life.
No Man's Sky Next New Update Comes with the Multiplayer Functionality
Using a whiteboard to give a talk about your project is desirable in my opinion , you might need to be more specific with what is whiteboard free.
Galileo is not even mentioned in that article.
Oh totally agree. Just think about the DMV. The people who work there cite the law word with zero discretion. Most US companies are like that as well. It's quite dystopian.

Well lets say it wouldn't work with the current ruling class mindset where everyone they employ is stupid and unable to think critically.
That`s how it should work in theory, in practice it was most likely how the parent has described it.
You are right, it would take a few more but my point was more that the amount of data is entirely within the scope of NSA et al. In fact, it was somewhat arbitrary to say two points a minute, reality is once every two minutes is enough to have a very good idea where somebody is or has gone to.

Why would they want this data? Because they want to be able to not just track in real time 'persons of interest' but also to recreate past movements to establish associations.

As to the difficulty (if any) for the major telecoms to provide such a feed - chump change to the NSA to assist in that matter, just like regular law enforcement pays for wiretaps.
Turning carbon dioxide into rock – forever
> Unlike startups, it's not like Google's business depends on investors supporting lofty goals. There would seem to be no benefit to faking a demo like this.

If they don't need to impress anybody, why would they even have a demo at all?
You mean how they hacked and leaked the personal emails of multiple people and organizations?

Like Watergate, but by a foreign actor.
Why would Amazon pass that information to turkers?

"Find city, county, state in this list and post in the three boxes "City" "County" "State" in the web form." is literally all the information required for this task. All of the rest can be handled by Amazon's staff, or more likely automated processes. The turker need not know for whom they do the work, or why. They could be processing marketing communications, or census returns, or credit card applications, or literally anything else where an address may be used.
And, no doubt, we (USA/Western democracies) have hacked theirs.
Jobs comes off as quite an obnoxious dude.
This Guy Heated Bath Water with Bitcoin Mining and It Worked Too Well
RFC6761 says:

6.3. Domain Name Reservation Considerations for "localhost."

The domain "localhost." and any names falling within ".localhost."
are special in the following ways:

1. Users are free to use localhost names as they would any other
domain names. Users may assume that IPv4 and IPv6 address
queries for localhost names will always resolve to the respective
IP loopback address.

[...]

3. Name resolution APIs and libraries SHOULD recognize localhost
names as special and SHOULD always return the IP loopback address
for address queries and negative responses for all other query
types. Name resolution APIs SHOULD NOT send queries for
localhost names to their configured caching DNS server(s).

And goes on to specify how resolvers, authoratitive DNS servers, registrars, etc. should behave.

This is implemented on my machine at least by systemd_resolved, see https://github.com/systemd/systemd/blob/master/src/resolve/r... which returns ::1/127.0.0.1 for any record for which which is_localhost is true (defined in https://github.com/systemd/systemd/blob/master/src/basic/hos...).
- early-stage -> high risks -> high returns (or failures, but as an employee, you don't risk too much if you don't put money in it)

- be able to participate to the product decision

- the less you are in a company, the more you count

- learn plenty of things out of your regular scope

- be able to choose the technologies

- not having to deal with legacy
Control an Industrial Robot with Your iPhone or Android
If you took out a dam in Montana the following chain of dam failures would cut the United States in half all the way to the Gulf of Mexico and destroy US agricultural output. The US produces 40-50% of the world Soybean and Corn supply. Long term you're probably talking billions of deaths due to food shortages.
Code vs. Data (Metaprogramming) – Computerphile
69,900 Free Flat Icons
I'm building my SaaS front-end on react-semantic ui [0]. (non dev builder here).

Besides population familiarity with material UI because of Google, am I missing something ?

Things I like about React semantic :

- very clean documentation : i can search, find , and tweek components

- Semantic is less opinionated visually than Material (IMO), and do appreciate lightweight.

[0]https://react.semantic-ui.com/
This is the reason I chose a community college with a high job placement record. I had a job right after graduation and gained experience working instead of wasting an extra 2 years in college. Plus, an associates degree costs significantly less than a bachelors.
What you dub principles-based regulation others call trust-based regulation, or randomly-enforced regulation, or we-know-it-when-we-see-it-based regulation. Some don't appreciate this type of regulation.

I think the unfortunate thing is that, when the previous/existing incarnations of these protection laws were/remain unenforced, many assumed it was because of lack of "teeth". But those of us familiar with how these principles-based regulatory bodies work know that it's more about confusion and regulator apathy. Nobody here is watching the watchers. Instead, there's a bunch of people foaming at the mouth with pitchforks asking for more laws and dismissing alternative concerns as hysteria or not understanding how laws work. We should be discussing how to solve the problem, yet we continually devolve to discussing the government-led solution presumably because we feel helpless and can't consider better options.
Insight of NeuroChain in NYC Consensus Show 2018
Constantly trying to whitewash over the fact that GPDR is a huge pain in the ass and will involve a lot of work for a lot of companies is what I don't understand, but Mr. Mattheij has been doing it for months, so that's evidently very important to him for some reason.

It's chewed up a few weeks of active development time putting in features for purging and exporting anything that looks like it might be personal information, plus a considerable magnitude more hemming and hawing and trying to figure out if, how and to what extent the regulations apply to us, and how the customers that we sell our products interpret the regulations and what features they require for their interpretation of compliance. It's a big headache, especially where we are also dealing in industries that have conflicting data retention requirements.

If we didn't have EU-based customers with sufficient sales to justify the effort, there are a thousand and one other things that we could have better spent that time and energy on.
You are advertising that your handling of personal data is so haphazard that GDPR compliance would be expensive.
You are admitting that you aren't good enough for the EU, and therefore that you aren't very good in general at whatever you do.

I expect that, at least in some obviously global markets like most e-commerce, GDPR compliance (as opposed to throwing the towel like you) will be treated like a certification of being a relatively non-evil and non-amateur business, with a significant impact outside the EU.
Why do you let people choose the title? Wouldn't it be easier to grab it from the page's title tag automatically?
Deep Convolutional Neural Networks as Models of the Visual System: Q&A
> But I guess asking logical questions is frowned upon...

I did not consider the questions to be particularly ‘logical’ at all. Naive, perhaps, but not logical.

There’s presumably 30 years of knowledge you could look up to formulate better questions.
If you're writing Qt, getting it to work on Linux if it already works on Windows probably isn't terrible. It certainly hasn't been for the PyQt GUI program I work on. Making a working Qt/X11 program work on Windows, on the other hand -- that could be painful.
What about CS-riddles/competitive programming free companies? Who only ask relevant to the job questions during interviews.
I like to use whiteboards for non-coding design questions, like talking through how you would architect an app, drawing DB schema diagrams, etc. It's a tool that we use for collaborating on things like this in the office, so demonstrating an ability to do it is meaningful.

Actually hand-writing code with a pen has always seemed weird to me. As a programmer, I compose code with a keyboard. So I give candidates a laptop and use an interactive screensharing tool (I like https://codepad.remoteinterview.io) where they can run code in the language of their choice in a browser, and I can watch and talk through the process.
That might be my fault. I worked on the tcpip and sms protocol stacks for the 55 and 65 series Siemens phones..

Sorry..

I know of at least one small Easter egg if anyone has a S65 lying around somewhere. I don’t believe it was discovered by anyone before. Might also work on the 55 devices - don’t quite remember as it was a long time ago.
> I'd bet that they somehow had access to the HSM, to have it sign the driver for them.

Or were able to duplicate the HSM before it was delivered. You know, like how the NSA intercepted shipments of internet routers in transit and inserted backdoors.
I do not know this and many others probably do not. Would be great to see a source with proof that this has happened with PIA.
Not for non-violent misdemeanors. Unless you're a flagrant offender you will normally be slapped don the wrist and given a stern lecture in the form of a class. Source: was in a fraternity in the US where literally nothing bad happened to anyone I knew with a misdemeanor outside of a fine and class
What amount of money would you have to invest and for what? Data retention?
I’d rather read an article that doesn’t focus on the API (which I can look up on MDN), but rather on the practical use cases (which are merely a footnote in this article ).
Lyft doesn't do whiteboard when hiring engineers?