skysight-inc/HackerNews huggingface dataset:
* Grab nearly all of googles source code (no extra auth required for that, since so many libraries read config etc from the source code repo)

* Make the right requests to one endpoint he found and retrieve company financials, number of hits to every google service, the name of every application running in every datacenter, etc.

* With the above two things, you know the location of services and every RPC endpoint on them, and all access control configs. You can take your sweet time to audit the 10's of millions of lines of code to find vulnerabilities and get to attack as an authenticated (albeit low privilege) user. A lot of stuff is open to all authenticated internal users.

* For example, you could take down any google service by quitting all the application servers at the same time by calling the right debugging RPC. You'd be caught obviously tho.
Fire them. If you are specifically asking for a task to be done (add comments) and they are not doing it anyway it is the same as not doing some other task.

If you don’t fire them even after talking and asking them to change their behavior then stop complaining and accept it as a fact of life.
Dishearteningly true. This didn't have to happen; as I've said before on HN, Theranos seems, from the outside, to be such a blatantly, mustache-twirlingly evil entity that it's hard to understand how anyone could have thought it was a good investment, let alone a moral choice to support.

Not that Silicon Valley, for all its crowing about making the world a better place, ever cared about that sort of thing - but they could at least be more honest about what they actually want. Growth, always, growth without limitation, growth regardless of how it is achieved. That attitude is part of what enables this kind of misconduct, and it's what will allow this to keep happening, in other companies and industries, into the future.

The Theranos Deception, linked from the posted article[1], mentions Elizabeth Holmes is asking for even more money to continue to support the company. The fact that she can still do that, and indeed, might get it, is sickening.

[1] https://www.cbsnews.com/news/the-theranos-elizabeth-holmes-d...
> I also find it pretty amusing that people always mention the Winter war but not what came after I guess the time when Finland sided with the Germans, providing support and logistics including naval and air bases to the Germans and invading Russia later which lead to the seige of Leningrad isn’t as foundly remembered.

I don't envy the Finns of the 20th century. They were wedged in an extremely awkward spot for much of it.

https://en.wikipedia.org/wiki/Finlandization
Interest isn't the killer, it's the insurance. When you owe money on a car, you're typically required to hold full coverage insurance on the car. That is not cheap.
How ‘China’s MIT’ Tsinghua University drives the country’s tech ambitions
If person A can be determined (with a high degree of certainty) to have incited the actions of person B, preferably in a court of law, then yes they are also responsible, even more so if they directly commanded person B to commit acts of violence on person C.

Also, if a person directly calls to action against specific groups (eg. "we must throw out all immigrants right now! The police and courts are useless, we have to act!"), that should also be dealt with, rather harshly.

Like I've said before, freedom of speech is not freedom from consequences. You can say exactly what you want, and neither the government nor anyone else can legally stop you from doing so. But they can very much hold you accountable for the consequences of what you say, and the manner in which you said it (eg. publicly, to a large crowd of angry people).
Ask HN: What did you do to recover after a herniated spinal disc?
> Since you are making a distinction about public vs. private unions it appears that this is not a constitutional issue.

Private entities can limit free speech all they want; public entities cannot.
It sounds like their URL handling might just be terribly broken; see for example https://github.com/transmission/transmission/issues/608.
17k - 700$ a month stops being 17k very quickly.

You need to look at pricinciple - expenses + interest for each month on both sides. Consider if he had a pile of money to cover 700$ a month in Uber driving and what would happen on each path.
1.6 billion.

They bought demandware nearly 2 years ago for just slightly higher which has ecommerce. They just recently ended Business catalyst which was a POS. I guess they magento is the key to taking on big and small ecom sites in the future with this POS.
Ah, I see what you're talking about now.

There are indeed a handful of classes-- some in d_ctl.c-- (and probably externals, too) which take signal input and output some message like "bang" on block boundaries (by using a clock callback). Still, there's no "control rate"-- "threshold~" doesn't output data every block. It outputs data only when the threshold value is exceeded, quantized to block boundaries.

At least in my fork (Purr Data), the control outlets are visually distinct from signal outlets. So upon instantiating [threshold~] you can immediately see that it doesn't output signal data.
Former South Floridian here asking any current South Floridian. Thoughts on Tri-Rail Coastal Link? Yay, or Nay?
Please tell me I'm not the only one that thought this was "Thanos Could Have Been Stopped"
Huh. IMHO, the problem with 'learn, earn, return' is that the peak earning years are towards the age of retirement.

If by 'return' the author means in some partial way (not full time), then I can maybe see it. But if he means full-time giving back in your retirement, I don't think that fits my plans. I plan on some relaxation.
We have a number of holes in our legal system. The cause is not what you say, even if it's very reasonable. The cause is where we came from and technical debt after so many years of patches. We suffered a dictatorship until 1975. The climate was against police and pro-reo. It was good to abolish capital punishment and other relics. But we swinged too much the other way. A more dramatic example is how people under 18 can get away with rape and murder, just a slap in the wrist. Also parole is almost a given after doing half the sentence. So effectively our longest punishment is 15 years. That has changed for rapists and terrorists, but it's basically true for most other crimes.
I don't believe Iran is involved though as the Euphrates does not flow through it. I think you might mean Turkey.
Popular encrypted email standards are unsafe
"The relevant regulator not the courts"

Here in the US, that's a non-starter.
Hi Roustem!

I don't use any third-party services. I use what 1Pw calls "Folder" sync, as it's the only non-cloud method available. 1Pw on Mac #1 saves a binary file to disk, and 1Pw on Mac #2 loads that file from disk. There's no components here out of 1Pw's control. Sometimes, 1Pw simply doesn't write the file on Mac #1, as I can tell by the modification timestamp.

I ran 1PasswordTroubleshooting.app, and sent in the 400KB report it generated. The response I got from tech support mentioned nothing about what might have been found in that file (or what they expected to find, which could prevent data from getting from the application to the filesystem). They simply gave the usual spiel about restarting/upgrading.
I've always thought this needs to be much more prevalent in any conversation about how ads should be used.

I assume ads targeted towards children would be a good case study.
I like light rails, prefer them over busses. People kinda trust light rail more than busses, because for light rail you need a track and a station, for busses you just need a bus stop sign.

My bigger point is, when you $10 for a ticket with the train you need to pay additionally for you next leg of the commute. If you commute it is really a good idea when the ticket is valid for your entire commute, not matter to which transport you transfer: train, light rail, or bus.
"How did they get scammed?"

"Because they're dumb rich people."

"How do you know they're dumb rich people?"

"Because they got scammed."
> easier to debug

Incidentally, my impression has been that the use of a declarative (or pure functional) language leads to spending drastically less (if any at all) time debugging. If your code makes sense (to you), it will work. Or, as an old adage goes, "If it compiles, it works."
Read what I wrote. I am 100% for free speech, it is one of the most important aspects of any free society.

However, freedom of speech is not freedom from consequences. If you make public speeches calling for the violent persecution of immigrants, there will be consequences for you. Yes, even in the US.
> So no, let's not stay in touch, fuck off with the spam, the targeted advertising, the profiles, the retargeting, the selling of profiles, the stealing of contact lists and so on.

I do agree with all of that, but I think the solution is more technical than regulatory.

Ublock Origin, uMatrix, and Ad Nauseum are doing an infinite better job to protect user privacy than any legislation we can make up.

At the end of the day, users are responsible for their own security and privacy as the web is global, and you can't expect all juridictions to comply with EU laws.
They had to adopt EAV database schema model because they want to design a schema that can be as generalized and flexible as possible. Obviously performance is the trade off. As a result, every Magneto shop has to use multiple layers of caching, which complicates the maintenance of Magneto, an open-source ecommerce off-the-shelf platform that's supposed to be easier than homebrew your own, ironically.
Which areas of Sweden are being refused public utility service? Whenever I hear (primarily from xenophobic press in the US and UK) about "no-go zone" areas of Sweden, the response from Sweden seems to be a quizzical "what are you talking about?" Eg, https://www.snopes.com/fact-check/sweden-crime-no-go-zone-po... .

And the various claims about rape, sexual assault, and other sex crimes appears to be more tied to how Sweden defines and counts those incidents than anything else. Eg, https://www.snopes.com/fact-check/crime-sweden-rape-capital-... .

After reading about Sweden's definition a few years ago, I think their definition is correct. Eg, if a married woman says that her husband has raped her ever other day for a year then that should be counted as 180 rapes, not the 1 or even 0 that it might be in other countries.
As an engineer myself, I'd say one of the harder aspects of my job is using all the freaking GUIs and interfaces presented to me. Granted, I wouldn't consider many of these interfaces to even be considered "good" by most standards, but so many designs are unintuitive I really think thats the root of the problem.
Could it be that aging has to do more with the accumulation of “knowledge”, where knowledge literally means replacing perceptions with “I know”s and thus becoming more rigid and disengaged from the senses...

...and not so much as physical aging as the cause of these.

Maybe we are mostly surrounded by people who age without questioning culture around them, or their mind and body habits.

I’ve found that with age and certain practices I’ve become more available to learning, more available to retraining/rewiring of habits, and more responsive to change. My strong opinions are more loosely held and I constantly focus on letting go of any grasping that causes me suffering.

“Drop it while it’s hot” has a whole and new wonderful meaning. My body is aging but my experience of the world is becoming more colorful, more vibrant and more exciting.

My dad is close to 80 year old, an active surgeon, at the top of his field, actively publishing papers, teaching, seeing patients, driving to jobs in different cities, with yoga and tennis on a semi regular basis while writing a book and editing a magazine. Many of these require him using a desktop and laptop computers, he just got an android smartphone which I wished him luck with because it’s too complex for me to support.
This comment sounds like pro Google PR if anything.
Evolutionary computation will drive the future of creative AI
Funny you put it that way because it sounds very Japanese to me.

Japan always focuses heavily on the physical infrastructure. They meticulously build amazing machines, bridges and grid systems, but don't know what to do with them.
Wow, a digital arms dealer. How is that they have not been destroyed or captured by someone's military?
The relatively new stopping trains here accelerate at up to 1.0m/s^2; using that as a figure (because it's nice and round), and where 79mph ~= 35m/s (to 2 s.f., as are all derived figures below):

It takes 35 seconds to accelerate up to top speed, in which case it has travelled 610m. The distance of the track is 25 miles (or 40km), and assuming it maintains the top speed throughout and deceleration matches acceleration for comfort, then the journey would take 19 minutes.

If we take the lower value of 0.79m/s^2, which is what the newest intercity diesel trains do:

It takes 44 seconds to accelerate up to top speed, in which case it has travelled 780m. The journey would take 20 minutes.

Okay, these are somewhat optimistic assumptions, but the European in me would be surprised if there were that many places where it had to slow significantly, and obviously they don't actually have linear acceleration (we're talking closer to 60s to 60mph in the diesel case in reality, though the additional acceleration to 79mph is likely near the maximum acceleration give the reason for the prolongation is reducing jank).
> The service itself sometimes controls which user can access which data,

Sure, but ssh-agent does not. That's what I was alluding to with "major surgery".

Also, while the encrypted keys are stored in the file system or registry, the agent process necessarily has them in unencrypted form. That's the reason for loading keys into the agent in the first place.

To have an ssh-agent that can run as a privileged system service with multiple unprivileged clients, you need to extend it to have some notion of client identity and per-user key space. The standard OpenSSH ssh-agent doesn't have that. Users run their own instance each and if you can connect to it, you can use the keys loaded into it. All of them.

The agent code at github.com/PowerShell/openssh-portable doesn't look any different to me, at least from a cursory glance.

Thus, the decision to run it as a system service seems odd to me.

edit: are they hooking into the agent as a PKCS11 provider/"smartcard" and the plaintext keys never even hit the agent's in-memory table, to be queried by all connected clients?
I'm glad the FAA does what they do. While it is easy to hand wave away their concerns, it is better to over-spec it now and to test the design than to just let manufacturers put "alpha" products into commercial usage and only fix them after a body-count.

If driving/vehicles/roads were held to the same or a similar standards to aircraft there might be fewer accidents and deaths today.

Ironically self-driving is held to a much higher standard than regular driving; which is appreciated but further makes one question why regular "dumb" vehicles are so under-regulated (the analogy that springs to my mind is when HTTPS with a self-signed certificate used to be treated much worse than regular HTTP, it took years to treat HTTP as the insecure connection it is, manual vehicles are the same way, something that has been around so long we ignore its safety issues).
Inside an Amazon warehouse that ships your supersized purchases
I personally just love the undocumented behavior changes between minor version upgrades.....
I read Evicted. Great book! A must read.

Word of advice to anyone who picks it up. Read the final chapter or two first. It's where he gets into the weeds of the data and such. If you start at the beginning and get bored, get distracted, give up, etc. before the end you're going to miss the best part.

Don't get me wrong, the stories are great. But just the same it gets disheartening, if not depressing.
Speaking of dramatically inflated costs, you could have made the same point in just three bytes: S A P
>"Falco and others like him are inadvertently making it far more likely that the rules of operation of the worldwide intellectual commons that is the Internet will be established not through the messy but open processes of democracy but by private negotiations among large corporations. To think this prospect dismaying, one doesn’t need to be a fan of BearShare."
Each do better under certain situations. One is a hammer and another a tweezer. Different debugging jobs/steps need different tools. But the real question is whether the hammer/tweezer kit that comes with Prolog is better than the hammer/tweezer kit of other paradigms/languages.

In my personal opinion and observation, the hierarchical step-wise refinement approach is quicker for most developers to grasp, learn, and debug. Maybe if those of us who don't see the grokkability benefits try it for 50 years, it will finally click. But you better hope to be in management by then because the programming field doesn't like "old people". I'm just the messenger.
> Some regulators will target the weakest.

Do you have any evidence for this?

I have plenty of evidence for the opposite, if you want I will collect it.

Here is one sample dataset, NL:

https://www.computable.nl/artikel/nieuws/overheid/6345059/25...

No fines in all of 2017, in spite of 10,009 data leaks that were reported.

In one case there was a settlement of 48K, but it is not quite clear what the circumstances were, probably to protect the guilty.

"De AP stelt in een samenvatting van het jaarverslag 2017 dat het niet altijd direct een onderzoek start. Het gaat eerst in gesprek met partijen die een overtreding begaan en in veel gevallen leiden die zogenoemde alternatieve interventies niet tot een officieel onderzoek."

Rough translation:

"The Authority says in the summary of their annual report for 2017 that it does not always immediately starts an investigation. It first tries to talk to the parties that have violated the law and in many cases these so called alternative interventions do not lead to an official inquiry."
Demandware was bought by Salesforce.
Why to vendors pay bug bounties, if not to defend against financially motivated attackers? To defend against "digital vandals" who would damage systems but not profit from them? To defend against widespread grassroots attacks if an attack is published publicly?
Um, no. Go is designed to make it easier to work with really large codebases - say, 10 million lines and up.

I'm going to go out on a limb and guess that you've never had to work in that space. It's really easy to insult Go's solutions when you don't even know what the problems are...
I guess I often rely on column order in Go, given Rows.Scan() [0]... so `select ` would be scary since someone may ALTER the table.

Maybe that's the antipattern! But it's also a feature so I feel like you're better off avoiding the . Also, if someone adds additional big columns, you may incur additional, unnecessary cost

[0]: https://golang.org/pkg/database/sql/#Rows.Scan
Supposedly 23andMe uses their genetic data of their millions of users for good, to help research and identify genetic problems/solutions, etc.
Taking HN threads into nationalistic flamewar, for one. Please don't.

https://news.ycombinator.com/newsguidelines.html
Prometheus' Summaries are implemented using Targeted Quantiles
"Janus is about a case in which a person is being forced to pay money out of his paycheck to a group who directly lobbies for policies that he does not support."

And also negotiates on his behalf for better working conditions and pay.

At the end of the day, that person wants all the benefits of being in the union (enhanced negotiating power, benefits, etc), without any of the cost.
I wonder if the Orbach Group has any ties to Jerry Orbach, 'Lenny' from Law and Order and the father figure in 'Dirty Dancing'.
Shopify is trying to move up market as there are more profits available from larger customers.
The same way arms dealers stay in business, by being needed.
The name is not important, it's temporary. It's going to become the regular "go" tool in one of the next releases.
"In World War II, the Swiss had defenses no other country had. Let's begin with the rifle in every home combined with the Alpine terrain. When the German Kaiser asked in 1912 what the quarter of a million Swiss militiamen would do if invaded by a half million German soldiers, a Swiss replied: shoot twice and go home."
http://davekopel.org/2A/OthWr/Target_Switzerland.htm
how do i know if this site is more legit that reddit :)
Also for balance: it's unclear if there are CVEs. There may not be any that are exploitable due to the age of the library (i.e. the bugs landed post-release). However, it's also very tricky to rule these out one by one, and the dependency is slated for removal from some distros.

There may be no material security issue. But the age of the software does not instill confidence, and newer engines are likely far more performant.
That depends on which hemisphere you're in.
Oops, if it wasn't container.cpp it was parent.cpp; I forget which file right now
Ah you may be right- I did a cursory Google search only. Still, multiple years of income in one bug isn't bad at all.
I can confirm this impression. In my opinion, there are several reasons for this:

First, many types of mistakes that are common when working with lower-level languages cannot occur at all when you use a declarative language. For example, with a logic programming language, you cannot accidentally double-free a pointer or write into unintended portions of memory.

Second, when working with a high-level language, the code is much shorter than if you had used a lower-level language. This makes it easier to debug, and also easier to get right already in the first few tries.

Third, once there is a mistake, it can be found in ways that fit the overall paradigm nicely. For example, in pure Prolog, if your predicate terminates and has a mistake, then it is either too specific or too general (or both), and you can debug both cases very systematically and even automatically, using built-in mechanisms of the language.

Declarative debugging methods for Prolog were pioneered by Ehud Shapiro in his 1982 PhD thesis, Algorithmic Program Debugging:

https://cpsc.yale.edu/sites/default/files/files/tr237.pdf

I also highly recommend Ulrich Neumerkel's teleteaching environment GUPU for systematically finding mistakes in Prolog programs:

https://www.complang.tuwien.ac.at/ulrich/gupu/
Anker considers IPO
"Don't talk to strangers" is applicable to social media, too.
So sorry for you loss.

As someone has said further down - this is one theory and isn’t a general medical consensus.

Our daughter was diagnosed with ALL 12 months ago. She went to baby groups from 6 weeks and I would never have claimed our house was particularly clean.

What I have always found frustrating is we have never been asked any environmental questions about our daughters early years. There are many theories of cause so I would have expected them to get as much information as possible from us.
I feel like CMU has been on a tear on HN lately. It feels like there's an incredible amount of momentum around them, from Robotics to Computer Vision to AI/ML. It feels like each thing that comes out lately is even more impressive than the last. Exciting times. Disclaimer: I have no affiliation with CMU whatsoever, just an admirer.
Avoiding the EAV model while still being flexible (e.g. sparse attributes for any variety of products) is one place where the JSON datatype really shines. Throw your non-standard attributes into a JSON object and use the native DB functions to filter accordingly. In Postgres and MySQL 8 you can add conditional/functional/virtual indexes to keep things speedy. Maybe Magento will one day take advantage of these features.

It's basically a modern-day approach to Serialized LOB: https://martinfowler.com/eaaCatalog/serializedLOB.html