skysight-inc/HackerNews huggingface dataset:
This is going to be really, really hard without turning into a mess. Software is complex, and bad software even more so, and an integrated hardware/software system is even worse. Even finding the vulnerabilities is hard already, because lots of systems are snowflakes and each needs to be analyzed individually, and usually in individual ways.

And even assuming we have a definition of 'infrastructure software' and a way to reliably enumerate a set of vulnerabilities, attribution of liability is even harder:

- Is the distributor of the router liable for a vulnerability in a used library? Surely they could vet and review libraries.

- What happens if that library is openssl and almost all webservers on the internet are vulnerable?

- What happens if the library is used in an insecure way? For example, if you seed openssl or libressl with weak random numbers, it is possible to attack algorithms provided by the library.

- On the contrary, if the author of a library is liable, what's going to happen if I use a library of a company and build something vulnerable with it intentionally?

I dislike being so negative about it, but I wouldn't want to get sued for sticking an MIT license on a silly project 10 years ago someone necro'd and stuck into a router, so to say.
> Do you really want liability for software bugs?

GDPR has shown that inconveniencing tech companies with legal consequences for their negligence can be a net boon to society. So yes, liability for software bugs. Hell, we probably need to start licensing programmers.
No, he meant criminals.
No.

Eliminating meritocracy as a value doesn't discriminate against cis white males.

Nor does meritocracy as a value discriminate against non-cis non-white people.

This effort is a power-grab by a small group of people based on their radical political views, couched in feel-good words like inclusion.

They seek to have their political views reflected in language choice, to advance their specific political agenda over the project.

It has nothing to do with race, gender, or skin color, nor does it have anything to do with diversity.

They rely on the cooperation who want to 'do something' but it is about control.
You don’t need a greenhouse, you can use mulch and low till methods to maintain a strong bio layer that traps water. Nature has solved this problem, it’s just cheaper to strip and flood, strip and flood, strip and flood, until all the topsoil and water are used up.

The timescales are slightly longer than human lifespan, so while the capital class will lose money on this in the long term, the decision makers will be dead by the time the land dies, so there’s no real incentive to care. And they’ll make a lot of money right now when they need it, while their kids are in college.
Unlikely. Most people are going through be clickinc yes. The ones that wouldn’t are already using ad blockers. Gdpr launch has created a privacy hysteria but that will go away.
It's a little unclear to me how this answers the question. Can you connect the dots here?

I don't think not giving you services if you don't opt in violates your "enjoyment of the right to respect for private life..."

Are you saying that you shouldn't be allowed to trade use of your personal information for services?

If not, how does your quote tie in?
The current state of your mailbox seems like a good corpus for memory-less targeting. Other than your emails, which the email provider obviously has to store, no personal information would have to be kept. As a result I'm not sure that the GDPR would impede Gmail, except to make it more valuable by increasing the scarcity of having that much data in one place.
I think what they are trying to convey is that mindless practice simply reinforces current skills.

We've all been in that state of high performance where suddenly its 2am and you think "ok 5 more minutes" then its suddenly 4am.

I would liken a lot of what he is saying there to a kind of trance state, similar to self hypnosis, where there is only the work in front of you.

I get into this state most often when I sit down to produce any kind of art, I spit and spat around starting but then after a while settle into it and can spend hours working on something, its a whole different feeling to just regular doodling, its all encompassing.
Here's a fairly recent one, I guess. The 3 lines of javascript do most of the work.

https://nakedsecurity.sophos.com/2013/10/11/anatomy-of-an-ex...
Companies should be liable for deficiencies in their commercial products... that's basic consumer protection.

Samsung had to recall and repair dangerously defective hardware - why not Cisco? Does it matter whether the public risk is in the battery or router memory?

And, imo, it follows that free OSS organizations are not liable for vulnerabilities. No money, no consumers. I think it's fair that businesses should expect to do their due diligence before blindly reusing public domain IP...
As a small business owner, I disagree - all businesses should be mindful of their user's privacy.
I have been experimenting with the idea of reading some classics in the languages they were written in - Greek, Latin, French, etc., and I am still wondering if the experience is worth the effort (of learning a language), especially given the availability of many excellent English translations.
Go has plenty of weird, inconsistent dark corners. To name one off the top of my head, indexing a value in a nil map returns a zero value, while indexing a value in a nil slice panics.
AI Weekly 26 May 2018
Idris 1.3.0 released
Thats not (edit: better). I have enabled context ads in adsense now , the ads are just worse and annoying
This has always bothered me. Interviews for technology related roles are almost always an assessment of innate cognitive ability, something that has no real correlation with race or gender. The idea that certain groups might be disadvantaged here and require help is especially insulting.
Have you ever seen an RT article deeply critical of Putin’s regime?
Max Schrems/NOYB is not really a "plaintiff". They have started no legal proceedings.

They just wrote a letter to the data protection agencies that – in their opinion – someons is doind something wrong.

Facebook/Google et al. have no quarrel with Max Schrems, but with the data protection agency, if it decides to act on this.

Therefore it's obvious that Max Schrems cannot be liable for anything.
RedHat lives and dies on value to the enterprise. Their consultants need to find a way to stop enterprise customers from just reaching for whatever FOSS is out there. By giving away their own framework, they can keep their clients in the redhat universe where redhat folks have expertise to offer.
Honestly, this is why I just read technical books cover to cover. It’s just about the best point to point resource out there.

I think I remember seeing where Cornell offered a course structure where you’d do one course, all day, for 3 weeks and then move to the next. It was years ago, but I remember thinking I would have loved it.
You need a legal basis for automated decision-making, such as doing geolocation on a user's IP address (which can be considered PII, as per EU legal rulings from last year). Which means you cannot block them without first getting that legal basis (i.e. consent). Therefore, you're in a catch 22.
> For someone who doesn't care about private parts, why are you the first person to bring it up?

Sorry--sometimes the endless stream of euphemisms and language policing bores me. This isn't an isolated event and I think we all know what's being said here.

> If you care about delivering success, you should take a moment and think hard about why you feel so strongly about the race/gender aspect, and are not thinking about the probability theory.

I really don't care about the race/gender aspect, but it's being injected into Mozilla's governance statement and here we are discussing it.
Okay thanks ! Makes it more interesting. I like it when it's doing something in one space (fourier space here) then something else in another space (original space) and you have to switch between multiple point of view to make something awesome (a fractal for example)
That part was the biggest break in suspended disbelief for me. I get the protomolecule - that's basically magic - but the grav assist? Yeah, no, the Roci just zipped around Jupiter's orbits like they had some Star Trek sublight drive.
If only it were so easy to know what the mission is or what is in service of the mission

Seems pretty straightforward to me.

An engineering team's goal is to take a problem and implement a solution. That is the mission. Anything that leads towards the completion of the problem their team wants to solve is in service of the mission. I don't understand what is complicated about that, what are you seeing that we're not?

In life, in software, there are enough derelict projects, aspirations, visions, dreams to fill a graveyard

Once the mission is no longer worth pursuing or becomes muddled, teams fall apart and motivation crumbles. My github has plenty of repos I've stopped working on because I stopped seeing why it was worth my time to work on those projects and moved on to things that would be of greater benefit to me. That's how things should be.
That's a common sentiment, unfortunately, the Google and Facebook tracking scripts on your little private blog are doing just the same damage as the same scripts on a big newspaper's web site. Both track in exactly the same way.
Asus is not affected by this but it I still updated the firmware because it was affected by multiple other vulnerabilities... I wonder if computing we'll become secure before I die...
> I'd be willing to bet your "small number" of white listed websites is actually a lot more than you think. Turning off Javascript breaks a ton of sites, IME.

My experience is the opposite.

I used NoScript for almost 8 years, and then switched to uMatrix one year ago.

I don't need to enable JavaScript in most sites. And, if I need it, only enable some parts of the page. Most websites are much faster with this.
Show HN: Mailando – Update websites with email
"This proposal does not seek to change how Mozilla is governed, only how we talk about how Mozilla is governed, which may be reasonably be regarded as contentious."

...said another way?...

"It is reasonable to expect a few questions after we emphasize the importance of changing how we talk about x while we also emphasize that changing x is not the objective."

The reasoning in this part of the email is pretty good.
>Should small companies also get free pass on food safety laws? Health inspections are a PITA for restaurants too.

But if you look at how reality works, then you'll see that small companies often do not implement the proper food safety standards. This causes all sorts of problems, because if a company already does one shady thing, then doing one more isn't as much of a problem anymore.
The evidence cited for meritocracy being an inappropriate word, a study on GitHub pull requests, has been widely debunked.

Meritocracy is only an inappropriate word if you believe that certain groups of people will never be able to participate on a level playing field.

That notion is of course incredibly condescending towards members of those groups.

The goal should be to advance everyone in the meritocracy through outreach and training, not to abandon the value of meritocracy.

The proposal itself makes it clear the change is merely for cosmetic purposes, to make certain people feel better, not actually increase diversity.

If you care about diversity you should oppose the notion that certain groups of people are incapable of participating on their own terms.

This is about empowering a small but loud group of political activists who want to remake a software project to fit their fringe world view.

Do you care more about affirming their politics or the quality of software?
There's no court case here yet.

In these 4 cases they have been reported to the regulator. For 3 of them the reports will be passed to the regulator in Eire as that's where they have an EU presence.

So if it is "dismissed" that essentially means the regulator decides no action is required. Or the regulator might decide a phone call or letter will suffice for a first offence.

Max Schrems could take a case to court against Facebook or whoever, with all the usual costs, penalties and potential for appeals etc.
Rubbish, folks block Africa and China all the time
I would reword. Not all business models are healthy for society. Or their workers. Or their consumers.

Searching for mechanisms to limit these models seems fair. I hope it is carried forth on good faith and gets good results.
That's my sentiment exactly. I wish I'd had Python back in the day; especially the IPython REPL or Juypter notebooks. Both are excellent for hacking around, and immediate feedback.
Just as a door being breakable by sufficient force doesn't necessarily mean that the manufacturer is negligent, the fact that some software isn't perfect (i.e. contains bugs) doesn't necessarily mean that the developers are negligent.
Streak (YC S11) Is Hiring Product Engineers
It makes an interesting reading but I have problems with a few things.

I don't think that "to be good at something", through practice, it's conceptually the same that understanding something new. The article doesn't make a clear difference.

About flow state: it seems that the reason flow state is difficult to achieve is (and I believe Mihaly Csikszentmihalyi explain it in its book) because the task have to be in the proper level of difficulty.

Too easy and it's a boring task, too hard it's a frustrating one.

When we are leaning something new, it's very difficult to find a practice that it's just at the proper level. In fact, I would say that it's one of the most important things a mentor can do for his/her pupils: to find the perfect practice for the level of the trainee.
So are your norms and morals offended enough to justify banning such a business model that requires opt-in?

Is this the basis of our disagreement?
I agree one hundred percent with this. I quit my job a while back to hack on a project and it’s insane how much shit you can accomplish in a good week. I recommend it to anyone questioning their current employment situation. Hit me up (email is in my profile) if you want to explore this life style.

The crazy thing is that even if you fail, you’ll be ten times the programmer as when you left.
I don't think it is a false dilemma. The problem is about the difference between the magnitude of revenue generated by the proposed methods. Both for publishers AND people interested in advertising products.

Tasteful banners are nice but tracking the performance of such ads is very hard. Ad business is really cut-throat. When you visit a site, there literally are multiple ad networks / advertisers bidding for a spot in front of you, with real money, based on the site, your location and your interests. A huge network of autonomous trader bots that trade real money billions of times per day for a spot in front of a human's eyeballs. If an algorithm decides that you have a higher than normal probability of converting to a paying customer, they (an AI or expert system) decides on the spot to pay "premium" to be in front of your eyeballs. They do this while running A/B tests with different ad variations to figure out what converts better, for which segment of the population etc.

Modern ads are not only kind of targeted. They are INSANELY targeted. There have been instances of people targeting singular people through ads based on geolocation and interests.

A publisher cannot be expected to run all that bidding code on their own servers. Those networks are actually a network of networks. If you are buying ads today, you want analytics immediately to see how you are doing, how much you are spending so that you can improve and adapt before sinking more money on it.

The profits generated by such methods are a couple orders of magnitude higher than a simple untrackable banner on a site placed by a site owner which gets swapped out whenever...
"We found that honeybees that had been fed with solution containing 10 mg l−1 GLY spent more time performing homeward flights than control bees or bees treated with lower concentrations. They also performed more indirect homing flights. Moreover, the proportion of direct homeward flights performed after a second release from the same site increased in control bees but not in treated bees. These results suggest that, in honeybees, exposure to levels of GLY commonly found in agricultural settings impairs the cognitive capacities needed to retrieve and integrate spatial information for a successful return to the hive. "

Glyphosate is also not allowed in organic produce. Because of allegedly inappropriate involvement of pesticide manufacturers in scientific reviews, glyphosate has also only been approved for five years in the EU (2017).

> And if you really go pesticide free, you start to have more insect damage in crops

There is an organic solution to insect damage and that is predators. I know some green houses that is run here uses sterile large insects that targets crop damaging insects, after which they are just washed off the plants. 100% toxin free and naturally you could balance that to get rid of molds as well. Costly but very effective.
> Do you really want liability for software bugs?

For free software? No. No payment, no obligation.

For paid products? Yes. If you are selling a device, you should be liable for it, just like a car manufacturer would have liability if the brakes failed because they were improperly installed.
PatternFly isn't particularly new (commits back to 2014) and is mostly focused on shipping coherent and consistent product UIs from RedHat to their customers.

This has nothing to do with consultants and Red Hat is not telling their customers to use this framework, although they definitely could if they desired to.
Story with more comments than points always disappear faster from front page.
I’d love to do something like this, but without any kind of income I’d probably be homeless in a few months

How do you bring in money while hacking on your passion?
Just to clarify, that's Cornell College, not Cornell University.
Author here, feel free to ping me with any questions
> Even finding the vulnerabilities is hard already, because lots of systems are snowflakes and each needs to be analyzed individually, and usually in individual ways.

When it comes to SOHO routers it's not as hard as it should be, by a long shot. Tons of hardcoded creds and pretty surface vulns in them.

> - Is the distributor of the router liable for a vulnerability in a used library? Surely they could vet and review libraries.

Yes.

> - What happens if that library is openssl and almost all webservers on the internet are vulnerable?

Everyone deploying it is liable.

> - What happens if the library is used in an insecure way? For example, if you seed openssl or libressl with weak random numbers, it is possible to attack algorithms provided by the library.

The company doing so is liable.

> - On the contrary, if the author of a library is liable, what's going to happen if I use a library of a company and build something vulnerable with it intentionally?

You are liable.

As in, the person who produces the product is liable for what they put in the product.

But, as I said elsewhere, this is all off the cuff and relies on a way to properly classify software, which is extremely hard.

But yeah, to your points, none of those feel hard to deal with at all.

I'm not a lawyer. This is not an area I'm so familiar with. But we already have some controls for CC info, and extending those further would be hard but a good start. This situation is extremely out of hand, whether I have the solution today or not.
This is not about my personal norms and morals, but about those of the society I live in.

Unlike some Internet and Silicon Valley types (who always seem to lean ultra-libertarian), I like living in a society. And society has a fabric.

This discussion is a bit like the one about minimum wage. You probably don't like it. Many people ("society") do.
> This is the side-effect of GDPR.

And the GDPR is the side-effect of people running hog-wild with PII etc. I feel for you but I see your situation as collateral damage of the privacy crisis.
They are proposing removing meritocracy based on their political view that certain classes of people will never be able to participate on a level playing field.

They are the ones advancing a narrative of exclusion, telling individuals in whole swaths that they can never compete in open source projects.

They have no evidence to support this of course, just what they were taught in their sociology classes at uni.

In reality though they are the ones pushing outdated bias.
Top JavaScript Libraries & Tech to Learn in 2018
https://medium.com/javascript-scene/top-javascript-libraries...

SEARCH RESULTS FOR REACT JS
https://www.creativebloq.com/search?searchTerm=react+js

Fullstack React: The Complete Guide to ReactJS and Friends
https://coderprog.com/fullstack-react/
If you have low quality source, eg OCRed scans, then you’ll never get a high quality ePub. It needs manual intervention and proofing to keep quality up. Not to say that archive.org isn’t useful - I’ve produced a collection of Keats poetry[1] as an ePub from their OCRed source in the past - but it’s not really consumable as is.

[1] https://standardebooks.org/ebooks/john-keats/poetry
> If the exploit wasn't put there intentionally, then we're talking about a bug in the software. Do you really want liability for software bugs?

For some bugs, that count as negligence. Sw engineering as a field knows how to make much safer products than what is in these wormable boxes.
Can you explain why you think the type system in Dart is great (or point me to something on the web that does this) -- AFAIK, that has never been made a selling point of the language.

(I have been considering Dart for a while, but haven't taken the time to look into it because it doesn't seem like it provides additional benefits compared to other languages (apart from the Flutter aspect).)
Architects and civil engineers are held liable. I would imagine we would use a similar system, as someone with no idea how that system works.
Polymer solar cell hopes to claim new record﻿
If bendgate prevented you from using your phone then you’d have a point. But it didn’t. For nearly everybody it was purely a (rather subtle) aesthetic issue.
This is generally called a Block Plan[1] and is a great system for some students. Looks like Cornell College offers it, you got my hopes up as I'm a Cornell University student and juggling five technical courses at a time has heavy context switching penalties. On the other hand, last year taking Linear Algebra and at the same time having to apply it in a signals processing class was a good combo.

[1] http://www.expertadmissions.com/ExpertAdmissionsBlog/tabid/7...
Interesting. What are the main features / benefits? That it's serverless, is one, are there other things too?

What's your motivation, what's the reason you're building this :- )

Feedback: Privacy problem, I posted a comment, and this then appeared as my name and comment:

myemail - NaN-NaN-NaN NaN:NaN

Test of https://github.com/metrue/YoYo

having specified `myemail@example.com` as email address.

That means YoYo in practice gives away peoples email addresses, when YoYo uses `myemail` as the username — most people use well known providers like `@gmail`.
You might like my library - no actions or reducers, and great typescript support. You just use regular JS to manipulate data and the library updates the store immutably.

https://github.com/gunn/pure-store