skysight-inc/HackerNews huggingface dataset:
Yes, That's what sticks out to me, time to patch, 6-9 months with a know, un-patched, vulnerability with no notice to customers. I wouldn't run a honey pot on Linode, their security record is abysmal and that's only the stuff we've found out about.
"This area of the internet seems poised for a massive disruption as AI starts coming in."

I'm waiting for AI ad blockers that can find the specific code and strip it out ala ublock origin.
Someone recently just had a Hat-trick in luck
A Long Way to the Top: Significance, Structure, Stability of Internet Top Lists
yep https://news.ycombinator.com/item?id=17198554
It's back up:

; <<>> DiG 9.9.5-9+deb8u15-Debian <<>> @1.1.1.1
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21908
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1536
;; QUESTION SECTION:
;. IN NS

;; ANSWER SECTION:
. 2179 IN NS a.root-servers.net.
. 2179 IN NS b.root-servers.net.
. 2179 IN NS c.root-servers.net.
. 2179 IN NS d.root-servers.net.
. 2179 IN NS e.root-servers.net.
. 2179 IN NS f.root-servers.net.
. 2179 IN NS g.root-servers.net.
. 2179 IN NS h.root-servers.net.
. 2179 IN NS i.root-servers.net.
. 2179 IN NS j.root-servers.net.
. 2179 IN NS k.root-servers.net.
. 2179 IN NS l.root-servers.net.
. 2179 IN NS m.root-servers.net.

;; Query time: 10 msec
;; SERVER: 1.1.1.1#53(1.1.1.1)
;; WHEN: Thu May 31 18:14:31 UTC 2018
;; MSG SIZE rcvd: 431
Or, said more succinctly, clickjacking
Congratulations! A three-year ride is a outlier. I hope your arXiv version got some citations to keep you going emotionally and professionally in the meantime :)
Imagine a similar incident in, say, Syria, investigated by an international team lead by Russians with some involvement of Belarus and Iran. Let's say they publish a report blaming US-supported rebels. Would you lend the same credence to this hypothetical report?
I’ve read the complaint, and I doubt Disney’s legal department is concerned by this lawsuit. I’m going to predict that Disney has a blanket license for most of the music recordings through ASCAP or whatever other organization would normally handle those licenses.

The bulk of the complaint lists terrible things Disney’s legal department has done, but it’s not clear how those actions are legally relevant. “Hypocrisy” is not one of the factors in whether something is fair use.

The statement that other documentaries get licenses from the estate doesn’t say whether those documentaries are actually legally required to get those licenses. And it certainly doesn’t say whether Disney needs a license for its project.

I’m going to predict that the music recording claims will be dropped when Disney shows it has a blanket license, and the other claims do look like fair use to me. But maybe Disney will settle before trial.
That's what I thought marketing jobs were for.

But I guess there are people who cannot even do those jobs. Even McDonalds has standards.
I know a lot of companies that think they have, and most of them are wrong. Some are deeply wrong.
Some friend and I did a "show and tell" slide show nights with friends and beers. Most "shows" were trips, though a few other things were covered.
One friend had a digital projector another had a screen. It was fun. We did it for a number of years. tried it outside once, bugs were attracted to screen...
Confirmed from India.

Are we even supposed to use the same DNS provider for both the fields? That seems like a bad idea
So why not take all those people operating a security theater, and employ them to actually do the work that the agency claims to do?
Comparing specifically to Sweden, there is no similarity at all between the US and Sweden when it comes to economic classes and their differences. We have our upper class and working class too, but even those who are working poor here manage with one job and they still enjoy benefits like day care and health care.

How many people are hustling two or more jobs to make ends meet in the US? How many of them afford day care? What happens if they break a leg and can't work for a month?
This issue should be resolved. It is early but appears our DDoS systems kicked in when they shouldn't.
There are also contemporaneous or nearly-contemporaneous pronunciation guides. Like poetry of the era, they work with rhyming words, so they're just another part of the puzzle. It's not often that the word being "pronounced" (a new coinage or import, or something uncommon or technical) is of any interest, but it's often the only clue that the example words given as rhymes should rhyme.
I am pretty sure someone in RLM makes a profit from these productions. If they don't, I'd be disappointed.

It's even worse then being aired on primetime TV - it was put out on the wide-open internet, for anyone and everyone to see.
Security-On-a-Chip Features Protection Profiles for European Utilities
1.1.1.1 DNS is down
It appears the Cloudflare 1.1.1.1 DNS is not resolving addresses. If your internet isn't resolving try switching to Google DNS 8.8.8.8 and 8.8.4.4.
Futhark 0.5.1 released
Not sure why this is being downvoted. I admit that I find it hard to see how to control the exfiltration of data once it's been figured out by a badly sandboxed program. But the idea that systematically addressing side channel attacks in a sandbox is really hard seems very valid. I mean, the exploit described in TFA is quite the argument in favor of this point.
Disclaimer: Not speaking for my employer, and my experience was several years ago and may be out of date.

My first project at Google was working on fake reviews on Maps. ML was certainly useful for some things, but at the end of the day sometimes you literally have no practical way of knowing if a review is fake or not. Was this written by a customer or by the business owner's brother in law? Or by his competitor down the street? Who knows? Which means it's pretty hard to get good, complete training data to train your model on.

Of course, there are classes of fake reviews that are easy enough to detect. But as the fake review-writing AIs get better, I don't know how the anti-fake review AIs can win.
Discussion at https://news.ycombinator.com/item?id=17195072.

Edit: actually that article contains much less information and the discussion is correspondingly less substantive, so I've taken the 'dupe' marker off the current post. Carry on.
Also worth considering that the vast majority of parents who don't care simply can't afford to care. Working 2+ jobs, they may not have the time or emotional effort to invest in the same way that more privileged parents with elaborate PTO schemes have access to.

Free dental & medical (Medicare for All or similar) would go a long way to alleviating the pressure on parents and allow them the space and time to care. As would stronger labor laws to ensure all workers have access to a reasonably flexible working environment.
If you are not prepared you will struggle.

If you ever interview with me, be aware that I'm only allowed to asked from a pre-selected list of this type of question. PLEASE PLEASE PLEASE spend time thinking about your situations the day before! I expect to come with about 5 scenarios in mind that you can then twist to be the answer to the questions I ask. Come up with some situations in advance, you don't want to have to think of them on the spot. (actually you will have to think them up on the spot, once you get past the first question you will relax and be able to think on your feet better - for some questions a new situation will then occur to you on the spot)

I know you had to work with a difficult person in the past, remember something that happened. Don't make that person look too bad - you don't want to come as bitter so select a different situation if that might happen.

I know you had to make a decision without enough information. I know you had to do something controversial.

When I'm interviewing I'm only allowed to write down and consider The Situation/Task, your Action, and the Result. (This is called the STAR system, there are other variations)
If you can make sure I clearly understand each that is to your benefit, though I will ask clarification questions to get that.
I don't like doing this, but, you're wrong. The US "Bill of Rights" is most definitely a list of what the government is prohibited from doing. That's why every entry on it says things in the negative, like "shall make no law" and "shall not be", and why entries have specific context clarifications like "Congress" and "In all criminal prosecutions" and so on.

No part of the US Constitution outlines individual rights or freedoms. It outlines powers of the states, powers of the federation, and limitations on those powers. Sometimes certain "unalienable rights" are referenced, but there is no list of rights in the Bill of Rights.

It's also not an "important distinction" here.
> PDFs technically are code

PDF is code only in the same sense as HTML is. You can embed JS in PDFs, but that's it.

I don't believe Evince supports JS at the moment:

https://gitlab.gnome.org/GNOME/evince/issues/24
But perhaps as an avid pirate, you might care about the naked hypocrisy exhibited by Disney re: copyright, which is the crux of the Jackson estate's clever argument here (clever to the layperson, at least -- who knows if it will hold much weight if the case goes to trial).
>And in another 5-10 years insurance might approve it

Not sure why you think that, but I work in a similar field and I promise you you're wrong.
I can't think of any abuse prevented.

Worst case, assume they are actually correlating this for ad tracking: you might get more relevant ads instead of generic junk that you have no interest in. That's actually the opposite of abuse.
There seems to be a lot of misinformation about Apple’s stance in this thread.

Apple explicitly allows and provides APIs to develop content blockers.

Apple does not allow content blocking through custom VPN implementations, seemingly because these a) introduce a performance impact, b) may be confusing for users as it’s abusing the point of VPNs, and c) may allow more easy abuse, as VPNs can do a lot more than just block content. This is what the article linked as evidence for Apple’s policy covers, and the statement provided by Apple, while not especially clear, does match up with this.

I think the title should be reverted to remove Apple, as they do allow ad blockers on the store (I personally use 1BlockerX https://itunes.apple.com/gb/app/1blocker-x/id1365531024?mt=8 )
This is fixed now. Thanks again, ldjb!
> First of all, everyone finishes their first reading of Shakespeare with a partial understanding.

At best. I knew people at public school whose major projects were coloring maps with colored pencils. They didn't have to draw the borders, they just had to color the countries correctly. It was literally a complicated color by numbers.

Not all educations are the same.
No, we don't. The FOSS community operates on the idea that people that want to contribute to it (financially, programming, etc) can do so. Nothing about open source obligates that behavior, outside of certain licenses. Nobody "owes" FOSS anything either, that's up to them.
Focusing on José Valim: A Biographical Interview (2016)
Accelerate: Why Continuous Delivery Requires DevOps
mount -o remount,noexec /home?
We'd need to make it a popular choice, the easy option in clothing/fashion/footwear.

Unless it's adopted by a significant percentage of the population, it's only a tool to draw added scrutiny. Much like when I tried to board a plane with an excessively comfortable sweater and was patted down.
Gatsby, the React-Based Static Site Generator, Gets Commercial Backing
confirmed back up here (denver)
Just left a place with 17k+ G Suite accounts (K-12). They used free G Suite. Google is ingenious in how they are "certifying" educators on G Suite. The price for the tests are incredibly cheap < $50. They didn't even think of going with Microsoft, even though tiers 1,2 are free with tier 3 being $2 per user? for K-12.

State government is exactly the opposite. While not trivial standing up a shared AD tenet is easy/doable and gives you quick SSO in the cloud for .NET based web apps when everybody (logins) is on the tenet/AD. Quick being the keyword.
Confirmed from St. Louis
Disney only cares about the law when it profits them. Remember that they rose to fame by using stories that were in the public domain and exempt from copyright, then lobbied to extend their own copyright indefinitely.
> the government keeping a secret list of a certain subset of its citizens certainly leaves a bad taste in my mouth even if I can't perfectly express why

Some possible reasons:

* Because the government is of the people, for the people, and by the people, it may not discriminate against a subset of the people for any reason that isn't a direct result of due process procedures

* Because lists and tools like this have historically been really good at facilitating discrimination against the people on it, and that it doesn't take terribly much to imagine a politically motivated party loosening the criteria for inclusion on these lists such that people from a certain country are easy adds, furthering discrimination against them

* Because a government under the American constitution only has authority by the consent of the governed, and we clearly cannot consent to secret lists that we cannot see or verify our membership / non-membership in

* Because often, the government uses inclusion on these secret lists to justify restriction of rights or privileges to those on it, as we have done in the past to restrict gun rights based on one's membership on the no-fly list

* Because oft as not, the government is really bad at keeping these lists free of false positives, such that senators, children, dead people and others have been mistakenly added, and

* Because the government is loath to remove people's names from the list, even where the names can be proven to have been mistakenly added, causing weird scenarios in which Muslim people who were fraudulently placed on the list have to sue for the right to sue to be removed from it

* Because these lists have been, and can in the future be easily turned against one's political opponents with a handful of keystrokes
Choose Your Own Security Disclosure Adventure
Linode has been around long enough (15 years) that I can't imagine they're operating at a loss. Their prices also haven't been nearly as dirt-cheap as other providers.
I much prefer coderpad or HackerRank, live with the interviewers, over whiteboarding. I find talking through a first approach, improvements, debugging, etc. is very useful -- both as an interviewer and candidate.

The timed HackerRank and such sucks though. Way too stressful. And easily subverted. They enforce fullscreen but you can just use another computer to look things up.

I wonder if, comparatively, other fields have as many "fakes" as I've seen try to get jobs in mine. I'd say 1/20 candidates I've interviewed aren't imbeciles.
curious if all the fake reviews will end up creating a market for certified reviewers or something like consumer reports. Sure we can't trust cnet or wired or pcmag but maybe if the incentive is high enough there will be a market for honest reviews including an incentive for auditing and verification?

could start a reviewer guild and use crypto signatures to verify their guild membership is up to date and still valid. hoping the guild has the incentive to stay honest etc.
Oh, I don't know. There is also the very real possibility that it will seem hopelessly obtuse to the student who will never approach it again. IMO, a poor introduction to a subject is worse than neutral.

And maybe that's okay, too, but high school isn't the only place that many students will get to experience Shakespeare and if it can't be done right there might be more damage than good done.

There is a difference between not exposing a student to something that they cannot understand at first glance and not having a teacher who doesn't understand the matter themselves try to muddle their way through a presentation the material. Making it part of standard curriculum means that we will have a heavy dosage of the latter, whereas making it optional means that only those teachers who truly have a passion for the thing will present it (theoretically, of course).

Then again, I'm in America so our teachers don't have time to teach anything that isn't showing up on a standardized test, and for me this debate is purely academic :)
Could this be more hacking originating from China? Same thing from just a few days ago.
Going through the Hong Kong airport several years ago, security guards made people take off hats and sunglasses.
Leica has just discontinued its last "regular" film camera, the M7, a few days ago:

https://www.reddotforum.com/content/2018/05/leica-m7-film-ca...

All that remains are the purely mechanical Leica MP and M-A film cameras, plus many digital cameras of course.
> I’m going to predict that Disney has a blanket license for most of the music recordings through ASCAP or whatever other organization would normally handle those licenses.

If that's the case, why would Disney's attorneys bother trying to cite Fair Use as an excuse?

> Disney’s attorney used fair use as a defense. The company argued that it could legally use Jackson’s copyrighted material since the broadcast was labeled as a documentary.
If you fail to see how web fonts add value the tradeoff is different though. Google Fonts is just as useless as the old ‘sifr’ Flash crapplets, just as much a waste of resources and more of a waste of privacy.
That was my point, that nothing solves every problem. Monolithic frameworks aren't inherently better than micro libraries, they are just different paths to achieving the same goal. I'm still going to choose micro libraries, because flexibility is more valuable to me than batteries included, which is just as good an argument as batteries included is better than flexibility.
> We still speak an offshoot of 18th century French.

Obviously, but so do the people in France.
Ah sorry. That's a Dutchism, 'film' here is moving.
With all the respect for their achievements, their film is far from classic Polaroid.
Imagine how much better off we would be as a society if we paid them the same salaries to pick up trash and clean up our parks and public spaces. But that doesn't jive with our national ethos - authoritarianism.
Whether $10k can sway you says nothing whatsoever about your wisdom. It is one factor in a multitude. Some people will like Vermont enough for other reasons that this is sufficient motivation. Other people will never have thought about it and this offer will make them start to do so. Some of these will fall into the first camp.

Even if your only consideration is your income, tax rates are a very small part of this. If you pay no local taxes but have to hire someone to clear the snow and blowdowns off your road, you're still out that money. If you have no town water or sewer, you have to pay someone to provide and maintain those services. Very few people consider only tax burden when choosing where to live. If that were so, people would be flocking to Kansas instead of San Francisco.

The larger point, though, is that some people will be closer to the decision boundary and $10k will move the boundary far enough to put them over.
But do you agree with their argument? Or just that anyone can use anything for anything?
All these Google platforms have lost my decade-long patronage recently due to inability to find what is needed (google thinks it knows me better than myself) and personal-info-commodification.
https://www.cloudflarestatus.com to see status
I was a full-stack developer 5 years ago. I am not any longer due to the chaos in frontend development technologies, best practices, etc. It was too much for me to keep up with, so I opted out and only do backend stuff now.
I hope Disney wins. The 1998 Copyright Extension is over this year and WELL POSSIBLY we could get things back into public domain again!!!

Can we please figure out how we can have renewable copyright law which cost over $1,000 a year per copyright item. That way Disney can keep Mickey Mouse and 99% of the rest gets released as public domain. If not they are looking to increase the Copyright to 125 years after death.

I pray the reign of terror of Mickey Mouse might be over soon. https://boingboing.net/2018/01/08/sonny-bono-is-dead.html
There are no ethical people only ethical or unethical actions.

When an ordinarily ethical person builds a gun it's still a gun. Once it has been created, the creator give up control. (That's the last stage in the act of creation).
The person who creates a weapon is not the same person who decides to use the weapon.
Smart people know better than to use a terrible weapon, but that's not how we decide who gets to use weapons. The decision goes to those with power not those best suited to make the decision. Power accumulates with people most willing to misuse power.

Therefore smart people have an obligation to not work on weapons. And the more terrible the weapon the stronger the obligation not to create it.

AI targeted drone systems are terrible. Even if there's a human in the loop for now. We cannot advance that branch of weaponry. It will only fuel an arms race and hasten the arrival of a terrible future.
0.0.0.0 might be down for a little bit longer ;)
Nvidia launches colossal HGX-2 cloud server to power HPC and AI
That would break a lot of things. For example you couldn't use a modal on a site that had a facebook like button on it.

Click jacking is generally avoided by the `X-FRAME-OPTIONS` header or the CSP frame-ancestors option.
Confirmed in Silicon Valley, seems to be working now though.
How do they know if you're on the list? I don't see anywhere in the article where it explains how the boots on the ground would know that John Q. Public is a persona non grata.

Does it get flagged when you scan your ticket and then coded into the otherwise meaningless scribble they write on it?
They're also a sponsor of Dynamicland [1], Bret Victor and Alan Kay's attempt to reinvent how humans interact with computers.

(I've been using Notion for the past few weeks and I love it)

[1] https://dynamicland.org/
Gmail and Android can be considered moonshots, completely separate bets from the cash cow search product. They have both been enormously successful and been the starting point for new revenue lines (the whole GSuite for businesses, the Play Store)

Next moonshot which looks extremely promising is Waymo
Seems rather short sighted to trade the entire western sphere of influence for a few steel mills and auto factories.
Think how nice it would be having them all work on trail maintenance in our national parks. Our parks are a national treasure, yet apart from the majors (Yosemite, Yellowstone, etc) most have approximately zero budget for trail maintenance. In the Wallowa-Whitman, for example, last year they had approximately two people covering that entire area. There are so many other places we could deploy federal workers into jobs programs apart from the defense industry and this security theater.
TicketFly compromised
IMO: Outlook on iOS is a better email client than Apple Mail.
How is that?
>"2017-12-06 Fixed with Chrome version 63.0

2018-05-15 Fixed with Firefox Quantum version 60.0"
That's 9 months for Chrome and more than a year for FF Quantum?
In Texas, a new power plant could redefine carbon capture
My desktop is a Ryzen 1700, 8 cores, 16 threads. So I run "make -j16". =D

$ make -j16
make -j16 156,14s user 9,37s system 714% cpu 23,166 total
Scientists find 'friendliness' genes that distinguish dogs from wolves