skysight-inc/HackerNews huggingface dataset:
I find that talking to folks in the trenches is incredibly useful. If you’re already at a company that has a security team, or even a small company that has folks that deal with infra/app security and/or incidents, you can learn a boatload directly the practitioners on the line. Even better if there’s a chat room that you can be a fly on the wall in.

When I worked at Mashery (a SaaS API management company) we were the front end for the APIs of hundreds of companies around the world, handling billions of API calls for the likes of Comcast, Best Buy, Starbucks, Macy’s, etc. During my time there, I learned a god awful amount about ops, scaling, amd security, simply by sticking my head in whenever I detected chaos going down.

Some comments mentioned tools like Metasploit, or reading up on the OWASP 10. Yup and yup. Plus, there are other tools to add to your belt that I find indispensable: Charles Proxy (install a MITM to watch web traffic), nmap (discover all the services running on a network)
They generally only get published in any detail once they've been fixed.

Chrome seem to have a bunch of 2018 vulnerabilities that aren't listed here though...
Of course I can’t back this up with any proof, but it might lead to some good content. I have a hard time seeing something like the Marvel Cinematic Universe happening if it wasn’t for Disney being as big as it is. It’s possible that Disney is the only reason Star Wars is back too. If they ever get around to making their own streaming service, having all the Disney properties in one would be amazing. Of course you could argue that these don’t outweigh the downsides of Disney having so much control but I think there some good aspects too it.
The Whole City Is Center
Yeah, I think the title is badly phrased and they just didn't want to write "it sucks". There hardly seems to be any other movie corporation so hellbent on domination (whereas the other studios seem to be happy enough to make money and cuddle with the MPAA...).

There's a personal positive side for me. I used to watch a lot of movies from more genres, but I haven't enjoyed a lot in the last years besides Marvel and Star Wars, so that's all I watched at the cinema as well. Would prefer they didn't dominate the market and act like assholes, but at least I have some movies I like...
That's another problem with the existing pipeline. There are so many slightly different ways of setting them up. They're all similar enough to make tutorials and documentation confusing, but different enough that that it's a problem when you mix them up.

All I want to do is poll an SVN repository for changes on any branch. If there is a change on a branch, I want to check it out, run the build script, and archive the resulting binary on success or send an email on failure.

I spent a few hours trying to figure out how to do it in their Groovy DSLs but I eventually gave up. That was mostly easy with the old Jenkins script jobs (though I had to copy it for each branch), and I find Travis CI to be a bit limited but very straightforward, so I was kinda disappointed.

I'm happy to see they're working in making it easier to use Jenkinsfiles. There's potential there but the UX needs improvement. This might be it.
I would say 18 months from August 5 when they do the stream they will still be unable to beat a professional team playing the full game with no restrictions.

Right now they are so many key parts of the game: Illusions, Summons, Bottle, Courier, and most of the heroes. The 18 they have chosen are all fairly straightforward and make drafting simple. I want to see an AI playing Huskar, IO, and Natures Prophet. Better, I want to see an AI that can draft and ban.
The Odd Literary Paraphernalia of the New York Public Library’s Berg Collection
It's an interesting piece, but it seems like sorts of things people would say when we actually had subcultures.

I often wrack my brain trying to think, what changed...

Was it the Internet sucking a lot of the money out of the music industry?

Was it the aging out of GenX?

Was it the long term structural effects of the GFC, with the shrinking of the middle class and the subsequent capital booms that QE created?

Was it a change in perspective in a generation coming up with a lot of economic and global turmoil happening? (no time for culture, time to get to work, economic security is fragile)

Was it the growth of online dating platforms and social media? (Was all of this just an incredibly complex system of mating calls?)

Was it the death of place? Did these cultures lose their luster when anyone could just read all about them online, consume them, and move on? Or perhaps a sort of centralization and homogenization of culture as a result of trends happening in the digital world (where everybody is reading the same things, thinking the same things, doing the same things, in any city)?

Was it the growth of burning man? A sort of Wal-Mart of subculture.

Was it rising real estate prices and the gentrification of cities globally? (Was this new global interest in urban living driven by the Internet in some way?)

Was it the fetishizing of Internet business? (Why do pop stars have Internet startups now, anyhow?)

...but yes, it is super interesting. American cities these days seem to be full steam ahead away from the weird and into the terrifyingly boring, and they have long been fertile grounds for the germination and growth of subcultures.

Does it really just all come down to $?
not just amazon. here's a piece on using 3 people's different devices and price difference they get: https://www.youtube.com/watch?v=NZVpbwz6kPk

as for amazon price changes, i use the honey plugin, can see the past 120 day price history. surprised by how much it can fluctuate.
US has Fest and Canada has Pouzza Fest.
GRU :) As in, you've been eaten by a grue. I was eaten many times by said grue.
I couldn't find the GPS coordinates for Nixtun-Ch’ich’ listed anywhere, so I went hunting for it around Lake Petén Itzá and found it here: https://www.google.com/maps/place/Lago+Peten+Itza/@16.953099...
There's no standard path in information security, most schools don't offer information security degrees and many extremely successful people in security didn't come from a CS background at all.

Some general recommendations:

- follow smart security people on Twitter, which is the defacto medium for information security discussion

- read publicly disclosed bug bounty reports on Hackerone and Bugcrowd

- read The Tangled Web by Michal Zalewski

- learn to use Burp Suite
I was taking "syntax" to be "ubiquitous syntax". To that end, those don't really pose a big surprise.

Cond might. But really, if I said to prepare a list of test to action pairs, it has the somewhat obvious syntax to execute the first one with a true test.

Pcond is a bit crazier. But you can go a long way without ever touching that one.

Defclass is powerful, though again, you can go a long way without it. And if you are in a codebase using it, it is probably a touch on the ubiquitous side.

Loop is just famous for having a ridiculously powerful language inside it. Much more so than the others, which, quite frankly look like normal function calls most of the time.
Read it in a book by a Spanish doctor. I read it in Danish, but I think the original is called "Duérmete, Niño". It is written by
Eduard Estivill and Sylvia De Béjar from what I can find using Google.

(I think people often misunderstand it so you'll find some people saying he argues that kids should cry it out or something, while the idea is rather to make them feel safe and enjoy bedtime.)
No-bullshit, basics of hacking guide often referenced as preparation material for the OSCP exam.

https://nostarch.com/pentesting

/r/netsec

netsecfocus.com - chat community, super active
Furthermore, they are limiting the reaction time to 200ms, to match good humans (I suspect some pros are actually faster than that) and remove any advantage there. So it doesn't have a meaningful advantage over pros in any mechanical/reaction time sense; it's truly just trying to play the game more intelligently from what I can tell.
What got me in Ireland was the difference between a sausage roll and a breakfast roll. You’d expect them to be roughly the same, but not at all.
I highly recommend pentesterlab.com.
The Web for Pentester course is a great intro for first timers if you read the PDF and play with the VM

When training newbies I will start with this and get them to play around with google-gruyere.appspot.com.

These are only relevant for web app testing, I haven't been able to find a suitable free resource for network testing but for paid resources OSCP is a great practice course if not pretty challenging for first timers
How We Assist in Education in Rural India
Merkel trees have been around since the 70s.
There is no good reason to make a law against free speech, however objectively dumb it may be. But enjoy your collapsing police state.
Generally, these contracts will be made available through a tender process. If the value of the work is less than a certain amount (in my locale it is $65000) then you can circumvent the tender process and sell directly to the government.

In practice, a large IT provider may have been awarded a contract through tender to provide all technical services, and they will then subcontract to other vendors (such as yourself). This can be a good way to circumvent onerous vendor requirements that may be attached to the customers tender process.
Cool service I don't understand why you need a funding round though! It's already well made and importantly well presented and apparently well marketed. It may be a good income generator while you work in parallel.
The wiki [0] explains fairly clearly why traditional macros can't be done, but also why Picolisp can still be as flexible.

The backtick, tilde, and def operators allow you access to the reader, and something akin to macro expansion.

You have the reader accessible, you can rewrite anything. It might just be more verbose.

[0] https://picolisp.com/wiki/?macros
Geeks make it go around yo.
GP-GPU Computing via C#
https://github.com/search?q=DAY_SECONDS%3D86400&type=Code
How could you make the argument that it isnt more confusing to use non-dota2 names?
What a sorry, pathetic, sad government. It's a good thing that

"Chinese economy fails after US, Europe, Japan labels China an 'illegal exporter'"

is also taking place.
If you like watching videos and following along:

Free: https://www.cybrary.it/

Cheap: https://www.pluralsight.com/

The entry level cert in this area is the CEH. It's kind of looked down upon, like a lot of entry level certs are, but studying/working towards that isn't a bad thing.

Books:

- Practical:

The Web Application Hacker's Handbook 2nd Edition - Gives a very good overview and is a good place to start.

The Hacker Playbook 3: Practical Guide To Penetration Testing - #3 just came out. Haven't gone through my copy yet, but I've heard good things.

RTFM - Red Team Field Manual - Nice to have, quick reference guide

BTFM - Blue Team Field Manual - Like the above, but for the good guys ;)

- Covering the bigger picture, if you're curious (geopolitical):

The Hacked World Order: How Nations Fight, Trade, Maneuver, and Manipulate in the Digital Age

The Red Web: The Struggle Between Russia's Digital Dictators and the New Online Revolutionaries

Dark Territory: The Secret History of Cyber War

Cyberspies: The Secret History of Surveillance, Hacking, and Digital Espionage
Sorry, but if a company has such a big trouble with fraud it's absolutely doesn't mean it has any right to destoy someone else business. Especially considering that as you noted criminals usually tend to work on scale and they usually won't bother with registering any kind of legal entity or doing some manual confirmation, phone talk, etc.

And what more important: there is plenty of services that will do lot's of check in advance and ask your passport / card / face photo and such, but they never ever stop your servers or destoy your data unless you do something extremely bad. And if it's come to company account it's even less likely to get in any trougle since most of services take work with companies serious.

Yet Google just like everyone around have extremely easy sign up process that all criminals are happy about, but can blow you in a face at any time. So they first create a problem to make marketing easier and then try to compensate for it by increasing risk of fault for thrir legit customers.
> “We have tried everything we can to advertise and promote Palau in China’s tourism market. We spent more than USD$1 million on promoting Palau annually,” the airline’s statement said.

A big marketing mistake IMO. This is not the first time China has shown their teeth to impose the "One China Policy". Ignore them and hit on emerging markets, like India.
It is a violation of the gdpr to not the user why he was suspended, sharing any data about why with the user, not allowing him to correct the data if they are wrong or not allowing decisions made by algorithms to be appealed for human review. Missing any of those and you might be subject to fines, although this only applies to human customers.
You dont need macros as you have fexpr's which don't evaluate it's arguments. It fits much better into the language, and they are first class. See https://picolisp.com/wiki/?prosandcons

And https://software-lab.de/doc/refM.html#macro for the usage of macros.

More importantly it doesn't need lambda, just lists, and quote quotes all arguments not just the first one. An extremely simple and small lisp-1 interpreter, comparable to the old AutoLISP.
1 year license, no updates, ≤US$5000 revenue and ≤5 devs in the org (not just on the Delphi license, but total) only?

It's like they looked at VS Community license and said “lets do something like that for Delphi, but narrow the licensing enough that there is no real use case.”
What’s the reason you think they are ahead of virgin?
ABC NC prices are reasonable. It's the selection that sucks. I guess you can always order a case on their special order form if it's something you really want, but I've never tried that.

I'm annoyed that even though the warehouse is right here in Raleigh, many of the local stores have crappy selection. I don't even understand why the selection varies between stores, especially within a county, since they are all state run.
Was Al Jolson 'Bamboozled'? (2000)
Where I worked, the insurance companies that had payer agreements with the provider (clinic) had a contract that specifically called out which codes they would pay, and how much they would pay for it. Codes submitted to insurance for payment on claims that were NOT in the contract were denied, and then the ball rests in the providers court to deal with it.
Oh, I didn't know about Pyinstaller actually. I am going to look at it. Thx!
Not a very insightful comment but I really like the way OpenBSD names system calls - both `unveil` and `pledge` are great, descriptive Unix-y names for what these system calls do.
One of my favorite old French punk bands

https://archive.org/details/Les_Asynchrones_Archives
I read it as saying something a little more subtle, which is that there is a lot of uncertainty in a couple of our critical estimates, and given that uncertainty what we see (no other life in the galaxy) is not that surprising. (That is, if you take the mean and multiply, you get misleadingly-high intuition.)

Of course if we do some more experiments and find that in fact the probability of abiogenesis is better approximated by 10^{-3,-2} that would change the expectations dramatically. This happened recently: we now have much better science around the incidence of earth-ish planets in solar systems, and a better understanding of what seems to contribute to good life-favorable (at least as we understand it) conditions on those planets. So this uncertainty can change with good work.

It's just that at this point it's really quite fair (per the authors) to expect that with more research we might equally well discover that P(abiogenesis) < 10^-100, in which case it would be astounding if we weren't alone in the observable universe.

(Good talk slides: http://www.jodrellbank.manchester.ac.uk/media/eps/jodrell-ba...)
Ask HN: Choose ISP in Sunnyvale, CA
Getting tired of the complex billings and first-12 month tricks with Comcast, what good ISP options do people living in Sunnyvale, California have? Say, with ~$70/month budget, can do at least two HD video streaming.
They have been used for almost a 100 years in Russia with great efficiency. Our inability to use phage therapy here is due to terrible incentives created by intellectual “property” laws and regulations that assume standardized treatmentments.
> - learn to use Burp Suite

Burp Suite is an awesome tool for devs as well. The Repeater tool is better for messing with API calls than any of the browser dev tools, imo.

For people finding the proxy setup stuff annoying: install Foxyproxy in Firefox and it makes your life really simple.
Both of you are insisting your own experience is more correct, without any imperical evidence or empathy. Take a moment to step back and realize your perspective isn't the only one.
You work at google; surely you should google how to fax something without a fax machine? Or were you just unwilling to trust those services? (which is understandable, you're sending pretty personal data).

And in general, I find it difficult to buy your "I don't own a fax machine argument". I don't own a photocopier, but that's a small blocker, no?
Lightning Network tutorial: how to set up a node and (hopefully) make money
Too little, too late, I'm afraid.

The only reason I've started with Delphi back in the day (and loved it) was because everything was pirated in Ukraine circa year 2000, so nobody would even care about licensing/price point.
This article says absolutely nothing about why humans lost the penile bone. Ok not exactly true, it intimates that humans (males in particular) copulate for a short period of time so they didn't need it. From which we can infer that human females preferred not to have to spend a tedious amount of time in copulation. :)
Add this to the long list of evidence of ancient contact between Asia and the Americas.
The Tragedy at Tofino, B.C.: Inside the Sinking of Leviathan II
Local one in the Pacific Northwest - Cadee distillery Cascadia
I’d like to invite anyone who thinks Seattle has twice as many parking spots as it needs to come to lunch with me downtown on a weekday. I’ll pay for the food, you pay for the parking. If you can find it, that is.
Wow, it's so good !
yeah. my point was not that bourbon oozes out the pores of the reused barrel.

my point is that if the oak is the same species as that used in bourbon barrels, and if the barrel is charred in a manner similar to a bourbon barrel then the whisky flavor has a greater tendency toward bourbon-like flavor than if sherry or wine barrels or plain, un-charred oak barrels were used.

bourbon barrel availability to scotch producers increased significantly after 1935 when US federal law required single use bourbon barrels, and, more so later in the 20th century when the supply of Spanish sherry barrels dwindled.
It does sort of feel like Jeff Bezos is taking over the world, doesn’t it?
As someone who doesn't like the Marvel movies and is losing interest in Star Wars it feels like the are fewer movies for me to enjoy in the cinema than there was even just a year ago. There were times my wife and I went to the cinema twice on one weekend because there was so much stuff we wanted to see. This year we've watched Isle of Dogs. Before that was Three Billboards Outside Ebbing Missouri which was in December. Last summer we had Dunkirk, Babydriver and shortly after the new Blade Runner. This year everything seems dominated by Marvel and SatWars. Even upcoming movies on IMDb look bleak to me.
Well... the odd thing about humans is we actually can do things about the events here, at least in the beginning of the timeline. Not us, but our descendants formed and molded by us today, just as you and I are the direct descendants of some microscopic organisms, actually a continuous living organism alive since life first sprung on Earth. Things like moving the Earth, moving to other Star Systems and galaxies, and more exotic ideas like engineering the course of the cosmos itself. You and your loved ones are part of that.
Thanks for sharing this. Might be helpful to link to the original Reddit thread [0] or the employee's Twitter [1]:

[0] - https://np.reddit.com/r/valve/comments/8zmp07/former_valve_e...

[1] - https://twitter.com/richgel999

And here's a Pastebin mirror: https://pastebin.com/d199N7eY

(Admittedly I didn't read past the first block compiled by FloydiusMaximus.)
Reminds me more on Perl naming conventions. Take an arbitrary non technical expression, where established names already do exist, but clash with the semantics.

Also the usage of strings for flags and not int bits just let me cry out. This is pure nonsense.
Thanks for giving us a peek at the early development of Android.

It's interesting that Andy was pushing open-source for altruistic reasons, but I'm tempted to think that it happened to also be the best business strategy - despite what the suits thought at the time.

Every business school teaches that IBM made one of the worst business decisions of all time when it licenced the software for its new personal computers from Microsoft. Samsung certainly didn't want to make the same mistake, and an open-source operating system can always be forked so Samsung had a guarantee it wouldn't end up paying the 'Windows tax'.

If Android was closed-source it would have found it much more difficult to get that critical early install base. But with a successful open-source platform it could then develop its closed-source Play service.

To me this one-two punch would make a great business school case study in favour of Android's open/closed-source hybrid approach
Delta airlines, which serviced between Japan and Palau also exited the market. Looks like it's not profitable.
If there are industrial humans then, it wouldn’t be hard to engineer supergreenhouse gases to mitigate that.
On limited input devices as tablets and phones I haven't yet found anything better than Lisping.

https://appadvice.com/app/lisping/512138518

Which appears to no longer be available.
Boson sampling is not universal. On the other hand, it could be used to demonstrate a quantum advantage: https://arxiv.org/abs/1011.3245.
Where I live, government opens a bid, some suppliers join the bid, then the government officials select one of their relatives at random.
Anything emotional overriding reason could be called a bug. But it turns out that all reasoning is just a thin coat of colour on the tip of a flawed nn statistics iceberg drifting on the current of fabricated and real memories into the shipping streets of our life's. Be slow and review what one did like it was done by a stranger to perceive bias bugs.
(1)download the zip
(2)go to the downloads folder
(3)tap/click the file
(4) choose to open with pilbox
IMHO - I think the one thing wrong about that piece is that subcultures are dead. I think they're still around, its just the ones I was in tune with are gone (maybe to be reborn without me).

Looked at a different way, the author is writing a cautionary prediction to anyone who is involved in a sub-culture > be careful who you admit, else death becomes it.
Fascinating, what gets flagged on HN these days... [0]

[0] https://news.ycombinator.com/item?id=17563345
no, i'd trust them more if they told me they removed the decision point where this mistake was made. i don't want "we'll never make this mistake again" any more than i want "we will try really hard not to make this mistake again".

what i want to hear is "we can't make this mistake again".
This is why they send the Telephone Sanitizers far, far away.
Black American Culture and the Racial Wealth Gap