skysight-inc/HackerNews huggingface dataset:
I hate how this has for some reason been big news the past few days. One mediocre article came out about it, now it keeps getting regurgitated through other news sites. This is nothing new, the US infrastructure has likely been compromised for quite some time. Many of the very critical plants that hold the keys to keeping the lights on, water flowing, water treated, etc are mostly running on systems built pre 2000 that weren't built with security in mind. Many of these systems can not have security integrated with them, and they can not be replaced. The most you can do is cover it with as many blankets as you can (firewalls, extensive logging, behavior analytics, etc). The biggest question is not whether or not these facilities are compromised, it's whether or not a bad actor is going to use it for malicious purpose. It's one thing to shut down a website for the lols, it's another thing to overload a nuclear reactor and contaminate an entire chunk of the US.

Notice how the article is based entirely on "what ifs".
>> "They got to the point where they could have thrown switches"
>> "where they could have caused blackouts"

At this point it is a waiting game. Who is going to be the fellow to push the enter key on their keyboard that then causes a 7 digit number of people to go without power, clean water, or even be exposed to radiation? It's understandable that countries feud and people just don't like each other, but actually shutting down key infrastructure like these scenarios suggest is an end game move that establishes the point of no return in global conflict.
The whole point of the bot is that people didn't realize they were posting this information publicly.
> From this point of view, I guess you should make an exception and treat tech debt complaints more seriously when it is coming from the devs who wrote the original code.

Oh, that is quite an interesting idea. If the author themselves acknowledges there is a problem—there should be a real problem.
Also it's not limited to people in their twenties, who are the only ones I've seen using Venmo. In any case, Venmo will be gone soon enough, it's already bought by PayPal and I can't see them maintaining two parallel systems.
Why? Because they still "work" in NY State but live elsewhere? I mean, for me, it was simple as pie--in 1997, I moved the hell out, brought all my shit in UHaul down to North Carolina, filled out an income tax form the following year, and then I was fucking done with NY State forever. Granted I wasn't still trying to earn income there. I changed all my bank accounts and everything.

I love Upstate NY geographically, but I hate the government there with a passion. Bunch of idiots. I also hate NYC for imposing its will on the rest of the people in that state.
YouTube page load is 5x slower in Firefox and Edge than in Chrome
A few years ago when I was on jury duty, the primary business underway in the "County Justice Complex" seemed to be poor folks making payments on their jail stays. A real issue for some of them was making payments quickly enough to avoid additional jail stays, with the additional penury inherent in missing more work and having to pay more jail fees. This is in Missouri, a state more famed for its many injustices than Ohio is. We'd be safer and happier if we fired 75% of our LEOs tomorrow.
You can still hack the U2F software in the browser and steal the key. If an attacker is local, the game is over. The only thing the button does is limit how many opportunities the attacker has.

Almost all practical attacks are against a key stored on a server somewhere, a key in flight on the network, or a lack of security in the client. If we properly secure these aspects of access, we don't need a whole lot of extra layers, which are only workarounds for the actual root problems.
"...AWS RDS Sevice. It offers t2.micro for free during the first 12 months. It is fine for development. However, I will not recommend using it in production."

I think maybe they were talking specifically about not using the t2.micro instance size in production.
> many devs, don't [...] have the wherewithal to deal with SSL.

Those devs need to be shamed and taught a lesson.

>many train operators don't [...] have the wherewithal to read the safety manual

>many police officers don't [...] have the wherewithal to attend gun safety classes

>many senators don't [...] have the wherewithal to listen to their constituents
I can recommend another site a just used yesterday for finding all the broken (http://) image references is https://www.whynopadlock.com

The site I was debugging was a WordPress site that had somehow gotten the images in its opening carousel set to http:// despite the fact that the "header" module had a default of https://. Very useful to just feed it the URL and notice these were the broken images; I could have grep'd through a "show source" page, but whynopadlock.com made it easy for me to identify that it was the header module of a site for which I had little familiarity.
Well yeah. If company A improves their margins and can sell for a lower price, then company B has to either improve their margins, differentiate somehow or stop selling the product. That's how the market is supposed to work, which ends up in a better consumer price.

If companies A and B agree to sell at X price, the consumer loses since there is market stagnation.

If company A sells under cost, then they are effectively losing money. I believe this is also penalized, but it's still not sustainable long-term, very risky and with no direct (but indirect) negative effect on the consumer.

Note: IMHO the Amazon Kindle main point is not about being sold under cost, it is about being sold as a loss leader, which is quite different.
I find this perspective interesting and I think this discussion needs to be taken further as I think it is unclear on both sides what the final expectations are to be upon completion of class/grade.

that being said, I am concerned that some parents expect that teachers are also doing the 'parenting' side of things which may be unrealistic. I think that in most public schools (the one I went to) some parenting needs to be executed by teachers otherwise a small handful of kids could derail any teaching getting done in the first place.
You might be suprised.
? https://www.example.com/ It's had HTTPS since at least 2014. [0]

[0] https://crt.sh/?id=5857507
removing danger is not the primary goal lol. better to die a lion than live as a sheep.
I used Shoeboxed [1] for about a year several years back. Really loved their service and they have great tech (they were pulling a remarkable amount of data out of most receipts, even years ago when I last used the service). I haven't convinced myself that I need the service enough to budget for rejoining it, but every so often I'm reminded of how useful it was as a service and debate it.

[1] https://www.shoeboxed.com/
I doubt they’ve been monitoring and archiving this from day one.
The article doesn't make it seem like his distaste was irrational, so I doubt he'd leave easy money on the table if an opportunity is spotted.
Put it in Treasury Bills (ticker BIL for example). Safe as cash if you believe the US government isn't going bankrupt. 1% yield at the moment.
I feel like this rich people paranoia can be summed up as an old adage: the more you have, the more you are afraid to lose it.
Yeah, that is probably a few first months of a start-up (or even first year).
OSes aside, the only good thing Intel can do is to throw ME out of the window. This monster MUST die!
Just one of these doesn't include a US company (surprise, surprise).

CNN is not the only news outlets that won't question that obvious and peculiar pattern, perhaps it has something to do with their CEO (like most media CEOs) asking regulators to go after Google/Facebook: https://variety.com/2018/digital/news/cnn-jeff-zucker-google...
YouTube page load is 5x slower in Firefox and Edge than in Chrome because YouTube's Polymer redesign relies on the deprecated Shadow DOM v0 API only implemented in Chrome

You can restore YouTube's faster pre-Polymer design with this Firefox extension: https://addons.mozilla.org/firefox/addon/youtube-classic
The microsoft ones? Where they werent allowed to package their media player with windows?

Isnt itunes/apple significantly worse in the freedom to choose your software?
Any references to papers describing this technique?
> So it decided to make electric buses a thing. How? By dumping a giant pile of money on the problem, subsidizing the purchase of more than 350,000 BEBs in the following four years.

So, it's a typical state-financed infrastructure project.

Good thing if it pans out. If not — :shrug.jpg:

The problem with big governmental actions (especially of an authoritarian government) is that when they are good, they are mighty good; when they are bad, they are mighty bad. The same government that mass-buys electric buses also continues to build the Great Firewall and total surveillance. To my mind, they do both things for the same reason: for the good of the country, as they perceive it, and because they can.
You'll have a long wait - I think he projected 2045.
Hey, I did a PhD in the University of Liverpool some 12 years ago. I had a scolarship from my home country, but had a blast in my 3.6 years in the UK.

I remember seeing colleagues from the UK who got a good stipend. I think in general in the UK doing a PHD was good at that time, specially because it usually lasts only 3 years.

Nevertheless, after spending other 4 years in academia, I turned to Industry and would never go back. Academia is broken at this point in time.
Portable Cloud Programming with Go Cloud
AndroidX development moving to AOSP
Back when I lived with a roommate, he paid the rent and I paid him half. I always wrote out the check for 'sexual favors."
We had been running a traditional design shop for more than 10 years. We launched draftss.com - design on subscription model around 3 months back. Here is an outlook for our first month: http://draftss.com/blog/index.php/2018/06/18/zero-to-3325-mr...
Hard to give a one size fits all answer, it depends on your project. But some examples:

- speed of delivery (not so much hitting a public deadline as shipping it as fast as you thought you could internally)

- quality of final product (were there delighters that didn't get built because they were too hard)

- number of follow up bug fixes shipped shortly after the main project ships (did we ship a bunch of bugs and not realise until users found them)

- number of new users acquired from shipping the feature
This is not just bad. It is also unfair.
I wouldn't say second to none as Oracle's Enterprise sales force are better, and likely much better rewarded.

However if you combine the whole package, from sales, product, after sales services, etc. Microsoft is so far ahead of AWS, and Google doesn't know anything about human interaction / Sales.
I think LG is korean, but yeah this is the protectionism that Europe seems to cling to for the last 2 thousand years.

No wonder the place has become a tourist trap while industries are in Asia, Africa, and the Americas.
I take a picture of my receipts and email them to a specific email, my accountant then make sure it's valid (etc.) and then process it in their software. Really not that expensive and it's one of those things that I'd rather do the moment I receive a receipt to avoid stacking them. Also, it's one of those things that I really want to delegate to a professional so I'm happy to pay for that service.
Right. "No one would help me protect my bunker out of respect, trust. Let's put electric collars on all the guards and horde the food source."
> This is nothing new, the US infrastructure has likely been compromised for quite some time

Just because something isn't new doesn't mean it can't be news.

"The well is poisoned!"

"Bob noticed that last week. Why are you still talking about this?

"..."

It's being discussed now. Better late than never.
I’m not sure it does the exact thing you’re talking about and I don’t think it’s enabled by default, AND it’s computationally a beast of an operation to do with large libraries, but thumbnails while seeking are supported: https://support.plex.tv/articles/202197528-video-preview-thu...
> For instance they will insist that code that was just written fresh by a colleague is "tech debt" because they would personally have written it differently, when there are no meaningful differences between the two approaches.

> They can claim that a design they don't understand the reasons for immediately (regardless of whether it's documented) is tech debt.

> They can claim any feature they don't personally want to do or which is perceived as hard work will create tech debt. And so on.

Yeah, those things are not technical debt. But that doesn't mean that technical debt is a real issue. Technical debt isn't about whether you like or understand a particular approach, it's about whether the codebase as a whole is still maintainable, whether the bugs make sense and are fixable, whether new features can be added without stabilising the whole code base.

It's never the new feature that's the problem. If the new feature can't be added in a good way, it's the old codebase that has unhandled technical debt.
>but honestly what would you actually think of him

I would hire him as my full time lawyer in a heartbeat, but that's just me.
I will help with homework. Proofread a paper, point out clumsy sentences or poor reasoning. Suggest ways to improve a project. Help work through a math problem or proof, to the extent I can. Demonstrate that the answers can often be found by simply reading the textbook or other study materials. For one of my kids I even employed a math tutor when he was struggling.

But actually do homework for them? No.
LiveChat Review
especially when they've just lost their bedroom door and been told they're on a urine testing regime
With how US geography is, it would be impossible in most communities to build schools such that kids can easily go there by themselves. Even in cities of >250,000 people, it's common for there to be no sidewalks, and possibly not even any proper crosswalks, such that it's very difficult to get around without driving a car.

In denser cities, though, you do tend to see neighborhood schools instead of larger, more centralized schools.
Yes, but there are two facts that will short circuit privacy.

1. By the very nature, blockchain is public. If the wallet can verify a transaction goes from one user to another, it's not private. You can obscure all you want, but you from the way I understand it, if the system can verify itself then nothing is private.

2. Blockchains are centralized in that there is once source of information. Our current payments system is more decentralized in that Bank #1 -> Mastercard -> Stripe -> Bank #2 -> Bank #3. There are multiple parties that need to work together, and theoretically have different information collection requirements. If you need to trace money from Bank #1 to Bank #3, in theory you need multiple warrants.

Privacy requires some form of black box and trust in that black box. I'm not sure how you can remove that black box without reducing the privacy.
Who Requires the Accounting Support the Most?
Almost all? You've had access to some pretty crappy captive portals.

In my experience most portals' firewalls block all traffic (at IP level) except ports 80 and 443, which are transparently redirected to their auth server. Tunnelling isn't an option because you just can't contact anything else.

And it's not like I'm describing something that's hard to do. You've been able to script this stuff in iptables forever.
Most probably created in China, used on the West then dumped in the sea...
Well there isn't. Unfortunately, that would not be "business friendly".
Modern society has been heavily trained to walk on eggshells around big corporations and that isn't changing any time soon.
Autonomic Computing Will Happen Much Sooner Than You Expect – StackSense
Check out Neal Stephenson's fine novel SEVENEVES for a vision of what happens at The Event.

Yeah, and the final few minutes of Kubrick's Dr. Strangelove.

These plutocrats are indulging themselves in a fantasy about their inherent superiority.
Do you have a link for that? I have an Android phone, but I received a call marked as spam yesterday. I'd love to be able to just block those.
Maybe next they'll will write a cpu microcode updater for UEFI? Just trying to give useful ideas.
It's been requested before and it's on the list of features to implement but I haven't gotten around to it yet. The work is actually saved as a home-made vector graphic type format so it would "only" be a matter of translation :).

In the meantime, if you do some work, then zoom in, then hit save, you'll end up with a much larger render :).

So yes-way, it's just a matter of time & feature priority and this one is a little on the niche side; although it did just get +1 vote :)
Why would they? Windows is still the most dominant OS on the market (e.g. on pc's / laptops)..
First live musical session between Earth and ISS
A Look at Android ML Kit – The Machine Learning SDK
In the EU you can't force someone to sell at a specific price, you can only recommend a price. Also you can't dump price and those are two separate things.
> You can't be charged with crimes they can't prove.

This burden of proof does not apply for parole violations, or civil asset forfeiture as mentioned in the OP.
Parents who understand what “tracking” is. If you aren’t, you’re setting your child up for failure.
I agree that if companies A and B both AGREED to sell at X price, that is collusion, and leads to the formation of an oligopoly. That kind of cartel behavior should be stamped out.

However, unless I'm missing it in the article, I don't think that's what happened here? Asus wasn't colluding with other laptop makers to inflate what you buy for a laptop.

Regarding below cost selling not being sustainable long-term, I think that's debatable. Amazon lost money on every "super saver" free shipping item it sold a decade ago. But, eventually it was able to negotiate better and better rates with UPS and FedEx.

In the book market, their free shipping and low prices have led to them being the overwhelming big fish for books in the US. And, after they've gained market share, they're able to raise prices on books (https://www.businessinsider.com/amazon-accused-of-raising-pr...).
Would it be cheaper for those companies to walk away from european market?
Apple didn't/doesn't have a monopoly. Anti-trust rules are meant to encourage competition/restrain monopolists in order to help consumers (as stronger competition = win for consumers).

You can argue whether or not that's "fair" for monopolists, just like you can argue that it's not fair that your taxes are redistributed to pay for someone else' kid to go to school or get healthcare, but that is the goal of anti-trust.

But in my humble opinion, nobody should ever cry for a monopolist making billions of dollars a year.
Provides some of the background info on how they made this happen, surprised it hasn't been done before or maybe it has?
You can also buy from HP, Lenovo and Dell. Apple is not fairly unique.
Their "master plan" is for people to rent out their cars through a full-autonomy based ride sharing network.

If they can do it, you're probably looking around $0.25/km end-user price, which is pretty competitive with public transit.
Occam's Razor.
UBeacSec: Privacy and Security Aspects of the Ultrasound Ecosystem
I'm curious. Quotes from the article:

--

“It happens pretty much all the time if there is a strong rainfall or a storm,”

The phenomenon is not confined to the Dominican Republic, he said, and can be seen in many developing nations with a coastline. “Everybody uses the rivers and the beaches as dump sites.”
--

So we're being told that ocean's plastic garbage patch is somehow made out of the contents of landfills around the globe (and western countries) making it into the ocean with rain water. To anyone who has seen a landfill in real life that looks wildly improbable, except for a very minuscule amount of material.

I feel like developing countries using ocean as a waste dump is much more likely to be the true cause of the garbage patch.
American Communism (2016)
They've fined plenty of EU-based companies as well.

https://www.cnbc.com/2017/06/27/the-largest-fines-dished-out...
> “It’s a pain in the ass,” he continued. “That’s why everyone doesn’t like it. And there’s like a bunch of random strangers, one of who might be a serial killer, OK, great.

This just sounds incredibly entitled and out of touch. People are grateful for public transportation despite it's inperfections because it's much better than not having it at all.
certbot has failed continually on my DO instance. It cannot update my cert on cron. I have to manually update my cert when I remember to do so. In fact, I had forgotten to do this for the last several months, so my site gets to display a nice scary warning for anyone who might venture forth and try https. I've searched how to fix it and nothing comes up. The site is static html and I've considered just removing https.
But that's why this sort of exercise should be universal.

Internet communities are not a model of real life. They're not "technically" public, they are public. If somebody walked up behind you too close you'll know and you'll know whom. There is no such thing on the internet.

So let's not pretend they are similar and instead make people always aware that they are being blasted in public. That way they will not be mistaken, or take the moral hazard of security by obscurity, and instead seek out truly secure solutions.
That can start at the national level if you're in the EU...
I would guess that the social network aspect is what led them to growth hack their way to be the large payment entity they are today.
Well crap, I remembered something much closer.
Most of that garbage is usually from locales which lack a recyling infrastructure as well as a recycling culture. If you read the article they mention locals use beaches and streams as personal dumping grounds. So if by west you mean from the local west indies, you’re right.
Sort of a tangent, but more for personal curiosity what are the major online stores for electronics in Switzerland?
Technically ∞ is an element of the projective real line: R U {∞}. +∞ and -∞ are distinct elements in the extended real number system: R U {-∞, +∞}.
I just write "legal things"
Andy or Yev: what do you do with the working drives that are pulled to be replaced due to density reasons? Recycled?
I have to disagree- the data is out in the public by default (a feature of Venmo). Compiling such data is not abuse and is good for awareness.
Would battery swapping require less infrastructure investment and be much easier to deploy?

I guess detailed calculation using future projection is necessary to make a case for either one. The choice would also depend on local circumstances.
> If someone is price dumping, and I cut off supply to them, are we both in violation of the law?

Probably, yes. Price dumping laws are there to protect other resellers, not the brand image or whatever they were going for here, so the OEM doesn't have any stake in a price dumping case.
As a Lean practitioner, I love the last one:

> number of new users acquired from shipping the feature
You seem to be thinking of trams, while nimos is talking about trolleybuses, which are buses that draw their power from overhead wires [0]. Specifically they're suggesting that a hybrid option with batteries would reduce the need for wires everywhere (just run on battery power), but would still allow the buses to charge while connected to the overhead wire.

[0] https://en.wikipedia.org/wiki/Trolleybus
PUBLIC BY DEFAULT – Venmo Stories of 2017
That's not disrespecting HTTP standard. That's the consequence of using HTTP in place of a proper RPC protocol.