skysight-inc/HackerNews huggingface dataset:
Not necessarily a security vulnerability per se, but I was able to fill up the AWS account with CloudWatch log groups by doing the following:

1. "env | grep AWS"
2. Export those creds locally where you have the CLI installed. They'll work for at least 15-30 minutes depending on the IAM config.
3. Run "aws sts get-caller-identity" to see the role info.

This prints:

123260633446	arn:aws:sts::123260633446:assumed-role/lambda_basic_execution/exec

Which seems to imply it has the default Lambda basic execution policy. That policy has the permission "logs:CreateLogGroup" which means you can then run:

aws logs create-log-group --log-group-name <random name>

Repeat x5000 and hit the AWS limit for log groups in an account. This isn't necessarily a security risk in and of itself, but it could cause issues if anything else were running in the account that needs logs, or could prevent new services from spinning up.
Some A/B testing maybe told them that no reviews create higher engagement.

They probably decrease long time customer satisfaction and drive them to other platforms, but hey, who cares, you can't measure that.
While true, I’ll admit to chuckling a bit.
First written in Perl?
I was presenting at a conference, the CIO came to me after the presentation and we chatted about her company. She ended up offering a great position.

Funny that I have never heard of this huge company (and uber cool), some of the great ones are just not visible to outsiders.

10 years later I still love it.
For example in one story Sherlock deduces that the person sending a ransom note is an educated man attempting to appear stupid, because although the note is grammatically incorrect the newspaper the letters are cut out from was The Times. And only educated men read The Times.

Except....what if that's just coincidence? I mean The Times costs the same amount at a news stand as any paper right? So what if the kidnapper, who is so barely literate he doesn't read any daily paper at all, went to a news stand to buy something to cut the letters from and happened to pick The Times?
I think as a non-medical term "blood" is potentially broad enough to cover both hemo- and myo-globin. It's not like when our ancestors in ancient antiquity used the word they had any clue about what the underlying biology, they only know what they saw and experienced.
" I have to believe that the political vegetarians haven’t thought it through."

Most farm animals don't live on green pastures but get their food from the big monocultures you are writing about. It would be much more efficient to eat the plants straight instead of feeding them to animals to get their meat.

Either you haven't thought your points through or the facts you are working with are wrong.
I did that until I hit the Linux directory name length limit, lol. Now I hash the hyperparameters dict to get the directory name, and store a json file within. Totally ad hoc and I'm sure a better solution exists.
Ask HN: Potential Startup Internship?
Hi all,
Lucky enough to intern at a big tech this summer and going into my junior year. Instead of returning, I am considering changing it up and looking for a small(er) startup experience for next summer. What should I look for / What should I keep in mind?
>If you get a radio license and setup a web site that allows people to broadcast their own death threats over your radio station, that’s your fault.

Exactly. You are the control operator.
Documentaries are an awful way to learn facts. By their nature, they're going to push interesting and provacative narratives over the truth.
In the UK pedestrians have right of way.

If one deliberately jumps out on you it's obviously the pedestrians fault if you hit them. However if someone is already crossing the road you slow down and let them cross, it takes a few seconds out of a journey and you only need to break gently or just back off the accelerator.

Australia seems a different attitude. Crossing the road, they'll point the car straight at you and accelerate for being on the road, even if there's a queue of traffic a few meters ahead they are not going to get through.
Investigating Earth’s earliest life
This may be the most beautiful "middlebrow dismissal" in HN history.
This was a constructive comment that didn't deserve to be downvoted.

I'm not totally fond of the current state of Apple's products, but I do agree that I'm seeing signs that they're gradually backing away from the abyss of awfulness. They've got a ways to go, and I'm sure they'll lose people along the way, but I'm hopeful that the next big laptop design they launch will show some lessons learned.

I've been following Apple since the early 90s, and, well.. they've recovered from worse problems than this so many times I've lost count — and yes, even before Jobs came back, and even after he died. Things will get better, new things will get worse.

It's a shame that people feel like venting by pounding on that downvote button, alas.
I mean, is your career finished? Reading this, I wondered if there were any other clusters that would have been the glory years, but later on the person’s accomplishments were so much better it completely eclipses their past glory.

It seems the researchers concentrated on creative careers. Wonder if it is applicable to more corporate standardized careers and how would they would measure it. The title implies careers in general, but I don’t find what the article says to support the careers in general.

Would also warn against using this as self fulling prophecy.
100% agree. Came here to say exactly this. Great content which would a great blog or medium post rather than a real-time 280character stream.
I don't see how that's relevant. The mere fact that some people deny that 911 happened doesn't mean 911 didn't happen.
“We assume the base version at $35,000 would lose about $5,900 per car.“

https://markets.businessinsider.com/news/stocks/tesla-model-...

Is this UBS analysis more reliable than the one indicating a 30% margin for the base model?
Yeah, he's dead.
I wonder how much of it is having one breakout hit drives more attention towards their later ones and helps them have better resources (budget, staff, equipment, etc).

Works that might have ignored or simply missed earlier now get more attention.

And works that might have failed due to lack of resources now have a better shot.
Firefox fork 'Pale Moon' releases v28, first major version since 2016
That's too cynical. The truth is usually pleasant.
It'd basically be a skyscraper, and those certainly move in wind.
> Given how poorly people multitask, I'm surprised things like devops aren't over-filled so that failures that need responding to don't affect schedules.

In my experience, most management is unfamiliar with things like scheduling theory. That they'd fail to overfill some areas to cover peak demand is not surprising to me.

An idle worker is an evil thing to most management minds, they don't understand that 100% activated workers means you have no capacity to handle surplus work. And every "stop the world" event to cover a new fire (started by management's bad judgement) means that the fires will continue.
What wifi card is needed?
My current job at Amazon: Took two online coding tests, didn't talk to a single person and got an offer a couple days after the second test. Efficient.
Fair enough.

Consider me a bit incredulous of that argument.

I guess, as a man of color I'm hesitant to create some sort of ranking system as to "who's getting whipped harder" as a metric when it comes to racial discrimination of all its permutations.
The faith part is hard. When I've managed to be lucid flying is a skill that is hard to master. I get a lot of big hops but can't seem to actually fly.
A nerd mom's lesson to her toddler on how to take the stairs: Scoot down the stairs on your butt, little one. It's easier and safer at your size.

And this is why I found him at the bottom of the stairwell eyeing the fascinating cornfield next door the day he got tall enough to open the front door, instead of in a bloody heap with a cracked skull on the first landing.
I don't know, judging by my SSH logs it seems a lot of the automated malicious login attempts are looking for common software used to deploy code. Knowing that a target machine has a username used by some popular software might be valuable information in an attack.

But on the subject of passwords, best practice for SSH for a long time has been to disable password based login entirely and rely on keys.
If there are good reasons why one ethnicity would prefer housing over another (or, equivalently, if the housing provider would prefer them) then it's just like the beauty products thing and discrimination in advertising should be allowed. And if there aren't then it's hardly worth the time to ban it-- anyone who engaged in it would be wasting their time.

So although it seems unclear whether that conditional is met, either way I don't see why we would ban such advertising.
Is there anything here for emacs users? ;) This is really an interesting thread.
I suppose if you are beholden to oversimplifications, sure.
https://servicehq.ca Built this over about 2-3 months with the help from a Beta customer satisfying their requirements slowly, but still ensuring that the platform is generic and modular enough.

It’s now averaging about $1000/month with 2 customers. I’m now planning to slowly rebuild the mobile app (need to improve UX and add offline functionality). Once ready, I can start selling to more customers, Also thinking of adding a few integrations with tools like Google Drive, Office 365 & Slack to improve market visibility.

Our stack is Ruby/Rails/React/React Native.
> Dogs got closer to humans thousands of years ago. Their role was to protect. In the process, they became less intelligent than their ancestors: The wolf.

I don't think it's fair to say wolves are smarter than dogs. They specialize at different things, that's for sure.

In general I disagree with your post.

If you imagine a dog living in a stone age village versus a dog living in a town today, it doesn't seem to follow that the latter is going to be smarter because human technology is more advanced. A stone age dog might recognize a knock on the hut of a door and the modern dog might recognize an alarm going off. Seems like the same thing to me.

If you want smart dogs the answer is eugenics. Breed the smartest ones. This is tried and true and it's how breeds like border collies or german shepherds got so smart: they were bred for obedience, intelligence, and ability to perform their jobs. More pets and fewer working dogs (which is definitely the trend) is going to result in friendlier, cuter, but less intelligent dogs (compared to working breeds anyway).
If it was, it was mostly accidental. The argument was derived from logic and reasoning, rather than e.g. family beliefs.
Firing a bad hire can be just as or more expensive than hiring them in the first place.

I agree with your overall points- especially with regard to respecting your candidates time. You do need to verify that the relevant information they provide is correct however. You wouldn't make a significant investment in finances, buying a car, marrying someone, or go into business with someone if you didn't trust that you have a decent understanding of what you're getting into.

Then again, if you do, it's a lesson you'll learn rather quickly. Respect yes, blind trust no.
Facebook goes after Trump’s attack dog (Alex Jones); Trump’s department goes after Facebook.
I don't think it's controversial to presume that most people understand blood to be the opaque, dark red, viscous liquid that is pumped through the circulatory system.

That fluid is very different from the thin, watery, red-tinged, translucent liquid that might be found in muscle tissue.
I dunno. As weird as this format is, I'd prefer this to the typical article these days with autoplay video, janky slideshows, ads moving the content around, a pop-up begging you to subscribe to a newsletter, Outbrain/Taboola ads showing cracked toenails and butt implants, etc etc.
Do You Test Airflow Code? Now, You Can
Moved to Saigon from the Bay Area about 2 years ago. Was unemployed at the time (I mostly do tech consulting) and sitting in the newly opened cafe in my apartment building. A guy sits down next to me and is reading a book about bitcoin. He just moved into the building a couple days before. We start talking and he tells me he is mining, invites me to come help install the next shipment arriving that weekend. I go with him to the data center located about an hour outside Saigon, which turns out to be in a super secure Vietnamese military telco building and install 150 new machines. Had a blast doing the install and I got a job offer to become CTO to help run the operation. 8 months later, the whole operation moves to Canada and I'm out of a job again (long story). Telling the story to a friend of mine, he offers me a job working for another large crypto company that he recently joined, to do an even larger mining operation. So here I am... working on that now.

Needless to say, I'm a huge believer in serendipity.
It's extremely statistically significant, given any reasonable prior.

Don't take my word for it, here's a couple lines of R code.

# vector of prior probabilities, natural choice is proportion of men
prop.men <- seq(0, 1, length.out=100)

# compute prob of observation (30/30) given prior probability
pvals <- dbinom(x=30, size=30, prob=prop.men)

plot(prop.men,
log10(pvals),
type="l", col="blue", lwd=2,
ylab="log10 pval for 30/30 offenders being men",
xlab="Baseline male percentage in science"
)
abline(h=log10(0.05), col="red", lwd=2, lty=2) # "significance" line
text(x=0.6, y=-30, lab="Below red line\nsignificant at α=0.05")

# since prob vector is 100 long, indices of entries returned here
# correspond to % men needed for this to have α > 0.05
which(pvals>0.05)

The actual figure for completeness: https://imgur.com/a/E47AfSW

Of course this is a bit back-of-the-envelope done in 5 minutes, but you get the point.
If Facebook makes money on it they have the funds to stop it.

No slippery slope. This shit is illegal and has been for decades . Just because it happens on the internet doesn't make it any less illegal.
Twitter DM in response to an engineering manager that tweeted ≈'we're hiring!'. Talking to the eng manager directly, rather than going through a typical recruiting channel, made the whole process a lot smoother I think
I wonder about the distinctions legally given machine based tools and context insensitivity and what separates identical results.

If one had a list of proxies for every ethnicity and individually assigned all but one would it qualify as legal targeting or illegal discrimination?

Would this format derived from US ethnicity census be legal:
[x] White
[] Black or African American
[x] American Indian or Alaska Native
[x] Asian or Native Hawaiian or Other Pacific Islander

but a query of 'exclude "Black or African American"' be considered illegal even if they both map to an abbreviated form of hexadecimal B? Although it could be argued that by making the discriminators have to work harder to figure out how to exercise bigotry in advertising is a reasonable baseline.

The spirit of the law is clear but I wonder about the mechanics of it for avoiding all of the gross loopholes and technicalities and enforceability. Just advertising home listings in 'Farmer's Weekly' (for sake of example assuming it has an overwhelmingly white subscriber base) for selling an exurban house wouldn't prove discriminatory intent and short of memos giving racist directives to the marketing department being released.
“Docker for .net developers”
“Docker for .net developers” @satish1v https://medium.com/@satish1v/docker-for-net-developers-e73961b24e9d
پاورپویننت جزوه درس تاسیسات الکتریکی و پروژه
Best headline in HN history
Actually, the stuff found in muscle is called either interstitial fluid or lymph. It is exactly the same thing as blood, minus the blood cells. It comes from the blood and is eventually returned back to the blood.
Exactly. And that analysis is of components, so it leaves out the value of ecosystem, software, and Apple’s cpu and SoC design groups, which is bigger than all of the components combined.
Why remove the picture? It's hilarious.
I'm still holding on to my mid 2012 rMBP despite its battery almost nearing its end of life. Was hoping to upgrade this most recent refresh, but the lack of a non-Touchbar option just turned me off.

Thinking of just getting my battery replaced instead, but I'll consider looking at the 2015s
Meltable. Careful.
Ask HN: What is the single most important concept to understand for programming?
Or alternatively - what was the single concept that made you have an "Ah ha!" moment where everything you had read about and learned before fell into place?

I ask because nearly a year ago - I finally had my "Ah ha!" moment. Now, while I always had understood arrays on a basic level, they never truly "clicked" with me and I often found it difficult to read from or manipulate multi-dimensional arrays. One day though - it clicked and everything else fell into place. My efficiency skyrocketed and I went from feeling like a script kiddie to feeling I actually finally understand what's going on.

I'm going to be in charge of training some juniors at the company I work for. I believe good teaching should focus on the things that provide the greatest value for understanding - so I'm crowdsourcing other peoples' epiphanies in hopes of giving my juniors their own. :)
We're not talking about someone singing up for a free account with a burner email and posting on a Facebook group. We're talking about Facebook's ad targeting product from which they make a substantial profit...
If it is an older couple and they sold, presumably at a steep profit, why couldn't they use that for rent?
I'm not going to be much help. I'm not too sure what you would exploit. Trying to escape the amazon api through some kind of VM escape seems pretty hard and I guess would get you a much bigger bounty from amazon. Maybe use the auth keys to access the accounts?
Am I correct in thinking that the box the site is running on is complately different to the one the console is on? Is index.js a clue?

Anyway to more easily see what everyone else is doing run grab_commands() from the browser console.
You used to be able to acquire B12 from crops because some of the natural bacteria flora contained the cyanobacteria that make it. Modern farming's use of industrial pesticides means we can't use that as a source anymore.

The Jain's diet is largely plant-based. It allows for dairy, but only in the case that the cows aren't hurt as part of the process.

http://www.jainfoodie.com/jain-food-restrictions/
I will create a business called "Eat Your Face" by printing a mold of your face and send it over to you. I wonder if that gets $25K a month. Actually, you know what, I will look into this business. I will copy.
I prefer to focus on the problems of the current debt-based economy, where bubbles like that are common and are fueled by debt.
Haha amazingly story
Fraud is a problem, but I worry much more about research done sloppily but in good faith. Spotting errors can be very difficult, so it's best to avoid them altogether if possible. And given how difficult getting retractions was in this case, that's another reason to stop problems early on.

I haven't written too many peer reviews, but I was somewhat harsh in one I wrote because the paper was so bad. Multiple major problems, but I think it ultimately could be redeemed after a lot of work. The editor seems to have rejected the paper, and they sent me the other reviews for a reason unknown to me. I was surprised that none of the other reviewers noticed an error I found to be particularly obvious. Though one of the reviewers did notice a few problems I missed, so perhaps what's obvious to me is not necessarily obvious to others.
So it had nothing to do with Softbant, who also has a stake in Grab, asking Uber to leave. The title implies Grab kicked their ass and its far from what really happened.
I work at a large, well-known Silicon Valley company. I interned at the company while I was in college, but decided to work elsewhere after I graduated. After a few years, one of their recruiters reached out to me via email, went through the normal interview process, and ended up with the job.

Past jobs/internships have been a mixture of applying directly on college job boards, recruiters reaching out through email/LinkedIn, and Hired.
For some reason I doubt that Buster is a dog.
To be fair, input devices are a pretty serious issue here. Probably the single most common operation I do on code is search it. If I can't type what I'm searching for easily, that's pretty annoying.
https://threadreaderapp.com/thread/1030830856720527360.html
Word of mouth.
Microsoft tests quick-deploy underwater datacenter
As someone who finds Python more difficult to work with than Julia, I sincerely hope so.
Imperial units are used because they're generally easier to relate to and use than the metric counterparts- simpler divisors, that sort of thing. It's the same reason we have 24 hours, 60 minutes, 60 seconds.

Even if you don't agree with that statement, it's what people who prefer imperial units will say, not that there's some mass delusion / patriotic identity.
> By the way, if these ads are illegal and conducted through facebook, how easy is it for the FHA to look up who is responsible and go after them.

You say that like there is a clear, deterministic way to audit how Facebook ads are being targeted? I do not think you understand how ad trafficking on Facebook works.

How would the FHA determine that an ad was only being served to white people? Say you see and ad being served and you want to check if it is also being served to a black facebook user. You create a burner account. But now your Facebook feed isn't showing that ad anymore. Is it because of targeting, or is it because Facebook has other ad inventory that they want to show you? What if the inventory of the ad has been exhausted? I could be wrong, but it seems literally impossible to audit Facebook ads without access to Facebook's internals.
They are useful though. If you check a bunch of usernames from a person leak and find matches, you got a password to try.
At the end of the day, even extremely effective policy can't fundamentally undo the economic realities of San Francisco - there is not enough housing to meet demand. You can only do so much for the homeless when you can't actually give them homes or jobs.
The Democrats are a center-right wing party by European standards. Even in SF they put business interests first. You don't see this problem to this extent in major European cities.
ProPublica does some really good investigative reporting. They are the first ones on the scene with high quality reporting on a lot of current issues. I have donated to them in the past.
How to Get Help with File Explorer in Windows 10? Solutions with Some Ways
> For example all the farm owners' houses are on hills or birds

They have their houses on birds? That’s ... amazing!
> The problem is that there are too many scientists chasing too few dollars- something's gotta give

In anything close to an efficient market, what gives is that you end up with fewer scientists.
Capture an idea and own it on the Ethereum blockchain
Would you eat something that you bought from a Spencer's Gifts?
I googled the ingredients. It contains coconut oil, which is thyroid support. If it contains a lot of coconut oil and you don't normally consume such, that might explain it.