skysight-inc/HackerNews huggingface dataset:
How come I've never heard of Ravn?! It looks like this is a company we should hear more often in the news (maybe because it's a defense contractor?)
May as well disable all machine code too, since that is also susceptible.
The nice Touch cabin management system
Fair point; popstate allows you to do pretty much anything when the history entry is for the current domain.

That's not really an issue for this particular attack though, which relies on the reverse scenario: the user remaining on the current domain when they expected to navigate back to the third party search engine.
Or a lawsuit for some reason.
I used to work for LionBridge. They did have quite a few full time positions when Nokia was flourishing, but when things started to go south with Nokia, they put pressure on LionBridge to cut their costs, else lose their business contract. When Microsoft took over Nokia, nothing changed for the better. People who were forced out of their full-time jobs didn't get them back, and the people who had permanent zero hour contracts kept the same deal. This is when I left (because I was only getting a couple of days work a month).

I feel bad for LB because it was Nokia and MS that turned the screws, even though I think they had the funds to support LB's employees. I also have no idea why LB couldn't then get the reason Nokia and MS lost their product support, ie. the Android vendors' business contracts.
You can just lose touch, you know. It happens, and it doesn't make you a bad person.
Waymo's Shanghai Subsidiary Gives Alphabet Another Route Back to China
Imagine of Microsoft had a similar store to Apple in 1995 with the same restrictions on downloading and executing external code. The web itself could have been killed in the cradle on day one.

The fact that you are here typing this reply right now is entirely because of the state of Windows during 98 and XP. It's a balance between security and freedom. You are arguing for the benefit of security while ignoring the effect that freedom has had on the last 30 years of computing.
Who cares what the developer has to pay Apple? Do you care how much the developer pays in rent for his office, or his high speed internet? Maybe the app would be cheaper if the developer pays himself $50/hour rather than $100. All of those costs are part of the app price as well.
If they hadn't been putting out unrealistic hype for years people might give them a bit more slack for a seemingly competently engineered product. They presented themselves as having some revolutionary proprietary technology. In reality almost everything here is off the shelf components being assembled by some unnamed third party manufacturer. The only unique part they make themselves is the "photonic chips" which aren't actually that revolutionary, other people had more or less the same idea and decided the benefits didn't outweigh the problems.
Well fine, and that would be a great point, except that Apple actually doesn't do this. First of all, absolutely anyone can download Xcode today and load any app they want onto their own iPhone - or any iPhone in their possession (assuming they have access to the source code of the apps they want to load). This will completely bypass the App Store.

Second, there's Ad-Hoc distribution. Many enterprise apps are distributed Ad-Hoc and the process does not require App Store review.

There are several reasons why well executed curation can lead to a healthier market for both buyers and sellers: buyers are more trusting, and therefore more likely to buy, and due to the better buyer dispositions, good sellers can make more sales. This creates a positive feedback loop when better sellers gravitate towards curated platforms first.

At the end of the day, plenty of people are still going to buy Android phones because a large majority of buyers buy on price, not on the quality of their platform's app ecosystem or whatever. This argument of not being able to side load apps, despite not being true, is one you'll often run across in people trying to avoid admitting that they really bought based on the price of their device. Hey I mean, it's their money, who am I to say they made a right or wrong decision with it? But just be honest about it.

The app sandbox argument is a better one, because it's actually true. But it's a matter of whether you think app sandboxing is a good or a bad thing.

But find me an Android user who bought a MORE EXPENSIVE phone then an iPhone, and argues for easy-sideloading and no sandboxing, and their arguments about platform quality become a lot more compelling. Problem is, they are few and far between, if they even exist at all.
Has anyone heard of kangaroo home Security?
So I got this remote control looking thing in the mail today, and it's supposed to work as a free security device for my house. Has anyone received something similar? Apparently, everyone in my neighborhood got the same thing…

I've always had doubts about using home security systems, mainly because of the costs and installation hassles, but I got this free item from a company called Kangaroo today. Was wondering if anyone here has actually tried them...
As a consumer, you're paying 30% on every app purchase for that privilege. That's a pretty high tax on all your apps, if you ask me.
Yes but it's also the primary source of a lot of government waste (the same type of waste the conservatives are against).

I think it makes sense to separate local, state, and federal governments, but there's surprisingly little government data sharing between even federal government agencies, even when there's jurisdiction overlap.
The Daily Star is not the sort of thing you'd use to resolve a bet on anything.
I think they mean Linux, not Apple/Windows.
> Every year there are articles about how Burning Man has 'lost' or is 'done'.

Yeah, I wonder what the earliest article about that is. I did a brief search for the decline of Burning Man found a Wired article from 1997[1] (and of course numerous people talking about the decline later, like this blog post from 2004[2]).

It reminds me of all those "I'm 13, is it too late for me to start learning programming/body building/learning the guitar/studying Japanese/etc." type posts. If you don't do something you're interested in because you think its too late, there's a good chance that a decade later you'll be kicking yourself for not having done it.

[1] https://www.wired.com/1997/07/burning-man-burnout/
[2] https://eplaya.burningman.org/viewtopic.php?t=7447
> except with people you personally know, or face to face

so don't talk to strangers, people outside your class and your race. i see that ending well
I used to worry about that a bit when we discussed this a year or two ago, but then I realized that Earth has been broadcasting the fact that it is inhabited to any civilization only slightly more sophisticated than ours (like, literally only by a couple of years) who can see spectroscopy of our atmosphere when we transit in front of the Sun. Earth has been broadcasting that it has free oxygen for nearly two and a half billion years and we have no evidence of any attack.
But even if your a civilian player you might say I am "John" from Att or BT - but that's not your real name and you actually work for the security group.
Robert Smalls
If there are alternatives, people will use them. Starbucks created a whole payment/reward system to avoid credit card fees, for example. If there were cheaper alternatives possible to the app stores, you'd better be sure some developers would use them.
Unfortunately, one of those chopped up pieces being sold will be the user data they have. :(
OpenBSD has never disobeyed an embargo. Argued for them to be reduced, criticized them, but not disobeyed them.
edit - nevermind... forgot what orthogonal means.
I'm going with option #3. Intel sold me a warranted part without these terms. Now they're trying to alter an existing sale after the fact because they need to fix a defect under that warranty. I will do as I please with my property and they can talk to my attorneys.
Does anyone know the best way to disable hyperthreading in OSX? The only thing I found was this: https://www.whatroute.net/cpusetter.html
Thanks! We're working on scaling up to human WGS but it will take time. We do have some ideas on how to reduce the price a ton but it requires more capital than we have currently - so either patience or VC.

So for now we're sticking with bacterial and targeted human as our primary market.
Here's a lot more of the space colony art commissioned by NASA: https://settlement.arc.nasa.gov/70sArtHiRes/70sArt/art.html
I've got twin 3 year olds. Took a while to accept the fact that I have no time to do "things" anymore. And like another commenter, I measure free time in minutes. First time I got 30 minutes to myself (9 months into parenthood) I nearly wept.

I'm at a point now that I'm happy to spend time with them and, after numerous false starts (that were crushed by repeat month long illness moving from person to person, random sleep problems/night terrors lasting weeks, etc) have abandoned all outside aspirations. And I'm ok with that.

I do suspect things will lighten up in time. Perhaps I'll entertain side projects one day in the future.
>When the kids are at daycare

If you can afford daycare
> My favorite response though is still the "This is a duplicate from [random date six months ago]". Oh, so you're purposefully just leaving an XSS live on your corporate SSO? Makes sense!

Ug. I've submitted 2 bugs to Vimeo that gave this exact response. I even followed up a few months later to see if they'd patch it and they responded, "the developers are aware and working on it" ...

Seriously? Leaving 2 XSS bugs open on your website that you run a bug bounty program for?? for a year?

I really wish hackerone would punish this sort of behavior as it's a waste of every hacker's time to find a bug, write a report, only to be told it's a year old known bug so it's not eligible for a bounty.
a bit ignorant in this area, but how is this functionally different than Google Cloud IAP?
Dearth of a Salesman: Auto Dealers Struggle to Recruit, Retain Younger Workers
> In countries with socialized medicine already, how many people are covered by private health insurance and is it paid for by the employer?

> The answers are "lots" and "mostly"

I would appreciate citations for this statement. As it is here, I suspect the 'lots' actually are a wealthier subset of the overall population; indeed, I imagine the subset of employer-paid insurance beneficiaries is smaller in most other countries.

If you'd like to read more about this topic, NEJM has published a series on the healthcare systems of many countries[1].

1. See 'Related Articles' here: https://www.nejm.org/doi/full/10.1056/NEJMp1413937
Big List of Naughty Strings
With the newer AMD processors having as many real cores as they do, does the cost-benefit analysis of HT/SMT change? I read in a comment here a few weeks ago that turning it off on the newer AMD CPUs can yield better performance because of improved cache-coherency on some workloads (My memory of what I read might be totally wrong).
Yeah as a laravel dev, they definitely priced themselves out of the market. There's really no reason to use this... I mean find a good theme like VueA for admin, add in a bunch of custom things you use like logs/etc... create a boilerplate, and re-use it in all your projects, not hard...
I think what you're insinuating is a side effect of the OpenBSD group being open, honest, and congruent to their ethics.
good for you, not everyone is going to be lucky and have it easy, a lot of us suffer.
The difference is that it's a perk, not a necessity. If you get diagnosed with cancer and then subsequently fired, you don't have to remortgage your home (if you have one) in order to pay for your treatment.
reminds me of this:

RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis

https://m.tau.ac.il/~tromer/acoustic/
I'm sorry, but this is such a toxic mentality. Yes any able-body person that wants to can work and take a week off if they wanted to. Most don't, and many can't because of responsibilities such as having kids.
"The number of apps in its Windows Store had dwindled to 13 percent of the 1.1 million offered in 2014, the company said, and it needed less bug testing from Lionbridge, according to a January 2017 memo obtained via a FOIA request."

The number of apps is 1/8th what it used to be. That's significant.
A law firm wouldn't ask an attorney to prove he knows law.

A medical practice wouldn't ask a physician to prove he knows medicine.

You wouldn't put a veteran over-the-road truck driver through a driving test you set up in your parking lot.

By the time someone's senior enough to be a tech lead, they'll have a stream of completed projects and glowing references. Amazing how many people will not consider those but will base everything on a slipshod tech screen. Even if third graders consider themselves qualified to teach the second grade, they're not, because they're third graders. Same with programmers evaluating other programmers.

Treat candidates like they're the scarce commodity they are, and avoid the stupid questions, buy them lunch (offsite!), and you'll instantly outperform 95% of other hiring managers.

Treat them like they're fresh out of clown college and they'll rightly recognize you as a cargo cult hiring manager. The good ones will bow out or ghost immediately, and what that leaves you with is not what you want to hire.

Hiring top talent is hard, but it's 100x as hard when you're stupid.
As others have pointed out there are 50 thousand assumptions being made here, but one of the biggest is why you assume technology can ever be efficient enough for this?

The entire universe is limited to the periodic table. You would need to have a device made entirely out of material that has a half life greater than millions of years, and a battery that can last that long without sunlight. I'm not saying it's impossible because technology is often surprising, but that's a fundamental limitation that so far we know cannot be overcome.

Edit: Even if the robot behaved in a self-sustaining manner, this further assumes a perfect, unobstructed trajectory and asteroids full of essential materials are on the route to earth.
I think (end-user computing) corporations have just become selfish. Even pre-iPhone, phones such as Windows Mobile, Palm Pilot, Symbian, and J2ME all allowed sideloading and didn't mine the users' data (as far as I know). On the desktop, Windows and OS X were both profitable and successful without locking out third-party software or mining all the user's data.

Money can still be made through app stores (exclusivity is not needed - I'm sure the Play Store is still hugely profitable despite sideloading), from hardware sales, from subscription services, from licensing software to OEMs, and more.

What we're seeing is that companies like Google, Amazon, Apple, and Microsoft are not content to make a lot of money while still keeping some respect for the user. They realize that even more money can be made screwing over the user. This really causes harm to society, as a lot of people realize they're being screwed but feel like they have no choice or agency in the matter. In my opinion, this is a good example of why capitalism and the free market are not ultimate goods in themselves but are rather a means to an end, and can certainly be used for evil purposes.
The first argument does not hold for traditional paper ballots. Paper ballots are all already counted for the critical evening news at 8pm, and are all seen by multiple eyes.
This is sarcasm right? Messaging apps are the height of "innovation?"
> For Ponzi units, the cash flows from operations are not sufficient to fulfill either the repayment of principle or the interest due on outstanding debts by their cash flows from operations. Such units can sell assets or borrow. Borrowing to pay interest or selling assets to pay interest (and even dividends) on common stock lowers the equity of a unit, even as it increases liabilities and the prior commitment of future incomes. A unit that Ponzi finances lowers the margin of safety that it offers the holders of its debts.

Hedge units, in contrast:

> Hedge financing units are those which can fulfill all of their contractual payment obligations by their cash flows: the greater the weight of equity financing in the liability structure, the greater the likelihood that the unit is a hedge financing unit. Speculative finance units are units that can meet their payment commitments on "income account" on their liabilities, even as they cannot repay the principle out of income cash flows. Such units need to "roll over" their liabilities: (e.g. issue new debt to meet commitments on maturing debt). Governments with floating debts, corporations with floating issues of commercial paper, and banks are typically hedge units.
> "The event is flawed as hell and always has been"

O HAI HUMANITY
I would absolutely care if a new price materialized out of thin air that then got passed off to me. 30% is a lot. I posit that if a new 30% penalty was instilled tomorrow in just about every piece of software you interacted with, you would both notice and care.

I also care when the 30% applies solely by proxy through me. That is to say, since Apple doesn't allow you to differentiate pricing on the Store (IOW, charge 30% more on the App Store), the developer is forced to have me be a lower-value customer than if I used the product through another means. That means that in the developer's eyes, I am necessarily a less important customer, the same way someone that pays for the basic account is lower priority than someone that pays for the Pro account. This is not true of all the other costs you mentioned, rent and salary aren't dynamically changing customer to customer. By placing a 30% fee on the App Store, Apple is obscuring my importance to the developer.
All-renewable energy in California? Sorry, land-use calculations show otherwise
Yeh but its shit (in the UK) from experience I had a major operation and having Bupa gave me zero benefits.

All it means is you have a" benefit" that is supposedly worth "800 quid) costs you 400 in tax I would rather have had an extra £800 in my pension.

Its interesting my current employer does not do private health for this reason.
No, that's not how it works.

The free one is all you have. The insurance from work covers drugs, massages, eyeglasses and dentistry.
> I think you're right that if FP is a trap at one end of the fallacy, pure OOP exists at the other.

I disagree; what spectrum are those on opposite ends of? Encapsulation, polymorphism, and inheritance are entirely compatible with FP, and immutability is entirely compatible with OOP. Functions and objects are equivalent. Most mainstream OO culture is centred around procedural programming, but it's the procedural parts that oppose a functional style, not the OO parts.
I think in our startup we are at the part where we are making all kinds of mistakes. We are Starting our third year next month however we are still making mistakes.
> Another example of how Medicare for All would help business. Just remove healthcare as an employee benefit entirely.

The problem there is that the existing Medicare system is predicated on paying less for the same things than private insurance and then letting high private insurance premiums subsidize the Medicare system. Which obviously doesn't work when everyone is on Medicare, so the cost per Medicare patient would go up at the same time as you're adding hundreds of millions of people to it.

So the Medicare tax would have to increase dramatically, but the Medicare tax is pretty regressive. Meanwhile a lot of companies would then get away with discontinuing their private insurance coverage without increasing employee compensation by the same amount. So you're basically talking about a huge transfer of wealth from the middle class to corporations.

We should probably look into some other method of dismantling the employer-provided healthcare system. Maybe something that involves primarily catastrophic coverage as a baseline.
When I first learned about music theory, it surprised me how common this is. I liked the idea of scales that made certain intervals sound nice in terms of simple fractions, and wrote a computer program to search for them. I found an interesting scale and posted it to the music stackexchange: https://imgur.com/a/iBwxC4T

It caused a long discussion between the people there, and I learned a lot, but my post was eventually deleted. Somebody posted a follow-up question trying to figure out what the terms were really supposed to mean, but it doesn't seem to me they ever managed to agree: https://music.stackexchange.com/questions/66620
I once had a discussion with someone who does brand auditing for a living, and they said the brand perception of social media in general (and FB specifically) is very similar to the IRS.

Whether FB is evil or not (it's a very rare person who tries to be evil), no one loves them. People only love communities they can wrap their arms around, and past a certain size that isn't possible.

If Snapchat is lucky that'll happen to them one day, too.
While I tend to agree with catastrophically steep penalties, there are perhaps unintended consequences.

It wouldn't be hard for an APT type shop to breach just about any average corporation using an arsenal of private exploits, fuck with their security configuration to make it look like gross incompetence, and exfiltrate the data to some seemingly-amateur front organization that actually leaks it.

End result is you could have foreign actors knocking out their country's competition abroad, using their competitor's laws to do so. Not ideal.

Maybe some determination would have to be made to avoid that, like a judgement rendered on the corporate culture. For example, is it obviously a cesspool of incompetence just in a general sense? Great, burn the company down.

Does the company custom-design their own ARM hardware to at least have a fighting chance vs APT-type threats? Maybe they did everything they reasonably could in that case. You could also argue smaller companies did everything they could even if they don't have the resources for that, provided there's not rampant incompetence.
Functional languages often fall into the trap of making hard things easy at the cost of making easy things hard and then no one uses them.
Not in my experience the UK isn't like the European ones where they are dual funded from general taxation and compulsory employer and employee contribs.
This won't cause consequences whatsoever. Police and judiciary enjoy effectively impunity in Germany.

Happens all the time. Just to give another recent example: https://www.welt.de/regionales/hamburg/article180254886/Poli...
Tim Cook, Jamie Dimon Among CEOs Fearing ‘Harm’ from Trump Immigration Policy
That's irrelevant. Their work generates profits which are used to actively undermine my civil rights.
Couple of my favourite performance review processes:

- "do your job" should be one of the goals. I want credit for doing my job, rather than having all my goals be tasks that are slightly outside of my job description

- Include soft skills and technical skills in everybody's review. Technical skills are not very useful if you can't explain why or what you've made.

- If you have to work under broad company goals, make examples of what this concretely relates to. ie "make quality software" becomes "maintained 80% test coverage" or "gave a presentation on TDD" etc.

- cost-of-living raises are given for "average" people. The market for developers is too hot to keep people at their existing salary. The company needs to keep salaries at market level which means increasing salaries for everyone, except the "below expected" people.

- quarterly reviews instead of one annual review, keeps people motivated and less surprises
I would like to see some facts back that up.

Perhaps for the richest quartile, but surely not the poorest quartile...

The point of socialised healthcare is to provide some cover to the otherwise least fortunate in your society.
New book for Christmas!