skysight-inc/HackerNews huggingface dataset:
I may not be caffeinated enough to participate in these threads articulately, but this question made me realize something that hadn't quite clicked before. As I have experienced it, the existing (waterfall?) model for deploying new features and bug fixes in large organizations requires going through QA and security review, where (hopefully) the on site security team has some sort of checklist or guideline for doing whatever analyses they do. But as they move over to agile, continuous integration/delivery, is there still time to deploy a complete staging build and wait? We have been working with small companies for ~2 years now and I haven't rigged up something to test code in at least a year. Mostly I just stare at it until I've figured out if I can exploit it.

This is where large companies might trip and fall, if they expect their existing security analysts/teams to do this (or, as you say, if they try to offload it onto developers or ops people, even ones who are more interested in security). I don't like how this sounds, what I am about to type, but the majority of security people -- particularly the ones at the level where they are hired to run QA-type audits -- do not know how to review code. It really does make me uncomfortable to say this, but if that's the rock, the hard place is how many times I've had to tell someone they really need to learn to code if they want to "work in security."

So when you say, "good security people," what you mean is people who can read and write code, and also have enough experience to know when that code can be used in a way that the original author did not intend to. It's almost as if there's a misconception that being able to read and write code is what you do if you're a dev or devops. This mindset is odd to me in so many ways. It's like saying, "I don't need to know how to use a screwdriver or a hammer because I'm not a carpenter." Even better, someone who understands what it feels like to be under some pressure to roll out changes where there might not have been a lot of time to consider malicious behavior. Someone who has your back.

Just yesterday or the day before, I had this inexplicable crisis where I was concerned about the value I am providing. It's gone now. Thanks!
You didn't read the article.

"09.08.2018 20:10 CEST : a 5000$ bounty is awarded – the server was in a separate VLAN with no users’ specific data."
The bigger news is that they've applied the license to FSP too. Great news for coreboot.

https://mail.coreboot.org/pipermail/coreboot/2018-August/087...
Hopefully they also changed the compromised key.
"Habit" isn't even a strong enough word, as that implies it has a chance of changing. It's more like an outlook/heuristic that was formed in one environment, and now that environment has changed but there's no acceptance/reasoning about that change.
It’s how you really fracture a community, not by pushing an agenda, but pushing conflict. Then when you’re caught thenvery act of being caught sows distrust in the community. Rinse and repeat, and as moderation seeks to crack down the honest people get upset because they are the ones who really suffer, while the trolls just switch to a new identity without any stress. The cycle of conflict, distrust, reaction by moderation, acts to fracture a community.

It’s diabolical, and hard to effectively fight.
AWS does actively send warnings of this nature. https://www.reddit.com/r/aws/comments/6ogmbp/interesting_ema...
Facebook didn't need much moderation until it started allowing strangers to enrage each other through public comments.

My experience on FB is that 100% of the value of the platform comes from parties I choose to engage with (friends, local businesses, groups), and almost all of that value is wiped out by having to see comments from trolls.
> Exercise is only useful for people who are self conscious about their bodies.

This is conjecture.

I have anxiety surrounding public speaking. Exercise helped with baseline anxiety, now I rarely feel like anxiety is a roadblock when I anticipate speaking.
It's unfortunate, because I loved having my wife at home, and hell I'd be happy to stay home.... but it's just financially too risky IMO.

The big catch is insurance in the US... and that really pisses me off that it such a big deal. Also FMLA is kinda wonky in the us. I worked for a company based in CA... CA employees got paid on FMLA, I (being outside of CA) did not :P
Services should be communicating through public interfaces, not databases. Otherwise you're confusing implementation details with public interfaces and change becomes really hard and risky.

I can see this being useful in some legacy system that you have to maintain that is not changing anymore, but otherwise I don't see a good use for it for properly designed and new projects.
Part of the problem is Facebook doesn’t want anyone to have a negative experience because those people disconnect, at least temporarily.

I can go on Facebook, praise Hitler, and get likes. I think that skews peoples’ perception of what’s acceptable and what’s not. Maybe Facebook needs a way to give negative feedback.

It’s such a hard problem though. The quantity over quality friend groups everyone has now makes it difficult to trust others. When I was growing up, if one of my good friends disagreed with me it was a good indication I needed to reevaluate my opinion. I think that’s been lost.
It would only be a lot of weight if you use steel. Remember the 90s saturns with plastic doors that would just pop back after being dented? The problem is that deformation properties in steel are used to absorb impact as a safety device during collision.
yes, perhaps, and it can be made more so, but the parent post said essentially 'Android is an example of what happens when you choose freedom over stability', and I don't think Android is a good example of that. There's lots of 'different Androids' but most of the problems come down to manufacturers not quality-testing their software and the (perhaps inevitable) use of all of the proprietary bits in the mobile that third parties thus can't fix/optimise.
There's this: https://docs.microsoft.com/en-us/azure/machine-learning/serv...
Woah, I've encountered me 4 years ago online. You sound just like I did.

To past me, I highly recommend audiobooking "Millionaire Fastlane". Do not let the awkward title turn you off. It'll put you in a much more productive mindset than Mr. Mustache.
>but otherwise I don't see a good use for it for properly designed and new projects.

What's your definition of properly designed projects?
It could burn someone and it could get cold.
In the map of motherhood ages for married, college-educated women, there seems to be a band stretching from El Paso, through OK and KY, and ending in West Virginia, where the average age is much lower. It's strongest around the Oklahoma-Arkansas border. Is there a name for this region? It doesn't look like it coincides with any of the "belts" I am familiar with (Bible belt, Rust belt, Black belt, ...)
The hot mess that it the U.S. patent system is just a specific example of a much more general problem: a company benefits financially from a bad law, to the point where they make enough money that they can spend some of it to influence the political system to maintain this bad law and still turn a net profit. This positive feedback loop keeps the bad low in place despite the fact that it only benefits this one company. The Citizen United decision has made this problem that much worse.
future reddit threads
If somebody else is making 100x off of just your work you need to quit yesterday and find somebody to pay you 2x what you are currently making. They will be more than happy to do so as they will still be making a 50x profit on you.

Either that or you have absolutely no clue as to how much value you actually create for your company. Nobody generates 100x profit, not even slaves.
Is a shadowban really necessary?
Amazon is paying to tweet nice things about warehouse working conditions
Agreed, presentations are harder than writing in this respect. Conversely, I think docs are usually more effective than video when it comes technical communication precisely because you can scan them. Generally speaking, it’s just a more flexible mode of communication. Although I’ll add that I do supplement the DevTools tutorials with video versions, because some people prefer to see GUI workflows in action.
A project that adapts easily to changing business requirements and environments.
Lack of memes - I knew I was missing something.
Why not just house the yubikey guts inside the phone enclosure then?
> I found a Sentry service hosted on 199.201.65.36

I do not remember on top of my head now but I think there are few scanning software to find all the running apps on a remote machine. If you are aware then please share
There is a proper mechanism for revising the constitution: constitutional amendment. If you want to be angry at someone for what the constitution says, then be angry at the legislators who have neglected their duty to update it.
Quick, file a patent!
Library Library of Congress
When women get educated in a country, the 'overpopulation threat' becomes a comedic punchline in said country. Every. time.
Introduction to VLSI Systems
In this analogy growing food like GDP is the easy part. A successful harvest aka what people actually care about is harder.

I don't want to sound like I am dumping on China. The US/etc housing boom was a boost to GDP largely due to low interest rates, but because the assets where poorly allocated the long term value creation was well below what the economic activity suggested. Building something is a critical first step, building something useful that's worth the maintenance and replacement costs is vastly more difficult.
If you live in the US, you should seriously consider not having children at all.

Personally, I favor a one child policy should the Medicare for all plan fail to gain traction. Under my one child policy, we will drastically cut social services for all children born after a cutoff year and focus the freed up resources on a first child for any given mother. You're on your own for any child after the first child but I imagine the freed up resources will be enough to cover basic healthcare and education for the first™ child.

I originally thought natural twins would be exempt but I've decided against it. Only one (live birth) child per mother. With infant mortality rate at under eight per thousand, there is also no need for a "second chance" exception.

This is my modest proposal. If the government can't even support this, I dont know what to say other than to say that everyone must stop having children altogether.

Refuse to have any children until the society agrees to pay it's fair share of raising a child.
Ha as the owner of a few drones who has dreamed up a few ideas like this I think the biggest issue is noise. Can’t realistically have one of these flying in an office or social setting without irritating a bunch of people. Would be curious to see what can be done to make drones quieter though.
They also make a next-gen tank that doesn't go under its own power[1], a next-gen fighter that nobody wants[2] and a nuclear-powered missile with a reactor that never starts[3]. Not to mention conventional cars that people are happy to ditch as soon as they save enough money for a used foreign one.

I wouldn't worry if I were Tesla.

[1]https://www.smh.com.au/world/russias-t14-armata-tank-breaks-...

[2]http://www.thedrive.com/the-war-zone/20347/its-no-surprise-i...

[3]https://taskandpurpose.com/russia-lost-nuclear-cruise-missil...
Same. It's sad to me that my kid won't have the same experience growing up that I did.
Actually it's not. The patent claims really are specifically about delivering coffee (well, about delivering a beverage containing a stimulant). And not just that, it's about delivering it to sleepy people, where sleepiness is determined by an algorithm. It's completely nuts.
Ah, if that's the case, this thread makes more sense. Thanks!
Using ML to Speed Up ML Training Data Creation
Recently married and thinking about kids soon. One of use would love to stay home. However, the risk of putting all earning power in one person seems too great, and neither of us have a deep interest in paying for childcare. So no kids for now.
Bitmain starts collecting KYC
When I received my S9 last year it arrived via UPS without an invoice. Now I'm glad I ordered it when I did.
Cars are designed to buckle around the occupants in order to absorb as much of the crash energy as possible resulting in more saved lives. Older cars, the ones people remember being built like tanks, were designed[0] to save the car, not the occupant.

[0] If not intentional, it's the way it ended up.
> Exercise is only useful for people who are self conscious about their bodies.

Not true according to some studies. Exercise has been shown to have physiological benefits beyond addressing issues about how things look.

I'm no less self conscious about my body in terms of looks now I'm not fat compared to when I was nearly (perhaps actually) obese - I didn't care then and I don't care now, and where I have problems with people I've never thought it was my looks that put them off.

While I don't suffer from social anxiety specifically (I have it, but in "normal" amounts except where cause by the issue I'm about to mention) but I find the symptoms of bi-polar disorder less apparent (or more apparent less often) since improving my physical health and sometimes when they do rear their ugly heads "going for a run" or similar can help.

> Exercising won't solve ... anxiety due to stammering or have scar on your face.

I don't think the last poster was referring to anxiety resulting from such causes (though they were not clear on the matter).

> Exercising won't solve stage fright

If you specifically mean stage fright due to normally stressful situations (work presentations, actually being on a stage, ...) then no, though generally feeling better about yourself can help more generalised social anxiety.
No, to be precise a "capital gain" is a specific type of income that a dividend is not.

Short term capital gain income is taxed as ordinary income. Long term capital gain income is taxed at a favorable rate called the "long-term capital gain (tax) rate."

You have the rates for qualified and ordinary dividends backwards. Qualified dividends the ones that get taxed at the same lower rate as capital gains income (i.e., they "qualify" for preferential tax treatment).
Most people who get fertility treatments are struggling to have one child, or at most a second - which is still below replacement rate. Fertility treatments for people who waited too long to have kids isn't going to contribute to overpopulation.

In fact, if anything, by making it more viable to wait to have children until later in life, and thus increasing the age of first reproduction relative to lifespan (i.e. slowing the reproductive cycle), fertility treatments could contribute to a slowing of population growth.
I used OData in a past life. From what I've seen GraphQL is more capable/tunable. OData feels a bit more constrained to relational models/particular ORMs, and GraphQL is more flexible to homogenize data from multiple sources.

I've seen some very bad OData performance issues, and generally wouldn't recommend its use outside of intranet/enterprise/non-public projects these days. GraphQL seems at first glance worse, but the ability to name queries alone provides a lot of tuning power (making profiling easier, and allowing for the potential to performance tune individual query patterns) and most of the good GraphQL engines provide at least some basic cost estimation systems to quota high cost queries, whereas the cost estimation of OData operators is trickier.

Though really a lot of it comes down to productivity needs. There's still cases where everything is on a single SQL server and Breeze against a simple OData endpoint on the SQL schema is, well, a breeze, for a simple client app. But I'm growing increasingly convinced that GraphQL is better in the long run, and I think a key need right now is much better server-side .NET GraphQL libraries that work well with EF, and have some of the profiling and cost estimation tools you see over in Apollo Engine and the like.
In a world inwhich the gap between reading a book and watching tv is the difference between mindless and exhausting your options are pretty limited.

Maybe weight lifting / other fitness related activity? If nothing else you should sleep well if you're getting physical activity in.
>marketing

you mean patent troll
My country is full of Russian machinery equipment (lathes etc.), as a result of clearing trade during the cold war. Not as precise as the Western stuff at the time, but usable. And, well, we've got em' by the ton..
The fact that the machine has a hostname "*.thefacebook.com" doesn't imply that it also runs software of the "Facebook" social media software. So not sure how much impact this exploit would have had.
"I still live cheap enough to be self-sufficient on less than $12K a month "

Yea, well, I am so thrifty that my car costs less than a 2 million USD.
I really enjoyed your blog! Please keep writing.
https://news.ycombinator.com/item?id=17822676
Interesting you would call Taiwan developing world, it is one of the most developed countries in the world--21st out of 188 according to the UN.

Source: http://focustaiwan.tw/news/asoc/201409180039.aspx

As others have said you are actually describing class and cultural differences which don't depend on country. I moved from the Midwest to LA and am still in shock and awe at the displays of wealth here. I grew up with a much more frugal mindset and in a place with much more modest homes. Keep in mind even in the US, the fraction of people living in Bel-Aire mansions, or anything even close to that wealth, is very, very small.

Also, I suspect that there are plenty of very wealthy people and luxurious residences in Taiwan that would be equally jarring to you. My point is it's not the country, it's class and culture.
Pretty sure it's impossible.

You're assuming there is a global maxima in line with the local maxima. I personally don't believe its the case. Moderation practices across one group will not make sense to another, but when you try to moderate each group individually, said groups will point out inconsistencies between moderation in each group.

For example a user with 2 accounts

Group A is moderated for doing x

Group B is not moderated for doing x

Therefor the user believes the system is unfair, and will point that out to others spreading the idea of unfairness in the moderation system.
Perhaps it was noctilucent clouds? See e.g https://en.m.wikipedia.org/wiki/File:SpaceX_Noctilucent_Clou...
About 50% of Russia's exports are oil-based, but they also export a significant amount materials from mining and logging, as well as food and refined chemicals.

See the Exports chart here: https://atlas.media.mit.edu/en/profile/country/rus/
T-Mobile was hit by a data breach affecting around 2M customers
I don't think anyone will ever know how much impact, but it implies that Facebook is not good at security.
Honest comparisons on just about any online course will be impossible to come by. Anyone who does comparisons like this will usually embed affiliate codes with any links to courses they provide - these reviewers are incentivized to get you to buy any course, and they don't really care which.
I haven't been to work in 2 years...
Good luck! You taking in any tiny amounts of seed funding? (10K or less?)
Likewise here too. How do people exchange contacts here?
Especially with the rise of austerity welfare, some states want to prevent single mothers from receiving benefits if they are sexually active. It's incredibly intrusive.
Good point, but can't we have both? I.e., bumper deforms, but then takes back its original shape after impact is over?

Or save car if speed <5mph and save occupant if speed >=5mph?
The 15% LTCG bracket is so wide, especially prior to NIIT (the 3.8% extra for high earners), that you could be forgiven for assuming everyone paid 15% on LTCG income!
This is why you (looking at frameworks) should never use a format that may contain code to store data, especially when the client has control over that data (even if signed). The same vulnerability has occurred in almost every language/framework that does this, including Rails and Java-based ones. Just use something like JSON, which completely avoids code execution vulnerabilities like this. Except of course for the early JavaScript JSON parsers that just used eval for parsing...
"System 100 can utilize monetary or digital currency bids, but can also enable the trading of coffee drinks." -pg.13
This is exactly why we need to invent a device that allows us to travel, or "slide", between alternate universes.
Baby belt?
> Generally divorce produces a disproportionate benefit (relative to other parties) to women

No one benefits from divorce unless abuse is involved. Even then, the only benefit is being removed from a dangerous situation.
I can see that argument for a new country, but the PRC has had ~70 years to shape it's citizens into productive members of society. AKA people retiring year old today where completely educated under communist rule. So, what it has today is an outgrowth of what it was teaching people 60+ years ago down to today. Look at how quickly Japan or Taiwan etc industrialized and the farmers to factory workers to researchers transition can be very quick.

The direct comparison between Nigeria and Japan or Ireland is relevant simply because of how incompetent past Nigerian governments have been.
where do you live? obviously you wouldn't see any russian things in US for many reasons...
>>>>>is it the case that you want to allow your customers to make nominal purchases through the app, and Apple say these must be processed through in-app payments?

Yes!!

Customers will not be bypassing the app store, they're bypassing the in-app payment infrastructure. But Apple want to allow only in-app payments.
The Games of Windows
Analysing Player Behaviour in Tomb Raider: Underworld
If Facebook's revenue was not tied to keeping people accessing the service enough to see ads to prop up the stock price, then they would have more options. Maybe they should consider charging instead of serving ads. But it would likely reduce their overall revenue.
I have bad news for you. No one is good at security.
Except that math background still gets you work in the US. There is a reason why a lot of Russian immigrants that were born in the 60s are directors of departments in the US. You gotta give the USSR its due - it had the best education in the world for a bit.
Plus one for FTFY: recently went through some pains converting shell output with some funky encodings to XML compliant UTF8. FTFY was the simplest and most effective solution I found for getting the desired outcome without mangling anything more than necessary.
It would be awesome if AI could handle the worst cases. From what i've read moderating the worst content taxes humans emotionally pretty heavily. Many have ended up in therapy because of it.
Sure these solutions would work. Institute free universal healthcare paid for through the tax system, spend money on empowering women and helping families with children (including family planning), and make education free up to and including college.

To finance it, tax the rich, dismantle 4/5ths of the US military and stop fueling wars overseas.

But that's called socialism and is (unlike actual treason) treated like it would be high treason by the US political parties; mostly because they are all in the pockets of wealthy donors who would not like this new regime.