skysight-inc/HackerNews huggingface dataset:
In Poland the dominant online marketplace is our domestic Allegro.pl. Started off in 1999 as eBay equivalent - mostly individuals selling new and used goods - but in recent years it developed more into direct competition with Amazon, by catering to shops and brands, purchasing and offering its own parcel delivery service (both courier service and pickup machines), and online payment processor. Just recently it even introduced equivalent of Amazon Prime.

Unfortunately I have no insights how Allegro managed to stay ahead of the global heavyweights. Probably combination of polish language UI and catering to specific needs of local market.

Currently while both eBay and Amazon have sizeable presence in Poland, the Allegro.pl is still the go-to place, and seems to be able to hold its own pretty well, up to and including expansion to neighboring CEC countries. Even the Amazon fulfillment center that opened in my city recently is mostly geared to handle the German market rather than polish.
Previous attacks by this Magecart group did go through third parties:

https://www.riskiq.com/blog/labs/magecart-ticketmaster-breac...

I think the underlying problems are the same either way. In all these attacks the customer loads a page with dozens of scripts from at least a dozen servers and he or she has to trust them all.

Speaking as someone who frequently has to reload the checkout page five or more times while authorising successive waves of third party servers in Request Policy and NoScript - there is no way to tell. Any one could be the source of an attack or the destination for malicious exfiltration.

Should I do a geoip lookup on every sever on a page when shopping on-line? Baways.com looks like a perfectly plausible server for yet another piece of cruft, or analytics, or some baroque chain of payment services providers.

Since the customer has no way of telling we are depending on the suppliers noticing that the website they are serving has changed. Otherwise it's up to the banks to find the common thread in each new wave of fraudulent payments, oops.

The current sorry state of security online can only be fixed by the suppliers. I think that doing things properly will necessarily involve more respect for customers and less adtech/ spyware so that payment processes are better separated from everything else on the web </rant>
Right! Same thing with trusting a site just because it has SSL. All it ensures is that you are having a private conversation. You could be having a private conversation with SATAN.
The author here, with a bit of background: As someone who doesn't compulsively clean up their tabs and likes to keep a lot of research lines open, I was really dissatisfied with the native Chrome tab management capabilities. None of the existing extension worked quite how I liked either.
So I brainstormed some ideas and built this out. It worked pretty well for myself and some of my colleagues, so I spent a lot more time polishing it up for a wider audience.

Plenty of more ideas for improvement in the pipeline, but I think it's pretty useful already. Let me know what you think! The demo video explains most of the features pretty well.

Fun bit of trivia as well; the UI is written mainly in elm - which became a real pleasure to work with once I got the hang of it.

Also apologies for the double post - I posted this earlier but didn't get any feedback. I probably did something wrong!
It's not a third party script. It's a copy of modernizr hosted on their own server. Someone has either hacked their CMS (Teamsite) or it's an insider.
There has been an MQTT module for Prosody for ~5 years: https://modules.prosody.im/mod_pubsub_mqtt.html

I'm not aware of anyone using it in production, or asking to - so it's not received a lot of attention. For my own projects I've tended to prefer bridging to XMPP in other ways, but it was fun to work on.

I found a number of things surprising in MQTT, for example the lack of errors in response to commands (such as publishing), with the only solution to be just closing the connection entirely.
Is it their failure you believe they should be jailed for or something else?

Do you believe that the CEO of any company that fails should be jailed or just banks?

There was undoubtedly plenty of hubris, greed and incompetence to go round. I also believe that some of what occurred should, in hindsight, have been illegal. But having some sort of sacrifice to appease the gods is a little outdated.

Oh, and yes, all the CEOs were replaceable. Irreplaceability is a very silly argument.
Honestly, can we just stop writing java-script. Even better remove java-script from webpages. Oh wait that boat sailed a while ago.

That aside I don't see what's the problem is with cross compiling to an other language. Other than if your writing a compiler why not compile to machine code. Honestly, I think code generators are better than macros.
You are referring to an extended validation certificate I presume? A regular certificate you can get in a few minutes with a credit card and an email validation unless things have changed in the last two years.
There's also this video linked in the Wikipedia article, showing a man performing some common tasks – https://www.youtube.com/watch?v=2_ChitAgshk
> You see, they knew this process sucked - any reasonable person with half an idea about security did - but the internal security team alone telling management this was not cool wasn't enough to drive change. Negative media coverage, however, is something management actually listens to.

I could not agree more with this statement.
you don't need to check someone's face against the entire
passport database, only against the passports which have
been checked into the flight

Even simpler than that, some UK airports have 'epassport gates' * [1] where you present your passport on a scanner and your face is photographed at the same time, so it only needs to compare your face against your passport.

Sadly the gates are still slow and unreliable, even at that seemingly simple task.

* Admittedly for immigration rather than boarding
[1] https://en.wikipedia.org/wiki/EPassport_gates
Actually, funny you should ask that. Lately, I have been hearing advertisements on podcasts about the Department of Homeland Security offering such services. They're not offering this as a free service, though. Taxes only pay their salaries. You wouldn't expect that to be sufficient
D1 was created by Walter Bright, but D2 was primarily created by both Walter Bright and Andrei Alexandrescu.
>>> Economics, for all its show of being empirical is really just politics, and politics is really just philosophy.
>>> Are you willing to?

You're painfully right. I 100% agree. There lies the issue. I have the philosophy right, but the opportunity and skills to fight for it, well, it's much tougher. If only one could contribute to that like on open source projects ('cos there, I contribute, I find time and energy)

But I'm not guilty :-)
Maybe this helps you next time: https://downforeveryoneorjustme.com/github.com
Irrespective of language and framework, if the code needs to be aware of underlying hardware then it is systems programming. ex. kernel code, user-space drivers, databases, portions of cloud or server code which need to be hardware aware, etc. What golang targets, I think, should be more of middleware or service-level programming, whether its containers or servers.
I have never used macros.
Is it really that much productive and readable?
Versus proper compiler features (async, =>, type system) + a proper code design.
Even if you subscribe to the idea that there weren't correct laws in place to ensure that those who should have been criminally responsible, you then have to contend with the the corollary. Which is that instead of prosecuting those responsible, legislation should have been brought forward so that this couldn't happen legally in the future. That didn't even begin to happen- and it's not difficult to see how that has fundamentally poisoned the well in the US.
It was no mistake, but it is now.
I'm pretty uneducated on the subject, but I wonder if we could have quantum computers that exist on a spectrum with standard digital computers, such as by having transistors, logic gates, memory cells all in superpositions. Maybe there could be a fuzzy dividing line between quantum and classical computers.
UIDAI’s Aadhaar Software Hacked, ID Database Compromised, Experts Confirm
What crime did each of those executives commit? That’s what needs to be answered. Otherwise your comment reads like a mob chanting “We want blood!”

Being greedy is not a crime. Taking advantage of lax regulations is not a crime. Being bailed out with tax dollars for risks that paid you off privately if they won is not a crime.
BiwaScheme (is a Scheme interpreter written in JavaScript)
What would all those executives go to prison for?
Every time one of these articles come up I wonder about the price per tonne of CO2 removed by simply growing wood and not burning it. I'm not really sure what that price is, but it seems to be around $20-$40 per tonne? Does anyone have a more accurate number?
> Finance isn't "revolutionary" tech - there isn't much you can do that requires high risks and actually rewards you in the long run.

I don't think you read the article because it is based on a 700 page book about how it was revolutionary tech. It was just revolutionary finance tech. There was no ABCP before, there were no CDOs before, there were no central bank swaps before, there was no wholesale funding market, there were no offshore dollar banking market, etc.

It is hard to take seriously any arguments that the bankers were incompetent when you look at the sheer number of affected institutions -- you're left defending a claim that virtually every banker and most companies (look at the impacts on, say, Russian resource companies when they could no longer roll their dollar debt in wholesale funding markets in 2008) are incompetent. And that's always going to be difficult argument to make.
I live in Switzerland, which is also without local Amazon, and previously lived in the UK, where I was an enthusiastic Prime early-adopter.

Honestly, it's bloody frustrating, and I'd love it if Amazon opened a significant local presence with prime delivery options. What I miss is the combination quick cheap delivery, and easy access to a wide enough range of items such that rarer things --often those related to hobbies, or rarer cooking products, for example-- are easily available.

The alternatives are frustrating, often-fruitless hunts through local shops; independent Swiss e-tailers with high prices and usually very high delivery costs; or international mail order with the attendant delays and customs issues this route brings.

Don't get me wrong: I'm not totally pro-Amazon, and I wish that they would improve their labour practises... but losing the sheer convenience it brings? In some ways, it's like going back in time.
Transforming video content into another video's style, automatically
> legislation should have been brought forward so that this couldn't happen legally in the future

What couldn't happen legally?
good point. will make it a gif! :D
His theories are still being researched, even though they are outside the mainstream: https://en.wikipedia.org/wiki/Heim_theory
http://heim-theory.com/
http://www.hpcc-space.de/publications/documents/ExtendedHeim...
How's that modified modernizerjs script ended up in there? I mean, it must have been included directly from the BA website? I also wonder how can BA be so sure about the dates this was stealing payment data, since this was apparently a frontend attack. Maybe they somehow know when that js script had been modified?
While a generally fascinating piece that connects together the events in the American and European financial and political systems, it shouldn't be understated how much of an effect the refugee crisis is having on European politics, which can be attributed largely to the "Arab Spring"; itself largely a consequence of the 2008 financial crisis.
Windows 2000 and NT source leaked through a source code availability program: https://en.wikipedia.org/wiki/Windows_Interface_Source_Envir... . If that could happen then absolutely governments would have it.

The iOS kernel is based on Darwin which in macOS form is an open source project. It’s usually a bit out of date, but is available for download.
Microsoft shares it's code with quite a few companies and governments:

https://www.microsoft.com/en-us/sharedsource/default.aspx

https://www.zdnet.com/article/microsoft-opens-source-code-to...

A lot of Microsoft's code has also been leaked:

https://www.theregister.co.uk/AMP/2017/06/23/windows_10_leak...

I don't know what the situation is with iOS. How much is in common with Darwin?
EPIC: Efficient Private Image Classification (2017)
spot 1 on front page: https://news.ycombinator.com/item?id=17957406
User Interviews: Guide to an Insightful UX Interview
What I can't get my head around is how they managed to add their code to the .js file.

Correct me if I'm wrong, but the file was hosted by BA within their CMS, yet the attackers were able to update this file to include their 22 lines of code.

Does this mean the attackers had access to the CMS for BA.com or is there a step I am missing or has been deliberately omitted?
Video streaming and gaming have some soft realtime guarantees, yeah, though generally these aren't systems programming and application programming instead.

The plumbing below, ie graphics rendering pipeline, tend to fall into the category of kernel systems programming, controlling the GPU is pretty close to doing what a kernel does IMO.
There's many parallels to the Netherlands: people sometimes use Amazon.de, we have our own digital payments system (iDeal), and our own local competitors (Bol.com the traditional big one, and a more recent new entry Coolblue.nl which has also gained a significant foothold).

That said, when I recently wanted to order something online to be sent to Sweden, I was surprised to find that Adlibris indeed only sold books, whereas Bol.com is really more similar to Amazon: it historically started with just books, now has a far wider selection, and does next-day and sometimes same-day delivery.

I guess the lesson is that this "glimpse" of a world without Amazon is really just a glimpse of one of many possible worlds without Amazon.
If they are moving away from us faster than speed of light because of expansion of space - wouldn't it mean at some point no new light from them reaches us? Even ignoring the limitation of equipment?
Should a Manager Be a Servant?
Didn't know about the Prosody module. However, MQTT in ejabberd is at the core level, not module, so it is able to access all the performance and scalability features used by XMPP - and in that sense, ejabberd MQTT is production-ready.

I think the surprising behaviours of MQTT are its strength - it's minimal and perfect for low-energy devices. For heavy lifting, there's XMPP.
Also take a look at the Boom Hierarchy [1], which came from the same era (Bird-Meertens formalism, etc.). It describes relationships between data structures constructed from 4 algebraic properties: unit, commutative, associative and idempotent. The resulting 16 possibilities include the familiar set, bag, list and tree, but also other less useful combinations, such as non-empty mobile.

[1] http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.49....
Also impressive the total ejected volume, 120 km3.

How about CO2 emissions, if anybody's wondering? In [1] I got an estimation of the Pinatubo CO2 emissions, at about 50 MT of CO2. Since Pinatubo ejected a total volume of 10km3 [2], it would follow that Hatebe released about 0.6 GT of C02 in the air. For comparison we put abotut 30 GT of CO2 in the air each year.

[1] https://www.forbes.com/sites/startswithabang/2017/06/06/how-...

[2] https://en.wikipedia.org/wiki/Mount_Pinatubo
> Honestly, can we just stop writing java-script. Even better remove java-script from webpages.
> Other than if your writing a compiler why not compile to machine code

This is essentially the idea with WebAssembly. But, for web applications you need security and platform independence, so it's not actual machine code.
Normal in the context of how our society is structured, but far from ideal or unavoidable.

For instance, I can compare the experience of my cousin raising two young kids on the east coast of the US with my girlfriend's sister in the same situation in Italy.

In my cousin's case, she had to go back to work almost immediately in order to pay the high rents where she lives, and money's a constant stress because of the price of a decent daycare/preschool. Family's far away, so essentially all the childcare responsibilities fall on her and her husband.

In contrast, my girlfriend's sister had 9 months of paid maternity leave with which she could stay home with the baby without undue financial stress. When she returned to work part time, she didn't have to rely on commercial childcare because her large extended family is close by to share the burden. In general that makes her and her husband's life more relaxed, because if they want to go away for the odd weekend they can leave the kids with grandma.

If you ask me, the work culture is deeply pathological in places like the US and UK. With the rise in technology and automation there's no reason we couldn't live in societies which prioritize our human needs more highly.
Chrome's NOSCRIPT Intervention
At the very least the WS power structure should have been redistributed. Prior to the crisis there were eight major WS "banks." After there were seven. We were told by many elected officials that less was not a positive for the rest of us. Ten years later, after eight years of a "liberal" POTUS, there's still seven.

Editorial: In the context of such history, DJT is the least of my worries.
Which method do you propose instead for people to run interactive applications?
The bailouts are controversial, but it's the bailouts AND the complete absence of criminal responsibility that's inexcusable.

It is well known and documented that the financial crisis was no accident; everybody who headed the financial services industry to the state it was in did so knowingly, knowing full well the inevitable consequences, but not giving a damn because the arrangement let them to become handsomely wealthy, beyond our imagination. They masked everything with a mixture of stacking the regulators with their ilk, stacking the universities with their ilk (economics as a field has zero credibility to me since I discovered how many theses "greenlighting" CDOs were written in clear conflict of interest), stacking the government with their ilk.

Then while we (working class) were dealing with the fallout, tithing part of our work to reimburse their losses, not ONE of those criminals (with the blood of millions across the globe on their hands, make no mistake) was prosecuted or in any way made to answer for their actions. Much to the contrary, they went on enjoying the same mind-boggling luxurious elite lifestyle they always did.

It's feudalism with extra steps.
This is beautiful. Thanks for posting.

Can I ask a question? I'm not sure I have the words to ask it, but my best attempt is: inside the colors it is speckled; what are the speckles?

For instance, #36 is described as a mix of Berlin Blue and Carmine Red. But if I look closely, that I can see, none of the speckles are reddish. Are they greys?

Obviously I'm looking to reproduce for my own stuff. I'd be glad for any pointers.
It's obviously constant. Duh!
How to Recover Deleted SMS/Text Messages from Android
Sounds like a good idea for an OSS IntelliJ plugin actually.
I use the TOR browser to spoof my location. Hard to target specific countries sometimes but works pretty good for sanity checks.
>But remember, I have to live in the system.

That's generally the problem is that people can only ever see a solution that mirrors our society as is which means voting for the same politicians talking about the same neo-liberal capitalist economy, people need to be a bit braver ideologically if they don't want the wealth gap to increase and when the time for peaceful solutions has passed. We see the rise of the far right, it's slow but there's no denying those people are there in significant numbers and won't go away by calling them all sorts. It would be easy for me as a generally liberal middle-class white man to say everything is fine now but there are some issues which are still prevalent that can't be ignored.
I wish more people realized the concrete thing is snake oil.

When you make cement, you heat up natural CaCO3 -> CaO + CO2. The heat itself also requires combustion, so more CO2.

Some cements have perhaps 10% CaCO3 added to their mix. It’s not so much desirable as cheap filler.

What the media fails to realize is pumping CO2 into curing cement reverses the CaO reaction. In other words, every CO2 molecule you capture releases 2 or more. You’d be better off using less CaO and more CaCO3 to begin with.
Why Elon Musk's brain is different to yours
You're welcome! How did you notice?
A23D: a 3D-printed letterpress font
> Being greedy is not a crime. Taking advantage of lax regulations is not a crime. Being bailed out with tax dollars for risks that paid you off privately if they won is not a crime.

Maybe that's your point, but therein lies the problem. Doing all these things has an upside but no downside, therefore we're encouraging antisocial behaviour.
If your life is poor, you don't have much left to lose
Yes it is

And the attackers knew how to use SSL as opposed to some 3DS/VBV "partners" I've seen in the wild

Excepted for the botched GDPR "agreement" box
> Is it really that much productive and readable?

It can be. Used judiciously, they can reduce boilerplate and help highlight the important parts of the codebase.

The problem is that they're catnip to a certain type of developer. If they're allowed to proliferate in an uncontrolled way, you can easily end up with unmaintainable code.

Worst case, you'll end up with someone implementing a half-arsed type system at which point you may as well delete the repository (ok, slight exaggeration).

I can't really comment on whether or not JS would be a better language with a good macro system. My guess is probably not but I have no evidence for that.
The companies didn't just "fail", which implies accident or even incompetence but not malice. What happened was that the elite of the financial services industry arranged a nice little cash cow for themselves, enabling them personally to live lavish lifestyles, knowing perfectly well the consequences in the end (which, for them, due to their complicity with the regulators and governments, were none).
That rewards packages that you know you're using, rather than the ones you're actually relying on.
I'd be interested. It'd be good to have a focussing project.
> Never seen a fob or smartcard that has memory which is written with every individual transaction.

Actually every SIM card does this. At least when used by a phone to join a mobile network, a SIM writes some timestamp or counter to persistent internal memory. This caused a funny case of SIM cards with very limited lifetime for a German provider (I think it was Congstar), who had a problem in its network that caused frequent authentications of handsets, thereby having them chew through the write cycles of their SIM cards way faster than projected for normal use. The cards became "dead" afterwards.

If I remember correctly, all chip enabled payment cards also have a transaction counter that is updated on every successful transaction.
And is this situation any different from location logs based on mobile phone? It's obviously easier to leave s phone than a face at home, my point is that we have already pretty much agreed to be tracked most of the time.
> Maybe a better question would be what is the most backwards compatible way to fix the IP space problem with ipv4?

It's political rather than technical: de-allocate the various Class B (/16) ranges that were distributed like candies in the past and that aren't actually used or are used only to a minuscule extent.

Routing will still be problematic though.