skysight-inc/HackerNews huggingface dataset:
> The first is, have we decided that the ends always justify the means? It seems in other domains public shaming is unacceptable. Troy himself despises Donald Trump, but one of the things most heinous about 45 is his use of Twitter to publicly ridicule and shame companies and individuals. And now Troy is engaging in exactly the same behavior. But it's "OK" this time? What is different?

Intent has a lot to do with it, but to me, I see one as part of business. As another comment said, some of these companies carry enough information to ruin our lives. It makes sense to hold their feet to the fire in a public forum when they put security on the back burner.

>The second thing that troubles me is security "best practices" today may not be best practices tomorrow. Some of his example companies are using practices that were "best" 10 years ago. What happens in another 10 years when Troy's current advice is outdated? More pitchforks?

Security is notoriously hard, and anyone who has ever tried to get into the space understand that. But just because it's hard doesn't mean that you get a pass. It is the duty of the business in question to protect customer data. I believe that it is reasonable to expect a company that has my account and personal information to do everything that it can to protect that data.

You said elsewhere that if a breach occurs, a customer only has to dispute a few charges with their bank. You're right. It is much easier for a customer to dispute fraudulent charges. But why do I need to spend my time filling out forms and cooperating with a minor investigation because a business (through negligence or otherwise) lost something that I trusted them with?
This reads more like a blog post to me, given that it would be challenging to embed that YouTube video in a magazine.
You have a very naive view of other people.

You're the one basically imagining our society but with government and "governmental law enforcement" suddenly removed. Everyone will just behave because we don't have police, but for some reason we all have laws we all agree on.

But you coincidentally don't remove "laws", because those are important to keep. But we all enforce the laws because of reasons...

Assuming your opponents are weaker, less intelligent, less organized, or less determined is how you end up with your back against the wall then the time comes.

It doesn't take a group of "thugs", just a group of people with the means and motive to do it. And with nothing stopping them, they will.

Government is the enforcement of the social contract on a large scale. At some point, we agree to follow certain rules in order to ensure others also follow those rules.

It's funny, the people who most clamor for anarchy would be the ones most disadvantaged by it.

And yes, certain communes "work", but they work by extension of being a part of a larger entity that does have a government.

And you can talk all you want about "past societies", but unless you skipped half the words being said, those past societies are necessary stepping stones to what we get today. Those Icelandic villages are small-scale governments. The minute someone isn't allowed to do something, you've lost anarchy, you're building to modern government. Absolute freedom is absolute. There is no "anarchy but don't kill anyone".
Amazon's original strengths to me were fast shipping, low prices, and trustworthy reviews to sort items. I'm not looking forward to what they're turning into as they continue to get away from that old strategy.
Cannabinoids promote neuron growth and have antidepressant-like effects (2005)
The author is a physics professor, not an intern.
From the Man Booker Wikipedia page:

> The winner of the Man Booker Prize is generally assured international renown and success; therefore, the prize is of great significance for the book trade.

Sure, the Sayre quote is pithy and funny, but there does seem to be a lot at stake in choosing the winner here.
University of Pennsylvania Philosophy Stops Requiring the GRE
I think maybe you don't know what a hedge fund is? Because your question doesn't really make any sense?

Anyway, the answer is: hedge funds want to take money for 2 reasons:

1. The bigger the hedge fund, the more famous the manager is. They get to meet Presidents, talk on CNN, get invited to Davos, and other famous people perks. You get to say you "won".
2. The hedge fund charges fees based on the assets under management; the more money you take in, the more money you personally make.
You said it yourself. A SYMBOL of foul and infestation. Where do we get most of our symbols from? Of course it's a cultural thing.
There isn't very much at stake for the jury members.
I have nothing against private charities but see them only as a complement to state-run programs. The social improvement that comes from people having healthcare/education/etc requires that the vast majority of people have it, not some, and not even a simple majority.

I view it somewhat similarly to herd immunity through vaccination. When you have a 95% vaccinated population, diseases can be eliminated. When you have a 50% vaccinated population, it's of course good for those 50%, but doesn't provide the same global benefits.

Is some of the welfare money wasted due to inefficiency? Yes, of course. But for a task of this scale, which has to provide benefits to everyone in the country, I only trust the state with it, and not a private entity.

Can I opt out of the system? No, but freedom isn't a single variable you can straightforwardly optimize for. In this case, I believe the infringement on individual freedom through taxation results in considerably higher total freedom when considering all individuals in the society.
But what kind of machine do you need to raise a hill up and down by a few meters ? Even if breaking the load in small bits, the cost and maintenance of equipment would likely be a few magnitude higher that the energy stored or saved.
I know this sounds crazy, but ... entities cannot secure their relationship with you if they cannot maintain some detail as private. (Until we all have PKI and use it?)
Generic searches this is less of an issue. But see the search for Kellogg Corn Flakes in the article.
We need to wrest back control over the internet
"Borrow content" aint it the truth though.
No, there's a reason password managers should be preferred. For example, sometimes (browser) sandbox escapes grant reading of arbitrary files. Take for example the recently discussed malware scanner the sent the browsing history, it could read such a file and transfer it back.
This was a domain that didn't previously exist, right? Hence this falls just into the general category of phishing domains, rather than anything malicious happening to get a cert issued.
It seems to be about 50/50 nowadays if something that has the Prime stamp takes 2 days or 5 or more. It used to be a nice comfort knowing I could order some supply up to 2 days before it runs out, and I’d have it at my house when I need it.

But now my confidence in the two day shipping is gone, and I often run to a local Walmart to get the same item for the same price, but guaranteed to be at my house that day.

It seems when I get an item through USPS or UPS it’s on time, but a lot of the packages that go through Amazon’s own shipping service (often a large unmarked van that parks in weird spots!) end up delayed an extra day or two.
I really appreciate level-headed moralism like this. Many of our problems today are because we get painted into corners by people making emotional arguments and winning because the other side is unwilling to appear uncaring in the implied false dichotomy.
GSM Phone on a Conference Badge [video]
I would be fine with Master/Clone or Master/Replica. I feel like master is needed to convey the meaning clearly, but slave isn't. Master as in master vinyl record.
Checkout queue optimization at a supermarket is pretty easy. It's all about time per scan. A good cashier (60-70 scans per minute) can be something like 50% more productive due to scan time savings. A slow cashier (10 scans per minute) is a drag.

Self-checkout is all about cutting labor hours, period. It is both slower and leads to much higher shrink (as much as 150% more) than a manned casher. Stores hope to make more money by keeping the store open longer. The hacks around the slowness of checkout without cashiers is for people optimizing for time is online ordering or shopping at midnight.
"They were Facebook ads. That's it."

If you think Russian "election interference" (does that term make you feel better?) was limited to "Facebook ads" you either haven't been paying attention, or are just trolling. I'm going to guess the latter.
> You cannot simply search

Which is one of the reasons why in the modern world (of fast CPUs and large RAM) code should be edited using editors that "understand" the language's syntax.
We had stores even before online stores existed. All you needed is to go there.
It seems a bit telling that you described one as "kernel" systems programming and the other as "system" systems programming.
There's some sort of counter to this I have it enabled but Facebook still prevents me from pasting (sometimes! Pasting deletes the rest of the comment and closes the reply box, super annoying). Some sites still prevent password pasting too -- but I've found you can drag-drop in both situations to work around the restriction.
Those are horrible returns, that is borderline nearly unethical. You would have higher returns and pay less than 1% just putting it in the vanguard 500.
Most of those Troy Hunt examples were submitted to him by non-public people. You could probably just email/tweet him.

smaller scale: http://plaintextoffenders.com/
Pardon me if this sounds naive, but I'm slightly confused as to how recreational marijuana is legal in 9 states but the DEA still heavily controls cannabidiol as if it were still illegal?
This seems like a faulty comparison. Space for registers is naturally limited. A single traditional register is replaced by 3 self-checkouts at my local grocery stores. Usually they opt for 6x self checkout replacing two traditional registers, manned by a single employee who can help with problems. In these cases it's not a question of staffing, but of space and the increase in space efficiency.
Age of the Polyglot
I don't think scientists are excited about criminal charges for possession and distribution.
Hey all, Brett here, founder of Mindstamp / awkward dude in the demo video.

I spent last year building a social video annotation app called Aech that never really caught on, but captured interest from a couple people that wanted the core annotation technology for business.

Mindstamp is the result of those conversations and six months of development work. It lets you enrich your videos with interactive notes (text, audio, video), questions, and personalization in just a few seconds before sharing them with your customers, clients, or teams.

Video is growing rapidly but is still largely a one-way, static asset. Mindstamp aims to change that by providing an interaction level on top for both creator and viewer to exchange ideas and gather feedback. We're just getting started but think there's a lot of room to innovate here.

Built 100% by me with Rails, VueJS, Vuetify, and Heroku ️

I'd love to hear your constructive feedback (please be nice, first real product shipped) and am happy to answer any questions you might have. And yes, I'm going to make a better demo video - it's just a placeholder for now.

Thanks for reading!
For me it's a 20 minute car journey which actually takes an hour each way, and about $10 to park the car for a couple of hours.
Thanks, but I totally understand why it was being downvoted.
I have seen and heard all of that before.

I am fairly convinced, based on the spending attitudes of many people I know, that even if they had extra money, they still would not invest. They would just spend it on a new 4K TV, new car, or a bigger house that they don't need.
Most people seek immediate gratification.
How about the moral hazard of teaching an entire generation of bankers that picking up nickels in front of a steamroller is a great career move with virtually no risk of personal consequences?
I'm guessing you're thinking of their Fargate option. ECS itself is not terribly opaque (at least to my eyes). Fargate's biggest downside is its own cold start times - unlike Lambda, there's no caching to give you warm starts on jobs.

The flip side - so long as its a service and not a job, who cares? :D
If a browser allows websites to read the clipboard, that's a security bug in that browser.
Well, the advertised content seems to have an ad___slot and an AdHolder class so I can probably whip you up something in stylish I guess whenever I get off work (posting as a reminder) .
Different investors have different investment priorities.
At least they will be able to do the studies in Canada in short order.
Not just anarchists, but also agree to follow a certain set of rules or laws that will be enforced by no one.

Even the "ideal" he is putting forth isn't really anarchy. Because anarchy means absolute freedom and the minute you don't allow someone something, freedom isn't absolute. And the minute you get two people living as some sort of unit, you have compromise.

Cooperation is good, systems of cooperation are better. Government is a solution to the problem of individual trust. In a completely anarchistic system, I can't trust you and you can't trust me. Either of us are allowed to break our bond at any time. We need an impartial third party to manage our interactions so that if one of us decides to screw the other, that person is appropriately admonished. Something to govern interactions of citizens, if you will. So whatever system you've set up to govern the interactions of your citizens is de facto a government. Even if you don't explicitly call it that.
Did you ever end up installing the Helium10 extension?
If the math works out so well then why don't elevators and other apparatus that lift things with electric motors use batteries and regenerative braking on the way back down in order to mostly offset the energy cost of operating them?

I'm betting the economics of recovering gravitational potential energy don't really work out in most use cases.
There is no way in hell this is a good thing for US Citizens. First it's good for doing your boarding pass but then it will be used for identifying people on the street, maybe at a protest and then locking them away if they disagree with the political party in power. FML
Probably a dumb question, but doesn't copying & pasting protect against keylogging? The only key events being sent is CTRL+C and CTRL+V (or the mouse equivalent), and not the password keys themselves.

Obviously this is an extremely bad way to "protect" yourself (since you keep your password in plaintext on your PC), but it does protect against keylogging, right?
An add-on/extension I've found useful for combating this behavior on certain financial websites is Don't Fuck With Paste:

https://chrome.google.com/webstore/detail/dont-fuck-with-pas...

https://addons.mozilla.org/en-US/firefox/addon/don-t-fuck-wi...
An electric motor moves it up. An electric regenerating break (an electric generator) keeps it from going down too quickly and/or not at the right time. The particulars of maintenance and long term robustness are pretty straightforward engineering efforts. The largest steam hammers are 125 short tons, and they can operate for decades.

Why would the stresses be any greater than burying a turbine electric generator at the bottom of a hydroelectric dam? The forces would be similar, right? That's the whole point: it's just a crap load of "pressure" due to a bunch of stuff piled up on top.
The bounty was specifically targeting Tor Browser on Tails and/or Windows 10. This vulnerability affects the security settings at high, so the payouts were 185k for cross platform RCE, and 250k for cross platform RCE+LPE.

> We've launched back in December 2017 a specific and time-limited bug bounty for Tor Browser and we've received and acquired, during and after the bounty, many Tor exploits meeting our requirements

If we have to take their words for granted, "many exploits" probably means they have a LPE too.
And when you escalate, you are able to bypass both SOCKS5 and Tails' firewall.
How was transitioning from programming to an actuary?
my dad always phrased it as "Actuaries are people who wanted to be CPAs but failed the personality test"
Six Principles for Law Enforcement Access to Data [pdf]
Can these studies be conducted outside the USA, away from DEA and FDA control?
There's a big push towards the Language Server Protocol type tooling, I think that makes a noticeable difference in supporting personal preferences.
It's not "legal in 9 states", it's not prohibited by 9 states, but still prohibited federally.
This depends on the use-case. We have recently moved away (slightly) from using MODX as our main CMS, because the clients we have picked up need less content management but more bespoke functionality and better performance so have used things like Laravel +Voyager.

They are all managing content, but in different ways
Primary/Secondary is what comes to mind.

But yea, such "political correctness" make people fear and despise words, instead of concepts behind them.
Lucid Scribe – Biofeedback signal recorder to track REM
Federal law and state law are different. Federal law is like a system level policy, while state law is like application level policy. When state law explicitly allows things disallowed by federal law, things get a bit more confusing - local police follow state law, but federal departments like the DEA follow federal law.
> The process eliminates the need for an airline employee to manually check every boarding pass and passport while boarding a plane.

Do they really do that? I mean in most airport? And in Dubai (dxb) you just scan the barcode on your boarding pass and board the plane. No one checks your identity.
ElixirConf 2018: Introducing Scenic a Functional UI Framework [video]
New Py-Spy Python app profiler uses Rust for speed and safety – InfoWorld
Pinterest passes 250M monthly active users
It's incredible how eager people are to give away freedom and privacy in exchange for a little convenience.
I might actually be done with Amazon.

Every few months, I spend some time searching for the perfect LED light bulbs for my apartment; the built-in fixture requires 6 candelabra-base bulbs. These are hard to find, but there are a few products catering to this market, so I randomly buy stuff to see if I ever get anything good.

I found some LEDs that claimed to have a high CRI and were brighter than normal, so I took a chance on them. There were a couple legitimate reviews and 5 or more obviously-fake 5 star reviews. The LEDs turned out to be not that good. They were bright, the dimmability was good, and the layout of the internal LEDs was quite unique (corncob style but with some on the top, which is great). But they emitted a very greenish light, which makes them unusable. I have a spectrophotometer so I took a reading of the spectrum and, as you'd expect from the visual appearance, they emit very little red light (and no cyan light, as is the typical emission pattern of low-CRI LEDs).

I wrote a review covering these points, the positives and the negatives, and included the plot of the emission profile. This review was immediately taken down because:

1) Your review should focus on specific features of the product and your experience with it.

2) We do not allow profane or obscene content.

3) Advertisements, promotional material or repeated posts that make the same point excessively are considered spam.

4) Please do not include URLs external to Amazon or personally identifiable content in your review.

In other words: please do not include actual data in your reviews. What Amazon prefers is that the seller buys their own product under a fake name, and then says "5 stars: Great!"

This is probably my last Amazon purchase. I might do a proper write-up and spam it around the Internets and see if I can attract the attention of some higher-ups... but probably not. Instead, I will just shop elsewhere. B&H is way better for electronics anyway, and if you just want shitty LED lights eBay beats Amazon there.

Maybe I will also start buying every LED light I can find and doing proper reviews... but there is no business model there to make my time worthwhile. Reviews only work if you can actually find a product that's good and get people to buy it through your referral link. If every review says "you will hate this product, save your money", there is no way to get funding. So the fake 5 star reviews will continue, and everyone will continue to hate LEDs.
Using the clipboard at all for security related things like temporarily storing a password is a bad idea. The clipboard is a big public billboard visible to anything running on your computer.

The fact that password managers use it at all is simply because it is the only hack that works to reliably get data into password boxes. Yes, its a hack. The HTML5 spec should have exposed a mechanism to securely insert data into an element tagged for such a purpose. A one way mechanism.
This is not really an issue. In fact if you rent a house sometimes the landlord wants you to maintain the yard!
I've never experienced anything else along those lines, so your mileage may vary of course. But once a company falls into this trap, its not something the new guy can fix.
It's somewhat amazing to me how some CGI services are so often faster than full-blown-listening-on-port-8080 "micro" services.

It's unfortunate that we consider 1-3 seconds to be acceptable response times.
I believe you mean "classism".
ah this is great thank you.
Based on a quick search, it looks like regenerative braking for elevators is available, albeit not universal.

There's also a big difference between doing it in an elevator, which operates intermittently, can't be scheduled to match grid supply and demand, and works with relatively light loads, and doing it with a dedicated system that can match the grid and use much heavier loads.
That's incorrect. Those states explicitly legalized the possession and consumption of marijuana. That legalization is in conflict with the federal prohibition - so consuming marijuana in those instances is not a state crime (any more then walking down the street or eating cake is) but might still be a federal crime in those cases where the federal government has the ability to charge you (interstate commerce).
Elevators are not cranes. There is always a counterweight, so "dropping" empty cabin is not generating energy. During that time you're lifting counterweight.
As always it depends on what you want to measure. Comparing total checkout time including queuing though for 'speed (items/s)' is going to naturally favor the self-checkout because the choice between normal and self checkout is heavily weighted by the number of items a particular person has. Anecdotally I've never seen anyone go through self checkout with a full cart but see it all the time with the normal registers. Additionally there's rarely the same number of traditional registers actually staffed compared to the number of self checkouts.
Why not https://doc.rust-lang.org/std/string/struct.String.html#meth... ?
I mean, technically it's true. Data and pictures are already there and aggregated. We're already past the non-return point.
It just took 17 years from this day in 2001.
oh

my

you just made my week, month, and year. I've been looking for a practical Lisp-based game design since I was a teen! Dude.

Thank you.

EDIT: THIS IS SO COOL http://abuse.zoy.org/browser/abuse/trunk/data/lisp/guns.lsp

Edit2: Whoops, fixed the link. I meant to link to this lisp codebase, not SICP. :)

Suffice to say, Abuse is amazing. Thanks! This is an absolute gem of a reference for seeing what worked in practice for Lisp-based gamedev. And in 1995 too!