skysight-inc/HackerNews huggingface dataset:
> searching is far more effective than organizing. My knowledge base became a buffer for my web search.

Searching doesn't with keeping a copy of the thing you need around.
I think it’s because it’s not been confirmed by BA that this was the attack used.
That Borland management board.... :(
> linked-lists are unnecessary, performance killers, and generally evil.

that's true on any CPU with more than 16kb of cache. linked lists were a good idea at the time of 486, not so much at the time of modern CPUs with 8+ megabytes of L3.

See https://baptiste-wicht.com/posts/2012/12/cpp-benchmark-vecto...
Yes, we are definitively working on that! Stay tuned for updates coming very soon.
Tolstoy’s ‘Resurrection’ is strikingly similar to how we treat prisoners today
It will not work in India. The whole problem is that the govt pissed off the operators and incentivized them to create fake aadhar. He whole investment to setup aadhar enrollment centre was marketed as a good business which will make people decent sum of money. But that was a very optimistic approximate. Reality turned out to be far more different. Almost all operators went into a loss. To recuperate the losses, they started creating fake aadhar. Money earned for genuine aadhar is Rs. 20, vs Rs. 500+ for a fake aadhar. It was stupid for operators to not exploit the opportunity.

In this scenario a hardware key is not going to help. It'll only limit the ubiquity of the hack, but not much else.
Most European airports only scan your boarding card for flights within Schengen and do not check any ID, and many of them let you scan it yourself.
Quantum is the appropriate word for describing quanta. The only thing even slightly dubious about the headline is it’s use of the word ‘light’, but it’s very far from being appalling or unbelievable.
Have you looked at Chapel?
Dunno about premium, but as an infrequent user, I get the impression that features that used to work, now require an upgrade to premium to activate.

Based on my perceptions, I won't be upgrading to premium.
They use Equifax because the government has actual privacy policies and requires an individual's permission to release information. The government may also not have offered this exact service (they offer a service to release your entire tax form, but I'm not sure they offer one to release only the salary and employer from your W-2's).
/waves from just behind St Kats Docks by Tower Bridge

As a contractor, I'm making about 3x what I was for my last perm salary. But only if I work in London. I'm lucky to get two thirds of this near where I live, and AFAICT the perm staff in most places I've contracted nearer to home get paid really terribly.
> Time and Time again Aadhar's privacy data have been compromised.

I hate the implementation of Aadhar as much as any person, and believe the architecture is terrible that a patch can allow authentication to be bypassed. And that there could be more vulnerabilities. However, at least in this instance, existing data has not been compromised.
> I just checked other news sources in India, and no one has any news about any recent Aadhaar breach.

here you go

NDTV

https://gadgets.ndtv.com/internet/news/aadhaar-software-patc...

It is on the front page.

It takes mainstream sources a while to react to news. In 24-48 hours, all mainstream newspapers will have the news.
Kofi Annan's remains received in Accra (photos)
Btw, 4 months ago the UIDAI had completely denied of existence of such a patch calling it as "totally baseless, false, misleading, and irresponsible" [0].

[0] https://twitter.com/UIDAI/status/991907169779011584
The write-up is a little unclear, at least to me. I read it as being that it was a third-party JS attack. At least of a sort - e.g. a compromised third-party package downloaded and then used by BA? [0]

[0] https://cdn.riskiq.com/wp-content/uploads/2018/09/Webp.net-r...
+1.

We also need to consider the motivations for working around 2FA or any such authentication systems. One is convenience as you've pointed out.

The other, much bigger motivation IMO, is opportunity to make money. As the article points out once enrolment was outsourced (Rs30/enrolment) it was immediately seen a money making venture so a whole bunch of these centres with dubious credentials surfaced. They were entrusted with document verification too so they would happily accept just about any piece of paper as proof of address. Then there was a business of charging desperate people money to create Adhaar account without which they wouldn't get subsidies.

And then they shut down (50,000 or so) these enrolment centres. Did they expect that all those employed at those centres who lost their jobs to not do anything about it!? Of course they would figure out ways to enrol people!!
You can't fix one problem to create other ones.
Steve Russell

https://en.wikipedia.org/wiki/Steve_Russell_(computer_scient...
What is the best/cheapest courier to ship a parcel from Poland to the USA?
From the BBC:

> Quotation marks should be single:

> in headlines and cross-heads (eg: UK ‘to leave EU’); in promo text and for quotes within quotes (eg: Tom Bone said: “They say, ‘The Labour Party is finished’ before every election”) and inside quote boxes (eg: They sprayed ‘go home’ on our front door – Sandra Harris).

> In headlines where the attribution is clear, do not include unnecessary quote marks (eg Britain won’t hold referendum, says PM rather than Britain "won’t hold referendum", says PM).

> They should be double:

> outside the categories listed above - on the ticker, in regular text, summaries and picture captions. Also, at first use of phrases such as “mad cow disease” or “road rage”. (But quotation marks will be single if the phrase comes inside a direct quotation (eg: The minister said: “The spread of ‘mad cow disease’ had ruined thousands of lives.”) Either way, no punctuation is required after the first reference.

https://www.bbc.co.uk/academy/en/articles/art201307021121335...
> Pretty soon they understood that to get Creo the kind of user experience they desired, they had to rewrite one of the core modules of Apple developer stack: the UIKit.

> Read it again: entirely rewrite a core component created by some of the smartest programmers in the world, with no access to their source code.

They didn't though. Looking through their documentation[1], they subclassed all (or some?) UIKit components and offer those instead of what UIKit offers – which is what allows them to hook into each object's properties for their IDE (I'd guess).

It's cool, and I understand why they did this given their offering (a drag-and-drop IDE to create apps) – but they definitely didn't rewrite a massive, complex, UI framework. Similarly, they blocked off a bunch of UIKit stuff that could genuinely be useful. It looks like you can't provide your own collection view layouts, for example.

[1] https://docs.creolabs.com/classes/CollectionView.html
> http://210.212.23.57/online/OnlineApply/Notice.aspx

HTTP. FFS.
>Well, no. The GNU Affero GPL has a clause that covers this case - if you provide a network service based on AGPLed code then you must provide the source code in a similar way to if you distributed it under a more traditional copyleft license.

This is definitely not true.

https://www.gnu.org/licenses/agpl.html

>Notwithstanding any other provision of this License, if you modify the Program, your modified version must prominently offer all users interacting with it remotely through a computer network (if your version supports such interaction) an opportunity to receive the Corresponding Source of your version by providing access to the Corresponding Source from a network server at no charge, through some standard or customary means of facilitating copying of software. This Corresponding Source shall include the Corresponding Source for any work covered by version 3 of the GNU General Public License that is incorporated pursuant to the following paragraph.

There are two things here:

1. People only get access if they access the service. I don't know how this has been tested in court, but to my IANAL ears it means opening a socket to the service.

2. You only have to distribute it if you modify the software. This is nothing to do with using AGPL code as part of the collection of services. And if you don't let users open a socket to the AGPL part then you don't need to release those parts.
IoT/Linux Botnets Mirai and Gafgyt Target Apache Struts, SonicWall
Here’s the thing tho’, BA’s website exists solely to provide information on and sell their own services. Why is there third-party anything on it in the first place? Fix that and you’ll fix everything, well almost.

Disclaimer: worked on ba.com in the ‘90’s
If there was no bailout then even people who were paying their mortgages on time would be affected. The bank needs money now so it will have to sell some of it's assets such as the house you're living in but 5 years later it is probably swimming in money.The government effectively acts as a very large insurance company by giving the bank a loan.
When a system is shown to have fundamental security flaws — this one uses client-side validation to authenticate biometric operators — it is natural one's trust in the system's robustness would drop low.

Like when Intel's chips were shown to completely disregard security when speculatively executing instructions, it wasn't just a new vulnerability; it was a whole class of vulnerabilities that was now open
The remember this tidbit from college, where actuarial studies was ranked as the highest earning qualifications.

I think this comes down to a combination of (1) being relatively difficult and/or esoteric, so the pool of people is small and (2) having a strong guild structure which ensures a "market" structure that favours qualified) chartered individuals. Apart from being operationally important, actuaries are part of insurance companies CYA.

Ultimately, even today, when a profession can impose structure on itself (eg lawyers, doctors, accountants, etc.) that both admits/certifies a limited number of professionals and requires certified professionals for certain tasks... It still tends to work out well for members.

For the most part this is legacy, and is found in older professions.

If insurance was invented today, actuaries would probably be data scientists.
The next calculation is how LEO transfers affects the environment/climate over the long term, when you begin using it as much as long haul air cargo...
I've only been once in Washington, and it was ages ago. But they have this incredible system where they put you in a massive bus (At first I didn't even realise it was a bus, it looked more like a room), and the bus goes to the plane, lifts ups, and docks to the plane door. So, it's very important they can cram the people in the bus as fast as possible. Do a google image search for "Dulles buses", you'll understand what I'm on about.

But this benefit (of accelerated boarding) would apply to any airport where you don't go into a jet bridge but have to take the bus to go to the plane.
Are Google and Facebook Evil?
I don't think we've even begun seeing the terrible results of QE , at least in Europe.

QE's long-term effect on housing prices will probably be terrible on many people wanting to purchase an appartment, possibly leaving many without one.

And on the other hand, QE created such a boom in startup investing, which will greatly increase the rate which jobs will be automated.

I can't see how this ends well over the long term.
Did those people do anything wrong or were they just essentially incompetent or not adequate for the job? Bonus clawbacks after government bailout are one thing but jailing people who probably didn't do anything criminal is a dangerous precedent.
How to Conduct a JavaScript Live Code Interview (with 3 Full Problems)
In the UK the definitions have a fair amount of consensus and the loss of productivity is one of the motivations for a range of employers organisations to support this initiative.

The UK's Mental Health Foundation gives these figures:

> 1. Mixed anxiety & depression is the most common mental disorder in Britain,
> with 7.8% of people meeting criteria for diagnosis.
> 2. 4-10% of people in England will experience depression in their lifetime.
> 3. Common mental health problems such as depression and anxiety are distributed
> according to a gradient of economic disadvantage across society. The poorer
> and more disadvantaged are disproprotionately[sic] affected by common mental health
> problems and their adverse consequences.
> 4. Mixed anxiety and depression has been estimated to cause one
> fifth of days lost from work in Britain.
> 5. One adult in six had a common mental disorder.

https://www.mentalhealth.org.uk/publications/fundamental-fac... [pdf]
Bit of a flippant tone, but I found this video that shows a man who had the procedure after bilateral amputation following an accident with dynamite. He sounds pretty satisfied with it.

https://www.youtube.com/watch?v=t8yMNuNgxyo
Corporations aren't evil. The people that work at them are (or aren't).
While this is true, the primary engine of corruption is the government and its agencies. Officials soliciting bribes to move paperwork forward, kickbacks to land projects etc.

An honest assault on corruption should target the government and parties rather than individual citizens. The work in that department seems to be going the other way though. e.g. https://www.thehindu.com/opinion/op-ed/the-danger-of-elector...
Robotic 'trees' can turn CO2 into concrete
Why the Concept of Customer Success Is Essential to Any Business
We won’t find out if Mark Zuckerberg can fix Facebook by asking him – The Verge
The economy has become an absolutely horrific place for most of the population. Financial security is an unrealisable dream for most workers.

Bailouts saved the economy for the proverbial 1%, who are doing wonderfully. But no one else is. (I'm including many HN readers in the 1% because they work in a privileged and relatively highly paid part of the job market.)

When the mountain of debt finally implodes, it's going to be far worse than 2008.

This is very different to - say - the 50s and 60s - when ordinary working people could accumulate significant assets by working hard and saving.
It's not like HTTPS would have helped much. It's an arbitrary IP address. How is a user supposed to verify an arbitrary IP address is not an attacker? This is what '.gov.in' is supposed to be for.
Check out KDE Plasma Mobile. Linux has come a long way with touch screens.
Not much, we dumped Lloyds because it was profitable, we can't let go of RBS because we will make a loss. This is loss aversion on a nationwide scale.
Sending people to prison involves prosecuting people for breaking laws somehow, which isn’t easy. You can’t just send them to jail on a whim. Even if what they did was wrong, unless there was a law against it the government didn’t really have many options here. They could make up some laws after the fact to prevent future abuse, but cannot make them retroactive.
Reminds me a bit about this thing covered by photonicinduction:

https://www.youtube.com/watch?v=QY6V2syGnZA

Fortunately he didn't "pop" that one "for science" unlike most other things he covers, it's too valuable :D
A micro manual for Lisp – Not the whole truth (1978) [pdf]
Only the parts that matter
HEVC, AV1, VVC and XVC: The codec battle intensifies
I don't have facts/pointers but just an educated guess.

The most probable beneficiaries are food/gas etc., distributors. Pre Adhaar days they used to create fake ration/gas cards and sell food at un-subsidised prices in black market.

A prime (purported) driver for Adhaar to stop creation of these ghost people. Now that ghost Adhaar accounts can be created (per the report) these distributors will get back to their old ways of making money.

India has lot of poor people so the threat vector isn't yet FB/github :-).
There exists the concept of criminal negligence. I would say being in the wrong and being incompetent are not mutually exclusive.
The trouble with revolutions is you end up with a new set of leaders, who may well be worse than what you have now.
2D material electronic mystery resolved
> The real benefit...

It is possible for there to be multiple benefits. In fact this is the most desirable, since when there is an immediate economic benefit to both sides, it is incentivized to happen.

In the case of supermarket self-scanning, sure, the supermarket can reduce costs.

However, the benefit to the customer is in a shorter total time through checkout. Entropy causes customers to arrive at checkouts in spurts, rather than there being a steady flow. It is expensive for stores for checkout operators to remain idle (and would be passed on in higher prices). So customers have to queue instead of there being more checkout operators available during spurts.

On the other hand, the cost of maintaining extra self-checkout machines costs very little. So in practice, they tend to be available to handle spurts of activity, resulting in faster overall checkout times for customers too.

For the stores: yes, reduced costs. For the customers: reduced costs result in lower prices in healthy markets, and also time to traverse checkouts is faster.

The same can be applied to airlines. Fewer staff at the line at the gate results in reduced staffing costs: sure. But also: less standing around in lines and less juggling at the front of the line (especially for the infirm, or those with kids, etc) is also a clear benefit to passengers.

It is cynical to ignore the other half of the benefits and focus just on costs. And in any case, reduced costs for the company results in lower prices for consumers.
Aadhar is not a client side authentication, what is client side even mean in this context ?
If you liked that, you might also like
http://homepage.divms.uiowa.edu/~jones/bcd/decimal.html
Pinduoduo, a new e-commerce power rising in the Chinese market
A Battle Plan for a War on Rare Diseases: Conversation with Matt Might
High level overview of the current data and event ecosystem
FedEx Smart Shipping
Optimizing Search in JavaScript
If they are incompetent and they have consciously taken the positions they hold - then they are liable. Finance isn't "revolutionary" tech - there isn't much you can do that requires high risks and actually rewards you in the long run.

I would wonder what you'd say about a general who didn't know that using chemical warfare is a possible tribunal scenario.

We have a similar legal case in maritime law, where captains can be sued for anything that happens on their ships. If you can't take on that role and it's liability - then you shouldn't be the captain.
I think the two "poles" you've identified are good ones (~microseconds matter and ~100ms matters) but there's a wide range in between. If you do anything with video at modern resolutions, then you're in the single-millisecond-matters regime (this includes games as mentioned upthread, and just about anything in VR as well).
What if we had smaller programs, such that an executable could be started on demand for each request? You could also avoid GC and long-term stability issues this way by having a short-lived program. It even allows you to have multiple different microservice functions written in different languages served by the same system. So long as they use a similar API - we could call it a Common Gateway Interface?

(Yes, this is a joke based on how we used to do it 20 years ago)
Isnt that true for every thing around you?
just because your bank is not hacked, does not mean it will not be in future.

this is an attitude a system designer should have, allways be on lookout of vulnerabilities.

if media starts writing articles on would be vulnerabilities, then it is just fear mongering.
What is the best Poland manager virtual assistant?
I would guess third party payment gateway and tracking/analytics. It's doubtful that BA would undertake the task of creating bespoke systems for either of those
well, i am neither an expert in analyzing bio metric data, but i know that current government is hell bent on ploughing through our lives. i dont know what will be a better future.
Google back in court arguing against a global ‘right to be forgotten’
It's because they are reporting that somebody thinks they've found the dodgy code, rather than a statement of fact that the dodgy code has been found.
This is a very good point.

I think another factor is the type of Jobs. Joiner and Seamstress are jobs which create something useful.

Many jobs today do not create such obvious value, people see numbers on a system change and are in constant competition with their peers - opposed to "enough work for everyone.

I write code for a college and manage their MIS - there are days that are great where I see the value I am providing and problem solving.

Then there are days where I feel so powerless and trapped by the system and I can do nothing about the issues I have with this job (lazy co-workers, managers not including target audience in the development, no technical specs/generic wire frames I need to fill out to an entire project, project manager having 0 technical proficiency) all because this place is a minefield of regulation over performance.
If you have to click the key fob (the default) to unlock the car, you are safe from this attack, and don't have to upgrade your keyfobs.

A firmware update deactivated the touchless entry feature and warned about this ages ago.
More like:

Business: OK great that sounds like what we want.

1 Month Later:

Business: We were really successful with hundreds of requests a minute, but for some reason the delay came back!

Tech: Oh...warming up doesn't scale. Scratches head and walks away.
So what do you think about Doctors, whose pay is even higher than software, but whose discontent is even more widespread?

Doctors really are committing suicide, but it’s still better than landscaping, so do you just laugh?
Ask HN: No evidence ever for Windows/iOS source leaks?
I've seen some talks of elite hackers defending Windows is a more secure OS over open source solutions because malware developers can't easily find vulnerabilities if they don't have access to the code.

I ask myself, has never been found evidence of governments/mafias to have copies of Windows/iOS source code?
But there is Biwascheme.
I am not questioning authenticity of report, that is UIDAI to do.

i am questioning choice of title. offlate, i am seeing too many articles about aadhar breach, and when i study in detail, its mostly related to social engineering/phishing attacks stealing OTP/enrolling unsuspecting customers etc.,

I am worried that when an actual breach happens, the people will probably dont care. (cry the wolf?)
Actual bankruptcy could have resulted in a chain of collapses that might have left large areas of the Western economy without functional banking for weeks or even months.

But the bailout should have had a lot more "never again" in it, rather than "how can we get back to the old normal of bubble finance as quickly as possible".
How to verify the URL is up in different location/countries
Dear All,
I'm going to develop a tool using C#/asp.net to monitor a website and reports whether its down in specific country.
Please advise how to access the website (URL) from server (tool hosting server) to other countries and check whether URL is up or not.
Show HN: ProTABS – A Chrome extension for better tab management