skysight-inc/HackerNews huggingface dataset:
Torch has the best code of DNN libraries I have seen so far.
It's very unlikely they store their passwords in plaintext. They were probably logging during login requests and didn't realize the whole request body was being logged. Can happen if you have a proxy/load balancer with logging enabled.
If they were able to dig for telephone and power then they can dig for fiber too.
Vertica seems to include some of these observations, such as global consistency and group commit. I believe these are easier to achieve (lower overhead) in OLAP due to fewer, larger transactions.
They don't load themselves.
FYI this was a credit _lock_, and not a credit freeze

> Unsurprisingly, the bureaus’ use of the term credit lock has confused many consumers; this was almost certainly by design. But here’s one basic fact consumers should keep in mind about these lock services: Unlike freezes, locks are not governed by any law, meaning that the credit bureaus can change the terms of these arrangements when and if it suits them to do so.

https://krebsonsecurity.com/2018/09/credit-freezes-are-free-...
Probably that it uses CSS as opposed to SASS or LESS or some other thing that requires preprocessing.
I don't think they were storing them in plain text, but on a login request it would log the request body without properly censoring the password. The password could still be hashed when it was actually put into the database.
As contrast, calling C from Python, even using callbacks, it is very easy and incredibly useful, thanks to the "ctypes" [1]

[1] https://docs.python.org/2/library/ctypes.html
How is freezing your credit "going overboard?"
Thanks for your thoughts. And definitely yes re your last point! Like rubber duck debugging :)
How to build a teleportation-assisted telescope
That's almost certainly a case where POST parameters get logshipped to some server for debugging purposes, and it's easy to miss something like that in an audit when you're dealing with terabytes of logfiles.

Even if the logfiles are rotated every day you don't know if a developer has seen somebody's password during that window, so all passwords are assumed to be compromised.
They explained the bug here:

> May 3, 2018

> Due to a bug, passwords were written to an internal log before completing

> the hashing process. We found this error ourselves, removed the passwords,

> and are implementing plans to prevent this bug from happening again.

> — https://blog.twitter.com/official/en_us/topics/company/2018/...
The 'government is inherently evil' argument is sophomoric and goes against my direct experience, so I can't give you that axiom, sorry. Government, at least in the US, is legitimately of the people (for better and for worse) and it is what we make of it. It's definitely made worse by people who believe it's evil and try to cripple it.
Optimizing Postgres Column Order
JetBlue’s Founder Aims to Reboot Discount Flying with U.S. Startup
That won't work in the real world, it will just tax the poorest people and accomplish nothing tangible. There's very inelastic demand for travel by car in LA because everything is so spread out, making other forms of transport unworkably moot. People have to work and live, so they're just going to hate you for making their lives harder while they have no workable options. Heck, the auto industry even had the 19th/20th c. era local commuter trains ripped up so they wouldn't compete with the automobile.
Where are you getting the idea that they're giving China the "best tracking technologies?" They're doing the same things that literally every other internet company in China is doing.
CTO of YugaByte here. We firmly stand by our claims, and I wanted to explain more.

From the post by Daniel:
<< CockroachDB, to its credit, has acknowledged that by only incorporating Spanner’s software innovations, the system cannot guarantee CAP consistency (which, as mentioned above, is linearizability).

YugaByte, however, continues to claim a guarantee of consistency. I would advise people not to trust this claim. YugaByte, by virtue of its Spanner roots, will run into consistency violations when the local clock on a server suddenly jumps beyond the skew uncertainty window. >>

The statement about YugaByte DB is incorrect.

1. With respect to CAP, both Cockroach DB (https://www.cockroachlabs.com/blog/limits-of-the-cap-theorem...) and YugaByte DB (https://docs.yugabyte.com/latest/faq/architecture/#how-can-y...) are CP databases with HA and there is really no difference in the claims.

2. With respect to Isolation level in ACID, YugaByte DB does not make the linearizability (called external consistency by Google Spanner) claim. YugaByte DB offers Snapshot Isolation (detects write-write conflicts) today and Serializable isolation (detect read-write and write-write conflicts) is in the roadmap (https://docs.yugabyte.com/latest/architecture/transactions/i...).

3. We have publicly claimed that we do rely on NTP and max clock skew bounds to guarantee consistency. For example, slide 43 of our NorCal DB Day talk (https://www.slideshare.net/YugaByte/yugabyte-db-architecture...) we mention we are “relying on bounded clock sync (NTP, AWS Time Sync, etc).”
> What kind of person sends an innocent man to prison just to score a win in a case?

Someone with higher political ambitions that wants to look like they're serious about fighting crime.

It's been working for kamala harris.
I don’t understand how this link got posted again, when I posted it 11 days ago. What am I missing? URLs look identical to me.

https://news.ycombinator.com/item?id=17953516
Thank you very much, especially that first paragraph. I think you've given me some good discussion tools, and I really appreciate that.
This is the reason why you never enable images in your email client.

Gmail sucks a bit because it always enables certain images in email and that means that google pixel trackers are really hard to block if you use google mail. If I were an employee, I’d switch to a non-google email client.

The privacy issue is problematic, but their functionality is also buggy. Untrained users will misinterpret them as they can get triggered by previews or other functions beyond just reading the message.
Where Do Data Scientists Come From?
We reverted the submitted title ”Twitter bug sent user direct messages to developers for over a year” to the original.
https://old.reddit.com/r/math/comments/9hl35w/sir_michael_at...
Yep, otherwise you aren't able to detect bit level errors unless they impact the metadata, and the metadata is a tiny fraction of your total storage.

That said, your hard drive already does block level checksumming so doing it at the FS layer is mostly redundant unless the errors are being introduced in your SATA controller or on the PCI bus.
"what are men to rocks and mountains"
Even with images disabled?
I think those are good points, and #2 is important.

It's not a coincidence that tracking protection will only come with the first build in 2019. They probably had to rewrite their contract with google.
AWS AppSync releases new guided API builder for GraphQL
You would still need end-to-end integrity checking, unless your Mac came with ECC memory (which it probably didn't).
I'm not trying to be argumentative, but I would work on building a vast personal network. As you go from idea to product to business, you'll reach many points where you need a network, or at least the skills to go out, meet someone and get them to help you. I'd start building those skills and a network while I'm fundraising.
Paul Graham's essays are a consistent joy to read.
Show HN: RESTPie3 Python REST Server and React/Nextjs and Vue/Nuxtjs Starters
Honestly I'd much rather have some configurable yaml than some obscure app in the middle of your cluster that reads CRDs when what you're doing is just adding a side car.

At least this way you can tell if your local yaml is applied or not without a complicated diffing algorithm that compensates for an in-cluster modifier.
Maybe they are attacking the display.
What is Decentralization?
It’s not unusual in the slightest for people living together to have very similar microbiomes even in the absence of direct contact like that.

I always pose the question - your gut was sterile when you were born, so how do you think the bacteria got their in the first place? The answer is oral-fecal transmission.

You get fecal bacteria on your hands, you touch an object, someone else touches it and they put their hands in their mouth.
> “Leadership misled engineers working on [Dragonfly] about the nature of their work, depriving them of moral agency,” said a Google employee who read the memo.

Lying to our own colleagues now are we? The end justifies the means I guess. Wait, what was the end again?
Seems like an important and potentially lucrative project but I'm a bit worried about its future - what happens after Brexit?

It's lead by a British team, but many of the components are made on the continent, and it looks like half the funding came from the EU...
Starting later in life is probably a lot more helpful. You tend to be more patient and understanding of your own body, you won't have the stamina to be in the water for hours is the single downside.

The pros tend to make it look easy. The young see this, think what takes lots of practice comes naturally and flub it. Then blame their equipment, their instructor, the waves, and themselves for sucking. And ultimately abandon it.

I tried surfing in my early 20s. Gave up. Now I'm learning again and having a much better experience.
Sad Times – Stream Royale/Sagose/Ukerse/Wamela All Gone
Sad News Folks!

The online streaming service exclusive to those who used the old Superchillin site have shutdown indefinitely. Due to a notice given out by email the sites domains all went offline and won't be coming back! Sad times indeed!

There is however another very similar site and point of call is https://superchillin.tk where you can get an invite for $10! 8 hours till registration closes though.
I still think musl overall is quite readable, but my goodness, that switch statement in your second example. What a monster. I didn't think it was possible to be this confusing without the preprocessor.
Yale study finds twice as many undocumented immigrants as previous estimates
It's neat, but I'm not familiar with this use of the word "tab". I'm not sure what I would call this — maybe a zoomable grid.
Have you considered moving? There are lots of places that don't have these kinds of air problems.
I'd argue that BGP works really well given how large the Internet has grown over the past 25 years, and how little BGP has changed in that time.
This is a Bloomberg Opinion and written by Dr. Kai-fu Lee, former head of Google China, and former SVP at Microsoft and Apple. He was previously a world-class speech recognition/machine learning researcher at CMU[1] And at the bottom of the article, it reads:

This column does not necessarily reflect the opinion of the editorial board or Bloomberg LP and its owners.

[1]: https://en.wikipedia.org/wiki/Kai-Fu_Lee
Good find. Wonder if there's as much doc of ZFS/OpenZFS.
Pretty sure opera had both tabs and a somewhat recognised brand before Firefox had either.
It is different in that a completely unrelated third-party can pin this content of their own volition, and it will continue to be provided under the exact same address/hash. In the web, the domain owner is the single entity who can ensure survival of the content.
Credit monitoring just gives you quicker notification

Define "quicker."

I got the credit monitoring from Exerpan after its data breach.

Since then, I've had my credit run twice. Both times were initiated by me, so I know when it happened. Both times, I received a notification by e-mail SEVEN DAYS later, followed by a text message a day after that.

Seven days is plenty long enough to destroy someone's finances.
Interplanetary Communications: How Convolutional Codes Correct Errors
From what I read, he came by the board seat through his involvement with one of the VC that participated in this round.
Very personal data is sent to brand accounts by some users (to get support, etc), so I don't think this is really good news.
Golang's `sort.Sort(data sort.Interface)` will sort mostly-sorted data in nearly its fastest possible time, because it basically uses median-of-three quicksort, falling back to insertion sort for small partitions. Median-of-three on sorted or nearly-sorted data picks the optimal or nearly optimal partitioning element for quicksort. The code is simple, readable, and well-commented. Moreover, its average and worst-case complexity is documented in the godoc.

In short, your comment is wrong from beginning to end. What led you to believe that anything in it was true?
Likely enough to create third-party disk recovery utilities.
It’s been a long time since I messed with domain controllers but I believe Microsoft used to have explicit guides for handling time on virtual DCs. At that time we kept around a a couple hardware DCs to be safe but I do remember having the VMware agent correct the time could result in some bad results. I think it was because it immediately fixed the time and didn’t slowly correct the drift but it’s been a long time so my memory could be off.
Computers are magic.

Half of the US electorate is completely ignorant about what's going on. The people that do know have no sway over a self-serving Congress.
> I think my wife emailed them asking why the results were basically identical to mine (including the totally abnormal metric), and I don't think she ever got a reply.

Well, to be fair, one of the working hypotheses about human mating behavior is that one of its goals is to equalize the biome of the female (bacteria, viruses, etc.) to that of her partner before she gets pregnant.

So, husband and wife having the same biome is not surprising.

And, even if you have the same biome, your systems will almost certainly react differently depending upon the expressed receptors.
Ah, bummer - my 1st generation stainless steel Apple Watch continues to serve me well, but features like this really tempt me to upgrade (shakes fist at Apple)
Tips on how to hire a software engineer
https://www.theverge.com/2018/7/18/17587304/apple-icloud-chi...

For iCloud, Apple partnered with a local Chinese entity.
So then its CAP not AP? CAP was about you can’t have them all?
What is surprising is how small the error term is. For the sake of comparison, (1+10^-5)^(10^5) only gets five digits of e right.
I agree so much. How about we hear from some Chinese people about how they feel about the developments?

The few comments I've seen have expressed excitement and highlighted the extreme issues with Baidu. The outrage seems to be coming entirely from people with no real stake in this news.

I absolutely believe there's a discussion worth having about the extent capitulating to authoritarian demands is morally and practically allowable, but to dismiss it out of hand because it conflicts with Western notions of privacy while ignoring the cultural realities in China seems shortsighted.
"He remained in the house arrest the next 9 years, until he died in 1942."

I think you have a typo.
We drove through the black forest once, and we stopped off to take a picture. We walked a few feet in and that's when we saw it was all fields beyond maybe 100 feet-- the forest exists by the freeway, where we were, but it was just for show, and our imagination of this big forest beyond was just that, imagination.

I'm not a environmentalist by any stretch of the imagination (for example, I think the straw law is stupid for a variety of reasons and I believe that most recycling in the US is waste, per the excellent Penn and Teller episode about it) but even I don't get or like clearcutting.
Maybe, yeah. I said late February just because I think the next couple decades will see an explosion.

(To answer your question, I would put the invention of software at COBOL probably. Jaquard and Turing were developing operations, not developing on operations.)

I think we’re currently laboring under unnecessary complexity, enforced by a single-minded control system (generate software structures controllable by financial funds).

We’re already past the point where we can operate in a lower energy state (a factor of 10 less code underlying our user-facing apps and a factor of 100 more software writers) and it’s just a matter of when in the next decade the nucleation site will form.

At the point we’ll be in what I believe is a software spring.

Also, the development of the handheld limitless visual networked computer, and the even more limitless cloud, isn’t nothing.
I was lucky to take Tom's class (Nature of Math) at UCSC. The final quiz was a proof of the birthday paradox and I was unaware of its relevance to hashing for 20 years!
Of course they CAN, but what is the motivation? They have no competition and the government doesn't seem to have any interest in finding ways to motivate them. Their cost of bandwidth continues to drop as they continue to increase prices and introduce artificial caps. They're printing money!
I guess we’ll get a new blog post from Pichai about the people he fired because tracking users against their wishes, exposing data against their wishes, and compelling employees to delete their own files “contrary to our basic values and our Code of Conduct.” [0]

Fortunately Google is an ethical company and not hypocritical when it comes to very important issues.

Maybe this will be positive and result in new US law like the foreign corrupt practices act of 1977 [1] that prevents US companies and their subsidiaries from bribing officials in other countries, even when local law allows it. So forcing US companies to follow the minimal US laws protecting privacy even if to comply with other laws will be a net positive for humanity.

[0] https://www.blog.google/outreach-initiatives/diversity/note-...

[1] https://en.wikipedia.org/wiki/Foreign_Corrupt_Practices_Act
Whats the legal precident for cases like this? A C&D is not the law and just because big-corp has lawyers doesn't mean bullying people who don't access their public resources in exactly the way they want is legal...
Retracted: Nrf2: authors can't agree on order of their names (2017)
In a sense, yes absolutely. OTOH in another sense this is clearly ridiculous. I suspect this ambiguity is irreducible.
That works as long as you don't need your credit for anything. This isn't limited to opening new lines of credit. Credit cards can be closed or have limits changed based on credit score. In most states, your car insurance rate can be based on your credit score; most policies renew every 6 months. In the event of a judgment against you for delinquent credit cards, your bank accounts can be levied.

You're correct that this isn't your problem, and eventually you'll get your money back. You're wrong with idea that you can be passive and not get screwed.
the domain is registered by info@chinacapital.com, which registered over 500 domains, 2 of them marked malicious. the cisco umbrella risk of the domain is 77, medium
Do you write the plan down? Like an outline? I want to get better at what you are describing.
how long do you think china is going to tolerate Google doing that?
I remember listening to you guys talk about your experience starting the company on a podcast (I think it was Startup from Gimlet media?). It was an awesome episode (I think two actually) and was very inspirational to listen to. I love the part when you guys received the money during one of the founders' wedding and seeing the number on the bank account.
NZDUSD: Retains Recovery Threats, Eyes the 0.6726 Zone
After re-reading this, I realised I wasn't clear on the taxation - this would apply to manufacturers not consumers, thus incentivising them to advertise green credentials as a feature, and to cut down packaging or pass the cost on (at which point most customers would move to the cheaper product).

As far as non-homogeneous packaging goes, if it takes longer than 5sec to separate each bit into homogeneous parts, then I'd class it as non-homogeneous.
> for a total 2-3 person-months of work.

In a year. In a project which could put Python next to JS, for the last pain-point that prevents it.

Python - one of the top 10 most popular languages - community and all its industrial user, including some of the most successful companies on the planet, can afford to put 3 person-months of work for that feature.

There has to be something else at play here that I'm missing. Well, other than missing that "donate" button for a tad too long...
You did not need deep learning to generate molecules
I hope you are never sorry.
Surveillance cameras installed outside White House briefing room
Fecal transplants are not new science and C. Difficle is just a bacterial infection. The relationship to microbiome science is minimal.

As for the science around the microbiome role in metabolic, developmental and autoimmune disorder is observatory at best. I’ve yet to see a paper that took a human, changed their microbiome and observed X effect (beyond the obvious bacterial infection example).
Regarding iCloud, Apple has made decisions to bring Chinese iCloud in compliance with Chinese regulations. Chinese iCloud accounts, data, and encryption keys are stored with a Chinese firm overseen by the Chinese government.
Aren't you also forgetting the EU internet?

With GDPR and the "right to be forgotten" censorship?
Posting a link that directly contradicts your argument is not an effective means of supporting it.

Well, it can be if your audience doesn't actually follow the link, but that trick is more effective with references in hardcopy where there is non-trivial effort involved in checking references.
Google makes money off ads through Firefox, ie, and safari. Requiring absolute browsing data on all users goes above and beyond just meeting their bottom line.
Datastore was initially designed for use from App Engine, i.e., an easy start, no management, automatic scaling environment ("serverless" to use the current in-vogue term).

I would view the Firestore API as a further extension (the "Datastore Mode" functionality was always an element of the design) of that paradigm, extending to the case where you have no trusted piece of code to mediate requests to the database, thus allowing direct use from, e.g., mobile apps (at which point other issues such as disconnected operation surface).

So not so much a "different kind of product" and more a product that supports a strict superset of use cases.
> Did you "push" or did you "pull"?

I think you're proving my point. :-)

More specifically, we defined parameterized components that could be composed to form the output. The definition of those components was incredibly verbose, as was the instantiation, and it was tightly coupled to parts of the domain model in surprising ways. IIRC WebDevs ended up having to work a step removed from the final XSLT, using some DSL for components that transformed down to XSLT.

Further, deponent sayeth not.
It’s not that hard to circumvent actually. Also in major tech companies in China, employees can just use company network to access websites blocked by the firewall. But if you provide that as a service to general public, it’d get shutdown when it get popular
> Twitter said that a “bug” sent user’s private direct messages to third-party developers “who were not authorized to receive them.”

user's -> users'

__plural__
Yeah, while I agree with part of the premise of a gas tax, it's unfortunately also a regressive tax (hits lower-income people proportionally harder).
agreed. LA, SF, and the rest of CA could have the best transportation systems in the world if we just priced in the externalities of owning (and parking) a car and used that to create better transporation infrastructure.

as for the tax being regressive, we could provide a tax credit for low-income/low-wealth folks. even better if we could figure out a way to calculate (differential) tax on-the-fly at the pump.

LA has started rolling out blueLA, electric cars rentable by the minute, in low-income neighborhoods. it's not a complete solution, but it helps.
Precision Hawk lays off 40?