skysight-inc/HackerNews huggingface dataset:
I think a week is pretty reasonable. They were probably investigating to even get an initial understanding of what happened.
I think they’ve been breached like this previously. What a mess.
My own position is that as the vote was about EU membership and nothing else, the UK should stay in the Single Market and the Customs Union, i.e. Norway+Turkey (Norway isn't in the Customs Union). This is the least damaging option, the Irish border problem evaporates, and it would be immediately accepted by the EU without any further negotiations. It would also have won had the referendum been conducted properly: with Remain, various Leave options, to be ranked in order of preference. We'd lose our MEPs but otherwise it would be business as usual.

If it doesn't satisfy most Leave voters, I'd just tell them that we can have another referendum in a generation's time to decide whether to stay where we are, leave the SM&CU, or rejoin the EU, if there's any demand for one then.
It has happened in history.
I'd love to read a blog on tech in China or other places!
I just tried it yesterday on one Django project. The DB migration failed. It seems that when doing DB migration, Django actually looks for .py files which don't exist anymore with nuitka.
Not appearing to be giving the finger to congress, as it looked when he failed to show up to the last set of hearings? Pissing off congress is rarely a good idea.
Yes, the gatekeeper problem is tricky. I ultimately think that each side would submit pros and cons, with no rules around what they can submit. Otherwise we run into the gatekeeper problem. So some sides would submit sensational, false claims. And we’d have to trust the people to decide what’s true and false. We’re already trusting us, the people, to make these decisions when we elect representatives. We might as well directly face the consequences of our choices, rather than shifting blame to a representative.
Main issue is more with other gems that need to be updated as well. It may take take months. You can't do that on your own.
BBC ≠ editor/writer, not sure what's contradicting about it
It didn't take Github as a whole a year to go from 3.2 to 5.2. It took a small team within Github to work with everyone to upgrade from 3.2 to 5.2, with most of the changes introducing business value in the form of security and technical debt fixes(as many issues as I have with Rails, which are many, deprecations aren't willy nilly and generally have great reasoning behind them).
Creative Ways to Use Your Laptop as a Second Monitor
It's very easy for me to believe. "View As" is an authorization and authentication sensitive, limited user impersonation feature. Video uploading interacts with, and complicates, authorization in an application with fine grained privacy and permission models.

It's intuitively straightforward that modifying code for uploading videos could (read: not should) have authorization and authentication ramifications. One of those ramifications could then result in a vulnerability chain compromising user impersonation functionality.

I have seen far, far more incredulous head scratchers in penetration tests and code reviews. The interaction boundaries of, or middleware between, two seemingly unrelated systems is generally a good start to look for a security vulnerability.
I also came in to comment about property/real estate being THE biggest and safest vehicle for hiding dirty money.
Great job - was trying to something similar by setting up three etcd raft nodes on each continent, but this is like 150+ nodes. Mind sharing of you’re using good clocks, paxos or raft to coordinate?

Would also be great if CF could do websocket / sse fanout at the edges - if I have a couple million websockets connected on ws.cf.com/key1 and I update the value, would be great if the new value could be broadcast. That would help with a lot of media / real-time / sports games, apps and websites.
Of course in certain conditions it is preferable to rent (haven't laid down roots, still building the beginning of a career etc), but as a purely financial decision for a regular, long term domicile it doesn't make sense to pay a premium to not "deal with home ownership". It's not like running a business.
Seems to me that one of the more interesting directions that genetic engineering could take is manufacturing of exotic materials. The safety issues would be much easier to manage as well if the GM organisms are kept in vats in a lab instead of planted in farm fields, etc.
Its also interesting that this happens right at a time where the switch from one node to another takes increasingly longer and viewer people adopt it.

And anybody can now make chips in the most advanced nodes. There are startups now who are already working on TSMC7nm.
I find facebook's effects on privacy and democracy as scary as the next person, but so far their secure coding standards have been extremely high. They're one of the few big names NOT on haveibeenpwned.com, they run their passwords through a KDF and then encrypt the result with a hardware security module, and a whole lot of other good things.

I guess even the best (at secure coding) sometimes mess up.
You only get to see your own profile. It's a very useful tool to make sure you're not leaking data you people you'd rather not give it to.
Ooh, what about a laser on the space side of the debris that heats it, causing the release of gases that propel it towards earth? You would have to be able dynamically re-target the debris for uniform acceleration while also pulsing the laser if the debris is spinning, but it would probably work.

soure: I can't even do basic math, but maybe someone smart will think this is an interesting idea
this should be the thread link
What trying to build a fair smartphone teaches us about ethical technology
I will support any system that insures that all voters have verified citizenship.
In this context, unknown could be pretty easily with calling someone a nobody.

A nobody, compared to who? A status quo? Innovation is about outliers getting things done.

Whereas a success like this would normally be celebrated to the moon and back. Why not here? Is this individual's success outside a self-congratulatory echo-chamber?

With media it's worth asking questions about the use of words, because they wordsmith for a living.
Well personally I do see a small distinction between breaking a corporate TOS and felony unauthorized network access.
> Tesla had quite the ambitious Model 3 production goal for this quarter

They claimed to be able to consistently make 5000/week at the beginning of the quarter and that they'd be at 6000/week in August.

50000/quarter is <4200/week. That doesn't seem like "quite the ambitious" goal. If they were actually consistently making 5000/week at the beginning of the quarter, they could've taken 2 weeks off, just easily continue at the same pace that they were already doing and still hit that goal.
The politics of private citizens are their own business and explicitly not the government's.

Furthermore even if that had any bearing on their search results whatever google presents on their own damn website is also none of the government's business.
90 millions, the title should be updated (50 millions certainly affected + 40 millions for precaution (so far))
How have they monopolized the talent pool? By paying their employees better than everyone else?
Recently talked to 2 friends working for fb. According to them, the culture there is very toxic. For a master's degree, once get in, you need to get promoted in 22 months (I might misremember the actual number.) or you will have to leave. Debugging is never counted as a real work, so for quick promotion, nobody wants to solve bugs unless a bug becomes too obvious. And they also complained about no work-life balance. They got pushed to check-in code at 12a.m. for example.
Facebook is really getting hammered in the press this week.
And, yet, a billionaire launching a car into space, or a tiny hole in the ISS both received significantly more press coverage than this, but are equally as unimportant compared to the other things you mentioned.
Perhaps because counting tens of thousands of near-identical pieces of paper is exactly the sort of repetitive, robotic task we've entrusted machines to perform more accurately than humans since at least the 1940s.
Facebook will hard lock the page to prevent it from deletion
I am simply observing the general meaning of unknown in the context of statements like this in the English language. I suspected that the person I was replying to might be unaware of this meaning based on their reaction, and was trying to clarify. I really don't think there are many assumptions here. This is by far the most common interpretation of unknown in sentences like this.
Looks like they're clearing out compromised sessions. https://twitter.com/facebook/status/1045722820582432768

I was logged out of Facebook about 30 minutes ago.
> On the afternoon of Tuesday, September 25, our engineering team discovered a security issue affecting almost 50 million accounts.

Now it's 28th, meaning that they've disclosed the breach within 72 hours, as requested by at least one regulation (Article 33 of the GDPR).

That's clearly not even half a week.
The desire to own large quantities of precious metals is definitely no more legitimate than the desire to own cryptocurrency.
But the development pace is way lower, it takes longer to switch to the next level.

So they can not simply do better the next time around as they did before. Or maybe they can but it will take longer until that happens.
> If the UK doesn't put up a border then it is the EU that is causing a problem.

The UK is leaving the EU, borders are implicit in that, and bi-directional. You don't get to leave the EU and not leave the EU.

Can you cite the Poland/Russia thing? I searched but couldn't find anything. edit You referenced https://en.wikipedia.org/wiki/Poland%E2%80%93Russia_border in another post.

> Because Kaliningrad Oblast is small, homogeneous and an exclave within the European Union

That's not the same as the NI situation.

Regardless, the EU is negotiating in it's best interests, as anyone could predict it would. If I were French or German or whatever I'd want to get the best deal possible in the negotiations. No-one is going to give us any favours here, everything we want we've got to make happen ourselves. If the EU is using the Irish border as a bargaining position then that's what they should be doing, in the best interests of the citizens remaining in the EU.
First, the "cheating!"

- family and friends helped us with food prep and photography
- in-laws donated food and some drinks
- family friend made us a cake and other baked goods
- borrowed chairs from workplace
- in-laws provided a venue for the after party (their house!)

Now, the expenses

- #1 expense was the officiant
- rented a park pavilion on a hillside overlooking a lake ($125)
- alcohol and drinks
- flowers (low cost) and decorations (local party store)
- some homemade decorations
- custom table gifts

We got lucky on the weather (that's my superpower) - a perfect, dry 80F day. The wedding ceremony was under a tree with chairs for the immediate family, and only lasted about 5 minutes. The reception was in a nearby pavilion with additional tables and chairs added.

We didn't have alcohol at the park - we migrated to my in-laws for that.

Any downsides?

- I wouldn't have minded having someone with DJ experience there to keep things on schedule, and get people dancing
- Along with the above, I would've liked to move to the after-party a little sooner. Drinks help people loosen up ;)
It becomes spin when several stories are floated in order to erode confidence in the company. Musk's accusations were that much of the negative press was coming from shorts or competitive rivals, wether that be energy companies or car companies. The truth for me lies in between.
My opinion on the long term potential of China's short video platforms has changed completely in the last three months. Used to be high on it, but now I think it's useful but not to this hyped up level, not even close.

The majority of videos on Douyin belong to one of these three categories,
1, girls putting on crazy amount of makeup staring at the camera or lip syncing. The platforms's software are often used to make the eyes larger and legs longer, to ridiculous degree.
2, cats, dogs and other pets,
3, tens of thousands of people imparting universal wisdom to you on how to get rich quickly, become a skillful pickup artist or life guru, etc.

Other than these three types, there are very little left. Of course you may find it differently. But IMO shortage of quality content will be a big problem going forwad for these platforms. In general most people in every country don't have the skill to produce videos of good quality, coupled with China's tight control on what can be shown, it's becoming suffocating for creativity. For example comedies or poignant news commentaries are very rare. A lack of respect for intellectual rights is still a problem in China, endless copying and pasting and boring and fake stuff. Anyway, content shortage is a problem everywhere, but it's just terribly bad in China.

Also, unlike say Facebook or Wechat, these video platforms lack the relationships between users that keep people around. Sure you can leave messages on Douyin but there are basically zero long term interactions going on. People on Douyin always tell others to meet at Wechat or Weibo or other places. Douyin is simply not made for social networking, and I don't see it can change that.
Well, yeah, but our perspective is the only one that can possibly matter for us. There may be unicorns and leprechauns out beyond our light cone for all we know, but what possible reason would there be to care?
Sure the SEC, does not have broad enforcement powers but most federal agencies don't.

The FBI famously chases down serial murderers, but they can't charge them with crimes either.

Most agencies have a police wing, but like most police, they refer your case to the DA who may charge you.

If Citi isn't charged here, then it's the DOJ at fault. They got the investigation report and chose not to act.
> The company is in the beginning stages of its investigation.

This is code for "this is much worse than we are telling you now, we just can't reveal it all at once".

I dislike Facebook as much as the next person.. but I have to say, Facebook Ads are a goldmine if you know what you're doing. It's not going to be that way forever.
Really? He smiled after he became a millionaire? Tell me more!
The risk profile is carried by the asset owner, not the person making use of the asset. I buy equities, fixed income assets and bonds based on my risk profile, not someone else's.
This is true of literally everything.

People don't upgrade their dependencies across the board, and it's a massive problem for long-term security and maintainability.
> Because Kaliningrad Oblast is small, homogeneous and an exclave within the European Union

That's not the same situation as NI.
Much of your comment history is hijacking HN threads to complain about Ruby and Rails. Not sure what terrible things you've seen in your days as a Ruby programmer, but it might be worth it to try and talk to someone about it and get it out and learn to deal with your trauma.
Fundamentally, the thing to do is to understand the N-th Fibonacci number as a + b, where φ^N = a + b * φ, where a and b are natural numbers and φ^2 = φ + 1.

It's not important to understand phi as a floating point value; we can just work in the abstract arithmetic where we've added to the natural numbers a new entity phi defined to satisfy φ^2 = φ + 1 (just like complex numbers are the abstract arithmetic where we've added to ordinary arithmetic an i defined to satisfy i^2 = -1).

Call these Fomplex numbers; a Fomplex number a + b * φ amounts to just a pair of natural numbers, and it's easy enough to add and multiply them with natural number arithmetic. To calculate the N-th Fibonacci number, just calculate φ^N and add together its coefficients, as noted. As for how to efficiently calculate φ^N, use the usual addition chain approach to exponentiation (e.g., "repeated squaring"), thus getting a result in Θ(log N) many additions and multiplications.

This is incidentally the same as the matrix approach, essentially, but perhaps a cleaner perspective on it; at any rate, it is a way of thinking which will serve as a useful tool in your back pocket for other general problems about linear recurrences.
I once obtained a ruler that was given in decimal feet. That was a _weird_ day.
Just because a company's leadership dislikes Trump doesn't mean they'll ruin the integrity of their product.
Elon Musk Charged with Securities Fraud
Is that market large enough in America to hit a critical mass?
I feel this is comparing apples to oranges. Computing platforms supporting a new runtime is less about porting existing code, but more like adding a new feature to the code base. You really don’t see much “we port our app from framework/language version X to Y” articles anywhere, except for maybe Python 2/3. But that only generally happen for one version bump for a long time. Ruby (and particularly Rails) is really not doing as well as some of other players in this area.
I would read that blog. Provided that I get notified of it's existence somehow.
As long as there's an option, I'll use it. Unless they have made amends by screwing you out of $20 million, there's no reason to support this kind of behavior, even if it happened 8 years ago.

If they were children, why were they running a company? Why would anyone join a company run by children?
1) Only one recent example of thishttps://www.seattletimes.com/business/amazon/amazon-program-...

2) I do think it is possible, but it is much more difficult to gain those users back who have fled due to those issues. It would require a public shift in forum management style that openly acknowledges it's issues, which especially in a place like this would be hard because for the most part dang et al actually do a great job and the issues we are talking about are very nuanced...

2a) If you come to some conclusions on this I'd like to hear them too. Its something I think about often, and I'm yet to find some silver bullet. I tend to gravitate towards some mishmash of past techniques, for example, I really liked Slashdot mod system, where random users were given mod ability, and instead of just points, you could label something informative, funny, etc. I also think exclusivity can be a boon, so for example invite-only forums or some other exclusion method can naturally curate conversations, but on the flip side you will tend to keep otherwise good commentators silent that way. steemit's idea of monetization via crypto of good content is another approach... none of them alone seems to be enough...

One idea I've had that's technically challenging would be some sort of AI comment judge with preselected criteria, so let's say a commentor makes many logically fallacious comments, then that person gets a temp-ban.

Another has been just purely based on comment depth/length. If a user often goes in depth, a few one sentence quips would reduce their score-weight but they could still post, but another user who only does one line quips would get a temp-ban.

in short, I don't know, but whoever figures this out is going to be a big deal
The Problem with Digital Collectibles
> sin taxes

We call them "public health accommodations", now.
I sat and counted votes just a month ago. In order to cheat I'd have had to managed to destroy the votes sitting around a table with nine other people, none of whom I'd ever met before. The public, of course, is also welcome during the whole proccess. You can sit and watch the counting if you want to.
Can they sell them at a profit, or have they saturated the market now?
I heard they actually have enough inventory that they were doing same day deliveries and offering end-of-quarter incentives. That's great for customers, but not so much for a company that is not profitable.
Worth noting that GDPR requires 72 hours from discovery to disclosure; and whether Facebook's timetable matches these rules.
> subject of a suspicious activity report

OH come on.

Bank tellers file suspicious activity reports for any arbitrary reason. The only people these SARs ensnare are poor-ish people that accidentally structured a cash transaction and it looked like they were trying to avoid the $10,000 reporting threshold. I've read enough appeals court cases to see that it doesn't catch actual money laundering from illicit sources.

And with the real estate industry successfully lobbying Congress from an exemption to anti-money laundering laws, I don't think these wealthy people will ever be investigated from a "Suspicious Activity Report" since there isn't a legal framework to further investigate.
It is if Google wants DMCA safe harbour protections
Seeing as you asked... your website's terrible UX doesn't help. I just took a look and moved on within 30 seconds - a dated look and feel (that also feels targeted at primary school teachers), walls of text, broken links, no clear route back to the homepage to reorient yourself (can't click the logo), no clear waypoints to follow...

You only get one chance to make a first impression. I'm afraid the first impression I got means I'm unlikely to return. I suspect the same applies to all those who took a look in March.
I would take that warning with a grain of salt. You're talking about the main underlying framework upgrade from 4 years back to today. Take any MVC framework that powers your entire system with a 4 year upgrade gap and you'll end up with the same type of debt.

Also you're measuring effort in "X number of months" but as the article states it started as a hobby side-project for a few engineers. There is no notion of how much effort it actually represented. Heck I could need 5 years to upgrade from angular 1 to angular 2 if I put in 30 secs per day...

I would actually advocate for a framework that's past its prime/hype period over any newly untested hyped framework any day.
This seems...a little unnecessarily pedantic. It's an example of a well-known URL obfuscation technique -- we all understood what he meant.
What 61,000 hidden structures reveal about Maya civilization
Honestly, we the lesser mortals do not know what goes behind the closed doors when cheques like $1.5 billion are written.

People said the same thing when Microsoft valued Facebook at $15 billion. Now, in the hindsight, it seems so funny that people frowned upon those valuations.

Power of having many consumers engaged on your platform is too much in digital age.
they havent monopolized talent, they pay for talent. Facebook paying high salaries has increased all of our pay, equity etc, whether you work there or not. The only thing this may be bad for is founders who are in a zero sum competition with FB for talent and now need to spend more money and equity to get it.
HSTS and Certificate Transparency, yes. Certificate Pinning is too easy to shoot yourself in the foot with, so it should only be considered for the most sensitive sites.
So here is a question: my girlfriend only uses FB on her laptop, and always logs out when she's done. I usually make fun of her for doing this.

But does this mean most of the time that there was no active access token and she is mostly safe? (Excluding the windows of time where she was actively using FB) Do I have to take back all of my teasing?
And was a manga first. It actually was the one that came mind when reading the article. It's the perfect example of an old sad salary-man gaining supwerpower and rescuing the world and beating some sense into the ignorant youth. Because rule of thumb for japanese productions is that the main characters are reflection of the main target group.
Sadly this will probebly not be a RISC-V chip. But hopefully they will go in that direction eventually.

I hope it will allow me to use coreboot with heads.

Anyway, I love whay they are trying to do.
What dynamic language is easy to refactor? I remember the "good" old PHP days and I can't say it was easy either.