skysight-inc/HackerNews huggingface dataset:
There is a less favorable reason you are right. Cars are getting more expensive and people can't afford them even with ever lengthening loan lengths...
Testing Your Tests: PHP Mutation Testing with Infection Framework
It sounds a bit like the GT Advanced situation.

Apple starts a relationship with a company, the deal becomes the VAST MAJORITY of the company's revenue, the company wants to get out of the buisness of being an apple supplier, because IF they scale to that size and lose a contract, they have huge cuts to make. So apple comes in, buys a substantial part of the company, and now the company can continue to operate without fear of downsizing. Any downsizing will be apples doing not theirs.
I even wonder why they insisted on it so much.
That internal doc is rather close to the article linked here, though I notice this piece of the rationale didn't make it into the public version:

« Additionally, we are working on various initiatives that operate in the same area of focus as RSS/Atom feed support, like Pocket [...] »
If your home had a ruptured pipe, that was spraying sewage all over the sidewalk, I think someone stepping onto your property, and turning the firehose of shit off would be behaving ethically.

Trespass to save people from themselves is one thing. Trespass to save the public is quite another.
Unless I'm horribly misinformed, the Google breach is absolutely nothing like the Facebook-Cambridge Analytica deal. CA got huge amounts of information about users. The G+ breach just gave out contact information.

It's similar only in that it unintentionally gave out more information than it was supposed to. Beyond that, they're not similar at all.

I get that we shouldn't give Google a slap on the wrist because it's "not as bad", but we absolutely should not conflate the massive breach that was CA with this.
No, because it incentivizes the company "not to look very hard" for evidence of abuse.

A company can claim EVERY bug was never exploited, and nobody can disprove them.

There is an inherent conflict of interest there.
> So what do you say about the idea that it creates a disincentive to find security issues...

If a company is disincentivized to look for security holes because it's highly likely it will find them; that company is on the fast-track to failing.

> If they did an adequate investigation, using a 3rd party service, and found no evidence of my data being accessed by a 3rd party

They found no evidence of data being accessed, but they also don't share how this particular system tracks data that is accessed. This system was vulnerable for 2-3 years. What if you left your car at my house and you found a dent on it, but I claim that I didn't have any security footage of someone damaging your car without mentioning that I don't actually have security cameras.

> I'm willing to bet your service has security holes in it...

You're right, and it I find that my NTP service is exploitable and anyone can DDOS me I'll fix it and move on. There's no need to disclose that I'm an idiot when it doesn't affect other people. But when I accidentally leave my servers mis-configured and my API unprotected against unauthorized access I would make a post about it. We're not talking about an arbitrary vulnerability that lets people echo hello on a Google server. They left data exposed. I would like to know if it involves me.
> Why do you wish that you had bought the house despite accurately predicting and waiting for the downturn?

Because in the UK prices didn't fall, but the requirements for purchase became significantly more difficult.
The way this article is written is very off-putting.

For instance, "We run around chasing our kids to eat cookies and drink juice, and then wonder why we have a childhood obesity crisis. Good job, everybody, good job."

I am not sure if I understand this: "The median daily intake duration (the amount of time people spent eating) was 14.75 hours per day. That is, if you started eating breakfast at 8am, you didn’t, on average, stop eating until 10:45pm."

I certainly spend may be 1 hour eating everyday including breakfast, lunch and dinner.
It feels less inconsistent if you put it like this: every call unveils, but the first one also veils.

Or: every call does the following two things. (1) It ensures that a veil is present. (2) It makes a hole in the veil at the location provided.
I was perfectly fine with this right up until I clicked through to their support page, which pushes Pocket as an alternative. How can they claim to support open standards on the web and lower maintenance overhead while still pushing their bloated built in centralized service that is very difficult to turn off entirely even though it should just be one button? Get rid of RSS and link me to an extension when I open a feed, fine, but then stop shipping Pocket without giving me a way to uninstall it as well.
> I'm a security researcher and I discovered that your server has been compromised. Click this legitimate link to learn more.
What I do in my emails is tell them the exact URL of the bad page. All they need to do is look at the file with a text editor (they are admins, after all). Once they have done this, they will see strange Javascript. They will know it has nothing to do with their own (or their clients) web pages. There are no links per se in my email (except the URL, but I leave off the http:).
It does not capture events as they occur. You can't do a 10Tfps recording of a lightning strike with it for example because every lightning is different. It only allows you to synthesize an averaged video of repeatable events.
They wouldn't trust the sender they would assign a dev to inspect the referenced file, decision making would start at that point.
You can use this for free under Apache 2 license for a personal non-commercial use. No licensing needed. You don't need to pay us a penny as long as you don't make money off it.
Uh, that also sounds kind of entitled.

I think people talk themselves out of easy solutions. If you really want to have children, there are plenty of ways to go about affording that decision. It's called "making a sacrifice" which I watch a lot of narcissistic types having problems with. Maybe learn some Zen? Take your ego out of the equation and see where it takes you.
Should we really be giving Bloomberg our traffic when everything points to them fabricating information in the Super Micro supply chain article?
Calorie restriction is probably the most important aspect of short term fasting of the sort achieved by eating only in some parts of the day.

Animal studies show that isocaloric intermittent fasting, altering eating schedules, to e.g. alternate day, while still ingesting the same amount of calories, do have benefits. Those benefits hit many of the same areas of metabolism as calorie restriction, but are still significantly different in their overall operation. They are also not as effective at extending life.

Time spent being hungry might be a good metric, but even that is overly simplistic. Grehlin has all sorts of regulatory connections throughout metabolism, but you can't point to any one thing. All of these dietary changes, less calories or more hunger, cause sweeping changes throughout metabolism that are not well understood as a whole. Cause and effect and which parts are important versus not is very much open for debate for any part of this system.

Further, fasting (or fasting mimicking) for longer periods is clearly a different beast from just rescheduling a few meals. In humans fasting for 72 hours or more results in very different outcomes for immune health than anything less than 72 hours. The longer fast kills up to a third of the immune system, which then repopulates when the individual starts eating again, and thus has very beneficial effects in people whose immune system is damaged or dysfunctional in some way (e.g. as the results of chemotherapy).

Similarly these longer fasts produce changes to insulin metabolism that last for months after the fasting is done, which is not the case for fasting in the rearranging a few meals sense.
Hvad er dansk avisen? Min dansk er meget enkel, men jeg kan købe det et par gange om året.

(I think double-checking with Google Translate made this worse; now I'm just confused.)

What's the Danish newspaper? I might buy it very occasionally, and puzzle through with a dictionary.
I think I've come full circle on this...

(I was one of the creators of RSS).

My current company, Datastreamer:

http://www.datastreamer.io/

Provides social media data streams for companies and search engines wanting full torrents of web content.

We deprecated RSS a LONG time ago, which was for me, like abandoning your baby.

I think RSS is dead in many ways but it's also still around in a sense.

Mostly because of Twitter and Facebook metadata. You can accomplish 90% of what you want with RSS just by parsing the metadata on an HTML page.

Because we've added NLP and content extraction algorithms on top of the content we're able to re-construct feeds that are better than the original RSS.

With another app I'm working on:

https://getpolarized.io/

I might actually use something similar to build in data feeds similar to a feed reader.

But man.. I can't believe I'm thinking about building in a feed reader again :-P
There's a scale from "there's no evidence of abuse and if there had been abuse we're certain we would have seen evidence" to "there's no evidence of abuse but there's no reason to suppose if there had been abuse we'd see any evidence".

Companies tend not to be terribly good at articulating where we are on that sort of scale.
Wonder why that would be, tls.ulfheim.net is a CNAME to ulfheim.net, they're just different apache vhosts. Same cert (using SAN).

The only things I can think of:

- it doesn't like the hostname (tls?)
- the hostname is new, and has no reputation
- too much h4cking content
> At which point why not just stop being proactive?

The attitude that absence of evidence should be treated as if it didn't happen leads to exactly that conclusion - that it's better to not be able to tell what's happening.
We do support Windows!
10 Essential Elements of an Amazing Music Blog – The Blogging Musician
We can continue in sense things that benefit us we claim ignorance about that is made possible and provided for 'free'. But deep down I think people will know that something gotta give even if technical/legal/marketing copy says it is all free.

It is same thing that people here consider those half million salaries normal in valley without honestly thinking how this is made possible in first place. For them its cutting edge machine learning work etc, is a good enough answer.
The Forbes article was 100x more informative. The mods should IMO swap out the link..

I've shared that link with my "Family" WhatsApp group (there's no chance I'm getting them onto something else though..)
> Do you really want that every single company releases notifications that roughly every single of their systems were vulnerable since the day...

I'd love for that to happen. Maybe then everyone will start to pick up on the fact that all of our computer systems are insanely insecure.
Proponents of epistemic approach do not think so.

> their result does not rule out any position that is seriously held by any researchers in quantum foundations.

http://mattleifer.info/2011/11/20/can-the-quantum-state-be-i...
Black churches, medical scientists, and the Nobel Prize for Medicine
Or, maybe, a new team.
BTW, Picovocie runs on RPi (all variant not only RPi3).
True, and it can easily be exposed and made airborne by by accident. For example, many HVAC professionals are unaware or unconcerned about the asbestos fiberboard panels that were often packaged around register boxes until the 70's. These boards are fragile and will readily shed fibers into the air.

Same goes for old ceiling panels, often loaded with friable asbestos. An act as simple as drilling a hole, or installing new can lights can load up the room with airborne fibers if done carelessly.
It wasn't an internal system. It was discovered within Google (internal as it was used originally). The wording is accidentally confusing.
From first to last bite is 14.75 hours
It’s widespread gain for widespread harm, let’s just make that clear.

The loans people take out on their homes, the insurance on their cars and homes, and more tangibly, the companies involved in getting them the food they put on their tables for pennies on the dollar in raw value.

We’re all in on this. Just because you don’t get a yacht out of it doesn’t mean the system doesn’t benefit you.
Stay tuned. We will add two more repositories (1) speech-to-intent (2) speech-to-text
The author means time between first and last food intakes of the day, not total time spent eating.
Similarly, unsolicited help with computer infrastructure can land you in jail under CFAA. No good deed goes unpunished.
I appreciate that, thanks gents.

~~scribbles down note to update and release a 2nd edition of book~~
> As for MikroTik, the Latvian company has been one of the most responsive vendors in terms of security flaws, fixing issues within hours or days, compared to the months that some other router vendors tend to take. It would be unfair to blame this situation on them. Patches have been available for months, but, yet again, it is ISPs and home users who are failing to take advantage of them.

A system that requires users to opt in to security is not a secure system.
Sure, it makes sense to the actor himself.

But to an external observer (say, who's going to the same destination) such choice does not follow common reasoning (arriving at the shortest).

Gains of such choice are intangible (indeed personal satisfaction is subjective). At the same time, the 'loss' is very specific and measureable (extra time, fuel etc.)

Thus in the context of a common measure such choice could be seen as irrational, especially when a rationally optimized choice is equally available.
Bacteria use chemical signals to communicate such conditions, they do not exactly work as single organisms any more than one of your cells do. They form colonies.

Might be that humans also are a kind of colony organism if you squint just right.
That's incredible. How long did it take to write 0.5s of data to disk? I'm guessing there's no way to sustain this as you'd be so far behind after only a single second. I'm pretty sure we can still only store a few gigs per second. Please correct me if I'm wrong. Very interesting though!
Legally, we're consenting when we agree to the terms of service.

If we didn't know they were doing this we might have a legitimate objection that the ToS are abusive, but that argument is far less compelling if we know they're doing this and agree to the ToS anyway.
Link to the go source: https://golang.org/src/crypto/tls/
That's because ML is given a model to fit to the data, so it'll find the best fit, even if the model doesn't represent the data.
People have certainly attempted to cobble something together using different pieces on Linux, but the semantics will never be truly perfect unless a native implementation is attempted.
Hubris and an unshakable belief in Ayn Rand...

http://evonomics.com/the-ceo-of-sears-jon-haidt/
It's not an unpopular opinion, it's the opposite of disclosure. It's not an opinion, but a different ethic in the vein of "no-disclosure".

Who discovers it or if you can prove it was abused, is not relevant to the security issue.
Just start bricking them. It's a public service to the internet as a whole.
I've given this one a lot of thought. Ordinarily, you're supposed to pay tax on the fair market value of goods and services received in return for your labor in barter transactions.

However, East Wind is incorporated as a 501(d) organization, which is what monasteries use.
For more info on 501(d) orgs: https://www.irs.gov/irm/part7/irm_07-025-023

I can't find anything specific, but I think that since they share their income and produce as a collective, they're only liable for taxes on their share of the income that the collective produces. Monks don't have to pay taxes on the value they get from the monastery vegetable garden.

Tax avoidance is a time-honored American tradition. This is one way to do so. It sounds like they've done their legal homework if they've managed to survive 30 years without IRS trouble.
> My impression of the issue is that most people simply don't care.

This is my impression as well, and I find it a bit of elitist arrogance to tell them they should. Different people value their data at different levels and we shouldn't be so quick to make it harder for them to give it away if they choose. A simple question one should ask while picking up their pitchfork is whether their perceived righteousness is based on perceived stupidity by the masses (and whether the perception is based on some anecdotal evidence). And if you really believe stupidity is that rampant, you can set your law-making pitchfork down and advocate education.
> Is it possible that they (perhaps mistakenly) believe that communicating with you could open them up to civil liability?

I'm curious, for vulnerability-by-inaction like this, would there be a legal difference if sent emails were posted to a public blockchain?

The intent being, if you're later sued for harm caused by your compromised hardware / IoT devices, you cannot claim ignorance as easily.

End goal, of course, being that people care more about patching their devices.
Patch me daddy
I've heard that this was the default for these routers. I have a RB951G-2HnD using NAT, and, although I patched it long ago, as far as I can tell the relevant ports were never open on the WAN side, nor any ports that I haven't manually forwarded. Was that not the default?
The bill's name is too neutral to be terrifying, what would really send us running for the hills would be something like a Protect and Serve Musicians for the Greater Good while Supporting the Interests of the Public act.
Radicle: first component of oscoin's p2p stack
Property and contract rights are flexible. There is no requirement that every sale transfer unrestricted ownership at a fixed price. Selling things with conditions, selling fractional ownership, etc., is perfectly acceptable, so long as the seller is up front about the terms. And the buyer, having notice of the terms, absolutely is obligated to adhere to them if they go through with the transaction.

Not only is this true morally--you agreed to the deal, you should be bound by it--but it's economically efficient. It allows mutually beneficial transactions to happen that otherwise would not.
Even libertarians would have issue with that definition when you try to say that you consent to the government's laws by continuing to live under the government.
> "We run around chasing our kids to eat cookies and drink juice, and then wonder why we have a childhood obesity crisis. Good job, everybody, good job."

I literally have seen this happen, where parents chase their kids around cookies and Juice in hand, Literally.
... which many people are.

What's your point?
Also mentionned in Legend of Galactic Heroes by Yoshiki Tanaka. The founder of the Free Planet Alliances escape from its prison world by using ice asteroids as vessels for interstellar travel.
> "If it doesn't hurt, it isn't a strategic decision."

I can't help but feel that's a silly quote. There are plenty of strategic decisions that don't hurt (especially choosing between two future directions, neither of which you have sunk costs in) and plenty of decisions which hurt and so you want to justify them as being strategic... when they might just be bad strategic decisions, or bad tactical decisions.

Honestly the quote sounds like what a bad manager says when they make a decision employees are against, when the employees are actually better-informed.
Indeed, but the preview functionality was very useful for deciding whether to add a particular feed.

Couldn't an XSLT + XSL stylesheet achive most of what the preview function would continue to be useful for?
I see. So then this statement is not correct "The median daily intake duration (the amount of time people spent eating) was 14.75 hours per day.".

It should be "The time between first and last meal during waking hours".

"The amount of time people spend eating" statement is totally wrong.
> and more about how the overall state of the economy is not reflected in the lifestyles of the working class.

This arguably has a lot to do with understanding and owning stocks.
I'm currently running snips on a RPi 2 (Model B) and it's working so far so good! Not too sure about the original Rpi though. I'm debating on getting a RPi 3 to see if the performance is better.
The Lost Files of Sherlock Holmes
> Our economy is less like a cabal of fat cats twirling mustaches and puffing cigars at the thought of how they can further disenfranchise the poor, and more like an ecosystem.

An ecosystem with a cabal of fat cats twirling mustaches and puffing cigars at the thought of how they can further disenfranchise the poor sitting at the top of the food chain, sure.

One of the ways they do that is to assure that workers have a trivial stake in the same things that the rich depend primarily on, so as to provide a basis for propaganda misleading the masses about a shared interest.
I can "feel" the lag in the android experience and it's the same lag that I get from desktop apps written in java. It's not just FUD. Almost always when there's a memory-bloated application it's written in java. Hell, adk won't even run unless you increase the -Xmms setting to 4+ gb.

People rightfully pointed out that tablets are plenty powerful to do DSP type applications, but something is consuming all the resources. I'm just saying what that something is.
I really hate the general direction of how browsers are developed.

I've hated it for a while, especially as browsers move more and more away from "browsing" and become more and more of a half-ass "universal application runtime" combined with "something kinda like an X-server but not really".

I kinda think we need to split browsers so they support two "modes": content mode, and application mode (or something like that) where the core functionality of the browser is rendering HTML content and, well, browsing. But a given page should be able to signal (through a meta tag or an HTTP header or something) "I'm an application" where it gets run as an application... which could still mean running in the browser as JS, or it could mean handing the thing off to a content handler to run the application outside of the browser. In my vision, the difference between "application mode" and "content mode" would be things like: in "application mode" all keybindings would pass through to the application, so you could - for example - use F1 for context sensitive help, instead of F1 triggering the browser's help menu. Also, app mode could allow things like altering the right-click context menu, while content mode might disable that. Etc. etc.
https://blendle.com/privacy.html

> Blendle shows you articles your friends and more or lesser known fellow country-folk recommend, and can propose additional articles and subscriptions you might be interested in

> Finally, Blendle uses tracking cookies to keep track of the articles you've read, and to suggest articles you might enjoy.

> When using social plug-ins, third-party cookies are placed on your computer. These cookies can be designed to optimize your user experience, but they might also be tracking cookies. The latter are used to track your browsing habits across multiple websites and build a profile of these browsing habits of yours.

> Blendle may also use information collected through the use of Blendle to engage in “look-alike marketing,” which enables us to reach out to an audience, well, similar to you. We may use third parties to help perform or facilitate such marketing on our behalf.

So you pay them money and they still need your information. And you need to browse articles through their interface instead of naturally through the actual newspaper website. Actually worse than the status quo.
This talk has a nice information about circadian habits if you're interested: https://www.youtube.com/watch?v=erBJuxVR7IE