skysight-inc/HackerNews huggingface dataset:
I'm confused by these stories, mostly because a standard dealership would never treat you this poorly.

If I gave money to a dealership and they didn't give me a car within a few days of my delivery date, I'd cancel the check and buy a car from some other dealership.

Sure, people don't like playing the dealership game, but the fact of the matter is... you have options. There are other dealerships you can work with if your current one becomes abusive.

-------

I think about the Tesla model of sales and I see these complaints like yours here and there. But I just don't know what kind of recourse I'm supposed to do in that situation. Especially if I set my mind on a particular car.

It could be that effect where the complaints are heard loudest (very few people post online when things go fine... the main people who complain are the people treated poorly). But still, I wouldn't know the strategy for dealing with Tesla sales issues if I were a hypothetical buyer.

This is a major issue with the $7500 credit on the line. If a M3 buyer orders today, but gets delayed like in your case, they'll effectively lose $3750 credit... AND the credit will be delayed to 2019 taxes instead of 2018 taxes. That's a huge difference.
Dell XPS trackpads are better than MBP, and plus if you get the developer edition you still get Linux.
That's why all good deeds must be done anonymous :)
Does a user with a deleted account qualify as an impacted user?

If they still store some user details (which it seems they do) and then this leaks - absolutely.

What about those who have never been users yet Facebook stores plenty of information about?
I feel like the modern OSes have all developed a two-layer storage paradigm, where, from the kernel and base-userland's perspective, you just have an ordinary filesystem; and then, from the Desktop Environment's perspective, this filesystem gets combined with a content indexer to derive a more database-like system that tracks "documents."

And documents themselves can be databases (e.g. SQLite3 databases) in a way that's understood by this same database-like system, such that there can be a vertical integration between changes to "documents" that happen through Desktop-Environment-level APIs, and events elsewhere in the system.

(For example: the interaction in macOS/iOS between Core Data "documents" and iCloud. If you have a KV-store-typed Core Data "document", then iCloud backs it with a KV-store on its backend, and syncs changes between your KV-store and the cloud KV-store keywise, rather than just re-uploading the entire document whenever it changes.)

From a userland perspective, it's a bit hard to understand why these abstractions haven't been "pushed down the stack" into the base system, such that even POSIX utilities can see and deal with "documents" as a whole.

But from a systems-development perspective, I think I understand why it hasn't happened—modern OSes are developed from the inside out, in a way where development on the kernel or the base-system usually involves stripping away all the complexities of the higher level. A good example of this layering is Android: there's the Linux base-system, and then the Android runtime on top.

People who need to develop new kernel extensions for Android devices, need to work on them "at a Linux level", rather than trying to figure out what's going on by peering into the Linux part of the stack from the Android-runtime part of the stack. When they're doing that, none of the Android niceties are available. If the whole filesystem was vertically integrated such that you didn't have one before the Android runtime successfully booted, that'd be really annoying in this case. A filesystem is very useful for doing this kind of development. (Picture if Linux didn't have the initramfs abstraction—if, before the real root filesystem was mounted, there was just no filesystem at all, and so no POSIX userland utilities to rely on. That'd make developing a boot process much harder.)
Quick note to agree that CA 1101 and 1102 are impressive. They date from 1937. They protect everyone, and were used in a well-known case "Gay Law Students v. Pacific Telephone & Telegraph" (https://web.archive.org/web/20171110205448/https://www.washi...). They are exceptional as you note, in being relatively clearly written. Bring back the 1930s era legal standards!
I mean, we can break out luck to be all the various factors. But it can be summed up into one (for the purposes of this discussion). And each of those will still have some mean that they tend toward. The weather, outside San Diego, isn't going to be perfect year round. Your relationships (impacting mental state) won't all be rosy. Your sleep can be interrupted by a neighbor moving in at 3am. Though that last one is atypical. And if it happens, and your race time is 8 minutes instead of the average of 7, you should still expect to be closer to 7 the next race barring similar misfortune.
GiveWell – Charity Reviews and Research
Look at its correlate locally: forcing everyone to have a degree even to work at Enterprise car rental.
Its yup now.
that's what it claims, but that is the only way to make sense of "particles are epiphenomena" + "Thus the Schroedinger
field is a space-filling physical field whose value at any spatial point is the probability amplitude for an interaction to occur at that point."

it is saying that the only thing that exists is the quantum wave function

the only theory with a hope of credibility/coherence that says the only thing that exists is the quantum wave function is many worlds.
Try out brave or vivaldi. Getting good reviews. Also try ungoogled chrome.
I check labdoor every time I'll get something relevant (protein powder, chocolate, multivitamin) as a psychological reference, but I can't find any convincing evidence why labdoor should be more reliable and correct than the labels on the products. Do they publish their methodologies? Also for some product types all products fail California heavy metal regulations, and they just give everyone 0 points, instead of publishing exact amount of heavy metal in products. Like, I wanna know if I'm gonna get mercury poisoning if I eat two servings, or is it just above the threshold and should be safe...
That's the weird thing, staffing wasn't too bad. There were people around most of the sales posts. Good luck finding someone in the aisles though.
The volume of ever-changing and contradictory advice about dieting is maddening. The only dieting advice I truly accept these days is the First Law of Thermodynamics. In context of dieting, you could state this as, eat less (calories) or exercise more (joules) or both, and you will lose weight. Absolutely guaranteed by a fundamental law of physics. Yes, it's very hard to follow this rule, but for me at least a simple rule that is guaranteed to work is much better that complex rules and theories that inevitably turn out to be nuanced, dependent on particular genetics or environment, or plain wrong.
It's fascinating how self-contained binaries are now coveted as such a desirable feature. Dozens of languages (if not more) were capable of this decades ago. In fact, some of them could generate self-contained binaries that allowed you to bundle app assets like icons and images inside the executable - no additional add-ons needed. And they were native executables, not complicated wrappers with layer upon layer of different technologies.

This is not to take anything away from this project, just making an observation. The programming field often feels like it's in a giant loop constantly re-discovering what went before.
From the article

Although researchers have previously proposed explanations for the rule based on hydraulics or structure, none of these explanations have been fully convincing. For instance, the hydraulic explanation called the “pipe model” proposes that the branching proportions have to do with the way that vascular vessels connect the tree’s roots to its leaves to provide water and nutrients. But since vascular vessels account for as little as 5% of the branch cross section (for large trunks in some tree species), it seems unlikely that they would govern the tree’s entire architecture.
> The idea is that conducting more malicious activity is generally easier to spot than conducting less malicious activity and trying a wide range of exploits is more likely to be noticed than a smaller, possibly more targeted exploit.

I understand the idea, I just think some assumptions that go into it are wildly unproven. I would think you're just as likely (if not more likely) to be exposed through a high traffic site that is dangerous for a very short period of time than a low traffic site that's exposed for a longer period.

E.g. if nytimes.com is exploited, there's probably a window of minutes to an hour before it's noticed and fixed, and the fix make take as long or longer to happen than the first notification of a problem. In that scenario, the amount of time unnoticed reduced by stacking every exploit you can think of is fairly minimal, and it likely doesn't reduce the time to fix after notification at all.

So, if this assumption any less possible than yours? The only difference is that whether my scenario is right or wrong, it promotes behavior that doesn't leave you more vulnerable to exploitation by random sites, while for yours if you're wrong (and you act on it, as you are) it leaves you more vulnerable.

>>...Because to me it seems likely that there are blobs of JS that look for a wide number of vulnerabilities floating around...

> I browse with Javascript disabled.

Okay, then image library exploits, or css parsing exploits, or any number of other things. For example, ambiguously listed stuff like this[1], or this[2] or this[3] or this[4]... or how about I just point you at a bigger list[5] (code excution exploits for Firefox reversed by date, with severity rating over 9. There are hundreds). It's not like Javascript has been the only attack vector of the last few years. I have no idea how many of these affect that Firefox version. My guess is it's more than two or three.

1: https://www.cvedetails.com/cve/CVE-2016-2807/

2: https://www.cvedetails.com/cve/CVE-2016-2806/

3: https://www.cvedetails.com/cve/CVE-2016-2804/

4: https://www.cvedetails.com/cve/CVE-2016-1945/

5: https://www.cvedetails.com/vulnerability-list.php?vendor_id=...
This is exactly what I was thinking... but maybe I have a narrow view of what "bootstrapping" is?
Occasionally I see a car with the window down, that someone appears to have parked and left mistakenly accessible. When I was younger I'd have opened the door and wound the window up (checking for pets and other occupants obvs). Now, I leave the car alone because if someone comes back at the wrong moment it just looks like you're breaking in.
This is basically the equivalent of the "why does it matter what programming language you pick as long as it's Turing complete, which means you can do anything with it" argument. Losing weight by eating a donut and starving yourself is like writing a web application in brainfuck.
Simply put, they never checked?
It is straight forward to compromise the BMC, it isn't straight forward to hide a backdoor in the BMC in front of some of the best security researchers in the world. Especially with such attack being well known and seemingly trivial to check for.
Passwords are Obsolete: Passwordless authentication (2014)
It depends, in the cases that they ask you for the answer you have control, but sometimes security question like things will just end up being personal data queries like "To what address did we send account statements in June of 2016" and if a bank (or whatever) asks questions like that to confirm identity over the phone there's no way you can compel them to do otherwise, short of taking your business elsewhere. Techniques like asking them to add a note to your account or flag it as locked... those only work if the CS people read and obey them, often times social engineering attempts will re-dail CS lines until they find someone who is tired or generally sloppy and get them to push the change through.
Consider children of immigrants. Look at the ones who are tall, taller than their parents. Are they tall because they got good nutrition, etc.? Many people supposed that they have natural tallness genes and their parents were only shorter because of tough times in the old country.

Now look at their children, the grandchildren of the immigrants. They tend back toward average.

The tall kids were tall because, in part, there is a natural variation and they happened to get on one side of the bell curve. Luck, if you will.
I use 1Password but it's not fool proof. I did fake answers for a business account then promptly forgot about it and locked myself out of the account a few months later. But yes, this is the best way to do it by far.
I am not super concerned about seeing the physical car ahead of the order: I know the dealer can be held responsible should there be undisclosed damage. And I probably have already sat in the model of car I'm interested in long before I've bought one.

The biggest thing is the unholy horror that is negotiating with car dealerships. How do I negotiate with a website? If I am not negotiating, am I getting as good of a price as I would have if I was?

Additionally, I need a really simple/straightforward layout of what is or isn't included in the price and financing terms. Too often I had dealers focusing on the "monthly cost" while de-emphasizing the total cost, term of the financing, etc. That went not just for the car itself, but the add-ons like extended warranty and what-not upsells.

I want to see the total cost of the car (as negotiated), the total cost of any add-on features, and the total cost of the financing package selected (interest over the term), and then the monthly cost of each over that term below it.
One of the main challenges is that you don't just make a PeerTube account and start uploading. You have to somehow get hosting for your videos, don't you?
Don’t forget Shannon’s 1937 master’s thesis, A Symbolic Analysis of Relay and Switching Circuits.
Compress scientific papers.

Thank you for the pointers!
> Google might, in the sense that they could start, but Google doesn't do (and never has done) what is described.

Yep, this is the point where it shows that the author has no idea what this is about. The entire case of the GMail-reading outrage was around the fact that the user had explicitly allowed that the 3rd party app read their emails.

Sure, you can argue that you clicked by accident, or that Google shouldn't even allow it in the first place, but saying that the user did not explicitly consent, is bullshit.
You are free to move to a country with a low (or no) income tax rate. Monaco is great if you can afford it.
Sears Exit Would Leave Big Holes in Malls. Some Landlords Welcome That
Nice parallel with Iverson's 1979 Turing Award Lecture, "Notation as a Tool for Thought": http://www.eecg.toronto.edu/~jzhu/csc326/readings/iverson.pd...
Free Speech in the Age of Algorithmic Megaphones
You also need an undergraduate degree to sit for the Certified Strength and Conditioning Specialist (CSCS) exam.

Me, the operator and owner of a sports science company that does eight digits of revenue, cannot sit for it because I dropped out of an undergrad program. Yep. That makes sense.
It's probably not wise to move, but cross posting between YouTube and a personal PeerTube instance should be the route that content creators go at first.

Eventually with services like PeerTube, Patreon, Drip, it'd be nice if we one day saw more people in the general public not going to YouTube and instead to specific PeerTube instances to get their content.

I'd like to see YouTube turn into MySpace, and Google have to eat all their advertisement focus, false copyright claims, censoring content bullshit.
A Corporation who's entire business model relies on it is actively incentivized NOT to combat spam any more than absolutely required to minimize their own monetary losses as a direct result of the abuses. As long as they aren't held responsible for their users actions it's just eating away a revenue stream.

Capitalism!
Network News Transfer Protocol (NNTP)
Feedbro isn't open source, unfortunately.

Brief is atrocious-looking out of the box, but you can enter your own CSS to override the styling. I've been pretty happy with it for the last few years.
Depending on what the chip did, the CRC on a firmware image may not actually change. If the chip was just listening to the SPI lines to the BMC's load, it could just inject additional data into the stream. The flash chip on the board could be 100% legit, but the final image loaded on to the BMC might be malicious. Do you really CRC the entire BMC environment after boot, or just check the image when you go to update the BMC?
The last thing US education needs is further tuition inflation because now the government going to pay for everyone's $60k/year liberal arts degree.

I think there's a place for government-funded higher-ed, but it has to be for schools that can keep costs under control (most likely state and community schools) as opposed to what seems to be a cry for unlimited education spending everywhere that will only accelerate ballooning costs.

We should commend the private efforts like Berea does. That is a much better model than putting the cost burden on everyone.
I wrote stowage.org to do something similar, having a Docker runtime (which stowage _does_ have) is actually pretty neat in a couple of ways because you also get a kind of basic package management for free. It's pretty nice for sharing dev tools amongst a team. Maybe these things don't have broad use cases, but I think there are a lot of solvable pains here.
Yes thank you! My apologies, I misunderstood the regulation. The article reported it as a ban, and I thought that meant they were no longer allowed to be carried on board. AFAIK actually using them has been banned for awhile? But perhaps it was only de facto banned.
what's interesting for people with an non-xenophobic eye, is the contrast between the students, those whose parents or sponsor paid for everything and those who are really trying to turn their destiny around.

It really mimic the American side of thing with the prep schools, the legacy admission, the fraternities vs the first gen students or even the students born in a reservation.
As a kid with a newspaper round I set up a bank account and didn’t know what it meant when I was asked for my mother’s maiden name, so made up an answer. Accidental security.
It is a hard problem.
Yes, that is (mostly) true.

The App uses ipv6 link local addresses (fe80::.. + mac address). But it also tries to make use the received IPv6 network prefixes. Also, the last contact address is stored. These approaches improves the probability a bit to find the contacts in other networks.

As a side note, many mesh networks are emulating a layer 2 network. With this, everybody can build up their own decentralized telephone network.
I haven't seen that library, but a HN comment chain from last July[1] (nailer's reply in particular) almost certainly planted the seed for this.

1. https://news.ycombinator.com/item?id=14871580
I think its fairly well known that there are flaws in Javascript which was designed in a week and hows its used (DOM etc). The ease of its use probably lended to initial success, but the difficulty of making complex secure software has led people to reinvent the wheel it seems every 6 months.

I don't think having a polluted and bloated ecosystem like NPM is a mark of a success of quality. Just look at what happened when someone deleted their project from NPM - they broke the internet...

https://qz.com/646467/how-one-programmer-broke-the-internet-...
Oh come on. Mass blackmail, that'd be pretty cool. Or models trained on our behaviour, subtly affecting the market to make us do silly things purely for the enjoyment of some accidental bitcoin millionaire, never detectable by governmental or human-intution anomaly-detectors because all effects are below the noise level. Something cool like this must be going on somewhere, and I want to read a (non-fiction) book about it.
Rand also paid into social security (and taxes) for her entire life. She did not go out and seek social security, she had to be thoroughly convinced by her lawyers, after much arguing, that she deserved the money because it was essentially hers, and only when her husband became seriously ill. She didn't end up making a decision to take it, she left that choice to her lawyers.

She eventually took $11k over 8 years from social security until she died....which isn't much at all (about $1.3k/yr, hardly a 'living wage' as people on the left like to say).

Quite a big difference from 'depending on the state' or 'capable people leeching off of other hardworking individuals' as she despised. Regardless she lived in the US, not in her idealistic economic system. Expecting her (or anyone) to live perfectly like they would in their fantasy ideal political/economic system is a ridiculous standard and dismissing all of her (flawed) work because of it is a no-true-scotsman-esque fallacy.

I'm sure she would have preferred paying into a private retirement insurance fund and people donating to private retirement security funds for those who weren't capable of investing in insurance themselves (which she most certainly was).
You want to have total transparency. It makes sense.
The "secret" of the industry is that dealers are not in the car selling business, they are in the financing business.

Currently there is a lot of asymmetry of information between the dealer and a consumer. How do you know that the dealer is giving you the best offer from a lender vs. a bit worse offer from a lender they have a relationship with?
True but not relevant at all to the current discussion.
The Facebook has the media by its balls.
I actually built my own extension for Chrome back in the day when I wanted to switch from Firefox to Chrome. It was modeled after Firefox Live Bookmarks. We've now come full circle and implemented an addon for Firefox: https://addons.mozilla.org/firefox/addon/feeder/
ICANN’s internet DNS security upgrade apparently goes off without a glitch
> This is the sort of thing that should absolutely be baked in at the lowest reasonable level.

It's baked into the kernel, if that's what you're asking.
I buy 4 and 8 packs of rechargeables and 20 and 40 packs of disposables. I handle the rechargeables a lot more, but there are certainly more disposables by count present in my home.
Check if your FB account among 14M hacked
Kickstart your sales,lists for your business
I had a friend in school that noticed that fresh new batteries are much softer than old dead ones.

All of his devices had batteries with bite marks in them.
It took me until the actual API docs.
That's a bit odd, with weird system configuration you'd still be able to inject a bad .dll or .so as a priority shared library. I don't know why you wouldn't just prefer to bundle all the function references into a single binary blob.
This is surely true, but the US can and does cover certain medical expenses as part of Medicare/Medicaid. The political obstacles are much harder to overcome than the logistical ones.
Trump signs bill that ensures music streaming services pay artist royalties
Related: https://en.m.wikipedia.org/wiki/List_of_political_catch_phra...

E.g: "Education, education, education", this was how Tony Blair set out his priorities for office after winning a landslide general election in May 1997.[182]

That's the kind of priority that would diminish my mysantrhopism.
Whether nicotine is harmful seems to be under debate:

https://tobacco.ucsf.edu/cdc-publishes-more-evidence-nicotin...

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4363846/
If anybody is thinking about Java, check Graal out. I was able to successfully create fast, completely static ELF binaries of real JVM applications from fat JARs (not in the fake self-executable archive way).

It's still early days in terms of what's available in the runtime (e.g. the AWT subsystem is missing), but it's pretty damn impressive anyway.