skysight-inc/HackerNews huggingface dataset:
> Still, he makes plenty of other good points.

Could you summarize, or mention a few? Because I struggle to see much of any merit to the article. It starts out with scare quote even in the first paragraph which is, if not just outright bad, criticized enough to be a faux pas in itself. It continues with rhetorically embellished opinions about the book, which most of us haven't read. Then presents a bunch of numbers that we again don't know if they are particularly relevant. Finally it spends most of the rest of the article discussing other theories that the author prefers.

I would expect an analysis like this at least partly present the theories discussed in the book in a relatively natural light to then discuss those theories.
If it’s to this point she needs to leave.
Can confirm that there is no residency requirement tied to this. Universities are just public institutions here.

Not sure about tuition for foreign students.
I personally have a “burner” phone I take when traveling internationally (usually an unlocked older iPhone). If it’s stolen / seized I don’t really care.
I imagine getting a degree in Indonesia itself would be much cheaper, and having that degree would then make moving to another country much more viable.
For starters, the Cambridge Analytica leak was vastly more impactful than this one, and is known to have been actually exploited?

I feel in this thread sort of like how I do in those bug bounty threads where someone is trying to convince me that a logout CSRF should merit a $10,000 payout because a competitor could use it to make a UX experience worse and then shift all the customers to their product and after all Google is such a huge company they shouldn't have CSRF at all and $10,000 is a drop in the bucket.

I mean that's not what you're saying but I feel like we're playing Six Degrees Of Kevin Bacon the same way to get from this very marginal bug that they themselves found and fixed to "this merits federal legislative attention."
Most of the "industry" work on compilers and graphics wouldn't be possible with the actual research that was done by the universities.

Yes the industry does pump a lot of money into research, but the people doing the real work are mostly doing some Msc or Phd at university XYZ.

So it goes both ways.

Just to cite the two areas that are my main hobby when doing computing related stuff outside boring enterprise work.

As for OS, the universities are the only place left it seems, as all major vendors are very carefull when it doesn't bring short term profits, e.g. Midori.
What the hell else do you think they were doing with their "joint table" if not performing joins on it?
Are you really suggesting that cheating in an online video game should be illegal?

I’m having hard time thinking of a justification for the government fining you or throwing you in jail for cheating at a video game.
Conserve the Sound - an online museum for vanishing and endangered sounds
First, you have some level of recourse against agencies of your own government, either directly or via the electoral process. They may or may not have more interest in you than a foreign government, but that depends on what you're doing. The type of people of interest to American intelligence agencies is rather predictable and unimaginative.

Most Western governments do not engage in espionage for private-sector economic gain. (Before the Chinese apologists show up: there have been extremely limited examples, historically, including a few times when US intelligence agencies became aware of spying or collusion on the part of another party in negotiations with a US company and notified them. There is not anything in the US that approaches the "same team" approach that the Russians and the Chinese have.)

So even if you are not engaged in, say, assisting Tibetan independence activists, the Chinese government might still be interested in your work email, and there is reason to believe that any proprietary information might get passed along to a Chinese competitor (in the Russian scenario, it's probably more likely cybercriminal organizations who might sell it).

The type of user who should be concerned about Chinese or Russian hacking, given the significant overlap between private industry (including criminal organizations, particularly in Russia) and government intelligence, is much more broad than the type of user who should be concerned about targeting by US or European intelligence.

Middle Eastern countries are probably somewhere in the middle; they have what appears to be more broad targeting than Western countries but still maintain more of a firewall between industry and government than Russia/China. (That said, the physical threat appears to be greater if you really are a person of interest.)
It's galling to see the app developer list "get rid of annoying ads" as a feature of the pro app.

Is there a libre alternative?
Google is not saying there is no evidence that user information was accessed by third parties. They are claiming that they have no idea and supposedly were not logging access to privileged information. This seems highly questionable. And if this passes for acceptable, it creates a significant incentive for all companies to do away with logging as suddenly they can just claim ignorance on everything.
This accessibility benefit also applies to "freemium" business models (mobile apps with a free tier and premium features) or Fortnite's free-to-play mode where payment does not change game mechanics. It is not limited to advertising.
> What are they?

Off the top of my head, for companies above a certain threshold:

* Require disclosure to senior management. If Nest finds a serious bug, they have to Cc someone upstairs in Alphabet.

* Require disclosure to the Board.

* Encourage disclosure to a federal agency in exchange for limited liability if a breach using the vulnerability is later discovered.

I don't know. But I think it's worth a discussion.
I’m a subscriber, and like a print newspaper I’m fine with ads. Yet the online version of NYT was a large inspiration for propping a PiHole. Why? Because unlike print, the ads are blinky and distracting. And because ad blockers don’t help in the NYT iOS app. So now I, a high-income subscriber, don’t see your ads anymore, NYT. You pushed me too far, NYT, and the only one that suffers is you, because my experience just improved.
why people here would help them, you're just trying to steal their job.
The title is just a title, it doesn't have any legal significance. These patents address a specific encoding that is compact and indexed, not the general idea of such encodings. The patents expressly distinguish the claimed method from the approach you're describing (applying traditional compression techniques to FASTA/FASTQ files): https://patentscope.wipo.int/search/en/detail.jsf?docId=WO20...

> [0003] The most used genome information representations of sequencing data are based on zipping FASTQ and SAM formats. The objective is to compress the traditionally used file formats (respectively FASTQ and SAM for non-aligned and aligned data). Such files are constituted by plain text characters and are compressed, as mentioned above, by using general purpose approaches such as LZ (from Lempel and Ziv, the authors who published the first versions) schemes (the well-known zip, gzip etc). When general purpose compressors such as gzip are used, the result of compression is usually a single blob of binary data. The information in such monolithic form results quite difficult to archive, transfer and elaborate particularly when like in the case of high throughput sequencing the volume of data are extremely large. The BAM format is characterized by poor compression performance due to the focus on compression of the inefficient and redundant SAM format rather than on extracting the actual genomic information conveyed by SAM files and due to the adoption of general purpose text compression algorithms such as gzip rather than exploiting the specific nature of each data source (the genomic data itself).

(Note that GZIP, mentioned in the patent as an example of the prior art, uses Huffman coding.)

The patent also expressly distinguishes using an index separate from the bitstream of the genomic data, which would be the case in your method above where you're storing compressed data in a MySQL database:

> 1. For CRAM, data indexing is out of the scope of the specification (see section 12 of CRAM specification v 3.0) and it's implemented as a separate file. Conversely the approach of the invention described in this document employs a data indexing method that is integrated with the encoding process and indexes are embedded in the encoded bit stream.

It also explains:

> [0006] The present invention aims at compressing genomic sequences by organizing and partitioning data so that the redundant information to be coded is minimized and features such as selective access and support for incremental updates are enabled.

Without knowing more about it, it sounds like the approach you describe wouldn't allow for incremental updates.
I disagree. The whole point of IP laws is that they provide a monetary incentive to innovate.

If someone decides to take some time off to invent a new device and incur a financial risk to bring it to market, they should have the opportunity to profit from it. If new inventions are cloned within weeks in Asia and undercut the original inventor, where's the incentive to take risks on novel inventions?

If the invention was trivial, why didn't the Chinese manufacturers come up with it in the first place?
On a similar note, what would be a good option for building front-ends without much coding? Maybe something that could export a React project, for quick prototyping.
There’s probably about 20,000+ titles on this, but if you’ve got a new twist, by all means ...
Great scene. Thanks for linking it. So many layers in this film...
Show HN: Set up a home web server tutorial
What's wrong with using Bluetooth?
Geht free!
https://bit.ly/2OKEttl
> ...they decided to couple it's disclosure with shutting down the whole product.

Let's not pretend the product was shut down because of this bug. Google Plus was a failed product. This security issue was just a convenient event to which they chose to attach the news.

Google's own words on the matter:

> This review crystallized what we’ve known for a while: that while our engineering teams have put a lot of effort and dedication into building Google+ over the years, it has not achieved broad consumer or developer adoption, and has seen limited user interaction with apps. The consumer version of Google+ currently has low usage and engagement: 90 percent of Google+ user sessions are less than five seconds.[0]

[0] https://www.blog.google/technology/safety-security/project-s...
If you're not a US citizen you do not get the 5th amendment protection and will be coerced into providing your passcode.
Free
https://bit.ly/2OKEttl
Steps Toward Super Intelligence by Rodney Brooks
Subscribe through iTunes or (I think) Amazon. I know on iTunes it’s a flip of a switch to unsubscribe. And then run some form of PiHole to turn off the adds.
> What an embarrassment. Blumenthal should leave the performative infosec policymaking to his colleague Ron Wyden.

Blumenthal is also the senator behind the abomination that is SESTA[0]. He's an opportunistic scumbag - it's not that he's simply ignorant about technology; he's actively malevolent and uses his knowledge to that effect.

[0] https://www.eff.org/deeplinks/2018/03/how-congress-censored-...
Dust jacket refers to the book cover, not the author.
Why would a, for example, US citizen be more concerned about a foreign government spying on them than their own government? To play devil's advocate, my government is in a much stronger position to harass me than some country I may never visit again.
What does her career have to do with any of this? Would you like to go the anecdota to data route or are you trying to claim that she's clearly just made all this up? Either point doesn't seem very sound, and why be so roundabout with your point? Or are you simply trying to discredit something you disagree with by attacking the author?
The sheer number of Googlers posting here is amazing. We get it, you love the Gorg, but every single criticism he lists is real.

Frankly, it has been a long time, too long, since we had a real voice air the realities of life in Goolag.
MIT's Deep Angel erases objects from photos with AI
One consideration, though not the only one, is that writing a technical book is never a good financial proposition.

If it's not a good financial proposition already, why write a book at all, vs making a website or a series of blog posts? The answer is usually prestige.

So, in general, I would say don't write a book unless you are doing it for your resume, otherwise there are better formats for technical content.

For your specifics, I wonder if the real benefit was you helping him through the material, rather than the method you used. We continue to have teachers despite there being tonnes of books on most topics people want to learn.
Meta-Analysis Shows Thas Sex and Violence Don’t Sell [pdf]
>But I think it's dangerous for programmers to focus on building a thing rather than serving their users.

Dangerous for whom?

Mastodon isn't a product, it's an open source project. More active users is nice, but isn't fundamental to the project; it will continue as long as there are people interested in working on it.
Whoops, edited accordingly.
I would never, ever hire someone who went on a giant public character assassination of his colleagues and dumped all the day-to-day insider baseball to the world. Call-outs to people who didn't hire him. Jesus, wtf?

I don't care how dysfunctional his experience was, I don't care how much of a star he might be, I don't need that kind of worry in my life, and it's hard to imagine someone who would. Be interested to know how his career goes after this.
This is exagerated propaganda. Italy will do it well.
What would this look like? I understand that there is a specific pattern repeated over and over again with models authentication users and CRUD for a simple backend but even a simple front end seems much harder to implement in a generic way. Maybe some form of templating?
I wish there was a control center toggle for this. I like to disable biometrics when I travel so a CC option would be great.
Because you started your comment with an objective falsehood, NVIDIA has the most cost effective GPUs as long as CUDA king and AMD doesn’t invest more on the software front
I have absolutely no doubt at all that China would do that sort of thing in a highly targeted way, but it seems wildly implausible that they would do it so irresponsibly. Their chip manufacturing industry is far too important for them to cripple it in that way.
Just make a playlist. AFAIK desktop and mobile apps both have the ability to one-click add albums to saved songs or playlists.

I love the combined cue, especially when hosting parties. Let guests cue songs from laptop and then adjust the order according to whom I like more (:
In the Dark Universe novel by Daniel F Galouye, a section of humanity has hidden themselves for generations in lightless caverns below a poisoned Earth. They have become functionally blind, and find their way about by knocking stones together for echo location.
Take the code they give you and change it?
Which is what most national income distributions look like. With the vast majority making below or well below the median income. Hence the fuss about the 1% controlling so much wealth.
> It is not and never has been a norm for SAAS vendors to disclose internal vulnerabilities that have not been discovered independently by third parties.

The bug sounds like it would need reporting to a data protection authority under the GDPR, which doesn't make a distinction on who discovered the breach. But I'm not sure if the fact that there is no evidence of the bug being abused means they didn't need to report after all.
Tried to download Superbeam. The iOS version is only available in the US store, can't download it in Austria. The Mac version requires me to download and install an old version of Java first. Not going to bother with that.
"...you cannot use these sites realistically without these algorithms..."

We're past peak recommenders. There's very little juice left to squeeze from these turnips.

Emphasis is now on better search. Improve the tagging, use some ML to better categorize stuff, leverage personalization to boost & filter results, and misc secret sauce.

Source: Work on recommenders for a retailer.
But if you travel at less than the speed of light you'd never pass that anyway
Yeah, succinct data structures aren't something taught in most intro to data structures courses, and the concept may even be unfamiliar to oldhats since SDSs are relatively new on the scene -- the public datasphere only started becoming conscious of the idea in 1988 when Guy Jacobson introduced them in his CMU thesis. And I have yet to find a digital copy of it online so for those who want to read the original thesis, you may have to order a paper copy of one or go to the CMU library to read it.

https://scholar.google.com/scholar?q=guy+jacobson

But, there's been a lot of development on succinct data structures since, and this post on the fast select algorithm was in-part a continuation of a conversation from a post yesterday on succinct data structures in general and the open-source lib SDSL 2.0. So if anyone wants to learn more about SDSs in general, there's a bunch of links to videos and reference material in the comments of yesterday's thread...

SDSL – Succinct Data Structure Library 2.0 https://news.ycombinator.com/item?id=18204432
Those articles usually claim also that Italy is full of racism, I leave in Italy and that is completely wrong. Media play with information and can happen that media spread wrong information.
Why not Australia?
Apply for jobs in aus/canada, get on top of it while front end is in high demand.
> trying to claim that she's clearly just made all this up?

Yes. I'm using her own success as a direct refutation of her argument.
Totally agree.

Sounds like conflict management is not handled very well by anyone in these situations.The author certainly could have handled it better, and "Greg" should have handled it way better.

Very disappointing to hear, but at the same time these kinds of conflict are usually local and only affect a few individuals, so it is probably not very fair to describe the whole project and exec team as operating in this fashion.
Someone claimed this on Twitter, so I took the time to finally read through the GDPR to validate the claim, and I don't find anything anywhere that requires the discovery of a vulnerability --- at all, by anyone --- to prompt a report to an external authority. I didn't look very hard, but maybe you can point me at it?

GDPR is clear about breach reporting, that is true. But a vulnerability is not a breach.
> How would you characterize this versus the data leak used by Cambridge Analytica...

That wasn't a leak as much as misusing data that FB happily gave out to anyone who asked -- which FB "disclosed" to great fanfare during the Obama presidential run to show how they could be leveraged for more than looking at pictures of your former college roommate's cat.
I just tried downloading Shareit, and it's such a crappy, ad-infested app that I'm not going to bother with it.
To the best of my knowledge, the US government has not stolen corporate secrets and forwarded them to their favored companies.
Not a big Google fan (actually actively minimizing Google products use) but I do not agree with you.
Having your SSN/all details about your credit history exposed is way way worse than having your google account compromised.
People know what a credit bureau is as good or better than what google is. There should be real, measurable consequences to the Equifax leak (as in they should no longer be allowed to operate).
As far as Google goes and how they choose to handle this: I for one think they should have closed the security hole, keep monitoring it and kill the service separately after a while. It does not look good for them that they did it in one go, but at the end of the day, you are free not use google.
And so much of reading variables is about context.
Age could be a factor, but I think it’s all about grooming and connections. You can have Google on your resume and get funded. You might have been groomed from birth for success and you’ll get funded.

Success itself is whether the idea had merit and a solid team is built.
Nepotism in a private company is very different to nepotism in government.

The price in the first case is paid by the litigious investors. In the second one, by the unwilling tax payers.
Also helpful in really foggy roads, slow down and roll down windows a little to pick up other vehicles
Disabling JavaScript on the NYT website completely bypasses the paywall and has few ill effects except preventing images to load (which is an acceptable trade-off).
Well, my series above is a degenerate case.

> With the vast majority making below or well below the median income.

In any case, it's mathematically definitionally impossible for the vast majority of any population to be making less than the median of that population. (It is possible with respect to the average, of course.)

(Even in the above (degenerate) case, there is no member of the series with less than the median value of $1K.)
A CATOBAR setup was included in the designs at one stage but later scrapped for cost reasons. Building a carrier with a ski-ramp is a lot cheaper.

The disadvantage is as you point out, severely limited types of aircraft for operations. The advantage of the cheaper design was that two carriers could be produced - France, with a similar economy and military to the UK size-wise, has only one fixed-wing carrier.

Two carriers is a game changer, as it allows year round operational readiness. For the Charles de Gaulle it spent ~900 days at sea in its first six years[0] - less than half the time.

Always having a carrier ready with "compromised" aircraft has many advantages over a lower availability with better aircraft.

[0] https://www.copybook.com/fact-files/charles-de-gaulle-aircra...
Oh, no doubt G+ was a failure. And that's coming from someone who was with it since its launch and still uses it today.

But it was closed due to this bug and the drama surrounding it. It wasn't "convenient" to announce closure alongside the bug, the bug actually became much more widely discussed because it was attached to a product shutdown. I can't imagine anyone at Google wanted this to go down that way, it would've been better to quietly shutter it at a different time.

But the Wall Street Journal announced it, as part of the memo that they got internally. So Google had to announce it at the same time in the same post, and it was definitely the cause of the product shutdown.
The prisoner's dilemma hinges on lack of communication between the prisoners. In the original scenario, communicating prisoners would both choose to stay silent. In the above scenario, communicating politicians would choose to never let the bill out of committee.
The Top 5 Crypto Hubs (where Is the Next Silicon Valley)
It's not about saving. It's about using your resources wisely. The opposite of what this government is going to do.
The famous utilitarian argument. Beware, it is also much better to seize your phone and computer to provide food to a starving african child.
I'm less concerned with corporate 'secrets' and more concerned with citizen privacy rights.
Oh I believe you. Do you have your ‘my card’/‘my info’ configured? By that I mean, if you scroll up in Contacts does it show your contact card at the top (and if you ask ‘who am I, does Siri pull up this card)?
The shot he took on Twitter is even harsher. https://twitter.com/morganknutson/status/1050609480033951744