skysight-inc/HackerNews huggingface dataset:
While I agree with you that the threat model may or may not be very relevant for your usage, I disagree that just because you're on an old/minority version you'll be less likely to get pwned. Try hooking up some Windows XP and some of its services to the internet sometime... Additionally for software like browsers many vulnerabilities are found that affect basically every previous version back several years, and only get fixed in the newer versions. Of course there will be new vulnerabilities that only affect FF > 56 that you don't care about.

FWIW I'm still on 52.9.0 on my home PC... (At work I use the latest, it does keep improving, but feels very much 2-steps-forward-1-back when they keep doing stuff like removing long-standing features.) Some of the vulnerabilities that have been fixed in later versions are potentially concerning. I rely a lot on NoScript (pre-Quantum NoScript even detects click-jacking attempts, which post-Quantum doesn't), ad blocking, link un-shorteners, not running Windows/MacOS, and generally not visiting every sketchy site I may be pointed to, but it's still risky -- e.g. a rouge SVG might pwn me one day. I've accepted the risk, for now.

Even as the risk becomes untenable, I worry that as Mozilla continues its war against its users we'll end up in a Windows 10 situation where malware that's actually out there (rather than hypothesized) targeting older versions is generally going to be more respectful of your PC than the software vendor is. A lot of malware probably won't force you to reboot (or restart -- had a wtf moment when I opened a new tab in FF and it couldn't render anything, saying I needed to restart because it had silently updated something), or remove features you use all the time, or constantly nag at your attention about stupid stuff... Ransomware is probably the most user-unfriendly you're likely to get (that impacts your experience, I'm ignoring passive data harvesters that drain your bank account when you're on vacation), but then you have backups, right?
Japan is generally retty good at reuse&recycle, e.g. plastic bento boxes get recycled and lackered wooden ones from restaurants get reused, but I‘m honestly not sure about department store ones (never had them).
A Python library to do this is cool, but there's already Tabula: https://tabula.technology/
I'm not a nutritionist or broscientist, but of what I do know, what you are doing now is correct, and probably qualifies as a muscle-sparing fast.

You can eat more protein--likely in drinkable form due to your sleeve--to try to gain more muscle, or you could stay the course to lose the fat first. Since lean muscle mass increases your base metabolism, which increases your fat-burning rate, that's a complex equation that may require calculus to optimize, and your body can always just arbitrarily veto the mathematical results.
Because you've had that surgery and your stomach size maybe intermediate fasting isn't the best way for you in the end?

Instead a high fat low carb diet where you really minimize carb intake (and obviously avoid all things sugary). You can get the same keto effects if you follow this approach.

This way you can easily eat several times a day and get all protein and calories you need.

Of course you can mix and match IF with this as well.

> I'm a little obsessed on my diet/exercise regime, not sure that's bad.

Be mindful. Obsessions always lie at the edge of turning bad.

Also if you've only done this 5 weeks it's easy to do too much too soon and if a time comes when you can't hold the same extreme tempo you risk a crash. This has happened to me many times. For example I've started a new training form and I train it a lot. But then I don't have the same drive like last week and a miss a single training. Then another one and suddenly I haven't trained for a month.
Think about it. It may does own the social network space. But the majority of online sociality moved away from this 'old' model. There is more action on passive sharing platforms like Snapchat, or Chat Groups in forms of Slack, Discord but also Telegram, Wechat,... And yes also Whatsapp.

Personally I would not bet any money on it somehow getting new relevance in a dying format.
I think it’s generally agreed (and supported by endless research) that no longer using a skill (in this case “deep reading” or whatever you like to call it) will result in the atrophy of that skill.

But you’re right that I didn’t present evidence. I don’t think this subject has been meaningfully studied. So what I presented was an argument for why concentrating on “sporadic reading” is missing the forest for the trees. People used to say that TV resulted in a decline in reading. Now they say that reading crap results in a decline in ability to read books. If you want to be good at reading books, then read books and stop worrying about the other stuff. Reading crap on Twitter might make you a worse book reader, or a worse runner, or a worse painter, or a worse whatever. Practicing the skill you supposedly care about will do a lot more than giving up Twitter, regardless.

> It's intuitively attractive...

Intuition is the road to junk science. Don’t rely on intuition if you cannot support it with data or logic.
Booming DNA Testing Means No Identity Is Hidden on the Web
The pervasiveness of insecure systems is not a justification for designing an insecure system.
Phoenix AZ area.
People actually use Pocket? I know people use RSS but I didn't know Pocket was used.
They address Tabula in the post:

>The first tool that we tried was Tabula, which has nice user and command-line interfaces, but it either worked perfectly or failed miserably. When it failed, it was difficult to tweak the settings — such as the image thresholding parameters, which influence table detection and can lead to a better output.
>Is the airline industry disrupt-able enough for market forces to make changes?

It has been disrupted already ... many times. Some disruptions came as a result of relaxation of certain regulations, such as allowing twin engine jets to fly over the oceans, or not forcing airlines to fly direct routes. There's also the revolution around using deep statistical modeling for capacity and route planning and scheduling. There's the business models of RyanAir and Emirates ... I mean, this industry has changed quite a bit.

Flying is also cheapest AND safest it has ever been (though more uncomfortable). Seems like market forces are working just fine.
True. Restricting which things an airline can charge for or not creates dead-weight loss.

Personally, I like when airlines charge a reasonable amount for seat selection. I get really claustrophobic being on the inside seat, so with airlines that charge for it, I always get an aisle seat which is worth more to me than the money. And then people who don't care at all get a slightly subsidized ticket and sit in the middle/window seat.
Perhaps, but would you have said the same if I put a comment about "accept cookies" nonsense in a pre-GPDR discussion ?

So ... perhaps not.
> Phone numbers are dense enough ...

These guys know more than phone numbers.

They know names, spouses, children, employers and banking relationships.

Armed with this info they sound legit to even experienced and cynical infosec professionals
Facebook owns instagram, and instagram at this point is proving to be a great source of ad revenue and expected to grow.
So: “We collected detailed personal data on 14M people, much of it not directly given to us by those people. This created an enticing target for data thieves. Despite our obscene profits from data, we disproportionately reinvested in protection of this sensitive information. Since we lacked security and have a unique ability to hold more data in one place than anyone else, thieves got more of your data than they could have dreamed of.”

Did I miss anything?
Ecigs are incredibly annoying to me personally. The vapor is usually some sickly sweet cloud that gets everywhere and I usually smell like jolly rancher or worthers original after being near one. If someone is that addicted, there's gums and patches that should be sufficient.

There's over a hundred people sharing that space, and we need to be courteous to everyone else for the small amount of time we're crammed together.
Vitalik wrote about this years ago but I guess no one paid attention: https://blog.ethereum.org/2014/11/11/search-stable-cryptocur... There's plenty of work on complex stablecoins (which have all seen virtually no adoption other than Tether) but no one besides us cares about simple volatility dampening techniques.

Ultimately there are so many obstacles to adoption that it's not clear that solving one or two of them will be noticeable.
Why is that ridiculous?

Here are the facts:

1. A software company had a security incident.

2. They urgently resolved the issue.

3. They looked into who was impacted, and sent customized notifications letting people know how they were impacted.

None of this behavior is ridiculous. It's quite responsible. What would you expect to happen differently?
It's the entire FAA Reauthorization Act. So it basically specifies everything that the FAA (which is a large federal department) is authorized to do or required to do over the next few years.
Hey it's election season. Time to refresh DB. /s
Seems reasonable to me that they can shoot down drones if they are a threat, at least in theory, hopefully it won't get abused.
Use a Gasser password generator, like the one in Multics[1], to make password that are easier to pronounce, but still long and complex enough to offer some value as security challenge answers.

You can read 'mettlograter' or 'donetrapalyn' over the phone as easily as you can type them, and they're much better than '/1a!P:l3', which has approximately the same complexity.

[1] https://multicians.org/thvv/gpw-js.html
I do IF. I bike to work each day and work out in a gym irregularly. I have either 1 large meal or 2 small meals in a feeding window each day. I will eat right after cycling in the morning, or right after working out. I don't usually eat after cycling at night. I might have some protein or a small cup of milk at night though. Not technically IF, but also not riding that blood sugar wave all the time either.
React-behavioral: A ReactJS library aligned with how humans think
I forget what the text looks like in your second link when you're not logged in but after I logged in the verification text appears as follows:

"""
Is my Facebook account impacted by this security issue?
Based on what we've learned so far, your Facebook account has not been impacted by this security incident. If we find more Facebook accounts were impacted, we will reset their access tokens and notify those accounts.
"""
Motorola is a wholly owned entity. Rather, 联想集团有限公司, better known in the West as Lenovo Group Ltd., did that to you
Can you do this for DTLS, too? :=-)
This is new, particularly the details around search history and location data being stolen, as of an hour ago.
>The attacker says “Ah, a bunch of random characters, do I have to say it?

The vast majority of users aren't using random characters, so how would they know to say that to begin with? Are you implying they try that line, idk, 10,000 times until it (maybe) works?
This passed overwhelmingly in Congress right? Does the airline industry not lobby properly? I suppose contributions might start rising now.
Given that poor sleep quality exacerbates insulin resistance, it is possible that by not eating late into the day, the research subjects in the article's fasting study may have also lost weight because their sleep improved.[1]

Personally if I eat dinner after 5PM, I have trouble sleeping.

[1] https://www.ncbi.nlm.nih.gov/pubmed/21950773
I don't understand all those bans on e-cigarettes that pop up. They're essentially harmless, as opposed to "analog ones". I get that some people don't like to see any kind of smoke in general, but actual smoking is a public health problem, and IMO society should be supportive of e-cigarettes as a quite decent solution to this problem.
I love how no one is getting zealotous about this :)
Don't forget to thank Mel Gibson!

https://www.youtube.com/watch?v=FLGNm8_y6yU
Tokyo is a bit mixed with exotic foods: Thai, Chinese, French, Italian, German, Spanish, US American yay; pretty much anything else meh.
Actually nvidia isn't the high end leader if you account console APUs (almost all being from AMD). And most gpus in the world are from igpus, apus or ARM SoCs. Dgpu IS a small market, High end Dgpu is a few percents max.
I don't understand what this buys you. If you have access to your password vault, why do you need the security questions? If you lose access to the vault, don't you lose the account?
Well, let's see. A feature used to view profile information had a vulnerability that allowed an attacker to get my phone number. My phone number isn't even listed on my profile.

This means the credentials from the original implementation of said feature weren't locked down to only data available from your viewable profile.

While my phone number may be available elsewhere outside of FB, I only have it tied to my account as a password reset contact.
I wonder about this too. As a long-time vaper who actually quit smoking with them, this makes airline travel a nightmare. Do I mail my vape to my destination? Buy a new one on the way? Attempt to sneak it on with the horror that possibly opens up?
Security Answer: HelpAnImposterIsTryingToHackMe
IANAL but I think you're safe to bring it on board.

SEC. 534 from https://www.congress.gov/bill/115th-congress/house-bill/4/te... just seeks to classify E-cigs in the same class as traditional cigarettes. There's no prohibition on carrying them onboard, only usage.
So now to get really deep/meta, you'll want to combine with promisify:

var isTrue = require('callbaxx').isTrue;
var promisify = require('promisify');
var promIsTrue = promisify(isTrue);

promIsTrue(true)
.then(function (res) {
console.log(res)
});
.catch(function (err) {
console.log(err)
});
Thanks, I'll try the added protein shake + OMAD food-wise for a week or two and see how it works... I'm thinking it'll be better than just the OMAD with less protein/calories. If I need to, I could even adjust to 2 shakes/day and a meal in the evenings.. Maybe push my shakes to b/w 2/5pm and eat by 7, so I'm still doing a 6-8 hour feeding window.
Half the allure of a Thinkpad is the trackpoint though.
On top of people wanting privacy about that stuff, there’s also probably enough there to get through a lot of “password recovery questions”, for sites that have those. Especially if they can get similar info about your family (through the same FB breach).

Too often an email address plus correct answers to questions like “what’s your mother’s birthplace?”, “what’s your fathers middle name?”, “what’s your favourite hockey team” are used to prove identity online, and these types of questions could be very answerable from this breach.
Note: I was not the original poster: his comment simply rang very true to me; "lean" is being a motif in my work, as the complexity of precious time and resource management increases.

Contributions are all well-intentioned, but they cost resources, especially if you're not great at ruthlessly filtering out, or don't want to, for any reason; they generate a lot of heat where this energy can't be used.

Also well-intentioned contributors will set up grandiose structures, with no intention other than "to help", but no actual will to carry the actual work out. This usually turns out a wasteland after a while, which is not so much a problem until you realize you have to support it; or worst, it over-shadows the original, leaner-but-actually-productive intent.

> For some reason there is a natural desire among some to organize the organizing before the thing to be organized really exists.

I think this is why we have so many engines which have no games written for it :D
The value she provides is running the railroad well, unlike her brother. Are you making the case that a well run railroad does not provide value to society? Perhaps you don't remember the incident in the book of the train running through a tunnel without ventilation and killing all the passengers?

Can you list what Galt stole? I don't remember him stealing anything. He even leaves his greatest invention, his motor, to his old employers as he concedes it wasn't his because they paid for it.
I'm surprised Canada isn't on that list given NAFTA. But I guess we don't do much electronics hardware work.
E-cigarette smoking is prohibited, not the e-cigarettes themselves. That's a poorly worded summary of the change.

https://www.congress.gov/bill/115th-congress/house-bill/302/...

SEC. 409

Adds e-cigarettes to Section 41706 of title 49 of the US Code and bans their use on planes (equivalent to the ban on the use of cigarettes).
Makes sense. Thanks for sharing!
Given some of the JS code I've seen recently, I honestly thought this was a serious library until I saw this:

> Proponents of this new language (known as "sixers")
In my book, the problem is that vulnerabilities are usually of two kinds - bugs or more specifically unintended and unexpected interactions between different subsystems. Bugs are like the use after free in a kernel modifying a little state, leading to ASLR circumvention leading to RCE.

Unintended system interactions are bigger in my opinion, since they tend to combine bugs across systems, or they even combine multiple unintended system interactions into bigger and more complex unintended system interactions. These things grow wild - some of the things people do with meltdown, rowhammer are wild and just enable even crazier things. On a higher level, things like server side request forgery, dns rebound attacks to circumvent firewalls are powerful tools to make existing attacks more powerful. I'm no where near an expert, just an interested admin, but a lot of these mechanics are wild.

Now where's the point to all that rambling?

Point is, most software is written and grown in very uncontrolled ways. Software outside of aviation or the space sector is written to get done, and if bugs occur, they do occur. A lot of software systems are running huge stacks with massive components - again to get done - and no one is scrutinizing all of the interactions going on in there.

With my product hat on, that's fine. Selling things is a good way to get paid. But from a security point of view, most software systems are just waiting to grow big enough until the right people care and it'll be ugly.

This is also why I largely consider our application servers to be overly resource hungry remote shells. Puts me in the right mindset.
I think we really over-estimate the degree to which "fasting" for less than one day affects our ability to perform. We're blessed with such an abundance of food in the west that few of us have ever felt real hunger. Your body is so far from hitting a wall after 12 hours of no food it doesn't seem to be anything but mental. I've done tons of fasted weight training and high-intensity cardio.

I grew up doing sunrise to sunset fasts for Ramadan, with no water, and even that was mostly mental.
Government mandated authentication mechanism. This question is almost a joke: what could go wrong ?

Everything can go wrong.

> A not insignificant part of the large Internet companies power

So it's about breaking the power of large internet companies ? Figures. Can we please do that WITHOUT destroying the web ? The last regulation that tried to break the power of large internet companies was the GPDR, and that has significantly entrenched the position of the large internet companies instead, while creating a ridiculous amount of inconvenience for everybody. This ... will do the same.

People WANT to share that data. Or perhaps I should say, they want the things that happen when they do. Quick searches that get them the products they want, on Google, on Amazon, on clothing shops and on tons of small webshops. Even the obnoxious image ads. People want them.

That means that a login mechanism will just be an extra hurdle with zero of the effects you want.
Maybe benign, but also amusing that this got slipped in too:

> requires the FAA to set up an "Office of Spaceports"
Google has been actively trying to get people to stop using security questions in favour of various kinds of two-factor for quite some time now (mainly mobile phone number based stuff). They'll be fine.
They have hardware targeted towards average consumers also.

https://www.newegg.com/Product/Product.aspx?Item=9SIAEFK6MH2...

https://www.newegg.com/Product/Product.aspx?Item=9SIAEFK6D86...
These questions are often required to be answered and some places, like vanguard, use them as a form of 2fa. Additionally, it's possible for the bank to reset passwords for some reason (hack, error, etc) and still keep these around. The point is no longer account recovery, that's correct, but it does buy you a lot of things.
Hedge funds have definitely not helped any of it.
This is not a ban on the e-cigarettes, just on their use on the plane. You can still carry them to your destination.
100% agree with both points here. I live near an organic grocery store (PCC) here in Seattle which has a very reasonably-priced salad/hot-food bar, all things considered- and they also have a rotating selection of little take-out bento boxes for about $5-8 which make for an excellent light-lunch or dinner. I've been trying to lose a bit of weight recently, and they've been great for helping me with portion control. Not to mention, the larger selection of fresh food makes it a lot easier to commit to eating a bit healthier. I wish this sort of thing was more common in other places as well.

On the flip side, I'm originally from the South, where there's a huge number of gas stations which also include a diner (or even just a hot bar) which is often some of the best Southern food you can find, including "real" restaurants. There's actually an entire regional chain of gas station/convenience store/fast-food friend chicken places called Dodge's which I really miss. That being said, I used to drive between Mobile and North Mississippi pretty often, and there was a little place halfway along the way called the Buckatunna Grocery which I swear has some of the best fried chicken I've ever had.
>Do you actually have data to back that up, or are you just going by an assumption?

An assumption. The idea is that conducting more malicious activity is generally easier to spot than conducting less malicious activity and trying a wide range of exploits is more likely to be noticed than a smaller, possibly more targeted exploit. Script kiddies attempt a wide range of exploits when they're going after a single target. For example, throwing any and all known vulnerabilities against a website hoping it is hosted with an outdated version of Wordpress in an attempt to gain access. But unless you're going for attention and de-facing the home page, once you're in you want to draw as little attention to what you're doing as possible. OTOH, they might throw everything and the kitchen sink in under the assumption that they'll be caught quickly so they want to capture as much as possible before they're kicked out.

>...Because to me it seems likely that there are blobs of JS that look for a wide number of vulnerabilities floating around...

I browse with Javascript disabled. I use Tampermonkey and Stylish to inject CSS and Javascript that I write (and therefore trust) to pages I use frequently enough to justify the time spent on restoring certain functionality.
The Code Quality vs. Speed Fallacy (2016)
> There's over a hundred people sharing that space, and we need to be courteous to everyone else for the small amount of time we're crammed together.

How do you think this actually change impacts people _while_ on the plane since vapes have already been banned from carry-ons? Your comment doesn't seem to be relevant to this change.
Agreed. When is the last time a company failed because of bad security?
https://www.dreamsongs.com/WorseIsBetter.html

and

Unix Hater's Handbook https://web.mit.edu/%7Esimsong/www/ugh.pdf

it is important to always keep a critical view, most of the time we are on a false summit.