skysight-inc/HackerNews huggingface dataset:
If I count the number of times recently I've read and heard people say "Well switch to Instagram or WhatsApp" in reaction to hearing about Facebook's privacy track record, then the answer to your question is No - the public is largely clueless.

(In case you weren't aware, Facebook owns Instagram and WhatsApp)
The plumber is not a locksmith, so no, I wouldn't particularly enjoy that.
Problem with that is that they will still be able to track you as you will need to login to get the subscription, and now they will have all your information.
Clazy 1.4 released
Mikrotik's aren't really consumer-grade hardware (most Mikrotik's that is). Some operators deliberately stay a version or so back off the latest due to features breaking or instability, or requiring configuration changes, etc.

Automatic updating could be crippling to ISP operators (Mikrotik's are very popular with WISP's, and other smaller ISP operators).

> Basically reboot unless the router detects the network is being used actively.

For the average Mikrotik router, deployed at some WISP or small ISP, that's unlikely to happen.
Any models you'd recommend?
As I said before, I think you're confusing a complete boil-off of the atmosphere with a slightly less extreme event that simply eliminates 90% of life on the planet, which has in fact happened before
I guess what I'm trying to say is that algorithms can't tell whether they're fooling themselves. Someone has to apply the 101 techniques for testing fit, etc. Humans at least have the opportunity, though, as you point out, they don't always take it.
> Surely the author, editor, and publisher of this article, and anyone likely to read it, are aware. We are aware.

That's a really weird statement. Articles are published so that readers can be informed of things that the author and editors have become aware of. Often many articles are published on the same subject because 1) many people missed previous articles, 2) there a new update that people aren't aware of, 3) people forgot and it's a good time to remind them, 4) it's not news-facts article but a persuasive piece, 5) etc.

>> 2. Much of the awareness that does exist was not the result of those companies being transparent about their practices. It's the result of inferences based on scraps of information and speculation.

This means that "we" aren't as aware as you make us out to be.
Thanks - but duplicate. Dunno how that happened :)
How Netflix Expanded to 190 Countries in 8 Years
I actually love usb-c. Thought I'd hate it, but I vastly underestimated how much I plug stuff in. It helps that usb-c docks are pretty awesome if you don't buy the cheap ones. My only issue is Yubikeys when I'm not docked, which is only for meetings though.
I don't have a strong opinion about this case, but it would be more correct to compare it to this situation:

You come home one day, entering by the main door as usual, and when going down in the garage you notice the key on the floor with a message saying: "Your garage door were not locked and everybody knew about it, so I came in to take the key on the inner lock, closed it from outside and slipped the key back under the door so nobody else with bad intentions can enter anymore".

In the situation you described I would be pissed off, but not in this one, and IMHO it is closer to this case.
Analyzing and Transpiling C++ Build Systems
CSVW: CSV on the Web
https://w3c.github.io/csvw/

"CSV on the Web: A Primer"
http://www.w3.org/TR/tabular-data-primer/

"Model for Tabular Data and Metadata on the Web"
http://www.w3.org/TR/tabular-data-model/

"Generating JSON from Tabular Data on the Web" (csv2json)
http://www.w3.org/TR/csv2json/

"Generating RDF from Tabular Data on the Web" (csv2rdf)
http://www.w3.org/TR/csv2rdf/

...

N. Allow authors to (1) specify how many header rows are metadata and (2) what each row is. For example: 7 metadata header rows: {column label,
property URI [path],
datatype URI,
unit URI, accuracy, precision, significant figures}

With URIs, we can merge, join, and concatenate data (when e.g. study control URIs for e.g. single/double/triple blinding/masking indicate that the https://schema.org/Dataset meets meta-analysis inclusion criteria).

"#LinkedReproducibility"; "#LinkedMetaAnalyses"
I'm sure it does have an effect, but retargeting is also so common that I don't think anyone is able to remember all but the most egregious cases.
According to the announcement, Google can only say that no one abused the vulnerability in the two weeks prior to discovery.

> We made Google+ with privacy in mind and therefore keep this API’s log data for only two weeks. That means we cannot confirm which users were impacted by this bug. However, we ran a detailed analysis over the two weeks prior to patching the bug, and from that analysis, the Profiles of up to 500,000 Google+ accounts were potentially affected. Our analysis showed that up to 438 applications may have used this API.
You didn't know, but the mere presence of the plumber is evidence that it was faulty (since the plumber used the same security hole).

Also, the alternative in this case might be a water leak that ruins your whole house.
That's great of you, I often do this as well and have never received any acknowledgement or thank you :(
Its all about how its approached... and its sort of a little bit about how your personality is.

I came home one day to a note on my inner garage door: "you left your door open, I closed it for you ;)". No name, nothing... just someone entered my garage, wrote a note, closed it and left.

I took a quick survey to see if any of the obvious valuable items were disturbed or missing and none were. I was more upset with myself for letting that happen then a stranger "fixing" my security vulnerability.

EDIT: and another anecdote was that my neighbor let himself into my house once when a water leak was discovered outside so the water could be shut off. Saved me thousands in potential damages that he caught it early... I can't say I'd be all that upset finding a plumber under my sink fixing something but that's just me.
It has no effect on Bohmian mechanics because it posits a real wave function. PBR rules out most "psi-epistemic" models where the wave function represents only our ignorance of the system, and not some fundamental, real property of the system.
I mean they could have 100x more cars testing it and it would be 100M miles in little time. The problem is that is going to cost quite a bit. In a perfect world Google would sink in additional few billions and massive scale it for testing. So we could technically have Waymo taxi in 3 - 4 years time.
I have never found this analogy compelling for two reasons.

First, your sink is not part of a botnet (assuming it's not a smartsink, I guess). By leaving your machine unpatched, you are causing harm to others.

This makes the ethics of this sort of grey-hat hacking much more murky IMO. I'm willing to concede that the grey-hat behaved unethically, but I also believe that leaving a machine unpatched makes the machine's owner at least somewhat responsible for how that machine is used.

Further, I do not think it's reasonable to both claim that this sort of grey-hat activity is unethical and also claim that owners of unpatched devices have absolutely zero responsibility for how their unpatched machines are used. I.e., if we condemn this grey hat (assuming he simply locked to door and left and did nothing else) then we should also condemn the owners of botnet'd devices for the way in which their negligence causes harm to others.

If others can't break in and fix your stuff when it starts effecting them, then you should be held at least partially responsible for how your stuff is used by criminals.

Second, physical presence can be a privacy intrusion on its own and without any willful intent. E.g., a grey-hat plumber who is purely altruistic might never-the-less accidentally catch a glimpse of you naked. On the other hand, cyber presence almost always requires intentional snooping to cause a privacy violation.
I'd like to know the extent/methods of the tracking and whether I can avoid it by not using their services and cleaning out my browsers and not using gmail.
Any site that does this should be marked as a spyware site and blocked by the browser. Enough is enough.
Sure you did, a contract of sale. That makes you the owner of the device. Should another person be able to access all your computers sensor data just because you let the person use your computer?

Of course, this data is yours, same with the car.
Model-Based Machine Learning Book
I was addressing only this part of OP's statement:

> the letter also notes the practice of disallowing third party cartridges in general is nefarious.
This is why high schools should teach financial literacy.

If you do not understand what terms "interest", "bond", "stock", "401k", "mortgage" mean...
Design will kill marketing, says Ikea’s former design chief
So what are the advantages over adaptive radix trees or good old judy-dict/array?

Apart from judy being too damn complicated, and too old to be optimized for vector-compare instructions (I think the fancy hand-coded x86 vector-comparisons are the main reason for ART being competitive with judy, considering that it misses at least key compression and the clever allocator, and that ART is not as optimized for using every byte out of every fetched cache-line).
OK, we'll ask you again later.
OK, we'll ask you again later.
OK, we'll ask you again later.
OK, we'll ask you again later.
If your sink was clogged and running and flooding the apartment below you, it would be perfectly reasonable for someone to kick your door down and turn the water off.
To you and OP: Thank you for your efforts! Don't stop fighting the good fight!
>'Anyone dissing Acton for 'selling out' is the biggest hypocrite imaginable."

Yeah that's not what hypocrisy means at all. Hypocrisy is when someone's actions contradict their own stated beliefs. Hypocrisy is not based on the hypothetical. If I were a staunch privacy advocate however and sold my company to FB, a company with zero regard for privacy then this would be hypocritical behavior. Conversely if I were someone who didn't value privacy and took FB money I would not be a hypocrite at all.
If someone slides my key under the door I’m changing the locks

Which I guess is something a gray hat would be happy to see
From a naïve perspective of only mining for profit that's sort of true.

Lots of people mine for other reasons.
Some people can...
A few comments over here:
https://news.ycombinator.com/item?id=18201789

That was marked as a Dupe - perhaps the mods can move the comments to this submission instead.
Is this open source? Is the code on github or something?
Don't forget that a lot of the customer base for Mikrotik is in remote locations (ie: P2P connections in rural areas) or small ISPs.
Having the router in your office die on you (even during office hours) is a little different than all your customers call you the same day their only internet connection is gone.
Crash Course: EnTT Reflection System
Watching this confuses me as to the timing of it all... if the conceit is that we're watching the bundle of photons move through the bottle that's because the photons from the source are hitting the camera, right? So is it the light moving through the bottle + the travel time to the sensor? Should refraction and reflection across the surface cause a lot of weird visual interference (as the bottle's size is no longer insignificant the time scale for lights velocity)? Is that what we're seeing there?
The point of pledge(2) (and unveil which builds on and complements pledge(2)) is to protect against the consequences of human failing: if the software has an accessible exploit, limiting its ability to see the system means the attacker has a much harder time pivoting into something useful.

That's why pledge(2) and unveil(2) are useful despite literally being part of the software it restricts.
There were a handful of episodes where the color was recovered from NTSC U-Matic off-air recordings, with the luma coming from the existing black and white film.
There's the added wrinkle of "... and there's a band of criminals in the area that we know likes to secretly hide in the remote, infrequently used closets of people's houses, where they plot and execute break-ins, thefts, kidnappings, and acts of terrorism."
Compare:

https://www.mouser.com/ProductDetail/Diodes-Incorporated/ZXT...

https://www.mouser.com/ProductDetail/Microchip-Technology/PI...

Notice that the discrete transistors actually cost more than the microcontroller.
>"I hope not to see any moral policing here for selling out. It is difficult to walk away from that kind of money"

Let's be clear, it's probably not that hard after you've already pocketed the first two billion.
Countless companies every year hire security auditors, and get back a 100-page report in 8 point font filled with vulnerabilities, many of them marked "severe" or "critical." Forcing companies to then publicize those reports will be burdensome and counterproductive.
If it's an apartment building, a plumber NEEDS to go inside to fix your sink so that it doesn't flood apartment units under yours.

That's why fixing router vulnerabilities is so important: if left unfixed, botnets use them to cause harm to other people.
Shouldn’t that be in reverse? I’m pretty sure Wind came before da Vinci
> Articles are published so that readers can be informed of things that the author and editors have become aware of.

This is an opinion piece. It's written to persuade, not to inform, but its argument is founded on shaky ground.
> I NEVER received a thank you from any of these people.

Is it possible that they (perhaps mistakenly) believe that communicating with you could open them up to civil liability?
> A settlement is always going to be less than you are entitled to as a matter of right assuming everything you claim is true, otherwise, there's no purpose in settling rather than disputing the claims.

The first part is true, the second part is not, because it assumes zeros in both legal cost and opportunity risk; there is a minor effect regarding PR and precedent as well for companies and organizations.
> 1) This data privacy glitch is just like Facebook’s Cambridge Analytica scandal, except it isn’t.

> well, if its not, then why even bring it up? that part smells like sensationalism to me..

It's the same type of glitch, except there's no evidence that it was exploited (which is a different statement than it wasn't exploited; it may very well have been).
I agree with you, they were pretty awful and lost so much of the original's sense of wonder and incomprehension.

One favourite daydream of mine is to think about how the Rama aliens' second and third probes would be received. I read Rama around the same time as Eon by Greg Bear, so I've always had an affinity for spin-gravity habitats filled with unknown stuff :)

With The Expanse TV series showing us how good hard scifi can be exciting and wonderful, I'm hoping we one day get an Eon or Rama series. Rama especially would work well in a hard scifi miniseries format.

(That's actually a great thought: that many shows thought impossible a couple of decades ago will now be made. Let's just hope they're made with love and devotion like The Expanse!)
It gives a target or minimum for a fast and lightweight secure web application.
Great idea, I love it!
Grief Network
This tweet is not at all about understanding stocks and more about how the overall state of the economy is not reflected in the lifestyles of the working class.

The working class does not care if the DOW is up and unemployment is down if the majority of people are still living paycheck and have to make tough financial trade-offs daily ( food or gas or doctor ? ).
This is huge. Whatever your views on M$, opening their vault and closing the doors on the royalties they were receiving shows a real commitment to OSS. Huzzah Microsoft.
'No evidence of abuse' is not acceptable grounds for treating it as if there were no abuse. Personally, I consider all three points as being irrelevant.
Why should this be the breaking point rather than many other things that happened in the past? Like the school bus, or Mastaba market bombing, or whatever.

I'm not saying it shouldn't. I just don't get why this is so special, or more serious than other stuff Saudis were/are doing.
Boston Dynamics' Atlas Robot Does Parkour
Protests where you stand peacefully on the sidewalk chanting how upset you are doesn't work. Protests designed to shut cities and the economy down do. You have to make it hurt for the elite otherwise they don't care what you do chanting on the weekend.
Firefox removes core product support for RSS/Atom feeds
It would probably be useful to explore the distinction between how vulnerabilities are handled in Open Source software, where disclosure is commonplace, versus non-source-available proprietary software, where the opposite is true.

We need disclosure in Open Source because if attention is not drawn to the vuln downstream users won't upgrade, but highly motivated attackers will have what they need. With non-source-available software, there are fewer opportunities for attackers to learn of any vulns.
Yeah, the only people punished will be the lowly worker who was forced to do the job by the higher ups in the first place.
Thoughtfulness, yes, judgement, no.

Perhaps it's the medium of this discussion, but the reason your comment was downvoted was because it came across as judgemental and dismissive.

I've been CMO of a startup, and could spend my free time developing marketing plans for NGOs looking after sick kids to get them more donations, but I spend my talents and time watching arbitrary funny cat videos.

I know it's not the highest order use of abilities, but assuming people should only pursue what you deem to be the most worthy, and dismissing other pursuits, is a thought process so academic it's almost pointless to real-world discourse.
Agreed. An analogous way to put how the printer companies are doing business would be if car manufactures setup gas stations and only allowed you to use their brand of gasoline.
I am still in love with my x230, but have heard great things about the T-series too.
That makes sense actually, thanks. I don't think Microsoft is inherently evil or anything, nothing wrong with trying to help make software better even when it's not OSS.

My confusion was mostly just that I couldn't picture who would have the tech background and Windows familiarity to fix (and productively evaluate) weird or buggy releases, but was also willing to have their system destabilized without much warning. For myself, I expect I'd find being an Insider exhausting; even if I know enough to fix the issues, I don't use Windows very often and I'd feel lost whenever things changed and needed to be fixed.

Getting early OS updates sounded much higher-risk than nightly Firefox builds or something. But "it's a gaming machine" actually makes total sense - I forgot how many people have a nice Windows machine they use often, with no real need for it to be stable.
> For the chrome case, you can currently only access ~/Downloads. This involves changing our habits as /users/. If you need to access files from outside this directory, you need to open a terminal and copy/move files there yourself.

That is where Apple's approach is probably better: have an entirely separate process bridging the software and specific tasks. The bridge process should be easier to audit (and can have its own restrictions and sanboxing e.g. the only things it needs are to communicate over a socket and see the filesystem), and the browser never gets to see the filesystem.
Does anyone have a link to a video of the oil drop tunneling experiment?

https://journals.aps.org/prl/abstract/10.1103/PhysRevLett.10...

(like https://www.youtube.com/watch?v=nmC0ygr08tE)
seems like it only works on Linux. how will cross platform builds be ported?
If I told you that your car was propelled by an engine that ran on gasoline, would you feel any closer to understanding it?
> Wind is the main thing trees oppose (besides gravity and each other). It should be first idea that this is the thing that shapes them.

This statement was unexpectedly profound.
Ridding the world of PHP, one page at a time :)

But seriously, thank you for taking the time to do this.
HTML5 bus
This is not a valid analogy, unless you broken sink was causing your neighbors sinks to break as well.

And in the case of an multi-tenant building, if one person's actions (or lack of action) was causing problems for other tenants, you can safely assume the landlord would let themselves in to fix it.
Not that I know, right now the only project that has been open sourced is Lulu, a firewall (https://github.com/objective-see?tab=repositories).
Things like sshfs exist to solve this transparently.

You could even create a wrapper that'd mount the remote endpoint to a temporary location, runs your application with that path, then unmounts once your application exits.
They're in text form, but I've always loved the clarity of W. Richard Stevens' (RIP) books on TCP/IP.

He did a great job of demonstrating every byte and jitter on the wire and how it related to the underlying BSD TCP/IP stack.
Actually, Hans Camenzind was pretty busy up until the day he passed away in 2012. He continued to do analog circuit design, among other things (like writing books). (Good) analog engineers are not that common these days. At one point in the mid-2000's he mentioned to me that of his 15 most recent circuit designs, not one had an issue post-initial design. I don't think a lot of analog engineers today could say that. I suspect if he was still around and looking for work, he would not have much trouble finding it.
Is anyone really surprised by this in today's outrage culture where everyone is offended by everything?
Sidenote: how does phishing via LinkedIn work? Recruiter spam?
Track PostgreSQL Row Changes Using Public/Private Key Signing
How is this different than any other internal/private bug found every day at orgs?
>> Articles are published so that readers can be informed of things that the author and editors have become aware of.

> This is an opinion piece.

Opinions and ideas are things that one can be informed of.
It is more like you returning from vacation to your apartment and see all your carpets torn up, huge dehumidifiers going at full blast and some trades people milling about because your toilet leaked and flooded your neighbor below.
Define Bootstrappers. Just people who don't raise money after your initial investment? Also, what percentage equity do you take?
Mail Communication : Gmail, Outlook and Yahoo.
Really good choices if you don't care about being hacked or giving away your datas.
I was afraid that it wouldn't fit and might be overly complex for what was gained (there's not much text in there). However there's a PCAP at https://github.com/syncsynchalt/illustrated-tls/tree/master/... if you'd like to load it up in wireshark or tcpdump.
It’s a great concept. But I would NAK the API for Linux:

> Calling unveil() for the first time will "drop a veil" across the entire filesystem, rendering the whole thing invisible to the process, with one exception...

Sorry, but the semantics of calling it once should be similar to the semantics of calling it twice. The first call veils and the second call unveils.

Also, on Linux at least, efficiently implementing “you can only see this subtree” is quite tricky due to races against moving the directories in question around. I wonder how OpenBSD gets around those races.
And no one here is suggesting that's a good thing. A well run isp doesn't do that.
Probably, way better than buying them outright and firing the people they don't need.
Domain-Driven Design in Practice
Huh, I don't think I've ever gotten spam like that before via SMS.

It seems to be personalized to the previous holder of the number, who I assume is named 'Tracie.' I'd see if you're able to get another phone number, as this 'Tracie' was quite liberal with giving out their number to anyone and anything.
why are these all for MacOS? are windows and linux not targeted by similar malware?
Stockholm Startup Guide: 250+ Resources for Entrepreneurs