skysight-inc/HackerNews huggingface dataset:
The difference here is that Google found this problem itself, and evaluated with high confidence that it was likely unknown to anyone outside that audit.

That means that Google was proactively checking it’s work to make sure it was secure, unlike your example where nobody was likely ever going to notice that bucket was misconfigured.

They’re the gold standard because they find and clean up their own shit, even when nobody is pressing them to do it.
For 635nm red laser light, you'd need to be sampling somewhere in the order of 9.4 x 10^14 times a second to get two samples per cycle. Based on roughly 300000000m /635nm x2 but then the question comes down to how many cycles make up a photon and does that question even. Make sense in the first place.
A photon needs to actually hit the sensor in order to be recorded, so if we're considering the photon to be a particle (rather than a wave) it would have to be in the same position in order to be in two frames at all.
Also using an app (Hiya)

It's been a godsend.
> the reader's UI is inherently not going to be the intended presentation medium

It's close enough. I use reader view on any post on a website that's even slightly annoying to look at.
I would say it has aged well ;) As I said, it's a fantastic book. But it could benefit from an update.
I think some of the slides were meant to go with a presentation and were meant to be sarcastic/snarky.
Let me quote "that statement".

> People have been bitching about Chrome too, and those things they were bitching about can also be disabled using flags.

That is what I asked for evidence of, the things most people are complaining about being fixable with flags. I didn't ask for evidence of my own issues.
Facebook posting: https://newsroom.fb.com/news/2018/10/update-on-security-issu...

Check if you are affected here: https://www.facebook.com/help/securitynotice

(posting because it took 10+ mins to find it - many media outlets are not linking directly to it)
If you're still up for solutions my team found success with https://www.npmjs.com/package/npm-git-lock when doing CI devops. Big savings in time for us.
They don't have authority over immigration issues, and CBP will refer domestic crimes to the relevant police agency. Everyone's turf is respected except the citizens.
Not surprising with the news, and the stock price seems to reflect this as well. I told myself I'd buy in @ the 150 range, but Im wondering if I should wait for 140?

Anyone else got plans for this? Be bold when others are cautious, and cautious when others are bold, usually.
Equifax seems to be doing alright.

Sony hasn’t failed yet.

I don’t think your opinion matches with reality.
> C 88.8% Common Lisp 6.4% C++ 3.1% Assembly 0.7%

I would expect a bit more Lisp in an OS that is supposed to be inspired by Lisp Machines.
I've done a 12 day fast. The first 4-5 days were extremely difficult (caffeine withdrawal didn't help) , but by day 6, I had a feeling of euphoria. My original goal was a 10 day fast, but I didn't want to give up the clear mind and energy I was experiencing, so I extended it to 12 days.

I think this is a pretty common experience. You don't start feeling the "good feels" until you get past the 4-5 day mark.

Anyway, this was about 7-8 years ago and I haven't tried again since, but I often think about it.

For what it's worth, I do IF as a lifestyle (18:6). Basically (for me) it's a very easy way to help restrict calories. Hopefully there are some health benefits, too.
"Shop Your Way" has been pretty cool at K-Mart too. Before I moved basically next to one I did I didn't even know K-Marts were still around. Now I get random "Freecash in points" email coupons to spend like $8-$18 without actually buying anything else (sometimes with strange arbitrary limitations on what the free money is good for, sometimes not).
I feel like there was a period after jQuery came along and before Node and the entire morass of "enterprise" javascript when it wasn't hated so much.

The problem with javascript isn't that it's a terrible language per se - it's perfectly adequate for its actual, intended use case (lightweight scripting and DOM access.) The problem is that "flawed language designed in 3 days" is now being used everywhere, and that its ecosystem is a trainwreck of unnecessary complexity tied to a badly designed package manager linked to a proprietary backend.
It reminds me of all the people who like Trump or dislike the EU, and all the people who believe that those people must not understand what's going on in the world; and that if only they learned the "truth", they wouldn't like Trump or realize that the EU is really good for us.

Ya know, sometimes people actually do understand and they just don't agree with you. I'm not a Trump supporter, but I believe people who say they like Trump for reasons that aren't "politie".

These anti-Google and anti-Facebook people should learn to disagree better.
Yes, it doesn't work most of the time.
Thats still higher than Lenovo fingerprint readers which never work.
I'd wager that there's some small feature you don't know about which uses audio input and it's requesting permissions too early rather than it being something malicious.

I wouldn't grant it either way though.
Hundreds of dietary supplements are tainted with prescription drugs
Zinc: Minimal Lightweight Kernel Crypto API – Kernel Recipes 2018, Paris, France
Always being PC isn't a good thing. I see tech people being too nice to sales people, and a lot of those people aren't really interested in being a genuine friend. It's time that real developers in the tech industry decide to actually be passionate and support what they care about. Not about what some sales presentation tells you to care about while giving you mediocre freebies to make you feel like you should "trust" them.
Not happy, but how would you define Linux?
Joking? Wikipedia: 299,792,458 metres per second
It's not as ubiquitous as McDs, BK, etc., but pizza and Chinese are among the most common fast food alternatives to the primarily sandwich chains. (Fried chicken is the other.) And neither Chinese nor pizzas are very amenable to eating while driving.
Sure, unplug your microphone and webcam.
Nope. Would it be an email?
>It was likely the successful efforts of snack-food companies advertising to dietitians, and doctors, clueless about nutrition at the best of times, who simply went along for the ride.

How did he make that determination? Oh I see "likely"
I've worked with `js-ipfs` and their `js-libp2p`, they use a signalling server (actually two types of them):

- https://github.com/libp2p/js-libp2p-webrtc-star

- https://github.com/libp2p/js-libp2p-websocket-star

That would be going back to using a server for the handshake.

In regards to using a DHT, that's something I have not researched. I am not sure how long an offer is valid, were you thinking of being able to update them as needed whenever you want to establish a connection?
I will admit that public defenders are not as effective as private lawyers, but what would happen if we had nothing...people would still end up in jail most likely to a greater degree...perhaps we can iterate instead of innovate.
> You can accomplish 90% of what you want with RSS just by parsing the metadata on an HTML page.

I am not sure you can. Metadata is quite inconsistent and many websites that I have the RSS feed for block crawlers and scrapers. Advantages of RSS are common standard and design to be consumed by a bot. What we've got instead are curated fb and twitter feeds that people get hooked on and never look back. Openness is the aspect of RSS that I'll miss the most.
You can use any TOTP app.
Got an account? Check if you are affected here: https://www.facebook.com/help/securitynotice
Oculus Connect 5: Tech Talks Roundup – Facebook Code
I think that saying is only true when you know that company and its prospects very well. The question to ask here is will Facebook continue to be the ad-money tree it is right now?
I think there's an inherent conflict with RSS and content providers today. Think about it, an RSS feed allows you to get content without dealing with advertising, tracking, etc. Most modern content sites would not support that sentiment.

Personally, I think RSS was one of the crowning achievements of the web. So much so that I attempted to make a little tool to 'create' RSS feeds out of websites that I want to track: http://diyrss.info/u/meesles (the view for a logged-in user shows when new content is available to read)

But again, this isn't sustainable. Any content site depending on revenue would rather users visit their site every 2 hours for content updates than use a third party like Feedly or DIYRSS. I think the solution lies in a fundamentally different revenue model for content, at least for smaller providers.
Last Lecture by Randy Pausch

https://www.youtube.com/watch?v=ji5_MqicxSo
And yet... Japanese aren't obese and have a huge food culture (not just imported ones).
Not aware if there was an email, but I think there was a banner on the website that was shown to those potentially affected. If you didn't receive one then I presume you shouldn't have been affected.
I've been using it for a few years now and I haven't encountered a place where I couldn't use it. It might force you to enter the TOTP code at the end of your password though, but it works.
When are we going to wake up and understand Western companies need state help to deal with state actors? This isn't script kiddie stuff, it's other countries with billions of dollars in backing, built to tear apart our infrastructure, steal IP and gain a competitive global advantage.

The idea that FB or any Western company can stand against tens of thousands of Chinese engineers with almost unlimited budget is absurd. As much as the government and government interference is maligned in tech, we need to start considering a serious public/private cybersecurity partnership.
Probably makes sense to through Microsoft in there.

Also Amazon and Apple, too.
Exactly. Your body is very good at storing energy (fat). It's also pretty good at burning fat while running, especially at the slower pace that is typical of long distance running. You can eat a couple of thousand kcal in one sitting, but you can store a hell of a lot more around your waist. Getting enough water and electrolytes during a long distance run is much more important than having breakfast beforehand.
If you change the km to m: 299,792,458 metres per second
Thanks, I appreciate it. I feel great, I love Cross Fit -- the community has been VERY supportive and the box I go to is VERY good at modifying workouts -- I can't get down on the floor yet, or do lunges for example, but I still get my ass handed to me.
>How far are you going to have to go in Tokyo if you're craving Mexican? And is there even a decent Mexican restaurant in Tokyo? (I'm guessing the answer might be yes but not many.)

You'd be surprised.

https://www.tripadvisor.com/Restaurants-g298184-c29-Tokyo_To...
You can't embed uncountably many disjoint Moebius Bands in 3 space
Navigating the Gray Areas in Cryptocurrencies
Reminds me of a black hat I knew in the 90s. He bragged that if he ever gained access to a system, he'd start patching vulnerabilities so others wouldn't gain access and make it obvious the machine had been compromised.
Exactly, it's not hated. Almost every coding school and boot camp only teaches JavaScript.
Wonder how much of this is because some sites use it as a quick way to get content from another system rather than only for the user?

For instance, I know quite a few forums have RSS import functions, and quite a few CMS systems are set up to auto import content from an RSS feed (like say, an associated forum).

In those cases, the system sometimes doesn't let the user customise the output of the RSS importer, but does let them set what content is in the RSS file. So admins will provide a preview so their forum doesn't end up with the entire article or vice versa.
Not much a way to get around that. Removing 99% of fingerprinting identification gives a stronger fingerprint than many defaults.
"Of course, in some sense, Donegan didn’t have to worry, because no one is truly innocent. Even if you’re not guilty of the particular crime of which you stand accused, you’re likely to be guilty of something. It’s a Kafkaesque scenario. The accused can either refuse to engage, or try to maintain their specific innocence from a position of more general guilt. Either way, the trial is over before any defense can arrive."
I apologize for my uninformed question.
It's certainly possible to questioning anonymous' intent. For example who bought the weapons, not to metions all those Toyota Hilux trucks, for ISIS, and why?
I agree that the article isn't very clear on this, but I believe you're describing the previous work.

> Using current imaging techniques, measurements taken with ultrashort laser pulses must be repeated many times, which is appropriate for some types of inert samples, but impossible for other more fragile ones.

The new innovation here actually records the frames right after each other of one single event:

> The first time it was used, the ultrafast camera broke new ground by capturing the temporal focusing of a single femtosecond laser pulse in real time (Fig. 2). This process was recorded in 25 frames taken at an interval of 400 femtoseconds and detailed the light pulse’s shape, intensity, and angle of inclination.
The reality of supplements is that there is a limited number that are both safe and have strong scientific evidence backing them. Whey protein, vitamin D, ZMA, caffeine maybe a few others. If you buy those from any kind of reputable brand (Optimum Nutrition is a great place to start), there is absolutely zero risk of any of this happening. If you start taking sketchy pre-workout that boasts ridiculous improvements, then yeah you will end up getting a mixed bag of stuff. But the idea that this is hard to avoid is nonsense. Same with athletes who test positive and then blame a supplement. This problem is not at all difficult to avoid, you only find trouble if you're looking for it.
Gotcha, thank you for the clear explanation!
I eat once a day. I run almost every day. I lift weights at least every other day. I have been doing this for years now.

Our ancestors didn't get three meals a day. Millions of our contemporaries get real physical work done without three meals a day or worrying about glycogen or blood sugar. I may be an extreme example, but people worry way too much about skipping meals, in my opinion. It seems like a rationalization for avoiding hunger.
Thanks, that's good to know... I think w/ the added 60g of protein per day --esp on workout days, I should be okay hopefully. Might lose some, but not a lot of muscle...and I think the ketosis will definitely help tone me up as well along the way.
New Angular is more like Vue than it is like AngularJS (v1). Old AngularJS and Angular 2+ are very, very different. For that reason, many popular AngularJS (v1) apps have not yet updated (and probably never will without a total rewrite).
how much time is that for you? How does it compare to another dynamic site such as the one we're on (HN) when you're logged in?
http://fivefilters.org/content-only is your friend. I use the self-hosted version.
Nothing comes to a 50% page size cookie notification without an opt-out option.
Here is an article that goes in to the detail[0]. In so many words, you can use the superluminal telephone to transmit information to your own past. In essence, there is a certain amount of freedom in the simultaneity of events that is well-known to exist (having been experimentally verified). You can abuse it to create time paradoxes if and only if you can send messages faster than light - without FTL it is a curiosity that seems strange to some but otherwise doesn't upset anything.

[0] http://www.theculture.org/rich/sharpblue/archives/000089.htm...
Theodore Houser, a former CEO of Sears wrote a book, "Big Business and Human Values".

The book is really worth reading because the contrast between Houser and Lambert (and most all CEOs now) is striking. I think just the title of his book demonstrates how different capitalism is now in comparison to Houser's day.

"Human Values" is not something we hear CEOs or financial talking heads speak of much anymore. (Has Jim Cramer ever used that phrase?)

I will point out that Arthur Martinez did help bring Sears back to a customer centric business model in the mid-90s but he missed the boat when the internet came into the mix. Sears was perfectly positioned to become what Amazon is now and they did almost nothing to move on it.

Hard to imagine anyone rising up the corporate ranks like Houser did these days. I can't think of a single example that compares to it.

I think it would be interesting to review Sears fall from the top from that perspective because I suspect we'd probably see their decline began when they stopped promoting CEOs from within their own ranks. That changed the focus from their customers to their investors, and that's why they're where they are today.
You guys rock. Been binge listening your podcast[1]. Currently on episode 257.

[1]https://www.startupsfortherestofus.com/
Should it not be "Hackers Stole Detailed Personal Data of 14 Million People from Facebook" ?
By this logic everything is already compromised, because there are no major operating systems that have never had a security vulnerability and most logs don't go back more than a couple of months.
Undigested wood would come out your butt, hopefully. So it's still calories in, calories out.
I can't get over how many people on here are suggesting that knowing about CICO is "useless". Why? Because it is an oversimplification?

They underestimate how many people literally do not believe that eating at a caloric deficit would result in weight loss.
Title says 14M people but Facebook's notice says this:

>We have now determined that attackers used access tokens to gain unauthorized access to account information from approximately 30 million Facebook accounts.
Portion sizes are also much smaller.
Interesting. An accelerator designed for bootstrappers, but once you go through it, you're no longer a bootstrapper.
You're going to find a ton of people countersignalling Crossfit, and I'll admit it doesn't look like it's for me, but keep it up. You're going to be one of the success stories.
This is truly sad because RSS clearly fulfills a need that Facebook/Twitter feeds never will.

Just last month I launched a bipartisan political news aggregator to force us out of our filter bubbles[1]. The only way I was able to do that was by consuming the politics RSS feeds for both right-leaning and left-leaning news websites.

Without RSS, it's much harder to build an aggregator like this.

1. https://smashthebubble.com/
>our first priority was to determine how we could protect people most effectively.

You could have taken the site down until it was fixed.

So protecting people was your second priority.
Nng – nanomsg next generation
An end to the dollar's global hegemony? The Kremlin sees an opportunity
> I think there's an inherent conflict with RSS and content providers today. Think about it, an RSS feed allows you to get content without dealing with advertising, tracking, etc.

How so? I think RSS increases advertising and tracking in actual usage of rss readers. When I want to read the article I actually have to open the webpage. The RSS feed normally gives you a headline and if your lucky the first paragraph. So I am going directly to the source when I use RSS. When I use Google News or Facebook I am going to a lot fewer websites.
11% of Npm Audit Runs Show Critical Vulnerabilities
That's one of the numerous reasons I'll never use fb as a payment or ecommerce platform when they launch these products.
It would also be misleading to group them together.
I wish more services shuttered
this way because you can’t miss it.

I once had a web host generously give me three months to pay a delinquent bill that I missed the emails for. Sadly it just meant I thought things were fine. When they finally shut my service down, my users made me aware within minutes but it was too late.
Not that surprising although I'd reserve the "decent" adjective until I tried them given that I find few enough on the US East Coast better than passable.
My observation: In Japan, there is no bad food being served. I am sure it's possible to find, but despite years living and traveling there, it simply hasn't happened to me.

My hypothesis: Massive population density, combined with almost nobody home-cooking and then bringing in a boxed lunch, leads to a HUGE market for lunchtime food options (restaurants, bento). However, due to population density, rent is high, and so bad restaurants get pushed out quick, because if a place is bad, there are ten other options in the same building that are delicious.

So, I often wonder if US cities achieved the same population density, if we'd get the same level of amazing restaurants crammed into 10 story tall buildings, block after block after block.

As for why Japanese food is healthier, I'm just guessing culture.

It is truly remarkable though that I have literally never had a bad food (taste) experience, ever, in Japan, despite having eaten thousands of meals and snacks there.
MotionMark 1.1
I would like to believe that someone is checking that he doesn't short his own stock ;)
Apparently we do use it for different things. One example is Raymond Chen’s excellent blog The Old New Thing, which has formatting that often breaks completely on RSS, to the point of being unreadable (he does not have any influence on the blog software as far as I know, though). Generally, I often noticed that articles look (and sometimes convey their content) much better on their actual websites, since that’s what they were formatted for first most.

Much more infuriating is that the various “Reader Modes” in browsers and e.g. Pocket sometimes not only tends to omit images, but even whole paragraphs of the text. It’s hard to notice that you missed a paragraph that you don’t know existed, so I don’t trust them anymore. I believe that should be less of an issue in RSS, since it of course includes the text to be displayed in the feed. Still, since I cannot be sure that authors take full attention to their RSS feeds, I prefer reading them on the website just in case some other formatting quirk messes things up.

Stuff like info boxes or illustrations might not even be part of the main body.

In that way, I actually prefer it when the RSS feed just contains a meaningful preview. Though I guess the correct solution would be to include both a preview and the full article, designated as such in the structure.
What exactly is so difficult about DOM manipulation? I honestly don't get why people see it as a problem that warrants zillion badly written frameworks, while other critical language issues are pretty much ignored.

The DOM isn't a language issue, it's an API issue. That issue has gotten much better in recent times, but jQuery became popular because those API issues were so big. Today, you look at caniuse and see that almost every new feature is not implemented or partially implemented by at least one browser.

That's bad when talking about something like the File API, but that used to be the case for DOM primitive operations. Instead of one browser, every browser implemented almost every feature in an incompatible way. For example sizzle (the selector that's the foundation of jQuery) came into existence because there wasn't a unified way to do something as simple as selecting a node from the DOM.

Things like querySelectorAll have made life easier for most of us, but the DOM is still a maze of barely compatible implementations. I don't dislike it to the degree I used to, but I still don't like it.