skysight-inc/HackerNews huggingface dataset:
Lots of countries legally require that hotels collect and store passport details of foreign guests.
No, you get another 500 MB of tmp space you can use at runtime. This workaround does work.
Not just software patents. All patents. What makes software industry so special?
Blackbird: Cloud-Based Video Editing and Publishing
In many countries hotels are required by law to keep passport numbers of foreign guests.

In the US there is, apparently, no federal law; however, it is often part of state law: https://travel.stackexchange.com/questions/76012/laws-requir...

In many more countries hotels do it despite it not being required; they just do it to assist law enforcement agencies.

And doubtless they like to keep the data themselves as an effective way to track and mine guests across multiple visits.
Driver loses his car to hackers. TWICE. – Naked Security
A single one-off photo or video of an influencer with a product would rarely if ever produce enough revenue to justify a 6 figure spend, even with the largest influencers (Selena Gomez, Ariana Grande, etc.). Those deals with high per-post prices are usually for several posts/videos/stories. For example, a $1 million deal for 10 posts spread out over a few weeks or months with someone that has a massive following may have a reasonable chance of generating positive ROI, while a one-off deal for $100K is almost certain to lose money. It isn't just the exposure that makes it effective, it's aligning the product with the influencer. Doing this dramatically improves the conversion rate among their followers. I'd much rather have a 10% conversion rate on an influencer with 10K followers than I would want to have a 0.5% conversion rate on someone with 100K followers. I'll spend far less on the 10K media buy, and make twice the revenue.

Dan Bilzerian, for example, generated over $500K in marijuana prodct sales on black Friday, largely because of his social media posts. But he has aligned his entire Instagram account and his perceived lifestyle around the brand (he owns the company). That figure represents the culmination of months of posts surrounding his brand of marijuana products. The same with Kylie Cosmetics - it has become something that Kylie Jenner is synonymous with.
It's like you need to keep a running diary of every single service you've used / every single place you've been so when something happens like this, maybe you can find out if you actually used that service or visited that place.

I think I stayed at a Starwood 2 years ago in PA? But I don't remember if it was a Starwood or some other Marriott brand.
>If your country has "democratic" in the name

"The United Democratic States of North America not including Canada" would be quite the name.
Lets be honest, all reversible encryption schemes are some version of this...
> Just 15 years ago

Yeah you were still being tracked. It's just a lot easier and more specific now. But everything about you that's public record, or even semi-public, including your credit reports, housing history, leins/judgments, voter registration, bio/demo data from any product registration card you ever sent in, purchase history from credit cards, etc. was in marketing databases and bought, sold, and traded. This has been going on since the 1970s at least.

But you're right, it's MUCH more pervasive now.

However, if you really yearn for what it was like 15 - 20 years ago, there's an easy solution: Don't be online. At all. Just like it was then.
Here's a link to the official Marriott release, FWIW: http://news.marriott.com/2018/11/marriott-announces-starwood...
It seems to not be working well.
I've already have the Firefox Multi-Account Containers [1] extension, but I wanted to try this extension. The problem is that it has some conflicts, and now after uninstalling it I can't open any *google.com domains, it crashes and closes the tab.

1: https://addons.mozilla.org/en-US/firefox/addon/multi-account...
I know people see No. 29 on this list and decide that their product or service will only be used by English speakers of European descent, but from experience even with these extraordinarily low requirements for testing most services fail. I’ve got three short (<8 letters) entirely ASCII names, and even then I still have trouble:

* I regularly get letters addressed to my first name and my middle name, missing my surname.

* Banks and airlines always seem to try a different way of dealing my middle name, from only using an initial to abbreviating it to anywhere from three to six characters.

* A friend once got issued travel documents where all of their given names were concatenated together (no spaces) and printed after their last name.

* Many websites still require you to pick an honourific from a drop down menu, but the options vary considerably (and usage is different in every country, even with a common language). Just make it a text field and be done with it.

I really don’t think it’s too difficult nowadays, especially if you’re writing something from scratch, to just accept really long Unicode strings and store given names and surnames separately. And it’s not like testing this is difficult - you can find datasets of a few hundred names in different languages and scripts fairly easily.
Ad d: an acquaintance of mine named his son after himself. We don't do suffixes here, so no "II." or "Junior" - they're both Mr. Foo Bar, at Baz Drive, Quuxtown. The age differs, of course, but rarely does anyone collect it, much less use it for disambiguation. As you say, it's a mixed bag - either you get to impersonate the other, or the police gets all confused when looking for a rowdy adolescent and finding a middle-aged man, or you just can't get booked ("we already have you here" "no you don't, that's my son" "that's impossible, there can't be two of you, computer says so!").
"We cannot find any evidence that the stolen information has been misused" - says every company ever, as if that means anything.

I give it 24 hours.
Funny that this guy is pouring so much effort into creating the perfect corner, while his actual house looks like a mess.
I have a domain I use with Fastmail that when I use a service or website, if I need to register an email it's always:

service or websiteName @ mydomain.com

Doesn't cover all, but at least it's something...
It is telling that the author of this article has not yet given up his MacBook. My own move from Macbook to Dell/Linux took years, and I still find myself saying "this would be easier on a Mac." The user experience is really the best their is. Good luck with the switch... your values will be tested.
IMHO, this is what Notion gets right. At heart, it's less of a todo/work tracking app per se and more of a database with user-friendly views, many of which can be tailored to todo/work tracking, and many of which come with reasonable default setups that match common usage patterns.

We're using Notion right now to manage user research, sprint kanban boards, and a wiki for a Code for Canada project. As part of the wiki side, we can embed InVision mocks, RealtimeBoards, Google Drive docs, and many other things directly into our pages, in a way that allows us to interact with (comment, edit, etc.) them. About the only thing I find missing is full-text search across pages; other than that, it's been really quite great as a central place to organize the whole project.

No idea if that will remain true as they scale up, but for now they seem to have found a way to break the "only works for a specific niche" pattern, and they're carving out a meta-niche of "teams whose work isn't easily captured by previously defined specific niches".
I'm also old and crotchety, and also prefer books to videos. I don't know why.

Give me an in-person training course, brilliant, I'll happily watch and learn from an expert. But I just don't like video courses for some reason.

I'm actively trying to rid myself of this mindset as I recognise the benefits of using such a huge range of - really very good - resources. Maybe a 2019 New Year Resolution there!
It would surely be

"The Federal Republic of the Democratic United States of America"

(I've been in Africa waaaaay too long :) )
Can you not link the AMP page? Thanks google.
Non AMP link https://www.businessinsider.com/why-im-never-buying-an-apple...
Odd, I've rarely had this issue, and almost never need to do complicated math on the index of a range (maybe "multiply by two and add one" kind of stuff, but nothing from the "math" pkg). Also, note that the math.* functions all use float64, not in64.
Privacy is dead. Long live... ?
Odd. It looks like the intrusion could be the cause of the hurried merge.

https://www.wsj.com/articles/inside-the-marriott-starwood-lo...

According to the article the systems were merged 3 months ago.

"The company resolved one major issue involving elite-night credits earned from credit card spending just last week, more than three months after the integration. That problem left many members in limbo, unsure of how close they were to hitting elite-level thresholds before year’s end."

The intrusion was detected on Starwood's system in September according to the BBC article.

"On September 8, 2018, Marriott received an alert from an internal security tool regarding an attempt to access the Starwood guest reservation database. Marriott quickly engaged leading security experts to help determine what occurred. Marriott learned during the investigation that there had been unauthorized access to the Starwood network since 2014. Marriott recently discovered that an unauthorized party had copied and encrypted information, and took steps towards removing it. On November 19, 2018, Marriott was able to decrypt the information and determined that the contents were from the Starwood guest reservation database."
I agree; another colorable shorthand might be "if someone can plausibly claim it's a security, it's probably a security".

I think the important bit for this thread is to distinguish between product endorsement and investment endorsement. The law, of course, sees those as two very different things.
IEEE:Scientists Get Serious About Low-Energy Nuclear Reactions
How is that the "Oh dear."? Do you work for a bank?

That seems like the least interesting bit of information here for individuals.

It's really bizarre to me that people here seem to consider their credit card numbers more sensitive than their travel history or even contact information.
Imagine you could make payments with a salted and hashed credit card number.

Except that doesn't really make anything better, because now an attacker could simply use that salted and hashed credit card number elsewhere to make payments too!

The real solution is to use something like OAuth for payments. You authorize a merchant to take ongoing payments from you, and the card issuer gives the merchant a token which is only useful for making payments from you to them, and can't be used to make payments to anyone else.
Using Elasticsearch as the Primary Data Store in an ETL Pipeline
Are you really suggesting that bruting cc #s would be a viable method of committing fraud?

If yes, how much would you expect the bruteforcer to earn per successful attempt?
The FTC is an entirely different authority than the SEC.
This is what programming does to you. It makes you take tons of pictures of corners to prove a point.
Porting Matrix Synapse to Python 3 [video]
I use the Temporary Containers extension and it does much of what you're looking for. I have it set up so every tab is opened in a new container and the container gets deleted when the tab closes. So everything is kept separate from everything else.
My (admittedly unsophisticated) mental model is that int32 and the like are simple primitives that can be stored in registers and use the processor's native ADD/MUL codes, while BigInt is going to be some boxed structure with its own implementation of arithmetic operations. For as common as number munging is (especially in somewhat lower level code that Go shoots for), it would carry a huge performance penalty, wouldn't it? Or are there more sophisticated ways of offering a "true integer" type that I'm not aware of?
Isn't the amp page better? It loads faster, has just the content I want, no extra JS scripts and less adds. Just because google defined that format people shun it?
yawn. these posts are tedious....who cares if this person buys an apple computer. how does this even get picked up on HN?
There is no link to just download openvpn config files for *nix users. Does it even use openvpn?
This is why I do my upmost to avoid entering payment details on as many sites as I can.

Unique passwords (and usernames too if that is an option) are easy to manage via lastpass et al. Unique email addresses are harder but you might be able to fudge something using the "+ label" feature. But the real challenge is payment details. I'd be quite happy using Paypal everywhere if that were possible as then I'd only need to worry about Paypal getting hacked.

What I really don't like is shopping sites that require me to enter my payment details (or worse: require me to save payment details). I avoid those places in almost all cases.
Does this use the FS or is it purely in memory?

I've got GBs of CSV data that I'm managing manually and due to response times, need solutions that reduce wire trips. This means that traditional databases have proven difficult due to the distance between process and DB. Something designed for local usage (SQLite/etc) is an area I want to research, so ObjectBox sounds interesting on that front as well. Though, it looks like its goals are mainly IoT, so I'm not too hopeful on this front.
Some percentage of people have a different dad than they or the world thinks. Some are adopted and don't know it. Some have genetic disorders they don't wish to publicly disclose.

Methinks this goes from frying pan to fire.
A New Revenue Stream from Your Archived Projects
Start here to see some actual numbers, as I'm explaining how we plan to do this further: https://realtimeboard.com/app/board/o9J_kywtFp4=/

### The Plan

If you're like me, as years went by you've gathered a strong portfolio under your belt. Some projects by working for clients, others from experiments or pitches. Where did those projects end up? I bet forgotten in an archive somewhere on an external drive or Dropbox. :-)

What if you could monetize them without re-selling the code your clients already paid for? I'm speaking about 5 digits in ARR on average, a pure SaaS play.

The bottom line is you have some value on your HDD, and this time around it's not Bitcoin. It's your past work covered in digital dust. And we've been working on a product to extract that value and enable access to it for thousands of people. And guess what, our hypothesis works!

So we're now we're opening up the platform to 25 partners for our first pilot program in Q1 2019.

### Submitting Your Work

We cannot accept duplicates or dismiss quality, so you'll work side by side with us as a partner in the first batch. We'll help you select the right work from your past projects and set it up for success. And you'll help us refine the product for everyone else that follows.

Now, let's see your work that contains interactive elements you think might be a good fit for our library! Post in this thread a link to where I can see some of that past work. I'll contact you if you've got an email at that link and the work is something we deem people would want to pay for.
Understandable - but I think his criticism of the T2 is totally wrong we need secure computing devices, especially with biometric identification. There are banking Apps using Touch ID or Face ID.
> some cool systems level programming.

What projects did you have in mind? I think the answer to your question depends on what you mean by "systems level programming" and what you plan on doing/trying.
Going back and listening to the example again, I can see (well ... hear really) how the music feels like it "surround" you (it a bit difficult to identify where the sound is "coming from"). But for the most part, you just ear the music panning left and right.
Not if you need to reverse it to actually send to payment card processor.
In my case it's not a hobby. I actually hate wasting time and money on these kind of things. But on the other side I'm legitimately scared about what's happening with all my digital information. It could be paranoia because of all the privacy movement and the recent scandals but it's not worth the risk when you have very easy to setup tools to improve your privacy like that ones you mentioned in your last paragraph which is exactly what I'm currently using (+ DDG for searching).
Thanks for this. My yearly license has expired, but now I will take another look.
I've never understood why people insist on writing articles detailing, "Why I'm switching away from X." If you don't like it then don't use it. There's no need to make a big deal out of it.
That’s quite a lot of gasoline being thrown on the whole train wreck that is the Starwood integration.
well possibly not. If the attackers got the keys to decrypt payment details that means that victims, in addition to the identity theft risks, may also face fraudulent transactions on those cards as a risk.
I went to a college where all three professors who taught Chem 101 would collaborate on writing one exam that students from all three classes would then take at the same time in an auditorium setting. This kept the testing fair over the entire course and forced the professors to teach material based on agreed upon in advance topics to certain standards.
I'm not quite sure whether irreversible encryption is a thing in this context (its sometimes used to talk about e.g. password storage, but I think that's a very different use-case), so I'll sally in with an interesting tangent:

https://en.wikipedia.org/wiki/Homomorphic_encryption

Homomorphic encryption is a form of encryption that allows
computation on ciphertexts, generating an encrypted result
which, when decrypted, matches the result of the
operations as if they had been performed on the plaintext.

Homomorphic encryption can be used for secure outsourced
computation
...
It has terrible formatting on a desktop, with the text spanning the full width of the browser window.
I don’t follow. Why is it the size or structure of what’s being encrypted that matters for brute force time rather than the key space of the encryption algorithm.

Password hashing is different because there is no key space.
KingMiner: The New and Improved CryptoJacker
So now we are pointing fingers at Google every day? Are they the new Muslims or Russians?
Combined with a unique string, or just the bare name?
DataEngConf is looking for a technical Head of Content and Community
Hakka Labs is looking for a Head of Content & Community to be responsible for all content & community efforts across our network internationally. Top data scientists, engineers, analysts and technical founders around the world look to our events for the best technical talks, career opportunities and community experiences.

The Head of Content & Community will report to our founder (a former software engineer), and will work to design and execute our community strategy. We are successfully building a “no-bullshit” technical brand and the strength of our community is the main thing that differentiates us from the watered-down “data” conferences that already exist.

We source all our technical content from members of our own amazing community of data scientists, AI researchers, software engineers and academics. To succeed in this role, you must have previous software engineering experience yourself to be comfortable speaking the language of software engineers as well as the capacity to review technical content for quality.

Our team is fully distributed and embraces the remote work lifestyle. You’ll have the freedom to work from your desired location while attending our conferences and building out our community worldwide.

We're a scrappy-but-global-startup (operating a growing cash flow positive business!) that hails from the 500 Startups school of 'distribution hacking.’ We’re building a global community of highly demanded, deeply technical data professionals and academics.

Apply here: https://hakka-labs.breezy.hr/p/a817ecd8888f01-head-of-content-community
Maybe keep the keys only in memory in each application? Pull them from some very well monitored service once at startup? Anyone who gained access to the server would have to check the program's memory to get them.
It's other way around. Priests used to be the science class, but a few hundred years ago they split into 2 camps.
I live there, it's a bit exagerated. But I wouldn't recommend coming in the forecoming month. If you really want to come feel free to ping me if you need some advice.
Definitely Eric Lander's Introduction to Biology - The Secret Of Life class (MITx 7.00x)

Firm grounding in the Central Dogma. Covers the entire history of genetics. From Gregor Mendel's peas. To Morgenstern's Fruit Fly Lab. And right up to the present day Supreme Court BRCA case and CRISPR/Cas9. Essential background for understanding the coming century of New Biotech.

https://www.edx.org/course/introduction-to-biology-the-secre...
What Are Common Sports Injuries and How to Treat Them? – EUP Portal
People write a whole universe of articles. The question to ask is why are we looking at the subset with this form.
I'm certainly not an expert (beginning Python programmer who knows very little about Javascript), but I thought it was because divs can be responsive and tables can't be, but I'm prepared to be corrected on that.
For the clicks. This is Business Insider not a personal blog.
Profiles provide isolation at the browser level, containers at the origin/domain level. Different profiles are essentially different browser installations that share nothing more than core browser code: extensions, settings, and even looks. It can get tedious to have to replicate one's browser customisations in every profile. Containers bring convenience.

I never made a separate browser profile for Facebook, but the moment Firefox's Containerisation was available in Test Pilot, I made a container for all things Facebook.
Even if the payment information is in plaintext it'll primarily be the banks who are affected, not the customers.

I'd be far more concerned about my privacy than my banks money.
Ask HN: I've been a developer and a PC Techie: Where can I go from here?
So, a bit of context: in college, I worked 3 years as a student PC technician, and I've worked 2.5 up to the present as a software developer (Java/Spring Web Dev).

I'm very enthusiastic about computers, both hardware and software, but haven't decided on a good way to incorporate both in my professional work.

I enjoyed the PC tech job more than being a developer, so should I just transition into a full blown sysadmin role w/ software knowledge as a bonus? If so, are there any recommended programming languages I could study?

Thanks in advance!
Small example with ny own name: In my home country im called Jüri, in Finland probably Jyri, in Russia Juri, and in the passport it’s also written as Jueri. Some people write it mistakenly as Yuri.
Depends on the use case :)

If you don't need to decrypt the data on the same system, you could always use asymmetric encrpytion, so encrypt with the "public" key and then keep the private key elsewhere.

If you require to be able to decrypt on the system in question then you need a key somewhere, so secure storage of the key is very important.

One option, often deployed in banks, is to store the key in a hardware security module (HSM) and then ensure that it's not available outside of that.

There's a load of tradeoffs to using HSMs but they can be useful where symmetric encrpytion is needed.