skysight-inc/HackerNews huggingface dataset:
We will never know if that is actually what occurred as all of these cases were prosecuted behind closed doors.

No Australian embassy officials were permitted to assist or even observe court proceedings.

Needless to say, this is not the way a country with a fair justice system behaves.
> OpenVPN

They'll probably want a backdoor in that too.
I didn't read the comment as tu quoque, I read it as "it's a bit shit everywhere". Even Canada treats native populations badly, I don't know what things are like in the Scandinavian countries.

Too bad, it's almost 2020 and we still can't get "treat people well" right. What hope do animals or the environment have?
When I tried listening to Security Now! I was always sceptical about SpinRite claims and especially those fake gushing reviews from "users".

I'm actually pretty dubious about anything Steve Gibson says. I think he paints himself as an expert in things he clearly isn't.
They are one of the five
Sounds like the Unix philosophy: "Do one thing and do it well."
After reading these comments it's quite apparent that you can hold pretty much any opinion as long as you can cherry pick facts about either side.
Vic Gundotra was a turkey trying to be an eagle with this stupid twitter commentary.
Trust is lost in buckets, and earned in drops. The US will learn this the hard way. There's never been a discussion about a European army, now it crops up, for example.

Even if the next administration is deemed trustworthy what's with the one coming after that?
Clearly there was an organizational reason, but those reasons had nothing to do with what she actually needed according to her physicians, which was rest and painkillers.

What you've just said supports the article's argument that hospitals are designed to prevent people from sleeping.
TERAWORK Freelancing
So its 95% bing/yahoo. I wish they were more transparent. But it does not sound nice when they say do not useevilgoogle instead use our slightly modified bing/yahoo wrapper.
The impact of the gnu manifesto was pretty big. We talked about it, wondered when he'd get a compiler better than the PCC. I think we (leeds uni, 1980s) said years off but actually gcc 0.9? Came out far faster than I expected.

Roll forward 10-15 years. Former compiler writers out of work. Gcc and llvm killed the market. On the other hand we have really good competing duopoly of compilers and lots of upper language support and diverse languages. So.. win some lose some. And it's not like rust and go and Java have to use llvm and gcc. Rust does. Go doesn't always.
Censorship didn't die with Conroy. Australian ISPs/DNS servers are required to block The Pirate Bay, for example. Just because it's trivial to work around doesn't mean it isn't censorship
I doubt you could introduce backdoors in big software (Messenger, iMessage, WhatsApp) using only one/a few employees - unless everyone who does code reviews happens to live in Australia.
As of iOS 12, you can do the same thing by long-pressing the space bar. This works on phones without 3D Touch.
I understand it must be hard for a small company like Google to release and push to all users an iMessage/Telegram competitor with great group chat and video capabilities. https://gcemetery.co
Salesforce Wave Analytics: Transforming the Traditional Way of Reports
Your response nitpicks the particular example but what about the general phenomenon? Are you saying there are next to no instances of it?
War is Peace; Freedom is Slavery; Ignorance is Strength.
I agree 100%, but we can assign just as much blame to Morrison for presenting the bill as well.
True. Alston had a lot of this story too. Brian Harradine and redneck wowserism. But what we got was less than the moral crusade and the police wanted going in.
Don't launch in Australia.

Or don't launch in Europe.

GDPR and this legislation are in direct conflict. Pick a market...
Well ideally you get in early and catch it in a mandatory PR process, all PR's pass through EU devs who are the only ones who can merge.

Otherwise yes, security certification process to review existing code and then maintain as above.
This is why the really big storage systems use erasure coding. At scale, RAID-5 and even RAID-6 are vulnerable to these kinds of overlapping failures. Not theory; seen it happen.
I’m sure your customers will believe you if you say that your government did not tell you to lie about backdoors and weaknesses in your products security.
Safari is so underrated, if only FF could be better on Mac
> How would you do this in a typesafe manner (i.e. "as" only works if Derived is actually inherited from Base) on JVM?

On the JVM or in Java? In Java you don't do it in such a safe manner. Whether you should or shouldn't be able to is another matter. If you want to write a JVM language where you want to do that safely (like Ceylon), you just reify your type -- at the cost of interop and reuse. Opting into reification is cheaper (at runtime) than opting out.
> Targeted ads are a significant revenue source for all of these companies

I'd like to see some documentation for that claim. Company financial reports? What percentage of Apple or Microsoft revenue comes from selling ads or user data? (Not revenue raised indirectly by them spending on their own advertising)

> that also doesn't explain why Google's stack is harder to leave than the rest.

Parent comment wasn't comparing the difficulty of leaving Google with the difficulty of leaving Apple/Microsoft. The comment was about leaving Google in comparison to leaving Facebook, in the context of a discussion about personal privacy.

I think bringing up Apple & Microsoft is a non sequitur in this context.
O2 in UK down because of software issues
Thing is that you are never going to be able to hire good managers 100% of the times if you are scaling. So entire focus of scalable process should be on how to minimize, defend against and eliminate bad apples as fast as possible. The primary mistake that many companies make is to have manager implicitly trusted without validations and give them almost dictatorial powers. The good process would add checks and balances even at CVP levels, for example,

- hiring by committee as opposed to whims of a given manager

- introducing bar raisers in hiring loop

- promotions requests reviewed by independent committee

- demand for metrics driven automated dashboards

- enforcing skip level 1:1s

- anonymous surveys and complaint box

- enforcing culture of proper credit attributions instead of "we did X"
Indeed, the laws of mathematics make this impossible. Count yourself lucky to be living in a country where the laws of mathematics don't apply.
China’s Surveillance and Social Credit System Alive and Kicking in Berlin
Praise in public, criticise in private. Give the team credit for success and take blame yourself for failure.

Get those right and everything else will follow. So simple but only a fraction of managers get it.
Great point - the reason why no one is talking about this is because they have NO IDEA if the manager is good or not.

Many assume the people that they hire are flawless. That's why you see all the posts on hiring. It's easy for people to think they know everything at this point. It's like celebrating after you acquire a customer...what really matters is if they stay (and how long).

Currently, there's no feedback loop in place to surface this information. Some companies will do a culture or 360 survey that highlights a few issues here and there, but it's a poor process for determining competence and it's administered by HR (or some function of HR). It needs to be owned by the team leader (and hopefully their boss).

I've been working on an app (https://www.fridayfeedback.com) for the last three years to try to help this. Eng teams love it because it's asynchronous and surfaces new insights to help teams improve.
The most important part for me:

> I’m really happy to announce that we will now fully support Qt for Python, making all of the Qt APIs available to Python developers.
I believe reasoning behind it is that you might end up leaving those switches off and burning through your data plan/wondering why you AirPods no longer work.
> Suddenly, everybody is absolutely horrified by the fact that Facebook is selling people's data

Facebook does not sell data. Facebook simply provides a platform for advertisement and to their credit because of the scale of facebook its easy for people to run ad campaigns.

Other than that I absolutely agree with the arguments here. Traditional media is hardly impartial or even a good source of news.
Ouch.

Since I'm using Fastmail ... can anybody recommend a good alternative? I don't mind paying for a good and secure E-Mailprovider.

Protonmail looks nice, but it does not seem to offer IMAP (because mails are end2end encrypted).
Not relevant, but I love the old-school spelling of "gaol". Is it still used anywhere or are you being whimsical?
Right, but then the employee can publish statistics about how many TCNs they've received.
> I believe you can long-press to get the same effect.

Only in certain situations.
The fact that the parent is pro-chinese is pretty clear, I don't see what digging into their post history adds to the discussion, especially since in this case it's tangential at best.
Facebook internal documents have been published online
> The "back" button. For every application it's in a different location.

Swipe from the left edge of the screen.
When the Roman Empire found Jesus and slowly devolved into the Roman Catholic Church over the next thousand years, its "war on paganism" spread throughout Europe and Asia, with a death toll that is hard to estimate, but easily in the millions if you add up all the crusades and inquisitions.

Unsurprisingly, many pagans chose to convert to Christianity, rather than be murdered on the spot.

So maybe we can stop using this word "beacon", and use something more appropriate. How about "fortress"?
Ask HN: How to report email leak from Google Datastudio?
Hi.

After a company I work with send me a link to their Google Datastudio report, I realized that I could access it without identification (visibility is set on User with link).

So I thought that I could try random combination to see if there are other reports like this. Of course, after 2 or 3 tries, nothig came up.

Then I tried looking directly in Google with a `site:` search.

As you can see if you try it, there are a LOT of reporting accessible this way.

And I found some with email lists (didn't have to look very far... Took like 30 seconds) and thought : this is a GDPR problem, and I should warn them.

As I'm not in security business, what are the best practice to alert the people whose list belongs to ?

What to do if I can't identify them ?

And, was it a good idea to discuss it here and should I delete this ?

Thanks in advance for your answers.
But that's what I just said: resistance to change in v, a, p are the dictionary definitions I found on Google.

You're right about v. I thought a negative velocity was equally absurd, but it looks like it's defined as a vector which makes sense of course. The last time I took a proper physics course was in high school. How embarassing though, as I've read and watched more popular science/physics material than most people, probably. Hah.
Why not name and shame? I agree that you fear retaliation from another company thinking "what if he blows the whistle on us at some point?" and not hiring you, but I don't know, is that a company you'd like to work for in the first place?
https://github.com/mattdiamond/fuckitjs

And

http://zombo.com/
It is an absolute national shame. MSF recently likened the mental health of the people on Nauru to victims of torture.[1]

The most disturbing aspect is the strong bipartisan and public support for the ongoing abuse. Every Australian should wake up in the morning, take a long hard look in the mirror and ask themselves if they're proud of what they've become.

[1] https://www.msf.org.au/article/statements-opinion/indefinite...
But the service you get from German government is so much better, healthcare is a good example here.
> make you choose between letting Google track you fully

It's not black and white. Turn off blocking when logging in and turn it off when you have the access cookie. Yes, it might be a tracking event, but you are not forced into having your privacy blockers turned off all the time for Google.
Thanks! I don't hosting overseas would work, but then again - who knows how it would be implemented.
Careful criminals will surely be able to find a set of software that isn't affected. Australia isn't the US, only a small portion of software companies would have a large local presence here.
Not a system gesture, but installed for sheets on a per-app basis.
Pubfront | Android Developer | Copenhagen, Denmark | ONSITE | www.pubfront.com

- About Pubfront

At Pubfront, we help publishers and media companies succeed with their online strategy. Our technology is proven, easy to use, and we can set it up quickly.

We are continually improving the capabilities of the white-label eCommerce technology for the publishing industry, as well as looking for new areas where we can make a difference for our customers.

- We are looking for Senior Android Developer

You live and breathe Android, recite the User Interface Guidelines in your sleep and your left eye starts twitching when somebody fails to comply with best practices. You are committed to building reliable and usable apps, and can showcase multiple such apps that you’ve worked on in the past. As part of a team of developers, you are adept at cooperating with others as well as working independently.

Pubfront maintains several Android apps that are branded variations of the same codebase. You will be taking over development of these and take responsibility for keeping them up-to-date, implementing new features and releasing new versions

Full description here:
https://thehub.dk/jobs/senior-android-developer-advancement-...

Email: ta@pubfront.com
Adding another tool/process has associated costs. What are the benefits of node-publisher that outweigh just using travis CI or whatnot?
Huawei finance chief arrested in Canada
https://www.news.com.au/technology/online/security/inprincip...

The (autoplay! grr) video summary at the bottom is pretty good.

State police forces are getting these powers. So state police, federal police and ASIO can compel devs to break their security for the investigation of any crime that attracts a penalty of 3 years jail or more.

This is not an interim arrangement either.

God this whole thing is so idiotic and scary.
Prognósticos apostas e Probabilidades Futebol
So australian software developers have become pretty much toxic now?
Could any developer put backdoors in under promise of a suitcase of cash?

If your review system fails because your Aussie developer "may be compromised", it fails because your $good_country developer may also be compromised.
Is this a joke? That whole blog post reads like satire.

Communicating with the people in our lives is one of the most important things we do every day, whether it’s chatting with friends about an upcoming trip, calling mom to check in, or touching base with colleagues.

So when I'm forced to move off hangouts for those connections that I still user over it - what do you think the chances are that I will choose a google product?
She said it wasn't created in her spirit and that she wanted to do it differently. I heard she rejected being connected to the project and you were not allowed to talk about it in front of her.
“Not as good as pip, but it’s more reasonable than Pipenv. Also, the codebase and its layout are rather convoluted. Poetry produces packages instead of just managing dependencies, so it’s generally more useful than Pipenv.”

Can anybody confirm which codebase is being described as convoluted here?
That's the scary part about this - a company is not allowed to tell people when the data was accessed
To be fair if people's opinions can be swung by what they read on ome single platform, people are not being too smart here. This is different from the usual "you cant trust the internet" rhetoric. You can, you but you just need to ensemble your information sources. Treating websites individually as a weak source of information can prevent the bubble effect. And if people get swung by FB then those people are morons.
Centralization,Orchestration, Prioritization of Threats with LTS Secure SOC
I were, unfortunately at 3 years old I wasn't interested in computers much, and I didn't have the means to get MIT papers (or any recent papers, or the knowledge that such papers exist for that matter) even when I developed interest in computers.

But, yeah, being born in right time and place would be wonderful.
I’m flagging this for the racism of “inner city kids” and their supposed lack of intelligence.
And that's where you would be wrong. HN is a lot more naive than I would have expected
It is well worth a mention that srfi-42 inspired racket's loops. It is actually a pretty neat looping protocol, and I ended up looking at it quite a lot for inspiration when implementing my own loop facilities.

The reference implementation is pretty cool since it is implemented only using syntax-rules (the standardised high level, strictly hygienic macro facility of scheme). That is a special level of masochism right there, but it is probably also why the reference implementation has to use set! instead of generating pure tail-recursive (and thus continuation safe) code.

I ended up implementing something not unlike racket's for guile scheme [0] using syntax-case. I find that syntax easier to work with and understand, and the code generated is better than srfi-42. In fact it is almost always zero overhead, just like racket's loops.

[0]:https://bitbucket.org/bjoli/guile-for-loops the readme is not really correct. I now support both pre-checks and lazy loops, but I am cleaning some things up for a first release. The docs are here: https://koketteriet.se/software/guile-for-loops/docs.html
Most of the books/articles you read will give general advice, which varies depending on the individual/team. Here's what I typically recommend:

1. Create a continuous feedback loop with every single person on your team. This is why 1-1 meetings are extremely helpful.

2. Understand where each person on your team wants to go (career goals). Do they want to become X in 2 years? Do they even want to work in tech at all? Find ways to help them get there.

3. Document all the important conversations you have. Share it with the person. Most miscommunication happens when you talk about something and it's interpreted in various ways. Documenting these conversations and sharing them helps cut down on this.

4. Act like you care about them as a person.
Can launches can be targeted (legally) to a country? The site is hosted in London and am already GDPR compliant - wonder if this is means it is not under Australian laws?
Possible it will go nowhere.
How can Apple for example provide a backdoor for imessage which isn't a systemic weakness?
It‘s a result of the compromise: building the flats where old, legally protected structures should remain. Giving the constrains, it‘s quite a success.
No reason for them to be getting it.
Stealing a bike out of your front garden is no where as near a violation as entering your house (castle) and taking it.
I think the debate is whether you think that Iran has done something that warrants the sanctions and if yes, whether you think sanctions should also be imposed on Saudi Arabia, who has unquestionably done much worse, or is this not an objective standard that the U.S. follows and only select 'rouge' states fall under them, whereas other rouge states do not, as long as they maintain sufficient trading relationships?
Oh yeah EU certifications are sadly super weak. Now to your original point, I think it's quite possible to have an open review system. Linux and the likes have shown great capabilities in finding and fixing issues fast. With a national effort to ensure paid engineers it's not science fiction.
Deep Learning in Compilers
Could someone explain what laws were broken ? I can't understand what's the matter if a foreign national does trade with Iran ? And its kind of suspicious that Huawei, a telecom giant , is the prime target given how much lobbying is done by telecom companies in USA.
Wizenoze | Site reliability engineer | Amsterdam | REMOTE | www.wizenoze.com

WizeNoze is a growth-stage startup which develops software that enables students to find educational content online that matches their interests and abilities. We use natural language processing and machine learning to classify and adapt content in our search engines. You’ll be responsible for site reliability along with the CTO. Everything from defining system architecture to working out tough performance problems across our AWS systems.

We’re open to remote work in time zones within two hours of Amsterdam (GMT+1/CEST).

Full description: https://www.wizenoze.com/2018/12/04/senior-site-reliability-...

Email: jobs-sre@wizenoze.com
Eye Scanning Lie Detector with 86% Accuracy
Huh, I’ve done this before. Don’t know why you’re acting like it’s not a thing.
>however I suspect that his death may have had something to do with his heavy investment in some questionable blockchain startups

Why do you suspect that?
I have no doubt this has a lot to do with two super powers trying very hard to flex their muscles, both trying to project a position of strength.

However, I don't think China was helping it's cause when a month ago it decided to arrest the Interpol chief, only to have that chief released a few hours latter.

Throw in that mix a crazy Putin itching for war in the Ukraine and we have three boys all trying very hard to take control the playground.
There are so many loopholes in this thing. One predominant thing to keep in mind is the legal onus that is put on a company that does not comply.

The basic gems are that I got from reading the draft legislation was:

- If you have server side encryption, & we want you to decrypt a particular person's data, then we expect you to do so - ad infinitum.

- If you do client side encryption then we expect you to put into place a system that allows us to decrypt a particular person's data. (One assumes that a modification should be made for the particular client such that their data can be gathered in an unencrypted manner).

So, irrespective of the caveats that you've mentioned, the bill still stands. The caveats you've mentioned are the standard bait-and-switch style legalese, to make it sound more palatable. I'd assume that in reality, it's up to the company (at their own legal cost) to prove that what needs to be created is in fact, a back door.
> If you have a website, geoblock Australia from it.

Just did.. won't even respond to icmp. My Tokyo and UK sites.
Seems like it did in fact pass in the end, doh.
While you are probably correct, the world needs to urgently stop doing any business with China first.

And since it’s not going to happen, other countries beyond China unfortunately start to get some funny ideas, too...
> 1 billion

Is that metaphorical or actual number? If latter, I am interested in the source.
How do you figure? Seems to me ego would want no accountability at all.
You must build a custom made back door. eg. Something like ProtonMail would need to inject some extra javascript so that the government could obtain a copy before encryption, I expect.

If I were to write some software of this nature these days, I'd make sure that the client would be aware of any changes in the api - sort of like a personal warrant canary. (Note that a warrant canary is legal in this legislation).
It shouldn't have to come as a surprise in order to be against it, that's how we get complacent and accepting of this behavior.
So does imposing sanctions have any consistent basis or framework in the U.S? I believe that is very relevant here, because if not, it's basically being a bully.
How Good Are Websites with Ads
I believe Parliament has decided to limit its own powers - the Human Rights Act, membership of the EU, devolution of powers to Welsh and Scottish parliaments etc.

Of course these can be changed by Parliament... ;-)