skysight-inc/HackerNews huggingface dataset:
> Reading these posts I get the impression people prefer portfolio projects over studying the mathematical fundamentals

It didn't appear as though these two didn't train their mathematical fundamentals though. I believe the gist here is to find an interesting project tailored to the field you want to work in, and make it visual for the non-technical interviewers. Once you do get their attention, you would naturally need to pass a real DS interview, which would test your mathematical fundamentals.
Ok but he actually has a company with products he cares about and is involved with, so whether or not the product is "good" by your judgement, it still shows that he's earnest and not trying to make a quick cash-in with minimal effort.
And they now apparently are paying the high performing workers less.

https://techcrunch.com/2018/10/03/despite-minimum-wage-incre...
It looks like his domain name expired and was squatted. Someone should try to buy it back and rehost the original site. If someone trustworthy undertook that project I'd contribute like $50
I find working with C++ a struggle against syntax and programmers who know it better than me and working with Java a struggle against boredom (from seeing duplicated code all over the place).

Rich Hickey did not bring joy and aesthetics to software development, it was already there before he was even born -- https://en.wikipedia.org/wiki/Lisp_(programming_language)

What he did, he made it more popular and more accessible which is at least as important.
YouRepl – Watch programming tutorials and run the code at the same time
Yeah, testing in production. I wish the tech industry would stop this madness and do QA before releasing. It's all about code velocity and shipping things, we need to hold ourselves to higher standards. I'm afraid unless there will be legal pressure and a framework it will continue this way.
Geek Dad.
> Equifax did not see the data exfiltration because the device used to monitor ACIS network traffic had been inactive for 19 months due to an expired security certificate. On July 29, 2017, Equifax updated the expired certificate and immediately noticed suspicious web traffic.

Ouch.
> The attackers transferred this data out of
the Equifax environment, unbeknownst to Equifax. Equifax did not see the data exfiltration
because the device used to monitor ACIS network traffic had been inactive for 19 months due to
an expired security certificate.

> Equifax had allowed over 300 security
certificates to expire, including 79 certificates for monitoring business critical domains.

(on page 2 of the Executive Summary)

I've been following the Equifax breach story but this is the first I'm hearing about the expired certificates. That is shockingly bad.

I'm a little disappointed in the final "conclusion" of the report, though. The end of the executive summary basically chalks the breach up to two things: "Equifax's IT management structure was complicated" and "Equifax uses legacy software that is hard to secure". These are valid points, but these are also issues that nearly every single major corporation in the world faces, and yet many of them still manage to prevent (or at least mitigate) major breaches. These aren't good enough reasons to explain why Equifax failed so spectacularly compared to every other bureaucratic company with legacy software.

Also, I know this report isn't meant to be a remediation strategy roadmap, but it's also pretty disappointing that the recommendations section is basically just 3 pages of fluffy, vague, "X and Y should work together to increase cybersecurity" bullshit. Such a high profile incident would have been a great time for the federal government to really show some leadership (or at least strong guidance) in this realm, but they really didn't. I mean hell, at least link your recommendations to the NIST Cybersecurity Framework...
I agree with all of your sentiments, I just don't think that tactically this approach results in a useful outcome.
it's currently law in Germany. As an American I don't have any first hand experience with how well it works out.

https://en.wikipedia.org/wiki/Codetermination_in_Germany
If you sum up all work by everyone at Bear over the companies last year, they created negative value. Some lost far more money than others, but Traders as a group where not a net money maker.

Really, the company did not die in "100 hours." People just noticed it was already dead.
Is it accurate to call this a leak if no one actually took advantage of the vulnerability?
The majority may be waiting for the tipping point.
Hmm, I'm not sure, but my guess is "not very" as I didn't really design it with usage from other JVM languages in mind.

The reason is it depends on some stuff like coroutines - and since Scala deprecated their delimited continuations plugin way back when, I don't believe Scala has any equivalent feature.

May I ask why you ask?
Because this market doesn't exist to any statistically measurable amount.

Just because you want it to doesn't mean it does.
Yeah you're right, calling it PWM isn't really correct.
I can do you one better. We emulated IPX over serial so that we could have have 3 players.

I can't seem to find any information on the net regarding this, but I know that we managed to get it working somehow.
There was some dirty TSR hack that intercepted IPX calls and sent them via serial.

One of the PCs (with 2 serial ports) had to act as the "gateway" and run the game first, then the "edge" PCs could connect.

Fortunately my best friend had 2 serial ports and a seperate PS2 port for his mouse (although whenever he rage quit both of our PCs hardlocked for some reason).

If I recall correctly it only worked with a particular version of the DOOM exe - so we could only play the shareware version (despite having access to the full game).
6 months later we pooled some cash and got NE2000 cards so that we could play properly without dicking around with crazy hacks - I do recall my friend being disappointed that he could no longer crash our PCs and end the game when he lost anymore :)
It probably could be if you represented the data with fairly large blocks, but I don't see the point either way. Sure they could have more directly encoded ASCII into texture data, but why bother when they already have a system in place for rendering ASCII to a texture as text?

It'd be overkill if they were building this feature from the ground up starting with nothing but a string, but they weren't.
Lacking the wealth and power of Jack Dorsey and Mark Zuckerberg I’ve adopted in the last 5 years or so a policy of not discussing anything other than work at work, and nothing at all on social media under my real name (deleted all Facebook posts, except my wedding post and birth announcement post). If people at work start to discuss anything that could even ever become controversial, I leave if possible, and if not and am pressed for an opinion I just say “I’d rather not discuss this.”

My use of anonymous accounts like HN and Reddit has exploded in this time, and I find myself adopting more extreme positions on left and right than previously.
Google Plus to shutdown earlier: Another data breach
Google CEO to rebut privacy, bias criticisms before Congress
There's a lot of great content on Google+. Is anyone working on a script to archive some of it before it all goes away? Perhaps the fine folks at the Internet Archive (Wayback Machine)?

Specifically, I'm wondering if someone's working on a script that does the following:

- Ideally for each post URL given, it would preserve the post, and the comments (including the first few ones, not just the last few ones that are shown by default). It would be nice if it also preserves the +1s (including who +1d them), but that's optional.

- And given a user, it would do the above for each (public) post of the user, or (optionally) use your account to save (just for yourself) the posts that you can see.

There were a lot of people posting great stuff on G+ and resulting in wonderful thoughtful conversations (especially a couple of years ago), it would be shame to lose all that permanently.

(If someone doubts this: see e.g. (if you're interested in mathematics) the posts by https://plus.google.com/+TerenceTao27 https://plus.google.com/+TimothyGowers0 https://plus.google.com/+johncbaez999 etc, or https://plus.google.com/+DanPiponi for more CS-y stuff, or for more "general" stuff https://plus.google.com/+YonatanZunger etc -- and for all these people, especially in 2015-2016 or so.)

Edit: You can download your own content using Google Takeout https://takeout.google.com. Just learnt of these other places where this question has been asked / is being asked: this G+ community (https://plus.google.com/communities/112164273001338979772) and this wiki (https://social.antefriguserat.de/index.php/Main_Page) -- if you have any answers those may be good places to post too :-)
Creating a Virtual Linux Workstation
Netflix's data suggests those films won't be viewed enough to be worth buying.
Now we have three variants in the wild. The correctly folded "deep-seated" and its harmless but slightly anomalous "deep seated". Worryingly, there's this new configuration "deep seeded" that a significant but unknown number of HN readers may have been exposed to. Although the original infection source has been neutralised, we must remain vigilant against sporadic recurrence in future.
What's your opinion about why it hasn't worked out well for city governments?

Maybe a tragedy of the commons? "Well, it's not my money being spent, why not give the unions a bigger pension"? Whereas in a private company there is always someone who wants the company to continue to be profitable.
What's the risk of loss/insurance coverage situation for the items you ship? ML is good for digesting several input variables and assessing the risk of X happening. You might be able to pair that with an up-sale of insurance coverage to the client to generate additional income or use it for cases where the company self-insuring certain shipments might be an effective way to save money for little risk. Depending on how your company typically deals with insurance of course.
Trucks do, after all, have the best bandwidth.
> In 2005, former Equifax Chief Executive Officer (CEO) Richard Smith embarked on an
aggressive growth strategy, leading to the acquisition of multiple companies, information
technology (IT) systems, and data. While the acquisition strategy was successful for Equifax’s
bottom line and stock price, this growth brought increasing complexity to Equifax’s IT systems,
and expanded data security risks.

> Second, Equifax’s aggressive growth strategy and accumulation of data resulted in a
complex IT environment. Equifax ran a number of its most critical IT applications on custombuilt legacy systems. Both the complexity and antiquated nature of Equifax’s IT systems made
IT security especially challenging. Equifax recognized the inherent security risks of operating
legacy IT systems because Equifax had begun a legacy infrastructure modernization effort. This
effort, however, came too late to prevent the breach.

As someone who works in Tech M&A, I often tell clients "hackers go after the weakest link and you just acquired a new link". They nearly unilaterally ignore this advice and ignored hardening even the smallest of acquisitions, because well, "growth". Someday people will learn.
What always amazes me is the vast difference between the visual and non-visual effect of the sun. From that distance, the sun is just another glowing speck in the distance, and yet its gravity and radiation is still felt. Like if you had a speaker the size of a pinhead that you could hear from a mile away. (Or probably a lot more).
I've mixed feelings about AV. It's very disruptive and most really only work well with Windows (Mac and Linux are second-class citizens for most products). That said, over the past year I've helped my father get rid of malware on his mac twice. And at work, we've seen AV block browser-based bitcoin miners. And yet our AV has also caused computers to be unable to boot after automatic upgrades.

If you want to run AV, check if your OS already has one (Windows Defender is standard on Windows and Mac has its own AV product and firewall). Turn those on. Avoid ClamAV, it has a lot of false positives, usually on something important.
The report doesn't appear to mention that you could just login to their web portal with an obvious password [1]. It also doesn't appear to be under the purview to look at the leadership team selling stock[2]. Both of which it should consider when reviewing the competency and ethics of an organization managing and profiling nearly everyone in the U.S.

Speaking of which... why is it only ~50% of the adult population in the U.S.?

If the intruders were going around the Equifax network at will (which from the report it
appears they were). We should assume 100% of the data was breached.

[1] https://www.cnbc.com/2017/09/14/equifax-used-admin-for-the-l...

[2] https://www.bloomberg.com/news/articles/2018-03-14/sec-says-...
>>company with best security team

I think you are falling for Google's marketing efforts with a statement like this. Project Zero, where all the positive association around Google's security comes from has little to do with their product security. Their product security hasnt been so stellar, just look at Android. And don't forget the entire company was breached for a while without them knowing. Just trying to put things into perspective.
It may not be unionization per se, but it's well past time for our organizations (IEEE/ACM/Usenix) to start defending our interests by establishing standards for employment contracts that don't include this kind of crap.
Not sure if you’re joking about the whole post but c++ templates are type checked at compile time
It is pretty average that they didn't discuss the fact that the peaking power plants are very expensive, typically burning higher grade fuels like natural gas or diesel, rather than goal or nuclear. And, rather than encourage old style night time off-peak use, we need charging to occur during solar PV peak on colder days, and cars (mobile batteries) to supply to the grid during peak summer load, providing grid stabilisation to account for wind/PV variability.
Amazon didn’t have to reduce the pay of high performing workers. They chose to. That says more about Amazon than workers attempting to raise their wages.
The executive branch is the proper solution.

If Congress mandates a solution, then it'd be like the VHS stuff all over again. Congress writes a thingy about VHS in the 1980s, and its completely irrelevant 10 years later. (If a law states that something with VHS is done a certain way, will it apply to DVDs or BluRays when they are invented 10 years later? Or to streaming media 20 years later??)

The Executive Branch is the one that actually runs the government. Legislative Branch / Congress sets policies, but shouldn't set solutions. Law goes out of date incredibly quickly.

Ex: If Congress says that RSA Tokens are to be used instead of SSNs, what happens if a better invention (ex: Google Titan) comes out? Furthermore, even if Congress writes a certain policy down (ex: Two Factor Authentication is necessary to protect bank accounts), the Executive Branch is still the ones who enforce the matter.

So in the case of Two Factor Authentication (legal requirement of banks to protect your bank account), the Executive Branch says that "3-personal questions + Password" counts as two-factor security in the USA. And that's why you have so many banks implementing "3-secret questions".

------------

So regardless, the job will come down to the Executive Branch.
Also, all the legacy content creators are clinging to their old production models and airing shows one episode at a time. Just sign up for one month a year, binge, and cancel. Or do it twice a year.
In that case they just need to forthcoming to the customers early on that they are last in priority.
One more note: dat's implementation is quite modular, the hyper* libraries are designed to be replicated in a network-agnostic way.

(Theoretically you can do this with IPFS too, but I love how dat is implemented!)
Ask HN: Why do we believe that quantum information cannot be destroyed?
Is there experimental evidence to support this idea? (I assume no, at least not directly, but correct me if I'm wrong.)

Also, if one subscribes to the many-worlds interpretation, then isn't the creation of another world the same as the loss of information from this world (that is, the other world takes a different eigenstate of the waveform, and therefore this world is left with just one eigenstate)?
... unfortunately I don't think people are going to learn this anytime soon.
Just want to talk about Recommendation 6 (Recommendation 6: Reduce Use of Social Security Numbers as Personal Identifiers). Page 96.

The recommendation is essentially "Try to convince the public and private sector to use them less." But I'd argue it is well passed time that SSNs be replaced by something fit for purpose. SSNs were never designed to be a unique form of ID, and using things like the cardboard card as further verification is almost comical.

I'd like to see an aggressive alternative that uses the best of our security knowledge and then have it vetted by everyone in the security industry with a pulse. We've seen other countries try this. But most of those countries outsource it to the lowest government bidder, who hide the inner workings behind proprietary claims, and never vet the resulting proposal.

Instead we need something more akin to the United States Digital Service, a publically created proposal (fully released specs) that is vetted by every academic and security expert they can find.

The hardest part will be saying "no" to requirements creep. Allow certain government agencies to continue to use SSNs for now, and have the new ID "flip" into an SSN behind the scenes. Better than needing five hundred different departments to adopt the new standard before it can go live.
also really interested in hearing the background
signed up. ready to provide feedback. :)
disconnect content distribution from the content licensing itself. That's the only way forward imho - each platform needs to compete on price and speed, not availability of exclusive content.
Κρίνεται η πρόκριση στο Λίβερπουλ – Νάπολι
This is such a backwards way of thinking about collective bargaining.

The corporations you work for the the exact same thing (lobby for things they want) and it's rarely for your own benefit. The difference between a union and a corporation is that unions are democratic organizations. Good luck voting your boss out of their job. All you can do now is quit and find a new job, which for a lot of workers isn't easy to do.

This is the argument used in the recent Janus ruling of the SCOTUS. It's part of the last 40 years of anti-union propaganda shoved into our faces by corporations.
Ask HN: What have been your favorite creative or unique benefits?
What benefits have you enjoyed at a company that were especially unique or creative?
MP causes uproar in UK parliament by grabbing ceremonial mace in protest
Not sure why you’re downvoted - those are legitimate questions.

I’m on a local network over WiFi. The “server” is a RPi3+ with an extrernal USB 3 drive. Granted, I don’t expect it to be blazing-fast, but not 3-5 pictures-per-hour slow either.

Something is fundamentally broken on the iOS app especially since both the Windows and OSX clients are much faster (same network).
Maps - mainly cosmetic changes, though most of that was significant improvements

Android - significantly improved all over

Docs - never a big user, don't really know

YouTube - significantly better video quality, significantly worse user experience with everything else
What's a virion?

https://www.theguardian.com/society/2018/dec/10/mysterious-p...
Bitcon has on net lost money every year after it was created through mining. People spend money mining, and add money to the system but the only way to extract money is for someone else to buy in. You can do a silly calculation and say if we could find a magical buyer then the net gain is their increase in price, but there is not such magical buyer which is why it's been tanking.

The core problem is Bitcoins are not a productive asset. They can't produce any cash flows.
Yeah, and that single site could proportion money to the content owners depending on how much their content is watched.

And to make it really simple and easy, the federated subscription service could build and maintain the streaming tech so that streaming experience is consistent across all platforms.

Just if this could exist!
Bingo.

Most of the business models in the article seem to be based on micro-transactions (<1 USD) as a working model. The existence of such models derives from the fact that the payment systems in China are more sophisticated/efficient and you can make that 30¢ or even 1 RMB (16¢) transactions to buy a small piece of content. As you point out, that's not possible in the US thanks to the slowness of ACH and the high cost of Credit Card payments.

It's worth remembering that there was a meaningful ecosystem of app purchases (remember the golden age of 99¢ apps in the app store?) but that was supplanted for the most part by free to buy, ongoing monetization via ads.
Social security isn't a piece of technology, it's a government program. How is it in any way like VHS?
Can someone explain why an expired certificate, on a monitoring device, would cause the device to completely fail rather than just spit out warnings about the certificate?
Clearly you contract the disease if you get behind on the salary to the black preacher.
I've heard great things about the microbit: https://microbit.org
So common there's even a word for it: circumvallation.

Not just that, but it's also fairly common for the besieging army to also have to worry about an enemy field army trying to relieve the besieged area, and so have to build a contravallation - another wall facing outwards outside of the circumvallation.

https://en.wikipedia.org/wiki/Investment_(military)

The only really new and interesting part is the challenge of besieging a single neighborhood within a larger conurbation - historical examples usually include a large open space between the defender's fortifications and the circumvallation.
You cannot actually ratify a union without a majority of workers. Unions are typically democratic organizations. Also folks don't usually like to stick their heads out if there isn't enough of a movement to avoid being fired for organizing.

Another big thing anti-union propaganda pushes is that it's a vocal minority making a lot of noise. Usually it's the opposite.
Or, complain to the local gov't/FCC/consumer ombudsman that carriers are selling this data without consent from the consumer. Embroil them in a PR nightmare. Make it costly.
> If you were an employee for/against software patents, how would you feel if the union actively campaigned and donated in the opposite direction?

And if your employer lobbied in the opposite direction? For example pro software patents, pro anti-circumvention laws, anti labor protections? Is it better if the only lobbying is from corporate?
You can also use those dots to reverse cross cut shredding:
https://news.ycombinator.com/item?id=3368611
The Special-Education Charade
> Is anyone working on a script to archive some of it before it all goes away? Perhaps the fine folks at the Internet Archive (Wayback Machine)?

The archivist in me is screaming that yes, of course it should be archived.

The web-old-timer in me just shakes his head that people never learn to keep a copy of their content on the actual free - as in freedom - web, on their own website. Let it be a mere text file, uploaded by ftp, or a WordPress, or anything, just do it. Nobody should expect others to archive it for them. (For more on the topic, see http://indieweb.org/why ).

Back on topic: talk to https://www.archiveteam.org/index.php?title=Main_Page .
If you look at the price difference between GoPro and clones you really are mostly paying for the brand.