skysight-inc/HackerNews huggingface dataset:
Dunno, you could try asking Sony, who helpfully used the same random input for every PS3 ECDSA signature, thereby leaking enough information to let people recover their private key.

https://en.wikipedia.org/wiki/PlayStation_3_homebrew#Private...

(I would _suspect_ that internally, they deliberately made this choice, so that the same inputs would produce the same output, because someone important thought that was valuable and either didn't know or thought it wasn't risky enough to possibly leak key information by doing this. But I have no special knowledge, just a suspicion that people who pick elliptic curve crypto would be aware of the leaks involved in reusing IVs.)
What is better- a Type 1 or a Type 2 error?
Interesting that they've invested so much in designing a new unique type of CD-ROM, even being the only one to manufacture it, and then being caught by a feature they didn't even need. The obfuscating trick was also kind of lazy from the dev team who added it.

But I don't think this hacking was the reason for the end of Sega, because nearly all consoles at that time could be modded to play hacked games. Sega had been messing up for years before that, with all the useless hardware (Sega-CD, Sega 32X, and even the Game Gear and Saturn weren't big successes) they had been releasing after the Megadrive. The Dreamcast was good but just no good enough to save the company, they basically would have needed a console that completely dominate the market to recover, and to compete against Sony, Microsoft and Nintendo.
Broker Seeks $35M from Customers of Wiped-Out Fund Manager
Link, my friend.
some times I love america
Sort of. They doubled down with a second related article after the responses from Apple and Amazon, in which they briefly mention the rebuttals: https://www.bloomberg.com/news/articles/2018-10-09/new-evide...
I guess you just downplay the amount of money you spend on developing your own solutions. What does a load balancer do on the same host anyway?

Where is this 80x-100x coming from? It would be impossible to create a 100 times cheaper solution because it would mean there is no margin left for the hosting provider.
Fantastic, did that.
When I worked as an attorney for a bank one of my jobs was to "manage" the audit engagements. When an audit has serious findings you can almost guarantee that's just the tip of the iceberg. On the other hand, an audit or review without any findings just means the company under review had some combination of good lawyers and friendly auditors.

In my experience, there are two types of firms you can almost always find "friendly" auditors: law firms and small specialized "boutique" firms (accounting, consulting, etc). Who conducted this review? A boutique law firm.
I have now added detailed usage example to readme. Hope it helps.
When the state department tells you to write a story you write the story, or face the real prospect of the end of access which will be the end your journalism career. Not an ideal system for anyone, except the state department.
How is one to email to get unbanned if one is not aware of the ban? That’s the whole POINT of the shadow ban that HN implemented. One little mistake (or two word post in OP’s case), and you’re shouting at the wall.

So with due respect, Kafkaesque suggestions to contact the mods don’t help. What would help is getting rid of juvenile practices that are arguably ineffective, i. e., shadow bans.
I can only speak for Germany but there are tons of such jobs here. Americans regularly mock German IT wages but I can go home around 4pm consistently without anybody looking at me weirdly. I might not have a snooker table or free soft drinks in the office but I don't need to live there because my free time is actually my free time.
The companies/shareholders being affected by this are free to sue the paper over defamation.

Something tells me they won't.
It's still faster to pick up a remote & hit a physical button (possibly without even looking at it) than to pick up a phone, tap it to awaken it, wait for the screen to power on, look at it, find the button to pause & then hit it.

I would pay $20–$50 for a decent remote. I'd also love for the Chromecast to have the ability to use my accounts to play entertainment directly from that remote.
Anything to back that up ?
Use SVG. Infinite detail. Doesn't work for photos though.
Well, ok, the definition of a "black box" pretty much dictates what it does internally is not known to you, so you can never be sure what data it does/doesn't send out.
Loved this books and allowed me to build several of the projects.. (Including the very crappy LED oscilloscope).
They where very non threatening to a 14 year old kid with a reduced command of the English language.
How the CIA Used Brain Surgery to Make Six Remote Control Dogs
I'll link as soon as I'm not on mobile.

Recent incident was on "most unethical thing you've done" thread that reached the top of HN. Someone mentioned selling user data while being a middle layer, and confirmed it was Plaid after it was suggested.

Not claiming this is definitively true which is why I'd like to hear from someone at Plaid; I believe I've interacted with them through Robinhood so it'd be concerning.
If it is in the disclosure when you buy the property, or basic law your real estate agent should inform you of, yes, rich or poor. If his agent never educated him he should sue his agent for negligence.

That said, I have walked that road many times. There are other properties there that require a road so he would not need to pay for everything. There is already garbage pickup service there so I assume like any other private road it would need to be maintained by all the property owners for basic services and emergency access.

The issue was that he kept the gate locked and was trying to have the police aggressively evict pedestrians. There is a small parking lot at the beginning of the road and if he had been a decent neighbor and allowed people to park there and walk, I doubt this would have ever become such an issue. But he took that path of most resistance.

Morally I think open access to beaches is the right thing. It is a public asset and the beauty a reminder of how important our stewardship is. On the other side of the coin, having been there over the years and now seeing how the public is trashing what was a super pristine amazing place with litter and feces, i would give him the right to charge a $10000 cleaning fee to anyone caught littering (or worse!)
Hey! Let's have a chat about a Systems Engineering role at Quicken Loans. Send me an email (huntercasperson@quickenloans.com) or I can reach out if you share your email with me
WRT the how could they get it so wrong question, I guess it's time for the obligatory link to Michael Crichton's essay "Why Speculate?" and his discussion of the "Murray Gell-Mann Amnesia Effect" [1]

Money quote: "You open the newspaper to an article on some subject you know well. In Murray's case, physics. In mine, show business. You read the article and see the journalist has absolutely no understanding of either the facts or the issues. Often, the article is so wrong it actually presents the story backward—reversing cause and effect. I call these the "wet streets cause rain" stories. Paper's full of them.

"In any case, you read with exasperation or amusement the multiple errors in a story, and then turn the page to national or international affairs, and read as if the rest of the newspaper was somehow more accurate about Palestine than the baloney you just read. You turn the page, and forget what you know."

1 - http://larvatus.com/michael-crichton-why-speculate/
When your writers are rewarded for stories that move the market[1], it's going to be tempting to go for the sensational and to omit information that weakens the story.

I think this might just be another case of unintentional consequences from incentives.

[1]: https://www.businessinsider.com/bloomberg-reporters-compensa...
I don't agree that it's obvious, but I like the idea. Chargers would then be investing in the scooter's use the next day but with joules instead of cash.

/joules will be the currency of the future!
Interesting reply. And I agree with a lot of your points. Starting from the premise that cars are not really a good mode of transportation to get around in a city.

It would be awesome to massively reduce private car use in cities and use the space gained for other modes of transportation and uses (bike, scooter, walking, leisurly get togethers of the neighborhood) and reclaim the space for actually useful things and efficient transportation.

One of my current issues with the scooters (apart from the philosophical objections, which you correctly point out) is that they zip around pavements with speeds, which are definitly uncomfortable (and depending on the riding style menacing) to the actual users of pavements, which are pedestrians. Being able to provide dedicated space for scooters would be a huge leap forward for their use.

I'm privileged enough to have Zurich's public transport system at my disposal, which literally gets you everywhere in 10 minute intervals and that this slightly skews my perspective (Tokyo is also pretty awesome, but I digress). But I do believe that such shifts in policy should be debated and planned and not just brute forced by some outsiders, whose main interest is profit and certainly not the best interest and well being of the citizenship they claim to serve.

Thanks for taking the time to reply.
Again from the article: “A person familiar with the analysis told Reuters it had been conducted by global firm Nardello & Co and that customers could ask for more detail on that company’s findings.”

So ask if you are interested.
ML and automation have been a big thing for a few years now. The evolving technology has enabled an increasing number of use cases and business models so in that sense the hype is justified.

'AI' on the other hand is a buzzword mostly devoid of meaning. Salespeople and executives spend a lot of time hyping up things they don't understand, and the flavour of the year(s) is 'AI'. It is telling that searching for 'difference between ML and AI', returns top results from Forbes and Medium rather than stack exchange or any other place of meaningful technical discussion.

A comparable buzzword is 'blockchain' which the same demographics embraced with equal vigour. It lasted until technical realities became clearly different from the visionary BS that was being peddled.
If climate scientists ruled the world
Creating the demand and the supply. It’s genius in a sociopathic way, but truly amoral. Maybe they could just clean up their own messes and we wouldn’t need the filters?
Looking at the complexity of the designs you'd probably best use a Pentium.
welcome to 5 years ago. I see people opening up conventional small business (think pizza place) calling themselves startups. but really who cares
They at least collect it, as they offer that as a service:

https://plaid.com/products/transactions

I flirted with the idea of using a trial account to feed that data to a Prometheus server to build graphs in Grafana. A slightly more powerful mint/personal capital would be a super valuable tool.
How to Find the Right VC for Your Startup
Because different projects need different versions of their dependencies. Do I need a separate GOPATH for each of these projects? I haven't wrangled Go enough to know the right answer to that yet. In my experience with other languages: I'd really prefer to have the dependencies local to the project and not in some global folder that affects all of my projects. I want to be able to make a random project folder anywhere and have the entire thing be self-contained without worrying about anything outside of that folder.
I thought Amazon is just licensing a custom design from ARM and manufacturing from TSMC. It's a step in the right direction but it'll be a good amount of years before Amazon has their own Fab making their own chips.
I find immer and TypeScript go well together because for deeply nested types, Immutable.js doens't work well.
I think the pg definition of "A startup is a company that is pursuing a very high growth strategy" still applies. If you believe Plaid is trying to get themselves to 5B in the next two years, it can probably still apply.

I think of it as "Startup" vs "Steady State."
Quick translation to javascript: https://jsbin.com/qipapokova/1/edit?js,output

(Note I flipped it with css, too lazy to fix in js :)

Edit: Perhaps more historically accurate if you can watch it draw: https://jsbin.com/veniwodidi/1/edit?js,output
Driving Instructors Northampton – Cheap Driving Lessons
Does it matter if your email is encrypted at rest when every recipient you email will store it unencrypted and it is unencrypted in transit?
https://news.ycombinator.com/item?id=17692291

Edit update to root

But the comment is not quite as bad as what is suggested
Arrival (2016), based on a short story by Ted Chiang should work for you.
I saw that, but it's not nearly enough. Why isn't the report made public? Why do we have to take Super Micro's word for it?

I seem to remember a very hostile and skeptical attitude from HN against Binance doing exactly this sort of thing when they announced the results of their paid-for "audit" of Tether financials. Why aren't we treating Super Micro's report of the audit the same way?
I also haven't done baremetal server management, but my first concern with your first line is what do you do when as your services expand as does your dev team and the org needs more processes like log management, data warehousing, analytics, or whatever else AWS offers?

I'll admit this isn't always true (looking at you, Neptune) but I find AWS' key strength is the huge community, so most of its services have 1) decent documentation and 2) many users to refer to with technical questions as well as filling out roles.
Don’t be fooled by digital voicemail phishing attacks
Brilliant. Thanks for sharing this.
I second the comments about the various AST and type packages. They are just absurdly unfriendly.

I've written a linter / code formatter / auto bug repair tool internally for my current company and it sucked. Still sucks. Comments doubly so.

The examples are few, undocumented, and don't always work with the vendor directory concept.

I had to write my own custom importer to get vendor support to be more reliable.

I like the concept of shipping with an AST package; it's very forward looking and useful.

I too hope the go/analysis package could be the answer. I believe it has not merged but has a prototype version that conflicts with master. Maybe they'll patch it up and get it landed soon. I hope, anyways
I've witnessed plenty of people nabbing scooters in rental trucks or vans during the morning in San Diego. Probably 10-30 stacked all over. It occurred to me how scooters not only are a mode of transportation, but now a resource that people rely on for extra cash.

Seems completely justified but oddly weird to me. I haven't witnessed it yet, but I wonder if there have been fights over territory/scooters.
What happens to you when you're conscious or dreaming.
Their plan C was a complete fluke and only came together because the Israelis managed to put out Centrino. I don't think such a fluke is possible when we're at the limits of process design and everything takes tens of billions of dollars and half a decade of lead time to implement.
The world is bigger than the US so yes it is.
There is Bankin[0] which I believe shares a few similarities, however it mostly works with French bank accounts for now.

[0] https://bankin.com
>What are the consequences for Bloomberg for this incompetence?

You, not the general concept of the reader, but you personally neya. You stop trusting Bloomberg's reporting. That's the consequence. Their reputation suffers.

Why do threads like this on HN always have such a desire for retribution?
Ask HN: How to manage multiple productivity apps
I work for both our Canada and US office at my company. Both use a different productivity tool for tasks, Asana and Teamwork projects. We also have a ticketing systems for user help requests that I also get tasks from. I find myself almost never checking the actual websites for these and relying entirely on email notifications from each. How do you manage working with different productivity apps? What workflows have worked for you?
The original one (expensive):

https://www.yodlee.com/yodlee/europe-africa

UK startups:

https://teller.io/

https://truelayer.com/
Introducing Traefik Enterprise Edition: We Made It Distributed
Wasn't there a recent story in the news where a major producer of legal opioids, started also producing the methadone to wean addicts off them? Wish I could find a reference
I was wondering the same thing. Casual is missing, I didn't catch that Del was in the list, not surprised he's up there.
Aceyalone was another one I wonder about.
This was also the case for PC games and those made healthy profits in that era too. So blaming piracy seems to be more pushing a certain idea than the actual cause of Dreamcast issues. Especially since the hardware itself sold poorly - if piracy would be to blame, you'd see a lot of unit sales and low game sales. Which did not happen.
I let Aaron's Dad know, and it seems he contacted Ben.
Ask HN: Why can't Android updates work like GNU/Linux updates?
I want to understand why Android handles updates so poorly. I remember in Heartbleed times many Android users were left with faulty OpenSSL versions, because the manufacturers didn't release an update for their device.

Why can't Android just update the OpenSSL library in such a scenario, just like GNU/Linux does, for example?
Because when a law is pushed by corporations, aimed at individuals, you're not likely to have much recourse, as an individual targeted by such a law. The hammer is going to drop on you and that's that.

A law such as the GDPR, which is targeted at corporations primarily, is worded in such a way that no company is going to get massive fines if they seriously tried to comply, but for whatever reason failed to do so. They're going to get a dozen written warnings, guidance on complying etc. before they have to pay anything. Small businesses don't even need a data protection officer.

Why this discrepancy between laws targeting individuals vs corporations? Because corporations control the flow of capital, control a large part of our politicians, can blackmail with outsourcing etc. None of this power is usually available to an individual.
Yeah, a lot of the details are getting lost in the noise.

Firstly, should the government give the person a right to charge at all for access to the beach? If they have the right, do they have a commensurate responsibility (provide a bathroom)? If they have both, how do we decide what the fair value is?

The problem is someone reading this thinks "no, don't charge, and no bathroom. That works for me!" Someone else thinks "Of course they should charge a fair amount. What are we? Animals?"

But this isn't supposed to be a battle of our moods and desires. Its supposed to be a principled discussion. What is the principle? At least VK puts one forward: he thinks private property rights should trump some others. Surf riders also has a principle: the public should have access to the beaches.

I agree with both. So lets say that we think private property rights should be respected AND beach access preserved. What is the best way to balance it? Perhaps the minimal private property rights consistent with beach access? Or the minimal access consistent with property rights?
Their reporters are compensated based off of whether or not they move markets.

Did you know that?

(https://www.businessinsider.com/bloomberg-reporters-compensa...)
Isn't it notoriously difficult to write a sane, not exploitable asn.1 parser? The openssh didn't want to use x.509 certs for say because they considered asn.1 too risky and difficult iirc.
Yeah, PC games did well in that era and were as easy to copy as Dreamcast ones. It's more that the console just wasn't competitive with others.
Co-founder of Plaid here. This is not true, we do not sell transactional data to third parties. We make 100% of our money by letting developers build financial applications[1].

[1] - https://plaid.com/pricing/
I used to do these all the time, I think it was mainly from Byte magazines I would get from the library. It was on a TI-994A. External floppy drives were a godsend over the tape machine.
This stuff has been dealt with thousands of times before. Take what he paid for the access, add for inflation, cut him a check and move on.
No, they shouldn't just walk away. They should apply sound journalistic principles to investigate exactly how they came to the conclusion, and then publish that investigation with full disclosure. Not sure if I've ever seen a news organization do that though (minimal retractions in a place no-one looks doesn't count).
Isn't CNN something like 7-8MB without AMP?
https://github.com/jlaine/aiortc may be a better option than janus. It's a much simpler to use implementation and is python.

quick summary of the acronyms... STUN/TURN/ICE are all related to NAT traversal (ie. when you are behind a router or firewall of some kind and your computer's IP is different from your public IP). The reason you need this is because UDP is not connection-based like TCP. So STUN is a service that helps your computer find its public IP. ICE is a protocol for finding and reporting peer candidates (after they've learned their public IPs via STUN) so they can establish a peer-to-peer connection. TURN is when you reflect the connection off a public server instead of establishing a peer-to-peer connection.

SDP is session description...basically information on what media formats and other things each client will accept.

RTP is how the media (or other data) packets are framed
RTCP is out of band reporting for things like packet loss and other info so that each side can adjust media properties

The nice thing about WebRTC is it takes care most of this stuff for you. If you're always connecting to a server with a public IP you'll just need a few things:

1) WebRTC server that can accept media data (like janus or aiortc)
2) Some signalling mechanism, Websockets work well for this
3) you _may_ need a STUN server, google has stun servers available but you could also use coturn for this.

The rest you shouldn't need to worry as much about because webrtc handles it all under the hood
Step-By-Step Tutorial on Linear Regression with Stochastic Gradient Descent
Why Traveling Is More Addictive Than Anything Else in the World
Why would they do that when we'll happily pay them to keep pumping out poison and selling us water filters?
Top 3 Crucial Mistakes to Avoid as a Mobile App Startup
MRuby 2.0 released
Its the only way to get the keyboard configuration we want.
This is a supplementary material to the backpropagation demo found on http://raiboso.me/backpropagation-demo/.

Do let me know if you have any feedback!
It’s the Facebook API issue but IMO transaction data is much more sensitive so it’s a bigger issue. I have used the Plaid API and have no idea how they audit developers to make sure they are using the data as intended and storing that data securely.

One hack incident of a developer that exposes bank numbers and transaction data would be a huge reputational hit.
I hope not, because its such a shitshow. You literally give your bank credentials to a third party who then logs in to your account and scrapes info off of it - info that you have no control over.

Capital One was smart enough to block them off (which is the bank I use), and now they actually provide proper OAuth based APIs to access your account.
I think I'd regard a hard taco that split as a flawed taco, same as one would still regard a car currently missing one wheel as a car rather than temporarily considering it a tricycle.

My criticism is that they don't address non-surface-defined foods, aside from their total non-commitment on rice.

Edit: my bad, foods with no containing surfaces are considered salads.