skysight-inc/HackerNews huggingface dataset:
HSBC Mobile App – Authentication Flaw
I discovered a flaw in the UK HSBC Mobile banking app.

Essentially the flaw consisted of being able to authenticate through the mobile app using characters that are not in your password (i.e the wrong password).

I raised this withe HSBC via twitter and this was the response.

"Hi ValkyrieUK, my name's Claire and I'm from the Digital Complaint's Team. Thanks for getting in touch about the concerns you have with our app. We're aware customer's can enter additional characters on to their password and it will be accepted as a successful log on. We don't classify this as a security risk, as your password must still be entered correctly for it to be accepted. I'll certainly record your feedback about this matter though and would like to apologise for any concern caused. Kind regards, Claire"

How can this be correct? They clearly are not following a well proven authentication standard, possibly some kind of REGEX involved.
I have been using the html only version of GMail for months.
For my user case is much faster than the last webapp implementation.

It's kind of sad because it was the only webapp that made sense to me.
> The fact that it's more difficult setting up a JS project than it is for, say, Scala which is itself a pain in the ass speaks volumes.

JS allows various levels of complexity. From inlining JS inside script tags in an html file or requiring a js file in the script tag to transpiling cutting-edge JS (or dialects/supersets of JS) with sourcemaps, minification, code-splitting, etc.

The latter end of the spectrum is reasonably complex; the former is ridiculously simple. I wonder if same can be said about Scala.
Yeah Niedenthal's pictures are not as one sided as these...
Can you point me to some resources on this?
Shrug, if you are just a bystander it does make sense to go wherever the spectacle is.

There is a competent team working on TCP at Netflix, led by Randall Stewart. They collaborate regularly with VJ and his Google team and the IETF tsvwg.
Of course, that's what I meant by heavy frameworks.
A couple more examples from higher education: Within the pool of enrolled students, language skills and quantitative skills are negatively correlated; and within the pool of students accepted by any law school, LSAT and GPA are negatively correlated.
> towards the more exotic to a Western photographer or viewer

I'd go with "distinctly Polish" in many cases. The folklore clothing, wood art, ceramic heater/oven, trabant, polonez, priests, village houses, etc. are not just exotic. For me they're very much pictures that identify the set as 100% Poland. There are some exotic things in PL that would be less relatable.

I think the photographer did an awesome job with the selection.
5 Handy Vim Plugins You May Never Have Heard About
https://en.wikipedia.org/wiki/Targeted_advertising is included in https://www.facebook.com/about/privacy/update
They could win privacy-conscious users back by offering an ad and tracking free Google experience with the paid plans.
The wheel of karma keeps on turning. Rich-client / client-server / rich-client / client-server. It's been going on since core memory supplanted rotating drum memory. It's not going to stop.

Javascript is an INSANELY GREAT way of implementing rich clients; the best I've seen in my almost half-century in the trade. (Progress. Duh.)

The modern clients (browsers) now have compilation right. V8 and its competitors are astonishing. But as always we have to get the distribution right: security, caches, progressive and async loading, agendas under control (meaning justified amounts of third party stuff).
The last time I used XD it was woefully incomplete compared to Sketch. I wouldn't bet on them having this in the bag just because they're Adobe.
I sent these pictures to a colleague in our Polish office, and he sent me a few before and after pics:

Before: https://i.imgur.com/18lEoGd.jpg

After: https://cdn.flixbus.de/2017-06/Gdansk-zwiedzanie.jpg

Before: https://pro.magnumphotos.com/image/PAR96165.html

After: http://www.psur.pl/ra/cmm_budynek_okm.jpg

http://navtur.pl/files/news/281.jpg
Blog to become a better programmer
I still don't understand. What is Google One? Photos and Drive storage still seems separate from each other. So, why is it called One? Have they just changed the paid plans?
if you were born in the state of california after 1966 then the government did collect and is retaining your dna (newborn blood specimen) and it is a law.. already
Absolutely love Sketch. I got a license because I thought it would be useful for UI design, but have been using it for all sorts of other things until I've trained properly on it (such as room layout planning, etc). Looking forward to using it for UX design when I know it a little better (I'm not a designer), but I also think it could become my go-to SVG generator (from what I've browsed on training courses from Lynda and Pluralsight).
We're all related, really. It just depends to what degree you want to consider "related". I'm related to my cat, to you, and even to the tree outside my office if I go back enough generations.
"Full of" ? what a lie
A slow website has useless HTTP requests, useless bloated content in those request, inefficient or useless computations and DOM changes, and even animation delays and other types of intentional slowdown on the critical path: it is designed wrong and decent developers should try to do better, regardless of what frameworks were used or not to make it bad and whether lack of communication between front end and back end teams is behind the problems.

The interesting question, then, is what horribly wrong incentives are at work to make web developers accept slow sites (and other trends of bad design like "dark UI patterns" and data collection).
I guess there's a market for a windows/linux version of this app then? (tho' maybe not as large, given pro-designer tendencies towards macs)
The Second Annual C# Advent
I suspect that landing on water has no discernible effect on the health of the suspect. And he will be completely soaked, so avoid jumping over water and always try to land on land.
While you may hide it in the way you described, normally apps spread their usage all over the place. As for example all OS have a list of last used apps. I think for this to work not only the app has to be crafted carefully but also the OS has to cooperate.
Eco power storage technology
For a research & a future prototype of an eco friendly product I am looking for dry cell technology that can be miniaturised & is bio degradable too. Comments are welcome!
React vs. Vue
Developers use the tools they are familiar with. If you are a Rails developer, you will probably choose Rails when you have to build a website, even if the website doesn't strictly require Rails.

Many web developers are familiar with React, Angular, or other front-end frameworks; they are familiar with the deployment process, and the tools around it. If they need to build a website, they will use these tools, regardless of the requirements of the website.
Big reason for this is probably pricing. Adobe's subscription model is hard on startups, small companies & especially individuals, so people naturally look at alternatives. And then they realize that Photoshop isn't quite the monopoly it once was, and apps like Sketch, Affinity & Co. offer similar feature set, while also being more specialized for the job.
An unrelated question: how many `html` and `body` tags are allowed on a web page? I just looked at the page source of https://dev.to/liquid_chickens/three-qualities-of-failed-mic..., and to my surprise noticed they have about five `html` and `body` tags on that page. They aren't even in iframes either.
jumping straight into webassembly! very brave ... or is it actually more mature (production-mature?) than I thought?
A quick check, GTM is only cached for 15mins.

If users spend a bit of time navigating your site, you might get better caching by adding this to your JS file and caching for longer.
I really wish Google would have clearly said whether they will or will not monetize data inside Google One accounts. With my paid G Suite account for personal use I have some confidence Google isn't monetizing my Gmail, Drive, and hopefully Photos, but with Google One, I can't see the same policy written clearly.
ZFS on OpenBSD
I do find this interesting because many code bases I have seen use collections in the wrong way.

What could help many developers though is if an SDK would provide a factory like

List.new[FastIndex, FastInsert]

and check at compile time if such a list can be found that satisfies all constrains (ArrayList, LinkList, CopyOnWriteList, HashSet, ...).

Currently most SDK leave this to the developer, who than mostly uses whatever he knows best and likes, say ArrayList.

(Unrelated a company should have an explantation when to use List, Seq and what in interfaces).
Remember when those local restaurant's menu page where build in Flash because the owner wanted some "flip like a book" animation ?
Javascript is a the same cancer as Flash. Why build "simple" static and performant website when you can sell a higth price pile animated javascript shit who "don't reload the page when your click".
Ask HN: Anyone see the meteor shower last night?
I woke about 3am EST. It was really cold so I didn’t go outside. I did get to see one bright meteor.
I call this no-js-first. There are apps that are blazing fast and have a lot of fancy/modern js stuff in it, they simply don't require any of it at all.
Are Humans Like a Virus on Planet Earth?
I keep JS disabled so most of this crap don't bother me.
The more interesting part is that the line between "digital existence" and real life is getting blurrier everyday.
The two comments you've quoted are literally the only comments that indicate hacks or broken things in the entire HTML source of the linked page. There are other comments, but they are innocuous descriptive comments and not indications of problems - things like:

<!-- Adobe Analytics script (2 of 2) -->

Saying it is "full of" comments "like" the ones you've quoted is just plain not true.
Somehow I found linear algebra easier than calculus, but I don't know why.

I did both at the same time in university, but failed calculus 3 times and aced linear algebra at the first try.

I'd expect being either good or bad at math, not both at the same time
GA has had an open tracking API for a while, it’s what powers tracking inside mobile apps, custom events, server side tracking etc.
The thing about a dystopia is that you can't control everybody or else you will incite a revolution. There is actually a balance that you need to maintain. Privilege is one of the main ways of maintaining slavery. For example, if you are 1 person and you want to control 10 slaves, it is not really possible -- they will gang up on you. However, if you make one of the 10 slaves the "head slave", then they have an incentive to maintain the status quo. If you then make it clear to the other slaves that they can be upgraded to "head slave" as you expand your slave empire, then they will also have incentive to maintain the status quo. Your goal as a slave keeper is simply to make the reward/liability comparison work out ever so slightly on the reward side. You want people thinking, "Well, if I work hard, then I might be made head slave. And my slavery is not so bad. If I try to run away or rebel, then I might be beaten -- and I don't even know if I can survive if I run away".

No matter what dystopian world you live in, you will always be given the illusions that life is better as it is than it would be if you were free. They aren't going to throw you to the wolves completely. Instead, they will always present you with a dilemma: "As long as you only do X, you'll be fine, so there is no need to fight against it". In terms of privacy, there always has to be the question, "Why do you need so much privacy anyway?" If you answer that question, then you will break your balance (see recent Facebook "scandals" -- nothing changed except the general understanding of why people wanted privacy).

The advice to avoid problems is a pragmatic one. "If you do X, you'll be fine" is funny because people will say that and then forget to do X. "Well, I'm sure I'll be fine anyway". If you are careful to do X, then you can avoid many of the downsides. You can use that time to break free from your slavery. Umm... Or not... (usually people choose the "or not" option).
My own baby, Snigl [0], does always-on cooperative concurrency and asynchronous IO.

Just ask if you need help finding your way around.

https://gitlab.com/sifoo/snigl
There's PythonCard. http://pythoncard.sourceforge.net/
FLG runs a propaganda machine in English, you’d have to read their Chinese pamphlets to see the crazy stuff. If you do more research, it’s the scientology of China, not exactly the stuff of credibility. https://rationalwiki.org/wiki/Falun_Gong
Assessing Risks and Vulnerabilities Critical to Cloud Security
Learn from the best...
Made with React, React-Native and React-Native-Web, nice.
Not the JS bundle (if that's what you mean), the site itself (to get to the point where you can use gmail).

And yes, why wouldn't I? My 50Mb/s cable modem can download the fully featured Fastmail (500K) 13x faster than GMail. That's how bandwidth works.
Have you tried Mamoto / Piwik too? I’m thinking of switching to Fathom and I’m not sure if it’s worth the effort.
Fossils Of The 21st Century
Knockout – Ransomware Client Case 1: Gandcrab v4 and how I solved
These projects are incredibly complex that fail for a variety of reasons, most of them to do with politics, conflicting requirements, too many stakeholders and decision makers, and too many people with little to no interest in or grasp of the technology involved.

First and foremost the lesson should be that the army should have its own dedicated IT department.

Also, any company peddling 'digital transformation' should be a red flag to start with.
Yes, it's a Twitter like UI for Github comments/issues/etc.
The Astonishing Discovery of Lchashen Settlement
I’ve never imagined link farms to be so profitable an enterprise that they could afford a team of phds and come out ahead; but if they could, then its an arm race, and google would be at a much greater disadvantaged if they didn’t have their own.

Thus, your response should have been: link farms with their own phds is only more reason to instantiate your plan
They are also probably too big to put on a t-shirt !
PDF Xchange Viewer Pro 2.5.322.10 Crack Full Version (x86x64)
Party Newspaper Says Chinese Are Angry with Baidu – And Want Google Back
As a fanboy of a different now defunct computer manufacturer from the same time period I also dreamed similarly about convincing people that my team was the right team.

It seems crazy to me now. Not because they weren't really good products for the time but because I was hitching myself to a commercial organisation with its own agenda on everything. Unless you're a share holder cheering on a commercial organisation, as I did, is silly.

If I could go back in time and speak to my younger self I'd point out that at least with FOSS you've as much right to the future of a project as anyone else. RMS really is correct on that.
Happy birthday, qutebrowser
There really aren't many identifiable communist things in the photos. The areas can be underdeveloped for any reason and look similar.

This collection on the other hand is very much communism heavy: https://historycollection.co/24-pictures-looking-life-commun...
That's not the opposite, it's the same thing looking from a different place.
> Tipping is a weirdly American phenomenon.

Where did you get that idea?

Just a quick glance at the Wiki article on tipping shows that tipping shows up in plenty of places outside of America.

https://en.wikipedia.org/wiki/Gratuity
Yes. Google photos recognizes landscape features as well as people.
Implication is that anything within a company that gets you hired that isn't A is negatively correlated to A I guess, which is pretty interesting.

Looks, competence, workexp, interview skills, height, rich background, any positive discrimination, nepotism etc etc. All should be negatively correlated with eachother this. Although there are limits to the strength of the effect right, it depends on how much of a slice is being excluded and if the two variables have an enormous correlation that might outweigh it?

You'd also expect the effect to be stronger the more selective the environment (for each pair of variables). So if your place hires very strongly on looks and competence they'll be very negatively correlated.

Also it depends on the hiring policy, we're assuming some sort of (A+B) > C evaluation over things that they care about, but if it's (A>A0, B>B0, C>C0), pass all of those and you're in then this effect should be totally absent in those variables.
It may be a good deal for the space but do not buy this for better support because it is absolutely nonexistent. It takes about 48 hours to get the first email reply and is the same team and capability as the free consumer services.
"Easy money"? It's called luck and luck is hard to come by.
None, go vanilla.
Related tweet - https://twitter.com/BradleyAllen512/status/10735448523637145...
I'll wait for Google One 2.3
A good walkthrough to installing Hexo:

https://ericdouglas.github.io/2016/08/21/how-to-create-a-blo...
I don't get all the negativity. I read a lot of blogs where there's 90% civil discourse and just keeping in touch with people.
If you happen to have a huge site with a lot of drive-by traffic, why not just disable comments?
As many other sibling comments have asked, can you give examples of what you mean? What issues have you had with finding/writing libraries, what tech stacks have you encountered .NET not playing well with, and exactly what language or framework features are "too low level"? As it is your post is too lacking in details for me to understand where you're coming from.

I can however offer a simple possible explanation for your experience: you are more proficient in other languages and frameworks because you know them better.
Has anyone tried to do the cooling symstem approach? Aka, pump in water, frack, and cool the site down until the fire is non-substainable?
> Well you get a half finished bridge and your money back, or as much money as the company has assets and then you have one less company trying to rip us off.

Setting up a new company costs a lot less than you make on a project like this.

> Must be some honest companies prepared to do a job for 100 times the cost?

Sure. But government procurement is often required to go with the low bidder (because of anti-favouritism rules) even when they obviously can't deliver.
Well, they’re trying, with chatbots

And I’d really wish they’d just stop
buftabline seems handy, so you don't have to reopen the buffer list regularly. For some reason I never use tab either, so I guess the tabline can be used for something else.
The UK government developed a project management methodology called Prince 2. Which has a lot of similarities to, and is compatible with, agile. The rights to the methodology are jointly owned by the UK government and Capita, the contractor involved in this screw up.
The Inherent Instability of Disordered Systems
Companies exist solely to gather and de-anonimize this data to the fullest extent possible. As an example of what you can do, in Google Adwords, you can download multiple aggregated click/cost reports across many dimensions (age range, zip code etc), set up and solve a mixed integer linear programming problem, and get detailed information about every click. Not sure if Google ever caught on or cared enough to fuzz the data.
"army should have its own dedicated IT department"

I'm sure they did at one point - I remember hearing a talk at a conference from someone who handled their salary side of things maybe 5/6 years ago. He was talking about the difficulties they had in managing master data (e.g. how many people actually work for them) and came across rather well.
Ah ok sorry, I misunderstood.
Fantastic. The first before/after is incredible.
ARM: https://community.arm.com/processors/b/blog/posts/arm-a-prof...

RISC-V: https://www.lowrisc.org/docs/tagged-memory-v0.1/tags/

You can think of this feature like a hardware ASan. Instead of using ASan as a design tool, you could use it as a security feature.

Capitalizing on this feature requires compiler and C lib changes. I'd bet that the support should be available in popular open source compilers before ARM ships.
It’s depressing how many people take their claims at face value. Falun Gong is Chinese Scientology https://rationalwiki.org/wiki/Falun_Gong
Any linear algebra post I come here to comment the same (if someone else hasn’t done it already). Seriously, this series is absolutely wonderful.
Evelyn Berezin Word processor pioneer dies aged 93
Why would "being busy" be the symptom and not the cause?

I used similar platforms in the past. When I have time I'd spend a lot of it on there, and when I didn't have time anymore (new job, etc) I didn't use the platform much. This is perfectly normal and no amount of "retentions" or "re-engagement" bullshit will make me spend more time on there unless they pay me enough where spending time on the platform becomes more lucrative than my day job.
Google launches AI service in Thailand to screen for eye disease
It’s also a straight rip off of a name from Microsoft...who produces the product Xbox One

Not unlike how Google became alphabet which seems influenced by *Amazon A to Z
"Outsourcing giant Capita was awarded the £495m contract for Army recruitment in 2012 - but has failed to hit soldier recruitment targets every year since."

There's your problem, you gave it to Capita.

The whole PFI model relies on the pipedream of being able to just hand a piece of paper over from the Minister's desk detailing what they want, as if they were sending the intern out to buy milk, and magically getting the right thing back. In practice it requires all sorts of complexity and control; the project management is actually harder than just straightforwardly doing it inhouse, agility is impossible, and the opportunities for cost inflation are huge.

There is no real penalty for failure, and no real competitive market since the tendering process is so complex and expensive, and in any case the relevant small number of firms already have the Minister on speed-dial. Besides, the outsourcing inevitably ends up "too big to fail", in that when a bankruptcy does happen like Carillion the state has to take over the cost of sorting it out anyway.
This is the sort of thing that "gov.uk" are extremely good at handling, when they are allowed to.
Unique Christmas Tree Decoration Ideas Using Arduino
Dialog Modal Package for React Native
i'm honestly stunned, i know he's so passionate and a genius, but this is truly mind boggling.
FBI secretly collected data on Aaron Swartz earlier than was thought
Interserve is also in a lot of trouble:

https://www.bbc.co.uk/news/business-46505688
> "Army ads 'won't appeal to new soldiers'"

> "Capita has consistently missed the Army's recruitment targets, with the total shortfall ranging from 21% to 45%, the NAO said."

Not to get off topic but...Did Capita miss the targets, or have the proles simply become wise to the ways of the powerful ruling elites? A pitch of "serve your country" certainly doesn't have the truth / appeal that it once had.

> "The Commons Defence Committee was told in October that the Army currently has 77,000 fully trained troops, compared with a target of 82,500."

Now drilling down a bit...5,500 short? That's not even 10%. The raw number looks large-ish, but as a percentage (while short) doesn't feel unreasonable (in a real world sense).
Arduino DIY Intrusion Detection System
I don't even click on google image search results that point to pinterest. They can find another sucker to register on their site.
- They never ever get hacked, and even if they do, the insurance compamy would feel immoral to buy the hacked data dump