skysight-inc/HackerNews huggingface dataset:
To the GGP’s point, not a single machine at $dayjob (financial services) has chocolatey on the whitelist of software allowed.

We couldn’t even use GoToMeeting in our industry for ages because it required an executable download that was mostly not on the whitelist of our 2000+ customer banks & credit unions.

Windows has this thing called Software Restriction Policies, think of it as an Apple App Store curated by windows sysadmins. You can whitelist by code signer, SHA256, or even file path and name (which is insecure).
https://docs.microsoft.com/en-us/windows-server/identity/sof...
I'm not sure I understand what you are asking. From Google's perspective, to shut down the API is simple: they just need to stop serving the requests they get to the API and that will shut it down.

If you are asking how to responsibly shut down an API, that is a hard thing to do. Having the API start failing intermittently a bit more than a month after you announce it won't be supported any longer is definitely not the right way to do it though. Giving people plenty of advanced warning is the least you can do, even if you technically _can_ shutdown the API whenever you feel like it.
Sure there is. Of course people want to use third party email or chat clients. In fact, this is in many ways the bete noir of Hacker News whenever a related subject comes up, just today Slack blocking Iranian user. People point out that Slack, and Google Talk, used to have to speak Jabber. So I type my password into a Jabber WebClient, and I have just shared all the messages you sent me with a third party. It is literally this thing.

People who used the Nylas N1 client, or now, any app that uses the Nylas APIs are sharing all their email messages, contacts and calendars with a third party - this includes your messages and your telephone number.
It didn't cost the private sector to build it... because they didn't and wouldn't.
wtf such a weird thing to do
The entire medical billing industry's standard practice is to shotgun out first-draft bills that bear little resemblance to reality and hope people are dumb enough to pay. I'm sure they save a bunch of money by not having to fix their buggy processes. Instead they get to outsource their work to patients who have to figure out the bills on their own initiative and come up with specific objections because their credit is on the line. I've had all of the following happen to me in the last few years:

- I get a bill in the mail for an ER visit and it's ludicrously high. I call the hospital and ask if a human has seen it or if it was just auto-generated. They tiredly take down my name as if this is the tenth time today, and promise a human will look into it. A week later I get a revised bill for a fraction of the original amount.

- I get a check for over $400 from the same hospital in the mail one day. A photocopied "to whom it may concern" note on a little slip of paper explains: "It has been determined that an overpayment is owed to you. Please see the enclosed check. Thank you." No other explanation or even a perfunctory "sorry we kept your money interest-free for a year."

- I get a medication partially covered by insurance and partially covered by copay assistance from the drug company, so that I pay nothing. A couple of weeks after starting it, I get a bill in the mail from CVS for a couple of hundred dollars. Oops. It's a billing error and I actually owe nothing, but now it's my responsibility to sort everything out between the various parties.

- I get a call out of the blue (flagged by Android as a suspected spam caller) from someone claiming to be a collections agency trying to collect a few hundred dollars for a blood test I don't even remember at first. They say they're the second collections agency who inherited this bill. I never got anything in the mail and this is the first I'm hearing of it, so I'm naturally suspicious, but they have all of my information and describe the blood test and it does sound familiar. I tell them to send me a bill - obviously I'm not going to give out my credit card number to a random caller. They call back the next week, again wanting me to settle the debt over the phone. I ask for a bill. They say they sent one. But I've still never gotten anything in the mail. Now I'm anxiously watching my credit report and hoping the reporting agencies will believe me when I tell them I was never billed.

Everything about this is a gigantic clusterfuck. The last thing we need is even higher healthcare costs, but this industry's behavior is so completely and hopelessly broken that if someone puts a shareholder-crushing mountain of additional patient protection regulation on the ballot, I'll vote for it out of sheer spite. But seriously, we desperately need single-payer to cut through this rainforest of billing bureaucracy. This is less like a functioning society than like a Kafka novel come to life.
https://en.m.wikipedia.org/wiki/Planet_(software)
He said, "this is why I tend to use a slightly smaller subset of some of the features that C-family languages support, along with an abundance of brackets."

C does not support his first example. The standard states that the behavior is undefined.
You would need literally hundreds of people with shovels and pickaxes to equal the meters-day of a tracked trenching machine digging a one meter depth trench...
That is not what wiki has to say on the matter (the Winnie part, not the Disney lobbying). This is why I included the reference because I have heard this explanation before.
Ahh yes, well it is a jolly little number that, but be aware not to discuss it with your colleagues until you are well out of department. We don't want it coming up in committee, now do we? You don't want it becoming a wash.
EBiOS - Expression of Needs and Identification of Security Objective
Need a blind check:

Craft a delivery order which is specific and identical, then order that from several delivery companies, as well as go in and purchase the order in-store. Rate all the experiences.

Delivery companies need a "silent shopper" -- like how a restaurant will hire people to come in and order and rate the experience.
What we are actually talking about is you putting your valuables in a safe within your alarmed house and a professional thief breaking in and stealing it. Because the thief previously worked at the safe company and implemented a backdoor in the design.

You want to explain how you defend against that ?
Hyperview: build server-side rendered cross-platform apps
This is awesome... just started using this for our project. Check it out

site
https://hyperview.org/

blog post launch
https://engineering.instawork.com/hyperview-instaworks-server-driven-mobile-app-framework-2db31aa13e52
if they get a court order, it's really not. you shouldn't be allowed to sell criminal services freely just because it's the internet
No, it's a mix of emacs, vi, some desktop Ides like Android studio, a little atom and a little vs code.
Don't put words into my mouth, I never said that.

I even used the example of a phone recording you being bad because that wasn't the primary purpose of the device when bought. That argument obviously applies to laptops for the same reason.

But if you as a consumer decide to buy a device who's literal only purpose is to record you, then you don't also get to cry out about it recording you. That's the very definition of a self inflicted wound.
Criptext secure email now available in Spanish
If the apps are bad then people wont use them, so I don't see what the big deal is. That's why there are reviews on app stores.

The benefit could potentially be thousands of very useful apps that are well designed for desktop. Overtime the API and SDK's and libraries and best practices, etc, will mature.

Responsive design has been a thing forever in web design. I don't see why MacOS development can't adapt similarly. Ultimately two exclusive 'native' apps might still be ideal, but not always for everyone who can't afford to. So it's a lesser of evils type of situation.
They're working with Intel.

Although if they really wanted to clean this up they have the cash on hand to buy Qualcomm.
The internet has an unencrypted child porn problem as well.

The medium used to communicate is irrelevant to the discussion here. If they can't control the unencrypted platforms, why are they pulling focus to encrypted platforms if not to influence public opinions regarding encrypted mediums?
> The biggest struggle with climate change (in the US at least) is trying to convince businesses that they're going to be impacted financially.

You also need to convince them that any local mitigation action (maintenance, waters management, etc.) will impact them financially more than a global concerted effort to stop co2 emissions. Which seems a very difficult argument to make.
Because there are no consequences of journalistic malpractice and no one will read retractions or revisions so the parent conglomerates can shape public opinion any way it wants.
:-) You're welcome. Good luck!

I have to go now to read the 5,000+ books and papers on my computer... Most of which I end up deleting to make space for more...
Ban US company's product from China help local producers even if it is an other US company who demand it.
Dwarf planet is the most distant solar system object we’ve ever observed
Meanwhile, the CFO is Huawei is reported to have seven passports.

https://www.bbc.com/news/world-asia-46507974
Possibly, eventually. For now (2018 models), they're using Intel modems, which is why the injunction only affects previous models and not 2018.

https://www.theverge.com/2018/7/25/17614930/apple-iphone-201...
I doubt you can get to a state that will make your company unhackable. You can get to a state when you are able to discover a breach and remediate relatively quickly.
It was not because of MongoDB itself if you've read the article.
This process sounds a lot better than what we did a couple years ago when we were working on that game. Our process involved Voxel Shop https://blackflux.com/node/11 and a few steps. I can dig up the notes if it's interesting, but it looks like your process is better anyway.

I've also heard that this asset might be useful, but I haven't tried it yet: https://assetstore.unity.com/packages/tools/modeling/magicav...
It's heavily redacted, though. The article also has the backstory.

Spoiler alert: The whistleblower was vindicated.
https://adullact.net/projects/ebios/
So what is being claimed here, then? That user did not see a permission dialog? That the permission dialog did not mention the full details? Is it too much to ask from our journalists that they go into this level of detail?
Thanks for the heads up, I didn't realize the game had been removed from sale. Working on getting it restored now :/
I think it's safe to presume that the cut won't change just because it's packaged.
The main reason this kind of thing is outsourced to the cloud nowadays is because of deep neural network voice recognition technologies we have. Most of these models are too hefty to run inference on-device. Also, online learning allows for STT to get better as it’s used more if it’s centralized in a place like the cloud.
Or rather, humanity has a lot of problems. Including rape, pedophilia, murders, etc.

I don't think WhatsApp in particular has a problem.

Are houses a problem because they hide crimes with their walls?
The FBI should not apply American rules on a global populatioj. .com and other top level extensions are not us country domain extensions they are global.
> none of the claims are confirmed

"None of the claims are confirmed" is probably due to IBM (etc) having an aggressive legal attitude + plenty of lawyers.

eg If you try and force them to contact their customers, you're in for a long, drawn out legal process with a less than 100% chance of getting a decent result for their customers.
* Find phone/computer
* Unlock
* Locate self in interface and navigate to application selector
* Invoke note-taking or reminder app
* Type in note or reminder
* Navigate through tagging/scheduling interface
* Commit note/reminder

I just now took a stopwatch to time how long it took me to do all of this: 30 seconds, and 20 of those were walking to my office. That is not a negligible amount of time, but it's not a huge cost either. But...

* Be in shouting distance of phone or assistant base station
* "Okay Google/Alexa, note to self/set a reminder for eight pm: <blah blah blah>"

That's what happens when everything goes right. But based on observing friends who have Alexa, things only go right about two times in three. The rest of the time Alexa gets something wrong, often with comical results. The time it takes to recover from those situations can be a lot longer than 30 seconds. Often my friends just give up and drag out a laptop, or, more often, just decide that whatever it was they were trying to do really wasn't that important after all and give up.
Let me clear it up for you:

"Hello my name is X I would like to sell you Y" is not phishing. It's not asking for any information. It's annoying, sure, but you know how to deal with it and they won't bother continuing when they know you're not interested (ie. by saying no)

"Hello my name is X, I work at Oracle, do you have a few minutes to talk about your use of VirtualBox" followed by asking questions about how you use it in order to build a case against your employer can be perceived as phishing. They are either outright not representing or misrepresenting the purpose of the conversation, and asking for information for purposes other than what you'd expect. It doesn't fit the exact definition in the dictionary, but it's close enough and uses the same sort of tactics that it can easily be considered another example of it.
For history, it's either local logging or having an always on client you can connect to (like a bouncer), but most people I knew would just switch their client on, chat for a while, and then close it. They didn't really care much about history.

It was pretty much the same thing with newer chat services like ICQ, AIM, MSN messenger, etc. (though I think they started offering offline messages in later versions).

As for mobile, my older Nokia phone had a Symbian IRC/XMPP client that I could use without any issues.
Absolutely. I didn't mean to imply otherwise. I don't expect companies to be able to stand up to dedicated attention from a nation-state.

What I was trying to say was that that doesn't relieve them of their responsibilities to minimize the damage afterwards.

Just because they can't be expected to win doesn't mean they should be able to wash their hands of the whole affair without trying to help.
Try using Walmart's Online Groceries - You can have it delivered to your house or pick it up in the store.
The article says that it is 20% of mobile searches. I doubt many people are doing very lengthy research mobile. I have seen siri and okgoogle being used pretty commonly for mobile searching. I'd be interested to see how many searches happen on mobile vs desktop though.

I would also be interested in seeing if people looking for places/directions factors into this in some way.
Or use the iMac naming scheme, e.g. iPhone (Late 2027).
You can get a Jetson TX2 Kit (edu bundle for $299, I think normal is Around 599.

https://www.nvidia.com/object/jetsontx2-edu-discount.html
Is this shit ever going to end? Airport agents demanding you to unlock your phone and detaining you if you refuse, governments passing laws to decrypt everything and spy on everyone. Why the heck is this considered Ok and doesn't cause outrages?
"Be careful how you dance, you could get sued"- even if it only applies to paid dance performances - sounds like a dystopian nightmare.

Could make for an interesting spin for the next Dirty Dancing reboot though. All dance moves are owned by the megacorps, so the poor town can't afford a license to dance.
why would you apply us law to global top level domain extensions?
I was looking at the Outline article that someone posted earlier that didn't mention any acquisition, oops.
> when the climate change bill comes due businesses will demand government help pay it

What is the difference between having the government- the totality of citizens- pay for climate change mitigation; and adopting extremely expensive global measures that will make everyone poorer for a number of decades? I'm asking seriously. It seems very similar to me: in both cases the whole collectivity will pay (which is fair, since it's the whole collectivity that is enjoying the benefits of freely polluting the environment now).
Not to be curmudgeonly but this is exactly what I would expect from public sector.

- Odd technology choices. It took me a long time to figure out what .njk files were.

- Misapplication of popular technologies. They're using webpack for... something? But most of the actual bundling is done by hand with gulp, and a lot of the JavaScript is operating in the global scope.

- Overselling. It's just a bunch of scss with some mostly-HTML components.
I remember seeing the Capsule Tower in The Wolverine.
> I don’t think any US president is going to be arrested anytime soon

I agree, sadly.

The problem lies with the fact that Trump (and the Republicans by extension) have caused so much damage to the roots and branches of democracy that cutting them out altogether will cause terminal damage to many of the institutions on which democracy relies. If the FBI can cause the downfall of a President, then they will become the weapon wielded, rightly or wrongly, against the next President.

The best outcome we can hope for is a systemic review of what has lead us to this rot, along with indictments and jail time for key, non-government, people. Political donations, media regulation, espionage - all of this needs to be reviewed, laws changed where appropriate and people charged where necessary.

Trump's arrest would change nothing, except to ensure that the FBI would be deployed by corrupt men against a (relatively) honest President. A root-and-branch cull of the conditions which made Trump possible will prevent the next Trump.
> Lo and behold, it was a public IP.

As lousy as that sounds from your description (eg a valid globally routable IP), it would be very surprising if the printer (or even the office space) was accessible from outside HP.

Firewalls (and more) are a thing. ;)

> Also, if this sounds too crazy to be possible, you can test this for yourself. If you do a Google search on the welcome page of an HP printer, you will find hundreds with public IP addresses.

Yeah. Certainly says something about the competence of some places. :(

Relatedly, it sounds like Shodan might be of interest:

https://www.shodan.io
May not even need a meter. A foot deep could be sufficient.
The point is that simple exercises like that develop your algorithmic and computational thinking. You can't start out building an ecommerce site, you have to learn to program first. It's like... Karate Kid "paint the fence", it wasn't because Daniel's martial arts career was going to involve fence painting, heh. But because it developed certain skills.

It would be a problem, I guess, if people found it so boring that it deterred them from learning (I don't know what the Karate Kid analogy here is; I think miyagi MEANT to make Daniel do something boring to prove himself, which is probably not appropriate for learning to program), then more interesting exercises might be beneficial. Everyone learns differently, but when I was learning, I found exercises like that fun myself. Because I enjoyed programming, the same way some people enjoy crossword puzzles (I don't). Of course it was a long time ago, perhaps "kids these days" require more flashier puzzles, I don't know.

I'm a better programmer for having taken a 'compilers' course, but I've never written a compiler since and probably never will again (but who knows).

There's a reason "foundations of programming" are foundations. It's not because you will do those tasks again in your career. But because they will teach you concepts and methods and skills you will use forever.
I've never seen anyone sniff packaged raw chicken. I find the thought hilarious. Do you demand to sniff the meat when you go to a butcher? As for the other examples, supermarkets throw away so much that basically everything left is uniform. You get more variety at markets but even then the wastage is sadly high.
I was curious about their technology too. From my brief research it works using Bluetooth beacons accessible for app via iBeacon API - https://developer.apple.com/ibeacon/
Failure to plan is planning to fail
As somebody learning Python right now...Thank You!
From Linus:

Misleading URL. Not in my tree, just using github to make it look like it.

These is no actual commit ID b4061a10fc29010a610ff2b5b20160d7335e69bf
in my tree, but when you pass github a SHA1,
it doesn't do any reachability analysis whether that actually exists in the named tree,
so it uses a completely unrelated commit from somebody elses tree on github.

Linus
I guess Colors work mathematical, because our eyes are basically a physical sense.
Smelling on the other hand is only chemical - and that is why it works more in an irregular, unpredictable way.
For anyone who didn't know Brightroll was rolled into Oath... which is amazing considering they are saying "it's worth virtually nothing".
10: The Shizuoka Shinbun SBS building: http://www.michaeljohngrist.com/2009/06/shizuoka-shimbun-bui...

11: An "Escape Room" business, Azutoubu Scrap: "アジトオブスクラップ東新宿GUNKAN" https://rubese.net/gurucomi/?id=1931856
China is a state sponsor of hacking and industrial espionage and they're also incarcerating quite a number of people based on their ethnicity, and harvesting their organs when they die in incarceration. Among other things.

Call it what you want but, even with a lot of grey in between, these things are real and material.

That said, I suggest the number of stories appearing in the press as of late might be part of a steady leak of information from US authorities as part of their strategy to put pressure on China during trade negotiations.
Wow, what an overreach. I'm surprised they won.

I hope this EU ruling is not applied in the US.
> it was a public IP.

IP exposed to the internet, or an IP from the public range?

HP has 2 /8s. Lots of things got public IPs in there since they can hand them out like candy. It doesn't mean though that they're available from the internet.
I think you’re right. Garbage collection companies, seen as a mobile sensor platform, probably can generate data (maps, wardriving, street view, AVL) worth more than their actual core business.
Those would not be moderators. Those would be undercover investigators. DO NOT DO THIS. Any non-cop can get into real trouble. These sorts of investigations require people authorized to seek out, possess, and transport this material (all crimes in various jurisdictions). Even facebook will hesitate on sending employees out to hunt these groups.
Why aren't builders taking more initiative to employ moderators to monitor crimes inside the houses they build?
This is an interesting glimpse into the mindset of feds.

Underscored the old saying that the police are never there to help you.
> So the plan is to hide and not to disclose the problematic companies, and then blame everything on China... Absurd.

Or the methods used so others can try to protect themselves.
They seize it at the root level. If the register was outside of the US a court order may or may not be honoured.
Are you really missing the point?

The cost to build something in the private sector is almost always cheaper than asking government employees to do it. The public sector "didn't build it" like you said, but if they had, it would have been cheaper. This is almost always the case.
I still think that it's funny how even something as third-worldy as a secret court wasn't enough. They didn't stop at disregarding the court system, they decided to make a joke out of the law itself. It makes you wonder what other laws the government sees as only suggestions. What credibility do the enforcers of the law have when they themselves only follow it when it suits them?
Open season on hylomorphisms