skysight-inc/HackerNews huggingface dataset:
Of course it can, but only on the margin as this article suggests. The real potential is in figuring out where to put them, what to put in the spots, and most importantly, who to choose to build them and support them given the aforementioned variables. There may also be some advances to be made in the actual design, but I do not believe machine learning is going to help so much there.
You're doing a good job of retconning the article but here's what it actually says about Ponzi:

"There are ad tech companies that promise ad buyers they will find fake data. Those vendors will usually eradicate that data at a cost-per-thousand, as a data fee. Similar to what happened with viewability and ad fraud. I’m sure there are companies looking to solve this problem, but you’ve got to wonder: Why would I want to pay more to validate the data that I already paid for? If this happened in the financial industry, then people would’ve been locked up for it — it’s like Bernie Madoff’s Ponzi scheme. Companies that detect fraud would not need a reason to exist if the market didn’t pay for the fraud to take place."

The bit they explictly compare to Ponzi/Madoff is having to pay an extra fee to detect fakes in data you bought because the "market" is paying for the fraud to take place.

This is almost, but not quite, entirely unlike a Ponzi scheme.

Also, this is terrible journalism. It's almost impossible to tell which statements constitute the "confession" and which constitute editorial comment.
This is worrying yet not surprising. Until security is a core tenet this will continue.
Now I really want to try some traditionally brewed soy sauce.
> What prevents NSA from requesting Cloudflare to put a false message?

The fact that the FBI would be the one doing that part of the NSL dance.
If the FTC discovers they've hidden assets, they can go back to court, reinstate the full penalty, and go after those assets. I suspect there'd be additional criminal charges like perjury available to them, as well.
Former bread baker turned programmer here, I wrote a crude side project app a while ago called geekbread http://geekbread.com/. It just does basic bread formulas.

There is definitely a lack of good baking software in the industry. all the spreadsheets I saw when I worked were overly complicated and error-prone. Maybe one day I can expand on the app and work with some bakers on it :)
If you've already written it all off, I recommend investing more aggressively.
> They must bleed refund money though, and I thought Bezos was all about right margins?

That's the part that worries me. Amazon surely knows this is a problem, and I'm sure they know much more about it than we do. And yet they allow it to continue. It genuinely makes me concerned for the future of their business, where they know actually providing a quality experience is going to hammer their revenue/profits.
The company I work for has been acquired by the same equity firm as Idera. This happened recently (it's public news, so I'm not giving away any secret). What should I expect, given I have a responsibility role and in my country you can't easily fire an employee (in my case, I can be fired only if I misbehave severely or the company goes bankrupt)?
> Kind of sad Apple doesn't think that's worth the extra ~$10 or so on a $1000 phone.

I believe cost is only one part of the reason. The much more important part is, I think, control.
It activates the body's healing processes!
Unfortunately, based on the vocal political opinions of my relatives, I suspect that many, perhaps even most, voters do see the "correctional" system as primarily about retribution. Local and regional politicians continue to run and win on the "tough on crime" platform even in places where it makes very little sense. Before there can be reform, people have to want there to be reform.

People want to believe that crime has an easy answer -- namely, being "tough on crime" -- and until they realize that their efforts to impede reintegration increase recidivism far more than they discourage crime, the criminal justice system will be about "corrections" in name only.
That sounds a lot like the Mediterranean Diet, which most nutritionists seem to agree is healthy. The main exception is the alcohol bit.
I visited Cuba a year ago for a couple days on a cruise. I had a nice time, some great people, some great venues (REALLY great venues)... but won't be going back, and it's due to systematic deficiencies (trivial examples: garbage EVERYWHERE, many toilets have to ration toiled paper (!), not to mention, no incentive to clean the bathrooms, many restaurants had bland flavors due to the inability to order specialty food items and spices and only work with the bulk items the government gives you).

Also it's frankly weird how the last capitalist era there is basically enshrined in their culture (from the cars, to the fairly-well-preserved buildings dating from that era)

Odd observational note on the people: Many are into what I'd call cults but what most would call run-of-the-mill superstitious beliefs (voodoo, etc.)
It's easier to tell you what I'm using in this 136 grams Xperia X Compact.

The usual radio parts for phone calls, SMS, 3G/4G, WiFi, GPS, Bluetooth. NFC, maybe not so standard and I can do without it. Two single cameras (front/rear). Fingerprint sensor. A battery that lasts for two days.

It's obvious that a larger phone has to weight more because there's more matter in it. I also expect a foldable phone to weight more because of the larger screen and extra mechanisms. However I can trade features and battery life for less weight.
Show HN: Automatically generate a .gitignore file that fits your needs
If you knew what lawyers do for a living you would probably realize that lawyers are probably one of the worst candidates for replacement by AI.

While a variety of smart or dumb machines are used today to assist lawyers, unless you are talking about Sci-Fi level AI, I can't see lawyers being replaced by AI. Okay, maybe a number of lawyers whose jobs are mostly secretarial in nature may be replaced by smarter tools, but not lawyers who counsel or advocate for clients.

It would only work in some kind of Sci-Fi dystopia where the legal system would be unrecognizable to those used to an adversarial based common law system, or the like.
PFS doesn't prevent inspection of traffic, it just makes passive capture more complicated since you now need to log the ephemeral keys for each connection rather than just using the private key to decode the whole package.

Not necessarily trivial but not exactly impossible for someone who controls one of the endpoints.

Active interception with a middlebox still works exactly the same as it always has.
> If you keep a secret list of people you know have been convicted of a felony, you're tacitly admitting you either dont believe in prisons as an effective tool for correction

This is 100% the case. Our for-profit prisons provide a huge incentive to completely ignore things helpful for rehabilitation including education, job training, anti discrimination, and treating prisoners like humans. They are absolutely aware of how damaging that list would be to those persons.
Adobe Animate is basically a rebranded version of Flash, and it can export html5. I don't know how complete/compatible the export option is, but I know we've used it at my company for a small project.
Mux is hiring engineers and PMs to build video streaming APIs at scale
While I can hardly fault someone for looking out for their own best interests, I have a nagging fear they will just export the very problems that made them flee in the first place.
I agree that it isn't about rehabilitation. And to a certain degree it definitely seems our system is geared towards retribution. But study after study[1] has shown that an individual's perception of the likely punishment (e.g., prison time) doesn't deter crime. Rather, an individual's perception of the likelihood they'll get _caught_ seems to be the main deterrent.

This is a really interesting & related read.[2]

[1]https://www.journals.uchicago.edu/doi/abs/10.1086/670398

[2]https://undark.org/article/deterrence-punishments-dont-reduc...
Many tech companies add a link to their careers page in browser consoles. I'm not sure if that's "secret" or "cool" enough. (Facebook puts in a warning to prevent "XSS" attacks.)
The actual feeling of being hungry doesn't persist when fasting.

There's a phase, but it passes. It's fairly well known that operating in fat-burning mode puts one in a different head space. It's one of the features commonly touted by advocates of the ketogenic diet, which experientially is very similar. There's a mental alertness and clarity, in my experience it's accompanied by elevated energy levels as well.

It seems to me that it arguably benefits the species to fire on all cylinders in periods of scarcity, as it improves chances of locating food before starvation. In periods of plenty, there's no urgent need, so a more conservative baseline mode of operating is advantageous as it saves fuel as fat for the scarcity periods. Humans didn't evolve with grocery stores and refrigeration, scarcity was a regular and mortal issue, our bodies evolved to address it.

Whenever I fast it feels like I'm on a sustained upper of sorts, once the hunger phase passes. It's kind of like being permanently wired, keyed up, sometimes a little over eager. And yeah it can interfere with going to sleep, similar to drinking coffee late in the day. It's not a problem in my experience if the day is spent being physically active though. Which I think makes perfect sense if we accept that this is an evolutionary trait improving odds of finding/killing a meal. We're supposed to be actively locating next meals when awake in this mode, not sedentary.

I've found it to be a valuable life hack and would argue everyone should at least be familiar with the experience enough to know the initial hunger phase is short-lived and what follows afterwards isn't unpleasant at all, and actually advantageous in some aspects. There are many activities where not having to bother with food/cooking/eating for a few days is game-changing, this combined with elevated energy levels and alertness as well? It's like magic. I never take food on day hikes anymore for instance. Instead I don't eat for the 24-hours prior and just bring water. I'm well clear of the hangry phase, and feel like running the entire thing (and if I'm alone, often do), it's unreal. There's plenty of fat on my person to last weeks of fasting.
Well, a lot of the Hatfield and McCoy war did cross that border a few times, so might be related. ;)

Mmm, Bottled-in-Bond, an even stricter legal term than "Straight". I'm glad that Heaven Hill has been bringing that term back into vogue and it is getting some of its recognition and glamour back after having been demoted to the bottom shelf (only somewhat unfairly, and partly Heaven Hill's fault in the first place).
What time did you fast? Shift the eating window to later in the day. Eat a few hours before sleep.
The usual gut reaction for statistical significance is that n*p should be 20, or 20 rolls per face. 100-150 should be statistically significant.
say you're setting up a firewall, it would be a bad idea to start with a rule that allows all traffic and then think about which services should be rejected? You would start by rejecting everything and then selectively allow ports/traffic.

When bootstrapping a VM or container image it's the same principle (imo), it's safer to once think about what is needed and have that locked down and under control rather than having to keep track of what else was forgotten or might be suddenly a flaw in this ever changing "threat landscape". E.g. the libpng example from above: What else is lying around that is suddenly vulnerable tomorrow?

If you got time to compile your own kernel then why not. It's a process IMO and I usually get to that stage once everything else is locked down. To start a minimal set-up using alpine (or busybox) instead of ubuntu or whatever is already a huge reduction of attack surface (and complexity). Next I want restriction of all system calls on a process basis (if a syscall isn't whitelisted for this specific process it's an error). Once this is in place I might think about the kernel but in my scenarios this is rare. It really depends what your service does (what you want to protect).

It's imo less work (less maintenance costs) in the long run and always knowing what you have (and why) rather than having to think "oh I didn't know there was foo too? what does foo do"? Because as code changes and as you ship updates you will anyway be attending to updates that suddenly break your setup (and run against your whitelist). But doing this review/audit during an upgrade with a system that suffers from "feature and scope creep" is impossible (at least imho).

generally the less I have installed the less I need to track what might be suddenly a problem. Once my container/VM image is the way I want it I push it to my own docker registry and only deploy from there to production.

EDIT: really good talk on docker security (not just microservices) https://www.youtube.com/watch?v=346WmxQ5xtk
There's health benefits and potential longevity benefits.

I would hardly call fasting a fad. It has been around through the ages.

Here's some legitimate information on a fast.

https://www.youtube.com/watch?v=d6PyyatqJSE

We know enough about some of the mechanisms involved and how it can promote healing the body by offering it a "reset" so-to-speak via autophagy.
Intel gave us the IOMMU but OSes haven't been using it.
What’s the Point of Modern Monetary Theory?
Maybe even longer. It took thousands of years from the invention of writing to everybody being able to read and write. Being a scribe was a viable career path for a long, long time. And even now, most people know how to read and write but do it rather badly. Just a few are actually good at producing and/or understanding text. I reckon the same thing is the future path for computer programming.
Certainly this logic doesn't suggest using CBC instead of an AEAD for a new, non-TLS system, where, if traffic analytic attacks were a concern, you'd just bake that into the protocol itself while still claiming the benefits of modern authenticated encryption.
IMO the reason why vulnerabilities matter is because you dont want to allow additional area of attack _if an attacker breaches a layer_ . This is similar to defense in depth. We dont just want a shell of security, but also additional challenges for when each layer is breached.
&#x1f631;
I assume that organizations deploying this make it clear to employees that the network and computer equipment is intended for professional use.
Would have liked to have seen a bootstrap estimate of the die's empirical entropy to see how much it is lacking against uniform.
How to rate limit your API requests on Node.js correctly without getting 429
I'd like to hear more on why you believe the Redis team is incorrect?

Some reasons against: http://antirez.com/news/126
Flash and Shockwave are two different things. Flash is still around as Animate.
These results confirm my anecdotal experience. I moved across the country recently, leaving behind all meaningful relationships except for my SO who I moved with. My mental health quickly took a nosedive. I don't connect with anyone at my new job on a deep level, and despite my efforts so far I have no close friends outside of work either.

At least now I know there's a study to confirm why I've been so depressed lately. That counts for something I guess.
Just have an image with very a minimal user land. Compiling your own kernel is irrelevant because you need the host kernel to run the container, and container images don't contain a kernel.

The busybox image is a good starting point. Take that, then copy your executables and libraries. If you are willing to go further, you can rather easily compile your own busybox with most utilities stripped out. It's not time intensive because you need to do it just once, and it takes just an afternoon to figure out how.
Same.

A friend in the ecommerce industry tells of some pretty dark patterns - some companies won't allow negative reviews to be posted at all. Attempts to leave negative reviews trigger chat or other communication methods instead of posting the review.

Amazon also won't allow most negative reviews - I've had many 1 star reviews denied by their automated system, but this has never happened with a 5 star review.
Conversely, there are a lot of really good plumbers, they just don't know it.

There's a reason why they didn't be come a plumber.

There's a reason why they didn't become a programmer.

I think this thread greatly overestimates people's desire to do things themselves rather than just consume the products of other people's labor. There are a million things in my own life that I could do but don't.
Forward secrecy is always useful for two endpoints that want to have a secure exchange of messages. It's a core component of secure transport these days.

It's not "useful" if your goal is to intercept and decrypt messages that are supposed to be secure, which is what both regulated entities and baddies want to do.

If you don't require forward secrecy you introduce a weakness. The protocol won't distinguish between whether that weakness is being exploited by regulated entities or baddies.

You don't need to weaken TLS in order to do what the regulated entities want to do - you just need to do the retention on the endpoints. The issue isn't that they can't do that, it's that they don't want to do that, probably for cost or convenience reasons. Those aren't reasons to weaken TLS for everyone who actually wants secure comms.
Indeed a lot of the changes in the past few decades seem to be based entirely on appeasing the public's fear.

One-strike eviction from public housing: https://en.wikipedia.org/wiki/One_strike,_you%27re_out

Expanded federal death penalty, removal of Pell Grant eligibility for convicts, mandatory drug testing for parolees: https://en.wikipedia.org/wiki/Violent_Crime_Control_and_Law_...

My understanding was that Bill Clinton and congressional democrats in the 90s felt they had to look tough on crime to appease the public and avoid losing elections to Republicans who favored similar policies.
> In 2018 vulnerabilities disclosed […]

More like 88% increase in “disclosed” vulnerabilities.

The title of the post makes it sound like the vulnerabilities were introduced and discovered in the last two years, but it is more likely that an increase in interest in web and software security during the last two years allowed people to discover more bugs than before. In other words, if I have a database with 100 vulnerabilities in 2016, then I update the database with 100 more vulnerabilities in 2018, that doesn’t mean that there was an increase in vulnerabilities between those two years, it just means that my vulnerability scanner got updated to track vulnerabilities that were already in the wild, but it was not aware of until the update.
Kalashnikov rifle changed the world. Now there’s a Kalashnikov kamikaze drone
Yes, if these graphs had confidence intervals they would be a lot more informative.
My skeptic side says you should expect either to be found misbehaving severely or for the company that got bought to "go bankrupt" in some form.
Emacs is quite discoverable, too. Spacemacs even more, I think.
I went back through the entire conversation and I couldn't find anything even remotely suggesting the parent was in favour of banning anything.

All I read was a claim that industrial-scale food production often leads to an inferior product.
Yes, this is all something you could do with a sideloaded APK. What I'm complaining about is the lax job that the Verge has done in explaining the implications of installing these certs and/or sideloading an APK. While it's not an insurmountable task, most people who sideload APKs on Android know the risks involved and need some level of proficiency in order to get to the end goal. I'm not opposed to people doing that but I am concerned that they might do that because they've been told they can get "free apps" or "apps that aren't on the App Store" without understanding any of the implications of what's happening when they go down that road.

Your phone is yours. Absolutely. No question. In the age of big data, security breaches, and identity theft, though, we shouldn't expect or want to make technology so stupidly easy that people unwittingly give up their privacy and security simply because they didn't know any better. And I know the old adage about "inventing a better idiot" but that's not what I'm concerned about here. I'm concerned about responsible disclosure of the information here. The downside is a few more inconvenient steps for people who would legitimately need to sideload or use a certificate like this while the upside is the ability for a non-savvy user to trust the technology in their hands.
It's pretty absurd to ignore broad scientific consensus (which includes a pretty large number of Harvard immunology PhDs) while buying into the lies of a single authority who happens to argue what you like to hear. Cherrypicking one discredited scientist out of a million who backs up your beliefs is very clearly "anti-science".

Just to address the actual article, which is filled with demonstrable lies, see the "What else does Tetyana Obukhanych say?" section here: https://www.skepticalraptor.com/skepticalraptorblog.php/appe...
The article literally says that Flash will not be discontinued.

>Adobe continues to offer a rich set of content creation tools through Creative Cloud, including Adobe Animate CC for authoring interactive content for multiple platforms, such HTML5 Canvas, WebGL, Flash/Adobe AIR and others.
That depends on your use-case.

The typical use for a microSD card is to store media (photos, audio, short video clips), and if you add it gradually and consume it from a managed media library, you'll have smooth sailing until you one day decide to export it or back it up and find that it takes 2.5 hours to transfer everything, assuming you don't get thermally throttled!
Police may be one of the few professions below who have real privacy protections in US, although most decent humans would never want to take advantage of particular ones in effect.

The special rights the police have are amazing, and that's before you get to the ones about use of force. My personal favorite is that the maxim 'ignorance of the law is no excuse' is flipped on its head if you're a cop - qualified immunity combined with judges willing to make absurd distinctions make it a great excuse.

I absolutely want a list of the ones that still got caught, even with all those advantages. In terms of evaluating the risks of local community members, that's far more useful than a list of "sex offenders" who may have peed in public or something.
How did they monitor it? Did they stab the volunteers or take pieces of proteins from the thigh?
Hopefully fully studying it in-depth will also help us fine-tune it so that we can get the most benefit from it with the least investment.
How to Achieve a Diverse and Inclusive Workplace
https://leetcode.com/ is pretty popular and has lots of actual questions. However, Google actively bans any question that ends up there.
>When I pay $1,000+ on a phone, I don't want its usefulness to be restricted to what Apple says I can do with it.

Then don't buy an iPhone. It's not like you're paying that much money and then Apple is switching the phone out after you've paid. You're buying the device with the knowledge that it operates within Apple's walled garden before you ever take possession of it.
People wring their hands about how we’re losing privacy in the modern age. But this is an example of the good that we get from that loss.

Not saying we shouldn’t worry about privacy, just highlighting this is the silver lining to that cloud and it’s not an unsubstantial public good.