skysight-inc/HackerNews huggingface dataset:
You miss a crucial point though, if you fake my fingerprint you still need my personal device to authenticate with it. You can't just use a copy of my fingerprint and set up a new iPhone with it without confirming at least on one other previously confirmed device or a second factor. So when you need to fake my biometric AND get hold of my personal device then you have to solve the exact same problem asnif I was using a password+ password manager.
That would better be covered by unlimited sick leave. Which, for example, Germany has. Sick leave is covered to some extend (70% up to 30 days, fully afterwards) by the health insurance. There's a clear separation between sick leave and holidays, the first is a medical need, the second is for recreation. (which leads to the interesting case that you can call in sick during your holidays and get the days back)

Folding sick leave and holidays together is weird IMHO, as you personally don't control the first, but do control the second.
Why America Is So Economically Productive
SHIELD AI | San Diego, CA and Pittsburgh, PA| Full Time | www.shield.ai/careers
Shield AI is the home of Hivemind, an artificial intelligence which enables robots to see, reason about, and search the world. Hivemind allows robots to learn from their experiences. Shield AI’s first product, Nova, is a Hivemind-powered robot that autonomously searches buildings while simultaneously streaming video and generating maps. S

We are hiring across technical teams:
1. Autonomy
2. Integrated Physical Systems
3. Software Operations
4. Scalable Infrastructure
5. Simulation
6. Intelligence
7. Business Operations
The reasons as already pointed out and the lack of shadows make it look a little odd.
I gave some helpful tips. Everyone expects me to go into excruciating detail for free. Cheap skates. Bums.
There are a bunch of excellent articles exploring the concept of "it's expensive to be poor" but here's my favorite: https://www.washingtonpost.com/news/posteverything/wp/2018/0...
All backfills and new support roles are going out to India and Mexico
any one else reading this comment should know -- I did look through the PRs and many of them are typo fixes.

Its easy to make demands on open source code maintainers time. Not all PRs and "tickets" need attention. The maintainer does not owe us anything.
A lot of this is down to UX, or rather expectation management. If I click on something and nothing at all happens for 0.8 seconds until the UI updates with the task done, the app feels incredibly slow and laggy. If I click on something, a progress indicator opens immedietly and updates a real progress bar every 0.2 seconds until the task is done 10 seconds later the app feels fast and snappy.

The second app took more than ten times longer, but it never left me doubting if it even noticed my click and how long I have to wait. That makes a world of difference.

90s era software was written in the expectation that the computer is slow, and having progress indicators on screen or in the status bar for a lot of tasks was common (and if that was too much work at least the cursor was updated instantly to show that work is done). Today most software is written in the expectation that everything works instantly, and if it doesn't the user experience falls apart quickly.
Speaking of photographic memories, von Neumann had one too:

Herman Goldstine wrote "One of his remarkable abilities was his power of absolute recall. As far as I could tell, von Neumann was able on once reading a book or article to quote it back verbatim; moreover, he could do it years later without hesitation. He could also translate it at no diminution in speed from its original language into English. On one occasion I tested his ability by asking him to tell me how A Tale of Two Cities started. Whereupon, without any pause, he immediately began to recite the first chapter and continued until asked to stop after about ten or fifteen minutes."

also:

"Von Neumann was reportedly able to memorize the pages of telephone directories. He entertained friends by asking them to randomly call out page numbers; he then recited the names, addresses and numbers therein."

https://en.wikipedia.org/wiki/John_von_neumann
I'm not sure that it would be less confusing to do that. Old kernels are still maintained too, so you'd have new releases like 2018.42 still happening in late 2019. And then people would wonder why some server is running a "year old kernel" when exploits came out less than six months ago.

What's wrong with simple monotonically increasing digits?
Hm, odd, I'd have expected it to be drawn roughly analogously to the cursive g but the bottom loop is connected to the other side of the top loop with respect to a cursive g. I wonder what the origin of that discrepancy is.
It depends how well they are implemented (what is stored where, how it is stored and accessed, etc). It would be certainly trivial to grab the necessary files from a Chrome or Firefox profile, but if they are well-encrypted they could be practically uncrackable (although, as we know, that definition changes so fast these days). At that point it becomes about attacking or impersonating the actual process, which is not that easy - you might need another exploit for the app, or replacing the entire app without arising suspicion (a lot of apps are not even installed in the user profile, so this might well be impossible). In the end, it very much depends, but I don’t think it’s as trivial as some suggest - at least for mass-attacks/viruses, specific targeting is a different ballgame.
I'm not sure this is MEPs doing, laws are made by the council I think, and then voted on by MEPs
Lessons Learned in My Year as CTO at N26
This page talks about which packages to install, and how to install them:

https://github.com/trimstray/htrace.sh/issues/18

Those instructions definitely need to be in the installation section!!
Google's Failed Quest to Prove Managers Are Evil – and Why You Should Care
That comment makes no sense in this context.
Capstone is just a backend above LibREDasm: you can create a new architecture from scratch.
as others said , dependecies need to be sorted. other than that i think this is quite cool and i will use it.
The philosophy is good, but IMO, the lack of attention to margins and the weight of key content elements is hurting the readability of the designs.
Machine Learning Infrastructure at Uber
QuotaPath Raises $3.5M
I self-host my Jekyll-based blog, by compiling each push on builds.sr.ht and rsync'ing it onto a static web server. Basically roll-your-own GitHub pages. I also wrote a tool which converts your Medium posts into a Jekyll blog.

https://git.sr.ht/~sircmpwn/unmediumify
OP doesn't mention bacteria, only a gradual breakdown of paper and ink components. Bacteria might play a role in the breakdown, but I'm guessing that most of it is just a reaction with oxygen and moisture in the air. That is, unless the books are so damp that they literally rot away.

Chemicals can "infect" nearby objects, though, just like airborne bacteria. It's a well-known fact that the gas that comes out of a ripening apple causes nearby apples to ripen more quickly. Maybe a similar reaction can happen to books, especially if the breakdown products cause a change in acidity.
Nice! A lot of open source debug tools don't have terribly great UIs and this one looks pretty good. I can't imagine it's as versatile or intelligent as IDA, but on the other hand for the low price of FOSS it is hard to be disappointed. Especially since my hopes of affording a copy of IDA for my hobbyist reverse engineering is basically nil.

This is definitely going in my toolchain of RE apps, alongside x64dbg.
I agree so much that I built an entire company around it.

The insight and nuance that comes from reading support conversations is second to none but more importantly emphasizing with your user enables you to focus more on building intuitive products.
> You would have to know where to look in some specific process memory or have a very convincing prompt to trigger keychain unlock. Doable, sure; but not trivial, and very targeted.

I don't think it's that hard: it's basically equivalent to finding the value of a variable in a coredump, which is a thing I've done a lot and which debuggers explicitly help you with, even if it's a release build without debug symbols. One way to do it is to inject a controlled password into the same build of the program on your own machine, dump its memory, search for the password, and then reverse ASLR if needed (which is easy if you have full memory read/write access; the point of ASLR is to make limited-access vulnerabilities like small stack overflows hard to exploit, but sort of by definition the information about where libraries are is located somewhere in the process so that the process itself can run). You can then script doing the same thing once per current-ish release build per current-ish OS, and get a robust automated attack.

In general I think people overestimate the difficulty of doing clever things with process memory (one of my favorites here is the "Vudo" exploit from 2001 http://phrack.org/issues/57/8.html in which sudo could be tricked into temporarily writing a 0 byte one past the end of a buffer and then restoring the original byte, and it's still exploitable to get root). If you haven't done it yourself, it sounds harder than it is, and betting that it's hard because it sounds complicated when there's no actual isolation boundary is more-or-less security by obscurity.

The same thing applies to triggering keychain prompts: use a side channel (e.g., polling the stack of a legitimate process) to figure out when the user is likely to need a keychain unlock, then trigger a keychain unlock for your app at the same time. (Note that you can either pop up a dialog on your own or actually request keychain access for your own process.) You also might not even need to time it: just rely on the fact that the vast majority of users are going to respond to security prompts in a way that appears to unblock their jobs, without evaluating whether the prompt is reasonable. See studies on click-through rates of cert warnings before they got hard to click through, the continued effectiveness of phishing / spear-phishing, etc. If you pop up a dialog saying "Java Updater needs your password," I bet you'll get a ton of people who don't even have Java installed type in their password.
how would you do it? what would you track?
The Trail of Bits piece kinda ignores the amount of time invested however: https://www.techrepublic.com/article/bug-bounty-programs-eve...
2009: https://www.cnet.com/news/microsofts-hailstorm-unleashed/

Seems like an SSO based on Microsoft services (msn.com/hotmail.com). Somehow also seems .NET specific.
Perfect, thank you. More and more, Qt sounds like the right fit for the product I work on.
Things You May Not Know About Nikola Tesla – History
> This is one of my favorite things about Amazon's support system. Support has direct access to PMs, developers, customer facing solutions architects and all of these orgs have close connections to the customers as a result.

This only works if they know how to convey the relevant issues to the right developers properly.

I had some large files on my Amazon Drive (the consumer product) which could never be downloaded via the desktop app, web browser, odrive, or rclone. I had to endure multiple instances of support going through the flowchart, and some promises of conveying my issue to the engineering team only to be met with disappointment.

I never managed to recover those files in the end.
Scrapinghub | https://scrapinghub.com | 100% Remote |Full-time | Multiple roles
Scrapinghub turns web content into useful data.

We develop a wide range products including:
Crawlera - smart crawling proxy
Scrapy Cloud - a cloud platform for running spiders
Data on Demand - turn-key web scraping services and more!

We are hiring skilled Engineers for various positions including Spider development, Web Scraping Proof of Concept and customer facing roles. Come join our fully remote team of over 160 people in 30 countries.

You'll have the chance to work on projects that build and transfer datasets of thousands of millions of records, as well as build the systems that deliver data to current Fortune 500 companies and startups building great products on top of our stack.

Scrapinghub has benefited from Open Source throughout our history. As a way to give back to the community everybody on our team has a chance to contribute to Open Source projects, find out more on Open Source at Scrapinghub: http://scrapinghub.com/opensource/.

Here are some of our open positions (Check out our website for a full list): https://scrapinghub.com/jobs

- Python Developer (scraping): you will be in charge of designing, developing and testing Scrapy web crawlers.

- Enterprise Solutions Engineer: You will join the Crawlera team to assist Enterprise customers to achieve their business goals via Crawlera, and support the Sales team in achieving their quotas.

- Web Scraping POC: You’ll be given the time and resources to quickly hack together proof of concepts, test them, and produce a knowledge base for other developers at Scrapinghub

Interview process: 2 interviews and a technical trial project.

You can apply here: https://scrapinghub.com/jobs
Things You Can Do If You Have a Bad Deploy
Author here, thanks for the feedback! Can you point out a few key places where this is a problem? I'd like to improve it.
What the are the best resources for learning how the kernel currently works? I tried reading a bunch of O'reilly books on the subject, like device drivers, and the Love books, but they are all for 2.x kernels which are super ancient at this point.
What I don't like with this sentence is, this makes it sound like visual design and efficiency are polar opposites. Good design can be both things.
> In practice, this means that the first thing on any page to grab your attention should be the thing that brought you there. Consider the source file view on git.sr.ht. For reference, here are similar pages on GitHub and Gitlab.

I don't even consider this a good example of good UI/UX. Sourcehut's page gives way less information and has less QOL tools like straight edit or dedicated git blame. I have to dive into submenus and close the file to get last commit information.

On example : making visual note of the currently selected tab, "Tree", I then click on "Log" to get this information. I then instinctively click on "Tree" again to come back, only to be greeted by the whole file tree. I have to manually press the browser's back button twice.
According to the following tweets, this video is not in regard to
article 13. They just reused some old video there and put it falsely
into this new context.
Really the concrete difference is encapsulation of episodes - while TV may have their own story arcs and continuity they are a bunch of beginnings, middles, and ends. Meanwhile movies are longer continuous blocks. Theoretically you could say take a season and stitch together a movie into a run time but the pacing wouldn't fit. TV is just being used as a snarl word without irony from the same people scoffed at by theater.
I was surprised about this too. I've recently switched back to buying hardcovers of older books on ebay that I know I'll re-read (library for everything else). In my opinion, a hardcover book is easier to read both in terms of hold and in terms of eye strain.

Kindle backlighting is far too pure-white/blue for me to use at night when it would be most useful and the text resolution on the paperwhite I have (can't remember what generation) is nowhere near print quality. I am still sad that physical paging buttons were removed as well.

A kindle with adjustable color temperature would be a game-changer for me.

It also bugs me that you can't really trade-in a digital copy, and the prices for a digital book are rarely significantly less than a physical book
WebAuthn doesn't preclude the use of biometrics locally. Whether you securely store and use a private key in a discrete hardware key like a U2F token, or in a computing device's TPM chip secured (locally!) by a biometric access check; it boils down to the same mechanism WebAuthn describes.

WebAuthn rightly does not push biometrics beyond what you can do with them on a local device. It would be a privacy nightmare!
Privacy Commissioner warns new Copyright Directive increases the tech oligopoly
I'm using elm 0.19 for an internal company wide tool, backed up by elixir with a graphQL api.

You have to see the implementation of libraries like https://package.elm-lang.org/packages/dillonkearns/elm-graph... to really appreciate what elm is trying to do. Maybe even read this https://package.elm-lang.org/help/design-guidelines

So every package is documented and quiet easily understandable. So whenever I need to go back into angular land - most times dependencies don't even have any docs maybe a readme if your lucky...
minimal distractions throughout

I find the compact design incredibly distracting. If elements like the .header-extension bar had more vertical padding I'd find it much easier to scan for important details.
You cannot even guarantee point releases don't contain breaking changes. Nor can you assume they don't include new security vulnerabilities.

When deploying software in a production environment you should never deploy anything which hasn't first been tested through your CI pipeline and/or been through it's paces in your dev and test environments before deploying to prod.

In fact many engineers running on security systems will version lock even the point release for safety.

This is particularly true when working with smaller projects or packages in node / Go / whatever. In fact there was a case recently about someone who took ownership of a popular Python (I think it was) module, inserted malware and just upped the point release.

So in summary: no, you cannot even guarantee that point releases are safe.
it depends what kind of developers.

you should look at some developer roadmap
https://github.com/kamranahmedse/developer-roadmap
Facebook Allowing Anyone to Look Up Users from Phone Number
New Open-Source Baker Institute Map Charts China’s Oil Infrastructure
I've never seen a more biased, unsubstantiated, "back in my day" comment on HN. Well done. Give specifics if you want to be taken seriously instead of just saying "well, back in my day everything was better".
How to build a culture of innovation within a tech company
I mean, the iPhone was kind of the only good smartphone that was actually a "smart phone", when it came out. There was nothing even remotely comparable until they were a few years into Android. I remember even the first few lines of Droids that came out and they were substantially inferior products.
Who will be able to run infrastructure in terms of money and people that will fulfill the requirements of Article 13? Only the big players.

So, let Article 13 take place and lots of competition will vanish.
You can do that with WebAuthn; it's up to Apple to implement it. They seem to be previewing it in Safari this year.
Our 100th Feature: Lawless.tech Is Open to Collaboration
Ask HN: How to kickstart an UI/UX design career?
Hi everyone, my girlfriend is trying to become a UI/UX designer.
However, it seems to be an incredibly uphill road, she is studying from nearly two years now, completed many courses on Udemy, and "UI / UX Design Specialization" from CalArts on Coursera. She tried several websites to find clients, like PeoplePerHours, Freelancer, and similar. However, she got no client at all. She was able to find only one client on Facebook, and just because the client also wanted a developer and I was able to do the dev part.

She is working on a pet project after the other to increase the number of things to show on her portfolio.

She applied for several jobs, but she got rejected because "too junior".

We are based in London, and universities are too expensive to be an option.

Any recommendation, on how to start climbing? And stop being a student for eternity?
>> A followup story in the Nov. 5, 1957, Los Angeles Times reported that Whitehead suffered a broken leg and other injuries "after the Buck Rogers-type craft went out of control" and fell about 50 feet.

Perhaps not for civilian use, then.
For our on-prem enterprise software, we have two levels before a ticket reaches the dev team. Level one handles RTFM-type answers, and asks for log files (and then provide RTFM answers or engage a dev). Level two handles demos, implementation and architecture guidance, and reproducing more complex bugs. Dev handles the most complex issues that trickle down, and backup when staffing is short (mainly only around holiday weekends).
Bang on the money Rackspace no longer have an in house Linux RedHat trainer, so all the cool value add like MySQL tuning is now exclusive to professional services which customers extra pay for. In fact most training is done using online websites, we are currently staffing support teams in India while internally we talk about sales, profit, size of market, not the customer - I really feel for racks customers they deserve the promise made to them and nothing more. I did not sign up for farsical support
I hope you can C that there aren't enough puns, so get with the program. You need beta testing than this, and then come back. If I were your boss I would not give you arrays.
So does ‘cock’ in English, yet it also describes the bird. Seems like pikas are still pikas in Portuguese anyway: https://pt.wikipedia.org/wiki/Ochotona
Yeah I think I tend to agree. But still not sure how to act.
What Can Philosophy Teach Machine Learning?
I've worked on several projects where the actual needs would get distorted between the customers and the developers in a perverse game of telephone. Each producer or manager feeling the need to reinterpret as they saw fit.
Fair enough. My answer was mostly that it's far from the first time I see this "Why bother developing X, Y exists" argument, and it's rarely a good one. Alternatives drive innovation. Relying too much on a single solution can be dangerous.
For most of these products the api is relatively easy to use to pull conversational data.

Or use ScopeAI :) (Biased since I work there)
Whats the connection between discussions about "the cult of transparency" and homeomorphic encryption?
Obviously I wouldn't recommend people do full time support if it's not their role, and the larger a company gets the less practical it is especially in the executive roles.

But the attitude displayed in some of the replies is exactly what I'm talking about when I say some people think support is beneath them.
"We all understand programming as the last step in solving a real problem. You have to understand the problem itself, come up with the algorithm, possibly optimize it, etc."

From the waterfall model to agile to test-driven programming and design to worse is better, programming has evolved away from the view that programming was just coming up with an unchanging, almost Platonic, ideal program and merely implementing it, to a much more iterative, exploratory process where code evolves in response to feedback from stakeholders and input from how it's working and meeting needs in the real world.
Well... your phone knows your number, so they might not have gotten it from somewhere else.
Heh, I've always thought that was funny: fluoridation is okay, but lithiumization isn't. What's the difference? Atomic number?
I just had a vision of a bunch of cops growing exclusively male plants, and concentrating the pollen in a centrifuge device, to be used later in neighborhood foggers.
The ROCKPro64 is not super fast, but it is a pretty big step up from the Pi. 2 big cores and 4 little cores with 4GB RAM for $80. ~2800 geekbench multicore, Pi 3 is ~1400.

https://www.pine64.org/?product=rockpro64-4gb-single-board-c...

About $1000 will get you a Snapdragon 845 devkit with 6GB RAM which is again quite a bit faster. 4 big cores and 4 little cores. ~8500 geekbench.

https://www.intrinsyc.com/snapdragon-embedded-development-ki...

$6400 will get you a 96 core ARM server.

https://system76.com/servers/starling