skysight-inc/HackerNews huggingface dataset:
I can answer this one to some extent, at least for America: the school boards are all run at the local level, which is why our education system is so inconsistent and generally poor, and there's huge resistance to any mandates from the Federal level, and it's like herding cats to get the States to agree on anything. I suppose it should be possible to get State governments to separately legislate that school districts in that state change their hours (since, after all, some states may care more than others, and different states really do have different latitudes which affects their daylight hours), but again it'd have huge resistance since every local school board thinks they know best.
I can't think of any way that this could be made secure outside of specialized hardware. If a system exists that can query some static data for whether a selected subset of characters is correct, then brute-forcing the underlying password becomes stupidly trivial.

Similarly for pre-hashing certain subsets; a four-character password can be too easily brute forced.
I agree.

I was extremely skeptical of the net neutrality regulations when they were first passed by the FCC. It was a bunch of unelected officials creating massive regulations that were secret to the public. Literally all the public new for a while was that the FCC called the new regulations "net neutrality" but we had no way of knowing.

Even if the government did have our best interests at heart (which is never a good assumption to make), they went about creating net neutrality in the worst way possible, and it left a bad taste in my mouth.
> The midterms were just a warmup, NSA's Joyce warns, as work begins to defend 2020 election.

defend against the republicans lol
> This isn't an efficient use of resources, especially when you scale it to millions of people.

I'd have to think about this more to decide whether or not it's true, my life is more sustainable than it ever has been before. In pure watt hour accounting, I wager I'm energy-cheaper than most city people who deeply care about things like that.

You're mistaken about wells requiring filtration.

> If anything in your janky setup breaks and you can't fix it in a few days, you will find yourself at a motel and fully back "on the grid".

This, like much of your reply, is rather presumptuous and ungenerous. There are some good discussion points in your reply. Unfortunately you've also stated as incontrovertible fact several things that are simply incorrect. I don't see much room for an actual conversation in your choice of words.
Maybe you are reading too much into that line. The point is, im not giving them anything they dont already have access to.

(If they are asking my social to verify my identity, they already know it to verify against.)
What is the future scenario where this FB data is used wrong, that can't/isn't already being done by collecting ISP data?
Hiding in Plain Sight: PAC-Connected Activists Set Up ‘Local News’ Outlets
Nice move! I hope that Google & Apple will reduce their 30% tax someday..
Microsoft is like a competitor in a Three-legged race (https://en.wikipedia.org/wiki/Three-legged_race) except both runners are running in opposite directions.

You have one side that's actively working to make Windows obsolete and another that's flailing about trying to make it relevant somehow.

I'm a bitter ex-Windows Phone user, so my perspective could be colored.
Sorry if I was incorrect. Here's the comment I was referring to:

https://news.ycombinator.com/item?id=19318022
> If they care about defense, I'd be interested to see any meaningful examples.

https://www.nsa.gov/News-Features/News-Stories/Article-View/...

They do do things that meaningfully improve defense. It's just not emphasized or funded nearly enough.
Whatabout US?
Just yesterday I came across one of his other videos, and I guess Bryan Cantrill still as a bit of grudge against Oracle:

Light ranting:
http://www.youtube.com/watch?v=Pm8P4oCIY3g&t=10m10s

A bit heavier ranting (with the fallout after his usenix ranting):
http://www.youtube.com/watch?v=Pm8P4oCIY3g&t=14m21s

Selected quote: "Any explanation of Oracle that doesn't end with a nazi allegory does not fully explain Oracle"

Bryan Cantrill is really fun to listen to, is a tech veteran now, and is still as passionate and energetic as he was the first day (Another interesting video about programming languages he experienced during his (long by tech standards) career: https://www.youtube.com/watch?v=LjFM8vw3pbU)
>The new fee structure excludes all games and any purchases on Xbox consoles.

Interesting considering the rise of Epic Store
>"I believe the future of communication will increasingly shift to private, encrypted services where people can be confident what they say to each other stays secure and their messages and content won't stick around forever. This is the future I hope we will help bring about.
"

Yes that will be the future and it won't be on FB. You are helping bring it about alright but mostly as a reaction to your awful policies and practices.

>"I understand that many people don't think Facebook can or would even want to build this kind of privacy-focused platform -- because frankly we don't currently have a strong reputation for building privacy protective services, and we've historically focused on tools for more open sharing."

That's only partially why people think that Mark. Let's not leave out your outright lies and omissions in front of Congress last year along with your other public denials. You don't have a good or credible reputation period.

>"I believe we should be working towards a world where people can speak privately and live freely knowing that their information will only be seen by who they want to see it."

And FB, advertisers and whomever else who ponies up some cash are assumed to always be included in that group as well. And this is exactly why nobody buys a word of your bullshit.
Because you'll look more impressive if fewer people quickly understand your code.
The main question I've always had about microservices has been, how do you handle services that are truly depended on by all other services? For example, the authentication service is depended on by pretty much anything else.

This is not a hypothetical question — I'm actually looking for a better way to solve this right now in Aether's business infrastructure right now.
Your link doesn't seem to have any such "PDF signature collisions", it's just a link to some product you're presumably hawking.

The article ("How to Spoof PDF Signatures") doesn't find any collisions or similar cryptographic weakness. Instead, as you'd expect, what they found was that software doesn't actually implement the cryptography very well. So what is in principle a perfectly good secure signature system can be "spoofed". If you use fixed software, the problem goes away.
This is an issue with any math-related tool in general, including the specialized software, where bugs are much much more sophisticated. Most App Store/Microsoft Store/Google Play apps can't be trusted even for simple square root and trigonometry calculations.
I haven’t read Les Miserables. I’m sure its great. But depicting battles scenes is not what makes W&P, W&P.

12 chapters of Waterloo for waterloo’s sake is meaningless.
Except that they don't really talk to each other and if they do it's using custom protocols. Also I wouldn't call those "micro".
Without a doubt IBM got paid more because they did a lot more work than originally purchased. These sorts of big IT deployment disasters always have complex causes and often are caused by the customers. But that's one reason why not many firms are both big enough and willing to take them on ... hence why IBM seems to be rewarded for failure.
Coming soon to a Poland near you: partial fingerprint authentication at ATMs:

"Please put these tiny stickers in the correct locations on your thumb, and then press it against the sensor ..."
Mark Zuckerberg's letter on Facebook, privacy, and the future
Google Moved Beyond Search to Reinvent Productivity with G Suite
Or simply live casting the torture of a mentally challenged individual.
Facebook to rebrand: 'privacy-focused messaging and social networking platform'
Agree here. Most of the money made on a mortgage with the lowest risk are the origination fees (say ~$10k in US) and then the individual mortgages are sold off to sit in tranches where they are risked by credit level and p
"you don't need a paper trail to know who is behind it"

don't you? It could be that ethical supermarket that you shop at because you think it shares your values.

"If the CEO of Ford...."
I suppose as an investor, theres a good case to be made that you should know the true opinions of the CEO. If they say in public they're neutral on gay rights, shouldn't you expect them to behave that way. I'm not a lawyer so I'm not sure how that would play out.

Note I am a bit unsatisfied with the thought police aspect of that line of reasoning though.
It's really very simple supply and demand game. As the population grows, the demand follows. The globalization plays an ironic role as well - the value created in China from producing most of the physical items we consume gets parked in real estate and stocks in the West because the Chinese political system is too risky. Same happens with Saudi/Russian oil/gas money, except the typical millenial westerner is completely cut out of this loop and is wondering why does the pay from their job (that often has a near zero impact on the company's profitability) barely cover the rent.

On the other hand, the supply is physically limited due to the geographic constraints. Sure, we could build more condo towers, but that would just delay the problem for a generation or two, while lowering the life quality compared to detached right now.

I think, a better solution would be a wider acceptance of telecommuting to relax the geographical constraints, and trying to put more people in the loop of the economic value creation to give them more purchasing power.
> when "easier testing" (from OP) is said to be an advantage of microservices specifically...I am not sure what to say.

I think the service boundary ends up being a very good place to inject "fakes", because that boundary is not artificial like it is when you fake out parts of a monolith. The RPC service has two methods and that is the only way _anything_ can interact with the real service, so faking out those two RPC calls let you write focused tests easily.

Obviously you can have service boundaries in monolithic applications, but they are easy to ignore "just this once". By having an API boundary enforced in production, you avoid these problems (or the workarounds become more creative, but that's easier to say no to).

The average monolithic app sitting in production is quite difficult to test because no thought is given to internal APIs. Things rendering HTML make literal database queries, and so the only way to test things it so just run the whole monolith against a local database. That ends up being slow and flaky.

Basically, microservices forces code to do less. When code does less, it's easier to test. When any HTML page can write to your database, you have a mess on your hands. That is totally orthogonal to microservices, but microservices enforce your API contract in production, which I find valuable.
Write on Your Own Website
'...it should be trivial...'

...but incredibly time consuming. Developing bug free, high performance op implementations takes time and elbow grease. It's worth comparing the gradual progress of tf lite (inference on arm devices) and the tpu architectures: rolling out a full set of ops for a new platform is a multi year project. When it's only partially done, you get inconsistent support and weird performance bottlenecks; so maybe a minimal mnist model is fast, but many other things pass back to cpu for lots of intermediate ops, killing performance.
Going back, seemingly forever, home stereos also had a "loudness" button. Many still do. Usually, there's just some equalization involved, so it's not exactly what I'm suggesting.
Reminiscent of programmed learning https://en.wikipedia.org/wiki/Programmed_learning
Why should it be number one? Karma is not particularly high.

And low karma-to-comments count depresses the rank noticeably.
Less important, but also colour-related and entertaining, the mixed metaphor “white elephant in the room”.
I'm sorry, but this seems a little naive. 1) It assumes that the NSA would only want to exploit a vulnerability exactly once, 2) this behavior would be fairly obvious since hackers examine patch payloads, and 3) this behavior on the part of American tech would undermine their credibility globally. Wouldn't you reasonably be very skeptical of Microsoft if you were a foreign government if you knew they were actively working with the American government to pwn you?

The status quo of a semi-adversarial relationship between the NSA and tech companies for offensive cyber capabilities seems better to me for both parties. Of course it would be good if they were collaborating on defensive cyber security.
I mean that the conducting of signals intelligence against national adversaries is a useful/common mission for any country's intelligence agencies.

There seems to be little doubt - as you point out - that the NSA has also abused their mandate a bit by spying on Americans.
They only contain Lithium composites, that are highly reactive with oxigen (i.e. they combust spontaneously) and are fairly toxic.

If your modified gas engine seems to work, you are quite safe. If your modified Tesla seems to work, it might well explode the next second..
How Notion pulled itself back from the brink of failure
Not that recent. We left the gold standard in 1971. All that inflating monetary supply has to get stored somewhere. https://fred.stlouisfed.org/series/MSPUS
California had an inspections program and they got rid of it.
It's much worse than you think. Some states don't require regular safety inspections. I've seen some scary stuff on the road in those states.
so they have built a rainbow table ready to download
Be careful Transparent Selection also has a nasty bug.

- Rectangular Select part of an image

- Move it one pixel or more

- With Transparent Selection enabled Rotate -> Rotate 90 Degrees

This is the result: https://i.imgur.com/HlAkHM1.png

If you disable Transparent Selection it works as expected. I reported this to Microsoft twice over the last ten years, no fix yet...
Facebook to "rebrand" as "privacy-focused"...

I laughed so hard a peed a little
Flat six Subaru engines are also popular in experimental aviation.
Except that it's not 1950.
It was rank 1 and then suddenly dropped down to 10. Now it's at 28. And the karma is pretty high for the time of the post existing.
Hopefully this means better compatibility and availability. I was excited to find that Vanguard supports security key login, but when I went to try it out, they only support Chrome (I was using Firefox, which also supports it).

I love the concept, but I don't think it would replace passwords, just augment them. This was we can have weaker, easier to remember passwords, with convenient security key login as a second factor.
So not in America. Or Britain. Or Germany.

Where are those data centers? Switzerland?
There's so much to comment on in this article. First off gravity looks like an interesting product, it's shame a blog article on that hadn't made it onto the front page.

I hate to be nit-picky but I do feel that articles like this do more harm than good by oversimplifying a fairly advanced architectural pattern by downplaying the testing, resiliency and deployment approaches.

* easier to test - this is flat out wrong. Your application or system logic is spread out across multiple process boundaries - the only way to test it, is to deploy the dependent services on your dev machine and test the set or design your services so that all the application logic can run in a single process. Think spark and spark workers that move from a thread to a distributed model through configuration. Application logic can be tested with this approach, but not necessarily system behaviour (which can be simulated)

* rapid and flexible deployment models - in a large microservices fleet where code is managed by multiple teams and sits in several repositories the dependencies are not explicit (I can not do a "find usages" on a API call and see all microservices that are using it) - so deployments can be decoupled but there tends to be lots of breakages unless you have sophisticated well-thought out testing (see first point).

* resiliency - I'm not going to expand on that because 1st and 2nd point allude to a brittle system and hence reduced resiliency. There's also data and transnational boundaries across services which need to be addressed to. To be fair, there is a hint to solving this problem through something like kakfa but it isn't called out.

Microservices can be simpler with good tooling. Kubernetes is only a very small part of it. Maybe a follow up article may be good to clarify on what tooling can be provided for 1) better testing 2) reliable deployments 3) greater resiliency.
You just spell it in your mind going through all the letters and only press keys where asked.

I'm recently switched from a bank that uses regular passwords to a bank that uses partial passwords, and it took me a week or so to get used to this, and it is a little slower (takes me like 10 seconds instead of 1), but it's nothing significant.
You’re surely right about the incentives at play, and why no intelligence agency is going to spend millions doing x company’s validation work for them. But how in the world would selective patching work? How do you hide that?
How can you be sure it's not used for ads, their privacy statement says they do[1]:

"You provide some of this data directly, and we get some of it by collecting data about your interactions, use, and experiences with our products."

"Microsoft uses the data we collect to provide you with rich, interactive experiences. In particular, we use data to:

...

Advertise and market to you, which includes sending promotional communications, targeting advertising, and presenting you with relevant offers."

[1] https://privacy.microsoft.com/en-US/privacystatement
I'm curious about that. Keeping it dumb of course makes sense for adversarial uses - if the AI is you enemy. But I could imagine there are scenarios where the AI is on your side - e.g., as a support player, NPC or pet. Would a smarter approach be more useful in such a game?
Most do, but you cannot use certain processes that stop cell metabolism for prolonged time while actually requiring that metabolism.

Some organisms have more advanced repair mechanisms than others too. There are trade-offs involved, e.g. immune system.
I have to use TF at work (small startup), but I use Pytorch for personal projects and research.
I'm going to push back a bit on this. People like Spock and Sherlock only because they are incredibly capable. That is, it's entirely predicated on their instrumental value, not because of their personality. If they weren't as capable, people wouldn't hesitate to kick them to the curb and never interact with them.
Here's one! https://scratch.mit.edu/projects/26682825/
Google gives Android developers new tools to make money from users who won’t pay
Zero knowledge proofs using Bulletproofs
>Roll out the patch to American companies first, but leave select targets still vulnerable.

I would pay for tickets to the hacker news thread if that ever actually went down
Is anyone aware of a respectable security rating system for android apps we can look up before installing something from the play store?
And though their source[1] does not quite back Wikipedia on this particular sentence, let me just the that the idea has at least been written about, in the case of Göbekli Tepe[2] (in the south-east end of Turkey):

less than 5% of the site has been excavated, and Schmidt planned to leave much of it untouched to be explored by future generations when archaeological techniques will presumably have improved

[1] http://www.smithsonianmag.com/history-archaeology/30706129.h...

[2] https://en.wikipedia.org/wiki/G%C3%B6bekli_Tepe
> More compression and less dynamic range is beneficial for certain environments. Noisy subways. Watching TV in a noisy downtown apartment. Basically, crappy, noisy environments.

Good point, I think particularly for movies or such this makes sense. I want to be able to watch a movie such that I hear what the characters are speaking, without blowing my windows out of their frames during some action scene. Yes, I realize in real life explosions, guns etc. are really loud, and this makes the movie less realistic.
exactly, code sample would help on this ad feeling, for me diagrams are too abstract.
Yep I definitely would not consider going from Silicon Valley to SF an "exodus". Here I was expecting them to be fleeing to actual different places like Seattle, Austin, Boulder, etc.
So the smart card authentication works (I can log in), it's using the smart card to encrypt/sign emails.
5 characters is "pretty simple to bruteforce" area, and now you've got 5 characters, replicate that for the other patterns, and you can probably crack the whole password pretty easy
Don't confuse applications and protocols with microservices.

Microservices are services within an application.
If that were the case, why would there be multiple "Right to Repair" initiatives? I don't think that documentation and tooling is required to be provided currently by federal law.
If you want to be in control, Windows is the wrong platform for you.
> 3) this behavior on the part of American tech would undermine their credibility globally. Wouldn't you reasonably be very skeptical of Microsoft if you were a foreign government if you knew they were actively working with the American government to pwn you?

The fact that foreign governments aren't more skeptical of Microsoft really baffles me. The American government isn't dumb enough to buy security products from Kapersky after all, or devices from Huawei.
No it is not. It is my browser, coming into my house. Prove to me you are not doing something creepy with the data, being annoying, and providing value back in your ads and I will decide to quit blocking you.
There are too many factors to account for before blaming someone for laying 32x the original budget.

1. Were there scope changes throughout the process? This is quite common and costs firms and govs a lot of money yearly.

2. Did the Gov know everything they need at beginning?

3. Are there other services or businesses with the amount of experience this one has?

4. Are there continuous services that will cost you monthly/yearly? Did you decide to increase the number of users in that platform?

5. Were there unexpected support or training needed?

6. Would it be political suicide to put the whole price at the beginning?

All these things add up and you can only hope that your gov and big companies take into account before entering this endeavor
Genetic algorithms esp. punctuated equilibrium ones can and will skip over local minima. It might take very specific environmental conditions (fitness function) though, so is not quite guaranteed.
CORBA is a bit different: that's more about making remote code appear as if it were local, and having the network disappear. SOA isn't necessarily RPC: it could be message passing, for example. Async invocation like that in RPC is much tougher.

I do think the distinction between "services" and "microservices" is a bit overblown. Clearly something like IMAP is not a microservice - it contains auth, storage, search and a few other pieces. Calling LDAP a microservice is potentially a stretch for similar reasons. But fundamentally, the concerns and architecture of both are extremely similar.
It's always weird to see people talk like the UK politics have suddenly become tense and high stakes in the last few years. Brexit, for all the anger, is not what "expect violent retaliation for airing your views" looks like. Last time there was a major schism over UK authority, that did happen, and it involved death squads.