skysight-inc/HackerNews huggingface dataset:
Yep, QA is a good option too. Personally, I enjoyed the heck out of my support gigs though (first IT Support for a college, then AWS engineering support) - found QA to be a pretty boring the one time I did a bit at an internship. If I'm being honest, I think I loved the urgency and feeling like a hero when I solve a customer's problem - and I liked that problems changed frequently. I tend to work pretty well under pressure though. If the commenter above is able to keep themselves motivated doing QA / is not into working under tight time/urgency pressures, I can see QA being a better fit for them. But Support can open plenty of doors, and I've known a few other autism spectrum folks who did very well at it and moved up the ladder to dev or devops roles.
I ended up mostly moving to Instagram because I could follow people's lives and not their political opinions
How to Set Up Your Python Project for Success -with Tests, CI, Coveralls Andmore
But that’s not the point. You can’t treat the cryptographic signature as both a signature and content. Otherwise you are opening yourself up to all these different attacks.
A screaming comes across the sky.
Ask HN:How to warn a company about the security issues if they refuse to listen?
Hello all,

While I was visiting a client, I found out a neighbor has a massive security problem with their online services. It was by luck, I didn't even use hard tools to find it. I am sure real foreign hackers wouldn't stop where I stopped after seeing everything by luck. I didn't do anything malicious, not even tried to penetrate them as I am afraid of any kind of legal responsibility.

This company is working with very large enterprises, as well as the government/defense etc.

----

I tried to contact their executives via LinkedIn, I got no response. (3 people).

I sent 5 emails to their executives after finding their email addresses from various business listing sites. Only one answered to my detailed email saying: "I will forward this email to our IT, if we need your help, we will let you know." And this person didn't even ask the details nor replied my emails any further.

---

It has been 2 weeks, they didn't do anything about the security issues they have with their software. Their incredibly loose system allowing:

-local network and all computers

-backups

-every client they ever had

-clients invoice

-manipulate data of orders and machines

-their core software Database, with full read/write possibility with no restriction or logging

-most importantly, all of their connected client's local IP addresses and so on.

---

I sent them another email today, they seem to ignore. I am extremely baffled that a company can ignore such a warning and don't take action.

---

What should I do? I wasted enough time typing them detailed emails.
https://innovixlabs.com/products/mood-probiotic
Maybe that was part of the motivation for Microsoft moving toward open-source. Showing their cards in a way that can be audited and verified to ease any potential foreign organization's concerns. Software is part of it, but hardware is the harder sell.
A demonstration of the safety benefits of solid-state batteries:

https://www.youtube.com/watch?v=m9-cNNYb1Ik
We have hundreds of customers (and thousands of engineers) who are willing to make the trade-off.

It's OK that you're not, but I hope you can agree that engineering observability isn't cheap nor easy - and if you're using standard libraries, frameworks, and tooling (and not going way off the rails) we have observed that, for the most part, our agent works as intended.

We always recommend our customers run the agent in their test and integration environments, but you are correct, there are always risks involved. Other than the automation how is this any different then putting a New Relic jar into your Java app, or including a Datadog library? We simply figured out how to do it automatically at runtime.
I mean, I suppose that the key sequences around copy/paste are technically user input. Those events get processed into telemetry as to whether they were done in processed or raw input mode, and whether Quick Edit was engaged at the time.

Additional telemetry points include whether the "Find" dialog is being used (explicitly, whether "find next" has been clicked, and how long the search string is -- no other user-generated search content is included in event logs), when a process detaches from the console, and when the window is resized.
This is not true. Say I have a wallet with two Satoshi, and I transfer one each to two different wallets. Then I transfer two Satoshi from those wallets to a new wallet. Which way did each Satoshi take? You can't say!
Distributed tracing requires instrumentation / app modification (for header forwarding if nothing else), but metrics don't.

E.g. Linkerd gives you service "golden metrics" (success rate, latency distribution, request volumes) without any app changes. It can draw the service topology too, since it's observing everything in realtime. https://linkerd.io/2/features/telemetry/
You start by endorsing my comment, but my point was how different batteries are from gas.

Upside variation is not equivalent to downside variation. It seems to me like sophistry to say, well, it's tolerable for a battery to have 30% unexpected downside because a gas car has 30% upside when you go on the interstate (which would never be a surprise anyway).

If I have a car that gets 26 mpg in "city" driving, then I feel secure that it will not get significantly less at the worst possible moment, unless there is a major engine problem.
Okay. Those different css files all specify different images on the server, depending on the media query. Are we downloading all those images as well?
> Java deserialization RCEs, while pernicious, are nowhere near as common as use-after-free and related bugs in C++ code.

Can you justify that? Actual exploits from Java deserialization RCEs are well known & published, but by contrast searching the CVE database reveals a rather small number for C++ or CPP. Use-after-free gets a large list, but the majority seem to be in C code not C++ code.
It is interesting how so many people (here and elsewhere) love to point out how Facebook loves controversy because it drives engagement, then immediately turn around and hotly deny that journalists also love controversy because it drives engagement. :eyeroll:
Yeah, it sounds like really cool technology. It doesn't seem so bad if it's on your own software since at least you can test with instana, although the potential for hard-to-debug mayhem is there.

Monkey-patching third party software will totally void the warranty on it. I've been involved in cases like this before and if there's any kind of weird bug that's conceivably related to the monkey-patching, it's hard to get help until you disable it.
Obviously they must know it's a problem, but it seems to be a constant arms race fighting with the counterfeiters, especially with their current business model.

It seems pretty clear Amazon is moving away from being a direct retailer of items and instead fulfilling orders for other stores. Moreover, they're leaving it in the hands of these storefronts to differentiate themselves by having them pay extra to separate their stock from other warehouse goods.

Lastly, it seems as if the end goal is for the retail store to become a platform for a new wave of direct to consumer manufacturers, which you see in the form of Anker, that trending Orolay jacket, etc.
> I strongly recommend, if possible, to have a single homeowner and set everyone else up as renters.

If everyone is contributing to the downpayment and everyone wants to share in the risk/reward of appreciation, than your proposal doesn't work (and if only the first holds, setting all parties but one up as renters is problematic because then either much the downpayment is gifted to them, or exchanged for a claim against the property (and first right to lease is a claim), or it is lent by the “renters”), all of which have problems, including the fact that some are outright disqualifying for some loan programs.

Your proposal is exactly the right thing to do when one of the people is supplying the initial capital and everyone wants them to take the sole risk/reward of future market moves.

The logistical issues you raise are why you ideally want the group to form a separate legal entity to buy the house, have everyone rent from that entity, and have an appropriate ownership agreement for that entity as well as rental agreements, so that a deadbeat can be both evicted and have their ownership share of the controlling entity bought out; but that's probably an initial and ongoing cost more than you want for the purpose if it's just for a shared home.
"Kraken, another crypto exchange, is offering $100,000 for information on where Quadriga's cash has gone".

Wow, this is now a serious crime, worthy of a movie.
MD5 is a little better than plaintext. Difficult passwords are still difficult when you know their MD5 hash.

Base64... is actually plaintext; that's much, much worse.
I looked into this a few years ago (in Australia) and the issue was that we were all individually liable. If all the 'friends' turn into deadbeats, become long-term unemployed, or die - you pay 100% yourself or lapse on the mortgage and get the blame.

I could be remembering incorrectly here, but from memory this meant that in effect a mortgage would not be approved if each individual could not pay 100% alone. This limits the benefit of such an arrangement from "can't afford" to "prefer not to pay it all by myself".
Some religions are about secrets, not persuasion.

Mithraism was a popular underground (literally) religion among the Roman army. And the Hebrews weren’t about letting people traipse through the holy of holies.

I agree that religion is probably overused in these explanations, but it’s plausible.
There’s been a lot of heated discussion about this on HN previously, but it would be interesting to know 1) how big of a problem it is, and 2) what people are buying that seem to have this problem.

My household buys on average 10-20 items from amazon each week for many years (combined personal, my business, my wife’s business) and have yet to receive a counterfeit item. Am I doing something different?
All of these complaints about the various superficial reasons for Facebook's decline I think are missing the forest for the trees.

The "grow fast monetize later" model that social media companies use, along with the user being the product, inevitably acts as a template for bait and switch.

All degradation of user experience stems from that. Of course using a social media platform during its "growth phase" is going to be a lot more of a pleasant experience than using that same platform when it's trying to maximize revenue.
I don't know if it's sarcasm or not. Positions are dictated by empirical evidence, not feelings. What is false does not become true because I feel it is true. Free markets are efficient in terms of supply and demand. My opinion is that those who are still guided by feelings and always with their backs to reality are the people who ask for more socialism, more regulations and less freedom for all.
Love the "into the ether" pun
DiCaprio? This whole affair has been at best a Weekend at Bernie's-level plot.

I think it would be best done with the production values of "Catch Me If You Can."
This is kind of an extreme case, to be fair it doesn't really disprove the statement which was about normal aftermarket car part markets.
Furthermore, people who believe themselves immune to being duped are less likely to admit when they've been duped, because for them to admit they were duped means they must first overcome their ego and admit to themselves they can be duped. For this reason and others, con artists love people who think no con artist could ever trick them.

Another example: somebody who believes themselves immune to advertisement may casually allow themselves to consume an advertisement (for instance, by failing to use an adblocker.) They may later be in the market for a product in some category for which they saw advertisements, look up facts about various competing products, and make their decision in a way they believe to be a rational appraisal of the product facts, missing the very real possibility that were it not for the ads they casually consumed, they wouldn't be in the market for this sort of product in the first place.

Somebody who is aware of their own weaknesses is more likely to exercise caution than somebody who believes themselves invincible.
right... developers suck, overall ( I could not reply to the comment below because nyc would not let me)
Upvoted esp that last sentence.
i think the "sharing" term was being pushed by marketing departments for when those companies were still small and most the clients were geeks. It's more about commoditizing life and turning everything to a service (and discovering its price), including human relationships eventually.
I think any game with strategy is going to have to use reinforcement learning to have any hopes of being understood by its players. Concerns around cheesing strategies can be mitigated for real time games using constraints and cheesing in turn based strategy games is a symptom that maybe the game you're working on isn't that strategic.

Ultimately Chess, Go, Dota, Starcraft are compelling games to watch and play because the skill cap is so high. No hand coded AI for such a game could ever prepare you to enjoy playing any of those games professionally or get to a point where you can understand professional play. High level strategy in those games would never even be discovered had we not had a large population of players playing those games for long hours.

Odds are most strategy games won't be as successful as any of the above games but the newcomers could still have compelling strategic elements that gamers could explore had they been able to find other players that are slightly better than they are so they learn but at the same time aren't frustrated by too big a skill gap. A small multiplayer community is why the strategy game market is pretty bleak except for a few large players.

Reinforcement learning can provide a better experience to your players because you the game developer don't need be the world expert at the strategies of your game to create a top level AI. You just make sure the rules of the game are there and self play will take care of the rest. You can constrain the AI such that it's enjoyable by both your newest and most devoted players. You can discover OP strategies and better guide your design process. Excel is great for balancing but if you want to make a game complex enough then balancing will be a tremendous challenge without a larger team.

If you're interested in leveraging reinforcement learning for your game, I run yuri.ai which helps game developers do exactly that. So reach out to me at mark@yuri.ai if I can help!
right. got it. never talk about how dysfunctional HNs commenting voting system is.
Back up for a second with the last paragraph there: if the record was mastered for a room sized stereo, it assumes that the room adds its reverb to the sound. With loudspeakers, the room is a distorting filter in the signal path. This and the HRTF distortion are skipped over when listening to headphones/earbuds. So it does make a lot of sense to add these effects to the audio signal in the headphones case. Done right, the headphone playback is indistinguishable from a stereo in a room - mounted to your head, because the spatialized speakers are relative to your head, no matter where you look.

So, there is a case to be made for this kind of processing. But I won't trust a random mastering "guru" with unknown credentials to get that right.
Why is it named Yuri, if I may ask?
Someone I love had to stop an SSRI and I helped her hack her capsules. I bought empty capsules online and we counted out the beads to allow her to taper mg by mg. Basically this but about 10 years ago: https://www.newscientist.com/article/2140106-people-are-hack...
> PayPal has established the absolute rock-bottom industry-floor of 2.9% + $0.30 for payment processing + fraud reduction.

This is neither unique to PayPal or the actual floor.

2.9% + (roughly) $0.30 is pretty much the standard across all public facing credit card processors like PayPal (and their subsidiary Braintree), Stripe, Amazon Pay, Authorize.net, and more. I have heard rumors Stripe offers rates as low as 1.8% for large volume processors. Adyen charges $0.12 + 0.6% + interchange fee making them extremely lucrative for their customers (including Uber, Netflix, Etsy, Spotify).

Given Microsoft's size and expertise, I'd anticipate they are operating close to interchange rates around $0.10 + between 0.8% and 1.6%.
No, not at all. Vinyl has a wildly inconsistent noise level where rumble predominates, and people conflate this with bits of resolution. Vinyl's behavior is not easily pinned down relative to 'bits of resolution', because the noise floor is skewed so intensely towards low frequencies.

To say nothing of how generally available vinyl records (especially old ones) have wildly different rms/peak measurements than generally available CDs and digital recordings have. This is partly 'Loudness War' and partly vinyl's inability to even do the loudness war thing and cope with blocks of heavily limited audio in the first place.

So you'll end up with a record where you can play it, and the peaks are 30 freaking dB over the RMS and it sounds amazingly open and uncompressed… while there's also groove noise that is every bit as loud as the music is (admittedly annoying).

A person arguing the vinyl/CD dynamic range thing would make the claim that the record was equivalent to maybe TWO bit digital audio, or four bit. The most cursory listen to such a comparison will show how inadequate it is.
I caught that too, but the president doesn't have to sign a bill for it to become law. If its unsigned for 10 days and congress is in session then it takes effect.
That is the actual question: Why aren't there spider-like (or some other suitable form) drones by now, for exploring enclosed environments with uneven terrain? Or are there?
Long live gamergate! Long live 4chan! Long live 8chan! Long live /pol/!
Thanks for pointing that out, it wasn't clear to me who's responsible for that price. I added your comment as a footnote to the relevant sentence. [1]

But no matter who's responsible I think it's not right to ask someone to pay more than 19 times the price of the normal renewal just because they might have forgotton to renew. I'd have paid maybe €50 but €185 is borderline extortion in my opinion.

I can assure you, I have not gotten any kind of notification from Namecheap. I don't know why some people here are so insistent that I must have gotten them. I triple checked my email address at Namecheap and don't do spam filtering. If some mail isn't in my inbox it hasn't been sent.

[1] - https://tenebris.uber.space/article/i-fucked-up#price
To win a U.S. election you don't need millions of votes. You need tens of thousands of votes in strategic locations. It was something like 50,000 votes in three states in 2016 that determined the outcome of the election. Clinton had roughly 3 million more votes but they weren't in the right places. An influence campaign doesn't have to "exerts more influence than the entire media and PR industry put together". It has to move a few tens of thousands of votes in the right places. Also, it's easier to win any game by cheating. U.S. actors are less free to cheat since they will be subject to U.S. law if they are caught. If scales are balanced with 200 metric tons in each pan, you can through off the balance by chucking a hammer in one pan of the scale.

Besides, it seems like the U.S. intelligence agencies are better positioned than random people on Hacker News to assess the extent and influence of the Russian influence campaign. What do they say?
Found this piece very interesting.

https://www.washingtonpost.com/opinions/when-computer-progra...
> I can write a safe C++ app on my own
>> But only if you don't use any external libraries

using an external library is not "on your own"
These guys are not regulated. There is no transparency. There are no external auditors. There is no control. When we find out, it is always too late. Every "cryptocurrency bank" is a potential Enron.

I think Enron actually had more transparency, and did more good in the world than the failed cryptocurrency companies. I've worked on two pieces of software that originated in Enron, which I believe are still used in production today. I think Enron participated in the invention of weather derivatives.

(No, I have never worked for Enron.)
If they won't stop spamming you, you can sue them under the CAN-SPAM act.
A singularity is by definition a superintelligence, no? A company (corporation) is just a legal structure of a bunch of people. If a company does something amazing, it's the people behind it in the company responsible -- not the company itself. Although that layer of legal separation is an opaque mapping of who-did-what from an external eye.

> capitalism as a whole isn't an AI, it is an amazing computational process that has produced the greatest advancements in the standard of living in history.

Uh, I think this claim would be hotly debated. Human innovation and curiosity -- tied with scientific knowledge that is carried forward is responsible for standard of living improvements. Things like medicine, building materials, entertainment, access and logistic improvments, yada, yada. Capitalism is just an economic system of letting the buyers and sellers decide where to allocate their funds? If you were talking about a separate measurement, like GDP, I would probably agree with you that capitalism advanced that metric.
Yeah. Ramsey's target audience is probably working class people who really do not understand basic finances and misuse their credit. People who carry a balance and have no way out. For these people, debt feels like an insurmountable obstacle.

Having an emergency fund is more important than not having one. There are more legit criticisms like Ramsey selling his own mutual funds to readers.
I sometimes wonder if the problem isn't exactly the opposite of what people think they are. Women are underrepresented in tech because they get more support, not less. More choices, and they get pushed to go for the truly glamorous choices.

What is glamorous in middle school and high school ? Well, the jobs the people "in power" at such institutions have, and in their own families. So Mom's job (the carer's job, because most families have a carer and a provider or at least have those roles be unbalanced and of course most contact will be with the carer, not the provider). The teacher's job. Caring jobs in general. And of course the "in power" jobs on TV. Men are immediately discouraged from doing that and so they skip ... what of course turns out to be mostly undesirable roles. Which make these women easily exploitable, and perhaps there ought to be some discussion of why that is such a big problem for anyone.

Maybe what needs to happen is we need to start telling women of age 10-12 "you know, in 10 years, a bit more, you'll need to support yourself, maybe a family. And as a teacher, carer job, or mom, it'll suck. You'll be low on the scale, and dependent. Think about it now and save yourself a lot of pain later".

20 years later (because that's how long it inevitably takes) we'll have a majority women, because they really do outcompete men on average given the chance. I mean, I do agree there's no way in hell this will ever happen, but one can dream.
Republicans launch propaganda sites designed to look like local news outlets
Opinion: Why Science Needs Philosophy
> I think you may be misunderstanding Java's history of serialization vulnerabilities.

Can you elaborate? https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet is just one example compendium. The number of vulnerabilities in this area is huge, across a wide range of libraries. It really is an entire category of exploits at this point, and it's still ongoing (eg, from last year: https://nvd.nist.gov/vuln/detail/CVE-2018-4939 )