skysight-inc/HackerNews huggingface dataset:
> Why big tech should fear Europe

Big Tech decides regulations are too costly, leaves Europe completely

European bureaucrats: suprised_pikachu.jpg

But seriously, If this does happen I am sure the tech talent can rebuild what left, and that might be better overall for general prosperity, or it might not be, and the crippling cost of compliance shutters new growth. I guess we will soon enough figure out either way.
>The money saved doesn't just sit under a mattress, it becomes the stock of capital in a country (plus and minus capital imports and exports and so on), which is then invested in projects (startups, infrastructure, etc.) that need capital.

Money doesn't become the stock of capital; money isn't capital. Money is a proxy for value. Capital is created by consuming less value than is produced, so the non-consumed value can be invested, which savings can achieve even if the money itself is not invested. This is because saving/hoarding essentially reduces the money supply, thus increasing the value of money - transferring purchasing power from the saver to people currently spending money. If I create x dollars of value, then burn the money I recieved in compensation, I've essentially gifted the value I produced to other currency holders, which they can consume or invest.

The US experienced deflation through much of the 19th century, yet saw higher growth rates then than in the 20th century. For instance, from https://www.investopedia.com/ask/answers/040715/were-there-a... (don't have time to find a more formal source): "The period between 1873 and 1879 saw prices drop by nearly 3% per year, yet real national product growth was almost 7% during the same time." And overall "the price level (the average of current prices across the entire spectrum of goods and services produced in the economy) was actually 50% higher in 1800 than it was in 1900." So clearly it's possible to have strong economic growth during deflationary times.
How to hire world-class engineers
Yeah, it's a very good collection you got there! some of the papers I read, others are in the queue.

I was also surprised to see the switch-based solution winning here. But I was even more surprised to see how a simple change (a primitive stack top caching) suggested by one of the readers radically changed my perf benchmarks: the threaded interpreter was the fastest interpreter again.
Automatically capture website screenshots at regular intervals. For free
The gilded age isn't a joyful standard to follow, however
I don't think anyone's arguing that it's ok, just that it's less "easy to screw up" vs "hard to screw up" and more "did something really stupid on purpose" and "did something really stupid by accident."

But yes, either way the end result is the same and you shouldn't do it.
Personally as a developer I'm not thinking Facebook is bad but rather that in general we are bad and we pass over plain text passwords to endpoints (through SSL) and just trust the data will not be abused (logging) but would be cool to have client-side encryption prior to sending to any 3rd party so figuring out a way to do that cleanly on different devices where a password, although the same everywhere possibly but is always encrypted uniquely for a particular company prior to going over the wire so even if compromised internally would only be for that particular service. This is probably just a legacy problem in the end where a new approach would simply make this problem obsolete like a yubikey or built in protocol at some point.
You should try reading the entire article.

> Duke was not the first to use the cigarette machine; in fact, all of the major producers used it by 1887.

He was not the inventor (that was James Albert Bonsack) or even the first to use them.
Next up: the EU legislates 4% growth
This might be unpopular here, but I kind of wish this and other similar systems were more open source, or even just shared between companies. If companies are going to be putting a system out there on the streets anyway, and Tesla's is comparatively more quality and perhaps thus safer (I'm not making a claim, just positing a hypothetical), then it would only be to everyone's benefit if every company didn't have to (often shoddily) reinvent this wheel every time.
>the other is a very easy mistake to make which can go unnoticed for a long time

Sure, then the question for anyone at facebook would be from the Bobs: "What exactly is it, you'd say, you do around here??

FB claims to have "top minds" in essentially every discipline...

Heck, they are IMO a revolving door to the .gov/nsa/infosec community...

So... I call BS on your statement as "whoops! Easy mistake!"

WTF is it that you'd say you do around here, Mr. FB-Security-Guy??
I doubt someone wrote "log.print(user.creds)". They probably wrote "log.print(req.args)" in a (what they felt) was an unrelated section of code. Sucks, but could easily happen.

I'd be interested in a system or tooling that could identify that something sensitive made it into a log. I think it is practically impossible, but would be interesting.
Modeling Trees with SQLAlchemy ORM and Postgres Ltree
Style Transfer might be a way to paper over lag for some connections and some types of games? It might be better to have local ML-interpreted "pretty" screens than the usual rain fade/digital tears of struggling-to-keep-up-with-the-action video codec?
A substantial part of the french social and tax system is being coded as free software. One of the teams writes the source code in YAML.

It's not a programming language, but rather a specification for calculable parts of the law. A JS programm then generates Typeform-like simulators, a node library, and an online interactive documentation (it is now compulsory for french administrations to explain their algorithms).

I'm not sure YAML is the good long-term design choice, but as we can't afford to write our own language, it's bootstrapped the project successfully.

Here is the main file : https://github.com/betagouv/syso/blob/master/source/règles/b...
Don't be afraid by the number of lines, it's just a collection of variables.
Historically, spoofing came from people with Primary Rate Interfaces (PRI, aka calling over T1), where you got to set the outgoing caller id because you might be running inbound calling separate from outbound calling, and you were presumed to know what you're doing.

In the last 20 years, give or take, the spoofing comes from VoIP carriers that are interconnected to the traditional telcos where you're receiving the calls. Your carrier has no idea which customer of the other carrier is making the call, only what the other carrier told them. The other carrier may also be passing through calls from another carrier -- there's a lot of traffic mixing going on.
A "phone line" is kind of an outdated concept. Even traditional call centers had many numbers carried as digital data over something like a T1 line, and nowadays how do you connect a "line" to a call center running VoIP over a business-grade cable modem connection? The "line" is just metadata, like caller ID.
Or is the the article actually correct?
For this at least, Intel is still not competitive in the GPU space, so advertising cool things they do is almost certainly a net win. nVidia has a big advantage in that games are developed specifically for their hardware, so telegraphing how the next generation will work is potentially a larger downside for them.
Amazon to Launch Mobile Ads, in a Threat to Google and Facebook
Ideally Facebook's website or any website should encrypt the password client side and send that via HTTP to the server where the server decrypts in internal and authenticate login session?

Unfortunately, we are in 2019 and client-side hashing is rare because people use SSL instead.

One can argue that company like Facebook that is well stocked with tech resources should have figured this out already but here we are.
If you use Postfix and CRM114 (http://crm114.sourceforge.net/) you can achieve equivalent or better spam filtering than the "big email providers".

I get maybe 1 spam every six months that leaks through. I simply add it to the crm114 filter as "this should be spam" and then no spam again for another six months or so.
I doubt it is staged. I'm not popular and I get 25 to 30 of these per day. All my calls are permanently forwarded to google voice. I check Google Voice every few days for important things.

I've made peace with the notion that if a family member dies I will find out a few days later, but I refuse to get calls from these people that honestly should have their eyes plucked out.

And what would be the benefit to ATT to stage this?
This seems like a meaningless argument - we use fly-by-wire systems all the time and your point is true for most of them. Should we be suspicious of electronic throttle because it could theoretically hit the gas at a crosswalk when you tried to stop?
the_duke is not "the community"

so when you say, "the community usually scoffs at entities which store passwords in plaint text. Why do you give Facebook a pass" is a fallacy of composition.
If you're interested in summer of code projects, there's a good number of orgs in this year's google summer of code https://summerofcode.withgoogle.com/organizations/

This year I'm helping mentor the ZynAddSubFX organization https://summerofcode.withgoogle.com/organizations/6487755463... . Zyn is an open source musical synthesizer, so there's skills that are used in a number of domains, ranging from technical writing skills, to user experience knowhow, to musical backgrounds, user interface coding, hard realtime programming practices, to digital signal processing.

It's zyn's first year in GSoC, so it's going to be a learning experience on both sides, but it should be a good time. Outside of the official GSoC project we're always looking for contributors who are interested in learning new things.
Its pretty easy, you configure your logging library NOT to log the attribute, key/value pair, whatever containing the credential. If you can't modify it on the server side (which you can lazy bones), you tell your central logging system to mask it out before it is written to disk.

This isn't difficult or non-standard. If you are logging all client request/responses full take including auth creds, credit cards, SSN, etc, you are likely doing it wrong, and possibly violating some industry regulations.
Biogen's New Beta Amyloid Targeting Alzheimer's Drug Halted
Most software engineers aren’t. Engineering requires licensing and exams through a governing body. Can’t have the prestige of the title without the responsibility. Software developers want to have their cake and eat it too (power and respect with no oversight and governance).

Pile on the regulation (GDPR for starts, more PII protection to follow up, extremely painful fines for failures).
The only reason I'm not using Chromium is that 1Password is not trusting it as a "secure browser".
Tesla is suing former employees for stealing its logistics (warehousing, inventory control, etc.) trade secrets.

Tesla has to show that Zoox is using the information the employees allegedly stole. In a nutshell, Tesla would have to show similarities between its logistics processes and Zoox's. (https://www.fenwick.com/FenwickDocuments/Trade_Secrets_Prote... for a good summary)

But given the shitshow that is Tesla's logistics , that's extremely unlikely, as Tesla's logistics processes simply aren't valuable IP. Tesla has displayed a chronic inability to manage their own supply chain, especially during the period the employees were at Tesla. If anything, Zoox used the information allegedly taken from Tesla as an example of what not to do logistically, and trade secrets law doesn't let you sue for that.

EDIT: To clarify: there are 2 lawsuits in the article. One is against an employee for stealing trade secrets, which doesn't require proof that his new employer is using the secrets. That lawsuit doesn't involve Zoox. The other lawsuit is against Zoox and former Tesla employees for using Tesla's trade secrets. I'm only referring to the one against Zoox. It's pretty clear that the secrets were misappropriated, so the real question is whether those secrets are actually being used.
In the blog post, it says:

"While the popular Original Series and The Next Generation were mostly shot on film, the mid 90s DS9 had its visual effects shots (space battles and such) shot on video.

While you can rescan analog film at a higher resolution, video is digital and can't be rescanned."
This is not a consumer product at all. I don't know how useful it will be but it's designed to be development tool for early art direction visualization.

Even for 2d visualization it could be very useful if you could drop images into your website mockup files and have it intelligently apply color palette and texture information to your existing content.

It won't look good, but it might look good enough to save you from having to manually tweak the design 20-30 times to explore a range of styles.
I guess, having thought about it some more, my argument would be more that a physical business benefits from community-provided resources. Streets, sidewalks, perhaps public transit, parking, services such as police and fire protection, etc. The public, having provided that infrastructure, should expect some reasonable accommodations be made with regard to accessing businesses that benefit from it.

A website is nearly entirely provided by private entities paying or being paid for by the users of the service. Government websites excepted, there is really no "public" anything about a website.
Indeed, I'd be curious to see what some indie devs do with it.
Show HN: "basetheme” – R package implementing themes for base graphics
This story is about the US though. The distance across the Us is over 2000 miles. Very few cities in the US are as close as 500 miles.
The deflationary argument is about a difference in degree, not in kind. A deflationary monetary regime does not stop all commerce, it just creates incentives to defer or forgo discretionary spending and investment. That, by traditional economic measures, is Bad.
The market is dead because Nvidia only want their high tier graphics cards to be deployed... can you imagine if instead of deploying 30,000 dollar GPUs, you could drop quad Titan X's or Titan V's. The datacenter license is cancer!
Do you have a list of their personal cell phone numbers?
>I wonder if there are any European routes that are as long/uninterrupted that I could try that on.

The London to Ft. William sleeper, when there's leaves on the line?
Tech Platforms Should Obliterate White Nationalism Same Way As ISIS
This article has no real content. What's the difference between these sort of speculative "no news" articles and supermarket tabloids?
I think Brits find public singing embarrassing, and even more so if the person doing it is right next to you, and a complete stranger. It gets worse if it involves a guitar.

Of course, this changes if alcohol is involved.

I get the feeling that showcasing some skill in a public fashion is loved in the USA, not so much in the UK. We typically want to sit and not disturb others, and find any other kind of disturbance awkward; we try to sit quietly and pretend it isn't even happening, eg. not even looking at the person making the disturbance. eg. some people arguing at the back of the bus probably won't make people at the front of the bus turn around or tell them to shut up.
Show HN: Easily Connect AirPods to Your Mac with Alfred Workflows
Impossible is just a couple of mistakes away. Paper holds whole worlds.
You're assuming "fails" only accounts for false negatives. False positives are a thing. If there was a 90% chance of a pacemaker going off when it wasn't needed, they wouldn't be used as it'd cause nearly as meany deaths as it prevents, assuming no false negatives.
Agreed, sorry, I wasn't meaning to appear to disagree with your statement, rather more suggesting that feelings don't tend to care about any intentional outcome, only what is.
> Big Tech decides regulations are too costly, leaves Europe completely

That will never be the case as long as Europe has a functioning economy. Look at countries like China -> everyone (Google, Microsoft, Facebook...) wants to get in, although the price to pay is really high.

These fines only affect small/medium sized companies that don't have a strong business in Europe, so it doesn't make any sense for them to get fined.
Not to mention 200-600 million users had their passwords exposed for many years. That must be a massive trove of log files.
> governmental problem to fix

careful here. It might lead to requirement Google to require identification from users, KYC as in banking. That would be orwellian creepy.
additional testosterone means you read as (and possibly are) queer more often, which in turn means you gotta pay the butch tax. This result, correctly interpreted, will be unsurprising to most queer and trans people.
Yeah that's probably it. Was wondering whether half a screen of 1080p would be enough to properly show the difference
This is not responding to GP's argument: the point is that "hoarders" implicitly provide capital for others by reducing the circulating supply.
I do wonder if having DS9 and Voyager available on so many streaming platforms right now cuts down on the incentive to remaster them. I'm not sure if a remaster would be enough of a draw to CBS All Access if you can already watch all the episodes on the other major streaming services, but perhaps Star Trek Discovery is successful enough they might consider it?
Agree this is pretty much inexcusable.

Logging request or response payloads without an explicit whitelist should raise flags for any developer. There are very few cases where you can assert that not only in the present but also for all future use cases of a system, the entirety of a payload will not contain sensitive user data.

Only a whitelist will suffice to maintain good security. It's common for developers to attach sensitive data for debugging and other use cases under arbitrary paths.

Systems can improve further by adding patterns and other heuristics to drop values from the whitelist that look like sensitive data.
They don't know. the phone system was designed on a trust the caller to not lie system...
The company is literally dead in the water. Unless you have some information leading you to believe they will be bouncing back, there is no point in exercising.
I agree, it's time for there to be criminal negligence penalties for these most egregious failures of even basic security practice.
Intel had published detailed manuals for their GPUs for years; the Linux drivers are also open source.
How to Sell Online Courses from Your Own Website?
At Pwn2Own? It’s probably ones of the best ways, to be honest.
No, it is not just interpolating. The underlying algorithm uses machine learning by applying a trained deep neural network. So there is value added besides a mere upscale.

You're ultimately right, though, and that a true HD is only going to come from the raw film content. What the neural network gives us are essentially plausible higher-res hallucinations.

Edit: as per the other comment, if the original exists only on video and not film, perhaps this is the best we're going to get.
Sleep Deprived Driving
Still interesting that not one of them went all out and publicly derided the company. The whistleblower clause would probably have protected them. However our whistleblower laws could use a brush up.
> Neither safety feature was mandated by the Federal Aviation Administration, but experts say it is key to flight safety.

Clearly, the accountability also lies with the authority who allows them. If these features were key to flight safety - the respective authority should mandate them.

On a tangential note - I tried to access the full NYT story in "Private Mode" and NYT detects that I use private mode [0]. The private mode isn't so private anymore.

[0] https://imgur.com/a/lKEJD6f
Our team is going to combat this problem without invasive camera based systems. We specialize in fabrics, sensors & computing. Sure, you can call us another ECG based startup for now. Feel free to share thoughts, concerns or general feedback!
>This is disastrous for the economy.

This is FUD. The US experienced deflation through much of the 19th century, yet saw higher growth rates then than in the 20th century. For instance, from
https://www.investopedia.com/ask/answers/040715/were-there-a... (don't have time to find a more formal source): "The period between 1873 and 1879 saw prices drop by nearly 3% per year, yet real national product growth was almost 7% during the same time." And overall "the price level (the average of current prices across the entire spectrum of goods and services produced in the economy) was actually 50% higher in 1800 than it was in 1900." So clearly it's possible to have strong economic growth during deflationary times.
Why do I have to have an account to use this? That's enough for me to not want to use it.
>I think this is what federation looks like when it works. Yeah, everyone uses Gmail, but it's also ok to use another service. It still works and delivers a pretty similar experience. Your messages make it out of the Gmail garden.

That's not true "federation" the way the OP meant. What's happened with email is that it's turned into an oligopoly: you can have email from Gmail, Apple, Yahoo (if you're elderly), or Microsoft, and that's it, unless you have a corporate address for work. If you want to run your own personal email server, forget it: you'll be considered a spammer and your emails will go into the bit-bucket.
I've found that it depends a lot on the writer.

Just as an example, if I'm remembering correctly I saw this happen a lot more in John Adams' writing than in Thomas Jefferson's.
> There is nothing more important to us than protecting people’s information, and we will continue making improvements as part of our ongoing security efforts at Facebook," Pedro Canahuati, the company's vice president for engineering security and privacy, wrote in the post.
Cloudflares customers benefit from their users having fast worldwide DNS too.
> coal fired power plants release more radioactive waste into the environment that nuclear plants do.

Are the coal-produced concentrations of such waste equal or higher than with the nuclear power waste? Say, if somebody is particularly unlucky and digests that?
>And the consequence is that everyone is better off holding currency than investing it. Which is disastrous for the economy.

This is FUD. The US experienced deflation through much of the 19th century, yet saw higher growth rates then than in the 20th century. For instance, from
https://www.investopedia.com/ask/answers/040715/were-there-a... (don't have time to find a more formal source): "The period between 1873 and 1879 saw prices drop by nearly 3% per year, yet real national product growth was almost 7% during the same time." And overall "the price level (the average of current prices across the entire spectrum of goods and services produced in the economy) was actually 50% higher in 1800 than it was in 1900." So clearly it's possible to have strong economic growth during deflationary times.
A bit more of the story. Where we were stopped was the the side of a mountain. On the uphill side was a similarly-stopped freight train, with an oil tanker car right next to us. Below us was a raging, flooded, river (on account of the same storms that washed out the track). And up above was a cliff, with a boulder on top that seemed maybe a little precarious.

So we were sitting there wondering if the same storm that eroded the tracks had maybe eroded the cliff around that boulder, allowing it to tumble down through the oil tanker to send us plunging into the flood waters below.

Brooding over that was less fun than the distraction of the sing-along.
Not a great look for Stamos.
I assume you're aware, but it's known that companies give white-glove treatment to all congresspeople and their family and their friends.

From robocalls to health insurance to the credit reporting agencies to comcast, these folks encounter none of the problems regular folks hit.