skysight-inc/HackerNews huggingface dataset:
Possibly a reaction to Valve and Discord's recent announcement of similar (more fully featured) releases. But I may well be wrong, and this was planned for a while, with a sturdy roadmap and a MVP release.
That.

Until you become a founder yourself and know how hard it has been might change your mind. Otherwise we're all just employees. One big difference is that founders take bold moves and risks. I also consider this is capitalism at work.
You're wrong. When I was growing up if we didn't hunt in the winter it means we didn't eat in the Spring.
How do you stop it and still have an effective development org? Services need to be debugged, so requests and responses need to be logged...
Tesla sues former employees for allegedly stealing data, Autopilot source code
> > who used Google to generate new numbers

> What ? How is that even possible...

I'm guessing they were referring to Google Voice.
I am currently analyzing how to launch robot affector business in Germany. With physical goods I must be present during sales pitch, video is not enough. It collides with my current corporate job, but it is doable. What kind of actuators do you sell?
For a customer it's irrelevant that the discount is a loss leader. The end result is that I can renew a .space domain for half the price at Namecheap, without having to buy other services.
jinja is great, IMO, and well suited for it's intended purpose.

jinja is in wide use in the python community.
That's a tried-and-true technique for getting into a person's voicemail mailbox, if you don't have a password set. For years, until carriers started forcing people to set passwords, this is how a lot of phone messages were obtained by unscrupulous tabloid reporters, etc.
Can we please unite...

Ugh, let's please not. I value a marketplace of ideas, in which those with totalitarian personalities know they shouldn't attempt to badger us all into "thinking the right thoughts".
A lot.

Laptops are generally disruptive to the entire class, and (anecdotally, but I’ve done a lot of higher learning) almost all of their use is not for note taking or anything related to the class.

So why not ban them? Many professors do.
Nothing illegal, but the initial contract was definitely a bad deal for me. The most glaring item was some added in language that translated to if the appraisal comes up short of the contract agreement then the seller will lower the sales price to match the appraisal. In Texas at least an appraiser is chosen somewhat randomly (I'm not sure how, but neither the buyer nor seller get to choose) and they give what is at best a guesstimate.

The other glaring things were everywhere a fee was to be paid, they had checked the seller's box, and that wasn't the kind of market we were in. I had already signed for my next house and I wasn't about to pay all the closing costs when I was the buyer and again as the seller.

In Texas all the real estate agents use the Texas Real Estate Commission's forms for contracts. It has check boxes and fill-in-the-blanks for all the standard things. I found that almost any place this agent had deviated from one of the standard boxes she had tried to put something shady in. Maybe in her experience people representing themselves were less savvy sellers.
Do you own the trademark? I would recommend you talk to a trademark lawyer asap.
I feel like there is a large gap between shell scripts and Ansible. If we draw a line, you end up with something like this, with each option bringing more power, but also complexity with it.

Bash/Make => ? => Ansible => Chef/Puppet/Salt => CFEngine

There's a big jump in complexity from Bash/Make to Ansible. This is a place where Python or Ruby would make a lot of sense but without all the dsl/yaml/declarative nonsense. A small library of reusable functions would fit in well here, written in a language that isn't fundamentally broken (bash).
The DNS requests corresponding to typical HTTP traffic would be negligible compared to that HTTP traffic. DNS servers generally don't generate any traffic except when you perform a query.

Should be <512 bytes per request and after a particular domain name is queried it doesn't need to be queried again for some time (depending on TTL).
>Why is that an issue ?

Are you serious?

>devs will also likely have access to the hash of the password of a user

No, devs should absolutely not have access to the password hashes of users in a properly configured environment
To me this was the least interesting part of the Stadia reveal. State share was the real innovation imo. Would any serious game studio use style transfer ml to actually replace their visual artists? Didn't seem like the quality was there.

That said, it is an awesome PoC. Just not something I see being practically applicable.
No, your browser sends the password to the server in the HTTP request, only protected during transport by it being HTTPS. On Facebook's side, the HTTPS gets decrypted and the request is passed on (again potentially encrypted in transport, but the machines handling the request obviously need to see what is in the request, which includes your PW)
I'm not an economist, but the SV economy (which has become a nontrivial chunk of the US economy) just doesn't seem like it can keep doing this forever. The driving ethos is to throw everything related to building a sustainable business out the window, in the interest of cashing-out as fast as possible. Slash-and-burn capitalism. That's not how you create jobs. That's not how you grow an economy. That's how a few people get very rich very quickly. "Move fast and break things", as it were.
This article's title strikes me as condescending and annoying. There are 'reasons' to travel by train for a lot of people. My cousin has a deep fear of flying and hasn't done so in several decades. So he travels by train. As this writer learns, it can also be an enjoyable way to see the country.

That said, I did once survive a 24 hour delay on Amtrak between Chicago and Oakland. It was the middle of winter and track was splitting, so the train would move a few miles and then wait a few hours for the crew to replace the broken rail.
The logging issue is something we've become aware of more recently, but it's just as bad. There is no intrinsic difference between the statement "don't store passwords in plain text" and "don't log PII or passwords in plain text."
This is a terrible comparison. A better one is continental Europe as a whole, which has many rail lines spanning it. This is probably what the Swedish person was referring to, not simply staying in Sweden (the major cities in Sweden probably aren't far enough apart to fly between). Continental Europe is very roughly the size of the US, yet trains are used there extensively.

The problem with the US isn't size, it's political will. America simply does not want to have high-quality, high-speed train service.
Joel Spolsky wrote about this 16 years ago:

https://www.joelonsoftware.com/2003/06/03/fixing-venture-cap...

The fundamental reason is that VCs do not have goals that are aligned with the goals of the company founders. This creates a built-in source of stress in the relationship. Specifically, founders would prefer reasonable success with high probability, while VCs are looking for fantastic hit-it-out-of-the-ballpark success with low probability.

...

Even though the second model has a lower expected return, it is vastly preferable to most founders, who can’t diversify away the risk, while VCs who invest in dozens of businesses would prefer the first model because it has a greater return. This is just Econ 101; it’s the same reason you buy car insurance and Hertz doesn’t.

Though to be fair, he also explained why he took VC for StackOverflow at Startup School 2012. Basically this:

https://www.joelonsoftware.com/2000/05/12/strategy-letter-i-...

tl;dr StackOverflow has a network effect and needed to scale fast.
We don't have the trademark, unfortunately, but we can demonstrate using the mark for months before Google did.
If a single developer is able to push something like this to production without scrutiny in "one bad morning" on a platform with billions of users, the company itself is the problem.
I'm no expert but here's a paper on using least-squares to fit a Gompertz curve: https://www.sciencedirect.com/science/article/pii/S037704270...
This honestly feels staged. I have never seen anyone in any interview receive a call and pull out their phone to see who was calling. So in this ONE case, someone was calling and he had to take out his phone? I imagine CEOs are getting called constantly, even when they are in interviews. How come they never pull out the phone for other calls? Do they just use airplane mode? If so, then why wasn’t it enabled for this interview?

Just like most of what AT&T does, this is a lie. To what end I’m not sure. To show everyone their incompetence in dealing with the problem? To try to put pressure on the FCC to make some rules (that AT&T will fight against because it hates regulation)? Or maybe they’re just trying to poke fun at the problem.

Edit: OK, so this was on CSPAN, not an actual TV interview. It does seem more natural than something that is clearly staged, so now I have my doubts.
Statistical Rethinking Lecture 1 (Taught by McElreath)
> Test exhaustively.

> It's notable that this was published before Apollo 13

One of the causes of the Apollo 13 service module explosion was damage caused during a pre-flight test. The SM included a pipe whose only role was to drain out oxygen after pre-flight launch-pad tests. It had no in-flight role. The pipe was damaged during assembly (nobody noticed) and failed to drain the oxygen tank. The test team instead decided to drain the tank by heating the oxygen using an in-tank heater and in effect boiling it off. The heater temperature gauge didn't show (it was badly designed) that the heater had in fact got so hot that it had melted electrical insulation on a fan in the oxygen tank. All of this was pre-flight.

56 hours into the mission, the crew used the fan to stir the tank, causing sparks and the eventual explosion.
Facebook Mistakenly Stored ‘Hundreds of Millions’ of User Passwords as Plaintext
> readable for anyone with access to the logging/tracing infrastructure

The article says more than 20,000 Facebook employees. A quick search shows that they have around 35k now - do 60% of employees at Facebook really need access to all of those logs?
>There are many ways to bootstrap consumer facing websites and other businesses that require a lot of early capital, you just have to be creative.

Yes but other financing options such as crowdsourcing (e.g. Kickstarter, or blockchain initial coin offerings), or charging consumers via subscription payments ... all have their disadvantages compared to VCs.

Another factor that may handicap your business is how your competition is financed. E.g. if your competition has $10 million in VC money but your business sticks to "bootstrapping" out of principle to stay anti-VC, you will be outspent in scaling out and may fail anyway.

Really, the critical advice is to be smart about analyzing the VCs and their financial terms before accepting their money. If VCs don't make sense for your particular business, don't do it.
Implicit Generation and Generalization Methods for Energy-Based Models
On many systems, "real passwords" are just a tcpdump away (most sites aren't doing end-to-end TLS. It's TLS terminated at the load balancer / proxy level, everything else is in the clear.)
People falling from rooves installing panels, mostly. Probably a few people poisoned by chemical pollution from manufacturing/disposal of panels as well.
I went Shanghai to the Yellow Mountains on a very old, slow sleeper train. It was basically a dormitory, with bunks three high. And you don't want to know about the bathrooms - it's really just a hole in the floor, falling onto the tracks.

But even so, it was a wonderful experience. The Chinese landscape is nothing short of awesome. And the culture that unfolded was completely unknown to me, so constantly interesting.

One thing that really made me take notice was the wide range of people. On the way to the Shanghai train station, we had walked by a Lamborghini dealership (I don't recall ever having seen even one of these in the USA) - there's a not-insignificant population of filthy rich people in and around Shanghai. But on the train we saw people peasants using an ox to plow a rice paddy of only a fraction of an acre. The degree of inequality was hugely wider than America or any other nation I've seen.

EDIT: the Shanghai airport maglev train was an interesting experience just to say I've gone 300+mph on a train, but otherwise totally boring.
If it moves, tax it. If it still move, regulate it. If it stop moving, subsidize it. I'll guarantee, you'll soon see taxpayers money going in to the resturant business.
The fact that the top comment is Facebook apologism informing others how this is "understandable" makes me wonder if there's something more than organic voting going on...
That Google also does maps doesn't mean much, as long as they don't use that name for mapping products. Unless your trademark is registered to cover the gaming field too, probably little you can do. But for details, ask a lawyer.
That is a reasonable take but then you can also blame Sarbanes-Oxley on the likes of pets.com. SO is 2002 and while it was unquestionably a reaction to the dot com era and bust, it was also a reaction to Enron and others. Hell, it was passed and signed in the Bush administration.

Yeah, SO raised the bar to get into (and stay in) the public markets. Maybe regulation minded Congress had a point there. In any case, this correction didn't prevent private MA. Moreover, VCs still get their funds funded. So SO hasn't killed any golden gooses.

Maybe we should have corrected something in 2008. We certainly un-corrected Glass-Steagall in 1999.
y tho
I think the USA doesn't do silence.
The proposition is not that people won't spend money. The proposition is that they won't invest the money that they're not spending. Keeping money under the mattress is not competing against groceries and Netflix, it's competing against government bonds and/or interest-bearing bank accounts.
https://news.ycombinator.com/item?id=19453359
Powell Signals Prolonged Fed Pause as Inflation Lags, Risks Loom
Yes, we use Teams - I rather like it.

Quite keen on getting into development of bots for it as well (effectively I see it as "revenge of the command line").
How much do you want to bet that some of those FB employees decided to login by turning off "location detection" flag and in an incognito browser?

I would not be surprised. Some of those 9,000,000+ queries and 2,000+ employees must have had some nefarious use. Statistically speaking...
Ask HN: PGP Keyservers in Blockchain
Hello

I was wondering: do you know any keyserver using a blockchain technology? I found "classic" PGP Keyservers (like MIT) but I'm not really fond of any central entity (either Google, Facebook, MIT... or any other) managing my identity and it seemed to me that the blockchain could be a good technological candidate for that use-case (using BigChainDB for example: www.bigchaindb.com).

The blockchain could store mappings between email and public key. The addition to the blockchain should be guarded by a kind of challenge (like answering to an email crypted with the public key).

As a companion, an IMAP/SMTP server (or mail application plugin) would be able to sign/crypt/decrypt/check signature "transparently" (like any spamassassin for example, so it could be user-friendly) by checking either local db or asking to the keyserver...

Or the keyserver could implement the OpenPGP Server Protocol...

I'm surprised that I couldn't find any information on that kind of idea (mixing Blockchain and Identity Management) so maybe there's some strong drawback that I didn't see... Or maybe I searched with the wrong keywords...?

Any help would be appreciated
Thanks in advance
Intel Processor Graphics Gen11 Architecture [pdf]
Society needs to have a conversation about upselling.

The business model of "this is the product, here are your luxury features" that was popularized in America in the 20th century on products like cars and blenders is now applied to thousands of product categories because it is an easy way to get clients to overpay.

Clients will generally keep approving added expenditures until they hit their allocated budget for a given purchase. It's a hack to prevent clients spending less than the maximum they're willing to spend.

The consequences of this model being applied to things like jets and bridges are catastrophic but it's so well-suited to American puritanical values (brass buttons? on a suit? Good lord!) that few people ever question it.

Should "it won't kill or maim you as often" ever be an acceptable feature, on any product?
Normally I don't like these kind of posts as they're often full of the usual "learn javascript! Build the next facebook! Become a millionaire!"

This post does seem to be from someone who genuinely understands that unless you learn to program in a way you enjoy, and you stick at it through the rough and smooth, you're very likely to give up.
Yes, at some point over 90% of blockchain companies had lots of talk and less to show for it. Without getting into too much details, this company is not one of them (according to many articles and observations of other people..not my subjective thinking alone).
The stories by Horatio Alger were fables, they don't depict reality.
With 20,000 employees who potentially had access, we can rest assured that passwords were abused.
> TELL YOUR FELLOW AMERICANS that you plan to cross the United States by train, and their reactions will range from amusement at your spellbinding eccentricity to naked horror

Its not just that its the train use, its the fact that you want to cross America at all! The perception is that it is a large foreign land full of lots of things that can go wrong solely due to incongruent laws.

(Mid 1800s) Cross a border and be sold into slavery by bounty hunters? Check

(Fiction, but is it?) Transportation breaks down and you are surrounded by mutated hillbillies in the desert? Check

(2010s+) Highway robbery of all the money on you by some random municipality's police themselves under protection of the state? Check

(2010s+) Get thrown into an old people's home under a guardianship racket that the doctor's and the court system are all invested in? Check

Be kidnapped and sold into illegal sex slavery?

Be kidnapped and sold into legal sex slavery in the desert without adequate means of getting help?

But yeah none of that is likely to happen and these are irrational fears, but you can ALSO just fly over all of that noise.
The "currency" use-case has not proliferated or reached adoption at a scale (by any measure) that would make it a worthy medium of exchange, which fundamentally is the definition of a currency.
This is very basic stuff, all user-identifying information should be tokenized before being logged. Controlling access to production login logs or exposing them on only a need to know basis is another basic security principle. Sounds like FB is actually a wild wild west internally.
The fact that sensitive data like this is just one config push away from being exposed means it's a brittle design (not just the code, but the entire design /review / deployment process - this is a platform with 1 billion users, not your 1-dev WordPress webpage). That said, this is further aggravated by the simple fact that for whatever reason, 20k of their employees had access to these logs.

All in all it just paints a picture of an irresponsible company where their house is not in order.
Glad to hear :) I must admit that protobuffers v2 might be best for configurations files, given that they have the "required" keyword on fields and the generated code has methods like "hasFieldX() -> bool" which proto v3 dropped in favor of simplicity.
Writing a lambda calculus type-checker in Haskell
The regular passenger cars do have noise restrictions. It's only in the meal and observation cars.
I don't buy that. In any other industry, you'd have a hard time even explaining what the problem is. "Someone wrote down my password in plaintext - yeah, that was me, it's sitting right there on my monitor".
Isn't it possible that those developers just wanted to look at something harmless like for example failed logins and did not even see or reflect on that the log messages also included the password? But if so it is a bit worrying that 2000 eyes did not spot the bug.
I found this easier to read by adding `padding: 13%` to the div with class `afe4286c`.
Honestly seems more like a user-end personalization than something a developer would use. In a game settings menu, you choose an image that maybe you uploaded to use as the game style? Definitely something people would use. Especially if they figure out how to make it selectively apply to only certain textures/objects or parts of the screen, which seems likely.
Oh the fun that is scanning source repositories, pretty much a guarantee at any large company you are going to find plain text passwords, as in hard coded.

as for more fun in plain text passwords it is no worse than any system which permits an admin to extract the user's current password and those systems still exist
No, you can't, you need to create a new "currency" to do so. You can't do fractional reserve banking with gold. What banks did was create "gold bonds" that were just a promise to pay.

And then you're just creating a bitcoin-back currency, which at some point will inevitably see the same fate as all currencies did, and being de-linked from bitcoin just as other currencies were de-linked from gold.
My guess is this is leading up to a PR campaign where the industry will make a big deal about how seriously they are tackling the 'newly discovered' issue as an attempt to undercut a push for actual governmental oversight and regulation.
I wonder how many articles I have only partially read. I got down to the subscribe to email list and large advertising and was going to hit back. I thought it was either an excerpt or a really short article.
This, there is no possible way, when the housing cost of similar space and furnishing are included, that Hong Kong would be equal to Singapore and Paris.

Most of the figure tends to use 1 bedroom or 2 bedroom as calculation. You will then have to look at the bedroom in HK are very likely smaller than some of your kitchen in Paris.

And then it is further lowered by having the one of the cheapest McDonald in the world.
That's a reasonable call, and to be fair to the tenants; it might have been less than I remember. I haven't got the details to hand, so I can't check.

But without going into detail, I definitely buried my head in the sand too much, and they did pay a small amount at one stage to make me think it might be okay. It was sixteen years ago now, and I've thankfully forgotten a lot of it.

I do remember that I had to restart the whole process when it was thrown out because a date was wrong on a letter. I wasted a whole heap of time trying to get the judge to reverse that decision rather than moving on and starting again.

Anyway, like I said, I was very naive back then, and made lots of mistakes.
That is for the subject at hand here. The discussion is about logic and soundness on deducing rulings from texts
DNSSEC doesn't encrypt DNS traffic at all. "Encrypted and secure" DNS presumably refers to DoH, which doesn't rely on DNSSEC.
I've worked in healthcare / biotech for more than a decade and I can promise you that the FDA would see no difference between the two types of gaffes. As custodians of sensitive information it was our responsibility to ensure that said information didn't leak, period.

I don't know anything about FB's infrastructure, but when I was lead I would have viewed leaks in logs as far worse than something in the DB because our DB's were harder to gain access to.

I get what you're saying, but it's irrelevant. Easy to screw up, hard to screw up, doesn't matter; just don't screw up because the result is the same. This stuff is security 101. If you're logging requests then you need to ensure they don't contain sensitive info.