skysight-inc/HackerNews huggingface dataset:
1. You decide that logging passwords is bad.

2. You create a system that detects high entropy content before being logged.

3. You don't want to drop all high entropy content, so you create some rules about where in requests to look for high entropy content.

4. Something about the request structure changes, breaking your log filtering.

5. There is nothing that notices the drop in the amount of content filtered out of logs.

There's oodles of ways this could happen. I'd wager that more than half of all businesses that have a website that handles passwords has logged passwords in plaintext somewhere.
Author here. The reason I call out the money is to emphasize that everything was going great with my career. And despite that, I realized that a career as an employee wasn’t the ideal one for me.

I’m very risk averse, but not in the traditional sense where I’m paranoid about losing anything. I protect the (few) important things aggressively and then I feel free to speculate with the rest (savings, time, reputation, etc).
It is indeed field lacrosse.
It happened to me on a job that I hated. Doing something you like might fix it.

Try a side project or some library or module that you’ve always wanted to write.
No. Not everything but hundreds a day at least. work hard. Save up. Identify a problem. Solve it. Nice and neat. Sell the solution. Profit. Spend some on marketing and sales.

Repeat.
There have been a couple articles that a lot of issues with Watson was how it was sold. Watson was being sold as sort of a magic drop in solution that could do oh so many things.

In reality Watson took a great deal of work to carefully structure and process data, evaluation of the output, and more thoughtful of approaches to further refine the information and evaluate outputs. It also required a fair amount of involvement with the individual customer's staff. And there was always the possibility that because each use case was different... it simply wouldn't work out.

To some extent it seems like it should have been sold as a journey... not cookie cuter solution for things that Watson had never encountered before.

How do you sell that, I don't know, if I knew I'd probabbly be a pretty good salesman.
This sounds like this is a common problem for Watson's go-to market strategy.
>> We too often forget that they had an incredible understanding of construction techniques and math we hide in our design programs was worked out on paper, not discounting a bit of gut feel when actually putting the structure up.

What kind of understanding are we talking about here? Before Newton there was none of the understanding that is needed to build a Cathedral. The only thing they had were models and previous attempts - there’s no way they could use paper to infer whether a particular shape will be stable under conditions.
What about going back to leather helmets and other less armor like equipment? Sure, there will probably be a steep injury spike as people try to play in current styles with less padding, but maybe they'll go back to actually tackling rather than trying to light someone up for the sake of it. Rugby seems to do alright without all of the body armor.
Edit: The following is correct but misleading. The Muller report was reported to be released before the Facebook security update.

Facebook announced this before the Muller report was released.

The Facebook security post was updated April 18, 2019 at 7AM PT [1].

The Muller report was released "Thursday morning, shortly after 11 am [EDT]" [2]

[1] https://newsroom.fb.com/news/2019/03/keeping-passwords-secur...

[2] https://www.vox.com/2019/4/18/18411966/mueller-report-releas...

Disclosure: I work for a big tech company but not Facebook. All opinions are my own.
I don't know, I think the 3 points in the article make it glaringly obvious that the root cause is NOT engineering.

The decisions made clearly ignored engineering and historical precedent at every turn.

It's sad because Boeing has had some wonderful engineers, and Boeing aircraft have traditionally allowed the pilots to have the final say.
I think the biggest problem with dynamic programming is its name. I'm not sure what I would call it, but "iterative memoization" comes close for the bottom-up approach.
Moving from Dallas to San Francisco, the prices at Trader Joe's and CVS, Mc Donald's and other nationwide chains were the same. Eating out and entertainment seem roughly 50% more expensive here (service and food quality has decreased, oddly though). All of the cost of living calculators seem to assume that day to day costs scale roughly linearly with housing, but that hasn't been my experience at all.
> I've also heard the opposite, that it leads to absolutely nothing and you are kind of treated like a PhD dropout, at least in the US.

Students who do a Master's before going on to Ph.D. are usually more competent and more useful to the university. This is FUD created by graduate students to prevent competition.
Heaney's translation is pretty fun to read, I don't know what you're talking about with this "bloody awful" stuff. It's a poets translation for sure, and he admittedly takes license, but "bloody awful" feels like a stretch.

Heaney's translation felt like he took Tolkien's "The Monsters and the Critics" to heart with his understanding, and clear love of the source.
You've never watched the homeless fight. I give 3 to 1 odds to the homeless vs the wolf. Meanwhile, I expect the wolves will instead go after San Francisco's few children.
Made a GraphQL Developer Tool – Orpheus – Constructive Criticism Welcomed
Just reminding you about this request :)
- Analytics: Good question. Currently we are planning to do just our GUI. But not closed to the idea of having an API for it.

- API: anyone will have access to it.

- Support: We have a number and we do Intercom chat. It's mostly manned during US business hours right now.

- Tea: We are probably going to go for surprising you and not reveal the tea we send :)

Thanks!
https://en.wikipedia.org/wiki/Transcranial_direct-current_st...
If one thing is shown in this article, it's that brown should be used more frequently in charts.
This seems like it would happen with most breaches.

You learn about an issue, do some investigation, get an estimate, then inform the public. If Facebook had waited for months to complete the investigation and get these numbers, do you think people would have accepted that? Probably not. So they publish what they know when they think they've got it figured out. But probably this launches up a team that goes looking for other bad logging. Then a while later they find some more errors and the numbers are revised up.

This seems expected.
Whether "most people ... care about [it as] literature", I'm not sure, but most people in many school districts and universities were at least forced to read Beowulf as part of a standard curriculum, possibly more than once over the years. Isn't the question merely whether they would've cared enough to upvote or comment on the HN posting without seeing "Tolkien" in the headline? Beowulf is part of what one might call literary canon. What constitutes a literary canon is always going to be subject to debate, as it is ultimately subjective at some level. How one is to define "popular" media franchise, "literary" books, or "famous" authors can only pose an even greater challenge in forming any consensus.
If you have a ton of checks (>10/month) we are probably not the best solution at the moment.

We are going to have web based check deposit going live next week and mobile in the near term.
I've never used startup banking before, curious what kinda thing people look to do with banking API.
NeXT put it on the left to differentiate themselves from Apple, who put it on the right! (Or maybe they just missed Smalltalk-80.)

When NeXT merged into Apple, the UI was harmonized with that of MacOS, and the scrollbar went back to the right. Until it vanished and was largely replaced by multitouch gestures.
I'm not sure how this speaks to the superiority of physics over stats in this regard.
Better hope data isn't encoded in some other format.

Better hope you have na exhaustive list of all the production logs.
Maybe this should be the standard for the legal system
too: allow eye witness testimony to guide police
investigation but not be used as courtroom evidence.

I used to think this, until I had to sit on a jury. I ended up trying a case where the accused had allegedly gone to the victim's home, knocked on the door, then barged in and punched the victim a few times when he answered the door. Hospital records and photos meant no-one disputed the victim had been punched. But what evidence was there that the accused was the attacker? Only the eyewitness testimony of the accused and his wife.

I struggle to see how such a case could be prosecuted without eyewitness testimony? Unless perhaps people put CCTV cameras all around in their own homes, and to me that doesn't sound like an improvement in civil liberties.

(After we found the guy guilty, the judge revealed the accused was awaiting trial for two other very similar offences with different victims)
Ask HN: Google Primer Alternatives
My team is looking for an alternative to Primer, paid or free. Content navigation and UX must be nearly identical to Google’s app. Tks!
Mobile Apps: iOS or Android or both? Any particular feature you are looking.

Xero/Intuit: Which one do you use or do you need both?
Author here. The pursuit of more money is typically seen as one of the strongest drivers in life. I wanted to highlight that chasing money (and other rewards) stopped mattering for my motivation after a certain point.
Yes they have. The authors write:

"Like Beowulf, the Greek epics Iliad and Odyssey have also generated much debate about their authorship and composition.
Conventionally attributed to a single author—Homer—both works
nevertheless clearly originate in a long oral tradition and show signs
of considerable evolution in the course of their transmission history,
including the possible influence of written versions[37,38]. Since the
two Homeric epics have numerous features in common, we hypothesized that they might also have a similar pattern of sense-pauses.
However, as shown in Fig. 2a, the Odyssey has a higher proportion of
intraline sense-pauses relative to the Iliad. This difference suggests
a slight change of compositional practice between the two Greek
poems, whether due to a single poet’s stylistic evolution or natural variation across the oral tradition. "
Beowulf is required reading for many many students, when I worked in book stores students came in every new semester from all levels of schooling to buy either the Heaney or Raffel translations - so I think it's probably interesting to more people than you think.
Cats Have Grown Larger over Time–Unlike Most Domesticated Species
C'mon Mozilla, please. Less projects that will end up like Firefox OS, more work on _Firefox_.
> Regarding #6...Boeing charged $80k to unlock the software feature to gather data from more than 1 angle of attack sensor.

80k for a _light_ in the panel, not to have MCAS take the two sensors into account - which it couldn't do anyway. With two sensors, how do you know which one is right and which one is faulty?
I don't like this anecdote. A charitable reading of the question would be whether the machine has any means of input verification, error detection/correction mechanisms etc. Things that are pretty common and reasonable.
Why is that even an option? Because Harvard likes money. (And Harvard is a private institution, not run by the government.)
Sorry! I hear Nubank is great though.
Monorepos are really nice if you want to enforce consistent and sane engineering practices and not waste time managing all the repos individually by teams.

Bazel has target caching including remote caching which can be shared across multiple engineers/execution environments. The tricky part would be ensuring your builds are hermetic and reproducible (which is also easier to achieve in monorepo setup).
or zebra mussels, or jellyfish, or the hawaiian mongoose, or dandilions, or ...
How did you even spot that?
The onboarding flow looks nice but unfortunately the document uploading doesn't work at all for me, for PDFs or JPEGs. I'm using the latest Firefox on the latest macOS.
In court that will cost them dearly: it demonstrates they were aware using two sensors would be safer.

Probably AA or SWA demanded it, and Boeing compromised by charging for it.

But... #6 was about paying attention to the other computer, not the other sensor. That would involve some big and expensive changes to the flight computer software, which they probably should have done long before the MAX project started.

More management failure.
Tinder's paid tiers have a similar feature, "only show me to people I've liked" or some such. In practice it just crushes your match flow, and presumably creates a paradox wherein two users with that setting enabled will never see each other.

I agree though, there's ways to do this that still retain safety. Something along the lines of public key cryptography for dating. :)
If you've been told "no, you cannot poop in our bathroom because you are homeless" at every restaurant/business in the city, would you bother looking for a bathroom the next time you had to shit?

Why bother trying to have dignity if the world doesn't want to let you have any?
False. Algorithmic bias was present from the very beginning. One way or another, directly or indirectly, algorithms only do what people tell them to do.
I very much agree. I think they’ll kill yt premium. Even if google charges you what an average user is “worth” to them it’s a huge net negative to their business model. The users who will pay are worth a hell of a lot more to advertisers than the “average user”.
- "Spiders are not insects." => "fear"

Exactly what I expected, and also flat wrong.

- "There's a monster under my bed." => "joy"

Fascinating.
Eye witness evidence can be very deceptive but it can be very accurate as well. Many a time witnesses have provided key information to investigators. But, I agree, it cannot (should not) be used as primary evidence in criminal cases. Hippocampus or not, it’s not consistently reliable.
As I said - I intend to teach them to function on their own. I treat them like people rather than kids as much as possible.

That doesn't address the legal concerns.
No, invasiveness is a quantitative measure. A plant can force other plants out, or it can coexist. The amount of net pressure on other species dictates whether a plant is invasive. A Eucalyptus and a Live Oak will both use the same sunlight but the Eucalyptus will lol everything underneath it.

Also, it is true that sunlight is a fixed resource, but the earth is not 100% covered, even in mature forests. There are disturbances everywhere that can be moved into and stengthening the ecosystem.

There are also resources which are not sunlight. The resource competition is so multidimensional and open that you cannot conceive of life as a zero sum game. Not yet anyway. Maybe in another billion years of evolution we will be at the point where every movement is an invasion.
America’s Tech Hubs Still Dominate, but Some Smaller Cities Are Rising
> So Boeing produced a dynamically unstable airframe, the 737 Max. That is big strike No. 1. Boeing then tried to mask the 737’s dynamic instability with a software system. Big strike No. 2. Finally, the software relied on systems known for their propensity to fail .... Big strike No. 3.

The article definitely does partially blame engineering.
There are already treatments like this.

When I was in high school I started a minor computer repair business. One of my customers was a treatment service where they would place electrodes on the head of an individual to measure certain brainwave activity. The electrodes were connected through a device back to a laptop which was playing a video.

I'm explaining it very imprecisely (I'm an expert by no means) but the way it worked is that the video would only play when the measured brainwaves met the pattern(s) established for concentration. The idea being that the person would want the video to play continuously (without pausing or chopping) so badly that their brain would train itself to enter into the "concentrating" brainwave pattern.

I'm not sure what the efficacy of the solution is but the idea was interesting at the time.

UPDATE: Just looked it up and the term they use for this is "neurofeedback" training.

Looks like there are significant criticisms to the approach and study of this treatment so maybe it isn't a viable approach after all.

https://en.m.wikipedia.org/wiki/Neurofeedback
Creator of Hub for Stolen Credit Cards Sentenced to 90 Months
Algorithmic bias really was born a long time before then. There were "computers" and "algorithms" long before the 80s. Perhaps algorithmic bias in the age of personal computers was born in the 80s.

Is the code available for review? I didn't see any mention of it being available in the article. Maybe if ieee has it, they can post it to github? Did the guy hard code a list of "european" names directly into the code or did he store it in a file or even a db? Did it just check the surnames or the first and middle names also?

Also, is bias still in the college admissions system in the UK? I know we have a form of it in the US.
Beowulf is English literature though.
No, you're right on Mozilla's stance on privacy. I think Mozilla keeps making things that are good for collecting customer data because those are the things that most need an open alternative.
The Vanishing of Flight 370 [video]
> In this case, you need knowledge of motors, flight controls, sensor fusion, etc.

Expertise which should be readily available at one of the world's foremost designers of high performance commercial aircraft.
Why would _one_ of these solve any problems?
> Have you ever wanted to know how many times the door was opened and closed while you were out? Are you curious about energy consumption of appliances plugged into your smart plugs? With the new logs features you can _privately_ log data from all your smart home devices and visualise that data using interactive graphs.

> Note: If booting WebThings Gateway from an SD card on a Raspberry Pi, please be aware that logging large amounts of data to the SD card may make the card wear out more quickly!
They could have open holes in the ground that connect straight to the sewage system. Maybe add a simple lever to open/close the hole if odor is an issue. Sure it'd lack privacy, but privacy evidently isn't an issue if people are taking dumps on the sidewalk.
We are using Crystal for our mail flow monitoring tool at mailflowmonitoring.com - create a free account and you can check it in action. It was a delight to deal with. We also created a Crystal email parser - https://github.com/amrood-labs/mail.cr
Of course, that much engineering failure is not possible without even more management and regulatory failure. But documenting the engineering failures is necessary to quantify the management failures, at least until discovery in the wrongful-death lawsuits begins.
"Plane crash investigators mostly ignore eye witness testimony using it only at best to guide the investigation"

I once read that it is common for aircraft accident eyewitnesses to erroneously claim the airplane was on fire before it struck the ground.
New Apple lab uses robots to rip apart devices for recycling materials
Student Fried $58,000 Worth of Computers with a USB Killer
How is Mozilla gathering personal data from people using WebThings? When I tried WebThings Gateway a few months back, it did not seem to collect/send personal data off site. It allows you to create a public endpoint as a subdomain of mozilla-iot.org for easy off site access (https://github.com/mozilla-iot/wiki/wiki/Gateway-Remote-Acce...) which would allow some tracking I assume, but in general I have noticed no hidden data collection as your comment implies.
I work at AMZN and am actually a "security certifier" who is in charge of making sure that services don't do stuff like this. There are numerous policies about what customer information you can handle/log/store and how to handle/log/store it. In addition, before your service can serve traffic, a certifier will go through and audit your code to make sure that you aren't logging any PII or other dangerous-to-log data.

Plenty of fallible human actors involved, but the processes are definitely in place to prevent behavior like this.
I can’t say about all articles—only the ones posted on HackerNews. The server hacking piece and the fallout was what prompted me to look with a slightly more discerning eye. Compared to much of the content that hits the front page, Bloomberg is generally low quality.
If you're not going to give someone a dignified place to relieve themselves, why would they care about using such a thing?
I guess that was a poorly chosen word on my part then. How about 'elegant'.
I agree that people often seem to miss that this may be rooted in a business decision. The problem is it isn't a risk-informed decision. I would doubt Boeing was accurately able to assess the actual risk of MCAS causing a catastrophic failure or else the decision to rush to market wouldn't have happened.

I think just as large of a problem is mis-aligned incentives. Management is almost assuredly not singly focus on the extreme long term. The are graded quarter-by-quarter, year-by-year. This pushes uncertain risks to the periphery in favor of short term profits. I'm worried that unless the incentive structure is re-evaluated (by jail terms as an example) management will continue to make these types of decisions because schedule and cost will remain king
What next? Manic Miner for the ZX Spectrum?
I've experienced this; my impressions of what other drivers were doing is rarely borne by the dashcam video.
Looking at the comment, I can't figure out what he says about it running on Windows.
I thought about this problem recently when I was listening to To Kill a Mockingbird. Quoting Atticus:

> “...but in the absence of eyewitnesses there’s always a doubt, sometimes only the shadow of a doubt.”
I don't have enough points to downvote you... this is why people hate techies, you view the displaced as a separate species altogether, they are just like you and your family, likely without the same upbringing and privileges

Edit: Thanks guys I understand the proposal is a joke, it's just sick and callous. So all the people riffing on this joke are making nuanced social commentary as well with their analysis of homeless fighting abilities?
Author here. Maybe my earnings at Amazon had peaked (unlikely but possible). I realized that rewards hurt my long-term motivation rather than help. My income right now is about $0, and I’m not aiming at getting back to the same income level (if it happens, good, but I can have a good satisfied life with much less). This change had nothing to do with income maximization. I prefer taking more control over my lifestyle instead.
Well you can’t get quorum but you can certainly shut off when you detect a conflict.
Actually medieval designers did not use conservative design. Many cathedrals were not overbuilt. There was a push to make the walls and pillars thin, the ceilings tall, to create a sense of ethereal beauty. As a result, many buildings collapsed during construction, because they were pushing things too far.
I don’t know much about physics/astronomy. My rough understanding is that very early in the Big Bang, all matter/energy was condensed into some really exotic form and it turned into atoms and molecules as it expanded. When I read the headline, I imagined that during the Big Bang a molecule was produced that somehow had a lot of energy and emitted that energy in such a way that we managed to detect some kind of echo of it today. I have seen images described as images of radiation from the Big Bang, so this sounded impressive but not unbelievable to me.
Or provide safe injection sites so junkies have somewhere to go.

Our society’s attitude is “if you don’t pay taxes, you don’t deserve help.” That’s so morally wrong I can’t even explain it without going red in the face, but that’s the situation we’re in.