skysight-inc/HackerNews huggingface dataset:
I’m pretty sure that last quote is direct from the Alpha Centauri datalinks... Prokhor Zakharov, maybe?

“Time dilates as the speed of light approaches. To the extent that light consists of particles, it is in its own way, timeless. Through simple perturbations of the temporal manifold, we can refract or repel photons most efficiently.”
I had a question for the Firefox UX team a few months ago and went to #ux on irc.mozilla.org. The channel was completely dead. Someone that wasn't from the UX team was still there and told me they all moved to a private Slack channel.
What “hygiene reason” are you thinking of? In the general case it doesn’t seem any more or less hygienic to touch the bottom of my shoe to the library floor vs. the bottom of my bare foot. Both are going to be comparably dirty if I walked in off the sidewalk (the foot is probably a bit cleaner on average).

If the worry is something like fungal or bacterial infections of the feet, those thrive in the warm, wet environment of a sock/shoe, and can’t survive when consistently exposed to fresh air and sunshine.

If the worry is injury/liability, then high-heeled shoes would be the obvious first thing to ban. Those are dramatically more dangerous than bare feet in basically every context.

I suppose if someone had gaping sores on the bottoms of their feet it might leave gross/contagious residue? But someone could just as easily track vomit, feces, cake frosting, rotten food, chewing gum, or whatever other yucky thing in on the bottom of their shoe. The “has a serious contagious skin disease” case seems like it would be handled better with a more targeted restriction, since I don’t think you want such people’s hands touching stuff in public spaces either.

My guess is that the real reason is to keep barefoot, shirtless, etc. homeless people and/or hippies out of public buildings. There are also rules against lying down, being drunk or intoxicated, making loud noises, bringing luggage or carts, communicating “willfully” or obscenely, emitting strong odors, &c. I’d be curious to learn more about the history of restrictions against bare feet in particular.
Accessibility, especially from bandwidth efficient light weight software or text only devices is at odds with blocking automated spam.

If you make it much harder for anyone with unusual software to connect, you make it harder for spam (and also a lot more legitimate users than spammers, but those don't count because they don't cause issues for operators).
Yep - my "deleted by associated Oauth application" event was triggered 2019-04-25 20:12:25 -0400
One can't be forced to divulge data on users one does not record in the first place.
Encyclopedia of Triangle Centers
And I suppose they'll be published in GovtHub, so that anyone can fork them and add their annotations. I'd vote for you, but I'm not a citizen.
Wow, that really is a fascinating story, thanks for digging deeper and sharing!
What does FAANG have to do with it?
Look at the mortality data as well.
Registration solves this rather well. Especially when paired with requiring an email account to get a registration password.
Downloading Docker CE for mac or windows requires an account.

https://github.com/docker/docker.github.io/issues/6910
We put our FOSS community on Mattermost - it's awesome!
Probably the same mechanism by which most proofs work, not fully formal but it seems to follow. Without the proofs in comments (or transitively through other asserts) it's up to the reader to recreate the argument, though. The purpose is to be more explicit than a comment, I suspect, using the same notation as the code.
Mozilla's talk:

> Our mission is to ensure the Internet is a global public resource, open and accessible to all. An Internet that truly puts people first, where individuals can shape their own experience and are empowered, safe and independent.

Mozilla's walk:

Fuck it, spin up a Slack room.
For the life of me I can't parse that title.
This is of course one side of the story so who knows.

>“Hertz raised this issue directly with Accenture. In response, Accenture’s project
leader replied that ‘we felt that creating a generic base and extending Hertz from that would have been less useful and less productive,’” the lawsuit states.

If true it seems like there maybe should have been some communication as far as what was going on before later on you tell the customer "oh by the way we thought your was a bad idea so we did something other than what you're paying us for".

>The firm even convinced Hertz to buy a license for RAPID, a program it said would help streamline the development of a new content management system. However, once Hertz bought the license, the firm admitted it did not know how to use RAPID.

That's another one where you have to wonder where communication went terribly wrong.

Anyway if you're a big company like Hertz, this is why you have an in house team and staff so you can keep this stuff under control and not blow 32 mil and go to court with squat. Once you farm it out, you ultimately do not know what is going on.

Even just a small-ish in house staff with visibility should be able to see "hey they're not using this RAPID thing at all" or "this won't work for other sites" long before you blow through deadlines and walk away with squat and -32 million.
So, would it have been possible that the perpetrators knew about the keys and had built a way to scan them all beforehand? Or is this more likely to be an attempt at farming passwords?
> He also cofounded the since-discontinued Inbox

I think that was even more telling, my experience with it was awfully reminiscent of how some social media are ordering their news feed by some biased weight instead of the default chronological order.
I wonder if that will encourage them to finally resolve this issue: https://github.com/docker/docker.github.io/issues/6910
Hipchat is dead so you don't need to worry about that.
Well, every previous incident, those who bet against tether lost. Those who went long on tether picked up a nice quick profit and laughed at the fools on the wrong side of the trade.

We'll see what happens this time.
It pains me to see an article where we are asked to sympathize with the plight of a successful pair of NYC lawyers. What is going through the mind of the author of such an article? Are these at risk people who need our help?
Just signed up for two newsletters today, both “Please confirm your subscription” messages went to spam. Corrected it then hit the confirm links. One “subscription confirmed” email went to inbox after that, the other still went to spam.

Guess I’ll find out whether correcting it a second time applies to the actual newsletter messages.
You can brew cask install it on a Mac without an account
The mortality data are possibly more telling. High incidence may be a matter of screening and early detection. Dead bodies have stories to tell and are harder to hide.

The outline of the Ohio-Mississippi river valleys is particularly clear.

https://statecancerprofiles.cancer.gov/map/map.withimage.php...
Help me understand why this matters? Is it really Hipp's argument that Go is unsuitable for serious systems work because invariant signaling in the code is too slow? That seems pretty nitpicky, and also ironic since the "serious" systems language to which he's comparing Go is C.
China is a massive country. The vast majority of people have no need or desire to leave, so they have no reason to bother learning the language spoken primarily on other continents who they’ll never really interact with.

America neighbors Mexico and has loads of immigrants, but most Americans have made zero effort to learn Spanish despite there being clear and immediate uses everyday. And honestly, if they don’t want to, that shouldn’t be a problem.
What the message here is that you, a non-connected nobody, shouldn't try to host it, because they will reject your mail.

This gets couched in it being "hard" like somehow its an insurmountable force of nature.

It isn't.
You could levy this complaint if they actually end up picking Slack (or something similarly proprietary like Discord), but that seems quite premature. I'll miss moznet as much as anyone, but there's no denying that IRC has been left in the dust this past decade or more.
The best real sorting algorithms are often hybrid.

Would be nice to see mention of parallel sorting algorithms. These have basically linear speedup and you can do them on GPUs.

Obvious disclaimer that you should never care about your sorting algorithm choice until you need to. Performance is more often IO or memory related than compute. Tech interviews are daft, etc.
What permissions did the leaked tokens have?

If they had write access, then leaked personal data is the least of anyone's worries. The real concern is how close the hackers came to infiltrating the image source for virtually every modern microservices system. If you could put a malicious image in say alpine:latest for even a minute, there's no telling how many compromised images would have been built using the base in that time.
I always though it was one of the pursuit of Google but NoSQL was all the rage and I was never taken seriously ... until F5 that is.

Funnily enough, all what I would call "NoSQL papers" are very well known, yet F5 is hardly ever talked about. As if some people would not like to admit they might have been wrong ;-)
Nope, you'll see the U.S. president, with pleasure, talk about how many jobs we get from all the Saudi Arabian blood money pouring into the country by selling them arms to blow up Yemeni children. Etc.
I'm using Timeular which is an octahedron with erasable sides. It tracks whichever side is facing up. You just have to remember to flip it, which is a good way to notice 'hey, should I really be switching tasks'?
When did we start zero-indexing numbered lists?
Women represent a small percentage of executives. That means that some of the most important decisions are being made without women in the room. Ok, so maybe this family has two high power people, but we're all affected when the decision makers skew one way.
So if you buy on ETrade... are you buying actual coins they hold for you or is it some other sort of bitcoin related ... thing?
I was originally going to argue with it being "just a matter of time" -- there is such a thing as good security practices. It's certainly not "just a matter of time" before Microsoft or Google see such compromises. I'm pretty confident that these companies have their sh*t in order.

But no, not Docker.

You're totally right; with as important as their registry is to well funded attackers, and as startup-y and "agile" as they are, and as godawful as the security practices are that underlie their tools and standards... they hadn't a chance. They still don't.

There is no reason to expect them to get better.
Do they offer end to end encryption and signing. That would make your ci say f-off it the image has been played around with, and also protect any secrets, although there is no need to have source code or passwords in the image anyway.
In some cases you can block withdrawals from accounts. I’ve done so after my information was compromised via the Equifax hack. I managed to lock things down as hard as I can and in at least one case (either Vanguard or Fidelity I forget) it will require a notarized document before any money can be removed from the account.

This story reminds me that I need to make another pass over accounts to see if I can lock things down further.

The disappointing thing is that although I was able to get a physical OTP device for my Wells Fargo account they still insist on using a telephone number backup for 2FA. There doesn’t appear to be a way to disable it.
http://www.madore.org/~david/computers/quine.html
Clustered storage.
Averaged out across all customers you kind of do though. You know the rate coming in and the rate leaving.
Pocket API.

We have a handy FAQ response that has probably driven ~100 feature requests :D

https://readwise.io/faq#is-it-possible-to-include-highlights...
It's made worse by the fact that only a few major images are used as bases. That's normally good for security, as they are highly vetted and quickly updated, but if they could be compromised, say Alpine or Ubuntu Clould, even for a minute, countless images would be built using the compromised base and it would be very hard to ensure they were all rebuilt.

As I understand it, there's no element of signing from the actual devs of an image, just from the central trust service of Docker Hub.
I'd wager Accenture is at fault but what a dinosaur Hertz is, outsourcing this and failing. They should outsource the CEO & board too, clearly they are too incompetent to manage a modern company and brand.
Your best bets are to network, and to do Open Source contributions.

Start hanging out in the chat channel the devs you aspire to be like hang out in, listen first, see how they respond and how they ask questions. Read through all the channel guides to posting. And then start asking questions. Once you feel comfortable doing so, start answering questions. Always give thought out, in depth answers.

Also, find Open Source projects which interest you and are of a decent size (subjective measure, but you want it large enough so you'll get exposure but not so large there are tons of new people already). Then do some of the work no one wants to do, but that they need done - testing, documentation, wiki gardening. This has two purposes - to teach you about the project in a good way, and to ingratiate yourself to the project committers. You want success, punch your ticket first. Once you've done that a bit, pick an issue that's tagged as a starter or mentored, depending on your project, and discuss how you'd approach it with the committers on Slack or Zulip or their medium of choice. Then execute, and finish it.

Do those two things well and you'll have no problem finding a job, assuming there's no culture fit issues when you do a face to face.
Chris Steele (an agent of a foreign government) was dead-set on preventing Trump from becoming President.

He had high level contacts at the FBI and DOJ which he was in contact with throughout early 2016.

Hopefully one day it will become fully clear what Steele was telling Bruce and Nellie Ohr, up until the very day before the FBI opened their investigation, when Nellie met Chris at the Mayflower Hotel on July 29, 2016.

But we do know at least that it was lies, mostly (Russian?) lies, that Steele was feeding the FBI. And we know certainly those lies had a bearing on the character and direction of the investigation, and on the methods employed to attempt to gather evidence (FISA), even if it is not the publically admitted initial basis for starting the investigation.

Mifsud, for his part, has gone to ground and isn’t taking interviews.
Context is much better for documents: http://www.berenddeboer.net/tex/LaTeX2ConTeXt.pdf
Difference Between Clustered and Non-Clustered Indexes
What was Sanders or anyone else wrong about?
Some photography software also run on palm. And even a scheme programming environment.
You make it sound like his email being rejected is somehow his fault and he merely needs to "debug" his email service.

This is 100% gmail's fault and he has zero control over it.
Or fix this 4 year old issue where you cant use 2FA for accounts https://github.com/docker/hub-feedback/issues/358

(Side note: this obviously wouldn't have prevented the current attack)
you'll have more luck with a chrome extension. this place will never do such a thing. "they know best", they will never change from an outside suggestion.

in case you haven't noticed the forum culture is not flexible. hn is a very specifically flawed lens to the world. they're not about to "fix" anything because "nothing is broken"

they will patiently explain to you why you're wrong, then get on with being the unchanging same thing they are.

a funny paradox. a non innovating lens onto a "highly innovative" part of the world.
Fun fact, there was a universal XSS vulnerability on google (including search, support, accounts, cloud, etc) found just last week [0]. I'd say it's always just a matter of time. That doesn't mean they don't have everything in order, but securing everything as much as possible is half the battle. The other half is a solid response when things do happen, which we will now see in how Docker handles this situation.

[0] https://twitter.com/WHHackersBR/status/1118393568656334850
Is this related to the course Berkeley have on EdX? https://www.edx.org/professional-certificate/berkeleyx-found...
Generally speaking, systems that add registration onto irc tend to make it even harder to use than it already is. In order to make it better you basically have to make it at best act strangely with existing clients, or at worst make it completely incompatible with them.
It saddens me that docker hub is still lacking FIDO or any 2FA support.
Or you can use the voice activated option with the driver. You just need to say “I’m feeling pretty tired right now and don’t feel like chatting”
The matter of why 'collusion" wasn't directly addressed ... is directly addressed, in a titled section of the Introduction to Volume I, on page 2:

In evaluating whether evidence about collective action of multiple individuals constituted a crime, we applied the framework of conspiracy law, not the concept of “collusion.” In so doing, the Office recognized that the word “collud[e]” was used in communications with the Acting Attorney General confirming certain aspects of the investigation’s scope and that the term has frequently been invoked in public reporting about the investigation. But collusion is not a specific offense or theory of liability found in the United States Code, nor is it a term of art in federal criminal law. For those reasons, the Office’s focus in analyzing questions of joint criminal liability was on conspiracy as defined in federal law.

Again: "collusion" itself is not a legal term. Conspiracy and obstruction, among many othrs, are.

https://archive.org/details/mueller_report_20190422/page/n9
whoa didn't know Joe Armstrong passed away...

Still remember learning Erlang with his book and listening to him on podcasts talking about concurrency about a decade ago... Erlang is not my daily driver, but learninng Erlang's actor concurrency model has shaped my view on concurrency and functional programming... For that, thank you Joe and RIP.
He didn't merely obstruct justice, either; he very clearly had a quid pro quo relationship with Russia which involved influencing the election.
It would be really interesting to know how this played out, but yeah Hertz seemed to outsource ... to oblivion here. Apparently to the point they stuck with Accenture way to long and kept paying out the money for squat.

You'd think even a small in house development team who would team up with the Accenture team would pretty quickly spot some of these kinds of problems... but apparently they didn't do that? That's some serous mismanagement.
In go you can use build tags to achieve this. The compiler will drop function calls to empty function implementations (tested on go 1.11.5).
This is really neat! Unfortunately the color isn't working for me for some reason, which makes locating the initial food quite difficult. Any idea what could cause that?
I tested this and it does indeed eliminate that code.
And to clarify, yo're not working with/for Pocket or Mozilla?
I found even a Vaxstation 3100 with the m42 cpu and 12MB of RAM was enough to work with. Sometime within the last five years, I installed NetBSD by netbooting from a Linux mopd server (because I didn't have a working 512-byte block SCSI cdrom). As a computer, it was quite reasonably usable. Not fast by any means. I didn't have anything but a serial console to work with, so no gui. I thought the best thing in the world would have been to browse the Internet on the machine, but I gave up on it because I couldn't Lynx to work.

All of this seems under-powered today, but was actually more horsepower than a comparable PC capable of running Windows 95.
Users seem to have given up on Mozilla a long time ago.
I would be happy for if the government made a free-file api and let for-profit companies and open-source projects alike create solutions for consumers. It would be like the government owning the telephone poles and letting any ISP run their cables on it to try and compete for customers.
I said it was bad practice that led to the large size of Medium's website, but only 20% of that download size is their application's JavaScript. In what way did the use of JavaScript make it “easier” for the remaining 80% of the download size to happen?
Lime Scooters Hacked to Play Rude Messages to Riders
Irc unauthenticated? IRC has supported auth services since what 1995? There are also plenty of web irc gateways so I don't understand the reasoning to move to something more complicated for little gain, want history? Run ii in a tmux session and tail to a file, want to post images with a fancy GUI taking a gig or so of ram use slack.
Back before it was massively renovated (mid 2000's?) there was a sento in Tokyo Station. It was called 'Tokyo Kur' I think. I visited probably five times and every time would see at least one wrinkled old man covered in tattoos like that. Sadly that sento is long-gone.
https://docs.docker.com/docker-for-mac/release-notes/
Does this lessen the relevance that docker has these days?
Is hacking even needed?

There already have been questionable images hosted there ... just by users uploading compromised images. No hacking needed.
Meanwhile in Wyoming, Washington, Texas, South Dakota, Nevada, Florida, & Alaska there are no state income taxes which is even simpler.
Hacked Docker Hub Database Exposed Sensitive Data of 190K Users
To be fair, what Magic Leap is doing is a few orders of magnitude more complex and innovative than what Juicero was attempting to do.

As in, its an industry that doesn't quite exist yet, there are problems that were never thought would be problems in the first place, and the whole concept of programming things for real time three dimensional overlay on a device that's light enough to fit on your head is kind of a bigger challenge than squeezing a smoothie out of a large ketchup package.

But I would like to see where and how the money is being spent.
Just because Google stopped scanning email for ad targeting two years ago doesn't detract from the fact that it was their practice for ten years previously.

https://www.nytimes.com/2017/06/23/technology/gmail-ads.html
Not sure why you're being downvoted. Most of the major IPOs of the last few years seem to follow that hump-into-oblivion pattern after public markets get in on it
China has contracted with Private Space to pick up entire enterprises and send them into orbit, thus making the development of a space station in orbit irrelevant :-) (ok it's Friday alright?)

It is a pretty convoluted title. Perhaps they could have said, "China's Commercial Space companies are now at the 'blowing up rockets' stage." Which is the penultimate stage to the one where the rocket gets all the way into orbit.

It is kind of a weird concept in purely Communist country insomuch as the idea of commercial space in an open market country is to to capture market capital and prioritize it to space launch capability. What is harder is that you can't really sell orbital rockets to third parties (the pesky NPT gets in the way, and it is generally frowned upon). I would have expected them to go with something similar to the the setup Russia has with USRC[1].

[1] https://en.wikipedia.org/wiki/United_Rocket_and_Space_Corpor...