skysight-inc/HackerNews huggingface dataset:
I'm going to challenge you here (admittedly without full context, but to make a point). It sounds to me like the problem you're describing requires a database has ACID transactions which is not Cassandra. Therefore Cassandra is a poor choice and in my view that is poor engineering. This being said, I'd err on the side of agreeing with the developer who determined that they are not capable of writing code that guarantees ACID transactions in Casandra (that's a hard thing to do), and I'd really question the choice to use it to begin with.

Again without appropriate context, my bet here is that you guys are using Cassandra for other important features you won't get out of a typical RDBMS and as such you made a trade off to begin with and decided that Cassandra was "good enough".

Now the point I'm trying to illustrate (and I'm not just doing this to pick a fight, I promise), is that engineering is about trade offs and a big part of it is definitely related to likelihood of a problem occurring.

I think it also completely depends on the domain of the problem, the criticality of the process you're building and the outcome of a major failure of your assumptions.

So I'd just argue and say "good enough" is an entirely appropriate answer in many contexts and domains and it's important not to make a blanket assumption that it's wrong.
1. Google/bing dorks still work well, burp suite..

2. Phishing still works, a few platforms steal MFA input - u2f/Fido is pretty robust tho. The trick is to find apps and federation that don’t enforce

3.you would see all kinds, no one size fits all

4. Really good shops and teams know the defense and countermeasures but the vast majority I would say don’t care

5. Infosec communities and such really are key - moves so damn fast

6. Learn how the sausage is made, I feel like I have way more insights from my Unix/network admin and SDE days which let me predict how stuff was put together - makes it so much easier to know how to break it. There is no quick path here though..
Show HN: Securely collect sensitive data from any Netlify site
We are big fans of Netlify [1] (it powers our website and blog!) and we wanted to scratch our own itch to comply with GDPR, as well as various upcoming data security regulations [3]. So we, Very Good Security [2], just released an add-on that lets you securely collect sensitive data (e.g. payments, PII, SSNs, identification, etc.) via web forms on Netlify.

With the new add-on, Netlify customers are shielded from data liability, breach risk and the compliance issues that come with holding sensitive data. So you can inherit PCI compliance from VGS (a level 1 service provider) and can fast-track other compliances like SOC2, HIPAA, etc.

You can read more about our add-on for Netlify on VGS’ blog:

https://blog.verygoodsecurity.com/posts/securely-capture-sen...

and on Netlify’s blog:

https://www.netlify.com/blog/2019/06/06/very-good-security-a....

Watch a quick video here: https://www.youtube.com/watch?v=wtYzLdpSeJo

Try it out and let us know what you think! We’d love your feedback.

[1] https://www.netlify.com

[2] https://www.verygoodsecurity.com

[3] California Consumer Privacy Act

[3] Colorado Protections for Consumer Data Privacy

[3] New York’s SHIELD act (https://www.nysenate.gov//legislation/bills/2019/S5575)
Confluent (the company housing the core Kafka team) has created a Helm chart to get their platform (either the open source version or the entire enterprise stack) deployed on Kubernetes.

Blog post here: https://www.confluent.io/blog/getting-started-apache-kafka-k...
Homeschooling gives at least one parent the opportunity to spend large amounts of time with their kids, and also gives the kids lots of time together.

Source: was homeschooled, starting to homeschool my own children (well, mostly my wife is, but I help where I can).
I don't get you, they're responding to the USA contention that Huawei is effectively an agent of Chinese security services - the reason they've not published on it before is probably because they're not a watchdog for code quality in telecoms businesses.

I guess if some country tells us not to use Microsoft because they spy for USA then GCHQ would tell us about their incompetence too. And maybe actual spying? (Backdoors in 'secure boot' or Exchange server, or whatever).
Personally, I already have an Xbox One that I lug around with me when I travel. The most compelling aspects of this are it feeling a lot more mobile (since you only need a chromecast and a controller, or just the controller with your phone), and feeling a lot more future-proof since it's effectively just a thin client running on beefy hardware elsewhere, that I expect to be upgraded to meet current game demands over time.
IMO, the legal landscape here hasn't kept up with changing social conditions. A huge amount of social and personal activity is now getting mediated through technology, and legal protections have not been correspondingly extended.

Cell phones routinely keep a log of who you've been talking to, when, and a big chunk of the actual contents. They also will often collect location history, or broadcast the location to third parties as part of their normal operation.
> fly up a few models/actors

More like 1, even for the biggest brands. This is going to be way expensive.
I think you are onto a good idea, except I get the impression NASA will prioritize missions that contribute to commercial or science R&D and/or production.
> Step two: those Huawei phones with a forked version of Android are sold globally. They are less secure and get hacked.

Why those phones will be less secure and therefore easily hacked? Which kind of argument is that?

How a huawei phone with a forked android is any less secure than any 2-year old android phone from $randomanufacturer (not longer receiving any OS update at all)?
Thanks for this, I hadn't seen it before. That example is much better commented and documented than mine.
Sigh, yep!

Thats what I get for trying to type it on a phone browser!
I find messages like this frustrating. Facebook will show a generic 'this action could not be completed at this time' page, which is very vague and attempts to deflect their decision onto a nonexistent technical problem.
Website[0] is down?

> Database Error

> Error establishing a database connection

[0] https://espotek.com/labrador/
知者不言，言者不知

"The one who knows doesn't speak, the one who speaks doesn't know"

- Dao De Jing
> And ultimately, I am skeptical about the popular framing that this was a "could only happen to Soviets" disaster.

No doubt that callousness towards humanity abounds throughout the world, and of course in the US and the rest of the west. Soviet/Russian socioeconomics are so fascinating because they are a superpower on a budget. Callousness + shoddiness + scale, in my eyes, make this disaster uniquely Soviet. While your examples show profound inhumanity, their scale pales compared to Chernobyl.
Haven't verified that http://folkeeventyr.no/ has all of them, but seems to have a lot and at least the first one and plenty of Ashlads, kings, princesses, trolls, foxes, men, old ladies, etc.
They are not solely a consumer, or even cell phone manufacturer. This is not about phones, as much as Google would want us to think otherwise.
> Spurrier said: “It doesn’t take a great deal of imagination to see how something like facial recognition eats into the fabric of society and distorts relationships that are really human and really essential to a thriving democracy....

Low tech surveillance among East Germans [1] doesn't seem to have made the place any nicer to live in. At least the high tech version just causes mistrust of law enforcement, not one's actual neighbors.

[1] https://en.wikipedia.org/wiki/Mass_surveillance_in_East_Germ...
People are just habituated towards opening FB every time they're bored. I used to do that myself until a few years back. Consumers aren't buying anything on FB though, but advertisers are.

Considering how many veritable snake oil products gets advertised the platform, not to mention political propaganda pushed as "promoted posts", I can't help but wonder if this push to crypto is FB's way of hiding who its ad buyers are in the future.
Cash is king - keep your savings in the account. We're really overdue for a rebalancing of the economy and you want the cash at that time. That is a gaurantee. This startup, where it could succeed will more likely not go public.

Keep your current job or get a job that pays you better, but hold on to your CASH!
this reply adds nothing to answer the question of whether or not the database was truly deleted
> Imagine promo videos of someone using your gadget in space.

Corny as hell, and we can just film it on a greenscreen in LA.

Also, people look really freakin' goofy in zero-G.
For any critical tech platform, though, has there ever been more than 2 major players? I would argue that everyone after the top two is such a huge way behind that they really only serve niche markets. Look at Windows Phone, which eventually ended up being a pretty nice OS. MS couldn't pay people enough, quite literally, to get developers to build for it. Any "non-Google Android" clone is going to have to deal with the way developers are deep into Google Play Services, at least in the West, and that will be extremely difficult to displace.
Whole new market for NoAirB&B rentals..
Might this answer your question?

> Huawei must raise 'shoddy' standards, says senior UK cybersecurity official

> GCHQ technical director says he hasn’t seen anything that reassures him company is taking necessary security steps

https://www.theguardian.com/technology/2019/jun/07/huawei-mu...
Seems like a return to book titles of the past, which often were a short summary of the whole book: https://evareadsbooks.wordpress.com/tag/really-long-old-book...
From the press release:

To qualify, commercial and marketing activities must either:
require the unique microgravity environment to enable manufacturing, production or development of a commercial application;
have a connection to NASA’s mission;
or
support the development of a sustainable low-Earth orbit economy.
What’s funny is that their at least WAS a better option back in the 1.x days.... PyWin? I know activestate shopped it as part of their base install.
>There's three options:

All your options assume a perfectly rational world. The world we have now is not one of those 3 options, but it exists. Things are often internally contradictory.
And didn't ever offer OCL IIRC.
Socrates got it right more than 2 thousand years ago.
> I mean, yes and no, sometimes an old systems so bad it really needed to be killed off and replaced.

I don't believe this is the spirit in which this was meant. If the old system is out of date and there are buggy libraries that aren't being maintained, that is a WHOLE different issue.
You can't tease us like that without explaining what the "bug" in Excel was.
Oh really? What is the major part?
A second self destruct password
I'm not seeing the contradiction.
Start offering a $99 course on how to profit from FB Libra. Doesn't matter if you don't know anything about it, because the people who buy shovels during a gold rush usually know even less.
It may or may not be testimony. The Wikipedia example you’re referencing turns on the fact that knowing the password to the account proves ownership or control of the account, which itself may be a fact relevant to the charges. For example, if the account is connected to know money laundering. Turning over the password to a phone may or may not reveal similar information. If the phone was found at a drug stash house, knowledge of the password reveals a connection to the crime. If it’s just your phone, and there is no doubt it’s your phone, knowledge of the password doesn’t in and of itself reveal anything.

Testimony is stuff you’d tell a jury. In the bank account example, you’d tell the jury: this account was used by the criminal, and the accused knew the password, it must be his account. You wouldn’t tell the jury “the accused knew the password to what was undisputedly his own phone.”
Allow me to clarify: I don't think NASA is becoming a word. I think it's written that way to follow an editorial rule or because it's a mistake.

> Acronyms that become words sometimes lose their capitalization. Nasa is headed there.

A laser, a scuba, a radar or modem have become words and describes objects (and have a plural form) so what would the word `nasa` describe if it's heading to being a word (which I don't believe is what's happening but I might be wrong) ?
Here's what happened to me(A) and a friend(B) from a former workplace of mine(open-source project):

B: Take a look at this shit code that I found.

A: Whoah, it really is shit. Blame it so that we can see what kind of genious is behind this.

B: ...

A: Well?

B: Apparently you wrote and I reviewed/approved it.
But National Security is a club everyone swing.
The same thing that happens when you make any excuse for not complying with a court order: a judge or jury decides whether or not they believe you. There is occasionally a gray area, but most of the time lies are obvious.

If you attend a trial, you'll hear a lot of things you either do or don't believe, and not many will be gray.

If an otherwise normal person claims to have forgotten the passcode to their phone that they used every day, few judges would buy it.
Why do they need a crypto currency to achieve that? How is it superior to just a number in a database to represents your balance on facebook? Facebook is centralized what advantage does a decentralized currency have for them?

Venmo/Paypal seem to have no problem achieving this without a blockchain.
Just throw the candle in a bucket of LOX.

The candle energy density number is very biased, as you still need to bring O₂, which weights a lot.
Android isn't exactly known for being a paragon of security. The number of unpatched critical CVEs in the wild at any given moment is staggering. At worst this is a step sideways.
Paper author here: one cool thing about our technique is that our bot doesn't keep "notes" :)

The only thing it maintains for the entire game is this length-60 belief vector - a summary of who it thinks is evil and good. How people act influences this belief vector, but it can't look back at the game history. This leads to awkward play sometimes - it will propose missions that have failed in the past, etc. I think it's cool that we (humans) can summarize the state of the game with such little information, and that the bot does something similar :)
Nice reference ;)
Yeah. That's not what means. If you want to define the fifth amendment as that you'll need to overturn Miranda v Arizona.
boot up speed is critical in an emergency when a phone is needed, but the sleeping phone wakes up to tell you !battery is dead! so crucial time is lost swapping battery or plugging in then how much more time booting up? My primary desire for a mobile phone is to be able to access its features rapidly, if im using mobile, i cant wait till i get home or find a public phone [where ever those are nowadays]
Here is the internet archive link:
https://web.archive.org/web/20180324194926/http://espotek.co...
Except that E. O. Wilson was an immense group selection skeptic until his 80s, when he decided he was wrong and threw in with D. S. Wilson's ideas (sometimes called "neo-group selection"). See D. S. Wilson and E. O. Wilson, Rethinking the Theoretical Foundation of Sociobiology, 82 Q. Rev. Bio. 327 (2008).

It's not like this is his own pet theory and he's trumpeting it out of ego. If anything, it demonstrates humility about his earlier dismissiveness.
I'd definitely call that ("only for looks") the single most likely possibility by a good margin.
Maybe. But really displacing any of those services is maybe 10,000 developers away... we already have F-droid what if you co-opted it to publish commercial apps for no fees. What if you set 10,000-20,000 developers to work on an open source fork that was run by the Linux foundation? What if you made a real effort to make it truly open source and free? Would people jump ship? It's possible. No one has tried or had the resources to try. And Google becomes more and more entrenched.
Wow, why is this not reported on by more prominent American newspapers? What is the point of doing this? Is this a new strategy to try any and everything we can to piss China off?

Calling VSG Donald...
Just to follow up here.

500k/yr is around 41k a month. Figure you are going to be paying about 40% in taxes or 16,400 a month in taxes you get 24600 left

Considering you just spent 14k on a house and car you get 10,600k left. Groceries for a family in the bay runs around 2k a month so now you are down to 8k a month. Wife needs a car plus you need insurance gas and maintenance. Parking runs what $45 / day or 1350... lunches run around 30/day or 900... you haven't paid for clothes or extra curricular activities ( karate lessons 1k / month )

Family is not cheap, Family in the bay is hella expensive
I worked in adtech for a bit and thought the tech was really subpar. The engineer’s goal is try and find edge cases where the privacy controls of the OS / browser have gaps so you can better target and serve more ads. The ads themselves are garbage. Very underwhelming experience. Also it’s a race to the bottom. No VC’s want to invest in adtech anymore given that old tech has monopolized it and regulations are coming. No career path. Stay away.
I agree about not thinking about people being "smart" or not. I think everyone's interest just varies and sometimes their interests intersect with what people think of as "smart things".

One of my friends called me a genius the other day, but I'm just really nerdy about something that makes money. He's really into comics and is a walking encyclopedia of characters, timelines, stories and arcs, but wouldn't consider that "smart stuff", even though it is to me.
Ubisoft Officially Confirms Watch Dogs Legion, Full Reveal at E3, 2019
Evan was a lifetimer. Twitter's mail was routed via one.textdrive.com if memory serves me correctly using a truck load of aliases to redirect to offsite email accounts.

It was a pleasure dealing with the Virtualmin team on issues we had on Virtualmin on Joyent and TextDrive's shared hosting services.

Replying to the "Wins over GCE/AWS above that I can't reply to":

They had various:

* The ability to run workloads at near bare metal speeds (their using Solaris Containers).

* Manta (ability to perform compute operations on their storage service without having to download files and reupload files).

* Their work on getting a better user experience in zones with pkgsrc (thanks to all the hard work of Filip and Jonathan).

* Better performance and having the ability to spend less money on resources and reducing the instance count for folks moving off AWS to Joyent. I was involved in a number of these migrations.
Soon author pen names will look like this: Stevenking Shining
As I understand it - which isn't saying much - 4chan's /pol/ is a more frequented link for the ilk we refer to, and with much better design skills than what you described.
Converging lines suggest something very legit about "Nonlocal consciousness". Stay with me. If indeed the case, than we all need a factory reboot on our perceived truths. HIGHLY LIKELY our projected selves built on flawed societal norms. False intuitions. The sooner the masses embraces this new paradigm the better. Healing our planet, healing ourselves... intellectual humility is key no doubt, but those power brokers of popular opinion, more important those clowns drop their agenda$ and create space/fund science that deep dives into the mystery of nonlocality.
> You have all the rights to sue whoever steals your tech

If they are not under your jurisdiction, there's a limit on what can be done. Even if you win, your tech is already in other people's hands.

> We, the US and other nations, run by the laws.

On paper. Other nations don't do as much enforcement as you think – if at all.
Warren-era decisions may or may not bear any resemblance to what the Constitution actually says.
This is something I need. What alternatives exist? 30 dollars isn't bad, but communities of support are also nice.
Whether they did or not, the data was publicly available for some time, so you'll see mirrors around. However, on longer timelines both model and training data are less useful, which I think is the actual outcome here.
He gave the threshold in his comment though.

> It's up to the team and customers to decide on that however.

You said yourself:

>the consequences of a dupe would lead to a pretty bad customer experience.

I've seen many situation were a duplicate wouldn't matter to a customer. It would matter to me because like you, I'm a perfectionist, but at the end of the day, it's both the team and customers that decide together.
The nightly compiler is unstable, not insecure. If it is insecure, that has nothing to do with stability. If the insecurity is not discovered, it can be stabilized just the same as any other problem can.

Your concern is that the instability increases the risk of an insecurity, but that is more like arguing that a finger prick on an otherwise healthy patient is irrelevant because that patient could become mortally wounded in the future. Hospitals treat the patients they have, they don't say "ah, you could die in a car accident anyway, might as well not help anybody."
Just check out how every SJW behaves to have a counter-example.
> Understood as senior: New tech creates new problems.

Related: There are no new problems.
Nasa Declares International Space Station 'Open for Business'
The laziness of scammers never ceases to amaze.

There's the theory that misspellings in a Nigerian email are meant to filter only the truly gullible, but IDK if that is true.
For me, that doesn’t make things clearer. “refurbished, non-Apple parts”? Why wouldn’t the non-Apple parts be new?

I repeat: I’m all in favor of the right to repair, but this case is about whether these parts are counterfeit, and, possibly on whether parts like these can be counterfeit at all.

”largely Apple parts, likely scavenged from broken phones”

That, IMHO, would change things, but I cannot find any statement that the screens were largely Apple parts, or that they were scavenged from broken phones.

If either were true, I would expect the lawyer for the defense to explicitly state that.

Disclaimer: It is hard for outsiders to make a good judgment on such cases, as the devil is in the details, so you would have to read all the evidence, and jurisprudence of similar cases. I didn’t even watch the entire video in this article.
IBM Is Cutting Almost 2k Jobs as It Reshapes the Business
Fuck Apple
The New Open Source Security Stack
It's always entertaining when Silicon Valley companies learn that hundred-plus year companies have these stiff adult things called "rules" around for a reason. I can't imagine seriously engaging in significant political discussion at work, and can't imagine a positive outcome to it.
It's more big picture. Your individual data is useless. The data of a huge % of the US (or other country, or planet) is extremely powerful. As a facebook user you contribute to that data.

So, no you individually using fb or not doesn't really matter other than on principle. I don't use it because I find them morally reprehensible, but I also understand my boycott is purely symbolic unless another 100m or so people join me (probably won't happen).
I mean, in a sense they really haven't been a big money-maker as an investment in the past either, barring some exceptions. They are stable dividend stocks and I don't really see that changing.