skysight-inc/HackerNews huggingface dataset:
If Fedramp is like other security certifications, written policies can be used in lieu of actual enforcement.

A policy could be something like:

"Vendor shall not move sensitive data out of CBP's secure network"

So it's pretty much on the honor system. And some new employee at the vendor may not even be aware of all of the policies they are supposed to be following. The vendor is still reponsible for that employees actions, but it can be discovered too late (as in this case, the breach was already made)

But instead of just a written policy (among dozens or hundreds of others) that people are expected to abide by, this could be enforced by limiting the vendor's access to the network. For example, by counting how many records they access, how many bytes of data they download over their connection to the secure network, or not giving them direct access at all and exposing only an API controlled be CBP that gives them access to only the data they require)..
Single spa is one option
If there haven't been any failed logins on the account since last success, there's no need to throw up a captcha.
You know that the higher achieving person could have told the truth, but didn't. This might change the situation from a smug feeling of having cheated the hard worker into a feeling of gratitude that they protected you. The power they wield is the difference between a philantrope and a sucker.

Just a thought.
Malice is completely unnecessary for the world to go to shit. Very few people are actually malicious in any meaningful sense of the term. Most bad things happen when generally good people cut corners.
It is mostly ideology. But using something like random.org does raise your risk profile.

Random.org or any of their partners or your browser or the connection between you and random.org could all potentially be compromised.

If someone knows that you always generate your random salts with that site, they could potentially use past generated strings to reverse engineer your crypto.

Of course, very few password generators are only going to use the random seed you gave it. You would also need to know possibly the exact microtime and a ton of other variables to be able to "replay" the same scenario and generate a copy of the key.

The strength of your crypto is based on how unpredictably random the data you provide it is.

Assuming random.org is not the only source of random that your application used, it's probably fine.

If not, and reusing that same random string will produce the same output, it is quite dangerous. Especially if you are screen sharing. Someone tied to the project could easily figure out the output by copying the random string from the video.
Harass is a loaded term that doesn't deserve the context here. Although TidBits didn't write this article they should know better. The article was not a fair handed examination of the issue (and specifically Norwegian to boot).

Apple certainly has the right to defend it's own position (whether you think that position is fair or not). That's not harassment by any stretch of the imagination.

And they're doing nothing to the repair shop - they're just appealing the case to a higher Norwegian court which is their right. That in no way is harassment.
Not OP, but I've had luck making PCBs on my Taig mill. Might want to choose something with ballscrews or at least preloaded nuts or potentially a belt drive. PCBs hate backlash, but don't constitute a high load.
Perfect answer.
Good thing Huawei is cut off, we might get some much needed options that are not tied to Google Play Services.
> There's always the risk that the lottery commission could say "oh, come on, the terms and conditions prohibit this kind of thing", leading to a protracted legal battle.

Not sure why this is down-voted. It's spot on.
> Kind of defeats the purpose of incognito doesn't it?

They're going to track my IP whether I want them to or not. So they should go ahead and use it to reduce hassle.
Nah, Americans can be subject to their own laws, they were voted for. I'd go for remunerations for non-US citizens who had no choice in the matter (e.g. by being sent to the US for work.) Maybe see us as a bit more equal.
I’m not sure why you’re being downvoted; I think it’s a fair comment. My response is that I’m honestly not sure what the best response is. But if we start with insecurity as a given, then I feel like we could at least be exploring better alternatives around... people storing data locally and always providing it for every interaction? Maybe.
> persistent but bad practices in the open source community (e.g., a stubborn refusal to stop using C-like memory management semantics and primitives when dealing with untrusted inputs)

This applies to the entire industry. It's not something specific to the open source community. It's also extreme to call the use of C as "bad practice," as any language has its own strengths and weaknesses.
Flutter draws every pixel to screen, supports Tween and Physics-based animations. There are some short widget of the week videos in their docs.
https://flutter.dev/docs/development/ui/animations

Some examples of Flutter apps.
There is this community list of apps https://itsallwidgets.com/

Also the Flutter team posted the results of their competition to create apps in 5K or less
https://medium.com/flutter/the-flutter-create-winners-are-40...
Just another reminder that there is no accountability left in America, and you reap what you sow. If you want a society that is accountable, you need to start with a culture that values honor and takes shame seriously. You can’t impose a sense of honor from the outside without building it slowly from within, any more than you can impose respect without earning it.

If you ignore these principles, you make room for people who lack self-worth, and those are the most destructive forces in a society because they have nothing to lose.
More U.S. Millennials Subscribe to Video Games Than Traditional Pay TV: Survey
It plays into a lot of anti-Semitic tropes. Imagine a cartoon of a black leader depicting him as a dumb violent ape with big lips.
I know I definitely would not want to attempt any kind of serious work where other people start partying at 4PM.
Publishing the odds is common. Doing the math on those odds apparently is not.
Play retro games online, right in your browser
For all the criticism that modern media gets regarding journalistic standards around coverage of big business, it's remarkable that they will lead with eye-popping valuation numbers in their headlines when they know that they are more or less a fiction concocted by VCs.
Exactly. It's naïve to think money is the problem. It's not like you can pile up a $1B in cache, make a huge bonfire out of it and cure some deadly disease for all humanity forever just like that. If it was, I'm pretty sure you could find a million people on the planet to donate a $1000 on average for that cause.

But in reality, you are unlikely to get a $1000 from me even for the cause I find extremely important. For all I know, my money is going to end up in the pocket of some medical research center director, who is basically a politician and a fraud, with an income far surpassing mine to start with. And the new car he buys will provide zero help to solve the problem.

Basically, I believe much more that government will spend my tax money wisely (which I don't believe, obviously), than I believe academia is able to somewhat efficiently convert money into solutions. And it doesn't matter if I'm right or wrong, it only matters that I'm not the only one like that, and it isn't even a human problem as much as the nature of how things are: and that exaplains, why the whole "there's so much resources(/money) in the world, why cannot we..." argument is silly.
The blind are. And the audio captcha is roughly useless.
Dupe, ffs: https://news.ycombinator.com/item?id=20150688
Isn't monetary liability a form of "outsourced responsibility"? I'm not understanding why damages from lawsuits are not sufficiently motivating the industry to take data breaches seriously. Maybe they just aren't awarding enough damages to change behavior?
Why not? A credit card with a small limit is potentially a 60 day interest free emergency loan. For example, your car breaks down and you need $500 to repair it, but you don't have $500 in cash. Assuming you can't borrow from friends/fsnily/work, your options are lines of credit, and I don't know of anywhere other than a payday loan that I can get that sort of amount of money. Meanwhile $500 would fit on most credit limits, you get between 30 and 60 days of interest free payments depending on timing, and the interest rate is substantially lower than a short term loan if you do ever so slightly overrun,_and_ your credit isn't tanked if you can't afford the large end payments.

Seems like a win win to ne.
I believe this language is based on the "chemical programming" model as described in http://pop-art.inrialpes.fr/~fradet/PDFs/RULE04.pdf and https://www.researchgate.net/publication/225418037_Higher-Or....

I hadn't thought of the connection to the join calculus - that's pretty cool!
I used to make my own PCBs at home, and I still really enjoy the technologies that allow making high quality boards from home. I've found for my personal stuff that going through a low-cost fab house is just so economical, and the quality is so good that I usually can't be bothered to do it myself anymore. Still great if you want the learning experience, or if you really need it now.
Imagine you have a React/Redux app with Rest endpoints. You have a dumb "Button" component. You share that with all the other apps. The Button is in React.

You now tie your entire ecosystem to React. Not having individual apps have to agree on dependencies is one of the benefits of micro apps, and you lost that. However, you only lost that for React, which many people agree is pretty darn good and not going anywhere. That's a tradeoff we take. Pure React components are also well encapsulated, so whatever the opinions are behind the Button doesn't pollute the apps. App owners are still free to architect their apps however they want: their only hard requirement is React.

Now, imagine you have a Medium style text editor built with React, Redux, and rest endpoints, complete with automatic draft save, a working publish button, onboarding experience, etc. If you share that, now all your apps have to agree on: backend, authentication, I18n, Redux, state management architecture, it probably uses local storage and cookies, is opinionated on what you do when logged out, and so on and so forth.

If you bring that editor in an app, you're now tied to all of this. If 100 apps use that editor, and they want to upgrade Redux in the editor, they all have to upgrade to get back to the same version. If you change the backend, you have to also upgrade all apps or keep the old endpoint forever. If you want to add an I18n language, you will have to rebuild/redeploy everything. If you don't encapsulate your state, its architecture will pollute the app, but if you do you're likely going to have a much more bloated library (more bytes, slower download). Apps are no longer free to make their own decisions.

It gets worse if you have transitive dependencies. Your app depends on A that depends on B that depends on C. Your app also depends on C. C releases a new version that your app wants. You now need to either bundle two versions of C, or upgrade the world. If C has global side effects, bundling 2 versions of C might not even be possible at all.

These kind of "full stack components" are tech debt the moment they hit your apps.

As the other reply to your post stated: you end up with the worse of both worlds. All the costs of micro-apps, with all the costs of a coupled monolith TOO. Its much worse than if you had picked either one or the other.
I have a graduate degree in maths and have played the lottery. The expected return isn't the point.
> And when it comes to 'social media' mobs, is anyone really going to come into bat for the NYT and claim that the below is not really anti-semitic

Yes, an Israeli: https://www.haaretz.com/opinion/.premium-that-netanyahu-cart...
I wasn't aware of that (I always use adblockers). I don't like that at all, and after reading it I'm now expecting Google products to try to trick me into doing things that are profitable for Google, which Google knows were not my intent.
Flickcar – Ridesharing – Carpool – Delivery App That Rewards Users
It's actually mostly just pure laziness.

https://history.house.gov/Historical-Highlights/1901-1950/Th...

The Permanent Apportionment Act of 1929 was enacted because it was "too hard" for Congress to rezone/redistribute House of Representative members. This measure, and ones like it both in law and in business, create large bureaucratic organizations that move slowly and are prized for their stability, which is another word for "zero accountability or disruption."

Very few people set out to have growing inequality of resources or to amass power for the sake of doing it, though of course the people in power now seek to keep it for the sole reason of not wanting to lose it (they frame it as "too big to fail," "stability is important," and so forth).

It's just pure inertia. We went away from smaller regional governments that reports up to a lightly-empowered federal one with a lot of individual liberty step by step, for convenience and for "safety" (any number of military or police actions, foreign and domestic), and we get what we deserve.
> Several observers noted the story was timed in such a way as to provide maximum publicity for a bill that the New Media Alliance has been promoting to Congress, called the Journalism Competition and Preservation Act. The proposed legislation would exempt newspaper companies from competition laws, which prevent industry-leading entities from collaborating to set prices. The NMA argues this would allow publishers to lobby Google and other platforms for better financial compensation together instead of individually.

On one hand, you can’t make this stuff up. A “competition” bill that exempts companies from competition laws. On the other hand, this is the problem with the “content middleman” business. By leveraging its near monopoly over eyeballs, Google can negotiate to receive an outsized share of the revenues from people viewing say NYT content, relative to the value Google adds to the transition.

That is also why I welcome the rise of competition in movie/TV streaming, even if it means subscribing to multiple services. The value added by any particular streaming service is pretty minimal. (Except for Netflix original content, Netflix is streaming say NBC’s content from Amazon’s servers over Verizon’s wires to an app using video codecs developed by Sony/etc.) Netflix, etc., isn’t adding nothing, there is a value to the curation and licensing deals, but it’s status as a middleman would allow it to wrestle a much larger share of the profit from the transaction than the share of value it adds.
Not until long after you’ve spent it on everything else.
Should I Fire an Employee Who Lied to Me?
I'll see if I can find my references again, but pretty sure this is not true. You can have a specified puzzle that has a single solution but requires a guess. I agree most are not this way, but they can be made.
You aren't working class of you are trying to get your own company started.
>I'll also point out that the reported MOS scores have several oddities, like an 8mbps av1 stream being rates lower than it's own 6mbps stream.

That reminds me of the old, hilariously broken ffmpeg AAC encoder where increasing the bitrate decreased the quality after a certain point, at least in my tests. So although my guess at what would be causing weird stuff like this would certainly be bad testing methodology by BBC rather than a quirk in the encoder, there's a non-zero chance that I'd be wrong.
If you have to write code for this stuff 90% of people won't be able to analyze things, and 90% of analyses won't happen because they won't be worth the time.
Most of these are so called "paper security", while some real technical vulnerabilities can effectively crash all these fictional barriers.
The Turntable Health Story [video]
Yeah, Stochastic Pi-calculus and chemical reaction networks simulators are doing this this too. They actually precisely define the probabilities of reactions based on the current amount of different molecules and their reaction rates. For instance, I used the tool called Beta Workbench (BetaWB) and hand-written simulators for modeling systems like this. It's a really cool computational model, I think.
If you think Ben Shapiro, Lauren Southern and Jordan Peterson represent responsible and respectable conservative thinking, I don't really know where to start.

Whether or not they like being identified as part of the alt-right or if they prefer to pretend to be intellectual free thinkers doesn't really matter.

If you walk like a misogynist, talk like a white supremacist, and get specifically praised by the alt-right for radicalizing people to their cause - you just might be a bad person.
That coffee cup about to fall is giving me serious anxiety.
> If society is like a big collective brain as it thinks about the big issues, those companies have installed filters on a significant portion of the neural links

This statement seems like something most people would agree with until you dig deeper.

Do you think there should be zero filters? What about threats of violence? Targeted harassment? Terrorist recruiting? Child abuse? State-sponsored propaganda?

Living animal brains continuously prune malfunctioning cells and connections to stay healthy. Is it possible that some filtering of the "big collective brain" is similarly essential to healthy functioning?

Do you have specific examples of content that is being filtered that, if it weren't filtered, would likely result in better collective decisions?

If you have specific examples, are they pervasive enough to warrant shutting down beneficial filtering?
Some of my favorite hacks in the last year have been about using valid certs for bad actions. When you can have a cert from Microsoft (Azure), there’s a lot of things people will trust.

Along similar lines, I think I heard that 30% of detected malware was signed with a “trusted” authority last year.
I know post-docs that technically fall into this category. Why would they pay for a connection at home when they have perfectly workable mobile internet and 10gbit+ internet at work?
If you find such a puzzle, please let me know!

Assuming the CLP(B) solver is correctly implemented, the CLP(B) solution I posted will give the unique solution without any search.

On the other hand, it is comparatively easy to find puzzles where the CLP(ℤ) version will require search, even if only a small amount.
Same story that is also trending on the HN homepage right now... My comment from that story which is from (https://www.buzzfeednews.com/article/daveyalba/the-us-govern...):

Quote from the article:
“There should never have been the ability to download a database like this off of government servers.”

Sorry that I don't have a ton of links to support this claim, but "believe me" (as our Commander-in-chief would say) that the US Government would cease to function if it were not for subcontractors (read, private companies) performing tasks on behalf of the government. Personally, I don't agree with this way of our government doing business, but that is the way it is.

When I was in college, I worked for an archeology lab, and our lab was the subcontractor, of the subcontractor, of the contractor that had contracted to provide a service to the USACE (US Army Corps of Engineers). And every way along the way, money was skimmed off of the top. It's just "the American way" of doing business.

People lament regulation all the time. I have a feeling the executives of Ingersoll Rand love it every time a new regulation is put into place.

Follow the money.
One article, written by one NYT writer is the basis for your belief that:

"The NYT also deliberately blurs the lines between any kind of non-leftist thinking and 'alt right' - a term created by Richard Spencer, a white nationalist who wants to create a white ethnostate which describes far right hate groups."

It seems like a bit of a stretch. In the bar chart, they explicitly call out that the guy started watching a bunch of left-wing channels on YouTube. It's so odd that the same people who mock "leftists" for being "snowflakes" about labels and such are the first ones to whine about being labeled. Seems like an overreaction to a bad article.
Any ideas how this Intel encoder compares to rav1e and why they chose to roll their own?
A time tracker on the computer, that sends a pretty clear / negative sign about trust from the employer.

Employees often behave as they think they are expected to...
Not a surprise to me.

I was one of those aspie kids who couldn't run with the other kids but I did run with a pack of dogs. Recently I realized I knew a lot about dogs and that was how I learned it.

Since then I have worked closely with cats and horses, fought with beavers, got passed on by a raccoon and also worked in A.I. I am completely convinced that 90+% of human intelligence is animal intelligence and language is the main thing we have that other animals dont.
> In those, guessing/searching is basically required, right?

Apparently no guessing is required!

In Prolog it's fine for a variable (that represents a square in a sudoku puzzle) to be somewhere between 1 and 9. (Yes, that can be a bit mind-boggling, because in most other programming languages a variable can't really be either this or that. As far as I know, not even in SQL which is also somewhat declarative.)

You might get in a situation where one square (let's call it A) is between 1 and 3 and two other squares on the same row (let's call them B and C) are both between 1 and 2. One constraint that we have given is that all numbers on a row must be distinct (because that's one of the rules of a sudoku puzzle), so given those constraints and facts, Prolog can deduce that the value of the first square must be 3.

Therefore no guessing (or searching + backtracking) is required; only constraint propagation.

This is what the query would look like in a Prolog REPL:

[library(clpfd)], % load library for constraint logic over finite domains
A in 1..3, B in 1..2, C in 1..2, all_distinct([A,B,C]).

And this is the reply:

A = 3,
B in 1..2,
all_distinct([3, B, C]),
C in 1..2.

I can only recommend you install SWI Prolog[0] and give it a try. It's quite fun!

(Triska's explanation is probably more in depth and correct, but I thought I'd just chip in with my newbie way of explaining how I understand this. But seriously, check his videos. They're great stuff. The illustrations make the explanations accessible.)

[0]: http://www.swi-prolog.org/
I don’t think 1100 tickets is enough to cover all combinations of 4 numbers, but I don’t know the original lottery number range so I’m not sure.