skysight-inc/HackerNews huggingface dataset:
First, does the patch actually fixes it? In original report, they "patched" it with the flaw remaining.
I have to imagine the "just open a .html file and start playing" route is a huge vector for getting people into proper programming.

It may be, but just open an HTML file and write an app using your camera and microphone is not something that is typically the result of doing just that (nor should it be).

Putting some effort into figuring out how the pieces fit together is not a bad thing. You can still set up HTTPS if need be without having to rely on a for-profit corporation. It's trivial to install a self-signed cert in iOS and OSX the last I checked (and I seem to remember it wasn't so hard in Windows either). It was excruciatingly bad in Android (well, mostly missing IIRC) around Gingerbread — but that too is a good example of why using products built by people with no comprehension of how to secure things is bad.

A learning curve is not inherently bad, but beyond that, especially with something that has such huge security implications, some understanding of WHY you should be encrypting camera fees is something I'd want any dev working on a camera/audio recording app to understand. There's a reason that while CB radio is easily accessible, there are barriers to entry for Hams. With power comes responsibility.
I always thought it was paranoid to keep tape over your webcam, but this makes a pretty good case for doing that as a last line of defense.

I also want to express my complete disbelief that Zoom basically installed a back door on all its users' machines. It's hard to imagine a competent engineer not understanding the security implications of building something like this. I have no special security expertise, so when I see an exploit that I can actually understand it scares the living daylights out of me. In this case just about anyone with a web page can trigger this Zoom vulnerability.
Cause who needs to pay employees and invest on future research, amirite?
$7 / passenger for Immigration, $5 for customs!

Thats insane revenue, you would expect at least a good service from it.
Pretty funny that a format intended to allow you to draw without a mouse now has a visual designer.

Are there serious interactive image editors that don't require a mouse? For symmetry's sake.
That’s how people make money, what’s the big deal?

How reasonable is it to expect they can loan USD to people for free (ie at zero interest)? Only a moron would do that.
Unfortunately the default settings aren't great. But if you've got the patience to configure it (e.g., you're a remote employee) it's much more tolerable.
Learning Methods to Learn Smarter and Grow Faster: Active vs. Passive Learning
Dude. How do people know how big or old the universe is? That’s just the VISIBLE universe. I bet they will change their estimates in 100 years again
With SmartGit the lesson to start with is simply to commit, commit, commit. Commit every little change. You don't have to worry about adding to the index, you don't have to worry about branches, just type Ctrl+K, type a message, and Ctrl+Enter to commit. Or select from the menus to do the same thing.

You can always go back and add a branch onto any commit. Just right click the commit, select "add branch", and give it a name. You can move branches around by dragging them and immediately see what branches are where.

And if you really mess up, click Recyclable Commits, and any commit you thought you lost will be there.
Your cleverness is likely to be oriented at other matters such as hunting and avoiding being hunted.
IBM Bets $34B That Red Hat Can Help It Catch Amazon and Microsoft
This is fascinating and scary at the same time.
As we slide in a surveillance global system too busy to notice, Hong Kong is showing us the possible future of Western societies.
Maybe time to cancel extradition agreements with the US?
Who did the tax collection? Did the exchange collect it automatically, or did your buddy do the filing? If the former, the exchange is sketchy; if the latter, your friend messed up.

https://www.nerdwallet.com/blog/investing/bitcoin-taxes/
Because the concern comes across as a bit silly if you know how the platform works and you have experience changing your partner ID (say, from acquisition). A customer must deliberately grant a partner delegated admin privs for them to have that level of access to their tenant. If the company the customer works with gets bought out, the buyer doesn’t get access to the acquired client tenants automagically. They must go through and request delegate admin again under the different partner ID that’s bound to their partner tenant. A client can swap out (or dump) partners of record quite easily, and other service providers are happy to help you do it.

Years ago, if you bought O365 licensing through a reseller, it was very hard to add licenses yourself with direct purchase. That hasn’t been the case for a while now though. You can use redeemed licenses from a reseller alongside directly purchased licenses.

We encourage our customers to buy direct anyway, although I don’t see anything in the article talking about shutting down the reseller program anyway. They’re dropping internal use rights and support incidents for partners.
Ok, so I’m seeing a lot of these (googles pac as well), can someone confirm whether these are deliberate donations by the company, or whether they’re corporate donation matching? (I don’t know whether the donation matching that tech companies do restricts contributions to political orgs)
I find it uninspiring that we still only get grainy video or flir video from these jets. They claim multiple jets detected on but there was no ground based radar, satellites, or other sources that could correlate these "sightings"? The evidence always seems so thin and from a single source, almost on purpose.
Haven't read the article, but here is the cache: http://webcache.googleusercontent.com/search?safe=off&source...
When Google had withdrawn YouTube app from FireTV, I started watching YouTube on the Silk app (browser). The interface on browser or YT app, both are same.

I feel its better that YT has same look and feel on the browser - I don't need a separate app for that. And I can browse other websites in the same browser.

So now I don't care if they are back with YouTube app on Fire TV.

Not a member of Amazon Prime since long, I manage my entertainment with YouTube, JioCinema and HotStar.
In India, I don't know of anyone who actually pays for prime. Everyone gets it free bundled with their mobile or broadband plans.

All of these plans get Amazon Prime with free shipping, prime video and Amazon Music ad-free unlimited downloads:

Airtel:
- INR 299 (USD 4.37) per month plan includes unlimited call/text and 2.5GB data per day and includes Amazon Prime.

BSNL:
- INR 399 (USD 4.37) per month plan includes unlimited call/text and 30GB data per month.

Vodafone/IDEA:
- INR 399 (USD 5.83) per month plan includes unlimited call/text and 40GB data per month and includes Amazon Prime (full year) and Netflix (3-months trial).

Reliance Jio:
- INR 149 (USD 2.19) for unlimited voice/text and 1.5GB per day. Bundles HotStar (which streams cricket, tennis etc live) along with premium content from HBO, Starz etc.

IMO, all of the telcos in India have strong TV apps that give access to Movie/TV/News/Sports content (live+recorded) on mobile screens for free (bundled with really cheap mobile plans). Then there is Hotstar which is orders of magnitude better content than prime videos. So, unless someone is getting prime video for free I doubt anyone would be paying for it.

Even music is very much like that. Prime Music is good. But there is Airtel's Wynk, Jim has Saavn, then there is Youtube which has huge viewership for music videos.
> He constantly states he hates the media attention but then does a Netflix show a

Money doesn't last forever, and sometimes you need more of it
What?
I'm German. This is infuriating.

I now have to pay him and ask for an invoice just to experience this :-)
Sounds like your buddy may wish to chat with a CPA/tax-advisor.
There are theories that USDT is not actually (fully) backed by dollars, and instead just minted to push BTC value up.

https://www.tetherreport.com/
You can blame Google for this. They insist on using VP9 for their 4K videos despite the fact that no Apple hardware supports VP9 decoding. I'm hoping this changes once Apple adds support for AV1.
An interesting discussion of that here:
https://www.technologyreview.com/s/513781/moores-law-and-the...
Because Venus’ atmosphere is full of Sulphuric Acid and various greenhouse gases which wouldn’t allow life as we know it to exist.
They have two Curtiss C-46 from 1945. Its interesting that its cheaper to continue to pay for the maintenance and fuel than lease something more modern.
Nah leadership can change, see Microsoft and apple
I consider my desktop computer to be far more secure than my phone, since it's harder for someone to access it physically and it isn't running Android. The things I install on it are more trustworthy as well, since they're mostly small, established unix tools.
"That is because I spent all of 2017 doing tech organizing, and then all of 2018 fundraising for the Congressional elections, and customers grew irate"

Oh yes. I was so close to giving up on Pinboard and hosting my bookmarks myself. Badly, probably.

I hope he doesn't find another hobby that is taking exactly 100% of his time.

Since a few months everything is back to normal, and that is great. But this episode showed the transience of things.
I think it means seibelj works for Circle and is shilling their stablecoin. The irony is that the entirety of "crypto" outside of the people doing the academic work for it is not just vaguely sketchy, but extremely sketchy.
No patch? What the actual fuck
Thank you! This is stopping me from getting an Audible sub. People think I'm crazy when I mention this use case.
We should definitely treat people as human beings and understand we're all fallible, we should try to forgive mistakes, and we should hope people learn when they get something wrong. That said, if someone does something to make us stop trusting them it's on them to show they've changed; it requires effort from both parties.

There is no reason to extend this philosophy to corporations though. We can decide to use a competitor instead. No one needs to show loyalty to a supplier who screwed up.
We also have financialization of markets, which allows manipulation. The USDA has also made some controversial assessments with readjustments of the corn production forecast. Currently, 31 million corn acres are deemed unplanted this year. One can read the trends to see the writing on the wall...

https://www.agweb.com/article/crunch-time-31-million-corn-ac...

Gold & Silver have also been kept artificially low & there is incoming indictments of market rigging. I add this as an example of how financialization distorts the pricing information flow.

https://www.marketwatch.com/story/merrill-lynch-fined-by-doj...
Many Republicans are in favor of subsidies of industries like Boeing when they are in their district. I expect they would describe themselves as believers in small government.

And let's not resort to the No True Scotsman fallacy ...
I think that is one, of many, exact reasons they are illegal. The government will do anything to protect big pharma and these substances are not patentable. Nor do they need to be taken often for beneficial effects. That scares the living shit out of pharma companies that sell a lot of garbage like anti depressants that aren't even shown to be effective and often lead to worse outcomes like suicide. I'm surprised about what the guy in the article is doing and conflicted on whether I support it or not. Nature already provides this medicine in an almost perfect form. Extraction is trivial. I see no need for synthesis or especially for patenting it to the detriment of the natural mushrooms.
This just sounds like a cool sci-fi setting/backstory.
Although I agree having an active webserver with dubious security controls is a problem, the vulnerability as we know it today installs Zoom... and this new version of Zoom uninstalls the webserver. So it is (or at least could be) a self-patching vulnerability.
A few I can think of:

- Your workloads are both bursty and mission critical. Returning errors while you scale up manually isn’t acceptable.

- You’re deploying self-hosted software. A serverless db makes it easier for your customer and your support team—capacity planning and scaling are much easier.

- You have a small team and want to minimize how much time you spend on ops.
Simulate swinging curtain with 100 lines of C++ code
It's a hard sell. Another risk is that, after I've invested a lot in Dark, you increase your prices, and I can't switch because I'm dependent on your product. The switching cost would be rewriting my entire code base (my biggest investment).

I'd like to have the option to reuse my code to mitigate those risks. Two possibilities: a) If the Dark IDE and infrastructure were compatible with a common language, I could use "regular" build and deploy tools if I wanted (I'd weigh the pros and cons vs. your price increase), or b) if the Dark infrastructure had an open source API (not necessarily an open source implementation, but like what SQL is for databases, or the S3 API for object storage), I could implement my own alternative infrastructure or shop for one.

(a) seems difficult technically and (b) means risking commoditization on your end.
>Sure, and everyone complaining about OO isn't doing OO right, and everyone complaining about scrum or agile hasn't actually experienced scrum and agile correctly.

There's a huge difference between OO/scrum/agile and the DRY principle. OO does not have a well defined origin and definition. Agile does, and is intentionally not well defined. Scrum does have an origin, but I bet if you read the original author's description of it, you'll find it also is not well specified. Pick any "No True Scotsman" argument and the root cause of all of them is the lack of a clear definition. That's simply not the case with DRY.

Furthermore, all these three are a lot more complicated than the DRY principle.

The DRY principle has an origin, and a well established meaning. If you go to its Wiki page, it's nice, concise, and precise. There's no real dispute about it. Generally, those accused of misusing it have never even read the definition, and are taking a concept they heard from an Nth degree source and are interpreting it by its name.

There are likely more people in the world who misuse the principles of quantum physics than those who use it and understand it properly. We don't criticize quantum physics for it. It is precise, and is not the cause of all its misuses.

The other problem I have about people criticizing the "overuse" of DRY: Had the DRY principle never been formulated, you would see no less of it. Coupling different requirements via a common code merely because the logic is identical is probably as old as programming itself. I myself was guilty of this (and bitten by it) long before I had heard of the DRY principle. Someone formulating the DRY principle did not exacerbate the problem. People creating these problems are mislabeling them because they've heard of the principle's name. My challenge to you: Whenever someone couples code in the name of DRY, ask them where they learned that they should do this. I doubt any of them will list any reputable book, for example.

Which again contrasts this with OO/scrum/agile, of which there are several books with quite different interpretations, and where one of the key annoyances is that everyone can back their stance using well known books.

Getting DRY right can be quite challenging in some projects - I'm not trying to claim otherwise. In fact, I believe the original authors were not speaking only of code, but also of documentation, databases, etc. One representation that will cover all of the above. It is clearly challenging to take it to that level. I'm all for criticizing it on those grounds. My complaint is that every criticism I've seen of it wasn't about how difficult it is to follow correctly, but about someone coupling two clearly different requirements with common code.
Familial status is off limits in the US. So is marital status, health questions and questions about transportation to and from work. Basically, if it isn’t related to the job you could find yourself embroiled in a nasty lawsuit with the Labor Dept. not on your side.
Even if you figure the mule is expendable, you'd at least want the car to make it across reliably with the payload. I don't have a lot of experience in this area, but doesn't it seem a bit implausible that the car's electronics would work normally with that much radiation coming from the steering column?
I believe rm -rf ~/.zoomus should do the trick
Dieter Rams: 10 Commandments of Good Design
Getting Out of Your Rut and Staying Creative
Slightly different kind of jailbreak, but quite a bit larger than this one over the course of 28 years: https://en.wikipedia.org/wiki/Judy_Feld_Carr
Just audio is still an improvement over audio and video.
> I guess the French want fewer people visiting their country?

I do not see any evidence that this is their goal. They would consider it an unfortunate side effect of a necessary environmental policy.
I now changed the name to Elemental C++ GUI library. Again, sorry for the stupid mistake and the confusion it caused.
Now wondering whether the following is true...

> In a sufficiently large team/group/organisation, it is a hard problem to differentiate between a snake (imminent catastrophic showstopper) and someone else's "autonomous robot without wheels" (experimental feature).

Hmmm?...
At 2:55 it is a normal g. There is just one. Maybe an extra is generated in your mind, as would be needed to correct the error of dropping it, and then you hear it properly pronounced and count that as a second one.

At 6:55 there is something extra, but I don't think it is a g being pronounced. Note that the same word, at 6:51, is lacking that extra sound. It may be an audio glitch or related to a breath he is taking.
The 6809 was a great 8-bit microprocessor. Any CPU with a SEX instruction is okay in my book.
They could turn around and spend the revenue to make CDG not suck.
The GFW is likely sophisticated enough to make distinctions between corporate VPN connectivity using products like Cisco AnyConnect and personal use setups on AWS/DO/Azure/GC or even a home server.

One of the things I've wondered about, and I hope people more informed than me will forgive my ignorance, is whether it's possible to implement a VPN protocol that looks like ordinary HTTPS traffic. I know very little about the specific mechanics of network protocols so the very premise might be nonsensical but I would appreciate an explanation of why this might or might not be possible.
It's probably a logical fallacy of some kind on my part, but does it seem to anyone else that stories about UFO's are recently becoming more common in the mainstream media?
Why only Dear Apple? Dear Dell, dear Lenovo and dear Asus, enable your products with physical switches
The private key is on a server you have physical and logical control over. The public key, however, is potentially on millions of consumer devices – some hacker reading out the public key is a question of when, not if.
That’s not... really how it works.

You can succeed in getting yourself fired, but laid off has more to do with overall company situation and very little to do with you.

I guess if you think a layoff is coming, try to get reassigned to a project that’s clearly failing and likely to get cut?

Honestly, if you’re asking this question you should stop wasting your time and just quit. There’s plenty of opportunity out there.
Apollo 11's lunar laser ranging experiment is alive and well
> Unison https://www.cis.upenn.edu/~bcpierce/unison/ is a tool to keep two folder structures in sync - that is its main goal but it can have other uses.

And though I tend to be a GUI hater, Unison is one tool where I find the GUI much more useful than the command line alone. The game is to iteratively come up with a set of rules which Unison will use to into effect on your dataset. The GUI quickly show you the effect of your current rules, and lets you propose the next iteration etc.
While Electron apps have the ability to introduce a security nightmare (just like every desktop app framework really), the authors do try to teach Electron users how to make the apps they develop a bit more secure - https://github.com/electron/electron/blob/master/docs/tutori...
Facebook's Trojan Horse
"How is it possible to operate profitably at that price?"

It isn't: Air Berlin, Monarch, Primera, Small Planet, Azur, Cobalt, VLM, PrivatAir, Icelandic carrier WOW.
Fast Way to Load Data into PostgreSQL Using Python
Explain why it would cost more money to keep you than it would to have you stay.

For example, you make $100 doing the work that a $40 person could do. Plus, your bonus is 20% of your salary and comes due in 4 months. Then, performance reviews are coming and if your annual adjustment kicks in, based on performance, your cost is only going up. Additionally, you've been in role for 3 years and are looking for a path to the next level, because you've topped out in your role and pay grade. Also, if you're aware of any impending headwinds, site the mutual.benefit of said solution (cash flow is tight, the last several quarters were soft, etc.)

Do all the math and then ask if there's a better way to part on good terms, at a specified time, for an agreed upon rate. However, before having a conversation like that, realize it might just be the fast track to getting fired.
I was going to ask if he isn't out by now, but no May is when he'll be eligible for parole (and IMO shouldn't get it by nature of the way he ran his defence).
My naive reading is that it prohibits double taxing (taxing fuel already purchased). Are you saying that when fuel my aircraft they ask the destination so they can gauge the tax?
So basically, you have to become a Zoom expert to make it good for presentations? Funny, but Keynote hooked up to a projector or a screen just works.
This can happen with stocks as well, someone the agent will report 0 cost basis and IRS will believe it and you have to document the actual cost basis. For me that made the IRS happy and I think your friend could have done the same here if he can document what he bought them for.
Dropbox also does this, so does a lot of other popular programs.

do `lsof -i | grep LISTEN` to find out what server is running on your machine.
This case is actually a really great demonstration of why this often-repeated claim is false. This was responsible, but not coordinated, disclosure.
my next tv will be a roku tv. i love my roku box because all roku cares about is putting video on my tv. I'm not going to get a google or amazon box because who knows when they'll start fighting again and i'll lose half the stuff i want to watch.
It's because entertainer's product can be distributed to infinite numbers of people, each of whom have finite amounts of time. If I am going to spend 1 hour watching basketball, I am going to want to watch Lebron James. I'd rather pay $5 to watch a basketball game where he is playing vs. being paid $5 to watch a basketball game featuring absolutely excellent, but not world-class, players. I similarly am very discriminating about movies, music, etc. and will pay $6.99 to rent an Amazon movie vs. watching a free one on Prime because I have such limited movie-watching time. The rewards go to the top because the eyeballs go the top.
I felt their attitude towards SVN was silly, so I decided I would make my change the right way. But when I went to merge, I got a bizzare error about a 'missing revprop' and it knocked the wind out of my sails.

I'm ashamed to admit it, but I ended up copying the files just like everyone else on that project for the brief stint I worked on it. :(