skysight-inc/HackerNews huggingface dataset:
Haha. I thought the same. But here, what is interesting is that, an attacker could easily run a background process which quietly monitors the tmux panes, and execute privileged instructions once a root pane has started. The user would never even know.
My limited experience with PyQt3 says it isn't horrible and seems to cover most bases.
Pretty incredible that this has scaled down from 100 CPUs (and a couple terabytes of RAM) for their two player limit hold'em bot to just two CPUs for the no limit bot.
But what was the meaning? The artist's meaning was that art - or what we think of as art - is not actually possible, so a urinal is just as much "art" as anything else is. The art critics (don't know about the gallery) thought that it was pretty, and so they accepted it as art, which horrified the artist, because they completely missed his point.

Source: "Saving Leonardo", by Nancy Pearcey.
> ...all I use it for are calls/SMS, so there's little scope to be exploited.

You mean little scope of exfiltration (I'm guessing it's not connected to the internet). There are a lot of vulnerabilities in text rendering that can be exploited via SMS.
Oh the mobile SDKs need a lot of attention and love. We're putting it on our roadmap: https://blockstack.org/roadmap
The other possibility is intern season (I'm 99.99% joking)
(Author here)

Agreed on your point. I didn't go into a ton of depth about the details of the interview, but fwiw this is always addressed in depth during the course of the product case, and touched upon during phone screens.
I agree with some things you said others not so much. By the way, being this the Internet, I am not trying to push any weird racial stuff here, I am only trying to argue for the position you can operationalize the race concept based on arbitrary but objective genetical clusters in the human population. This can be useful for myriad things: Anthropology, population genetics, hereditary disease, diet requirements design, human evolutionary history, etc etc. There is nothing wrong with the concept that there are groups of genetic markers who are different among populations in the world.

Regarding pygmies, they are a different cluster from the highly homogenous cluster of Niger Cordofian from which current African American population in America descends. From the article I cited: "High levels of heterogeneous ancestry (i.e., multiple cluster assignments) were observed innearly all African individuals, with the exception of western and central African Niger-Kordofanian speakers (medium orange), who are relatively homogeneous at large K values(Fig. 5C and fig. S15).)".

I see you are also a bit disingineous if you dont think there is a high correlation between athletic abilities and genetics. Gimme a competent geneticist, 200 hundred genomes of 15 years old boys: 100 African Americans and 100 Guatemalans, shortest dudes in the Americas. I am pretty confident that I can pick 2 teams of 5 kids just by their genome and pick the correct winner of a basketball game between them with high probability. Yeah I cannot predict individuals outcome(yet) but population wise I think it is not a crazy stretch.

On the other hand I see your point that there is no crystal clear boundary between any human group, but if you take that position you have to be consistent with it. What I mean is that I assume you are not happy with an universal definition of black (I can understand and even agree with that). But then you are forced to admit the concept of White privilege is vague too. Same reasoning. You could say "White" is a cultural concept, but I could say the same regarding "Black" so we are back to part 1.

Again I suspect we have more points in common that differences regarding this topic, I just wanted to put out there some considerations.
And this is the difference between building a brand and trying your fate blindly to a platform's whims. One of these is impossibly hard, but if you win, you control your destiny. The other means your business dies when someone over there decides the "pivot to video" is over, as we have seen repeatedly with Facebook. I know I wouldn't want to be in the latter boat.
> Lots of people who love the access to nature, the climate, etc. in the Bay Area would never move to NYC. And lots of people who consider anyplace that's not Manhattan to be a provincial hick town would never move to the Bay Area

I'm closer to the second camp (though I live in Brooklyn).

Something a lot of people don't seem to realize is that there are a lot of very smart people working on trading apps for big banks on Wall Street that absolutely hate it. High Frequency Trading apps require a ton of programming talent, but a lot of the engineers who work on this stuff really dislike the bank atmosphere. When I worked at Jet.com, I had several coworkers who were substantially smarter than me, who actually took a paycut to work for Jet, simply because they hated the bank environment so much.

I think some of the tech companies know this fact, and feel that they can probably poach some of this talent by offering competitive salaries while having a more interesting atmosphere.

EDIT: DISCLAIMER

I work for one of these "primarily California companies expanding stuff to NYC".
We all understand the perverse incentives joke, I think what's confusing people here is whether there's some other hidden joke they're missing that suggests not to take OP at his word that yes, he did make off with someone else's gift, which is generally considered a dick move.
Oh, that’s unfortunate. I’d definitely want them to first have humans view the trigger phrase time before they okay viewing the remainder.
If they world is burning, someone better tag me somewhere on slack or it will be easily missed.
Wait until you see what Magento plugins are like
I knew a personal shopper who used her own American Express for all purchases (get those points/miles/etc), and then just billed the customer via ACH afterward. She would invoice via QuickBooks (Free ACH payments), but there are programmable options out there.

Plaid+Stripe can hook into a bank account, and you can initiate an ACH that way. The ACH fee is only 0.8% with a cap at $5. That might be low enough to eat it. I'm not sure what your business model is though.
Efficient stable single-layer OLED uses thermally activated delayed fluorescence
An Exploit Chain Against Citrix SD-WAN
Kenya ordered mobile service providers to suspend betting transactions
I suspect that most laymen find our line of work to be kind of trivial and think that success in this field is more related to youth than intelligence. To them, "coding" is more akin to carpentry (a trade) than physics (a science).

Also, pointing out that not every coal miner can learn to code is seen as culturally insensitive and perpetuating the stereotype that rural people are dumb. Which I understand, but a little honesty could have seen these resources better leveraged to help these people in different ways.
Average life expectancy grew, but mostly as a function of increased survival of childhood.
I'm not so sure a French citizen would see it that way.
A near-field radiative heat transfer device
This is not going to scale. Lambdas are hella slow. The cold starts will kill you.
He took the beer because he wanted it. "Perverse incentives" are an excuse, because nobody is going to kill their production servers and all the panic that entails for like $10 worth of beer.
An _acceptable_ python!? More like Python is an unacceptable Racket.

Racket is an absolute joy to use.
and the problem is?

A company might raise prices to pay for an increased dividend. Companies have threatened the very existence of the company, or made a loss to pay increasing dividend.
Detecting Phishing with SPF Macros
Taking down Twitter could be a huge boon for the economy, though.
And any program running in an X11 session can fake keystrokes and thereby escalate privileges in a similar fashion. It's not exactly a vulnerability unique to tmux.
For a simpler view of things, there's also https://downforeveryoneorjustme.com
https://www.reddit.com/r/netsec/comments/cblfom/detecting_ph...
In Ancient Rome, where your namesake hails from, wouldn't a superwealthy individual(corporation) be considered obligated to use that accumulated wealth in part to provide for the public infrastructure?
Surely you know what that first sentence sounds like :)
#4

I work at Facebook. I worked at Twitter. I worked at CloudFlare. The answer is nothing other than #4.

#1 has the right premise but the wrong conclusion. Software complexity will continue escalating until it drops by either commoditization or redefining problems. Companies at the scale of FAANG(+T) continually accumulate tech debt in pockets and they eventually become the biggest threats to availability. Not the new shiny things. The sinusoidal pattern of exposure will continue.
> I don't necessarily disagree with your theory on design, but every complex war machine ... has some level of controls that if used improperly could be fatal. They are inherently dangerous systems.

I would also imagine that if you make a weapon too safe - then it either can cease to be a weapon, or by the time you remove the controls which turns it from "safe" to "unsafe" - you might already be captured/dead.

It's kinda like some initiatives out there to make it so that owners of guns have to store their guns unloaded in gun safes, with trigger locks, and ammo in separate locked containers.

In the (hopefully low probability) event that you need that weapon (perhaps a home invasion or such), by the time you are able to get to it and go through all the steps to make the gun usable - you're probably already dead.

Of course, I understand the logic and want behind such protections (to protect children, curious adults, to potentially keep the weapons out of thieves hands, etc) - but at the same time, I also understand and sympathize with the arguments against such controls.

There needs to be a balance between making such weapons safe, while also letting them become unsafe quickly when needed. In the case of military hardware, this balance also requires thoughtfulness about the destructive capability of the weapons involved; for instance, safety vs usability will be different for a rocket launcher, versus a nuclear missile.
Use

softwareupdate -l --include-config-data

To list available updates, then adjust the command with the MRTConfigData version Apple provides for you.
Why not have it run against a replicated copy? I did that in the past, works amazingly, they can f* up all they want without any implications.
For a second I thought the title was "How Brazzers Hires Product Managers".
Writers and Pellets: How Randomness, Success, and Art Can Drive You Crazy
Studies Show 3% of Drivers Swerve to Hit Snakes and Turtles
Is that the same for criminal prosecution?
I don't care about the taxes so much. It's the linkage to my online personas that I care about. And I just don't want to deal with questions that might touch on them. Because I know a little about interrogation, and I know the risks of lying to investigators.

And the freakiest thing is that I have no idea what sorts of investigations some of my personas might be part of. I'm a decent guy, myself. And much of my Bitcoin came from writing, mostly for IVPN.

But I've also done some consulting with other anonymous cowards. I'm adamant about not wanting to know anything about what clients are doing. But I gotta wonder, sometimes.

So anyway, keeping online and meatspace finances totally separate is just part of my OPSEC.
Is that a reference to the Black Mirror episode?
It became the formal gathering place once Twitter bent the knee and started handing out blue checkmarks like candy to every low-level media personality basically on-demand.

At some media companies, getting you your blue checkmark is part of the HR on-boarding process, ffs.

Journalists are clearly the heaviest, most important Twitter users at this point.
Works fine for me. Lucky i guess.
What a wild assumption, that the Transport Security Agency's purpose is security...

> I am almost 100% certain that there are and have been many, many programs in the past that have lasted for a far longer period of time than the TSA has so far, which were/are less than or equal to 5% effectiveness for their supposed purpose.

Why is it OK to make this assumption but not assume that the TSA is trying to to their job, even if their success is disputed?
Conductive Graphene Materials: Bacterial Reduction Using Shewanella Oneidensis
An attacker could also ptrace into a shell, do mitm with an extra pseudo terminal when the user types su or sudo, and grab the password.

The permission model used in UNIX is just that weak. This is why there's so much going on around capability-based operating systems (mostly built around 3rd generation microkernels such as seL4), like Genode.
Is this the neo-nazi Twitter alternative?
I also have. idlewords' post is one of the funniest things I've read this week.
This is the time it takes for news in major subreddits to gather enough votes on the "new" tab to make it to the main subreddit front page, then the actual front page.

Smaller subreddits seem to be less affected by this, which is why /r/toosoon (a subreddit dedicated to dark humor related to current events) is often surfaces news hours before other subs for people who have it in their subreddit list.
The common retort is "they record everything and then upload it all when you use the wake word". The people who say that clearly don't understand audio file sizes (unless Amazon has invented a new, secret, super compressed audio format).
Relating to 1: https://www.youtube.com/watch?v=pW-SOdj4Kkk
(Jonathan Blow's "Preventing the Collapse of Civilization"... perhaps a melodramatic title, but well-said overall.)
Indeed, the usual motivation to try and be called a hero for putting out the fire you started is much more valuable than free booze: a title promotion with a pay bump.
Or we just managed to construct the biggest circular dependency ever using the whole internet and a combination of all hyped languages and frameworks.

That would in turn lead to an insanely fragile system with increasing amounts of failures that seem unexplainable/weird.
They do that already and they mention it in comments in this thread. The photo on their website is from there.
They didn't remove the application. They removed the mechanism by which that application was circumventing user intervention (which does actually remove the application). It's almost like a company refusing to take chinless credit cards to stop fake credit card use. They didn't do anything to the credit cards themselves to make the valid ones invalid. They just updated their policies to exclude the ones that could be abused.
Thanks for this. I have updated the broken links.

While I do appreciate the role of a proper citation, I'm reluctant to do it for blog posts (as opposed to my actual papers) both because it's time consuming and because for most people, links are a more natural and readable format.
Companies raise prices based on demand curve, not cost.
softwareupdate --history --all | grep MRT

MRTConfigData 1.45 2019-07-11, 13:10:59 softwareupdated
> their need to signal the world how special they are and how important their interests are

Honestly, the compulsion to accuse others of narcissism for something as harmless as putting stickers on their personal property screams "LOOK AT ME, I'M SPECIAL" much more.
Under the guise of preventing the ops team from being incentivized to create outages, he was selflessly stealing all the nice beer for himself.
Your breakdown really is the best one I've seen, but I wonder if your lower class might be broken into two groups, stealing a bit from your middle class:

- poverty: living on welfare, food stamps, and federal subsidized housing

- lower class: hourly wages, working two jobs to make ends meet

- middle class: salaried workers

- upper class: live off of investment income
Great suggestions! Thanks
The Google ecosystem can drown in bleach for all I care. F-Droid is not bad at all. Downloading apps from the Google store is an awful experience because on that store it's the norm for damn near every application to spy on you to the fullest extent possible. On f-droid, applications the typical application is a good citizen. It's a lower stress experience and a better appstore than either Google or Apple, unless you desire specific closed source software in which case it's no longer an option.

Try this: On Google's Appstore, find a flashlight app that doesn't upload your contacts. Now on F-droid, try to find one that does. This is not an easy challenge!
Well I just tried this in my text-based browser on my Commodore 64 and it looks terrible
> given that those companies lie constantly, I'm not sure why I would trust their own PR

The only reference that would be credible would be something from the company, so if you don't believe them, then it wouldn't really matter, would it?
I don't have enough time to give you the response you deserve for the time you've taken, but I do appreciate your insight and will think on it.

As all parts of culture, the concept of white privilege is extremely vague, and I imagine white Milwaukee trailer park residents would be a bit offended to be lectured about their privilege. Hence why I would prefer we spend our time focusing more on socioeconomic factors of humanity rather than genetics - it just seems more useful.

I may return to edit this if I have time today but if not thank you for this discussion.
Do we consider it a vulnerability to put "alias sudo=sudo rm -rf /" in your shell config too?

How about ptrace(), depending on how your system is configured, an attacker running under your own user account could do similar damage to any process you run, make your browser display fake login forms, steal saved application passwords, etc.

Once someone has access to your the user account of someone with sudo it's game over, there's just too many ways to elevate, I couldn't even name them all. They could even just straight up "tmux attach -d" and steal your logged in root shell.
Continuous ultra-lightweight multi-purpose super-aligned carbon nanotube tape
Less likely since it looks fine from GCP status page.

Hmm, it seems that Twitter already figured it out, configuration change issues again.
That makes sense when (as in the old days) you have one window per web page, but most people these days have a single window (or a few) with lots of tabs inside that window. You don't want to adapt the window to one particular site when the window is shared for many other sites (for which that site's comfortable size might not be a comfortable size).
Yes, the cobra effect exists. Should this mean that everyone needs to stop all forms of positive reinforcement? I don't believe so.

I doubt anyone would risk a comfortable job at Twitter against a few bottles of beers. Even if they are really fancy, that's what... $20-50?

If this had been worded as a "Haha, I stole the bad team's beer" I would have laughed.

However, worded as "where is my reward for being smart and stopping the cobra effect?" that's just an humble brag and plain unfunny.
Tithe.

And even if I couldn't name a tax that was repealed, many are way lower than in the past.

Peasants would rebel because they'd be taxed to (literal!) death.
It's designed for teaching, but I don't think it runs anywhere other than in a browser?
New York City is comprised of the five boroughs, not just Manhattan.
Only one thing to add:

Tech debt is accrued in amounts where every VC fund would get wet pants if tech debt was worth dollars paid out.
In response to a deleted comment that said the following. [2]

Google is not training one language model, but many of them (I'd estimate ~70 language models from the voice settings menu on my phone). So 0.2% in total doesn't sound too unrealistic to me as this should be closer to 0.002% per language.

There is a large variation of the number of speakers between different languages. What would they want to do? Aim for the same number of training points for each language? Then for a language with 20 times fewer speakers - Thai compared to English - they would have to look at 4 % [1] of all interactions in Thai. Add to this that the distribution across languages is most likely very skewed, i.e. languages spoken in poorer regions of the world have a lot fewer users than languages spoken in richer regions.

Or maybe they want more training points for more frequently used languages, then, if they aim for a number of training points proportional to the number of interactions, every interaction has a 0.2 % chance of being used as a training sample regardless of the language. If you perform two interactions per day - and I will happily admit that I have not the slightest clue whether this is even on the right order of magnitude, I have never used any such system - then you reach 500 interaction within one year, which means that after one year of usage you have a reasonable chance that at least one of your interactions has become a training point.

[1] Probably not actually true because due the large number of English speakers the percentage for English would most likely be less than 0.2 % but right now I can not be bothered figuring out the correct numbers.

[2] Meta question - would this generally be consider acceptable without naming the user that made the comment? Or should deleted be deleted?
It will create a local market opportunity if FB, etc, pull out. See Austin vs. Uber - the absence of ride-shares launched local alternatives that quickly took that marketshare until the locality changed it's stance.

It will likely act much like a tariff as I doubt any of these megacorps will pull out.
What's its edge in some understandable units (e.g. BB/hand)?

This doesn't mean anything:

> If each chip was worth a dollar, Pluribus would have won an average of about $5 per hand and would have made about $1,000/hour playing against five human players.
Probably because we all use Kubernetes and YAML files and 100% of configuration failures are "oh shit, I used two spaces instead of 4, we're fucked".
Amazon does not deliver packages. A local delivery company in France does. They pay local taxes (corp, gas, etc) which are passed on to Amazon when Amazon pays for shipping.
Operant conditioning is a thing and it works.

While I and you would not do this I’m afraid that it would somehow find a way to work in this case too.
Innocent woman arrested in false-positive in facial recognition system in Brazil
An innocent woman was arrested today (while working in an informal job without any personally identifiable documentation) in Rio de Janeiro. The automated facial recognition systems (FRS) identified her as another woman, wanted for murder - it turns out the actual criminal is _already in jail_ and the police organization operating the FRS wasn't informed about it yet due to delays between the systems.

This is the second day of operation of the system, according to the press. However, a restricted version of the same FRS was used for 15 days during the Carnaval festivities with no alarming failures and reportedly resulted in a few arrests.

It has now been deployed in 25 locations in Copacabana. (Anedoctally, I live here and can't tell you where they are - the equipment, cameras, etc. must be well hidden, or I'm terrible at spotting them).

Source, in Portuguese:
"Facial recognition fails in its second day and innocent woman confused with criminal is arrested"
https://oglobo.globo.com/rio/reconhecimento-facial-falha-em-segundo-dia-mulher-inocente-confundida-com-criminosa-ja-presa-23798913

Related previous submission (with zero comments): https://news.ycombinator.com/item?id=19074434
>the users themselves having no knowledge or any say about it.

This is not true. You can disable all the automatic updates in System Preferences.
Already did that here:
https://news.ycombinator.com/item?id=20356610
(replying to sibling)

Some do.

Source: I'm French and I do :)
How long until a slightly worse version of this model is reverse engineered and appears at every table in online poker?