skysight-inc/HackerNews huggingface dataset:
This is the more important point, realistically. I think I probably would've been better off saying 'lock-free is not a panacea.'

All in all, scaling up contentious operations is hard.
String#padStart already exists: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
A Look at Overnight Stays at US National Parks
That's not the case in the UK - we don't have any single government issued identity document/card that everyone has to have.
I'm sorry but technical knowledge and feelings are just two completely different aspects. BOTH are required, you can't just simply get stuff done by being a nice guy.
UK taxpayers funded GTA V devs by £42m while biz paid no corporate taxes
The difference is those suicides at Foxconn are for one reason only, working conditions.

Meanwhile the general suicide rate in China is for any number of reasons.

Playing a pure numbers game with peoples lives is distasteful.
Yes. Even better than that, atomic instructions are usually completely local to a core. I think that the only interaction with with the coherency protocol is that a core is guaranteed to be able to hold a cache in exclusive mode long enough to execute an RMW (and even that it is not really required, but useful to guarantee forward progress).
From what I did understand, that's not what the author of the article meant. He wants to enforce a style that guarantees exactly how the file is formatted.
Utopia solutions aren't really helpful for ideas.

It's great if companies had unlimited resources to spend on security, and didn't screw their customers with fees.

Let me remind you, even Apple had their phone hacked. More laws won't make mistakes go away.
Sizzy – The Browser for Developers and Designers
Because they went bust. Only then Fitbit bought what they deemed valuable.
They probably have approved vendors for their data and SOPs in their DCA and it had information on how to configure it for the cloud and there are signatures and so on. But, it’s unclear whether they took into account rouge internal threats.

Be this on S3 or on your private assets, without proper controls for internal threats these things have a likelihood to happen.
The plan to release today from their meeting notes: https://devtalk.blender.org/t/29-july-2019/8498
I've mentioned this more often, but at least in my part of the EU legal insurance is both common and affordable. My insurance helps me out with events over € 250 for about € 200 a year. That's perhaps still unwise in the grand scheme, but I'm easily affronted by corporations and they've helped me out in consumer claims more than once, even picked up the tab for a new home appliance once without going to court. If I ever have a big legal battle European jurisprudence stipulates I can get a specialized lawyer and about € 15k in legal fees to burn.
I'm very uneasy with allowing Google to have control of even more sensors
This playground was an annual end of the school year field trip starting in grade 1.

It had a diverse range of activities and catered to children of different ages, abilities and confidence.

The playground had staff (so it wasn’t complete chaos at the most popular spots) but they definitely had a laissez-faire attitude and let the kids do pretty much anything.

Our teachers would ‘supervise’ but it was so large without clear sight lines that I can remember them staying mostly by the front entrance to prevent us from leaving and helping us find our shoes as we were leaving.

Minor injuries were expected (there was a first aid tent). I definitely fell down, scraped my knees and got soaking wet. Over the years, my classmates had some more serious injuries (including a broken arm, lost tooth and stitches). Despite the injuries my school still let us go back the following year...

Getting a place like this built again would be impossible given liability.

Also, schools are allergic to anything involving minor injuries, water and places where all kids can’t be seen.
Well, youtube was good for me when I needed to pull the blower motor out of my jeep.
Oh brother.

>In today's times human attention is arguably the most valuable 'commodity' there is.

No it isn't.

https://www.cdc.gov/healthywater/global/wash_statistics.html

You need to just not bother with social commentary again.
It's worth observing that successful tech firms like Google insist that PMs have computer science degrees and are former developers. Exactly to avoid this issue.
This line of thinking doesn't work. I want to agree with you, but I can't. An executive could do all the right things by promoting and pushing for security in their organisation and still be hacked. Should he/she face jail now?
Looking at the source code for at least the first example [0] it looks like a simple $('form').submit() would work just as well. It's all the library is doing internally (after some HTML5 form validation checks)

I suspect most slider captcha's out there are doing something similar or at the very most setting a hidden field to "true" or "1" etc. Very few are probably fingerprinting your mouse/touch movements to actually validate you're a real human being.

[0] https://github.com/kthornbloom/slide-to-submit/blob/master/j...
Even to main memory there is not necessarily a single memory bus. Intracore or even intrasocket synchronization need not (and usually doesn't) go through main memory anyway.
Seems like a real missed opportunity to look at the Python stdlib and add a bunch of missing functionality to JS so that people don't have to import a metric ton of third party libraries (or worse, write it themselves) to add something you get for free in most other scripting languages.

Even the trim operations they added fall short of the target. In Python (and tcl, by the way) you can specify which characters to trim.

So close, yet, so far.
The news is that those people can now afford to have a phone to start with.

And for a large majority even that feature phone is the first kind of computing device they ever own.
I recently wrote a fairly useful script and the key for me was to construct strings using jq, which were then parseable by stuff it was streamed to.

https://stedolan.github.io/jq/manual/#example13

Basicalky, I converted each JSON object passed in into a bunch of delimiter separated lines.
Given that we carry the genetic legacy of all these Hominin species, are we still homo-sapiens?

Should modern humans be classified as something else, distinct from the original pre-interbreeding homo-sapiens?

If so, given how randy we have been, I propose Homo-Amatorius.
Phablet means something distinctly different; it’s a phone that’s so large that it’s verging in being a tablet. Usually thing means a between 5” and 6” screen.

By your definition the original iPhone (3.5” screen) was a phablet.
That Function.prototype.toString change is probably going to break some Angular.js code who relies on scanning function argument names for dependency injection.
This is the devils bargain that the society has accepted.

Small number of customers getting horrible service or getting stuck into Kafkaesque situations is the negative externality from high productivity and low prices.
Just because you talk to 10 people does not mean that humans make decisions. Those people just reading decisions from computer screen that computerized domain logic (aka business logic) has decided.

Fedex is in bulk shipping business where every cent of efficiency is squeezed out from by refining the process. There is no room for human decisions in individual cases.
In USSR they were numbered: two digit serial number was printed on blank cards. I'm not that old, but used punch cards were used for note taking in my local library in 90's.
DynamicOC – iOS hotfix library based on flex/yacc
SoundCloud: Building a Habit-Forming Product
How long before owning a breach databases requires a license in order to avoid a criminal charge? I have to imagine that access to breach info from other sources greatly reduces the work necessary to pull off another breach as users typically use the same "highly secure password" across most, if not all of their online and work accounts. All you need is one breach with weak password hashing -- or no hashing or encryption -- to provide an electronic skeleton key to intruders. The more breaches that occur, I think the more we'll see.

Just curious: if a prior breach, for example the Equifax breach, yields data that enables a future breach like Capital One's, can Equifax be held liable for damage to Capital One?
This seems misguided to me. How do you get people into an ecosystem like this that is totally isolated.

If I'm a startup am I going to choose a language that has no developer base and no experienced devs and no ecosystem, without git, that's closed source so I can avoid hiring some devops manpower?

It seems like only a company with a massive builtin captive audience could pull this off. This makes it feel like they are doing this to be acquired which makes the whole thing even less appealing.
I can second the recommendation for Deep Work, but it’s not the end of the story. Richard Hamming points out in You and Your Research that the researchers who were open to distraction tended to do a better job figuring out what to work on. In Programming as Theory Building, Peter Naur argues that the primary focus on a programming team should be developing a shared understanding of the problem space in which the program will operate.

While I’ve never worked in an XP team, the description here sounds like it’s primarily focused on making sure the individual members of the team aren’t accidentally working against each other. For projects that aren’t reliant on the sort of insight that Deep Work is teaching us to generate, the team cohesion may be able to make up for the hit to individual productivity.
For what it is worth, Australia has 5 minute generator dispatch, but 30 minute settlement. The market operator is presently implementing a project to bring settlement to 5 minute as well.
Basically, I gathered from the indictment that they had a 'WAF misconfiguration', which I take to be SSRF allowing her to obtain temporary AWS credentials from the metadata endpoint, which have the WAF role they talked about, which has sufficient permissions to list buckets and download files etc.
It's almost as if the more and more you compensate your c-suite execs with your own shares, the more you would expect to see them chasing short-term profits regardless of the degradation of firm longevity...
I never understood why so many companies prefer to be contacted by phone. I don't have a speech disorder, but I just don't like using the phone. Shouldn't interactions by email or chat be more efficient for companies as well?
The UK is a special case and will not be "Europe" for long besides. Homogenisation of rules can take a while, especially when there is a cultural aversion to them. In this case I'd say there simply has not been enough time for this to happen.
No, it's broken code and doesn't effectively do anything.
If gold is 50mm a ton (wouldn't be of they had to liquidate that), rounding up, then they have at most 100 billion in Gold. Which sounds like a lot until you realize they have many trillions in USD reserves and debt.
Let's not forget this happened: http://www.nintendolife.com/news/2017/02/usps_recovers_lost_...

Their initial response? A mere shrug and halfhearted condolences.

I've had a package lost through eBay's Global Shipping program. It was a very hard-to-find add-on for my car stereo and I found one in America. A few days after it shipped, tracking data ended just outside NY. A few days later, I pinged them, asking where my package was - after all, the tracking data was scanned at each location, it gave a reasonable pinpoint for the last known location. Instead, overnight, I was refunded and the case was closed. I didn't ask for that, I asked them to find my package, but they washed their hands of it; I wanted the thing I bought, not the money back, but it mattered not. What's the point in tracking packages if they can't even use it when it's needed most!

It was also infuriatingly difficult finding the right place to ask a question now that companies are running their own shipping segments. They're neatly hidden in amongst the massive company logistics.
Pardon me asking but since this setting is on the client, how one is sure that it is even considered/respected on the server?
Technically most of this is not even language changes but simple changes to the standard apis. E.g. flatMap is something I've missed and worked around by implementing it myself a few times. Not a big deal and nice that they added it. In any case, I use typescript by default now and have converted most of the code I care about at this point. I think most of this improves typescript as well so; overall a good thing.
You are asking me to prove that humans are smarter than elephants? It makes for an interesting philosophical debate, but that is all it really will be. Kind of like me asking you to prove you are smarter than a rock, or that you are really conscious.
I did a somewhat similar bit of historical story-telling a few years ago: https://greenash.net.au/thoughts/2013/04/money-the-ongoing-e...

And came to pretty similar conclusions, in particular, that modern fiat money is quite worthless!
Regardless of the chosen value of x, Why do people feel the need to assign others to one of x boxes at all?
iOS feature to disable Touch ID / Face ID used by protesters in Hong Kong
But you can nail those things down before coding begins, just through talking with them. You don't need to literally change the code completely every week - iterating a plan is much easier than iterating a codebase!
Having wide open access to customer details with full ability to read/write on the open internet..? That seems like it should be stretching the Computer Misuse too far, but yes, your're right.
Mauritius Files:How Sequoia India Dodged Indian Taxes Through Offshore Accounts
I assume by "collapse" you mean economic and social breakdown provoked by climate change and other chaotic forces. In which case most people will die of starvation, and the world will become very nasty indeed.

I agree that modern society is very sick, but I don't think it's productive to look forward to the day when it all falls through. I do not aspire to die of starvation, or (if I survive) to live in feudal society of medieval technology. No matter how much exercise and fresh air I get. We need to think of a way to heal ourselves without losing the social and technological progress we have made.
Or you make quality explicit and let the customer decide: do you want Ikea furniture, or do you buy your furniture from a top tier furniture brand? Do you buy kia, ford, Rolls Royce?

You want the level of quality the customer cares about.

Quality is not an absolute thing: you either have quality or not. Quality is a range, from very bad quality with no validation to 100% full coverage, full testing, works in all situations.

Usually customers are not willing to pay for 100% and as a business you do not have the time nor budget to build for a 100% quality.
I'm not a botanist, but if they are experiencing drought then how will these newly planted trees survive? According to the article they are so low on water they are slashing output on their hydro-power system and ceasing electricity exports.
Usually because it provides an opportunity to upsell. Or to answer any questions in a synchronous fashion.

Great for sales and preventing abandonment - but not great for simple or routine transactions.
China’s ByteDance is developing a smartphone
Nope. You're irrelevant unless they legally have to talk to you /s.
Fossil-Free Energy Supply Gives Sweden Edge in Green Steel Race
> elaborate heating/cooling systems

Nearly every car over 10 years old has failed AC. In most EV cars, the AC is critical to maintaining battery health. I could imagine a failed AC unit causing the battery to over/under heat, and the resulting damage causing the entire car be scrapped.
"I've spent a week cosplaying as a disabled user. And I hate it"
Specifying Distributed Systems with TLA+ (London, UK)
If you are interested in this new feature phones running KaiOS, I recommend taking a look at the BananaHackers website[1] and twitter account[2].

Some of those devices (such as the Jio phone shown in the article) can be jailbroken to support a lot more applications.

[1]: https://sites.google.com/view/bananahackers/home
[2]: https://twitter.com/BananaHackers
MSVC Back End Updates in Visual Studio 2019 Version 16.2
I believe all animals definitely have some sort of language, and that the complexity of a language depends on its utility in facilitating everyday interactions and activities. What are the most complex activities you've seen elephants get up to?
I'll preface this by saying that I haven't seen any official resources confirming that it was an S3 bucket issue (although the statement from hacker mentioned releasing "buckets" so it very well could be).

S3 provides server side encryption that encrypts the files at rest. This is done entirely on the server side and does not require any additional keys from the client. However, it is possible to do your own file encryption using your own keys ahead of time, but I imagine that a very small subset of AWS users actually do that.

The way these hacks usually happen is that someone configures the bucket to enable public access, either to the entire bucket or certain files within it, and then someone stumbles upon the bucket's endpoint.

The mitigation is simply not to configure your buckets to be publicly available. That used to be relatively more difficult than it sounds because of a confusing S3 UI, but AWS has recently pushed a number of changes that try to address this issue, including putting a very clear "Public" label next to buckets with these settings, sending emails to users with public buckets, and providing configurations that allow account owners to prevent users from setting buckets to public access.

Some articles are referencing a WAF configuration issue, in which case the above may not fully apply here. The commenter below me mentioned the use of temporary AWS access keys, which can be obtained from an internal AWS service known as the metadata endpoint. Typically this endpoint is only accessible from EC2 nodes (or services that rely on EC2 like Lambda or CodeBuild) and allows AWS to deliver short-lived credentials to the node that can rotate frequently. If this truly was the issue, then it's possible a WAF issue allowed the remote attacker to query the internal endpoint from an external source and obtain credentials that were previously only available to the node itself. From there, the attacker could make AWS API calls to the S3 buckets and download the files.
Having everything locked down by default on AWS/Azure/GCP would go a long way to improving the security of the internet. Centralisation isn't healthy, but at least these companies could make a credible impact on data security by pushing the mentality.
"Separately, Japan, which said it had also scrambled fighter aircraft to intercept the Russian and Chinese planes, lodged a complaint with both South Korea and Russia over the incident, Chief Cabinet Secretary Yoshihide Suga said."
God cares – Join Him and care for others
There is a difference between not knowing what I need for an API next week and not knowing (vaguely) what I need for the business. My backlog stretches out about 4 months at the moment, but I don't do technical design until much, much later. But as a sibling post rightly points out, not all of the stories on my backlog are going to get done. 4 months is a long time and the business is hopefully gathering more and more data about what it needs. Frequently opportunities arise that overtake what I have in my backlog. Since I always have more in my backlog than I can actually do, that means that the stuff on the bottom drops off. If I were to estimate, I would say that about 1/3 of my 4 month backlog is practically 100%. It drops off to 0% by the end.
Project Tiny (2018)
I'm not familiar with this, what's the sellers business model then? Consumers easily get full refunds on fakes, no?
Not even close to the same.

Granted a misconfigured firewall is surprisingly close to data with no AuthZ/AuthN but the Equifax breach was an operation.

This should be punished but the level of ignorance from both sides highlight just how immature the community is and how little concern we have in handling PII.

Thermodynamics....make the path of least resistance more secure. I feel laws find that by following the money which they seemingly tried to do with equifax.

Surprisingly small fine but on the other side, I have seen many enterprises with numerous processes/controls in place where it wasn't so easy to identify the security through obscurity that was going on.

There's a longer conversation to be had here.
Without subpoenaing Apple, it seems like blind trust to me.
The problem is that he is making money of the back of the recording of the musical work that has been registered as copyrighted material. That’s literally the whole point of copyright. Someone is making money off my musical work? I deserve to be remunerated for its use. (Very high level description).

If it’s Someone whistling an on the fly melody then that’s fine. The musical work isn’t registered as being copyrighted. It’s just some bloke/lady whistling. So that doesn’t count and is totally fine.

If they were whistling a popular tune, well, that’s getting into the whole idea of arrangements. They’ve created a new arrangement of the musical work, which might be copyrighted. Depends on context with arrangements.

If this were a holiday video he shared with friends and family, it would totally fall under fair use. He’s not making money off the back of it.

As to all the other signs etc, no idea. My background is music copyright.
The two named species from the research are Homo sapiens denisova and Homo sapiens neanderthalensis. We're Homo sapiens sapiens, because we ate the wise-wise fruit.

(The other two are nameless data ghosts at this point, due to lack of corresponding archeological records, but presumably Homo sapiens whateveris and Homo sapiens someotheris.)

It's kind of open to debate whether those should be independent species, or their own species, but basically we're all Homo sapiens of one sort or another unless you want to get into a long unresolvable highly technical argument about it, which revolves around what precise definition of "species" is useful in some arbitrary context.
Ever since I came across Paul Graham's blog article a couple days ago on PR stories and how ubiquitous they are, I have been on the lookout for them. And this is a PR funded/fed story.

Sorry. Article on KaiOS came up a few months back. This is a rewrite.
Why did they create a flatMap method? What is wrong with .map(...).flat()? Can they improve the performance by combining it that much?
I think that says a lot about how much vested interest powerful people have in enforcing copyright law.
One of many basic cultural differences between the UK and the EU. In the EU you must give up your biometrics (fingerprint) by law. Doesn't surprise me that they are leaving.
Deploying Facebook's 'Like' button on your website makes you a data controller
I see what you're saying - for me, my experience with Java checked exceptions put me off the idea.

In Java it led to lots of exception wrapping and leaky abstractions.

Not sure what the answer is - although my golang experience was better.
A typical pattern is to accept orders electronically but cancellations only by phone between 1:00 pm and 1:12 pm.
Here are a couple of codebases

https://medium.com/@012parth/what-source-code-is-worth-study...
I am no fan of code formatters. Code formatters will yield a formatting quality that one could call 'sufficient' but never a quality that could be considered 'good'. 'sufficient' is quite a bit less readable than 'good'.
But your identity is verified through some means when opening an account, even if there is no unique document, no?

Example https://www.tsb.co.uk/current-accounts/faqs/identity/