skysight-inc/HackerNews huggingface dataset:
It's interesting that we're still in a place in 2019, where one motivated attacker, can compromise the security of major corporations, and access sensitive systems and data, and that those corporations don't realise/react to the breach until notified by external parties.

For security to improve, there needs to be a "mess up tolerance" of more than one (i.e. if a single mistake/vulnerability causes a major loss, you're in trouble)

Mistakes happen, vulnerabilities happen, security required defense in depth to be effective.
Or China, where the iPhone is wildly popular (even if the popularity has been decreasing recently).
2k Chinese CCTV Cameras in US Government Buildings
Again, just for the sake of playing Devil's Advocate, the fact that we rely entirely upon such helpers (and the overwhelming number of mutually exclusive options available) is a potential indicator that we're making it more complex than we have to[1].

The syntactic sugar that we're adding to make our own jobs easier is arguably making things disproportionately more difficult for anyone who doesn't already have the same baseline level of knowledge. That includes those who are trying to learn to do our jobs after we've all moved on. That would notably have also included all of us, earlier in our careers.

I'm just suggesting that it's worth considering whether that seems sustainable in the long run.

[1] ... for relatively simple tasks. Complex tooling happens to be a very good tool for complex tasks, like the sort of professional work that you seem to be referring to. No matter how good our hammer may be, however, not every task always wants to be a nail. create-react-app and parcel are examples of excellent hammers.
Yes, that's why you disclose if they don't do that. Not if they do.
Holding one's tongue is a social tool that makes meaningful collaboration between dissimilar parties possible. Having the space to speak freely is undeniably a liberty worth defending. But it's important to remain conscious of the difference between being silenced by force and being gracious by custom.

This is a good point. What I meant by Must hold your tongue is that all of "the space to speak freely" is being systematically denied to wholesale groups of people. (In particular, if one's response to speech being systematically denied to wholesale groups of people, is to turn around and systematically deny speech to wholesale groups of people, one is part of the problem.)

The freedom to speak openly is a means to an end, not an end unto itself.

True. As in many things, there is balance. A problem with accumulating too much power, is that it enables one to create such imbalances, while insulating one from the information the imbalance is happening.
I want to live in a world where everyone is confident in themselves and doesn't care what others think about superficial details outside of character.

In the far-far future that may never come, I imagine people exist in a virtual continuum and can change all aspects of their appearance such that they never feel slighted by their perceived place in a fitness gradient they cannot change.

Maybe technology is helping us get there. Or maybe it's showing the deep facets of our evolutionary makeup and our learned societal pressures, and we're incapable of doing anything but pay it lip service.

Being human animals kind of sucks, because intellectually we strive for more. But we're tied to these basal frames.
Heavily integrated with proprietary services is definitely not what the "linux on the desktop" crowd wants.
Pyramid of Automation (Credit: Thomas536)
The key problem is that DNA sequencing for individuals is not useful (yet) for that individual. Right now DNA sequencing is useful for scientific research and for industrial research. But the current price is basically fine for that; it isn't anywhere near the main component of the cost of research.

If there were a reason to get the DNA of each American sequenced, the price would go down drastically. Like if there was any real medical usefulness of having your DNA sequenced. But right now there isn't.

It's kind of like the Apple I era of personal computing. It's finally cheap enough that individuals can get this technology themselves. There just isn't really a great reason to, besides interested hobbyists.
Ecosia.com, if you want to save the world. ;)
Walking NYC (Narrated): Stone Street
Yes... The screen shot in the article looks a lot more like the 'filter' in use is actually another actress. Though I'd love to be proven wrong.
You must have not learned how to use it then. That, or we have different definitions of the word "clumsy". It has absolutely nothing in common with Gimp, so that makes me wonder if you used it at all.

> Aesthetically pleasant? Absolutely not

That's subjective, but it did support themes and DPI scaling.
Facebook
Hack into a Facebook password
Not that I know of -- there are just browsers that don't send out some stuff because they don't have the capability to detect it. You could do some more header-stripping with extensions and proxies, but in the end, like with cookies, this is stuff that a website might need to actually work properly.
Harrison Ford: “If We Don't Protect Nature We Can't Protect Ourselves” [video]
Ask HN: Can you give an example where you failed well?
This article outlines how to run FFmpeg on AWS Lambda:
https://intoli.com/blog/transcoding-on-aws-lambda/
With favorable cost comparisons to Elastic Transcoder. Not self-hosted, but looks like significant cost improvement. Also, one could set up a 'transcode farm' with virtual/real machines using FFmpeg running parallel with some light scripting for automation. Looking up 'render farm' might yield some ideas for distributed image computation. Just some ideas...
The branching example is very tempting when you have a product that is used on site by multiple customers. Customer A asks for some change that impacts customer B. Without good tests the easiest thing to do is fork the world for A and B, so the changes only impact one. Then you gradually drift apart. Add customer C, D, E... and it gets really fun.

With multiple repos it gets even crazier. You have forks for A and B that work with some other software repo, maybe common, maybe forked itself. Soon you have wiki pages with compatibility matrices, common libraries that mysteriously break with minor changes despite being battle tested ... for some set of versions.
I used to feel what you likely feel about paying for news—why would i pay for this when some other site will have it up for free or with ads, capitalism at work, competition driving the price down to reasonable levels, etc...

Then I realized after seeing what has happened as the masses all came online, while many of us here can probably distinguish between a reliable news source and a hack site or a propaganda outlet—a disturbingly large segment of the population can not.

And to make matters worse, there seems to be a huge number of people who don’t realize they don’t have what it takes to do reliable research to write a story and they don’t have what it takes to understand nuanced subjects in order to explain the subject to readers. Or even worse, they fully realize how ill-equipped they are but don’t care because vulnerable people will still click their ads.

Long story short, I now have just short of 20 subscriptions. Including a few that I rarely read but to me it’s worth it. The collective We really need to increase the signal levels in order to hear over the noise.

Journalism is definitely one of those cases where The Market can easily lead to a race to the bottom situation. Hopefully we’ll see it correct and good journalism will overtake trash, but wow what a rough spot.
Privacy and security are different concepts.
If you count Ben Shapiro RTs, then sure. Otherwise, not so much.
I agree that there should be open source solutions and the core of Dotscience is a project called Dotmesh (https://github.com/dotmesh-io/dotmesh) which is an open source wrapper around ZFS. You can see more info about how this works and integrates with Dotscience at https://dotscience.com/technology/.

However I don't quite understand your point that "data versioning is not sufficient" because "I cannot roll back my datasets to a previous version". Surely data versioning would _solve_ the ability to roll your datasets back to a previous version? Or, are you not convinced of the need for reproducibility in data science? My rationale for this is the following: if you are building ML models that are going to make important decisions in production, it's imperative for debuggability that you're able to re-run that model training run later. If a model makes a bad decision in production, you need to know what dataset it was trained on, which means needing to be able to retrieve that dataset. That's because you can't isolate and fix the problem without being able to re-run it.

Yes, data changes and marches forwards, and that's why you should retrain models. But you also need to be able to go backwards to do robust ML. My 2 cents.

I also wrote a DevOps for ML Manifesto: https://dotscience.com/manifesto/

To summarize:

1. All models must be reproducible by someone else 6 months later.

2. All models must be accountable, that means you must be able to justify the basis on which they made their decision, in particular you need to know which data version was used and where it came from (provenance).

3. Model development must be collaborative. That means I need to be able fork a copy of your project and maintain all the metadata about which runs you did, with their respective provenance history.

4. Models must have a continuous lifecycle. You're not done when you ship - because models are about finding patterns in data, and the world is constantly changing, you need statistical monitoring and retraining to compensate for model drift.

Do you disagree? Did I miss anything? Let me know your thoughts!
Scrap Metal from Cloud Is Boon to Recycling Industry
Pixar are a bit of an Apple offshoot in the first place though. They are very likely to get Apple kit substantially cheaper than most.

"Steve wasn’t capable of being friends. That wasn’t his personality. Besides the Apple stuff, I had a lot to do with his Pixar thing. I was contacted by the people who became Pixar–I knew them well, and they wanted to get out of Lucasfilm. They called me up and asked me for advice, and so I said, I can talk to Steve. I explained very carefully to him who these people were, and you shouldn’t fuck around with them, like he did with his normal employees. He did a good job with them. [Pixar] was the most honest billion he ever made, because he put a lot of his own personal money into nurturing those guys. They got fabulous. That was Steve’s best hour."

Alan Kay - https://www.fastcompany.com/40435064/what-alan-kay-thinks-ab...
People who didn't circumvent the obvious spirit of the rules while complying with the letter of the rules are pissed off that there exist people who did just that, saved a bunch of money doing so and have an presumably clear conscience.

While I understand why these people are annoyed I don't have much sympathy. Always read and understand the fine print. Always read and understand the rules. If X is allowed and doing X would benefit you then you are shooting yourself in the foot by not doing X. If the people writing the rules don't like it then they have the power to change it. And no, I didn't take advantage of this but I knew of the loophole at the time, wish I did and I'm paying for my laziness every month.
I want an interview with someone who is willing to donate over a thousand dollars to a person they're watching talk on a webcam.
The first thing that comes to mind is a gist.
> So giving up custody is a legal way to express this situation in legal terms.

That's a different situation than the situation the article discusses. These kids are still receiving support while pretending not to (for financial gain).

The colleges are now asking if the student is still on their parent's health insurance and or getting their bills paid by their parents to combat the abuse they've been seeing.
The Sources of Early Christian Communism
Both books are the sheerest science fiction. Drexlerian "you can't prove I can't build this" is eternal goal poasting. Yeah, I can't prove someone won't eventually discover anti-gravity, faster than light travel or little green men in flying saucers. That doesn't mean serious people should waste even a second thinking about such nonsense.

Now a days, Drexler seems to make a living opinionating on "hard AI" -similar level of vaporware. I mean, whiggism is the default national religion of the US and the West in general, and I guess we need our preachers, but his career is preposterous, and the ideas he peddles are beyond snake oil.
The recent barrage of security bugs in iOS makes me wonder if Apple has been more lenient on their security posture in recent times.

It also shows that Google Project Zero is very successful in marketing their work. There are several other players reporting security bugs in iOS regularly, I see Tencent KeenLab, Pangu, Checkpoint, GaTech SSLab in the last two releases to name a few, but very few have achieved similar recognition as GPZ.
Balena raises $14.4M to simplify IoT device management
Well, they don't make a driver that does the OpenGL version needed
Great thanks. I had a look and couldn't really find anything either, you did better than me!
DigitalOcean's New CEO: "Why I'm So Excited to Join DO"
It really is brilliant. As others have pointed out, Google finds both vulnerabilities in its own products with project zero, as well in its competitors' products.

There is no reason to assume project zero is biased if one considers second order effects of this security research.

What kind of press releases get picked up by the media 9 out of 10 times? Not the ones about google finding flaws in google products. Google just makes clever use of the medias' bias for conflict.
There are quite a few making a living from live-streaming in the Anglosphere as well. I'm amazed that men send money. (OK, maybe amazed is the wrong word.)

I remember reading a while back about some controversy that some of the female live-streamers were being reported to the IRS for unreported income, with the IRS sending audit notices to them.
Hands-free communication without saying a word
What...why? I'm perfectly happy using linux on the desktop as my full time OS, as I have for more than a decade. I tried ChromeOS on chromebooks, and see nothing they offer me that I don't already have. Not to mention the privacy implications of using such an OS...
On casting Sir Patrick Stewart as Captain Picard:

Reporter: "Surely by the 24th century, they would have found a cure for male pattern baldness."

Rodenberry: "No, by the 24th century, no one will care."

I doubt even a few hundred years will wash out vanity and the worst parts of us, but here's to hoping.
I've assumed the etiquette is to only use the accessible stall if no others are available.
>I don't know that it's really testable or really applicable to anything

I haven't yet read the book and I'm not sure if it applies, but I found these papers interesting:

* "The case for mental duality" (DOI: https://doi.org/10.1017/S0140525X00007755)

* "The case against mental duality" (DOI: https://doi.org/10.1007/BF02686749)
Does anybody know some monorepo horror stories?

I have heard plenty of people complain about their many-repo structure and wishing for a monorepo. I would like to hear some concrete story where a monorepo went wrong. This article is just abstract opinion.
This is just a form of digital makeup. I predict that using a young attractive avatar will become the social norm and this sort of thing will be entirely unobjectionable within a decade.
5±3, if I remember right, but of indeterminate size. You can expand it to a couple dozen by moving up and down abstraction levels.

An exercise: I have 36 letters for you to memorize, in order and without mistakes: "The quick brown fox jumped over the lazy dog"

The sentence as a whole only uses 1 of those memory slots. As necessary, you can jump down one abstraction level to get 9 words, or again on a word-by-word basis to get the full 36 letters.

Code is the same. For example, use multiple slots to understand loop conditions, then file it away in a single slot as the whole conceptual loop. Use multiple slots to understand the loop body, in the context of one element; file it away as well. Combine them into a one-slot conceptual understanding of the whole loop. So on and so forth.

As you work with the conceptual models, you'll also end up with them in long-term memory and not have to do this reconstruction each time.

This pattern can continue indefinitely, with conceptual models of whole packages and systems. Most will do it unconsciously at that level as they become familiar with a codebase, but it works at every level, and is the basis of "running code in your head".
The Bitcoin Trading APIs for Cryptocurrency
The story of ping wouldn't be complete without a link to that book review: https://www.amazon.com/review/R2VDKZ4X1F992Q
> I want to live in a world where everyone is confident in themselves

This lady has plenty of confidence. She has as much confidence as any confidence man and was making plenty of money off of it.
so nothing is relevant beside money. I.e. if you pay me 1M $ a year, I will tolerate micromanagement, bullying, forced participation, etc.

There is no different between the market for tomatoes and the market for engineers.
For me it is a mystery how a product made all around the Mediterranean in antiquity died out almost completely. Why didn't people in southern France, for example, keep eating garum until the modern day? Was it just changing tastes, sudden loss of necessary ingredients due to breakdown in trade, or recognition that parasites inside fish could survive the garum-making process?
Energy consumption from production aside, if it means preventing more microplastics from entering the environments I think that in and of itself is a marginal win.

This is all based on the assumption that they are actually compostable and it doesn't get greenwashed like "organic"
This should send a clear message to all those people trying to look younger: use makeup.
I have trouble believing the fans didn't know at some point. The article implies they didn't, but also isn't specific.

Perhaps they knew but and the mystery was part of the show?

I haven't seen any software generally available that wouldn't be somewhat obvious that it is in use.
Yes, so it's not relevant.
> The idea that `object() < 13 < "hello world" < 3+2j < [(frozenset(), frozenset())] < {type: int}` should evaluate to anything but a TypeError is horrifying!

At least it evaluates to False.
I'm a guy and I have no idea why some guys throw ridiculous money at good looking girls online. You have no chance of meeting them, let alone anything else. If anything, throw money at not so good looking people, their lives are harder on average.
Not just the software, but the hardware is horribly crippled and outdated in the relentless pursuit of making a laptop the thickness of aluminum foil (or outrageously overpriced for a desktop cheese grater).
The vast majority of Chromebooks are completely useless without Google services. That's not exactly the "freedom" that the Linux community envisioned when they spoke about "The Year of Linux on the Desktop".
Yes, That's the very exotic scenario I had in mind:)
1) Some freak repeatedly vandalized a Wikipedia page. Editors reverted the vandalism, perpetrator stopped trying. If I understood all of this correctly, why is it not simply Wikipedia working as intended?

2) So, Russia and USA & Britain are involved in some recent and ongoing armed conflicts (all of them near Russian borders, I'd note). There's some difference in coverage of said conflicts between Russian and English Wikipedias, sure (though I skimmed the linked articles and didn't immediately notice blatant censorship on either side). And you cite that as Russians rewriting "all political and history pages"? Seriously?

3) The "lol" one is the coolest. "Ukrainian armed forces: 232,000 … 15,000 defected to Russia." Didn't see the figure before. If Russian Wikipedia was a worthy piece of pro-Russian propaganda, of course it would also have this figure in a prominent box. Alas, Russian Wikipedia is worse than English one at almost anything, including pro-Russian propaganda.
Yeah pretty much. And no one should be against this. This is allowing people to be who they want to be instead of being limited by who they are... It is no different than someone getting plastic surgery to change their appearance... which I guess some people still despise but I don't see it any differently from someone who is transgender and wants to get an operation and drugs to make them more like their chosen gender.
What do you mean by 'secure'? I just ran panopticlick in a fresh installation of Chrome on Windows in incognito mode. It returned a near-unique fingerprint with >14 bits of estimated entropy.

Of course, that makes total sense, because many of the factors that can identify your system have little to do with the browser, but are determined by the underlying system: fonts, display, date/time information, graphics fingerprints, etc.
Your Distributed Systems Fucking Suck
It's probably possible yes.

I don't know if one already exist for OpenGL, but for Vulkan there's MoltenVK: https://github.com/KhronosGroup/MoltenVK
Dr. Dot: Paint with a MIDI Fighter Twister
As a transgender person, I can tell you that estradiol absolutely cannot induce insanity. At the absolute most, it can screw with your emotions in the same exact ways as PMS (and PMS is indeed caused by hormonal fluctuations).

The idea that it's on the same level as ambien is absurd.
I don't agree with this. At least except not in the most pedantic philosophical sense. My role models were people who acted the same when they didn't know anyone was looking, or there was no reward. They didn't put on fake personas or dramatically code switch. They didn't primp and accessorize to meet some vain expectation. They were of course respectful of others expectations and wouldn't go to a funeral in pajamas or anything selfishly ridiculous, but they were genuine, empathetic, kind....honest. I try to emulate them the best I can. Any human failings in that trying is not at all the same thing as the fraud that this article and so many perpetrate to gain something.
I also hate this pricing structure. It's usually one of the big things that will make me fork over cash to a competitor instead.
The Five Sampling Algorithms Every Data Scientist Need to Know
> being a minority near a border, that's already abhorrent.

That's abhorrent because they are targeted which force them to carry it.

Isn't driver license a government identification anyway? Sure no one is forced to have it, but that won't change much if everyone had it.

I'm not arguing about forcing carrying it either. Just about whether it would be bad if it existed.
I think that you would see a lot of fun and games in the electrical network if space weather were bad enough to kick over local loop dsl. I'd have bought into the idea of national scale copper transmission being susceptible, but now that's all long gone and just glass so we're talking a few km of fairly thin and mostly buried conductors. Power transmission - that's a different thing!
It is crazy, they aren’t even promising heaven or sex. I guess they must get a sense of companionship?
Yeah, I'm having a definition problem with this one too. It appears that what they did was not prohibited by the system. Maybe not the most ethical way to go about things, but not explicitly prohibited.
Money (gold) wasn't invented but discovered.

It's frightening to see that many "learned" their economics and finance from "Debt: The First 5,000 Years" and similar books!
Project Zero continues to be a Good Thing
AWS DocumentDB and MongoDB Atlas: Friend or Foe?
When you reward people for their physical appearance (and certain standards of beauty), it is no surprise that they take advantage of technology to look as expected by the public.