skysight-inc/HackerNews huggingface dataset:
I'm still not clear what I need to do to protect myself from a similar class of misconfiguration mistakes.

"The first command, when executed, obtained security credentials for a role known as *-WAF-Role" says the affadavit.

Was some web app of CapOne coded so the JavaScript app fetched IAM credentials over HTTP so it could do its job by accessing some other S3 bucket?? And thats how Paige or someone she knew found the toehold in? That would be pretty brain dead. Or was it more subtle in terms of pure WAF misconfiguration?
Mutation is a real weakness of Javascript. I think the general idea is "methods don't mutate unless they are ancient". For example Array.map (an IE9-era feature) doesn't mutate, Array.sort (an IE5.5-era feature) does. Similarly a "for(let i=0; i<arr.length; i++) arr[i] = b" loop will obviously mutate modified elements while a "for(let e of arr) e = b" won't; the trend is towards less mutability in new features.

Proper immutable support (or a stronger concept of const) would also help with this.
I like the idea of a puzzle slider captcha. It is funny enough and quite different from usual captcha out there
Why does it say that Pebble Tech is a failed company? I thought it was aquired by Fitbit?
Tesla has been quietly installing 'powerpacks' in New Zealands power grid for the past two years.
in summary my argument is that:

- writing native apps to gain a bit of performance for a minority of users is not worth the added cost of development

- performance is not a selection criteria for most users

- low end phone users are unlikely to spend money on expensive apps

- catering to low end phones only makes sense for apps that are useful to that market. those apps have to be cheap, and that's yet another reason not to make them native.

and i was responding to a comment how it doesn't make sense to use web technology on low end phones.

my counter argument: it does not (no longer) make sense to write native apps. period.

you then responded that you would pay for better performing apps, but that puts you into a different niche demographic than the entire topic of the article.

now one point of the article is that the demographics will change and that there is going to be a huge market of users with low-end phones.

however that still doesn't make performance a selection criteria for people buying apps unless the phones are not able to run any of the popular apps which appears to be the case because kaiOS didn't even support native apps last i checked. in other words, apps on those phones are competing in an entirely different league, and the existing android market does not apply.

then again we have an entirely different dynamic of competing in a new market where there are no existing contenders, and the main question is, is the market big enough yet to make it worth it.

and since those phones run kaiOS native apps are off the table anyways
Disjoint-Set Data Structure
That’s a surprisingly small amount of change. I’ll leave it to others to determine if that’s a good or bad thing.
Datapoint : https://en.wikipedia.org/wiki/Neanderthal#/media/File:Recons...

Uglier Homo Sapiens found mates
> Right now you can make a new site, sign up with an ad network

and spend the next two weeks delivering explanation after explanation to the ad networks and Google that you are indeed a real person/company and indeed created a site with unique content and indeed plan to generate leads, etc, etc.

After two weeks of back and forth you are approved by Google only to be indefinitely temporarily blocked for "additional traffic verification" in a couple of days despite purchasing only the best traffic for start of the site.

> smaller ones wouldn't be able to demonstrate to the ad network or advertiser that they should be trusted

It is already very, very complicated and is rapidly getting close to impossible.
Nothing really, We were asking it to do something its not really supposed to

Basically we needed a request reply semantic. (forgive the explanation) Its where we have an instance of the front end sending a request to any of the back end servers. A single backend replies directly to the same front end instance.

Basically we needed something similar semantic to a load balancer, but in messaging form.

SQS is only a 1-n Queue system. So we can deliver a message to a single backend in a cluster, but we couldn't get it back to the producer without making a message routing system. We used Dynamodb and repeated polling, but that wasn't cheap to scale.

We might have been able use SNS as a broadcast bus of somesort, but that seemed like a backwards step.

We still use SQS for virtually everything else. NATS is kept for that one use case.
Aprenda la tecnología blockchain lo más simple posible
In other words you’re concerned that some Array methods mutate the array (push, pop) and some don’t (map, concat)?

If so then yeah, that can be annoying and/or confusing.
If weight/volume is not an issue, there are lots and lots of technologies that will work well for energy storage. Compressed air, flywheels, heated water, lead-acid.
You're right about that.

Ironically, however, drone operators seem to suffer disproportionately from PTSD. Firing missiles at people while sitting in a 9-5 cubicle, and probably tasked with keeping up "KPI's", I imagine, violates any sane person's sense of morality to the core.

https://www.nytimes.com/2018/06/13/magazine/veterans-ptsd-dr...
Question: Why would I spend a pretty penny on a lab grown diamond where the prices are a race to the bottom.

Yes, I do agree that I'd probably lose 20 cents on my dollar as soon as I buy the diamond even if I did my homework and bought it at a good price. But at least there is a resale value of the stone since unlike lab grown diamonds, there isn't an unlimited supply of mined diamonds:
https://www.bain.com/contentassets/7b9f04068ca64542a17b71713...

Disclaimer: At Liquid Diamonds, we are building an online exchange for naturally mined diamonds; think Nasdaq for diamonds.
> it's hard for me to read this and not take the position that you are asking for some kind of justification. [...] The implication is that Z and X held together create a tension in your world that needs resolution.

The article failed me. I wanted to know what the author's reasons are. But I was left hanging with only witty comments for the rest of the article. It turned out I was not justified in reading the whole. I feel I was tricked into reading dross.
The problem can be addressed by removing the "employee mindset" from potential programmers.

If you do it for the money, well, you will neither get very good, nor will you enjoy the money, assuming you become good enough to get any.

Companies that have rubbish HR practices eventually lose out to firms that appreciate that the Japanese hiring system: hire someone who has shown excellence in any field, and they are bound to repeat it.

Simply fishing for talent in existing companies is a failed and flawed strategy. Yes, you will end up with a senior developer doing 5 juniors' work, for less than half of their pay--until another firm offers him more money and he leaves, leaving you out in the open again.

By contrast, hiring a junior and teaching them the ropes on condition of their not leaving for n years is a better and an all around win strategy.

Another word: I have seen most CS program curriculums and with certain exceptions, most are not teaching what would make them marketable employees.

For instance, SICP should be a must in any CS program, but in some, it is not. How can they afford not to teach from the best CS text in the world?

You get a developer with a resume. And a degree. Big deal. How about one with a remarkable portfolio of projects demonstrating real understanding and passion?

I doubt if a company would bin the resumes of someone with interesting projects to their credit. Simply a degree with a few nominal github repos is not going to cut it.
Wouldn't you expect an AGI that can perform human-like actions also be able to exceed humans in speed, accuracy and recall, simply because it is not built of biological matter with evolutionary constraints on storage capacity, senses, size and longevity?

I agree that we're going to expect the best qualities of a machine, with the best qualities of a human, but the more you push towards a human-like mind the more inherent human-like shortcomings will be introduced, but I envision these to be more in its decision making capacity.
Yes, and the cache hierarchy ultimately depends on the memory bus. I suppose this bus, which may be shared with many other devices, doesn't always have bounded-time guarantee.
And (the original) Windows Mobile.
This whole method is rubbish. I worked for a company who forced this method on us. The fluctuation was astronomical. Pair programming is only useful in specific cases (like getting a junior up to speed or solving super-complex problems) but in other cases it is a colossal waste of time and an extreme demotivator. Fixing bugs in pairs is the most boring thing that ever happened. Not writing down anything is a surefire way to forget what was the supposed solution for problem X or why did we put workaround Y in the code... A horrible, horrible method, I'd suggest steering clear of any company which adopts it.
Clojure too didn't change a lot. In these years of 'disruption' it feels odd. But it may just be that we forgot stability and maturity.
It would catch fire in the Australian outback. Dry, hot, windy thunderstorms would see to that! We have tonnes of natural wildfires, and some are still started by aboriginal tribes as part of their nomadic way of life and spiritual beliefs. It wouldn't last.

Just throw it into the empty mining pits instead.
Most feature phones of the era could install J2ME apps, which had pretty deep APIs (including GPS, hardware 3D graphics, Bluetooth, camera, filesystem, J2ME live wallpapers etc) and on higher-end feature phones could be multitasked.

When the iPhone launched, people called it a smartphone even though you couldn't install apps. Multitasking was also years away.

"Smartphone" has never meant anything really. Just marketing.
<quote>It took suicide-level conditions in places like Foxconn to get us our gadget at <$1000.</quote>

Not that I disagree with the rest of the post, but it's time the suicides at Foxconn story dies a fiery death.

https://www.forbes.com/sites/timworstall/2013/07/10/apples-c...

The juicy quote:

At the time of that spate of suicides Foxconn had nearly 1 million workers in its plants. There were up to 14 suicides (it depends whose count you want to use) among that 1 million. The average rate of suicide in China is 22 per 100,000 people per year. That is, the suicide rate at Foxconn was under 5% of the general suicide rate of the Chinese population.
Softbank has used it's collateral in WeWork & Uber to take out secured loans.

Effectively bypassing the lockup period, and insuring any downside to the share price for the cost of the interest on the loans, while maintaining the opportunity for any upside.

They've effectively done one better than just selling the stock.
>I don't care about freedom of the tobacco industry, nor the freedom of teenagers to smoke, nor the freedom of adults to smoke flavored cigarettes.

Ah, so you only care about your freedoms.
Timely list of IoT Security companies (with 2B devices now vulnerable)
Once upon a time, successful businesses were also profitable.
Yes, this is a real problem and I've been bitten by it more times than I can count. Now I always keep this handy website ready: https://doesitmutate.xyz/
Yes, it stems from arrays. But extends from there to any collection, built in or custom. Kind of bridges the built in type system but it's really about the expressivity of the language.

It becomes especially important in React where you share objects up and down an immutable structure of objects.
Great reference, thanks. Possibly he went there but also fabricated and exaggerated.
> This means that the average voter has taxation without representation.

Well, that's the main attribute of representative "democracy". This system we live in was setup in 1789 by the bourgeoisie to prevent emergence of a democracy. Many Lumières philosophers were frightened by actual democracy (the rule of the people). Voltaire famously said: « The people should be guided, not taught ».

These Harvard people you mention are not wrong. They're just so deep into the status quo they can't even imagine what a real democracy would look like. Building a democracy has nothing to do with technical details. Sure, some Condorcet-style voting system would favor smaller candidates. But to me, as an anarchist, building a democracy has more to do with:

1. Direct action instead of power delegation: the belief in elections prevents people from exerting change in their environment

2. End the tyranny of the majority: there is no universal truth to life and minorities should have their place in a democracy (which is not the case in our capitalist systems)

3. Decentralize institutions: centralization is always the tool of tyrants, whether republican (French-style jacobinism) or pretend-socialist (USSR-style democratic centralism)
>There's almost no benefit to them from vaping

The benefit is the most influential of all: catching a buzz. We do all kinds of things in search of that. It's the start and end to why people smoke.
IMHO your editor should be formatting your Lisp with this kind of indentation anyway, parentheses or not. If you have that, Z-expressions seem kinda moot.
Thanks to God it is not. I've only worked for a single company who did this and I left as quick as possible.
> my favorite is that we simply outbred them because of our sex appeal

I think not, Homo Sapiens just starves better, Neanderthal superior athleticism came at a huge calorie cost, so when preys became rarer Neanderthal starved faster than Sapiens.
Is "our users aren't our customers" really something to be proud of in 2019?
Debt: The First 5,000 Years is my preferred introduction. Critically this New Yorker account is missing the word 'usury' which was largely agreed to be evil by early religions and societies that experienced its effects...
Definitely, I saw that these units are sized to standard container dimensions as well so they could even load them onto a truck for temporary load balancing or supplying power.

They also look (but I'm a layman) easily maintainable, more like server racks than high tension electricity stations. I wonder if the batteries would be hot swappable.
Thanks for sharing.

I think this is the kind of thing you just have to learn when you use any language. But when you're switching between half a dozen, being able to rely on consistent founding design principles really makes things easier. And when there aren't any, this kind of guide helps.
In what sense is gold the real money? Gold doesn't back most currencies any longer. Money is the real money.
They only planted them in one day. I bet the distribution took a while...
Requiem for Sony Metreon
There is no tipping service for places that deliver food in the UK as part of their food business e.g. Dominoes pizza. Drivers are hired like regular employees and are paid a wage, they are not paid based on order numbers. Tips are at your own discretion (if you chose to pay by cash).

This is in contrast to these delivery apps where Ubereats for example does not even class them as employees and they are paid per order basis.

Nobody tips a Mcdonalds worker or most other fast food workers. I don't tip the person that delivers my packages from Amazon. These are examples of why tipping culture is so bizarre and subjective, once a good will gesture and now taken advantage of by businesses.

If the wages are bare minimum I'll stop using their service, but I won't tip so the business continue their model.
I am at home tapping away on my iPad so i don't have access to my papers, but it is known there are no Neanderthal genes on the X chromosome. This is what is expected with Haldane's rule where one cross between species is fertile and the other infertile.
The article does a good job of pointing out issues with the diamond industry including margins getting smaller due to consolidation in the space and lack of financing.

However, a couple of points are just old and mute at this point:
1. De Beers' monopoly in the diamond world has long been over. It now supplies only about 20 percent of the world's rough diamonds.
2. Demand of diamonds is creeping up whereas supply is limited:
https://www.bain.com/contentassets/7b9f04068ca64542a17b71713...

Disclaimer: We, at Liquid Diamonds, are building an online exchange for naturally mined diamonds; think Nasdaq for diamonds.
https://liquid.diamonds/
Are those (e.g. flywheels, compressed air) production-ready or just start-up ideas? Also flywheels have a pretty destructive worst-case failure mode...

> heated water

How does that work (specifically for storing electricity)?
I dunno, Teslas going up in flames sometimes cause pretty dangerous fires - iirc in one instance they put a car wreck in a container full of water so the lithium could burn out overnight.

But, if something starts to go wrong it should have monitoring systems and an engineer can swap out the faulty module, and if it does go wrong I hope they have good containment.

But, not much you can do against a proper lithium battery / electrical fire I suspect.
Can you recommend a book on the history of Ethiopia? I've been meaning to read about it for a while.
ScrapydWeb now supports aggregating stats of your crawling jobs in Reports page
Are you talking about this?

https://youtu.be/CZwcZ-94wdo

That fella is lucky, looks like the tigress decided to cut her chase midway, else with that speed, the cameraman was a goner.
Linux Heap TCache Poisoning
At least 164 environmentalists killed for their efforts in 2018 globally
"cases of forced labour have been documented in electronics factories supplying major brands such as Apple, Acer, HP, and Sony, among many others"

https://www.globalslaveryindex.org/2018/findings/country-stu...
I've heard about either a working system, or a calculation of something like that but with regular trains. Long story short, it can't actually store that much energy.

More efficient (and less mechanically complicated) would be pumping water up a hill into a lake.
What's a good example of this sort of language?
Yer, that is a strange thing, if i order direct from the eatery i don't tip, but if i order through deliveroo i do tip.

I will admit, working in a bar or restraint, having automatic gratuity is something i used to encourage, pretty much asking the table if they would like to tip the standard % is easier than digging out change.
The Challenge of Diagnosing Lyme Disease
Have you tried localstack (https://github.com/localstack/localstack) to run AWS lambda locally?
The Strange Similarity of Neuron and Galaxy Networks (2017)
Solving a puzzle would be much more fun than identifying street lights and then waiting 20 seconds for Google's RECAPTCHA to "check" the result. Unfortunately both of these things can be easily broken with bots. The data Google tracks/checks is what's difficult for bots.
I’m astounded that someone would waste their time on such petty nonsense. Maybe they’d have a chance at making more money if they didn’t waste their time engaging in such stupid antics
Do you remember FirefoxOS, the smartphone OS that was developed by Mozilla ? It was abandoned in 2016, but KaiOS, the operating system powering these feature phones, is its descendant

Yeah. I bought two FirefoxOS phones and was keen. Unfortunately it never got to critical mass. Actually mailed the last of them to someone from India I met on HN. Recently I saw a French guy in HK on my LinkedIn managing some new effort under KaiOS. I was all motivated to meet and share some ideas (used to work in mobile, most handset manufacturers ~2009-2010) but found out the company is owned by that evil mafiosi Ambani, the same guy who bulldozed thousands of people's homes in Mumbai to build an uninhabited luxury condo, and who is destroying Australia's Queensland/Barrier Reef region with a massive coal mine. Crook.
Then why would it make sense for a country like say China to build up massive (largest ever) hoarse of good? https://tradingeconomics.com/china/gold-reserves
Build a Working Game of Tetris in Conway's Game of Life (2013)
I guess that's in the mitochondrial dna then?
Base load is just the minimum power demand. What's fictional about that?
For me the worst is slice/splice.
This is a very helpful writeup,

I'm a SAML implementer and technical point of contact for a SP. I also have the unenviable duty of writing the "how to provision" documentation and doing our tech-rep training.

There are two kinds of IdP, in my experience: Microsoft's Active Directory / Federation Services (AD/FS) and everybody else.

"Everybody else" includes Ping Identity, which seems to be favored by very large companies. We also have a few users of the Computer Associates product and Okta. Other products we haven't seen yet in the wild include the Salesforce.com IdP and Onelogin. (Salesforce is interesting; they allow their instances to be provisioned as IdPs, SPs, or both.)

Almost everybody has been able to furnish Federation Metadata Endpoints to us; nobody has yet asked us for our Federation Metadata Endpoint data, which is good: we don't generate that.

AD/FS is a hassle. Typically of Ballmer-era Microsoft products, they changed the conceptual names of most of the protocol elements in their provisioning screens: they p*ssed on SAML until it smelt like them. So, I rewrote the docs for that IdP in Redmond Creole. Effective.

We have quite a few different AD/FS users; some from their Azure multitenant setup and others from on-premises AD / FS servers. Some multitenant AD/FS implementations provide multiple signing certificates in their federation metadata endpoints. Various Assertion xml-docs from them pick one of the multiple certs.

AD/FS has a convenient feature: its federation metadata is located at a standardized URL: https://federation.example.com/FederationMetadata/2007-06/Fe...

We implemented autoprovisioning, in which we create a profile on our service for any authenticated principal in a SAML Assertion we've never seen before. Some customers really like this as it gets rid of the need for upfront provisioning. But, I sure wish there were a standard deprovisioning protocol.

Chromium and Firefox both have nice SAML Web Extensions that render AuthnRequests and Assertions.

SAML is complicated and insanely hard to troubleshoot. But it's effective and seems (so far) to be secure.
There is value in having consistent code, like quickly scanning it by other people and finding quickly common flaws. Everything above, like trying to convey some special intent, falls under "law of dimnishing returns". Better to write a comment, because other team mates probably will not understand your intent expresed with spacing.
For sure; I foresee that Tesla will be able to build off-the-grid charging stations with one of these and a roof of solar panels. I mean assuming cars with a 100 kWh battery, you could do up to 30 charge cycles (not counting losses of course).
The value of gold is inversely correlated with the trust in government bonds. The reason is clear when reading the article; gold is the only real money so the higher the chances of defaults on bonds, the more attractive it becomes to swap paper money for gold.

The current gold rally tells us that there is a lot of global political and economical uncertainty. Think of the Brexit, the Iran troubles and the global trade war. All these issues could cost big money for governments so it makes their bonds less attractive.
Flooded with opioids, Appalachia is still trying to recover