skysight-inc/HackerNews huggingface dataset:
I think that not all companies are the same.

Some companies put a lot of effort in security (Apple, Google, Facebook, etc). Usually they have engineering driven cultures.

The other majority of companies see security just as a cost center that needs to be covered in order to reduce legal liabilities.

The second kind of companies do not have a bug bounty programs because they know that they have too many holes and prefer not to attract too much interest.

For those companies that may have huge capitalization and profits, paying $1M for a vulnerability is not practical.

I expect that in general all companies (including those in the first group) detect compromised accounts and services from time to time but unless they have to disclosed because the laws demand it, they prefer to avoid the bad PR and potential lawsuits.

But while I expect the first kind of companies doing a root cause analysis and improving the systems, the companies in the second group of companies usually just clean up the detected compromised systems and avoid to look too much deep because either they do not have the skills or they are afraid to find things they will have to disclose and be liable for.
Why you are aware of the duties of a "director" of a company I take it.
ASIS is organizing an all-cryptography CTF. CryptoCTF is starting tomorrow, August 10th, at 06:00 EDT. If you like Cryptography and Algorithms, we are inviting you to join us!

The address of the live chat channel is freenode ##cryptoCTF
Thank you for not having the Vera l. Ever since Vera came out, most free fonts have had that l. I can't stand it.

I also appreciate having a real @ symbol, with a hole in the "a" and the back of the "a" separated from the loop.

I would prefer also:

traditional $ (with two bars)

traditional g (with two loops)

non-oblique #

tall (both ascend and descend) glyphs for paired grouping: () {} []
Will external GPUs never work? As in, physically impossible? That'd be my main purpose.
512MiB no mater how much RAM you have. Keep in kind this is based on "it seems to do the trick" rather than any proper reasoning. But hey, so is the article, I guess.

My reasoning is as follows (ams concludes that swap does nothing):
4GB RAM, no swap.
Firefox allocates all RAM. Linux starts taking the program code and data sections out of disk. Serious thrashing. Hang.

4GB, some swap.
Firefox allocates all RAM.
Some stuff is in swap. Firefox allocates more memory. Swap is full of firefox's stuff. RAM is full of firefox's stuff. Linux starts taking the program code and data sections out of disk. Serious thrashing. Hang.

It's the same thing, just more complicated thus harder to debug. It will behave better,
if you never get to fill RAM+swap. But today's programs simply allocate more. And the kernel says yes.

IMO the real solution, given that we overcommit, is for firefox to check that % RAM usage you see in top(1) and to try to not let it go above 95% by freeing cache, and for the kernel to do OOM killing early.
Easy Flash USB for Bootable Devices on Linux/Windows/Mac
HubblePhone
Interesting point. The %timeit functionality actually used to output the mean of the x fastest runs, they seem to have changed that at some point. The docs still explain the old behavior [1].

I assume that they feel your concerns are addressed because they display the stddev together with the mean, so you can see if there were any extreme outliers.

[1] https://ipython.org/ipython-doc/dev/interactive/magics.html#...
What is a CTF?
He was describing the candidates he sees this behavior from. I don't think it's discrimination to observe obvious information.
I applaude the author to think about sum types in the data language but the semantics part is slightly confusing. First it tells me that all records are equivalent and later it tells me how they are compared against each other. I think there should be a distinction between the form and their content being equivalent.
and what does "small cheap car" have to do with it?
First, I don't think the rich are cartoonishly evil, Machiavellian, or even particularly interesting. It doesn't take superhuman skill or sociopathy to live off other people's labor. They're just trapped in a game they can't help but win and are by definition incapable of walking away from.

Second, the idea that there is a 'we' encompassing the 1% and 99% or some future and even more fractional segmentation is unrealistic. There's already been millennia of slavery and serfdom: let's not repeat them by trusting that our seat at the table is somehow ordained and not the result of centuries of people fighting from chattel to power on our behalf.

If we can't achieve even the most basic, obvious reforms (a universal healthcare system, a livable wage, an end to global warming in our lifetimes) given the current power structure, then contributing to the further entrenchment of the wealthy isn't just counterproductive, it's suicidal.
My first reaction was that the margins seem different everywhere.
TIL: I thought it meant Stadtbahn.
You do not need any special heavy compression. Just deltas between consecutive frames should result in 1:100 or more compression rate at such high frame rate. This is assuming you can keep both pivot and current frames in processor's SRAM.
It's pronounced "rooter" in the UK. The wood-working tool spelled the same way is a "rowter" though.
Not at all. Only from the beginning of a particular persona. Mirimir is about eight years old.[0] But I had numerous personas before Mirimir. Some you could maybe track back to, if you worked at it, and knew where to look. But some are just too old, and unconnected.

I was lots sloppier, when I started going dark, in the late 90s. I even talked about it in meatspace. But gradually, I compartmentalized more and more.

Anyone can do that. Just gradually disappear as your meatspace identity. Or restrict it totally to career, and friends and family. Ideally, keeping those separate, so your friends don't hose your career.

And then create and develop an ~anonymous persona.[1] Or a few of them, one for each ~defined set of interests. And just don't talk about it in meatspace. Or mix stuff among personas.

0) https://www.wilderssecurity.com/members/mirimir.121604/

1) https://www.ivpn.net/privacy-guides/online-privacy-through-o...
As an aside, the commentary at the bottom of the post is very insightful and a great example of how important it is to carefully choose what is being optimised for.
Any front-end stuff, I just have no interest in them.

Related to this, I am sad to see Swift (seemingly) taking over from Obj-C. I really liked it years ago and it has a special place in my heart.
What is this, a Software Patent?
Criminal negligence then? Sedition? They internally predicted catastrophic damage to society. It is obscene.
It's also good for systems with hard coded domains that ignore hosts files.

Windows will still connect to quite a few even if they are in the hosts file.
Salesforce Buys Clicksoftware for $1.35B
Apologies I missed copying the actual reference in my last post: https://www.ers.usda.gov/webdocs/publications/40408/30646_wr...
Are there other German cities with a similar culture to Berlin? I’d like to visit them!
Thank you. Would like pick up some Bärlauch.
The free-trade consensus has been dead for a while. We're only just starting to see the effects now because of how slow global politics moves. I figured the end was nigh when bipartisan efforts killed both the TPP and the TTIP. The political system in the US is no longer in favor of free trade.
It depends on how an exploit is monetized; the devils is in the terms: exclusivity, duration, scope and level of access. A non-exclusively-licensed exploit that can be sold 50x for $50k/year is bank ($2.5m/yr). If I were to spend 6-9 months developing a good exploit, I wouldn't give it Apple if and only if money were the primary and sole motivation. However, it makes sense to blog about it, turn it in to Apple and leverage such a discovery into outside Angel funding for a startup... that is if Apple doesn't require onerous NDAs. If the terms from Apple weren't favorable (they're likely to be terrible), then reselling it makes sense if you were really broke or going nonprofit security disclosure route at least parlays it into cred.
Map3-Decentralised Map Network
No? It's something with basically one and a bit suppliers and a large patent pool.
How to build up a marketing plan in the age of technology
I doubt that google is hiring many mech engineers or those targeting space/aerospace.
Drank the Kool Aid
>HTML, PHP, CSS, and MySQL. No frameworks. No javascript. No garbage.

The funniest comment I have read on this website.
Drivers are also often unaware how much time they lose on the last mile, whereas a bike can be parked nearly everywhere, and pedestrians just walk up and in.

Living in a north american city, it was insane how much faster I could get to places compared to drivers in a 10 min window.
> Experts of complex systems generally know how to get what they want out of those systems. Finding ways for non-experts to do the same should not be sneered at.

There's a product/market/founder fit in there somewhere.
We’re all around. We’re called ordinary people. It’s up to the people to hold politicians to account and keep them in check.

Nobody is going to do it for us, we need to organize and agitate ourselves.
FU Money Calculator
Aston Martin has an electric conversion program as well:

https://www.youtube.com/watch?v=PREftlfZuXA
I'd love to do this with a VW T3 Syncro.
I Left the Company After 3 Years
https://outline.com/tWekNd
Avengers: Endgame
Help in Market/Product Validation
Unwillingly?
Too bad any online option?
you are right, it wont work to make any rules about who has which rights for any domain.
but i think just making it illegal to make a business about reselling domains (which includes the squatting just for selling them later), the domain market would be much better to a find a real domain matching your business case.
i think companies their business case is just to buy and resell domains for higher value, do not give any value to the domain market and just make it worse.
What gets me even more is how little common folks in US seem to care/understand that days of US being beacon of light, democracy and freedom are long gone and world in many places has overtook them. Quality of life (often even for top 1%) is not there anymore in many important aspects (at least those for me). There are still many great things going on / coming from there, but increasing number of matters are not and often just a sad story. The blonde guy's whims don't help at all. He pisses off practically everybody (apart from authoritative power grabbing figures), since his actions propagate on all of us eventually, never in good ways.

Maybe common folks don't travel (far) to understand, watch only Fox News or... just don't care. It feels good to be raised and constantly told how special and better you are, when reality is often... not.
Interesting device on paper. Who knows will it allow to unlock bootloader and release kernel sources also?
This is what I do I still use German/engineering Sevens and Zed's - it was that I was taught at 19 when I started work.
Tolerance of US crap is high from bombing civilians with drones using CIA black sites. Putting people on no fly lists for arbiratory reasons. Incarcerating minorities are some of the things that the US government does. So when US agencies say they don't like or trust Chinese tech I understand as they probably have backdoors in a lot of the western tech and when Chinese tech is used they lose the back doors. For most countries using Chinese tech vs Western tech is choosing the spying of 1 or the other.
What can Zig not do at compile time?
Not a hugely surprising development given what was discussed yesterday:

https://news.ycombinator.com/item?id=20640148
Too loose of a coupling can cause the code to be not understandable either. Examples include use it general formats with adhoc protocols or schemas. Local data structures likewise create a fine mess that is still coupled to the definition of said structure.

Sometimes you should accept that parts are tightly coupled and not pass the buck.
Well anything apart from adds never paid Google. Android is doing good as it's open source and based on Linux. Time will tell.
You can get around in Berlin without a car, you're absolutely right -I've done it myself- it's just not convenient compared to using a car (or bike, if you're traveling light and reasonable distances), which is why, I believe, many people are using their cars despite the fact that public transportation exists. I very much prefer Hamburg's public transportation for speed, reliability and upkeep (though they often sucked at planning for rush hour and large events when I was living there), and the (albeit limited) experiences I have in Frankfurt, Dusseldorf and Bonn were better, too.

It wasn't my intention to insult anyone's home town, Berlin's history explains a lot of the situation, which I mentioned in my comment, so please don't take it personally.
Lol, I've implemented shadow banning on a municipal website in 2009. We called it the Mao-filter and that was a direct ripoff from a political party that had that on their website.
It was about as innovative as, I dunno, having comments in the first place?
They solved a lot of isssues on the developing countries but how long they can let their pockets bleed? They need to change the business model today or tomorrow!
Connected TV Advertising Trends in 2019
Exactly. I know people would work for Palantir specifically because it appeals to their political taste.

People are different and complicated, assuming a blank slate of tech people following certain ideology is ignorant at its best, stupid at its worst.

Smart people won't go to Google/Facebook? Think twice. Maybe they want to spend more time in exciting/shiny stuff when they still can afford to make mistakes. The difference here being they CAN join Facebook or Google at the right time.

Money definitely talks, let alone the problem/scope company like Facebook or Google could offer, that certain startup couldn't even dream about.
Every example you provide allows for much more minute, precise, and invisible manipulation of the affected individual than the meatspace equivalent, for starters.
I think what GP means is that someone needs to set up the PiHole/Adguard software on their own hardware (like a RPi). After it's up and running it's pretty trivial to set it up in your router.

Reading through Adguard's GitHub page I can't help not noticing some disingenuous feature comparison there. Like how PiHole doesn't support "Blocking phishing and malware domains" or "Parental control (blocking adult domains)". Although they both do it in the exact same way: blacklists [0]. Does it block YouTube ads?

I'd like better reports and stats on PiHole, not just top sites, top clients, etc. Adguard seems to do better here from the screenshots. But I'll take it with a grain of salt.

[0] https://imgur.com/Um7o4fU
Facebook wants to be relevant in news again, and paying to bring back publishers
This is definitely the right way to go unless you have a need to take longer trips, outside the country, potentially hauling all your stuff. My life has not been that stable here, I needed to drive abroad some time ago and might need it again. But after some years, I would certanly get rid of my own car.
That's so true in every context. Low wage workers doesn't get many opportunities to brush up their skills with the fast changing business environment. And log wage Jobs are.mostly manual jobs where automation is taking lead. Sometimes I think it should be banned for humanity sake
Evan Bacon: The JavaScript Fad Will Pass and Everything Will Be Written in CSS
> bUt 1M dOLlArS iS nOt tHaT mUcH
Why are the people trying to drag politics into everything always leftist? You people can drag border detaining and childrens hormone therapy into a python web framework.
I know the "free" price tag seems nice at first. How did you calculate in the cost for:

- maintaining and updating your servers

- updating the free software

- backups

- recovering from backups in situations where your servers fail?

I don't think you get that for free? If you consider those costs, the price tag for a hosted solutions becomes more and more reasonable.
> If you don’t hibernate or other reasons to use swap, what does adding half a gig of swap do that adding that as extra ram doesn’t?

Linux (and generally most popular OS) really don't like having no swap whatsoever (https://lkml.org/lkml/2019/8/4/15).

Plus if you're running out of RAM (regardless of how much you have, sure put more in if you have it) the system starts visibly degrading but remains recoverable when it starts swapping. If it can't swap, it pretty much just dies.
If they bring a 64 Core to the desktop, Intel will have no market for yrs.
At least some trees seem to be marked with:

> This source is private but may overhang public land. Pick with discretion.

But I also wouldn't be surprised if some cities spray trees on public land.
It’s actually “Stadtschnellbahn”.
> IMO the real solution, given that we overcommit, is for firefox to check that % RAM usage

Doesn't it to that already? I remember 3-4 years ago I use to watch in amazement how people complained that Firefox ate over 2GBs of memory, whereas I ran it on a laptop with 2GB total, and FF rarely hit 1G even with dozens of tabs open.

EDIT: Mozillazine seems to confirm my experience: "These numbers will vary because Firefox is configured by default to use more memory on systems that have more memory available and less on systems with less" (http://kb.mozillazine.org/Reducing_memory_usage_-_Firefox)
This is very a bold straw man.
Lol they want contribution from open source community developers? Well their own crap Android phones are coming with locked bootloaders. They try to become American style community based company keeping their shit closed source and want contribution on other side. Huawei should be doomed. Crap Chinese companies!
Terraforming a chunk of land like the Russian east to turn it into productive farmland is possible (Brazil did something similar), but it's expensive, time-consuming, and temporary. China and Russia actually have a somewhat-standoffish relationship, and it's unlikely that Russia would invite Chinese investment into a region that it sees as a target for Chinese expansionists.
I think the point is that you want to know when you are approaching the limit so that you can start shutting down things instead of having your system crash on you.
You missed English Bulldog -> Winston
Show HN: I miss Google Inbox and built a replacement
*Nonlinear algebra nowadays. With sprinkling of discrete algebra on top.

(Gated and threshold units.)
It would be great if the industry could agree on an actionable code of ethics first. But I don't think this would be easy.
Never underestimate the entrenched incumbent.

I know plenty of people who know the Intel name and would consider AMD to be some kind of cheap knock-off (non-techs, obviously). And obviously desktop/laptop manufacturers are going to have some sweetheart deals with intel.

As far as I understand it, AMD doesn't natively support thunderbolt and that's an emerging standard that people really like.
That isn't relevant either. I never said it did nor does any of my arguments rest on that. You and "cloakandswagger" are making claims that aren't supported by article, which I have addressed, and should back those up to have an argument.

This is exactly why fact based discussions not only don't work, but don't happen on hacker news. Because you can just say something different. And that is how it always is. Someone posts a citation and someone else goes out of their way to debunk it. Then they just say something else. Next time no one bothers. Because the point isn't to have a fact based discussion, but to not be questioned on an already existing view. And that is what the article correctly caught on to.
I've been there and spent hours if not days shaping builds and using workarounds/hacks to fit the esoteric manner in which CI services need your builds to run (setting up the build pipeline as a series of containers but without easily accessible persistent storage between the containers seems to be the current popular model - which is the case because it's very easy for a service provider to provide and manage the compute this way but pushes all the work onto you instead to get it working).

This problem is what I'm trying to solve with https://boxci.dev for myself and hopefully others too. The idea is it'll do all the management stuff that a CI service should do, but let you run the actual builds however and wherever you like, on your own machines, using an open-source cli. Check it out, perhaps you'll find it useful. It's launching very soon!
The simple reason America is the only rich country with frequent mass shootings
But a counter argument is that those people aren't the market for a 64-core desktop.
First paragraph:

> Shares of Tesla plunge after news of a pair of C-suite executive resignations and a bizarre video showing CEO Elon Musk smoking pot on a podcast.
Almost as if that was the point of me including the words "but its price is not publicly available" in my comment.
Good point. This could very easily lead to the same problems plaguing the NPM ecosystem — an action repo could be sold to a malicious actor, giving them full access to your entire codebase!
Formal understanding is critical to actually know the limitations of any given system. Treating it as a black box has short lifetime, as your method of analysis will miss key features of the system or oversimplify it.

Understanding modern ML algebra is really "general relativity hard" if not actually harder. Spiking NNs are "quantum physics hard".
The math is very much translatable between these domains.
Drivers are very much aware of how much time they spend in their cars. However you can safely presume that for whatever reason, they’ve decided that the benefits outweigh the costs. Everybody’s free to decide how they want to live their life, but it’s incredibly condescending to presume that just because somebody makes different choices, that they must be entirely ignorant to their own life experiences.

This isn’t coming from somebody who commutes in a car either. My decision to do that has meant some benefits for me, but those come at the cost of other benefits I no longer enjoy.
Leipzig is smaller but has a similar vibe. Also good public transport there.
Prolix

Garrulify

Enucleate

Perorate

Expatiate
Well, generally speaking, this is exactly the ballpark CIA feels very much at home at and has tons of experience doing exactly this, for last 70+ years.

On the other hand, Chinese involvement would also make sense, but things are too obviously pointing to their direction for my subjective taste.

Maybe its both - US escalating situation just because that's what 3-letter agencies do, China obviously deeply involved since its a crucial place for them and literally their territory, which is rebelling and questioning Chinese supremacy. At the end, these are all just constant games for these folks.
In Berlin, which is of course the relevant one here, but the meaning of the S- does vary across cities and history.