skysight-inc/HackerNews huggingface dataset:
Brighter AI Technologies | {DevOps, Senior Media Streaming, Python, Data} Engineer, Senior AI Research Scientist, Tech Lead | https://brighter.ai/ | ONSITE Berlin | Full-time | Visa assistance

Brighter AI is a start-up based in Berlin. Our mission is to protect individuals through technological progress. Our product is called deep natural anonymization. It anonymizes visual media by replacing faces and license plates with artificially generated naturally looking replacements. This allows our customers to use analytics on their data in a responsible and compliant way.

Open positions with link to a more in-depth profile description of what we are looking for:

- Python Software Engineer

- Senior Media Streaming Engineer

- Data Engineer

- Technical Lead

- Senior AI Researcher

- Software Engineering Internship

- DevOps Engineer

A short introduction to our technology stack:
We offer our product as a docker container. Our core system is built up by a Python-based micro services with Kafka based messaging system. To develop our deep learning and generative models, we use PyTorch and Ignite. To track our experiments we use Sacred, Omniboard, and Tensorboard. We have continuous integrations setup with GitHub and Jenkins.
We use Jira to track our progress in our 2 week sprints.

Apply at https://brighter.ai/careers.
Building a marketplace for geospatial data and workflows
'Alexa, are you invading my privacy?' – the dark side of our voice assistants
Kind of like how they go out of their way to refer to people operating cars as drivers instead of actual people?

This kind of language is par for the course because these articles basically use a less terse version of whatever language the study or official report uses and those kinds of documents tend to shy away from things like "people driving cars" and "people walking".

You are finding meaning where there is none.
IMO smart card readers are the worst solution for everything. They are invariable less capable and less secure than my phone. Why would I carry 2 devices (one of these quite primitive) if I could only carry one?
Tesla’s Autopilot Could Save the Lives of Millions, but It Will Kill Some People
One can argue that a dominant apex species on earth is indirectly eliminating thousands of other species per decade in efforts to try to maximize its members’ utility functions.

Example: setting fires near tropical rainforest to clear land for palm tree plantation.

They do not really intend to do this; they simply ignore the utility functions of those other species when pursuing their goals.
Yes, but then it's not 2FA, it's notifications in the app you're probably using for banking, so now it's 1FA.

That's fine for sending £100 to an account already in your list of payees, but to set up a new account, where's the second factor in an app? That, to me, seems a large step backwards.
Webinar: Supercharging innovation with an idea management process
> >Apple has been neglecting OS X since Snow Leopard, thinking that iOS is the only thing worth investing in
> What exactly is the evidence behind this?

I agree neglect is probably not the right word. I like the term Marco Arment uses on his ATP podcast: drive-by updates.

> They have been adding several huge components/APIs/tools that they have working for macOS (Metal, APFS, Swift, CoreML, etc),

These all seem to have been developed for iOS first and macOS second.

> they have tons of under the hood improvements (e.g. memory compression), and so on.

Personally I experienced rage-inducing multi-second freezes after updating to Sierra, disabling memory compression solved the problem.

> What exactly did you expect to see, or was seeing before "Snow Leopard"?

Stability, usability, and polish.

I don't think it's controversial to say that all of these have taken a precipitous fall since Snow Leopard.

There are probably many reasons for this. It seems to me the biggest culprit is the yearly release schedule.

They've shown themselves utterly incapable of releasing a quality update each year. The question is, why are they keeping it up? To sync up with iOS releases roughly maybe?
Oracle Shelves Larry Ellison’s Dream of Cloud Dominance
Here's a way for nuclear to make a dent: if the defense officials [1] who claim the climate change is a security threat are indeed serious about it, they could demand that Congress legislate the US military to be net zero carbon emitter. The US Navy can then build and operate enough reactors to achieve that. They already are operating dozens of naval nuclear reactors, and acquiring new ones at a steady pace (2-3 per year). Their regulatory hurdles are basically zero.

Currently the US defense emits a non-negligible amount of CO2 [2]: "If it were a country, it would have been the world's 55th largest greenhouse gas emitter, with emissions larger than Portugal, Sweden or Denmark." [2]

[1] https://www.npr.org/2019/03/05/700462955/former-defense-lead...

[2] https://www.livescience.com/65698-defense-department-climate...
Ex-World of Warcraft developer's thread about China and the gaming industry
Decades of diesel use in Europe have created a public health crisis
Learned about this too today. With the scammers playing the dial tone sound to trick the victim... Clever.
That's the Mobile BankID, and it gets scammed a lot. The smart-card based BankID is the only acceptable choice IMO
Banks have such shitty security over the phone and they train us to do stupid stuff like giving out personal info when they call.

For example, your real bank in the U.K. ask for your date of birth and address for ‘data protection purposes’ when they call you, or they won’t even tell you what the call is about.

How are people supposed to understand what is OK to give out and what isn’t when these details, often used as security questions are somehow fine?
Not sure why this isn’t the top comment.
Collections, we stopped returning null, right?
The features are underutilised because most readers simply don't support them.

There's no point using a feature if it'll just break the book for the vast majority of your audience, and it doesn't look like that situation is going to change anytime soon.
Well, i had several things (mostly games) work by changing these settings. Also in many non-game cases the program did work but it had visual glitches (a common issue with some older apps is when they draw directly to the screen - this is slow with regular compositing, but by enabling a pre-XP2 compatibility mode Windows seem to render the windows in a different way - i guess some canvas outside of DWM - that is faster to directly access for such programs, you can notice that these windows bypass the DWM decorations).
> The only thing that's the business of a government is the income generated inside its own borders by that person or company,

> Once they've paid their taxes on that income

Tax havens allow you to move your profits by having the HQ in the tax haven while having a subsidiary which makes a loss in the actual country.
I strongly disagree. Users should be able to control their preferences by application, and not be locked into an OS setting.

My suggestion of still using classes doesn't eliminate centralization of config, it just means moving the dark mode CSS outside of the media query and into a class, and adding a couple lines of Javascript.
"Particularly not if it's been proven that you have a financial interest in muddying the waters."

The other side has, arguably, beneficial (if not financial) interest in promoting their climate views. Just because on the surface it seems noble, doesn't mean it isn't being abused by those that wish to take advantage of it. And this is particularly pertinent if the "pro-climate" side has a very distinct pro-government-expansion component nested within it, if not downright socialism.
spdlog is well regarded (I use it and I like it). It's configurable enough that should be able to use it in an embedded environment; you can control the flush policy and use it in either sync or async mode. You can use method calls or macros (if you want to completely removed things like DEBUG and TRACE calls in production). You can use it as either header-only or traditional library.

Really it's a great library.
This, competent SRE mercenary in 24/7 business with time zone advantage is a gold.
Good on you. Making the world a better place through constructing elegant hierarchies for maximum code reuse and extensibility.
Naïvely I tried to do this by overriding a few custom properties and using filters. My site has a position: sticky nav, and filters introduce a stacking context, so things which filters apply to naturally go on top of the nav when before they went behind. A minor annoyance, but it demonstrates how introducing a dark mode isn’t as straight forward as I thought it would be.
Something quite similar happened to a relative of mine this summer in France. A scammer impersonating bank support. He called Friday 16h30 mid holidays. He proposed to help reduce fees by disabling not needed options, while in fact he was triggering a text verification code. The text doesn't specify the reason for the request.

He got in. Then did a few other useless operations during 15 minutes that required email confirmation which state what they are requiring it for. Those had mainly two purposes : help lower the guard and provide cover for the initial false requests. He kept smooth talking explaining that because of the various changes they should expect the bank app not be available and that everything was normal. Then he went for the option which allows to activate instantaneous bank transfers which required both email and phone verification code.

My relative was about to read it to them, when his wife smelling something fishy was happening put me with him on the phone. He was so convinced that everything was normal that I almost can't convinced him to hang up. What did the trick was telling him : "hang up and call back the bank before continuing".

My relative thought he was safe because he never gave the password of the bank app, nor the web password. But for our bank, this 4-digit pin password you put in the phone app is not a real password it is just a per-device off-line password you pick upon first device use to disallow someone stealing your phone to have access to your bank account too easily.

After he hang up, and I succeeded to talk some sense into him. I convinced him to call his bank. It was past 17h00, so it was closed. I told him to call emergency security which he did. But the number is typically used for lost credit card ; so they did the only thing that they usually do : revoke credit card and send a new one. Which is basically useless because the scammer wasn't about to use the credit card number to buy something online but he was initiating some wire transfer via the app.

So I had him call again a few times reexplaining the problem more precisely, or at least told them to block wire transfer for the account. Maybe it succeeded to raise some red flags, but they always told him that they couldn't do anything and that he needed to wait till Monday. From their point of view, you can be the impersonator so they didn't told us they did anything.

He also sent an email to the local bank manager during the night.

Stressful week-end lock-out of all bank accounts information goes by. The bank app is kind of deceitful because sometimes when it doesn't succeed in connecting shows you the last available data like it would in off-line mode and you think you are connected OK but you are not.

Monday they could reach the bank have the hack acknowledged and investigated ; access to accounts restored and password changed ; no harm done (except for the inconvenience of not having a credit card during the holiday, and info leaked) ; Luck.
Outside of a 30 year window female fertility drops to essentially zero. aka you can be reasonably sure looking a few million 55 year old woman that they are not going to have significant numbers of kids.

As the drop below replacement rate started in the 60’s it’s easy to verify the trend is real.
I agree with 'watwut and strongly prefer the first version. One additional insight: the first version lets me actually imagine the feeling. "Not the waiting in line to get your picture taken kind of nervous, but the first day at a new school in a new city kind of nervous" is something I can relate to. Checking time and shuffling vases? That's not how I usually experience nervousness, and it also gives me less information about what kind of nervousness the protagonist is experiencing.
Be jack-of-all-trades and master-of-one.

Knowing the fundamentals in other stacks will improve how you design what you master.

Be careful not to mistake fundamentals as the "getting started" part of something.
Just realizing that a phishing-attack like this is nowadays impossible in the EU: proper two-factor authentication is mandatory now (Revised Directive on Payment Services, PSD2), even just for login. TAN-codes generated for transactions need to incorporate the data of the transaction (recipient and amount), so that a phished TAN cannot be used to authorize a different transaction. I think even a simple SMS TAN may not be allowed any more (could be MITM-abused to authorize a different than the intended transaction).

Here is a summary of what customers and phishers have to face since september:

https://wso2.com/library/articles/2019/06/strong-customer-au...
JSON functionality is a subset of Javascript. Surely therefore the most sensible approach to pipe to a JavaScript runtime such as node.js? I can see how a C/C++ lib might me useful, but why build a standalone CLI just for JSON manipulation? Surely this functionality exists already? Or am I just missing something?
Various kinds of medicine also save many people, while killing small few who are unexpectedly sensitive to it. Does not mean we should abolish medicine altogether, right? Same goes for autonomous cars, after they are proven to be safer by average.
Well, you need (1) my phone and (2) my fingerprint, so technically it is 2FA. They could easily require (1) my password and (2) my phone, so still 2FA.

2FA is usually fake anyways, there's usually a way to reset stuff with only one factor (e.g. use phone number to reset password, or login with password and change phone number, ... same with PIN), so it's all a misnomer anyways.
Online Map Leads Archaeologist to Maya Discovery
hey fabian :)
Sounds and looks exactly the same to me!
BofA gives a disclaimer when you have a 2FA code texted to you (still wish they supported TOTP, but whatever).
Interview with Ripple CEO Brad Garlinghouse Available for Everyone
I'd assume the "broken glass" is actually relevant to the story, so this way "show, don't tell" is actually the way to compress information.
Leaving the UI aside, how is this different from Huginn? I have a few Huginn agents running menial tasks, but I find time consuming to debug issues. Does N8n have more connectors? What are the strengths compared with Huginn?
That seems to me a healthy approach
We can learn something from this year’s Nobel Prizes: Humility
Show HN: Terraform Kubernetes Multi-Cloud (ACK, AKS, DOK, EKS, GKE, OKE)
Being on HN I don't think I'm the average person, but I wouldn't rule out falling for this at some point in the future as well. But doubly so for my non-technical parent or partner, I guess.
The idea is, it defeats attacks not so different from the one the Tweet is about, where you are misled about what will happen when you take an action.

If you only need "a code" whether it's to send $40 to a close friend or your entire account balance to an account you've never heard of that was created yesterday in a foreign country - then the scammers only have to trick you into trying to do the former, even though what they want to achieve is the latter, so that you'll give them a code which is what they need.

The bank can do a good or bad job of communicating what's going on and actually preventing the fraud, depending on whether the understanding of what they're trying to achieve was pushed down all the way from regulators to the engineers building the system.

The best systems here don't give you (and thus the attackers manipulating you) a lot of opportunity to manipulate things, but they do present you with information that should be raising red flags if you're being tricked. For example if the app says "Enter the six digits shown on the web page" and you just mindlessly copy those digits, an ordinary customer may not know why it's those six digits, bad guys with a fake web page can tell them to put whatever they want. Whereas if the _app_ says "Enter the whole dollar amount to send" then bad guys may struggle to explain why they want you to type 5839, your entire account balance, when you wanted to send $40 to the supposed friend in need and your suspicions might be raised enough for the scam to fail.
Lenovos have trackpoint; why would you want to use trackpad, when you have the nub?
Next Microsoft console will be called "Xbox", just "Xbox".
This can be true for any country.
I feel like there's a slight lack of grassroots activity with epubs, people tend to work with mature products or random e-readers. I've recently experimented a bit with making epubs by hand (bash+perl) and they tend to break readers more often than not.

So I feel we've come to the spot where there's standards, but then there's convention over (a) decade(s) that just trumps standards. Reminds me of DHCP where I've yet to come across three implementations that agree on certain aspects. Also, is 'supports epub x.y' been a selling point in any reader so far?

I'm looking through the changes and holy hell, this makes me feel like punching an engineer, and I am one! Everything is buried under three or more layers, requiring at least 3 clicks and a bunch of scrolling and usually just refers to what they've changed compared to the PREVIOUS version. While fine for a standard, this is absolutely awful for anyone who doesn't work with epub files daily (which I'm guessing is a very small minority).

If you're interested in changes written for humans, this link is what you're looking for: https://www.w3.org/publishing/epub32/epub-overview.html It doesn't contain motivation for these changes, though, so we'll go with "some engineer thought these would be a good idea"

I guess I'd like to ask the working group:

#1 How widespread would you consider high/recent version support for epubs to be?

#2 How would you sell epub 3.2 support to people developing e-readers or reader applications?

#3 Why isn't the first page filled with "Hey guv, you're an engineer who's interested, here's what epub is and does, and here's a link with all the recent changes along with update motivation information" because looking at this site, I could not find a single thing for convincing manager/C-level types to grant 200 product update hours for this.
Go to the police? Let us know how that works out for you. I did that once, after a highly credible phishing attempt (that, ultimately, I did not fall for). This was in Germany.

Me: Here is what happened to me, I'd like to file a police report.

Police: Well, with these internet scams, the fraudster is usually in another country, meaning we can't really do anything about it.

Me: They used perfect German, used information that I only ever provided into a non-public database of a German-based business that must have had a breach of some sort. The fraudster also used pictures of apartments in Germany that must have been taken here.

Police: Well, still. The person actually doing all of that could have been doing all of that from another country. Usually Russia or China or something.

Me [thinking to myself]: Yeah, Russia, or China, or some country where law enforcement generally presumes, even against all evidence, that any and all cybercrime is happening outside their jurisdiction and therefore not doing any law enforcement at all when it comes to cybercrime. Like what is happening right here right now.

Me: Well, I realize that nobody is going to start an investigation into this specific thing that happened here, but still: Isn't anyone at least compiling a database so that, once patterns become bigger and more apparent, an investigation of sorts may become warranted, etc?

Police: Nope. Nobody doing that. You can file a report. But I can tell you right now that nobody is going to look at it or do anything with it. Also, we kind of have more important things to do, here at the station. I mean: It's your choice. I can't stop you. Just telling you how it is.

Me: Okay, thank you, goodbye.
How about this one?

https://www.nytimes.com/2019/03/28/science/frogs-fungus-bd.h...

https://en.wikipedia.org/wiki/Chytridiomycosis
Pinduoduo Outstrips Baidu as Fifth Largest Internet Company in China – Pandaily
You're of course right about growth curves being logistic functions with a plateau at the end.

The question is however, where the plateau lies. Perhaps it's so far off that for practical purposes it doesn't really matter that there is an upper bound at all.
Doesn't Schneier miss the mark here. Even if the US, Australia or all of the Five Eyes nations stop spying, that does not ensure encryption is unbroken or safe from spying eyes. If it is possible to break encryption, it will be broken by someone. It better be by us...

As far as designing in weaknesses and/or golded keys. Well, it does not add to security, but assuming that the other nation states are already able to break encryption and read what they want, it does not weaken it either for national security reasons. What it does provide however are easy means to stop terrorists, pedos and drug dealers from conducting business. That power in the right hands is good for society, just like having people with lethal weapons in law enforcement is good for society.

Remains the risk that some bad guys could get their hands on the golden keys. Yes, design to handle that?

What else?
Stuffed with Sockeye Salmon, 'Holly' Wins 'Fat Bear Week' Heavyweight Title
In your tweets you mention "And now... joyfully resetting all my passwords, filing a police report, getting additional fraud detection in place". What passwords are you talking about and why do you need to reset them? As far as I can tell no passwords have been compromised in the attack as you describe it.

Or do you suspect that there's been an other, undisclosed breach that the scammer used to get your name and phone number? I suppose it's plausible but it seems like it wouldn't be too difficult to get that info.
Chickens for Gasoline: How to Clench the Crypto Conversation
I usually receive soft objections to this. They don't even seem to understand the problem most of the time. In fact, they speak rather like I would expect a scammer to: "but we just need to verify who you are, and you will still have to do this if you call the number on your card, so it's easier if I do it now".
so do you recommend a career in full stack rather than lets say data engineering?
This is further complicated by the fact that Western media usually perpetuate the confusion (whether on purpose or not).

For example, the BBC uses the terms 'China' and 'Taiwan' and very rarely, if at all, discusses what is meant by 'China' and what is (or was...) the Republic of China, which are key to understand the dispute.

Obviously, writing "China claims that Taiwan is part of its territory" is bound to be interpreted as an expansionist stance of a country trying to invade another by people who know nothing more about the issue when the reality is much fuzzier.

I am not saying that this is simple, but it should not be depicted in simplistic and potentially misleading terms.
> Remains the risk that some bad guys could get their hands on the golden keys. Yes, design to handle that?

You can't. That's pretty simple and solid.

If you have design a master key, then it's the master key. Once it's out, it's out.
Makes me wonder, what if a bank just started all phone calls like that with: "Hi this is Bank, we need to get in contact with you, for security reasons could you please hang up and call the number on the back of your card?"