skysight-inc/HackerNews huggingface dataset:
So, we need some government inspector to find and examine all the millions of hives everywhere, in case one of them was stolen? How often would these inspections be carried out? Who will pay for them? Will the inspectors have the right to enter any private property at any time to verify there are no hives anywhere? What about feral colonies: are property owners responsible if a stolen colony swarms on their land?

I think there are some practical problems with this suggestion.
Journalist looking for ex-Silicon Valley types
Hi, I am a journalist looking for former Silicon Valley workers (but not French nationals) who moved to Paris and work in the tech industry. This is for a future radio documentary. If that's you, please give me a shout and let's chat!
They could have literally put 2.1B in a savings account in 2006 and made more money.
The devil in me wants to gather up a rag-tag group of designers and get them to start doing incremental improvements to the Haiku icon set. Then sit back and watch as the veteran devs begin discouraging that rapid development because it causes too many system-wide file writes.
What Coronavirus Does to the Body
HP stopped selling these a few years ago, but I bought an HP Stream Mini[0] to be my replacement HTPC after my original Raspberry Pi Model B was starting to chug on 720p videos:

I was sold on it after reading an enthusiastic Ars Technica review.[1] I quite liked the thing. Its specs were a little anemic out of the box, but despite being the size of a tupperware container, I was able to swap out the flash HD for a proper SSD, upgrade the RAM, and even swap out the WiFi card for a better model. It's still holding up as my media center five years later.

[0] http://www.hp.com/hpinfo/newsroom/press_kits/2015/2015CES/St...

[1] https://arstechnica.com/gadgets/2015/02/cheap-functional-upg...
I like where your head's at, but guardians speak on behalf of minors, lawyers speak on behalf of clients, and representatives speak on behalf of their electorate (in theory), so executives speaking on behalf of groups of employees isn't much different.
How is that in any way relevant to ownership of assets?
The essay is a classic.

> Shantytowns are squalid, sprawling slums. What is it that they are doing right?

> Shantytowns are usually built from common, inexpensive materials and simple tools. Shantytowns can be built using relatively unskilled labor.

This is a powerful metaphor, and I see it often in code.

If you've ever seen an API gateway written using the same web framework as the other services, where in order to route "/external/order" to "/internal/order", the first step steps are e.g. "File | new | Controller", call it "ExternalController", make a GET method called "order", and in there code up a http call to "internal/order" ... you have a shantytown API gateway.

It's terrible, it requires manual extending for any new endpoint. But it's not a specialised skill. Anyone on the dev team can extend it by just adding more of the same.
Every Gamestop I've been to (Toronto area) is tiny, and always crowded with window shoppers, as they're located in a mall. So often the in-store clientele will be kids, but they'll have their parents with them.

The staff may be well-informed but they're usually busy, so you can't walk up and talk games casually, like you might be able to do at a record store.
Came to say the same. `rmdir /s` is an order of magnitude faster on windows than other methods I have tried.
This is required reading for all software developers. Any successful software system will end up as a Big Ball of Mud or other anti-architecture eventually. It's just the nature of the beast. And while we should fight the entropy, it will occur despite our efforts (there might be a few exceptions in the world, but for the most part it is inevitable)

In order for software to be successful it needs to solve a problem. In order for that software to be successful in the long term it will have to change and adapt to continue solving the problem. Architecture usually means abstraction. And abstraction is most always a tradeoff - you sacrifice flexibility to make something common, easier. But there is the rub. A successfully abstracted architecture that solves the problem today, will not be able to solve the problem tomorrow without big changes!
Microsoft Has a Sub-Domain Takeover Problem
Also - likely a move to gain access to large 'dark pools' of mom&pop trades (orders) so that they aren't front run on institutional block trades & et cetera.
His Unreal Engine C++ course is especially great.
Low Latency HTTP Live Streaming Part 2: Judgment Day
I click on the link to figure out what Walling is. I'm met with something about Linux and Mac and how the desktop is better. I'm parsing all that cognitive load instead of paying attention to your product. Sure that works for Slack. But when I land on Slack's page, I already know what Slack does these days...odds are I'm there because I'm already committed to using it. There's a difference between mature established products and new ones.

Or to put it another way, the landing page starts by disorganizing my ideas. Good luck.
“We’re building right now software that enables developers to automatically check out an anonymized version of the data set,” said Watson. This so-called “synthetic data” is essentially artificial data that looks and works just like regular sensitive user data. Gretel uses machine learning to categorize the data — like names, addresses and other customer identifiers — and classify as many labels to the data as possible. Once that data is labeled, it can be applied access policies. Then, the platform applies differential privacy — a technique used to anonymize vast amounts of data — so that it’s no longer tied to customer information.

Anyone taking bets on how long it's going to be before these idiots end up leaking the SSN of every US citizen because their categorizer failed?
watering down freedom of speech because why not
Four Paths to Marketplace Success
Yeah, nobody is going to notice or care about an error of a cent or two for something like retail, especially if it evens out in the long run. It matters for finance, not for stuff like Uber or Amazon. Just make sure you render it properly on the front end and nobody will care whether you use floats, ints, or decimals. Be consistent in the back end and careful in the front end, ideally with standard functions for translations.
Did you also hide thousand of ballot boxes or conspired with DNC officials?
Out of interest, what's the USP over something like Notion?
so my question is simple, did twitter engage the FBI or an auditing company to verify the rest of the staff who have access to sensitive data?

It would seem to be a concern they would have to follow up on. You can put in all the procedures you want and declare compliance to auditors but it only serves to make paper pushers happy.
We read the same article, and you did not understand it beyond the screaming claims, and shallow statements.

No, him saying it's "broken by design" is really not substantiated. SigSpoof is certainly not a design specific bug, but an implementation flaw.

On other hand, the "new agey" crypto messengers mess up the protocol and the app internal mechanism hard, and that's compsci101 mistake no matter how much they gaslight that.

It's them benefiting from their stuff not being subject to serious security review because of lack of adoption, not the other way around.
I use a phone case that holds my cards, so I've got my cards with me already. For me it's how much faster Apple Pay is. Also works way better when I travel out of the U.S., because U.S. cards overseas end up being chip-and-sig, they have to go find a pen, etcetera etcetera. Tap phone, done.

I also like the integration that the Apple Card has with Apple Wallet. I'm not all-in on Apple, I don't own a Mac anymore, but the iPhone and closely related bits are just really nice.
ZFS without ECC may not be any worse than any other filesystem without ECC, but it's still nice to have on a system you want to run all the time and deal with your files.
This reminds me of how Pavel Durov every once in a while posts a story of some recent WhatsApp/Signal/whatever fuck up, which ends up with a Cato-style reminder of the fact we should switch to Telegram. Except, he is comparing apples to apples, does this in kinda tongue-in-cheek manner and is understandably endorsing his own product. None of which can be said about the OP. So, unless you can name a better PGP+email replacement, all of it has quite little value, and, no, Signal is not an email replacement, and, yes, we still need email, so, sorry, cannot switch.

P.S.
Does Signal still require a phone number?
Show HN: This Animal No Longer Exists
The number of developers I've worked with who handle broken builds with "The build is broken! Why did you break it?"

You have it easy, the devs here in Cardiff push code that doesn’t even compile locally, then start howling that “Jenkins is down!” when the build fails. Or even just “the server is down” with no other details. Like I just telepathically know which of our 5000 VMs is “the”.
The real bottom line criticism of encrypted email is that people will screw up, and leak metadata or plaintext.

But arguably that also applies to any encrypted messaging system. Not just email. So I'm not sure exactly what the point is.

About metadata: You can just anonymize it away. Maybe most people can't do that. But then maybe most people will screw up in some other way.

Or rather, one could just build in anonymity.

Fundamentally, encryption isn't all that useful without ~anonymity. Because if adversaries can find you, they can do whatever it takes to get what they want. Or at least, to make your life Hell until you give it up.

And with adequate anonymity, those aren't issues.

> Messages can be material to a civil case and subject to discovery. They can be subpoenaed in a law enforcement action. They safeguard life-altering financial transactions. They protect confidential sources. They coordinate resistance to oppressive regimes.

Anonymity fixes most of those problems.

About Signal, until it gives up the phone number requirement, it's hopelessly not anonymous. And encryption without anonymity is pointless.

Edit: Maybe I'm still ranting, but less personally.
Is this going to be a preview of the post-Article 370 wonders to come?

https://thewire.in/agriculture/kashmir-saffron-flower-cultiv...
This is the story of young security startup from Egypt, Trying to make its way into the security SaaS world.
Enjoy reading and I'm here to answer any questions.
Do you have any more info on that chipset watchdog and how I'd use it in Linux? Is it this, the TCO Watchdog? http://www.madore.org/~david/linux/iTCO-wdt-test.html
Feel free to substitue $29.30, or even $1,000 as values that should not sink one's software business.

Considering how often you're going to be issuing refunds (I tend to do maybe 2 or 3 in a big month), I'd be surprised if we hadn't each spent more in billable hours typing into this text box than we will in Stripe refund fees over the next four years.
Blue Apron Is Trying to Sell Itself for a Tiny Fraction of Its Private Valuation
One option is XMPP with OTP or OMEMO encryption. XMPP IDs are similar to email addresses, it's easy to set up a server, and there are lots of public servers you could get an account on as well.
I suppose the same context as serving a drink in a jar.
As someone who was once "all Samsung", Samsung are really bad at software. Their apps crashed all the time, their websites frequently errored out, they managed to make using Android painful, SmartThings is a fiasco etc.

I wouldn't trust them with any of my personal data.
> The IBM® X-Force® Command Cyber Tactical Operations Center (C-TOC) provides the industry’s first mobile cyber range and watch floor, with 23 tons of cyber capabilities on wheels, wherever they are needed.

Nice to see good cyber-security is now so commodified we can sell it by the tonne </sarcasm>
The original truetype font was vector based but had to be legible at small font sizes. Apple created hinting in the late 1980s that worked well on macs. I believe Microsoft added better rasterization about a decade later.
Ubuntu Security Podcast: Best Infosec Books
But you will have difraction (giving a smooth distribution) when it goes through one slit and difraction (giving a infinitesimaly displaced smooth distribution) when it goes through the other. Put them together and you get more or less the same smooth distribution, not an interference.
You often see smarter birds hanging around with different species at bird feeders, I wonder if they're using them as poison testers
Summary: if you can make a financial service that people want, it is EASY to make money.
>Udemy has a new program for enterprises that pays based on minutes/month of content consumed.

LinkedIn has something similar with what used to be Lynda. (Not sure what the payment scheme looks like.) I imagine this sort of thing is fairly common. Corporations have a relatively modest set of online courses they create (or have created) on topics specifically relevant to their products/market and they want to fill out their training catalog with a lot of general and relatively low cost material.
Red heads are less than 2% of the population and yet if you built a classification system that failed to identify them as people that wouldn't be seen as acceptable either.

Trans people have been around forever, and aren't going away just to make image classification less complex. It's not a "trend", treatment options just happen to be more available and the internet makes communities more visible now.
This is only true for one kind of user. Granted it's the most common user assuming consumer facing products.

But if your UI is targetting professionals, substituting ease-of-grokking for speed-of-getting-shit-done is a very sound choice. Ideally you don't comprimise too much on either side of the spectrum, but there is still a tradeoff.

Consider how fast you can do various tasks in the CLI after knowing your way around it, and how many easy-to-use UI applications you would have to interact with, and how long, to do the same thing.

Compare a Tesla interface with a cockpit, and that you quickly need to just input some command. Would you rather have to browse on-screen menus until you reach it, or have a dedicated button/lever per function, when input speed is crucial?
I pick Heroku over AWS Lambda. But not always
unlink(2) returns EISDIR (on Linux at least) if you try to unlink a directory. I'm not sure if you can still do it, but long ago you could unlink(2) a directory as root, but it was not a good idea since it did not recursively free up the contents back to the file system's raw storage.

To remove a directory on Linux you have to empty it out (recursively, using unlink(2) on files and rmdir(2) on empty directories) and then rmdir(2) the top level directory.

So not a single system call.
It's probably closer than you think.

The reason we don't already have self driving cars is that there hasn't been enough computing power in a small package to make the sort of decision logic needed practical until recently.

As long as the prerequisite for self driving has been to emulate human's driving skills, there just hasn't been the computing power available. Now that there is, progress is being made, but really it's just a transitional period.

What's eventually going to happen is that roads everywhere will get machine assists - basically, small beacons running on low power that provide easy machine readable data on everything from precise road location to speed limits to local road conditions. They'll be small, low powered radio transmitters or even NFC devices near the road that the car can just download data from.

There's always been a chicken and egg problem with self driving vehicles, where no one wanted to invest in machine assists for all roads because no one wanted to put that much money and effort into something that no one needed (no one had self driving cars) but no one wanted to make self driving cars a product that wouldn't be successful without machine assists as well as a way to drive without them as a backup.

Now that self driving cars are out there and everyone is getting comfortable with the concept, machine assists will be coming, and they're going to have benefits to ordinary drivers, too.

If you want an example of why this will work, look at aircraft. Most jet liners today are perfectly capable of landing themselves in almost any weather because of the electronic navigation system they have built in to most airports. The planes aren't using machine vision and AI code, they're landing on a piece of ground defined by numbers in the navigation system which is precisely located by GPS coordinates.

The same will work for cars, it just hasn't been built out yet.
According to the paper abstract, the oil is acrylated in a simple one-step process, then a photoinitiator is added.
Yet another reason why Twitter should be banished to the depths of hell - what a stupid shit-show of a company.

I eagerly anticipate their downfall. Just like I did MySpace. And hopefully someday, Facebook. Fuck these parasites.
> TFA merely says: if you were gonna use PGP, use Signal instead.

The article mentions Magic Wormhole, age, and Signal, IIRC.
Was this Rogers New Media? Just curious because my recollection is that they owned the network infrastructure for the cable internet side and were the first folks in Canada to go big on deep packet inspection boxes (aka Cisco pcube, which was from an acquisition of an Israeli compamy) to deal with "undesirable" traffic but also mining customer data.
Kinda agree, but I'd phrase it a little differently. There exists a time element already[1]. I'd move that the browsers should allow users to change the display of this element on an element / page / session / computer basis. Often there are two or more timezones that matter for any time (e.g. event local time, user's local time, UTC). Often knowing all of these times instead of just one is useful. Rarely is just one of them at the choice of the website presenting the time useful. This is my use case, there are many more.

[1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/ti...
Nice! If you publish it, do send it across and I can link it :)
If I was a hacker I would watch to see which companies bought these, knowing they are clueless about network security and probably soft targets.

Soft targets with lots of money.
Indeed. The best icons are caricatures, designed to fit the resolution they are being displayed at. "About Those Vector Icons" is a good read that shows why "hinting" just isn't enough.

https://www.pushing-pixels.org/2011/11/04/about-those-vector...
Not really, just make your own CA and run squid.
Huh, good find. I wish the poster had some sources, especially for that initial temperature graph, but there's no reason to doubt it. Thanks for the research.
Interesting. Still better than dirt, though.
Exactly.

Everyone dealing with JavaScript should be taught about .toFixed(num) for rendering numbers as strings. In fact, anyone working on front end code in any language should learn that language's number formatting tools (e.g. sprintf). There just isn't an excuse for this type of sloppiness.
Not sure if that was an intentional mistype of "sweat spot", but given your description of their competence level I read that as a word play on sweating due to the nervousness of their code being ready to blow up vs. "sweet spot" meaning the good balance between cost and value.

Very clever :)
In my area, the best board game shops are also restaurants that people go to for dinner and to play a board game. There are 4 I can think off hand, two of which are a chain. They seem to be doing well and some take up quite a bit of real estate.

As far as I can tell they’re doing plenty well.
Ubuntu Security Podcast is a weekly podcast discussing the latest updates and developments from the Ubuntu Security Team. It discusses the weekly bug fixes the team implement which might interest you if you're technical enough. I'm not, and what I like about it is the chattier discussions between the two hosts.

In this episode Joe and Alex discuss their recommended reading list for infosec beginners and practitioners. This section starts at 10:17.

- Red Team Field Manual | Ben Clark
- Head First Programming
- Linux System Administrators Handbook | Nemeth, et al
- Robert Seacord’s Secure Coding in C/C++
- CERT Resilience Management Model (CERT-RMM)
- The Code Book | Simon Singh
- The Tao of Network Security Monitoring: Beyond Intrusion Detection | Richard Bejtlich
- The Cuckoos Egg | Cliff Stoll
- Linux Pro Magazine
- Black Hat Python | Justin Seitz
- Hacking: The Art Of Exploitation | Jon Erickson
I would love to see a playbook on making that happen.
> P.S. Does Signal still require a phone number?

Yes, as the article mentions and (weakly, IMHO) justifies.
What's your impression of Elizabeth Warren?
On behalf of groups of investors, perhaps, not employees.
A news site that contrasts the left and right's reporting on the same events
Looks cool for really simple things but wouldn't use it for anything serious. I have been using Cypress[0] the past few months and so far I've been quite pleased with it.

[0] cypress.io/
If this argument succeeds, even GDPR wouldn't save us since they're making a constitutional argument, not an argument based on the US code.
Headline vs. Reality
I am guessing you mean 500k cash. Regardless, I'm not sure if your point holds. If I have $1m in stocks, and my account is hacked, the stocks are sold, and the money funneled out, am I protected?
Oracle trying to say people don't support the open spec stance Google is fighting for. Calling BS here, f u Oracle, you are a shameful, dying company.
It happens in consulting companies, not product so much, because consultants can often undercut.
What would be the solution for this? Which actors/groups ought to do what? Could you explain this a bit? Thanks!
As a bee owner myself (as a hobby), the reality is usually 33% of hives don’t make it Through the winter. This was known back in the 70’s and probably much further (I have a book from then which covers the subject of bee keeping).

From the linked article - 40% seems a tad higher, but if you don’t over winter the bees, have a tough year, w.e. You run a risk.

IMO one of the big issues is lack of biodiversity. Bees need pollen and if they collect pollen from almond fields only, they might not have enough stores because they only bloom for a specific time of year. Further, bees need ready access to water, which deserts / bees on the road dont provide.

Finally, yes pesticides are likely a problem, but again that’s because we are bringing bees to a farm which sprays the stuff.
Course creators are incentivized to add quantity not quality of content. 'Become a web developer from scratch' is ~40 hours of mostly shite content and it has sold tens of thousands on Udemy.

Most people don't take their courses so content doesn't really matter.

Udemy is a flash sale coupon course platform. Some people do actually learning on it but not very many.
I'd also remind that Twitter is surprisingly leaky for Chinese using it, even for people who can get foreign simcards to register an account.

API leak is one hypothesis, another one is that they got a mole there too.

The same goes to Facebook. A number of FB users got detained in China with no better explanation than MSS getting access to FB's internal information like phone ID and IMSI data in user database.

The most probable explanation people have crafted is following:

1. Using internal or external tips, MSS gets user account info of a person of interest

2. Their mole accesses the user database for info on cookies, IMSI, advertising ID and such

3. MSS than cross-references the data with data on the open market, like IMSI databases sold by mobile advertising companies

4. One way ticket to Heilongjiang is issued the next day, once the identity of the person is confirmed using logs of phone companies or ISPs.