skysight-inc/HackerNews huggingface dataset:
There is genuine disagreement about whether email qualifies as a second factor. As it is often just protected by a username and password the argument is that it's the same "something you know" factor as a password, or just an obfuscation of the same factor.

I will say, that if cybernews have done what they say that they've done, and PayPal are claiming that it's not a concern, then PayPal are clearly in the wrong, and that remains true even if we all agree that this isn't 2FA.
It's certainly very effective at providing said people with a false sense of security. It's also another buzzword they can utilize to waste people's time during meetings.
>An engineer's operating environment, OS, IDE, shell, terminal, is a reflection of the inside of his or her mind writ large.

Shout out to the people that don't really bother because they're good enough to adapt to any setup. :)
Signal provides reproducible builds these days:
https://signal.org/blog/reproducible-android/

Not sure how feasible this is on iOS (with Bitcode).
I'd highly recommend OpenStax math textbooks, they are completely free, openly licensed, peer reviewed, and by Rice University. They also start from Pre-algebra.

https://openstax.org/subjects/math
The reason for the question, IMO, is not to get the given answer.

The reason is to learn why there is an answer, at which point you can give an opinion as to whether cm/mm are better. You've missed the primary step, and almost certainly are - as others point out - over qualified for this question (which is a precursor to discussions of decimal precision).

Often when helping the kids with homework I find myself answering "well this is the answer they want ... but the real answer is ...".

tl;dr the question is there to make you think, not because there's only one answer.
We also have a air purifier that watches for particulate and they would battle each other constantly lol.

Moved to an evaporative humidifier, my air quality appliances now operate in peace.
https://github.com/signalapp/Signal-Server
This is a bit tangential to the topic, but I find it immensely more interesting that after literal decades of utterly egregious abuses and downright evil behavior by PayPal, people still seem to be surprised by this type of behavior.

I find it so fascinating because it is a kind of manifestation of what is clearly a kind of mentality of abused people, the kind of people who usually others see as being trapped in a kind of inability to internalize the abuse being perpetrated against them, and therefore rationalize, excuse, ignore, etc. to simply push away and hide and suppress the clear abuses happening to them. It's just as sad as it is interesting to me because of the inherent illogical puzzle it represents, a puzzle that clearly has not yet been solved or for which there exists no easy and clean solution. How do you get someone out of an abusive relationship, be it a personal relationship or something like a formalized cult?

We are all abused by PayPal and other tech companies on a constant basis, yet all we do is lament the treatment, while simply just continuing on in the abusive relationship. Someone should tell PayPal, etc. "no, you are not allowed to abuse us anymore. We have human rights and your lies, deceit, abuse, manipulation, gaslighting, monopolization, etc are not going to be tolerated anymore." But I guess our other abusers in Congress get too much money and free meals out of it to change that.
I worked as a contractor for a company that's a household name in the US. I am now convinced that HackerOne only exists for CISOs to say "look, I'm doing something" during the 2-3 years they stay at a company.

The cybersecurity team had a backlog of roughly 30 critical issues discovered internally before starting HackerOne. We were unable to fix those issues, or the ones reported to us, because we had no visibility into source code, there were 12 different development teams, most of them outsourced, and all the project managers were interested in was covering their ass.

The HackerOne deployment was invite-only, but the few hackers in it did fantastic work. I kept being told to find excuses to reduce the amount we'd pay for the critical issues they'd find and we'd fail to fix. At least we triaged faster than Paypal.
I actually did this as an undergrad, despite barely being able to afford school. I left school for a bit, so I could figure out how to actually pay for it. After getting that worked out, I came back and realized I'd forgotten way more math than I had anticipated. Between my CS courses and math I was getting overwhelmed with the sheer breadth of information I needed to be have mastered to comfortably follow along. I took a one semester long remedial class that served as a refresher to all high school level math.

After that I worked through my classes with a tutors help. Everything up to and including linear algebra and numerical analysis with the help of a extremely kind PhD student named Adnan. He had the patience of a saint and ended up becoming a very good friend.

The most valuable part of having someone like this available for an hour or two every week is that it increases your knowledge or understanding/minute rate dramatically. It's like having Google or Khan academy on steroids. Someone that did everything already and knows exactly what page of a text book to look lat to help you understand, but they don't even need the textbook, because they know how to explain the concept you're having trouble with.

To this day I work as one of many data lscientists on a team where we all have fairly diverse backgrounds. In fact I'm the only person that is only CS and does not have a graduate degree. I have a teammate that did her undergrad and Masters in mathematics and if I'm having a hard time with something math heavy after some googling, the first thing I do is ask her for a quick explainer. She does the same with me for CS or programming issues as well and I help her with informal code reviews.

I know this will seem like basic teamwork to a lot of folks, but far too often I see people in our industry exert huge amounts of effort to understand a difficult concept that likely someone they're sitting a few feet away from has a very good understanding of and would be happy to help them with, so they're not banging their head against the wall for hours. I had to have a similar conversation with my intern a couple years ago. She was spending hours doing pen on paper math to understand Kalman filters. Things went much more quickly after I talked to her about my process of working with my colleagues and asking for help when I didn't understand something.

TL;DR Ask for help sooner rather than later. We all stand on the shoulders of giants.
I really like the new design!
Crypto AG was an intel op the entire time. Where is your proof Signal works for and is owned by the American government?
Nothing you’ve said remotely contradicts what I said. Feel free to provide actual evidence that my facts are incorrect.

Why shouldn’t we care about a virus that mainly kills old and sick people? Especially when that alone can overwhelm our medical infrastructure.

Additionally, even a 0.5% mortality rate for young and otherwise healthy people is much higher than the flu, and serious cause for concern. I’ll take a 0.5% chance of dying over 2% any day, but I still will take a lot of actions if I can to avoid a 1/100 chance that my daughter has to grow up without one of her parents.

As long as we’re talking about facts and misinformation, let’s talk about your assertion that mortality rates are going to be lower than Wuhan. They may be, but it’s way too early to say. We don’t yet have reliable data on how many mild cases are missed in the official figures, how the remaining unrecovered patients will fare, or how many deaths have been caused by the virus but are not attributed to it in official figures.

Look, I get that you’re scared and lashing out at people who are saying you have reason to be, but you’re not going to make any difference here. This is a serious global issue, which is why every country with significant infections is going to incredible lengths to try and contain it. I’d suggest you stop trying to police people on the internet who aren’t meeting your personal standards for reacting to this and instead do some prep to keep you and your loved ones safe and secure.
TNDR (Too Narrow - Didn't Read): I have a really wide monitor and this site's code is horrible to read as it's compressed to a very narrow strip (less than 600px) of text down the middle of the browser window. I tried ... I really did and it seems like the content might be worth reading.
I suspect because its an opinion piece, not actual news.
Yeah if you didn't mind waiting 30 minutes to an hour to start watching.

Sky Box Office just used spare bandwidth to continuously broadcast the same film on different channels with a time offset. That's why then only had a selection of about 3-5 films at any one time.

That was still a useful service but not the same as real video on demand.
No lawyer either and I don't know how to parse the legalese of the actual text [0]: "Infringements of the following provisions shall [...] be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher:" but reading that as a generic "max(10 million, 2% worldwide annual revenue)" seems unlikely to be correct - especially given all the "up to"s in the sentence.

[0] https://gdpr-info.eu/art-83-gdpr/ Art. 83(4)
That is not how the EU works, at least not the parts which I have some insight into. There is indeed a lot of design by committee but the countries have little to no say in the day to day work of the EU agencies.
> good luck getting rid of that one without building your own hardware and drivers from scratch.

For an individual that is obviously infeasible. For the continent of Europe as a whole, it obviously isn't. Why shouldn't they put some money into developing cellphone hardware with open source drivers?
The Talent Myth (2002)
First, massive disaffection with typical management is what leads to schemes like this. Especially when it comes to non-technical management, they are not equipped to do any of what you wrote. Not that technical management would be great or something. I am not fan of "everyone is leader" organization, but I am aware that contemporary management is not capable of all that much.

> Team members don't need to be "heard," or need sympathy from managers

I do actually want my opinions, ideas and preferences to be heard. If I think that I am not being heard, I prefer to change the team so that I am heard. If I don't change team and I am not heard, I work in more checked-out mode - which is pretty normal. It is doing somebodies domain, I cant take full responsibility if all decisions are somebody elses. thinking more about them just frustrates, so it is natural adaptation to avoid doing that.

> Taking direction or orders from a manager is only ever stressful if that manager doesn't take accountability for their decisions and directions.

Not true. For me, I am actually more stressed when I cant make own decisions, cant influence what affects me or dont have autonomy. Even when management takes responsibility for decisions and directions, purely top down management or micromanagement is stresor and demotivator.

> they need confidence that their leadership understands the environment they work in, takes responsibility for decisions, and gives them direction based shared competence

Leadership that does not hear people who work on the projects, can not understand the environment those people work in. Nor I see space for "shared competence".
Many of us could not be brilliant polymaths. Also, they did have wealth via slavery plantations that allowed them fancy tutors, expensive libraries, and top class educations.
We agree that if you want actually to be able to do the math then you need to do the exercises.

Do we agree that if you don't do the exercises then you probably won't actually be able to do the math?

You are discussing learning about the math, and not eventually being able to do it, because you say that you don't care about becoming a mathematician, therefore you don't need to do the math. Fair enough.

But my reading is that that's not what this thread is about. This thread, and the original submission, is about learning how to do the math.

> i do not see the exercises as essential for anyone other than practicing mathematicians.

I think you're wrong. Knowing how to actually do the math has proven useful to many people for whom it is a tool in their craft/job/employment. Learning Linear Algebra properly, being able to actually do it rather than just talk about it, can be enormously useful in Machine Learning.

>> That, to me, implies learning to do, not learning about.

> here's a fantastic explanation of the topological proof of Abel-Ruffini ... would you say that I don't understand that proof if i haven't done any exercises related to it? and therefore would you say I didn't learn any math by having watched that video?

Understanding a single proof implies very little about one's ability to actually do the math. I've met many people who are math enthusiasts and who have watched hundreds of math videos. They say they understand all of what they've seen, and yet they are unable to do the simplest proofs, or the most elementary calculations.

My experience of people's abilities is that if they haven't done the exercises, they usually can't actually do the math.

But you complain about the length of my replies, so I'll stop. I think I've made my position clear, and I think I understand what you're saying, even if I don't agree with it.
YouTube briefly terminated a livestream, creating one of the longest videos ever
What may save you is terms on the card about refunds needing to be credited back to the card - pretty sure that used to be the case and probably still is. I think it was originally to prevent under the table cash advances, but also to protect merchants from giving refunds then being hit with chargebacks. If the bouncing e-check was done through PayPal as well then they may have screwed up by allowing it.
Do you get icy-freeze-thaw conditions? Here in DC, we don't get a ton of snow, but when we do get winter weather, it's always just at freezing, so everything immediately gets thawed and re-frozen into ice. Most of my trips to Scotland have been summer, so only had snow up Glen Shee. The one time I visited in winter, it snowed a bit as I drove between Laggan and Dunkeld, but nothing dangerous.
I recently had the experience of taking my first graduate-level probability course. It assumed quite a strong familiarity with real/complex analysis, and I suffered quite heavily. Something of note was that once I finally managed to "peel back" the analysis, the underlying intuition made a lot of sense for the simplest cases in probability (e.g. hypothesis testing between two normal distributions is a matter of figuring out whose mean you are "closer" to).

I am of the opinion that notation is a very powerful tool for thought, but the terseness of mathematical notation often hides the intuition which is more effectively captured through good visualizations. I would really like to take self-driven "swing" at signal processing, this time approaching it through the lens of solving problem on time-series data, since as a programmer I believe that would be quite useful and relevant.
> Not anywhere on the page you linked.

Read the page carefully - it specifically states they are an auditor approved org.

Quote from page:
“Meet penetration testing requirements for PCI DSS and SOC2 Type II compliance certifications with our auditor-approved penetration testing methodology and Security Assessment Report.[1].”

Secondly, PayPal works with HackerOne officially [2] and within the CVSS standards as they clearly state on their HackerOne page, which is complying with PCI DSS.

[1] https://www.hackerone.com/product/challenge

[2] https://hackerone.com/paypal

Edit: Archived incase:

http://archive.is/CvZqg

http://archive.is/GGDs2
Making Web Components for Different Contexts
It's wild that sunsets would be impacted. This didn't totally make sense to me...
The only OOP-ish thing I've really missed in nim is interfaces. It seems to be a really convenient way to re-use code: "this function (proc) can operate on any type that has implementations of this and that other function (proc)".

Googling has left me with suggestions of using macros to re-implement similar functionality, which I guess is in line with nim's philosophy of "small core with powerful macro system". Looking into it however, developing macros seems like more effort than a simple interface.

Just the impressions of someone not super familiar with metaprogramming.
Also funny, my result of this is that I now order basically everything directly via aliexpress. If all i get is chinese crap anyway, I can at least get it cheaper.

Then I noticed that aliexpress actually made some pretty good page design choices. Since you can see how long a seller is registered and how many they have sold (both directly on the product information site), it is pretty easy to find a at lest decent trader there
>for why this phenomenon only happened in the Netherlands, and not it's neighbors Belgium, Germany or Scandinavia.

They were already tall no? Were they ever shortest in Europe?
I had the exact same reaction. Thanks for shedding some light ;)
One would think that being smart should be an asset when playing politics, though.
US stock market beats private equity’s returns for first time
How is runtime fault-tolerance achieved? My understanding of Erlang is that the BEAM VM implements these capabilities (custom threads, supervision, restarts, hot reload), but it is one level removed and above actual code. And they implement their own user-space threading runtime in order to support them. But in Rust, there is no such runtime (or is Bastion implementing one?) and it seems like this is used as a library. I'm very curious.

I think another way to frame my question would be: which is the basic unit of parallel execution in Bastion? A thread? Or a separate process? There are mentions of lightweight processes and subprocesses in the README but it is rather vague what these are.
Now I'm curious. IANAProgrammer, what programs have you made that don't have any maths in them?

Can you share example code? I can't see how that works.
If you just launch vim it tells you the basics of how to use it, and how to get more help. So it's definitely possible to learn it without external resources.

Emacs is the same.
And there was just simply a lot less to know.
Not using something that actually improves security because people might think that it actually improves security is a crappy argument. If your phone is insecure for two separate reasons you should fix both of them instead of using each as an excuse not to fix the other.
On the other hand diseases don’t reach 100% of the population on the same day. Quarantine has been surprisingly effective in China, though at significant economic cost. That seems to be a much larger concern than the capacity of heathcare systems.

If this becomes a true epidemic it’s going to be bad, but societies have been dealing with epidemics for a long time.
Well, as far as I remember, the suggestions in the start menu for me were implemented as .LNK files. Although I might be mistaken there, since I've encountered those years ago and never since. Obviously, in contrast to your experience, where by some mysterious, unfortunate circumstance and surely through no oversight of your own, you seem to be struggling with suggestions and/or ads (who knows which?) in your system on a daily basis, even though you seem to have a Win 10 Pro system.

In my experience, those links weren't intrusive, they weren't detrimental to my experience and I could get rid of them once and for all. And I'm pretty sure .LNK files don't track you if you don't call them.

So to answer your question, I draw the line at opt-out functionality.

But since you are so committed to materially correct use of words, you still have to explain your "astroturfing" comment here: https://news.ycombinator.com/item?id=22398478.
I've filled out the no-license-needed form [1] for five different homes, every time the letters have stopped and I've never been visited by anyone.

If what you want is the letters to stop, IME filling out the form will prove more effective than strict non-communication.

[1] https://www.tvlicensing.co.uk/check-if-you-need-one/topics/t...
Blocked at my school :/ you can use Firefox's (probably Chrome's as well) reader mode to bypass the paywall though.
In this threat model, the only defense you would have would be an overlay network resistant to correlation attacks where all nodes are involved in routing traffic (like I2P), or a mixnet like Katzenpost.

Getting people to use Tor for everything is hard enough, good luck getting people to use stuff even more obscure.
Most of these shortages are regional. That will probably continue, but at least it would be possible for people to get reimbursed for travel expenses, etc. At least that's what other countries do.
I'm not talking about this case specifically.

At least Paypal was notified before the public disclosure!
"Notably, for the first time, Intel is not inside. We are not using their hardware for any major server components such as the CPU, board, memory, storage, network interface card (or any type of accelerator)."
These kind of keywords really should be next to the search box with a question mark next to them or something.

TIL some of them are on this page that you only see if you search for an empty string:

https://github.com/search?q=

Click on 'prefixes'. This kind of thing should be readily available from any search box that searches through GitHub.
GDPR breach fines are discretionary rather than mandatory. They must be imposed on a case-by-case basis and should be “effective, proportionate and dissuasive”.

Fining a small mom and pop site 20 mill (20mil/4% is the highest fine depending on the case) is not proportionate, not effective because I would like to see them actually collect on that and I would say such a fine to a mom and pop would be dissuasive of doing business at all which is not that the ICO in the U.K. would want. Speaking of the ICO, their big fine (fucking auto correct) to BA for shockingly bad security earned them a 1.5% fine instead of the max 4% because they worked with the ICO (but the ICO still found they failing in a duty of care to protect data) and have been pushing the fine down the road ever since it was issued, atm the earliest ICO will actually fine BA is next month and it’s been almost a year since they filed their "intent to fine".

So while they can throw around heavy fines. It’s not like they run every mom and pop site out of the country.
Thank you very much, was really not sure how long a frozen but unplugged freezer would last.
> Channel 4 was first by a considerable margin. I remember using 4OD back in 2006/07, it was great.

Channel 4 launched about six weeks before iPlayer in the end, but only because the BBC launch was held up by the regulator. It was ready (ish) about six months earlier.

4OD had the seven day window at launch, it didn't launch any box sets until about 2009, and it had lots of rights issues too. Indeed, they forgot to rights clear any of the advertising and had to blank all the commercial breaks with dead air on the online simulcast for the first week...

I do agree that Kangaroo was a bit more complex than portrayed here, but your statement that the BBC are "fleecing" the public by trying to commercially fund the release of older material that is virtually never fully BBC owned and requires the payment of hefty royalties is false.