skysight-inc/HackerNews huggingface dataset:
No no no...

It is the threat that is advanced not the technique. That was my whole point. If corp users with all their security teams are still victims how much more are individuals. Or does the world outside of tech bubbles not exist?

Also, macros and docm are only small vector, most non technical people for example would open say...a jar file with a PDF icon that came from an email from a compromised account of someone they know, and trust me I've seen plenty of non corp users without the typical mandatory phishing training fall victims,lose large sums of money,etc...

I have no clue why you don't think spear phishing is an advanced thechnique. Just recently I stumbled upon a word exploit being used and it was not "spear" phising just normal stuff. Does it have to be sophisticated and impressive to be advanced? Often, the most damaging exploits are the ones with minimal attack complexity (a CVE vector that adversley affects the score mind you). Regarsless of your opinion , the offensive way is to use the easiest and quietest method.

As to my comment, the author stating the material teaches people "core cybersecurity concepts" is what I disagreed with. Memory safe lanuages and exploit mitigation solutions make these software exploit techniques very difficult to pull off. Plus, any decent EDR solution easily detects and blocks exploitation of browsers,productivity apps and other well known initial access vectors, so you're basically left with mostly linux that is not hardened and even then only on servers and network devices since most people don't run Linux desktop (and to my point the post does not even touch windows).

Essentially, my point is that any infosec education that is not informed of current practical threats and attacks while very fun to go through, it may not provide as much value as you think.

Even in a tech company/startup where everyone uses linux and mac, it is much more important to have good security architecture and hygeine, do authentication properly (you're exploit proof but someone exposed their ssh private key and got you pwned),knowing risk analysis, threat modeling,incident response,etc... Is much more "core" while exploitation of software and even spearphishing are "edge" concepts.
It is very disrespectful.

My domain is backend distributed system and FB arranged a front end manager to interview me and he explicitly said I was matched to his team, WTH?? then the interview feedback was I do not have their expected skillsets.

Why waste my' time & effort?
Depends on the features and quality of the thing.

I used to think I would never pay for an IDE, but then intellij changed my mind.
You and the parent have explained exactly what I've been running in my head when it comes to these interviews. I'm currently evaluating one of the FAANGs and with the amount of time and LC grinding I'd have to put in I'd rather learn a new technology.
Ask HN: Socially-Beneficial Uses of DeepFakes
Seems DeepFakes have been getting growing attention in the media for their use in comedy, while also giving glimpse of potential danger in "fake news". I'm curious if folks have come across any positively impactful uses (or have heard of any)?
I don't understand. How is this better than using `LAContext` directly?
You should write an essay substantiating your claims. I would read it.
are you saying FANG likes slaves?
Because when I'm evaluating two jobs I'm going to do so based on how much money I'll have left at the end of the month. Not saying that's the actual reason, but why _wouldn't_ you consider cost of living?
To me it was Maps in 2005 that really showcased what JS could do.
i hear all these engineering hours cost but only because engineering cost in US is so high. we're in Southeast Asia where senior engineer only cost $1000 a month back then in 2016.
One is supposed to prevent access to the hardware, one is supposed to prevent access to the data. They're not meant to solve the same problem. But that say, you can only block access to hardware so well, so it's worse in that regard.
Suspending can be a mistake, that's fine. Deleting DNS records and no notification is absurd.
Which comes from the dystopian novel Fahrenheit 451, wherein society goes awry to the point of publicly funding the destruction of valuable information. It's also the temperature paper (books) burns at.

Nobody actually uses this status code, despite it being an official spec. I'd like to think the dev or dev ops person who configured this server used the status code as a minor protest. The spec authors would be proud.
Go wouldn’t haven’t been suitable for Flutter because a major factor was hot reload with the AoT compiler. Something that won’t exist with Go.

I like Go, but Dart has been a pretty good language to learn.
No. Spot gives deeper discounts than savings plans do.
That is a very accurate summary.
Do you use the cloudflare api to get them all? Otherwise you'll miss some
You are correct. They have no idea how to use LinkedIn. If you literally type Google in the job field for Boulder, it shows 1600 jobs, includes jobs from companies with the keyword Google in the JD. Actual jobs from Google is 42
What is a target school?
ABC 4Corners Coronavirus Episode
The article says opensmtpd only binds to localhost by default, so you have to configure it to take mail from outside to be remotely exploitable.

That said, this kinda sucks, 2nd remote root exploit on this daemon this year, and it's only February. Good that they are fixing them I guess, but I hope they take it as a hint to make some design changes in how much code runs as root.
One thing common to banks (and in general, finance) is that a significant amount of your compensation is in year end bonuses. These figures are notoriously hard to get a hold of, and makes direct comparisons tough. Accounting for these bonuses even at the major banks doesn't make the gap seem as high as without it, but yes, FANG would still beat tech roles at these places. The better comparison would be quant roles at these places vs FANG tech.
Quantic: The World’s First Accredited Mobile MBA
I sincerely don’t mean to sound flippant, but, if I’m dead, my digital legacy is none of my business anymore.
We do have an internal Google at my place of work. It is called "Bing for business" and i will assume that many companies are using that too.

Here is a old article about what is

https://blogs.bing.com/search/2017-09/finding-what-you-need-...

Edit: I am not the sysadm and Bing for Business might have changed name since the article i linked to was written but we definitely have a "internal Google" that makes information across all our internal properties searchable when using bing.com
Did you consider incorporating convolution into the model ala the evolved transformer?
Somewhere large popular companies that pay well actively recruit from, which makes it much easier to get started.
There isn't a lot of good software written in Rust, open source or not. It's a lot of small and half-finished stuff here and there. The actual software out there is the ultimate, unforgiving, unfraudable review of a language, not what people say.

Developers seem to like Rust (or at least pay lip service). It's understandable. We are all suckers for a golden hammer. Rust promises no data races, no dangling pointers, high performance, and best of all it can run on numerous targets, making it a contender for The Last Language you have to know.

But you don't judge a restaurant's performance by the holiness of the chef's choice of tools in the eyes of other chefs. What is the most profitable piece of Rust software or the piece of Rust software that the most people depend on? If it wants to be taken seriously at the systems programming table, then we should see the Unix coreutils written in Rust (with all the command line flags working exactly the same way). Come on, replace GNU. You say you can do it faster and safer than everyone else. Let's see it.
Related to the topic of marginal benefits of AI models versus their costs:

Green AI (Roy Schwartz, Jesse Dodge, Noah A. Smith, Oren Etzioni - 2019)

https://arxiv.org/abs/1907.10597
After having 2.2 million lines of code in rust in their project they should know a bit better imho; that's more than any other language they use; with go they knew quite quickly it's not good for them.
The linked article did not have info about Thinkpads. I wonder how nowadays one can skip BIOS password of a T series thinkpad. So far it has always ended up with a motherboard change for me.
Yes and no. Because they do not want to disclose how much capacity they have and on demand costs more, customers would be left wondering if AWS unfairly decided to run on demand when spot could have been used instead.
Feds charge Columbus market owners with food stamp fraud totaling more than $10M
Same in Korea (South)
I'm not giving them any benefits, I am just describing what I have seen. I have no idea why they did that, I'm just saying that was my experience - since not everybody is going to bother clicking through all tax return forms to see what happens at the end.
Reserved instances and savings plans are predicated on predicting usage for 1 to 3 years in advance.

With spot instances, you don’t need to do this planning, assuming you can fall back to reserved quickly enough.
> Imagine if you downloaded something from GitHub and it gave you blisters

You mean Haskell?
ASG, per the blog-post you linked to, now supports starting both on-demand and spot instances, so what's the use of AutoSpotting?
All has pros and cons. Here it is (async) central simple central communication vs central point of failure I guess.
Last i checked rackspace has good free dns
Surgeons face the same dilemma as programmers. Excellent surgeons may not in fact be book smart.
Yeah, your fleet can become fragmented.
Support means all APIs have first class support by Google, just like how Kotlin has first class support on Android.
Porkbun is the cheapest I've seen
Roman society was a slave society. Alexis de Tocqueville wrote about the economic differences between the American North and South. I suspect a similar comparison is fair between ancient slave states and Industrial Revolution countries (England, Northern State in pre-Civil War U.S.).
It's not Knuth's job to write efficient word-sorting programs. That job is long done and now it's nobody's job (unless one can do better than existing tools, but that wasn't Knuth goal either). His job was to demonstrate how you do literate programming, which is completely different. If I needed to demo how to program certain algorithm so that I could explain it to students, I'd write one code, if I needed absolutely fastest possible tool, I'd write another code (probably in C or some asm even). Different tasks - different approaches.
I am surprised you read it that way. I was justifying what management does - as in the are usually paid to make sure shit doesn’t hit the fan. But the architect/engineer who design these should have made better decisions.
Indian edTech startup Unacademy secures $110M from Facebook others
Even though there aren’t that many open roles, Google has already opened part of what will be a 3000 person campus in Boulder.
Some languages do include self-compilers as part of the runtime... So probably "any" wasn't meant really "any".
I think to state "unmatched accuracy" in good faith we should actually come up with a common benchmark and measure against it. I believe there aren't really any clean benchmarks for command accuracy floating around (it would be ideal if we used a strict grammar to properly measure the command decoders), and a wav2letter model holds the state of the art for librispeech WER% as of 2019.

I found your measurement here [1] which is against an unknown wav2letter acoustic+language model pair, as the web demo is at any given point in time running an arbitrary model based on having users test in-progress models, and it has never been running the model I am currently shipping with Talon.

(As a small example, the unfinished wav2letter experiment I am training right now has a 3.17% WER on speech commands, and 6.86% WER on librispeech clean, both numbers without using a language model)

[1] https://github.com/daanzu/kaldi-active-grammar/blob/master/d...
That doesn't sound right to me - how are you defining target school?
I fully agree. Netflix is valuable now because they made some smart pivots and executed them well. I doubt Blockbuster’s executives could have pulled it off.
> Of all the languages I feel like go's deployment is probably the simplest, if it's hard for you you're probably doing something pretty wacky.

100% agree with this. Statically compiled binary is basically the easiest thing to deploy.
Well, duh. Unless you invent AGI you're always going to be fitting new models for new clients. The best case scenario is getting bought by a client and becoming their full-time ML tailor.

For a pure ML company to IPO they'd have to both solve intelligence and manufacture their own hardware. FOMO screwed a lot of investors who would've been better off buying Google stock.
Scientists discover first known animal that doesn't breathe
executing `curl -v https://whereisscihub.now.sh` shows an x-now-id header, which means that the request has reached Zeit Now servers and it's Zeit Inc who blocked it.
Browsers security risk you didn't know
As we are in the 4IR being online should be at a point where it is more safer then being on town, that because we now live in the digital era and internet is what we all use to be connected but as we are connected we all share information and information is key to us as well as hackers.

Browsers has been there for so many years now, but guess what the passwords are still not yet safe.

Most people are not aware that the typed password can actually be viewed easily. Most people think that those asterisks that are hiding what you are typing on the password field are enough to prevent someone from viewing your password but that is actually not true.

There are a number of ways to view the password simply by using the browser built-in tool called developers menu where you find tools like element inspector, network monitor.

The reason why I mention those two tools is because they are what is used to view the passwords. Luckily BRIWPED has developed a solution to this which is a one stop App solution to protect all your accounts logins.

What nice with BRIWPED is that it instantly encrypt your password as soon as you are done typing it or as soon as your browser had supplied with it. This ensures that no one ever sees your actual password and when you click login, it instantly sends you an instant notification to your mobile App.

The mobile App allows you to know when there's a login activity to any of your account and you can instantly stop any fraudulent login activity to any of your account instantly.

The stopped activity will never be able to access that website login page ever again as BRIWPED burns that activity that was reported fraudulent that because obviously if it wasn't you then someone else was accessing it so that person on that computer will never be able to access or login to that particular website on that computer ever again.

You can check BRIWPED on YouTube there are two videos demonstrating BRIWPED live.
I've found that rewriting an application from C# to something quicker like PHP or Go negates the whole need to do this kind of stuff because the C# application is 10x faster written in PHP or 20x faster written in Go. I love it when you change one line of a shared lib in C# and it takes an hour for the application to recompile.
How to secure your bank accounts and email – Provarex
It replaces on demand instances in-place. If there’s no spot instances, it will leave them running. If the spot instance gets killed, it will start again as on demand.

It sounds a bit hinky, but it tends to leave you with the number of instances you want running without having to determine what percentage of the ASG should be on demand or spot — especially with the possibility of not being able to start new spot instances if they’ve been terminated.
The sampled data must be skewed way off to one side. That cant be the average.
I might pay for a browser with extra features that I need for a certain workflow or job. But it would depend. It would really be an X with an integrated browser rather than paying for the browser itself.
Thanks. In light of what just happened I've decided to spend around 1.5 - 3 times as much on DNS & registration
Sorry, but the Gini coefficient is a not the data we are looking for here. It doesn’t capture at all rising prices and price to income ratio over time, inflation, interest rates, and most importantly, rent and land cost. You’d have to point at a much more robust analysis to prove the point either way, and there’s no way to look at it that doesn’t show a massive wealth transfer over the last ~decade.

Look at capital gains vs savings rates over the last 12 and cry. Then look at pension funds debts.

Finally, the Gini coefficient did go up from the highest of all first world countries to the highest by a significant amount.

The bailout wasn’t the problem. There was no punishment, yes, and QE was a hands down unmitigated robbery and the major factor in the populist upswings around the world.

Here’s a good one:

https://www.census.gov/library/stories/2018/08/homeownership...
Hi John, your website's contact link is pointing to your twitter account and you don't have messages opened.

What is the best email to reach out to you?

Thank you.
You can make a backup by saving in some safe place a copy of the QR code and/or the 16 character text code Paypal gives you to set up your TOTP device.

You can then use that later to set up a replacement TOTP device if something happens to your first one.

I usually use "grab" on my Mac to save a copy of the QR code as a PNG, encrypt that, and save it in an offsite location.

Another popular approach is to print the QR code and save the printout in a fireproof sale. If you do that, I recommend printing it before you use it to set up your first device, and then set up the first device from the printed code just to make sure the printed code is fine.

If you save the text code, you can also use that with oathtool from oath-toolkit [1] to generate the TOTP code on the command line if you need to use Paypal before you have your replacement TOTP device.

Note: if you do want to have two TOTP devices set up at the same time, there are two ways to do this with Paypal. One way is just to scan the same code in both devices. You can either set them both up at the same time, or add the second one later using the backup you made of the original code.

The other way is to go to Paypal's security settings and explicitly say you want to add a backup TOTP. It will then give you a QR code to scan. That is not the same code as it gave you for the first device. The codes generated from the second device initialized from that second code will not be the same as the codes from your first device.

I have no idea what the user interface is for logging in when you have two devices generating separate TOTP sequences. Does it expect you to use the first device, and if that fails ask you to try a backup? Or does it just accept codes from either? Or something else?

Offhand, I can't think of any compelling reason to prefer your two devices to have different codes, or for Paypal to need to know that you are using two devices. Just setting them up with the same code and letting them appear to the be the same device as far as Paypal is concerned seems simpler to me.

[1] https://www.nongnu.org/oath-toolkit/
Optimisation is redesign. I’m doing a video editor and have to transition to an Actor based asynchronous design if I want the user experience to be fluid. Leaving optimisation for later is not possible.
I understand and won't argue on your preference for the core Talon app. However, as all of my wav2letter code, models, tools, training methodology, and general advice (e.g. I am very active on the github/facebookresearch/wav2letter issue tracker helping others) are open source, and wav2letter as used in Talon is built from the public repository and dynamically linked, I don't think the speech engine is the place to speak against Talon's source policy.
Very interesting. I'll take a look and see if I can easily package that in a way someone non-technical could use
Internet Security Workshops at Schools – Provarex
https://cloud.google.com/kubernetes-engine/docs/how-to/preem... states that preemtible VMs aren't guaranteed to be available.
Not to mention the discovery of vulcanized rubber. You can't have an industrial revolution without hoses, gaskets, and tires.
Why is that? I thought it was a verified distribution?
When you find the term "average wage" in an article about economy with upbeat title, stop reading right there. Use your time for a more productive purpose or just kick back. Any measure, which ignores huge economic disparity is mostly a piece of propaganda. In a group of 10 people with one earning $10M and the rest getting less than minimum wage, everyone is a millionaire on average.

Unfortunately, it is so rare to see median or other asymmetric distribution sensitive concepts used in articles about economy.
Disclosure: I work for Google Cloud (and on preemptible VMs).

There isn’t anything about preemptible to “cause networking issues”. We may have had a general networking outage, if that’s what you experienced, but we don’t additionally make networking worse for preemptible. You’re likely to get shot, but we don’t adjust throttles or anything.
Large investment banks - Goldman Sachs, JP Morgan Chase, Bank of America, etc. - recruit most of their summer interns at a select group of universities, usually Ivy League universities. It is extremely difficult to land an entry level job in investment banking if you did not attend Harvard, Princeton, Yale, the University of Pennsylvania, New York University, or a few others, regardless of your skills. It happens, but the deck is heavily stacked against you.

Fortunately, tech does not practice such favoritism. The ranking of your alma mater on US News & World Report does not matter if you have the right technical skills for the job.
Very well said. I agree.
Google is derived from googol, Atari is a japanese word, not sure if Motorola is derivative though.
This isn't going to lend much insight without a distribution by job title/seniority and compositions of the total comp. (As others have already pointed out about RSUs, bonuses, options, etc potentially playing a big part). Further, I think it would be more interesting to see measures of upward mobility given cohorts in tech vs. finance to see which presents more overall opportunity.
is there something similar for android?
Pentagon Adopts New Ethical Principles for Using AI in War
Covid-19 in Singapore–Current Experience
As a movie compositor, I'm surprised to see so much compositing being done in sRGB space ("gamma space"). I'm used to doing all operations in linear space and only converting to sRGB for display purposes. Here, they seem to employ tricks to work around the issues of non-linear compositing, like making an exclusion mask of the brighter pixels so vignetting doesn't look bad.

What kinds of tradeoffs go into deciding to composite in sRGB instead of linear in a game engine? I assume there are good reasons to do so.