skysight-inc/HackerNews huggingface dataset:
One thing worth noting about that map is that it's only for major roads that appear to be the responsibility of Transport Scotland - local areas have their own snow clearing coverage e.g. Here is the map (sadly without automatic updates of gritter locations) for Fife where I live:

http://arcgisweb.fife.gov.uk/LocalViewEXT/Sites/publicWinter...

Mind you - the road where I live (which to be fair is rural and up a hill) was blocked for about a week the last time we had any serious snow and it was some local farmers with JCBs who actually cleared it.
We've had increasingly mild winters on SW Ontario, Canada as well.

Some people celebrate it. I personally hate it. It still gets cold occasionally, but jumps back up suddenly. It's February and for the past three days it's been almost 10°C. (makes for bad outdoor ice skating :P)

When I was a kid it was normal to have snow up to an adult male's knees. My grandfather has stories of snow drifts covering streetlamps.
11 Tools to Monitor SSL Certificate Expiry from Cloud and Scripts
Yeah but someone reporting a vulnerability to HackerOne is not the same as HackerOne reporting it. Otherwise you could just spam HackerOne with reports and remove someone’s compliance.
I was about to dismiss the article thanks to lines like this:

> In essence, it would work with phished credentials just as well as with stolen ones

But, sure enough, it's not the opt-in 2FA, triggered on every login, that was bypassed, but the 2FA checks triggered when PayPal detects suspicious activity. As far as I can tell, if you've enabled 2FA yourself, this bypass won't work. Thanks for the link! Going to go make sure I've enabled that...
GitStalk – Discover who's upto what on GitHub
SMS Attack Spreads Emotet, Steals Bank Credentials
Matrix, which is already used by the French government.
Could we hear a little more about the background of the project, including what it's being developed for? Really interested to learn more about the project, this looks great
When the presenter uses .pptx to launch presentation instead of .ppsx #smh
Seems to have some intro to logic and math language, if you have never read an math books as the ones referred in this post, that book should be a nice way to ease into it.
Hailing from Canada - does not look like nearly enough, probably because Scotland has relatively mild climate.

The road network is very dense and branched out. Also, it takes several snow plowing machines going in formation to clean major multi lane highway. Timing is also important- you want the road cleaned as soon as possible not several days later, especially if wet snow freezes into ice.
Does your state recognise software engineering as a chartered profession?
> What is perhaps less apparent is that having faster tools changes how users use a tool or perform a task.

Important here is that for a user, "faster" means with respect to achieving the goal.

At work we've created a module where, instead of punching line items by hand and augmenting the data by memory or web searches, the user can paste data from Excel (or import from OCR) and the system remembers mappings for the data augmentation.

After a couple of initial runs for the mapping table to build our users can process thousands of lines in 10 minutes or less, a task that could take the better part of a day.

It's not uncommon with some follow-up support after new customers start with this module, so I often get to follow the transformation from before to after.

They also quickly get accustomed. We'll hear it quick if those 10 minutes grows to 20 from one build to another, not much thought is given to how 20 minutes is still a lot faster than they'd be able to punch those 8000 lines :)
>>and no one who paid hundreds of dollars for "lifetime" memberships are being refunded.

Lifetime means as long as they are in business. No doubt a horrible move but I doubt anyone can do anything legally: "we're working on it...and when we're ready we'll release whatever we have designed."
> Modern Greece is an economic cripple from public sector benefits for example, as are all US cities.

What do you mean by this statement in regards to US cities? the Cities in the US are generally our economic growth centers, and represent a substantial amount of economic vitality.

Comparing them to modern Greece is really bizarre.
> HackerOne states they are a PCI-DSS auditor approved organization

Not anywhere on the page you linked. And a "PCI-DSS auditor approved organization" is not a "PCI-DSS approved scanning vendor" which if they were you could just quote the certificate number instead of link to HackerOne.

----

EDIT: I guess you are referring to this:

> Meet penetration testing requirements for PCI DSS and SOC2 Type II compliance certifications with our auditor-approved penetration testing methodology and Security Assessment Report.

This in no way is the same as claiming "we are a PCI-DSS auditor approved organization". Which again, would be irrelevant if it was the case.

----

Further, if you read the article, it is clear the "We" does not refer to "HackerOne".

> When we pushed the HackerOne staff for clarification on these issues, they removed points from our Reputation scores, relegating our profiles to a suspicious, spammy level.

As far as I can tell "We" refers to cybernews.com

And again even if cybernews was a PCI-DSS approved scanning vendor it would still have to qualify as an official external scan within the PCI-DSS framework.
Mathematicians propose new use of neural nets for noisy, high-dimensional data
AFAIK according to GDPR this (to hold non related features hostage) is specifically not allowed.
Not to worry, I’ve been on the other side of open source - being one of maintainers for some parts of D language. It takes a lot of time and effort.

Hope to work with you guys on OpenDistro more closely in the future.
Locust swarms arrive in South Sudan, threatening more misery
Except it says "whichever" is higher, so if they decided to fine you 10 million or 2% of revenue, and your 2% is much lower than 10 million, guess which one you're paying...

> Up to €10 million, or 2% of the worldwide annual revenue of the prior financial year, whichever is higher

See: https://www.gdpreu.org/compliance/fines-and-penalties/
Those prople are doing a great job managing their risk profile. You should respect them. Beating inflation is exactly the right thing to do with money you can't afford to lose.
Khan Academy is great as they start from the very beginning. If you’re a good problem solver you can skip most of the videos. If you learn by videos, they’re very helpful.
Yes?

If we want to be cynical, of course there was a self-serving reason they created the standards -- because fraud, especially "internet" fraud, was on a massive upswing and it threatened this enormous new market of credit card spending. There is no question it's in their self-interest to improve the general condition of transactions.
So did it. I didn't know if it was a service or a library or if it integrates with something. Looks like it's a library for Rust. I think mentioning Rust would speed up the understanding of where this sits
With cooperation, you could literally target just certain devices with the compromised version.
The places that called it that saw 10-20 F changes. You also have an inaccurate conception of how much temperature changes over the seasons; Summer in the northern hemisphere is only 6 C warmer than average.

https://en.m.wikipedia.org/wiki/Season#/media/File%3ASurface...
As context, at the time of those issues, the control-flow restrictions were a compromise to help get the "MVP" off the ground, with the understanding that "more expressive control flow" was expected to be added later:

https://github.com/WebAssembly/design/blob/master/FutureFeat...
The replies here are so telling, many would not survive on such a team. However, their perspective is critical to understanding who you must exclude to make this system work, and the kind of passion required for people to feel the sense of ownership needed.
https://www.gdpreu.org/compliance/fines-and-penalties/

> Up to €10 million, or 2% of the worldwide annual revenue of the prior financial year, whichever is higher

I'm no lawyer, but this doesn't sound like it's just for the bigger players, at the minimum you'd be looking at some fines. At minimum you'd be paying 10 million if you incur that amount of fines. I guess it could be argued the 2% is geared towards hurting the big players.
> - sometime, the same product, between two batches, is not produce by the same sub-contractor

Case example: I have two pairs of a specific model of cycling gloves, both are subtly different in materials and have different labeling styles, as well as different "made in" statements (one European, one Asian). Had I bought them from Amazon I might wonder which one is fake and it wouldn't be clear at all. But I got both pairs directly from company HQ stocks, the closest thing to a definition of "authentic" we have in today's inscrutable networks of subcontracting.
Canadian Privacy Commissioners Investigate Facial Recognition Firm Clearview AI
What are your experts telling you about this virus?

Surely they are reading all the available literature that has been published, they would be poor experts if they weren’t keeping up with the hottest topic in their field in like forever.

You should get them to come here and do an informational, break down some of the more specialized technical information, about how the virus behaves, attacks, etc. clearing up any confusion the technically minded, lay virologists among us.
As I note in another comment - the gritters on that map are a small subset of all the gritters - those are just the ones that appear to be centrally controlled on 'major' routes.

We don't get huge amounts of snow (at least not very often) - but what we do get is a combination of snow and high winds - which can make it a nightmare to keep higher roads open.
It's a bad argument for another reason. In 2009 there was a totally different government in power. It's weird to blame politicians today for decisions made by the opposing party over a decade ago.

The BBC's problem is not iPlayer vs Netflix. It's that they aren't producing enough compelling content anymore to justify the tax that funds them. Additionally they keep angering ministers, who think they're biased and out of touch.
Stupefied: How organisations enshrine collective stupidity
tl;dr it's because they are below sea-level
Boring Company Finishes First Tunnel for 155mph Vegas Loop
> It is a poorly worded and confusing policy. Yet, if I found a 2FA bypass and I read that policy I would conclude that it is in scope and submit the issue.

If you wanted my advice as something of an insider to the platform, I'd say that you should point to the ambiguity there ("One policy says yes, another policy says no?") and ask for an Informational close rather than Not Applicable. (H1 hates it when researchers ask for a specific close status, but it's common and often reasonable.) Closing your report Informational instead of Not Applicable costs the company nothing, so even an argument that isn't very strong on the merits can carry the day.

I wouldn't push for a payout, given the out-of-scope phrasing. If executing a successful attack requires you to possess stolen credentials, they're on solid ground when they tell you the attack is excluded by their policy.
It's a library in rust for actor-model programming like erlang does.
There is Matrix, which is as far as I know backed by a British company.
> Consequently it's better to build with React Native even if you're only targeting one platform

In the context of the article how is this easier? Integrating with a platform specific API requires knowledge and experience with it, what benefit does sticking another layer infront of it bring? If a developer knows the platform and API then chances are she will prefer to work with the API directly and use the latest version, official tools and docs.
I say it all the time, there are no incentives or rules regarding cybersecurity standards, or companies have no obligations to follow them. The cost and risks of cybersecurity is pretty high, the public are always the first victims and pay the damage.

Cybersecurity always has been a national problem which should be solved by laws.

Insurance companies or banks should at least be encouraged to do more.

Cybersecurity shouldn't be improved with bug bounties.
I suspect the supposed sluggishness attributed to Webpack actually comes from Babel instead because it's been fast ever since I removed Babel from my pipelines (because Typescript already covers what I was using Babel for).
Possibly, a blog post will follow if that happens. PayPal has aways been a firewall around my creditcard number and I've never linked any other current account for pulling funds as, having worked in the payments industry, I know what a shit show it can be and that (in most cases, especially like this) the creditcard issuer will stand with the cardholder and not the merchant.

Now i'm using other methods to pay for most e-commerce transactions: one time PANs, a distinct debit account that I keep a minimum amount of funds in for this stuff, etc. So PyaPal are no longer seeing anything like the level of use they once did from me. They can ban my account if they want, the issuing bank have already said they will proceed with the chargeback if PayPal don't issue a refund.
> you won't actually be able to do the math

but i'm not a mathematician. i don't need to be able to do math anymore than i need to be able to do history (while reading serious history books).

>And if you meant "learning to do" then in my opinion you are wrong, and one needs to do a large slab of the exercises.

no i didn't. that's precisely why i used the word "exposed".

>violent agreement

we don't agree but i'm not being violent. but my responses are short and yours are long.

i do not see the exercises as essential for anyone other than practicing mathematicians. i have read a great many serious math books (i just recently finished Tu's Manifolds book and am now reading Oksendal's SDEs). i read them without doing absolutely any exercises but following the rest of the guidelines in the post i responded to. the experience is gratifying because i learn about new objects and new ways of thinking about objects i've already learned about. that's absolutely the only thing that matters to me.

but let me ask you something

>That, to me, implies learning to do, not learning about.

here's a fantastic explanation of the topological proof of Abel-Ruffini

https://www.youtube.com/watch?v=zeRXVL6qPk4

would you say that I don't understand that proof if i haven't done any exercises related to it? and therefore would you say I didn't learn any math by having watched that video?
Since you were at Apple during what is arguably it's most interesting period software wise, what is your take on the present state of computing? How do you feel about the way Unix has overtaken everything and hasn't budged? What do you make of the period at Apple that gave rise to things like Hypercard, SK8, Dylan, your own NewtonScript, OpenDoc, and a host of other promising technologies that were axed?
The West has also squandered its opportunity in the name of “non-discrimination” and “political correctness”. The right (with hindsight) response would have been to ban all flights / arrivals from China / Asia, but I guess that’s wrong-speak in the age of “open borders” as the only non-Nazi political option.
Yes. You may not like it. I may not even like it but everyone from people who drive trains to technicians in lots of areas use the title.

Furthermore, tons of experienced working engineers outside of software don't have PEs. They're just not needed in a lot of contexts.

Edit: I'm referring mostly to the US. Licensing bodies in some places (perhaps including some US states) may say that only licensed engineers can be called/are engineers although the degree to which such strictures are followed will almost certainly vary. (I was told this was the case in Texas but there's no shortage of people in Texas who call themselves engineers but aren't PEs.)
> What actual threat are they trying to block here?

A large powerful country ruled by a megalomaniac who has proved he isn't afraid to ruin his country's reputation by abusing his power.
The trunk road network is 2179 miles (3506km) long and there's ~120 gritters deployed.

Doesn't seem like an unreasonable amount to me.
And here you can find the "resistor hunting" which describes what has changed on the PCB :

https://www.raspberrypi.org/forums/viewtopic.php?f=63&t=2596...
You could've put the ACAB at the beginning so we know we shouldn't not mind the things you say.
Of closed cases (people that have recovered or died) the fatality rate is more like 10%. It's only 2% of total that have it, meaning a lot of people have neither recovered or died as it spreads and they're waiting to find out if they fall in the 10% or the other 90%.

Edit: https://www.worldometers.info/coronavirus/
Looks like its now only 9%, it was 10% a day or two ago.
Yes. the title was changed which I wasn't aware of.

Origin title: `The missing part of actor-model programming in rust`.
There are many complicated reasons that a hospital would charge more than people can afford. One factor is that it looks better on their balance sheet to have uncompensated medical costs. This is exactly why insurance companies never pay the full price, and why nobody pays the difference. It’s accounting magic to make hospitals etc look like nonprofits and claim subsidies.

That being said, there’s been a trend in the US recently, where hospitals have very aggressively gone after unpaid bills of the uninsured, because some administrators see it as money they’re leaving on the table. It’s more prevalent in rural areas, where there’s often only one hospital to go to, and consumers have no choice but to go to the hospital with a terrible reputation.

In some cases, they’ve convinced the judicial system to garnish the uninsured person’s wages, to get “their money back”. IMO it’s clearly illegal and it won’t last much longer, but yeah the system is crazy. :/
Show HN: Build your own personalized robo-advisor on Interactive Brokers
Upvoted, but not sure it's a tragedy. Much like that quote about democracy, it's a bad system, except the others are worse. Would be nice to have something better tho.
I’ve seen that terrible argument with “closed figures” a couple of times now but don’t really have the time or patience to write a long rebuttal.

That, and the fact that the post you responded to is comparing apples to apples and does not rely on the validity of any one fatality rate estimation methodology.
Show HN: G4rdens: Simple tool for habit management and resource allocation
Ok, but is it cool and why? I was hoping for more comments here. :)
> water authority and, since they are mostly publicly owned

Not here:

https://en.wikipedia.org/wiki/United_Kingdom_water_companies

(E.g. Canada Pension Plan, Morgan Stanley, Hong Kong based investment trust)

As I said, it may be a regulatory (Ofwat) requirement, but it isn't just a public body doing right by its citizens.

Interesting anyway, not that much of it means anything to me. Though apparently if/when I try brewing beer again I should add some magnesium. (It even lists the range that's helpful as a yeast nutrient, and above which contributes unwanted taste.)
https://archive.is/8xopJ
It is possible to escalate your dispute with a company to H1 itself. They'll review the report and the company's policy, and they may contact the triager or the company to try to resolve any questions.

I wouldn't do that as a regular thing; you're pretty well guaranteed to piss off everyone on the company's side of things.

I should note that I've personally seen probably in excess of $100,000 paid out through H1; the payouts do happen.
Alas, the embroidery world still ships things on CD-ROM.
Of course it is. The officials at WHO failed us because they are more worried about the politics than the truth. This type of behavior will make us not trust them in the future.
It's a promise that got taken to court and survived. https://signal.org/bigbrother/eastern-virginia-grand-jury/

You can use a different contacts app, you don't have to give all your information to Google. My contacts are managed by a Nextcloud instance.
> some guy who literally said he got the job because he was friends with Obama

There are two kinds of U.S. ambassadors:

1) Career foreign service people

2) Friends of the presidential administration at the time

Examples of the latter aren't hard to find. Off the top of my head I'm familiar with William Timken, a US businessman who was appointed Ambassador to Germany by George W. Bush because he was a huge supporter [0,1]. Colloquially we could say he got the job because "he was a friend of Bush."

I remember being surprised to learn that US Ambassadors were (maybe still are) individually responsible for paying for a good part of their formal duties as Ambassadors(eg throwing parties, travel, etc). So historically, having wealthy people in the role was a requisite. I gleaned this from reading "In the Garden of Beasts" by Erik Larson [2].

The bits I have cobbled together suggest there is an interesting history surrounding the practice of selecting and acting as a US Ambassador.

[0] https://2001-2009.state.gov/outofdate/bios/t/53349.htm

[1] https://www.spiegel.de/international/spiegel/us-german-relat...

[2] https://www.goodreads.com/book/show/9938498-in-the-garden-of...
More than 80 hippos roaming Colombia's major river thanks to Pablo Escobar
It seems that a number of publications have lowered there paywalled for coronavirus articles. As an important public service article, it seems like a crappy thing for the NYT to keep it up.
Author here:

Actually it's 7 [1]

But in my future backend revamp I plan to make the default 6 [2]

Note that the line can easily be updated to

const MAXRANK* {.intdefine.} = 6

as in the planned revamp and then you would be able to change the MAXRANK with a compile parameter

nim c -d:MAXRANK=16 path/to/my/app

[1]: https://github.com/mratsim/Arraymancer/blob/6fddfa9a734ac01c...

[2]: https://github.com/numforge/laser/blob/d1e6ae6106564bfb350d4...
Nearly 1/3 of bad bots are now using residential IPs
This article tackles the 'simple' case of comparing Netherlands to the United States.

It doesn't provide a motivation for why this phenomenon only happened in the Netherlands, and not it's neighbors Belgium, Germany or Scandinavia.

Those would be much more similar in Social equality, and to some extent even dairy consumption.

Edit: I've corrected Holland, to read Netherlands. Apologies for the misnaming.
I've never liked these rent-seeking bugbounty platforms which are inserting themselves as middle-men and mediators, but then take away the real value that comes from building direct client relationships.

it's ok for people who start out and only want to work on vulns and not bother with "sales" (building long term client relationships). severely limiting though in the long run!

much better to spend time on pitching your service directly and build a name for yourself this way. most customers I had always came back and rewarded me with more work. on those bounty platorms however you're constantly competing with drive-by pen-testers who lower your price and you have no say in the whole negotiation and bargaining phase. your previous reputation also tends to stay locked into these platforms.

a better long term approach is to build connections, set up a ltd (LLC) and make sure you have a good lawyer who can advise you (not just when things go down). ideally build a collective with other like minded (e.g. like a consulting or law practice where you don't always have to share clients but you can if you want to complement each others skills).

this is imo the best way to escape the "scope-prison" and the best way to learn about clients additional (and actual) weak points (points that they haven't themselves even thought about).

does anyone here do it this way or with a similar approach?