skysight-inc/HackerNews huggingface dataset:
Sounds like Twillo was actively helping hackers "That allowed them to see which users had moderator rights and this in turn allowed them to reset passwords of existing users with simple “forgot password” function. Since Twilio no longer authenticated emails, hackers were able to access admin accounts with ease."
Same problem with gab. Both platforms are even more restrictive than main stream social media sites.

True though, don't think many people would want to work for them and as it seems they need some devs at least.
Ok, that doesn't mean there is a cabal of party operatives and big tech working together...
But why does a public official's office need to be a public area? I'm sure you're not allowed to walk into it without an appointment, so having appropriate security barriers wouldn't stop them doing their job at all and would improve security.
Social media platform Parler goes dark after Amazon cloud suspension
We have that Lodge cast iron wok too, but don't use it for stir-frying... very clumsy. Instead we use it for deep frying - a task for which it's better suited than any-other our other vessels.

We do our stir-frying on a regular 14 in carbon steel wok, nothing fancy. It does take a bit more oomph than most American gas stoves provide, but we've had good results by ponying up for a Bluestar range [0] which outputs 25K BTU/h ... well short of what you see in Chinese restaurants, but on par with Western commercial stoves.

Actual Asian households don't generally cook on fancy restaurant stoves, and yet somehow manage to stir-fry satisfactorily. The trick is they use propane, which has about twice the energy density of natural gas. So it's a lot more effective (and cost-effective) to use a turkey fryer/crab boil burner to do your stir-frying, if you can swing it.

[0] https://www.bluestarcooking.com/cooking/rangetops/36-platinu...
Seems a difference without a difference to me. In the old days, people could be Flat Earthers if they wanted to.

The notion of external opinions being crammed down through threat of deplatforming and blacklisting is scary stuff.

I urge reconsideration.
More importantly, the value of zero day exploits on the black market can run into the hundreds of thousands, we are told.

As the music industry learned the hard way, if you make it too hard to be a good guy, everyone will become a bad guy.
Is there a data source that says that temperature variances have increased? I have never seen meaningful evidence of this.

> Same for other extreme weather events like hurricanes, wildfires, and droughts.

Extreme weather events are extremely hard to define, and have such a low occurrence rate that you cannot extrapolate an increase in the timeframe we're discussing on a global level.
It might be a lousy year for sales, but it should be an absolutely killer year for repair and tuneup work. The required bits for most tuneups are limited to lube, tubes, cable, and housing.

Those four things will get you a long way with most bikes that "ran when parked" 10-20 years ago. There is a vast number of bikes in the US that meet basically that description.

Source: was a volunteer bike mechanic at the Ohio City Bike Co-op. They got a lot of donations in that were at most 60 minutes of work from being rideable.

https://ohiocitycycles.org/
This sounds like an incredible fuckup by Twilio. If it's true that their authentication verification was the entrypoint, they could be liable for leaking an enormous amount of personal information.
Leaving aside used sales (which can make sense for CDs from a pure economic perspective).

I assume most people who buy CDs are those who want to own their music but don't want to deal with torrents and figure that, if they're going to buy a whole album, they might as well buy the CD and rip it.

Whereas vinyl and, I guess???, cassettes appeal to nostalgia and a certain physicalness of the media. CDs probably seem rather utilitarian in contrast.
Yes, of course, that's how humans work. But these bubbles are often considered as a singular group moving as one, when in reality they are separate organizations and individuals who agree with each other.
I think you're replying to what you assumed matwood was going to say about the Russia investigation, rather than what matwood actually said.
The problem with this idea that we subsidized solar until it was profitable is not accurate.

Solar power doesn't pollute and I would argue that all other forms of power that do pollute aren't taxed nearly enough for it, with coal being the most obvious example.

Coal power sends an insane amount of carbon into the atmosphere. If we properly carbon-taxed coal, it would go out of business tomorrow. And that doesn't even get into the environmental destruction that comes from strip mining.

Strip mining is when coal companies buy a whole fucking mountain and then destroy it piece by piece to remove the coal. How the fuck is that not good for the environment and our society after the coal is gone?

So, solar power really is a lot of cheaper than coal when you consider all the negative externalities that it brings.
There are tweets from 2016 calling for Trump's assassination. When is Apple going to take down the Twitter app?

Here's just a search I did now: https://twitter.com/hashtag/assassinatetrump
That diatribe at the end shows where your mind has been this whole time.

Just going to point out that Kathy Griffin was suspended on Twitter and lost her job.

I guess that part didn't fit your narrative...
Is truck robbery at gun point a huge problem currently? Already robbing trucks is pretty simple afaire, but there doesn't seem to be huge boom going on...
another good list is here:
https://github.com/charlax/engineering-management#1-1
I think these are very keen observations of reality, and they're very well put.

I've long-admitted that my heuristics for choosing a tech stack are very similar to what you describe. I analyze the requirements and give each technology a pass/fail grade. Then, amongst those that pass, I simply choose the one that I find the coolest.
The linked post celebrates this saying they can share this data with law enforcement, but is it legal for them to pursue cases based on the evidence found in stolen data?
>Or simply decertify all of the vehicles that behave incorrectly from driving on public roads.

At least in the US we try to grandfather in old tech because the poors have enough problems without the government telling them they can no longer use their junk.

If a box was checked, a standard was met or a capacity was stated when the vehicle shipped the box remains checked more or less in perpetuity. This makes for some great internet arguments when the pearl clutching crowd tries to appeal to the authority of manufacturer statements with regard to older vehicles.
I won't dispute they brought the prices down, but there were sub-$100 devices around, some (like the sheevaplug) included the case, power supplies and onboard storage, though no video output.

The pi was part of a continuum, rather than a revolution in its own right.
Considering there is no practical attack here -- you don't know the private video's ID -- it's unlikely that that would serve as much of an incentive in this case. They'd just get the bug for free. Plus, youtube has no way of verifying you had the bug before it was leaked publicly.
What? People who agree and have a common interests are not immediately part of a group who move as one.
Java Syntax Puzzlers
Among the thousands of open source projects, the ones championed as successful open source business make up a tiny proportion i.e. the exception not the norm.

Meanwhile the SaaS business model continues to eat the software market. A model that gives users less control than the desktop software model. And where the source code (built on open source) is not visible.

Open source software has been critical to the success of the SaaS model. You could argue SaaS is the true success of the 'open source business model'. Just not in the way open source advocates expected it to be.

There is another option - one that some open source advocates will immediately dislike: source-only products i.e. you sell your software product to customers to run them themselves. You give them the source code of your product so they can customise it to meet their needs. But the software is not open source and cannot be shared the way open source can.

There are successful source-only products. Two examples: Craft CMS and Kirby CMS. Both publish their source code on GitHub [1] [2] and rely on the honesty of their customers to pay (which they do). They have a thriving community of developers making plugins and extensions - proving that you can create a community of developers around a 'source-only' product.

[1] Craft CMS: https://github.com/craftcms

[2] Kirby: https://github.com/getkirby
Yeah, I know.

I think HN is getting brigaded pretty badly for anyone who's said that Parler's security was garbage, so maybe that?
Social credit scores and the automation of service access control is going to be one of the truly great shit shows of our generation.
That is not the policy of drivers who wish to retain their CDL. Gradually disintegrating radials are a hazard to everyone on the road. It isn't as though blowouts are uncorrelated, anyway.
There's been more than one scandal regarding emissions. OP may have been talking about CO2 emissions ratings, which are also manipulated.

https://www.ft.com/content/2a123e88-9582-11e8-b747-fb1e803ee...
The US government heavily subsidizes oil and has heavily subsidized nuclear as well. Both were choices for strategic reasons, to be independent in sources of energy (and to have nukes).

Preventing climate change and becoming independent from non-renewables seems like a worthwhile strategic goal to me, too.

And these are only the active subsidies. We're not even talking about the externalities.
> I don't know where the problem is.

The problem is nobody's gonna get fired for not solving the problem in GNOME. Nobody is accountable, and nobody has to cooperate on and solve the user's problem. One person can be a blocker for 10 years and nobody can do anything about it.

The second thing Leadership is useful for is forcing people to do the right thing. That seems to be missing here.
Take photo of the qr code with any camera and open the image in Google photos. Google lens will detect qr code and do the rest
Impeachment process is 100% political. It doesn't have anything to do with legalities and so no lawyer knowledge is needed.
Then you are pitting nascent white hat hackers against seasoned black hats and how do you expect that’s going to turn out?
Startups need early adopters who value potential and future vision. Innovators and early adopter look beyond your current offering.

The challange is finding equivalent of early adopters for commodity markets such as electrical energy. That where the government policies could step in. There are some things that initially are too expensive, but at scale could be game changing.

Instead of grants, I would allocate $100mln - $1Bln / year to auctions. to buy at lowest price, the cheaper price available should unlock bigger pool. Good examples for government subsidies:

1. Negative carbon emission.

2. Carbon-free steel.

3. Carbon-free concrete.

4. Synthetical fuels such as natural gas or gasoline.
Alternatives to WhatsApp
> “No one will argue with the direction,” said Liam Broza, a founder of LifeScope, an open-source data project. “He’s on the right side of history. But is what he’s doing really going to work?”

While I totally support Tim's project, history will decide what is "on the right side of history". Unless he's from the future?
In a literal or figurative sense? Asking because pretty much everything is blown out of proportion today.
Appreciated! I’ll take a look.
It's a bit more difficult with a person on board.
> Have already shown with evidence that they were indeed moderating hate speech and did indeed have it clearly, unambiguously defined in their guidelines.

You have not done this. Parler allows hate speech.

Parler literally takes it as a principle that they only "censor" illegal content and span jurisdiction. That excludes hate speech.

Hate speech is not illegal in Parler and Twitter's jurisdiction for the hundredth time.

That's why they were banned.
https://www.nolo.com/legal-encyclopedia/searches-private-cit...

> But, in some ways, there’s really no such thing as an “illegal” search by a private citizen, at least in the sense that police searches can be illegal: Regardless of issues like lack of probable cause, evidence found by private citizens acting on their own is usually admissible in court. That’s true even if the private citizen committed a crime like trespass or theft to accomplish the search.
So you give the credit to Apple,Google and Tesla ? any sources on how much did this companies invested in R&D for solar panels or wind turbines? Or how you connected smartphones and cars sold in last decade with all the research that happened until now?
My first thought would be flash storage. So I would read that as no or failing local storage on the phone.
SonarQube is one of the most famous quality checkers.

Another good measure is the number of dependencies used: if too much, the quality might be poor (= poor maintainability).

Is the application vulnerable? Check OWASP for this.
What could it refer to but the flash storage of the phone? Hence the NetBoot: the phone has no working non-volatile storage.
> easier to replace the services of Google, Facebook and Twitter

Not by much. Especially Google, among other things you gonna replace smartphones of 50% of the population.

> But even that doesn't seem impossible.

Exactly. And if there's no key differences, why we regulate them so differently? Utilities can't discriminate based on political views.
This story truly terrifies me: my team owns my company's sign up page. (I speak for myself and not them, of course).

Sounds like Parler, fearing that their OTP provider might go down, decided to fail-open, ie: if the dependency throws an exception, presume there's something wrong with the dependency and that the code provided is acceptable. It never occurred to them that the dependency could be down permanently, or that malicious actors[0] would be able to realize it and exploit to quickly.

Lesson learned: do not fail open where security matters, where authentication matters. Failing closed prevents new users/customers from signing up, but it protects your existing users/customers.

[0]From a security standpoint, these are malicious actors. I would also probably buy said malicious actors a beer if I met them, accompanied by a high five.

Edit: this is a hypothesis of course. Maybe the bug was somewhere else in the system- it could be in Twilio's provided integration library where the fail-open occurred.
Teaching Self-Driving Cars to Watch for Unpredictable Humans
Off topic: Thanks to your link at the bottom of the page I discovered your DevUtils project and bought it right away! I've been looking for something like this for years without realising it! Many thanks! I feel $15 is very cheap though.
Because there are two different topics. Whether global warming occurs or not, and whether it is man-made or not. First one is easy to prove, just look at the temperature charts over the years and analyze. Second one is harder to quantify.
Then Twitter should be banned too because it's full of calls for political assassinations: https://twitter.com/hashtag/assassinatetrump
Probably depends on the use case. On a budget car I can see where you're coming from and I agree. However, in the more expensive range I was thinking about, not so much. These can have pretty good audio systems (some even come with DIRAC these days). The "infotainment" display also usually integrates things like cameras and allowing you to control various settings*.
On a 80.000US$ car you don't swap the radio and let some shop do magic adjustments - you just get the 2000US$ "high end" audio package if you care for that.

*) Regarding settings, I'm a opponent to "control every little thing with the touch screen" and don't buy cars with this safety hazard. However, I can adjust the a lot of "offline" settings in mine. Toggle adaptive head lights, lane departure warning sensitivity, registered keys, and a many more features one does NOT change during driving.
It would be useful to clarify what "follow the rules" here means, in the USA (for us non-USA audiences). It probably varies in different countries, but in most cases doesn't it simply refer to fair usage? Make your payments in time and don't put excessive strain on the grid by powering your inter-dimensional portal. Does ideology or clandestine activity matter in how you use electricity? Of course, a court order could force the utility company to cut you off, but can the utility company simply cut you off based on their or society's _opinion_ of your activities?

If you consider an internet connection a public utility, which we should, then that would be ostracism. In terms of companies being able to successfully run their businesses, are we at the point where a "cloud provider" should be considered part of a country's infrastructure?

I can agree with the point being made about an internet connection, but Parler was still able to buy some servers and self-host. Unless there's an argument here to consider cloud providers a de-facto component of a nation's tech infrastructure. Seeing as we have no proper public regulation of the sector and no public player providing the service, I'm not sure how far that argument would go. It's still an interesting question to ponder on, I guess.
> You attend as a student, which means you are there to learn, not to share your thoughts like it's a real-life HN thread. Don't want to learn the material?

This is entirely wrong. You're describing indoctrination, not learning.

Truth is not injected into students, spoken from on-high. Get out of here for suggesting that.

Go to a monastery if that's what you think learning is.

Truth is discovered and spread through dialogue.
The latest Blërg (or barf, as suggested) is from 2017.
i dont see how that would be a "bug" per se - the concept of "private" is set based on the account ownership, not the id itself. you could set a public video to private, or vice versa. whatever the ID, google still has to check against your authz before showing the video. this seems better than relying on security by obscurity.
My insurance on the bike is lower if I use a https://bikefinder.com/en/ which is a device in the bike that tracks it (gps).
Maybe Parler should have done their due diligence and planned for if their email verification service stopped working.

The logic doesn't even make sense.
Twilio goes down for them and then they just allow anyone access to user accounts.
All of this is surely going to end well.
Why doesn't chain of custody apply to data?
[Warning: over-serious response coming.] There's a big "cattle grid" sign a little way before it, so I don't think that's a realistic worry. As an aside, that road is long, but a dead end: it leads up to a beauty spot / hiking point. The road also largely lacks dividing lines (i.e. it's sort-of single track, though often wide enough for two vehicles), and the cattle grid comes not long after a sharp corner, so I can't imagine many vehicles would have been able to get to flying speeds. Besides, that neck of the woods has plenty of interesting driving roads including the main A39 out of Porlock just a couple of miles away, that I imagine are of more interest to speed demons.
It's hard to tell. It could be that Parler's systems were set up to just fail the wrong way if the Twilio auth system didn't respond (on error: allow).

Whatever the case, this is going to be 'fun' to watch.
Not in the slightest. Banks rent-seek on a fundamental part of a functioning economy: issuing credit. They have a privilege to print money for free, which they then "lend" at market rates. There's nothing "inevitable" about this, this is just how things were set up by the people in power.
Apple and Hyundai Set to Announce Autonomous Electric Cars Deal
Similar situation here. I live in NYC and commuted year-round to work via bicycle for 5 years straight ... and then COVID happened, I haven't even been allowed into the office in 9 months, and my bicycling activity has correspondingly plummeted off a cliff. I now do most of my biking on weekends (for errands and such), which was far from true before March.

So, it's amazing how much the cycling numbers here have gone up even with people like me staying home. I'm looking forward to seeing how many people are cycling once it's all over. Will people like me going back to cycling be added on top of all the others who switched from subway to cycling, or will they go back to subway?
A common issue with automation, capitalism, etc. People may lose their job and will have to find something else to do, but if it's not a sudden transition, the amount of drivers will be reduced organically; it'd be a matter of less new vacancies opening up, and the career of driver becoming less attractive, so people will find something else.

It's a valid remark to make, since people lose their jobs to automation or outsourcing or whatnot all the time. But overall, global unemployment rates don't seem to be affected by new inventions, instead new jobs are invented all the time.

I mean a shit job that nobody should pursue as a career now is gig economy stuff; underpaid taxi driver / delivery person, there have to be millions doing these kinds of jobs now.

Anyway I do agree, not everyone can go for the high tech / high paid jobs. But the country can accommodate for it; give everyone equal opportunities by funding education (instead of relying on meritocratic scholarships and / or lifelong loans (the phrase indentured servitude comes to mind), do a state fund and set price limits on education). Make more jobs viable by raising the minimum wage, restricting the gig economy, setting work hours and day restrictions (e.g. 0 hour on-call contracts), basic worker protection laws and stuff. And finally, applying downward pressure on the cost of living so everyone can live comfortably regardless of job.

Everyone should be able to do a 40 hour work week if they choose to, no more than that unless they get paid 150%, and less if they choose to. And people working like that should be able to live in a reasonable distance from where they work.

The alternative is the "working poor", homelessness, working multiple jobs, working 80 hour weeks just to meet bare necessities, etc. This is already the reality for a lot of people.
Maybe.

If you have ever been in a relationship, you know how irrational people are: ergo, ability in logic and mathematics plays little role.

Went to MIT in engineering/science, and I would do a mental face-palm when I heard other engineers try to ‘sell’ what they are working on.

It’s the “curse of knowledge” where you forget how to relay ideas because you forget your axioms have been updated but the person you are talking with has not had theirs updated.

This is to say some people (in all fields) can sell ideas, and some can’t. Just as some can do high level mathematics, and some can’t. Those curves overlap in unexpected ways.