skysight-inc/HackerNews huggingface dataset:
It is normal, but not desirable. You should feel free to exercise full disclosure if the vendor is not being responsible.

> [W]ithout the threat of full disclosure, responsible disclosure would not work, and vendors would go back to ignoring security vulnerabilities.

https://www.schneier.com/blog/archives/2012/06/on_securing_p...
Which Disney has used in new creative works putatively to have a new Copyrighted work which will continue to hold their Copyright on the mouse if they fail to get a copyright extension through Congress. It really is messed up.
Apple Adjusts Its App Store Algorithm, Impacting Some iPad Developers
sama (Sam Altman, president of YC) did an AMA here couple of months ago: https://news.ycombinator.com/item?id=9238839
i agree with this part... unless its a gift to you, if i am going to be financing travel, it will be me doing the traveling.
I've been using Amazon from the days when it was little more than a book store and had a similar experience, though I've never placed a real high value on reviews. That's why I noticed that there was a change and that the change was taking advantage of my habit.

Five years ago, there wouldn't have been a reason to compare the Amazon price to your local price. Amazon would have been clearly a better deal on everything except how fast you could have it. That was the fundamental proposition, better price for latency. Now the calculus is more complex and Amazon has deliberately chosen to make it so.
They've largely had something like this already in most cars, a low speed bus that's got the non-critical things (seat position controls, window controls, etc.) and a high speed one that has all the things like engine data, speedometer updates, etc.

I definitely agree though they need to take this to the level that's usually seen in avionics with a read only gap between the third entertainment system bus. Without that you really can't hope to secure it. The only real problem I can see is how would you let the roadside assistance stuff unlock the doors? Maybe an authenticated write only to the low speed bus that you don't get to control the message, just "unlock all doors".
It balances out poorly, and that's the author's point. Quite a bit of energy is wasted in water free-flowing downhill (in the sense that it can not be recovered).
The NPV of Disney selling copies of its early movies is tiny. Ignoring the things like Saludos Amigos, most kids today aren't really that interested in watching Dumbo.

But Disney needs to make sure that if you want to visit Sleeping Beauty's Castle, you need to go to Disneyland.

Copyright is a too-broad tool for this, but trade mark doesn't quite cover it.
For now, Firefox can still be compiled for GTK2. I imagine that as time goes on more and more responsibility of maintaining that port will move to the LTS distributions that actually care about that.

(This is just what I think is likely to happen, this isn't based on any announcement by Mozilla.)
"I watch the children watching TV and at first I am afraid of what they are being taught, and then I realise, They can’t be corrupted or destroyed. They watch, they listen, they understand, and, then, where and when it is necessary, they reject. There is something enormously powerful in a child’s ability to withstand the fraudulent. A child has the clearest eye, the steadiest hand. The hucksters, the promoters, are appealing for the allegiance of these small people in vain. True, the cereal companies may be able to market huge quantities of junk breakfasts; the hamburger and hot dog chains may sell endless numbers of unreal fast-food items to the children, but the deep heart beats firmly, unreached and unreasoned with. A child of today can detect a lie quicker than the wisest adult of two decades ago. When I want to know what is true, I ask my children. They do not ask me; I turn to them."

They detect the first lie, yes, but what about the second lie?
Given that AT&T hasn't expanded speeds or quality for about three years, investing only in highly competitive gigabit areas, I agree with you. AT&T has absolutely zero interest in investing in a generally better network.
Its also silly, since it takes zero kilowatts to pump water from San Diego to San Diego and if you're desalinating you have to realize that California is all coast line on the left hand side.
Whoops, you are right, I should have written (modulus) and not (modulus + 1). Another reason why this is an anti-pattern :). Thanks for correcting me!
To me it simply seems to destroy half the value of having a phone number.

My Bank's fraud prevention team try to call me about an unauthorised transaction? Nope.

My doctor calls me on an unlisted line? No.

My daughter's phone runs out of battery and she calls from a friend's phone to say she is going to be late?

I ask a friend to get a friend of theirs to call me about something? No.

Hopeless.
where do you source the tea from?
This is exactly right - there's an environmental configuration. Think of the way it's ridiculous to play angrybirds with 32 or 64bit precision on your phone, you could set the precision appropriately. Or on the other side, think of how IEEE lops off data from every multiply or divide (any precision) without any point of reference for uncertainty.
But they are comparing sales per employee, not market cap per employee.
Comparing a 1 cycle scratchpad latency to Intel's 4 cycle L1 latency is misleading. Are you making chips that operate at up to 4GHz, or is this just 128KB of local SRAM attached to a ~1GHz core?
Definition of diagnosis is literally:

the identification of the nature of an
illness or other problem by examination
of the symptoms.

Unless you are suggesting that any atypical characteristics is a problem, and that for example someone can diagnose you for having green colored eyes.
> How can you tell whether someone delivered significantly better then others?

I can tell because I don't suck at my job. I look at pull requests. I look at ticket completion. I'm with my engineers during planning to know whether people are padding their estimates. I make a note whenever someone steps up in some way (handling emergencies off hours, helping another developer get their work done, etc.) If a manager doesn't understand the work of the people s/he's managing, that manager is unqualified to do the job.

As to your 1), it all depends on what type of culture a company has and how much employees are punished for screwing up. At a company like Facebook, you're expected to "move fast and break things." I'd be very surprised if people were inhibited there. If you're at a bank where screw ups mean someone gets fired, you're probably right.
FWIW some companies handle this better than others. In this case FCA took the Uconnect code from a different division and integrated it. People make mistakes, something was listening and passing on more than it should in that system, now it is fixed. I'm really impressed with the researchers work.

I've been trying to describe two things. One, the way that CAN bus operates, so some of the technical solutions people have been making just are impossible. People should imagine that CAN bus is something like RS-485 or the old systems that had some mix of ISA and PCI, not like switched ethernet. The second item is a bit of how these things happen in business world, for good or bad, not that I agree with it or anything.
Stackable SBC Sandwich Runs Linux on ARM/FPGA Zynq SoC
The security community, like any community, loves things that increase its status.

A bunch of stuff getting compromised because Idiot Software Company Couldn't Write Secure Software and making national news increases the status of the community.

It's an uphill fight against basic human group dynamics.
Nice work!

If you're interested in an option that guarantees atomic deploys and rollbacks across all files in a deploy (not just individual HTML files), handles instant cache invalidation (no 1 minute wait), and comes with built-in continuous deployment, checkout Netlify:

https://www.netlify.com
Angular Componentization Talk
Previous discussion: https://news.ycombinator.com/item?id=9942102
Amazon has become eBay. A catalogue of products with hundreds of duplicates, tons of resellers etc., just a mess.
Amazon sells groceries now, too. I usually buy things from Amazon that I used to buy at Walmart. I think Amazon will be around for a long time, and Walmart's margins will shrink as competition becomes ever more fierce at the bottom end of the market.
I've got a project in a similar veign here: https://github.com/donatj/XLS-XML-Formula-Expander

It's ancient and flawed but it converts a SpreadsheetML ( https://en.wikipedia.org/wiki/SpreadsheetML ) aka "Excel 2003 XML" spreadsheet to PHP in real time.

There is a VERY complicated configuration tool for a major steel company that runs on this still, last I checked anyway. I left that job ~5 years ago. I've done a few small updates since then for them, but not much.

It was nice though because it allowed the company to just submit a new Spreadsheet and their tool would automatically update. I was very proud of it at the time. Haven't had reason to maintain it though, but it works much faster than other tools that do similar for PHP.
Father Guido Sarducci would be proud. "Just add water, and Mr. Tea does the rest!". Shame the video isn't anywhere I can find it.
Hours can be really useful, especially if they can be scheduled in advance.
Technology has now ushered us into the age of 'hyperemployment'
Nice, short little book!

`compose` can be simpler:

def compose(fn, *fns):
def _composer(f, g):
return lambda *args: f(g(*args))

return reduce(_composer, fns, fn)

This little function is really, really cool because it allows you to build up more interesting functions by piecing together a bunch of small, useful ones.

def upper(s):
return s.upper()

def exclaim(s):
return s + '!'

# instead of this
really_angry = lambda s: exclaim(exclaim(upper(s)))
really_angry('napster bad') # NAPSTER BAD!!

# we can do this
really_angry = compose(upper, exclaim, exclaim)
really_angry('fire good') # FIRE GOOD!!

# and
import operator as op
from functools import partial as p
max(map(compose(p(op.add, 1), p(op.mul, 3)), (1, 2, 3, 4)))

`compose` is a neat function and worth exploring. This is a cool book and I always hope Python gets more light shone on its FP-friendly features.
In fact, about the same as the energy to desalinate it via reverse osmosis ...
Previously: https://news.ycombinator.com/item?id=9937961
The network effects of the whole water system of California are definitely something I hadn't taken into account, and I think local water storage / production is the way to go.

And certainly a number of foods could be produced elsewhere in the country or imported. If I ate a lot of almonds I might feel indebted but really I eat a whole lot more of foods that aren't plums, grapes, lettuce, artichokes, etc.

Talking about the agriculture aspect always takes me by surprise because the state represents a large percentage of the country's population but a smaller percent of its land area. Given that most areas of the country could be used for producing something, its not as if all food production could be removed from the state.

And I also think about Japan, because, even though it has a smaller land area, the climate allows the country to produce enormous amounts in agriculture, mainly rice, but other products, too. So obviously it depends on the land. It's also something where, the farmland in Japan is beautiful, while the farms on the West Coast don't really seem to be (subjective).

It's also really amazing to see this article slip off the frontpage, and I noticed this with attitudes while I was in the state, but it just seems like people don't care. So maybe it has something to do with people's attitudes, too. Dealing with big issues takes a bigger attention span.
i tried to use it, it just crashed FireFox 39.0 on Windows 7.
The new STEEL CRADLE protective cup will protect your most important part like it's a state secret. But don't just take our word for it - try for yourself! Our CEO, proudly joining other CEOs in putting all their trust in their company's product, is wearing a STEEL CRADLE all day long and he's walking the streets of San Francisco from 8am to 8pm, inviting you to kick him straight in the family jewels.

Wear steel-capped boots! Use a hammer! Catch him while he's least expecting it! Our CEO knows that STEEL CRADLE will give him all the protection he needs.
So unfortunately the people that you as a sysadmin are protecting against don't care about your need for a buffer to update systems. Once the patch release is out there, the exploit writers know the target and can just create the exploit quickly without a PoC.
For a MnA? Yeah.

For equity market cap value that the article and previous person are talking about? No.
My girlfriend and I tried using rabbit but we weren't happy with the performance. Their implementation is actually to open netflix on a virtual machine GUI and use browser tricks to try to make it seem like you're just controlling the computer like its your desktop. The performance tends to be bad because there is two hops, from netflix to their servers, and their servers to you.
Thanks, I added it to the readme.
Really interesting project. The source code is a bit scary[1] but I suppose that's to be expected (machine) translating Excel to C. Good work.

[1] - https://i.imgur.com/q2KZRR1.png
Previously: https://news.ycombinator.com/item?id=9933918
But the unnecessary risk is so close to 0 that it's obviously just manufactured outrage. If you read about this and came here to comment and that's all you can talk about you might as well be trolling.

It's harmful. You're going to make some politician think that's where they should spend their time instead of figuring out why the car company sat on this for so long. Our whole society will lose.
There is a difference in intention:

fzf presents itself as a general fuzzy finder tool.
QFC is a specific tool for completing just file/dir path.

If you use the two, you will notice the difference quickly.

Sorting && Filtering isn't the same, for example:
If you write 'bin' and there is a matched directory for that string ('bin'), you will see only the dir path not all files inside the dir.

Also, you can arrow keys to navigate between directories.

You can also type special characters like '~', '$HOME' etc..
Amazon doesn't have to remove reviews. They can just show the five most productive one's on the product page. Given that for many items Amazon has multiple listings of the same thing, they can just put the one's most to their advantage upfront. Amazon can create (price . review rating) anchor points by ordering the listing on the search results page.

To put it another way, if you're shopping the most relevant result for ten listings of X is the one with the lowest price. That's not however what "sort by revlevance" seems to mean.
No, Google gave Microsoft X days to fix and release, and MS missed the deadline. (Assuming I'm thinking of the same issue as you.)

Google didn't release PoC exploit code the same instant as Microsoft released the fix.
Could you please stop referring to people who disagree with you as "anti-vaxxers" and "trolls"?
Gotta say though, in terms of driver stability and user experience in terms of related software, etc, NVIDIA has the edge.
Someone did the math on a previous thread, you would quickly find that all the trucks in the state would not be enough to carry away the salt you would produce with even a modest desalination yield. And there would not be a market for that much salt.
Using Ionic Framework with Angular-Formly
s/rip-off/parody/, no?
integer:floatingpoint::floatingpoint:unum

The same way as you store some "meta data" by adding x10^23 to a value of 6.022 ... here you are adding meta data of precision (certainty) and resolving a ton of "NaN" and error issues with IEEE.
this reads like the author is in love with these two guys. doesnt come off as unbias.
For people interested in algorithmic art, I can heavily recommend the nature of code, a free ebook (also available in print) that translates many natural phenomenon into code, physics, vectors, cellular automata, fractals and more! http://natureofcode.com/book/chapter-3-oscillation/
As I understand it, it's just "floating" interval arithmetic, so like in interval arithmetic you should understand a representation [a,b] as 'The number is contained in the interval [a,b]'. In other words, interval arithmetic with carefully assigned floating point limits such those don't violate the interval arithmetic and are concise.

Not sure how it would go, I think it depends if you maintain the precision or increase it after this operation. I guess 2 bit: (1/2,1)+(1,2)=(1,inf) (?) and 4 bit (2 exp and 2 mantissa?): (1/2,1)+(1,2)=(3/2,3). Maybe there's a built in check to compare how short your interval can get and stop at a reasonable precision (in this case there's no point going for more than 4 bits).

Honestly I find it quite elegant and is at least trying to solve a big issue with bandwidth limitations. I do wish the exposition was more clear/straightforward.
It could just be recommending things you buy seasonally, without recognizing the relationship between the items.

Try buying lag screws, rebar pullers, etc. in 6 months and see if it recommends your baby wipes.
>IIRC, Facebook edits what they show you in the feed based on what you click a lot - so what you are provided with tends to be what you agree with. And other non-interactive material make it harder to have conversation. Lastly, I think things done online usually happen in the context of an online community that tends to anchor the conversation there - not necessarily bad, but potentially if the conversation/community is homogenous.

This depends entirely on what sort of sites you visit. I agree that sites like FB and Twitter that do that are harmful and promote homogeneity.

>Perhaps, but consider the following, which will be a reason to encourage off-topic conversations. You have multiple 'similar-interest groups' that you belong to that are orthogonal - my work buddies have different religious views and my fellow congregational members have different occupations than I.

My friend from Australia whom I play video games with is studying to become a geophysicists. While a lot of what he learns is a bit over my head, I enjoy discussing what he is learning with him to the best of my ability. I'd consider that orthogonal.

Just like you can ask your congregational members about their occupations - you can ask your online friends about theirs as well!

Perhaps its a part of "internet etiquette" that people don't go off-topic as often as they might offline?

I don't deny that the internet might promote homogeneous communities more-so than offline, but by no means is it a limit or barrier that cannot be passed once someone becomes aware of it and desires to change the behavior.
I wish people would actually think about issues before saying "false sense of security." It's as useless as shouting "that's security through obscurity!" without thinking about things.

If you want to get rid of the False Sense Of Security, announce that there are working exploits out there.
Canadian west coast! Vancouver & Victoria.
> Giving the price a second thought, is this a normal fee in the US? Our landline costs just over 4 euros and the cheapest mobile subscription I've been able to find is 3.50 a month.

No, you can get mobile service for $3/month [1] with a minimal number of minutes. I didn't look too hard, its possible even cheaper plans are available.

[1] http://prepaid-phones.t-mobile.com/pay-as-you-go
An exploit as the fruit of someone's labor is non-trivial, often holding significant monetary value. They (exploit authors) have no obligation to release it to the vendor at all, let alone for free and "responsibly". Is the unpaid labor scheme you're describing "ethical"?

If vendors want "responsible disclosure", they can simply buy exploits at market value.
Every big company that sells enterprise software has those same clients. Those are Oracle clients, IBM clients, Microsoft clients, and Cisco clients. Why is Palantir special for having a GSA price list?
That "criminal action" statement was repeated multiple times; obviously they're trying to send a message. We need whistle-blower protection laws so that the auto companies can't try to eliminate this research by sending the researchers to jail.

Law enforcement won't try to analyze the firmware, but class-action lawyers certainly could. Won't do any good if the bad actors have erased their tracks of course.
The actual answer is in the thread:

http://www.openwall.com/lists/oss-security/2015/07/23/19

"That's how coordinated release dates work. Instead of trying to shame Qualys for not following your arbitrary views on what is and isn't "Responsible Disclosure", perhaps you should make sure Red Hat releases patches hours before the CRD, like Ubuntu does?"

The rest is the usual rehashed discussion on this topic.
Can BuzzFeed Be Trusted to Write About Science?
Race and class are tightly bound in America. But there are some things in the study that are at least suggestive that it's a racial difference.

First they attempted to assess names race, and got rid of names that were insufficiently suggestive of race.

The study varied postal addresses and included African American names from richer neighborhoods and whites from poorer neighborhoods, and included both low and high quality resumes. Hypothetically, if people were associating black names with low class more then white names, then there should be a significant difference in the benefits of a "good" neighborhood between whites with a good neighborhood and blacks. There was none.

Further, one would assume that if class was the determining factor, then a better quality of resume might offset this. It did, but to a lesser degree for African American Names... that is, whites got more effect from a better resume then blacks did.

A white name was, by the researchers estimates, the equivalent of an additional eight years of experience for black people.

If being perceived as black, or if names that are predominantly understood as black are sufficient to assign a person to a lower class, I'd argue that that's inherently racial discrimination.
Well the governments actions in the last few years has more than encouraged companies to keep people at twenty nine or less hours.

That seems to be the new entry point for a lot of service/retail work. Get past the trial period and there may or may not be opportunities to move to forty
Dup: https://news.ycombinator.com/item?id=9942638
Or you could just buy a Sage Tea Maker and keep it on your desk/in your kitchen (hint: I did, it works great):

http://www.amazon.co.uk/Sage-Heston-Blumenthal-Maker-Litre/d...

(They're available in the USA but in a reversal of the normal state of affairs they cost more than in the UK. Oh, and Amazon.co.uk aren't the cheapest retailer for them; just the first that came to hand.)
Well, his comment isn't that all the stories, or even or that Snow White specifically, were 40-50 years old. There are examples that better fit his argument, and they are not hard to find(I used wikipedia):

Pinocchio, released on 1940, was based on a novel from 1883, 57 years, then. Disney also tried to avoid Bambi copyright (book from 1923, movie released on 1942, 19 years difference), although the court did not uphold its public domain status.

He surely could have referenced better, but I do believe you should have tried to interpret better his comment instead of nitpicking and being unnecessarily aggressive.
I don't know about your particular complaints, but I recently went looking for an alternative to Dropbox because they've made it impossible to share files without exposing your real name to the people accessing them, which is a non-starter for at least one of my use cases.

I settled on Box and so far I'm quite satisfied.
I haven't had a popsicle since I was 12