607 karma · joined March 8, 2016
> It would probably put turbo-tax out of business though, this is true. The default, free, option is going to win against a paid product.
That is largely what this is:
https://turbotax.intuit.com/personal-taxes/online/free-editi...
Yes. However, the current failure rate of human drivers being improved on is the standard I care about.
http://www.cnbc.com/2015/10/29/crash-data-for-self-driving-c...
> After crunching the data, Schoettle and Sivak concluded there's an average of 9.1 crashes involving self-driving vehicles per million miles traveled. That's more than double the rate of 4.1 crashes per one million miles involving conventional vehicles.
That is the only number that matters to me. Google gets that to 4.0 per million miles and I'd say they are good to go.
I'd say an attachment to money is one of the most human capitalist motivations on the planet.
It is more like an AI with one directive to seek that most human motivation of greed to the exclusion of all else.
The point is that complicity provides the avenue to allow people to tell themselves a story of how the banks weren't the largest part of the problem.
I'm sorry that wasn't clearer. I was just discussing the art of self deception depends heavily on a kernel or two of truth to hang itself.
To be fair, the public isn't 100% blameless as a large number of people made poor choices to create the situation. Supply without demand is largely useless, after all. Similarly, the public hasn't shutdown the routes after the fact but rather accepted a smokescreen of a solution.
The blame primarily rests on the shoulders of the banks and credit rating agencies because they provided the supply. They also were the best informed side of the transaction and engaged in a certain degree of deception that they should be punished severely for.
The best lies, or distortions of reality, do have a kernel or two of truth.
The catch with these are shared Avoton CPUs. So their "large" 9.99 plan is likely 4 VPS on a single 8 core Avoton would be my guess.
https://www.online.net/en/dedicated-server/dedibox-xc
1x Intel® C2750 (Avoton) with 8 cores.
Avoton cores are very weak compared to other cloud providers.
It might save you $200 a year in electricity costs, but if it costs me +$2k, well, yeah. I'm not going to run this setup 10 years.
I guess I consider that Anybody but fair enough.
> Yes. You may be eligible for a motion to seal or expunge and in that case they would be sealed or destroyed. Otherwise, they are public record.
https://www.eff.org/deeplinks/2015/09/little-fanfare-fbi-ram...
> Being a job seeker isn’t a crime. But the FBI has made a big change in how it deals with fingerprints that might make it seem that way. For the first time, fingerprints and biographical information sent to the FBI for a background check will be stored and searched right along with fingerprints taken for criminal purposes.
http://www.secureidnews.com/news-item/countries-adopt-biomet...
etc.
1) There are tons of ways you can end up in a public database with all of that linked to your fingerprints.
2) Background checks require fingerprints, ever ask yourself how secure that information is? [ Hint: Not so much, much like SSNs, you have to assume they are public knowledge if you've ever had this happen. ]
3) Voting records in quite a few countries include this information and they are basically public record.
> Most people don't leave their name/address/uid along side those prints. Imagine this scenario: you are hanging out at your friend's house, for whatever reason you find yourself handling his dildo, he sells it on ebay, 4chan buys it and lifts your prints, your mother gets a call...
Yes they do.
Yes.
> Based on our investigation, the data dumps include 1.3 million records of overseas Filipino voters, which included passport numbers and expiry dates. What is alarming is that this crucial data is just in plain text and accessible for everyone. Interestingly, we also found a whopping 15.8 million record of fingerprints and list of peoples running for office since the 2010 elections.
None of this information is particularly secret or sensitive.
1) Fingerprints are left everywhere anyway. You aren't going to be able to hide these.
2) Passport information is recorded in 2930423904239049203 places already. Much like your IP address, social security number, etc. it should be treated like a username and not a password. [i.e. It is the publicly known portion of your identity]
3) If you are treating PII as private, you are doing everything wrong. These are all basically public record at this point and pretending otherwise is silly. The whole reason they are "identifying" is because other people can look at it and recognize you.
Other "sensitive information":
> Among the data leaked were files on all candidates running on the election with the filename VOTESOBTAINED. Based on the filename, it reflects the number of votes obtained by the candidate. Currently, all VOTESOBTAINED file are set to have NULL as figure. > Included in the data COMELEC deemed public was a list of COMELEC officials that have admin accounts. > list of peoples running for office since the 2010 elections.
http://blog.trendmicro.com/trendlabs-security-intelligence/5...
Yes, having a list of candidates that is already public knowledge is sensitive. Similarly, the list of election officials that have that access is also basically public knowledge.
This is being played up as some "great secret trove of knowledge" when the reality is you've given this information to 2903420934239042390 different people and its basically public record. Simply because information identifies you doesn't make it private.
I was just pointing out a direction someone could go.
> RethinkDB 2.3 includes TLS support, contributed by Josh Hawn. Josh integrated OpenSSL, enabling encryption on the wire for both the client driver protocol and communication between database servers in a cluster. This update also brings encryption to RethinkDB’s web-based administrative user interface, which you can now access with an HTTPS URL.
Yay! WAN Replication over TLS is built in now.
I'm not sure how I feel about the web interface, might be better to stick with SSH tunneling for that.
The upvote/commentary is likely going to be highly problematic:
A) I'm pretty sure Dang can't list all 9 accounts I've used on HN over the past few years. I'm also pretty sure 9 accounts in good standing [1500+ karma] would be enough to seed an initial vote if handled carefully. The ones he'd be able to name are the 3 most recent. This being the case...yeah. The danger of sock puppetry is way too high, particularly when combined with strategic downvotes and VPNs.
B) Anyone with control of an existing community/following can use it as a targeted campaign.
C) The reward from bypassing these functions is substantially higher ($20,000 + professional advice from YC) than previously existed for YC.
D) If you want to stick with a vote-based system, I'd offer a larger bounty [say, $50k for manipulating a post to the top of the pile for Apply HN] for finding a way to bypass the vote brigading and other countermeasures. This it is really the only countermeasure I can think of to counter manipulation problems.
E) All the other external factors (time of submission, competition around that time period, repost rules, etc.) are likely to bias the process in unexpected ways but that is probably less problematic than direct manipulation.
> I think we're on the same page to some extent. What I meant by 'ranking by comments' is that we want the ranking to depend on the quality of the discussion. That's the one thing that can't be gamed.
Put a bounty on that to test that theory.
I'm pretty sure someone could create a network of socket puppets that had "quality" discussions between them if the reward was $20k.
1) If we all abandon ship, who will be left to argue that this is wrong?
2) A number of countries in Europe lack substantial protections for the freedom of expression. This stuff is only known in the US because its extremely difficult to shut people up.
3) A number of countries are as heavily, if not more heavily, invested in using the tools of the state [surveillance, etc] against the domestic population.
4) The simple fact is if the Government [in whatever country] puts you on their list of people to destroy, you will be destroyed 9 times out of 10. There is substantial xenophobia in both the US and Europe that is fueled by a combination of terrorism, wages, immigration, and a "Fuck you, I have mine" mentality. The US may be swinging heavily in one direction at the moment, but many European countries have been as bad in the past.
5) Please list countries which you consider "enlightened" and I'll tear them down to size if that is your desire.
http://www.nytimes.com/2015/04/01/opinion/the-french-surveil...
> Mr. Valls, who announced the bill on the day after the deadly attack at the National Bardo Museum in Tunis and as France still reels from the terrorist attacks in Paris in January, has assured the nation that the bill “is not a French Patriot Act,” a comparison to America’s post-9/11 law. But, in a statement on the bill, the Digital Council, which advises the French government about technology’s effects on society, referred specifically to Edward Snowden’s revelations of the extent of United States government surveillance, warning that the bill proposed by Mr. Valls would open the door to similar excesses in France.
http://www.theguardian.com/world/2015/jul/24/france-big-brot...
> The constitutional council made only minor tweaks to the legislation, which human rights and privacy campaigners, as well as the United Nations, have described as paving the way for “very intrusive” surveillance and state-approved eavesdropping and computer-hacking.
https://www.theguardian.com/technology/2016/mar/03/french-pa...
> French parliamentary deputies, defying government wishes, have voted in favour of penalising smartphone makers which fail to cooperate in terrorism inquiries, entering a controversy that has pitted the FBI against Apple in the United States.
Similar laws exist in other EU countries.
> “The government is increasingly using national security tools to investigate domestic criminal cases, bypassing key constitutional protections,” said Patrick Toomey, a staff lawyer with the American Civil Liberties Union. “This problem is only compounded in the digital age, where the FBI is collecting vast amounts of our data for intelligence purposes but then goes sifting through all that information in unrelated criminal investigations.”
This is bullshit. You shouldn't be able to withhold evidence from the defense when you are talking about throwing someone in jail.
They just want to get around the normal domestic constitutional protections because it makes their job easier. Yeah, well, you make the prosecution's job easier and you end up with prisons full of people because their key performance indicators are convictions and their conviction rate.
> RIVERSIDE, Calif. — FBI agents entered Keith Gartenlaub’s home in Southern California while he and his wife were visiting her relatives in Shanghai. Agents wearing gloves went through boxes, snapped pictures of documents and made copies of three computer hard drives before leaving as quietly as they had entered.
> In Gartenlaub’s case, the defense unsuccessfully argued that he could not be linked to identical copies of child pornography videos found on four hard drives in his house. Two of the hard drives had been in a computer that was kept at a beach house where numerous people had access to it, Gartenlaub said.
> Jeff Fischbach, a forensic technologist for the defense, said there is no evidence that the child pornography was ever seen by anyone who used the computer, much less Gartenlaub.
> The government’s own forensic expert, Bruce W. Pixley, said he could not find any evidence of the material being downloaded onto any of the computers, the defense noted. That means it had to have been copied onto the computer — but by whom is unknown.
> Gartenlaub, 47, was fired in August 2014 and has been unemployed since. His attorney said his defense was hampered by an inability to obtain basic information about how the evidence was obtained and on what specific grounds the warrant was issued.
> During his initial appearance in a federal courthouse in Santa Ana, Calif., the prosecutors indicated a willingness to reduce or drop the child pornography charges if he would tell them about the C-17, said Sara Naheedy, Gartenlaub’s attorney at the time.
This reads like, after failing to find proof he was a spy, the FBI "found proof" he was a pedophile which given the sheer quantity of child porn the FBI has control over seems oddly suspicious. It is extremely easy to plant the information on the hard drives but it is much harder to create a chain of events that links the specific user to the chain of events from acquiring it to viewing it. [e.g. If you provide dates/times, what happens if he the guy can prove he wasn't home at the time?]
So they went fishing with child porn charges in order to "encourage his cooperation".
Admittedly, this could be a story the guy just tells to convince people he isn't a pedo but honestly...it reads like they went with the one charge no one would defend him on that was easy to fabricate. "We think he is a spy, we think he is guilty, so let us create a situation that allows us to pressure him to confessing what we really care about."
It isn't like the FBI hasn't done this before.
> According to two Boeing colleagues, who spoke on the condition of anonymity because they were not authorized to talk to the media, there is no such job at the company. And Gartenlaub was, in any case, an IT manager. Moreover, they said, the breached files were accessible through servers in the field, such as at Air Force bases. These were not servers that Gartenlaub or his team of engineers who supported the plane’s designers had access to, they said.
Wow. The guy didn't even have access to the stuff he was accused of leaking?!
It does if I have to visit Moscow airport on my way somewhere.
https://www.ftc.gov/tips-advice/business-center/guidance/ftc...
People have shown they aren't willing [for whatever reason] to buy content with cash directly so the alternative is for it to push an agenda that is paid for with cash.
You can get disposable physical addresses as well.
It is part of why some companies flag a mailing address I use as a fraudulent order. I primarily use it to avoid handing out my RL address on domains that don't allow whois protection.
However, you still need to use the same basic process:
Step #1 - No instant feedback
Step #2 - Your antifraud SaaS provider / process / whatever
Step #3 - Reject anyone who fails step #2 after ~24 hours.
At $DayJob we have a similar process [e.g. Accept any card that passes the checksum, hand out rejections on a 24 hour delay after we've handled our fraud signals and processed the charge with the gateway]
The credit card processors aren't particularly interested in handling this for you and you [the merchant] pay the price if you gave the processor stolen card numbers.
Services like these:
https://www.signifyd.com/pricing/ [1% per transaction]
https://www.maxmind.com/en/minfraud-services [ $0.005 ]
would have no customers if you could get a reliable partner to handle this all for you for free-ish.