skysight-inc/HackerNews huggingface dataset:
Back in the time of FIDO, I've accepted the challenge to crack a program (find a correct password) that more or less consisted of a loop to simulate three-address MOV instruction.

The loop jump address sometimes changed for some effectful operations like printing or for optimizations like executing addition.

It took me about four hours to find the correct password. In the course of there three hours I wrote 1) an executor that used i386 debug registers to look for current MOV addresses, 2) a tracer that produced a trace and 3) a compactor which identified common instruction sequences and presented them as some macrocommand. It turned out the original source code has used macros in the opposite way. The final challenge was to write brute force password finder, which is not that hard at all (for 32-bit checksum).

All in x86 assembler. I guess it was about 1995-96, somewhere there.

Now I'd use the same technique, but on higher level. Instead of peephole compacting I'd use graph analysis, but that's about it. You can get pretty much everything from the program trace, I think this way you can get even more information than from disassembly.

So in my opinion, it is one hell of a cool experiment. But try not to use it as a real obfuscation device.
Ask HN: Any projects that need an Android version?
Do you know of any projects that need an Android version (e.g. BeMyEyes), preferably projects that can't afford developers and are open source?
Ask an ex-member of the Dutch Nao Team anything =)
I don't see any anti-American sentiment in the OP's message. He's just making an economic argument that may or may not be correct.
Ubiquiti Networks Victim of $39M Social Engineering Attack
Mind-blowingly outside the box. Network isolation is not enough. Wow.
We've been enjoying GitLab for quite some time now, but I have to say with every new release they always seem to break something critical for us, there seems to be far too many regressions and many of them are not communicated evening with their paying customers - for example the latest one that's been causing us grief: https://gitlab.com/gitlab-org/gitlab-ce/issues/1974
> Free software is one thing, but free hosting?

Hosting basically boils down to the fact that ~98% of your users will use a small portion of your resources. This is why hundreds - even thousands - of users are shoved onto a single shared server (all without ever having a problem). Considering disk and bandwidth is cheap - it's really inexpensive to host users. 2% of your users will attempt to use 50% or more of your resources - and those are the ones that you kick to the curb or arrange some sort of payment.

I used to do free web hosting and now have switch to just free source code hosting.

A perfect example of this is this story [1]. I'm sure a good 90% of people who sign up for the free slack service only use a small blip of usage.

[1] http://blog.freecodecamp.com/2015/06/so-yeah-we-tried-slack-...
Why let the evidence stand? Shouldn't it be preferable to exclude the illegally-obtained evidence and punish the police for obtaining it illegally?
We do not make substantial money with GitLab.com.

It gives us the possibility to run GitLab on a very large scale. This helps us finding performance and scaling issues that otherwise would go unseen. In short, it allows us to make GitLab even better.
I'm not sure why it's interesting to find the fastest rolling thing driven by a jet. How much ground pressure must it have? 100% it's own weight at max speed, to not be a low flying airplane?

That said, even if you mix in anything jet powered it's still plenty fast. The fastest jets from the Cold War couldn't do 1000mph (Mach 1.3) at ground level (and of course none tried it rolling). A few planes can/could do Mach 1.2 (900mph) on the ground.
That's a TTA (https://en.wikipedia.org/wiki/Transport_triggered_architectu... ), where effectively the ALU and other computation units become memory-mapped devices. It's the logical extension of how a lot of microcontrollers which don't have a multiply instruction in their instruction sets, e.g. 8051, will instead have a multiplier unit that's accessed by reading/writing special memory addresses.

That's somewhat different from the move-based code discussed here where the MOVs are actually performing the computation.
If everyone replaced their ringtone with a birdcall from here, the world would be a better place.
I have to try this if I remember! That'd be very interesting. The console obviously has many legitimate uses. Why wouldn't I try it out if I were thinking about buying a mac?
Not using flyspeck grey fonts on light gray background in a tiny column on a vast screen is more important for readability than it seems.
Perhaps it's just me, but when they said the enterprise edition was "publicly viewable source code", I assumed they just meant it was "publicly viewable", with no further rights implied.

I don't think they're really openwashing here, and the article was pretty clear to me. Besides, the community edition and CI code are both true open source.
I agree it seems pretty great.

One big pain point would be if the schema changes over time. What if you add a new NOT NULL column? What if you remove a column? What if you change the type of a column? What if you remove a table? What if you add a new CHECK constraint? Some of these things get mentioned in the video linked by 'tvon, but they are mostly passed over.
Before or after the patch?
I counted the ones that I had seen. Then counted the ones I hadn't.
Show HN: Search for any object in a video with deep neural networks
The state of nutritional science really is pathetic. The ability to prey on the FUD surrounding "a long and healthy life" is second only to promises of get rich quick schemes.

Sometimes I think it would be more practical to educate the public about coming to terms with death rather than all of these food pyramids, cubes and spheres.
You just have to compare the number of subsets with the number of possible sum values.

1) There are 90 numbers, so we have 2^90 subsets.

2) All numbers are < 10^25, so the sum of all 90 numbers is < 90 * 10^25 < 10^27. So each sum of a subset is an integer in the range of 0 to 10^27-1. So we have ≤ 10^27 possible sum values.

Since 2^90 > 10^27, we have more subsets than possible sum values. Hence, there are at least two subsets having the same sum.

BTW, this is a beautiful application of the Pigeonhole principle: https://en.wikipedia.org/wiki/Pigeonhole_principle
You ran the GitHub patch and it still failed?
Our beautiful fake histories
The problem with that is you may eventually end up in a bubble that matches your believes and reality.
> It doesn't help your position the fact that you are unable to express it without belittling anybody who disagrees with you using stuff like "stay stuck in 1992" ("If you don't like America you should go to Russia!").

True, that was useless, could have just said "I and many users do want these features" . Thanks, and sorry anon.

> the links/lynx jokes have really gotten tired, plenty of people browse the web with ublock, no(t)script, webgl and webrtc disabled and so on. The pretense that anybody who tries to retain a modicum of control on what its browser does and does not it a luddist is frankly irritating.

That wasn't a links joke, I could have phrased it with your own words "You can install ublock, no(t)script, and disable webgl/webrtc if you want a simple browser letting you read static html documents" , and "But I can't, every website require these features now" would still be an answer.

My conclusion isn't that "anyone trying to retain a modicum of control on what its browser does and does not is a luddist" --and I do use some of these extensions too--, it's that the barebones web experience anon wants is broken now (and probably forever), due to:

a. Sadly, non-respect of progressive enhancement in cases where it's possible (documents).

b. The fact that _some_ parts of the web are increasingly not documents, but whole apps whose progressive-enhancement baseline (running without all the bells and whistles) would do nothing because they depend on these features.

> And the whole language debate is completely off point, we have plenty of safe(r) languages for writing stuff, the misguided idea is that the only way to do so is to use javascript and stick the resulting program inside the browser.

Yes. Development practices, testing, fuzzing, and safe(r) languages, like Rust.
New in American Fuzzy Lop: Persistent Mode
Spicy food is healthy only for certain people, whose genes/environment predispose them to certain dis-eases. Ancient medical systems such as Ayurveda (translated from sanskrit: The truth of life) and Traditional Chinese Medicine (sharing knowledge with ayurveda over past 5000 years as they are in same east asian region) say a food can either be medicine or poison depending on who is ingesting it.
> And yes, it took twice as long

Yeah, that sucks. If it takes you 12 minutes normally to walk 1 km (assuming 5 km/h, which is a normal walking speed), now it takes you 24 minutes to and from the station in the winter.

So you're spending 45 minutes a day just walking to and from the station. If the rest of your commute is 30 minutes (train + walking to work from train), you're commuting for nearly two hours (1:48) every day vs. 1:24 during the summer.

That's assuming you don't also walk slower from the train station to work, which would make it even more of a timesink.

If you lived right near the station, it would be 60 minutes every day, winter or summer.

I mean yeah, it's only an extra 30-60 minutes a day (and your point was really only about winter so we'll be fair and say 30 minutes a day), but shit, I'm not going to turn my nose up at that. I'd definitely pay a small premium to get that time back every single weekday.
> You are free to modify this Software and publish patches.

> It is forbidden to copy, merge, publish, distribute, sublicense, and/or sell copies of the Software.

You might want to get a lawyer on the phone - because that seems contradicting to me. This is why you should stick with open source licenses that have been vetted by a team of lawyers already. You should check out the AGPL license.
So Suits is more true to life than I realised..
We're actively working on finding a solution for this. We understand this is not a nice development for many of our users.

We do not want to inadvertently break the workflow / remove essential features without informing our customers in advance. And we will always work hard to ensure that if that does happen, we find a good solution for all parties.

If you do find that this is the case for you, as a customer of GitLab, please never hesitate to contact us through our support channels.
A Working Definition of Product Design
He’s one of the anarcho-capitalist hardcore bitcoin defenders that hang out in #bitcoin-assets, too.

Just ignore him, I wasted a week trying to talk to these kind of people, it’s of no use.
That's a great post. Very thorough. However, a couple of observations concerning some security issues you might not be aware of:

First, X itself is very insecure, so by allowing your web browser to share the same X server as the rest of your apps, you are making the rest of your apps more vulnerable.

Second, the so-called "Trusted" Platform Module you're using for extra entropy may itself not be very trustable, despite the name. So you may want to rethink that.

Finally, according to the vendor of the GPG smartcard you're using, "the software on this card is not available as free software due to NDAs required for certain parts."

That there are NDAs on parts of the card or the software (it's not clear which) makes the card suspect, and I don't see where I can get the source of the code (free or not) that's running on the card. An ideal smart card would, like gpg itself, have completely open and transparent hardware and software. I'm not sure if any of those kinds of cards exist, however.

That said, I'm sure all the security measures you're taking in sum make you far better off than the typical computer user, but there's room for improvement.
Please don't speak of a "European attitude towards technology" when there is none. For example, I can't imagine hearing the attitude you describe here in Sweden, and I believe you could find plenty of germans who would disagree with you as well.

Not only are we many different countries, but we are also different individuals. There is no common "European attitude towards technology".
But that's the enterprise license, not the community license.

When they say "In fact, even our proprietary version of GitLab, GitLab Enterprise Edition, has a publicly viewable source code", I don't think they're implying it's open source.
Nice. I really like GitLab. Made the move after GitHub started focusing on social justice instead of technology (plus I was tired of the hypocrisy of them making money from OS while keeping all their sources close), and I don't regret it.
>It still is looking better than the plugin it replaced.

Exploiting a bug in a memory unsafe language is much harder than writing some JavaScript. It is also much less reliable and platform specific.

The real question is why the hell is Firefox not sandboxed?
Not to be rude, but isn't their software open source? Can't you try and patch it yourself?
Yes, you're right. I didn't notice the WHERE in the UPDATE statement. That makes a lot more sense now, thanks!

You still have the issue of someone setting the version explicitly in an update statement without a WHERE clause which checks for the current version. But I guess as long as you enforce not doing that it's fine.
Being well-tested from the perspective of regular use is not quite the same as being well-tested from the perspective of defending against a hostile actor.
You didn't actually address any of my questions, so I'll just refrain from addressing yours.
You can also take the LIRR from Atlantic Terminal in Brooklyn to JFK and it's really easy and convenient.
Diskspace and bandwidth are relatively cheap!
I disagree. it took a weekend to build my reprap from a parts kit imported from China. it took another weekend to tune it. easy.
rakshasa?
Unless they all picked the barn owl: http://macaulaylibrary.org/audio/50147
BusTime has radically changed the experience of waiting for a bus.
This reminds me of the EU imposing browser choice on Microsoft's European customers. The result was a larger market share for google in the EU. In the USA, where no choice was mandated, Microsoft push forth bing and as a result, it has ~9% market share and growing. Given the choice, everyone chooses Google. I think Google would be fine with giving users a choice of default maps when searching a location, default reviews, etc. But the EU would not like the outcome and they would come back for more regulation when their intent, to harm google aka knock em down a peg aka "bring diversity" is not met.

The fallacy with the EU's position is the notion of 'diversity'. Code word for "let our companies compete better". If the free market doesn't want that, any 'remedy' will in fact harm users. What the EU must do is simply focus on the question, "are consumers harmed". Anything else is begging for problems. EU bureaucrats are not smarter than the market. If EU companies are able to attract the capital and users to them, wonderful. But the fundamental problem is 'attracting capital' to a rigid (and apparently protectionist) market.
And yet history is full of failures of hierarchy. Hierarchy stifles communication and minimizes responsibility for all involved. Hierarchy in sparse organizations only works if the people in the hierarchy have something to lose if they fail and the lines of communication are not closed off.

In contrast, self-determination-in-organization fails only when you try to force it or scale it up beyond immediate social circles. To make it work it has to be done at the small scale where you interact with a larger organization where its hierarchy is sparse and it delegates responsibility to the correct self-organized units.
The PATH trains are still around, but they haven't expanded service in at least a decade. PATH services the two Penn Stations (Newark and NY), but doesn't run to Secaucus. In fact, I think Secaucus is still exclusively NJT when it comes to rail.

There was some talk years ago about expanding AirTrain (at EWR) to Secaucus and the Penn Stations (for one-seat rides from midtown Manhattan to the airport), but that hasn't gone anywhere.
Correlations are better than nothing. You want a simple elegant theory but why do you think one actually exists. The human body is incredibly complex, maybe there are no general rules, only a plethora of interacting processes that are very hard to model.

Also I think that there is a lot of evidence and theory on the harmful effects of dietary saturated fats. Same for being overweight.
I had a similar thing happen, though on a much smaller scale. I used to have to send letters that needed tracking & delivery confirmation and for whatever reason fedex was the cheapest. An evenlope I shipped from Queens, NY to Brooklyn, NY went back & forth from Memphis twice in three days before ending up at its destination.
No. The world would be a much worse place for the birds. Artificial calls confuse and can actually harm birds.
THREE.js has a similar editor:

http://threejs.org/editor/
He linked to the enterprise license, not the community license. The CE license is open source, the EE is not.
BitBucket is far superior to GitHub. It's not even a question.
This is true when you're just looking for a quick fuck. But as someone in a long term relationship, believe me, superficial qualities matter a lot less. My wife is beautiful, but so were other girls I dated. I stuck with my wife because we make a good team, and she shares my values.
The Constitution restricts what government may do against individuals. Perhaps the agents that break the rules should be held individually accountable in more cases than they currently are (though, as with most cases of using law to provide accountability for executive agents, there are agency problems that make that unlikely to be effective in many important cases), but that should not be an excuse to void the purpose of the restrictions, which is to limit the power of government, not just its agents individually. The government cannot be allowed to benefit from the it's unconstitutional acts while certain agents are punished as scapegoats.
Depends, I wasn't referring to parts with mechanical or thermal constraints, just weird electronic physical adapters. Sure they use well picked material for this that may or may not be superior to 3D printed plastics, but I'm really doubtful.
There are some alternatives to the Pi, have a look at olimex.com (very open) or hardkernel.com.

https://www.olimex.com/Products/OLinuXino/open-source-hardwa...
Thanks. It was a little ambiguous in that regard.

I think the browser is only just starting to accommodate web developent in other languages. Until asm.js came about the advice was you had to learn js to understand runtime performance of any code running on the web and that languages that closely resembled js were easier to optimize and debug in the browser environment.
You are right that it was an unnecessary comment, but declaring that "There is no need for these experiments" is a little armchairy. This is a debate that has been going on for a long time and a version which takes place on hacker news would be more useful if it wasn't immediately polarized.
You worked in the Mile-end?x ;)

I was just figuring that 1km is about what I would call 'metro-adjacent' for a residence.
Great! Anything you miss, coming from GitHub?
Their community edition is open source, no?
It's awesome that Mozilla detailed exactly what the exploit did, even which file paths it searched for.
Many people have talked over the years about self-driving cars dropping people off and heading home.

Have they? I've just seen references to cars finding nearby charging stations, not just driving themselves all the way home.

Either way, I think the more likely prospect is that people stop outright owning cars at that point. Why invest in a complete vehicle when you can just pay for a service that has a car pick you up whenever you need a ride?
Bus routes are not supposed to replace train routes. It is by design that bus routes are longer, buses are meant to service areas not accessible by train.

I'm curious if you traveled by bus since the introduction of bus time last year? It has really changed my commuting life. In the past I might be standing out in the cold or heat for a half hour waiting for the next bus. Now I can predict when my bus will show up and spend mere minutes waiting for it.
So you think big corporations control the government, but you want the government to tax them so hard that they won't have the money to control the government anymore?

Don't you think they'd bribe politicians not to tax them too hard?

Also, if you tax those hundreds-of-thousands-of-jobs-providing nasty corporations into the ground, lots of people will lose their jobs. How's that for the common good?
Is there one-seat service to any of the three major area airports from midtown Manhattan? There's an NJT stop for EWR, but it requires a transfer to AirTrain (the internal EWR rail system).
Certifi-Gate-based attacks could take complete control of Android devices
That is one hard-to-parse title!
This is not the standard Montecarlo example, the interesting part of the article is that they use a non-uniform distribution so they use some of the points to estimate the distribution.
Ask HN: Stackoverflow ask captcha every time?
It shows me the picture of the two guys, dressed as robots, every every every every time I want to search something..

I have ghostery, so it may be triggering some really annoying filter .. even google requires me to select from a list of thing when trying to validate I'm not a robot

Have this happened to you?

Have you found a workaround?
Doesn't HN have a rule about no numbers of things in the title? So the most appropriate submission would just be "Design Documentaries"
More and more news about Apple's software quality degrading. They are really, really losing it.
I mentioned this in another comment but really BusTime has been one of the greatest public transit innovations in NYC of the past 20 years.
Coincidentally, I just installed GitLab to try it out for our small team to replace BitBucket + Jira. And while its more than capable filling Bitbucket shoes the issues subsystem is probably worse than github's and nowhere near flexible as jira.

Most notably: Missing more sophisticated workflows. Search for issues using multiple labels. Search for issues across multiple projects.

We would also love to be able to do simple time tracking against issues.

Is there no reasonably priced product out there that would fit our (rather simple) needs?
Crossrail: The End of the Beginning
And yet history has proven that property rights of this kind don't actually give more to the creator. When Eli Whitney patented the cotton gin he fought for years in court against the makers of copycat versions of the cotton gin. Oddly, when he went into rifling of gun barrels he chose not to patent a single part of the process. He used trade secrets and focused on improving his products.

It's not a 1-to-1 comparison to copyright of music and art but I think the principle still applies. Focus on making a product someone wants. If you can't price it property the first time then try another price or business model.