skysight-inc/HackerNews huggingface dataset:
Additionally to that list:

5: Follow local laws regarding advertisement.

Radio, TV, Billboards, blimps, messages written in the sky, and so on. All those has to follow the same laws except for online advertisement which has continuously claimed that the only laws that they have to follow is those where the servers are located. Youtube, netflix, and spotify to mention a few already know how to geoblock so there is no technical excuse to not follow local laws.
Counterpoint: uber, but yes I hear you.
> Why, if this is a feature of the software, is this expected to cost so much for VW to fix?

Aside from the costs of a recall and class-action lawsuits, VW will also be looking down the barrel of some pretty ugly EPA fines. I've seen numbers as high as $32,000 per affected sold vehicle. Of course the actual fines will be a lot less, but still probably pretty substantial.

> how do they expect to get people to bring their cars in for the fix when the fix can be expected to make their cars get worse fuel economy and a decrease in power?

It will depend on the state. In California, owners won't have a choice; if there is an emissions-related recall you have to provide proof that you've had your vehicle repaired as part of the inspection / licensing process.

Which then means that vehicles from other states won't sell well to Californians, and other states may well have some kind of similar requirements (though I think California's is the most strict, as usual).
(endpoint) C:\Users\orf
λ certutil -verifyCTL disallowed | head
LastSyncTime = "22/09/2015 18:24"
[DisallowedCTL]
ListIdentifier = "DisallowedCert_AutoUpdate_1"
SequenceNumber = 01d065c00c3f1258
ThisUpdate = "24/03/2015 00:21"
NextUpdate = EMPTY
SubjectAlgorithm = 1.3.6.1.4.1.311.10.11.15, "disallowedHash"
SignerExpiration = "23/09/2015 21:36", "1.0 Days"
WARNING = "SignerExpiration: Less than 180 Days"
CTLEntries = 57

Then a whole load of entries like:

[f69d22ae1ed615b1b9e390e310bbbb31]
CertId = 1.3.6.1.4.1.311.10.11.0
Subject = "MISSING_CERTIFICATE"
Sure VW has hurt their customers. They sold them illegal cars. Those cars can only have the performance they promised if they pollute the environment and break environmental laws.

All VW customers should demand full refunds. They were defrauded.
I feel pretty much this is the case as well, hence my relative trust for Kaspersky for my own use. US/Israel never detected Stuxnet either :), its a big geopolitical chessboard and anti-virus companies are knights that fight with their own color, they're not neutral.
> "Ukrainian officials estimate the area will not be safe for human life again for another 20,000 years"

The source given in the Wiki article is Time: Disasters that Shook the World. Not exactly a scholarly work. It is also the apparent source of this falsehood in the Wiki article: "Even today, radiation levels are so high that the workers responsible for rebuilding the sarcophagus are only allowed to work five hours a day for one month before taking 15 days of rest." According to the article on the exclusion zone itself[1] and the source for said article[2], "More than 3,000 workers manage the Zone, living in Chernobyl town during 4-day and 15-day shifts." Furthermore, the article on the Reactor 4 sarcophagus contains a picture[3] of those same workers less than 200m from Reactor 4 with no protective gear. If radiation levels in the zone were that high they would be fully geared up.

[1] https://en.wikipedia.org/wiki/Chernobyl_Exclusion_Zone#Popul...
[2] http://www.afterchernobyl.com/
[3] https://upload.wikimedia.org/wikipedia/commons/d/d8/Chernoby...
Hi All

I'm a founder of Shred Video and the author of this article. Happy to answer any questions about our experience.
I think money oddly. I had a 98 Jetta TDI (Diesel). The trade off for 45 mpg was pokey performance, even with the turbo.

The new ones really drive with pep, like normal cars, so I think they thought they'd sell more with better performance. There is a not insignificant price premium for diesel vehicles.

Diesel owners are really really passionate about their cars (no time to redesign their web forums) and "Diesel Gate" is going to hit that loyalty hard.

Summary page with graphs:

http://forums.tdiclub.com/showthread.php?t=448336
Because they wouldn't get the headcount to go with them
I'm really glad to hear this. I haven't kept up w/ Backblaze, other than to read blog posts on hard drive reliability and the storage pod designs. This comment made your services vastly more interesting to me, and much more applicable to my Customers. Gonna go read about your product offerings now.
Puzzle or Whussle, Now for sale
You're probably right. After thinking about it, why would Russia even bother unless it was to obtain something they didn't already have.

So the next question is, why abandon the efforts?
In the UK all cars need a yearly MOT.

https://www.gov.uk/getting-an-mot/the-mot-test

I guess most of Europe has something similar.
Useful Photoshop plugins and templates
http://tools.cisco.com/security/center/viewAlert.x?alertId=4...

"At the time this alert was first published, all versions of Cisco AnyConnect Secure Mobility Client for Windows were vulnerable." and no mention of Windows 8 specifically in Cisco's page suggests that this works on any version of Windows where the application runs.
Well, I'd assume that someone will take that sourcecode, compile it and run it and spot the differences which will lead to speedy publication of evidence of foul play.
This is a very important point. A lot of these products gloss over those "details". Because the numbers might not look good.

E.g. on B2 if you wanted to retrieve data to do your own scrub/validation it would cost you the equivalent of 10 months of storage just to do one retrieval: $0.005/GB/month to store, $0.05/GB to download.

Google Cloud Storage Nearline has the same problem: $0.01/GB to store, $0.12/GB for egress. But at least in this case you can egress for free to Compute Engine, so you would only need to pay $0.01/GB for retrieval.

So it's not possible (at reasonable cost) to do your own validation of what's stored in B2. In Google's case, as long as you're willing to use their cloud computers, validating your data once a month doubles your cost.

In conclusion, you're trusting the vendors to handle failures, it's very expensive to check your data yourself.
What are the chances that one day we'll have desktops and laptops running on Risc-V chips?
Yes! The title could be better. While researching this, I found an amusing comment: "Reverse Polish notation is so last century" That's probably true. Still, I think it's a fun project. If you're interested in this sort of thing, I also recommend checking out the programming languages "Joy" and "Pure". I find both really interesting.

I'll add official build info tonight, but it's a cordova app, so: (also be aware most things are buggy or simply not implemented right now)

# make sure you have npm, gulp, & cordova

$ cd client

$ npm install

$ gulp app

$ cd ../mobile

$ cordova platform add android (or ios!)

$ cordova run android (or ios!)
The Towering Drama Inside the Site That Measures Celebrity Heights
Engineers I know who I've worked with on GTM implementations are not big fans. It offers the ability to execute arbitrary JS on your site, does not live in our main repo (unless we export a container and store its JSON there), and there doesn't seem to be any good way to run integration tests on code within GTM itself (obviously you can run tests that observe the output of GTM).

As a marketer, it has indeed enabled me to launch tags and such without an engineer, but in many cases I'd actually prefer to have this live in our code base so it isn't broken by accident by someone who had no idea that some of what they were working on touched a container they had no visibility into.

All of this to say that I get worried when looking at more involved A/B tests that touch pieces of ones product. Sure it might be fine for superficial front-end design tweaks, but testing anything deeper scares me.

Also, random aside, but the author might wish to get some proofing of their article. There's a ton of typos and indicators of a non-native English speaker writing this and made for a more difficult reading experience.
I don't know how the interviewer phrases the question exactly but I hope the "next Monday" part isn't meant as a "gotcha".

Because once you start talking about "ideal this and ideal that", you're in fantasy land (because here in the real world there is no ideal) where anything goes and by next Monday I'm an expert in whatever... unless you're really clear about the constraints.
> It is definitely a lagging indicator.

Almost as if a competent city planner could see the congestion coming in advance and make changes to prevent it!
Open hardware designs would resolve this issue. If you were so inclined, you could re-implement your computers electronics based on the specification. Unfortunately I don’t see this ever happening.
Why on Earth was this downvoted? Seems relevant and useful to me.
> "Airmen" in the context here isn't necessary referring to pilots, but Air Force personnel in general.

That's what "airmen" always means: the generic name for service members in each service are, as follows: Army => soldiers, Navy => sailors, Marine Corps => marines, Air Force => airmen.

If one wants to talk about pilots specifically, the word used is "pilots", not "airmen".
As nostrademons pointed out above (https://news.ycombinator.com/item?id=10261375), if you feel that some tool you've used has created mess (so that you even feel sick to your stomach), it's most likely not because the tool is bad, but because you've used it in inappropriate way.
It's like 15% of their US market. But the 11 million figure in this article (vs the old 450k figure) includes vehicles worldwide. 450k was US diesels from VW.
Nope, all fixed now (demo is working also).
The 64 bit block size is a (minor) problem if you're storing lots of data because you start seeing duplicates.
Hls.js – HLS in Pure JavaScript Open-Sourced by Dailymotion
Perhaps the low property prices are due to the high crime rates?
Since this is clearly malicious intent on the part of VW that the customers if and when presented with a bill from Her Majesty's collection agency will be in an excellent position to pass the buck to VW. After all it's in every advertisement they've ever made about these vehicles.

VW is in a world of trouble. This saddens me because our fleet has both a VW caravelle and a VW up, neither of which are affected but VW has been an excellent supplier for me to date and I'm seriously disappointed that they would stoop this low. Even if this order did not come from the top (which one would hope) it screams lack of oversight and lack of independent in-house verification.
The underlying assumption is that governments don't care about how you spend money. This is patently untrue, because "liberal" governments explicitly use taxation as global social modification schemes, for all sorts of things beyond income redistribution - from minimizing percieved vices (alcohol, tobacco) to minimizing environmental footprint, etc.

The idea that this sort of activity is able to be decoupled from surveillance is one of the more unfortunate delusions in politics.
Publishing source code is not a massive burden. Developers do it all day long every day.
Wait, what about Blowfish is insecure? BCrypt is built on top of Blowfish.

Blowfish supports key-lengths up to 448-bits. And I've never heard of a single criticism of the function. Its just kinda... less used than Rijndael because it didn't "officially" win the contest. But otherwise, it is a fine function.

EDIT: Confused Twofish with Blowfish in the AES finalists.
Download HD Instagram(full size) image
toomuchtodo 4 minutes ago
Determine the average sales price of vehicles with the power your car now has after correcting its ECU fuel maps, subtract that from the average sales price of vehicles with the power you advertised. That number you arrive at is the compensation you owe each person who purchased your vehicle.

I don't think that would quite work because the new sales would also factor in distrust and changes in consumer perception and taste which further reduces the amount of sales VW might have. You'd essentially have to do this in a vacuum where the updated vehicles' sales were subtracted from the non-updated vehicles and the numbers crunched on the premise that nobody ever found out about this and it was just fixed and swept under the rug.

Either way, I like your idea and I hope these owners get adequately compensated for this.
Before I comment, I'll just express how insanely cool this is. Mobile programming environments suck right now and this is a step in the right direction. Good proof of concept.

Excuse me if this is implemented and just not in the README:

It would be super awesome if there was a type inference engine that fed into the UI to increase productivity.

For example, if I start to define a function that returns an int, when I go to write out the definition, it suggests functions to me that return ints.

Suppose I pick a function "string_length" which takes strings and returns ints. Now I continue the composition, so it suggests functions (either built-ins or user-defined) which return strings.

Suppose I pick "bool_to_string" which takes a bool and returns strings. Then to finish off the function I pick from a list of bool-returning functions, say I pick "xor".

So now with a few keypresses I have defined a function that, in C, would look like:

int foo(bool x, bool y) {
return string_length(bool_to_string(x ^ y));
}
> And second, the constant stream of news about trivial SQL injections, cross-site scripting vulnerabilities and other such things should make it plenty obvious that you can write unsecure code in any language.

Find me an unintended trivial SQL injection or cross-site scripting vulnerability in Rust. Or Elm or Ur/Web, if you prefer more web-oriented languages.

All you have done is demonstrate that there are languages other than C that one should not write in, either. But of course there are. You have not demonstrated that all languages have these problems to the same extent.

It is rather like arguing that since you can get concussions in football, and you can also get concussions in ice hockey, it doesn't really matter what sport you play. While it is technically true that you can get concussions from golf or cross-country running, it takes quite a bit of skill and (un)luck to make it happen.
Cloud platform for building, hosting, and managing custom websites
Note to self: Do not take screenshots from the future.
Why would Cisco not automatically opt-in for the grace period? Defies me. May be I am missing something.
They're taxed according to CO2 emissions rather than NOx (which is measured for European and Californian emissions requirements, and the subject of this dishonesty).

There's no reason the same method couldn't be used to falsify CO2 emissions (and therefore VED band) too though!
I need a browser plugin or something to let me know when I'm visiting the website of a company that has thrown in with gov't surveillance.
What else and who else
VW has a ton of brands besides just the main one and this affects a very large number of vehicles and an equally large number of customers. I've been a pretty loyal VW customer for the last 8 years and my next car will definitely not be a VW, this is unacceptable at just about every level and I'm fairly sure I'm not the only person thinking like this.

If you think VW will be just fine now would be a good time to buy some stock.
Did you ask how much NOx your last vehicle emitted when you bought it? Did you see any advertising about NOx emissions? Do you know if/why NOx is considered a pollutant? Did you know that NOx is a substantial constituent of whipped cream? Did you know the other name for NOx is laughing gas?

Saying that someone broke the law doesn't mean they did anything ethically wrong. I think it would be an uphill battle to demonstrate if/how VW harmed their customers.
Grace periods exist as an incentive for these companies to take action. Maybe Cisco thought they were calling their bluff... but they weren't bluffing.
We should be free to push a doctor on things and have them answer as to why we're wrong. I can only imagine that must be very annoying to doctors. After working even with technical clients that manage to misunderstand and come up with all sorts of troublesome reports of non-issues, it's easy to get complacent.

While it's not a good use of resources to run all sorts of tests for everyone, the tradeoff changes for you individually. Sorta like how the fox is only running for its lunch while the rabbit is running for its life. The limiting factor is probably the reliability of tests: get enough done and you'll find _something_ that looks wrong but isn't.

Wikipedia lists hospital error as the leading preventable cause of death[1]. The source used notes "Serious harm seems to be 10- to 20-fold more common than lethal harm.".

I'm a bit biased due to repeated experience. I lost one child due to being overly deferential to doctors instead of pushing a harder (trivially preventable issue). I saved another after flat-out rejecting the analysis of a nurse that appeared to be having trouble with simple math (after insisting on being re-evaluated, the child was rushed to emergency care; issue avoided - even got an apology).

It reminds me of patio11's advice on salary negotiation. A bit of discomfort while discussing the subject vs a large payoff. I'd prefer to feel a little uncomfortable and annoy a doctor with a few additional questions, piss of a nurse for double-checking their work, given the stakes.

https://en.wikipedia.org/wiki/Preventable_causes_of_death
Well, yes. I'm not anywhere near as smart as the people writing Java or bash. That is why I want a computer to be smart for me. If they can't get things right in an unsafe language, what hope do I have?

We have powerful computers these days. Software is eating the world. Let it eat the process of writing correct software, too.
I reasoned that it would have to be 2 people or else any sensible person would know it would eventually get out. Including the executive who had to achieve some engine performance goal (but couldn't handle the software manipulation), and the software engineer (who wouldn't directly have to answer for engine performance goals)

"Two may keep counsel when the third's away." --Shakespeare, Titus Andronicus
I wonder why GitHub has a separate domain githubengineering.com for this blog instead of a subdomain like engineering.github.com.

I notice that there is an inactive user account called engineering. If at all an User Page is created by that account, it would be available at engineering.github.io.
Web-Based CQL Shell Improves Interaction with Cassandra Clusters
Harmless? Doesn't 50mSv/yr imply a budget of 5.5uSv/hr? The numbers in the photos are higher than that.

... I mean, yes, they probably aren't statistically very harmful! Nothing like the Chernobyl exclusion zone, at least in the areas this person visited, and considering only ambient exposure.

Still, over the limit, and, like I said, drastically elevated. Fukushima unquestionably harmed its surrounding area.
I feel for you guys! Obviously you only posted your side of this but I know how expensive navigating the legal system can be for a small business owner.

Happy to offer some thoughts and advice from someone who is not a lawyer but has been sued before (and won by having the case thrown out with prejudice!).

Email me lane (at) joinjune (dot) com

Also, maybe setup a GoFundMe for having people help you raise funds to fight this?
What's crucially important, and conspicuously unmentioned, is not taxes but monetary policy as a whole: can the central bank (or "mint") control the interest rate? Is inflation possible?
I do it because i do not use the App Store to download apps. Every open source app i download that is not signed with Apple needs GateKeeper disabled.
Much love and respect to Richard Stallman / the GNU Project for all the pioneering work and advocacy they did in OSS, but I personally don't want them near my $s. The number of religious / flame wars persistently raging in OSS circles just can not, would not be tolerated in this domain.
Genuinely curious for your legal counsel's take on you posting such an article publicly. I've always thought the prevailing wisdom shared by all lawyers was "don't talk."

Also, in this day and age of using services like Github for personal projects but having access to other repos, etc., using things like 1Password for work and personal things, how has the discovery process worked with everything?

I'm really interested in knowing to what degree someone should be paranoid. Are you potentially risking your entire business because you once checked your work webmail from a personal computer or checked a personal email account from a work phone?
The Secrets of Successful Video Marketing
One thing to keep in mind when reading about government efforts to attack security software is that one part of the government may not have access to, or even know about, the capabilities of another part of the government. Or even capabilities of people within the same agency!
The biggest win from CDNs like CloudFlare as compared to just using properly-configured in-house servers is global distribution. Downloading a JS file from a server a mile from your house is a lot faster (often by hundreds of milliseconds) than downloading one from hundreds or thousands of miles away, and CloudFlare probably has a server a mile from your house. And it's prohibitively expensive to build your own global network that compares to CloudFlare's scale unless you're a very large company like Apple.

As for dynamic page caching, CloudFlare offers a service called Railgun that only sends the diffs of a page when it's been changed, rather than the full page, and then re-hydrates it at the edge of their network before handing it off to end-users. Theoretically this would reduce network time by sending less traffic inside the network. I've never personally used it so I can't vouch for it, but it sounds neat.
But MOT does not require going to a dealer, just to a garage. For sure dealers do this too but it's not a requirement MOT be done by the dealer of the brand.
> Every single industry that can will do this

Which is why it is illegal in the EU.
Dropping bombs isn't necessarily peacekeeping :).

If I'm remembering properly, my grandfather was stationed in Yemen in '63-'64 as an aircraft field mechanic. Their mission was purely observational: every 12 hours, fly over the border and count any accumulation of military equipment. I believe they had a DHC-3 Twin Otter.

I don't know the specifics, but looking at the specifications: 945 mile range, 121 mph cruise speed on the DHC-3. That's give or take a 6-7 hour loiter (they were landing in the desert and had fuel trucks come daily). It's harder to get exact specs on how a CF-18 would perform on such a mission, but I've got a pretty good feeling it's not going to be landing on any gravel airstrips, nor is it going to be fun trying to count vehicles on the ground.

When I think of peacekeeping missions, I think of boots on the ground, ideally with air support. Looking at the A-29 from the article, that sounds a lot more like the type of aircraft that should be providing that support.