skysight-inc/HackerNews huggingface dataset:
This links to a Microsoft support thread in which several users are reporting a suspicious update distributed through Windows Update. In lieu of a title and description, the update has 108-character and 24-character base52-encoded random numbers. In lieu of "more information" and "help and support" links, it has similarly random base52-encoded domains, which currently do not resolve, in .gov, .edu and .mil. Searching for the patch title turns up a bunch of people asking about the same suspicious patch on other sites, all within the past day. The update is attracting attention because it fails to install.

http://security.stackexchange.com/questions/101520/weird-win...
https://www.reddit.com/r/techsupport/comments/3mykv1/weird_w...

This does strongly suggest a compromise of the Windows Update servers or of some bit of infrastructure that connects people to them, but also suggests that whoever the attackers are, they made a mistake - a successful compromise executed correctly would not leave so much evidence around. It's quite possible that they've been compromised for awhile, and this is a buggy update to the existing malware.
Very good advice... I agree. Took me a long time to figure that system out, but it sure works well!
Social Content: Where Are Some Entrepreneurs Going Wrong?
Right! And DC has only 658,893 inhabitants. Let's ignore its metro area of 4.5 million and CSA of 9 million.
Wasn't the Model X originally supposed to cost a lot less than an S?
I doubt it. It looks to me a lot more like a test update that was pushed to production unintentionally rather than malware. A server compromise pushing malware as an update would presumably try to make the update look legitimate in order to maximize how long it went undetected.

Disclosure: MSFT employee, no knowledge of this beyond what I've read in this thread, though.
I like the author's use of the word "modesty", but maybe "humility" is really what we're looking for. Modesty means balanced and moderate, but sometimes leaders need to take feedback without trying to balance it (i.e. defend themselves). Take their lickings, so to speak. Those are the times that true growth happens.
There is a chance that the machines affected were already compromised by malware which altered the way Windows Update was working.
If you don't have the spine to say "no, that's wrong, I won't do it" as a software engineer then I'm not sure a group is going to help you out.

Software engineers who are any good at all can find work easily. They are among the last people who should feel held hostage by a job. If your personal ethics are not enough, I don't see how a group will help.
I don't agree because 1. Play!2.x is asynchronous, and you need to find NIO-compatible libraries, 2. I like Jersey for REST resources better than Play!2.x's "routes" file. I had to build a stack this year for an app which needed to share code with another Spring app. I've chosen DropWizard because I could share the Jersey resources and I didn't have to learn everything again.
Clipboard.js uses the HTML5 clipboard API.
I concede this point. Seems like a whole lot of work for little to no pay off.
It isn't Snowden, but surely it's done with his permission. If it wasn't, we'll hear about it quite soon.
Morphing Keyboard Keys Animation
You just cast the tab? In my experience, the sound quality is lower. Also, casting a tab playing Pandora is not as eye catching as when the app shows it, which is not a big deal but a pet peeve of mine when having a party or people over.
I am seeing blank space. FF41 on Windows 10.
Yeah I'd say it's more likely someone or something in the update toolchain screwed up.
Yeah thats the thing. It takes me 3 times as long to get to work without a car as with one. I can live with that, because I can read on the bus and don't have to pick up kids.

If I had to be home with somebody though? Fuck that shit. Plus I hate spending time with strangers, so I much prefer being in my car rather than on public transport.
Novation release open firmware for Launchpad Pro MIDI controller
> The wealthiest 1% of Americans alone pay 50% of the federal income tax. The bottom 80% pay only 15%.

You're confusing wealth with income.
Facebook's new looping profile video
That might have been the only text that allowed the updated to be signed.
Or maybe it has been exploited for a long time without anyone noticing it, and now the attackers screwed up?
Don't know why you are being downvoted. Spy agencies going away is a fantasy that brings into question the sanity of the believer. Better to have moral people there.
Hitting CMD+C while selecting the fragment usually works for me.
To quote the Minutemen, Being bored is power!

https://www.youtube.com/watch?v=KxjEi4tgvU0
While this is a good idea to prevent folks from brute-forcing their way into your machine, the article is talking about DDoS attacks. If you have 150G pointed at your network the issue isn't going to be your servers. It's going to be congestion at your network links. Your SSH settings and Fail2Ban won't help at all in this case. You'll need something like CloudFlare's DDoS protection to identify and block DDoS requests from ever reaching your network.

EDIT: Oops, just saw that the article does talk about SSH brute-forcing. Your point is quite valid.
One in every 200 men is a relative of Genghis Khan (2003)
In complete fairness, the very nature of those operations ensure that, even if successful, you likely wouldn't hear of that success (or if you did, you wouldn't attribute it to the operation)

Not excusing this by any means, in fact I'd say this is grounds for much more comprehensive oversight and transparency, but right now, it is what it is.
Stupid Urban-assault Vehicle
Another vote for Play + Scala here. What I built my last app on, and plan to keep building on it.

For simple CRUD it may be overkill, but it scales nicely for when you go past CRUD.
> if they were forced to release source code

then I think they would know they were being watched and would act less horribly, at the very least. It's the same reason why you almost never see backdoors in free software. Just knowing that you could be watched makes it a lot harder to be sneaky, even if nobody is actually watching. Same principle as having placebo cameras that are actually non-functioning.
good luck to them on trying to rank for "spark", i have a hard enough time sifting through spark notes when looking for apache spark stuff.
You do not NEED to find NIO libraries. It sure helps, yes. But it comes with a wrapper of a webservice library, and slick does the RDBMS nicely (and offshoots like phantom to do cassandra, etc).
> can anyone here shed a light on the quality of articles

Exceptionally high, in general. I find it the next best thing to subscribing to the LKML firehose; LWN summarizes developments in the kernel and many other areas, in addition to detailed technical articles on specific topics. If you do any work at all in Open Source, and especially if you care about the Linux kernel, you should subscribe.
Going the other way, Microsoft once maintained a "Windows Services for UNIX" package.

https://en.wikipedia.org/wiki/Windows_Services_for_UNIX
Always turn on auto-updates. The likelihood of you missing or delaying an update and getting hit by an a known exploit is a lot more likely than an exploit getting through the update system or enabling a new exploit.
The why is that they have compartmentalized their organization enough so that law enforcement can't prosecute them. There's never any provable direct links to criminal activity so members can parade around in full view without worry about arrest. If you are a member of these orgs all you do is pass money between lawyers.

Triads and Yakuza offer a package like SaaS. You pay them for all your various operational needs but they do not get involved in your business, so you are free to do whatever you want, so long as you keep paying them a monthly fee by using their laundering services, and you don't heat out the streets so much that it affects business. Everybody works with them because they have their own banks and financial networks built over decades with rules about not burning customers.

No lesser gang will run the risk of rising up against them and there really is no reason to since they are not involved in your decision making they are just cleaning your illegal profits at 30% fee and offer capital to expand your criminal operations. They also have extensive prisoner services and since every gang member ends up doing a few months for being caught with an illegal handgun you need them to pay off rivals not to kill you inside, to pay your family money while incarcerated, to offer you credit when you come out to restart a drug business ect.

Now you see where the myth of the Yakuza and Triads having millions of hitmen comes from, since all their customers are criminal street gangs it's trivial for them to organize mass violence by merely calling in all their favors through a proxy. Street gang X probably had members avoid jail with an expensive defense attorney the Yakuza provided, so being thugs they will jump at the chance to pay back the debt with violence since that's what they specialize in anyway.
What type of mathematics is behind Pixar animation?
I made the ScalaJS leap. Good for all my internal JS stuff. Interfacing with legacy JavaScript libs sucks (similar problems to using Typescript).
No no no no no. I've watched entire networks of machines downed with auto-updates. Always read, always test.
Software you write for fun or to pass around to friends would (should) have the standard disclaimer of implied warranty of suitability.

Software developed to control an automotive emissions system by a manufacturer and in the context of being used for that purpose would not be able to escape that.
Don't fall for the domain appraisal scam
Yes, as long as you never use any third-party library and place all your code into a single module, GHC doesn't completely fail on its promises.

My concern is that this PhD-style development suffices for most Haskell users, but is not practical for any non-small project in the real world with more than one developer.
I'm a member of the ACM (Association of Computing Machinery) and every year I read over the IEEE-ACM Software Engineering Code Of Ethics: https://www.acm.org/about/se-code

Due to manager and business pressure to make more money, multiple sections are subverted and there's absolutely no consequence to them. The only consequence they understand is if programmers start to refuse jobs or tasks or quit based on violations of the code.

This is sometimes why I would favour certification or more responsibility placed on the programmer. Some programs should not be written or if they are written they should be held to a very high standard. We wouldn't have issues with high frequency trading if it cost a lot to provide insurance for that kind of development. Sure simple websites don't really need high standards, but as soon as you're past 1 million in revenue you're dealing with real money, real data and any bugs could have serious consequences.

On the other hand, I like being able to write little scripts that say "hey if something breaks, it ain't my fault".
Not only that, but the fuel source of an ICE must produce carbon output. However, there are many fuel sources for EVs that are carbon neutral (solar, wind, hydro, nuke).

Where I live, my power comes from mostly nuclear sources, so the production of my car has been the only major carbon impact that it's had.
It grows naturally in pretty much every society.

Well, if we're going by that, we should also concede that authoritarian societies are more common than free societies (per the Democracy Index). How should we interpret this?
I had written about how limits are not necessarily bad:
http://stephan.sugarmotor.org/2010/08/couple-of-thoughts-abo...

One can make good arguments in favour of trade barriers as well (related also: "globalization", https://en.wikipedia.org/wiki/Criticisms_of_globalization)
Has Sen. Sanders explicitly stated a more welcoming attitude concerning the status of Mr. Snowden?
"Base52-encoded random numbers" is a rather obtuse way to describe random letters.
I've seen videos of lots full of perfectly working, but slightly used, appliances waiting to be dismantled and recycled in Japan. They don't even bother blocking entrance to the lot and they're mostly unattended, so anybody could in theory, just drive up and fill their house with all the appliances they need for nothing.

You also rarely see old cars on the road because (my understanding is) that taxes incentivize people to ditch old cars quickly and get new ones.

My thinking is this extends through various parts of Japanese society, and combined with various taboos, is used by the government to help keep the economy moving. Otherwise, the culturally thrifty Japanese population would just keep everything they have forever and the economy would be in worse shape than it is now.
Does anyone have a copy of the 4.3MB file that this refers to? If so, please: (1) submit it to VirusTotal, and (2) post it here.
> immutable
Face scanners added to chip-and-pin terminals
Incentives matter, but the effect is never what you want.

Put more bicycle lanes up and people will buy mopeds (which polutes like crazy), or take jobs elsewhere, or something else crazy.

A good example is probably Australia where they made helmets mandatory for adults on bicycles. So many more people choose to take their car that the number of saved lives were offset by the amount of exercise lost.
I would love to teach a software ethics course, and it wouldn't be me standing up saying "be good" over and over. We would study contemporary ethics questions:

- what should you do if your government demands you secretly backdoor a specific user?

- what if your easiest recruiting channels yield a higher proportion of white males than other, costlier recruiting channels do?

- if your startup is struggling to even survive, should you invest time in infrastructure that protects users' privacy from your employees?

- how do you find nonprofits and companies that are aligned with your values and need your help?

Those are just four questions off the top of my head. I think there are plenty of thugs to talk about to fill a semester, let alone an hour.
It's ok for Java. Much rather be in Scala land though, and exploit the JVM for all it's worth.
It looks like Oslo's averages are a couple degrees above Chicago's. I'd call that very cold.
Very few details on that site, the original article (cited by electronics-lab.com) at eetimes.com has a lot more detail.

http://www.eetimes.com/document.asp?doc_id=1327819
A little less snarky way of putting that might be to say that does not help the US's image. If he were to mysteriously die of a heart attack, everyone who thinks positively of Snowden is going to immediately blame the US for shenanigans.
Actually that was the purpose stated; they developed it for testing in-house and it makes sense to do so. However, at some point there must have been someone who was a front-line employee who could have blown the whistle on this kind of disgusting ethics violation.
Which 24 people would you have chosen?
If you consider these things huge, you never looked over the rim of Kotlin's tea cup.

You would be surprised what's out there.
The problem is we when live less and less in the way our bodies were designed.

For example, we were built to receive all sorts of positive side effects from exercise. If you don't exercise at all you lose those benefits. It's doable -- many people don't exercise -- but it's a loss to be sure.

Another example, using your three meals... We were not built to be eating as much as most of us do as consistently as we do. Take one look around you and see how many people are headed in the direction of obesity.

When you combine the eating and the exercise you get a deadly combination.

And there are other examples of "going against the grain," which when taken individually are not hugely detrimental but when you add them up they are harmful.
So you also believe that the Indian government is acting immorally when they enact environmental laws? Preventing foreign capital from setting up toxin-dumping industries is also "interfering in the free market" too, you know.

"The free market" is neither (A) a natural state between different nations with different legal codes nor (B) intrinsically moral.
Do the agents get assigned Soviet handler on the first visit, or do you have to attend a few meetings first?
Show HN: Google When? - adds a date tag to visited links in Google search
It seems unlikely that Bosch would implemented an algorithm to detect an emissions test and alter the engine behavior. It seems much more likely that Bosch implemented diagnostic features to force the engine into a particular operating mode (e.g. Enable/Disable EGR) and that Volkswagen activated those features when it detected certain qualifying criteria (i.e. emissions test conditions).

Unless there's direct evidence implicating Bosch, then blaming them for the cheating is like blaming a bullet manufacturer when you get caught shooting people.
Akka-http is basically the successor to spray if I remember correctly. At least I believe jonas boner said so. Not sure I would invest much time in spray at this point in time.
What does 'sign' mean in this context? I hear it a lot and don't understand the mechanism.
> instance heads

Instance heads are the types in the instance declaration that the compiler dispatches on, for example in `instance Show Int` the head is `Int`.

> named instances

You can see an example for named instances in Idris (very Haskell-like syntax) here (http://idris.readthedocs.org/en/latest/tutorial/classes.html...). We could put named instances into runtime objects (example in Haskell: `data ShowInstance a = Show a => Instance` which does exactly this), thereby forgetting the name, which could cause ambiguities down the line. But even without instances in runtime boxes, different instances for the same type necessitate that there are some rules for instance resolution that a programmer has to consider. For example, if we have two monoid instances for `Int`, one with addition and one with multiplication, we somehow need to make sure that the monoid operations mean what we want them to mean, so that we don't get unexpectedly addition instead of multiplication.
Not bad, getting famed novelist Jonathan Franzen to write your book review! Sherry does noble work and it deserves wide recognition and readership.

I can't say I am hopeful, but I do hope that society's current preoccupation with mobile devices will start to get old, and after a few years people will begin to realize how negatively they're affecting everyday life and interpersonal interactions. Perhaps it will become "cool" to not have a device, or, it will be societally uncool to use it during meals or at restaurants, like cigarettes have become. I kind of hope that the smartphone market splits soon into two camps, one the same old machines that Apple/Samsung etc pump out, and another camp of slightly less smart, less feature-rich phones, fewer apps, designed to be used occasionally not every damn second of the day... phones that are more about infrequent checks on status and more about making calls and occasional text conversations. Devices that start giving your life back to you. I know, dream on. But as the smartphone owner population gets demographically older, I suspect you will start seeing something like this happen.

It would be interesting to design a user interface that was easy to use, but was designed in such a way to dissuade you from constant use. Perhaps it might reward you the less you used it.
Top 15 Underutilized Features of .NET Part 2
I find it interesting that the US government goes after a person that exposed inside government law breakers but they let Hillary run for president by lying to the public and government. Something is just not right!
This is just a link to an article in The Intercept that was discussed here a couple of months ago:

https://news.ycombinator.com/item?id=10041046
Its Paris, cars there get burned pretty often. It already can't be cheap or easy to have a car in Paris, people probably have them because they are worth it, which means the alternatives suck. Make them not suck.
I wouldn't completely rule out a lame-duck deal in the final days of the Obama administration, after the election, in which Snowden agrees to some kind of trial/punishment, but is protected from the worst the espionage-statutes could throw at him. (Or, in the final lame-duck days of a future administration.) This could take the form of a pardon from some alleged offense, but not others.
He's more welcoming, but he too believes Snowden is a criminal; he wants lenient charging and sentencing for him (a "plea deal" of some sort, is how he put it).
Django on Jython
We've been trained by the works of fiction to immediately pattern-match high-tech crime prevention with dystopia, but I think it might be good to stop for a minute and consider if the belief isn't seriously biased. It's incredibly hard to make an utopia that's not immediately boring - to be enjoyable, narratives require conflict. Even Star Trek, arguably the last popular sci-fi with positive outlook on the future, just took the conflict out of the utopian Earth and moved it somewhere else. So the reason crime-solving technology leads to dystopia is not a feature of the tech, it's just because an utopia would be boring.
"In my view," Sanders continued, "the interests of justice would be best served if our government granted him some form of clemency or a plea agreement that would spare him a long prison sentence or permanent exile from the country whose freedoms he cared enough about to risk his own freedom."

http://www.usatoday.com/story/news/nation/2014/01/06/snowden...
http://www.sanders.senate.gov/newsroom/must-read/why-i-dont-...

"Love him or hate him, we all owe Snowden our thanks for forcing upon the nation an important debate. But the debate shouldn't be about him. It should be about the gnawing questions his actions raised from the shadows.

In the end, fear and politics likely will prevail, as it has in America's past. Washington elites will close ranks to protect the Surveillance State, to trample out transparency and to mislead the public. Maybe we can talk first?"

EDIT: nicklaf mentions below that this was actually written by Ron Fournier, not Sen. Sanders, although I believe that if its considered "Must Read" by Sen. Sanders, its congruant with his position on the topic.
That's possible, but I find it to be a stretch. Unless one group were told "write some code to meet this emission standard" and another were told to "write some code to detect when emmission testing is happening" that could be the case. But somewhere along the line someone was given the task to combine those and "disable the emission controls unless testing is happening."

In other scenarios, yeah it's perfectly possible for an developer to complete a task that seems innocent enough and unbeknownst to him will later become a part of something nefarious.