skysight-inc/HackerNews huggingface dataset:
There's more gems in there, e.g. a couple of Amex vulnerabilities:

https://github.com/samyk/magspoof#american-express-card-numb...

> I found a global pattern that allows me to accurately predict American Express card numbers by knowing a full card number, even if already reported lost or stolen.
> This means if I were to obtain your Amex card and you called it in as lost or stolen, the moment you get a new card, I know your new credit card number.
Social security is not a good or service, it's money. You can't consume money. Also, we consume more healthcare today. Also, sarcasm doesn't mean what you think it means. So no, you haven't named a good or service that we consume less of today.
You simply misunderstand the "square" statement. It is factually correct.

You seem to understand it later, where you say that 3^2 = 9 and 30^2 = 900, so what's the deal?
Geeze, the sentence structure in that article is horrible. Clear as mud.

EDIT: Oh, I see now. He's from Slovakia (https://twitter.com/LukasStefanko), so I guess it's just the language barrier.
No, I recognize it's a hard problem, that's why we should be devoting significant resources to doing things now.

I get the point about unintended consequences with cascading problems (and cascading solutions to the new problems) (https://news.ycombinator.com/item?id=2743879) but the odds of screwing up here are much less than screwing up on AGI, whose work has already significantly started and may be completed first anyway making this whole discussion moot. Geoengineering is risky, but it's not as risky as other things, including inaction, which as the status quo guarantees loss of thousands of lives. Even if the climate change alarmists' greatest fears come true we still easily have 50 years to try things on smaller scales before time is up. Anyway I think it's a lot more feasible for a strong nation to lead a technological solution than to convince all strong nations to curb their development. Call it a plan B if you must, but at some point I expect climate change alarmists are going to say something like "China and Russia and India aren't playing ball hard enough, their emissions are still causing global warming that will end humanity in x years unless they immediately reduce to the levels of the USA and the EU whose combined efforts bought us y years but it's still not enough, so it's time for war to make them."
> almost certainly result in a jihadist Syria

What does that even mean?
It's true! :)

Warm regards,
James @ Self Lender
Sometimes it has some element of truth, i.e. it's a fictionalized and dramatised account of the real accomplishments of a person.
I was very surprised to learn there's no check for Chip and Pin requirements beyond what the magstripe requests. I naively assumed if the card had that feature the terminal could force it to be used. What would happen with the other fields he mentions, like whether or not you can withdraw cash with the card?
> Nuclear power
> I didn’t mention nuclear because I don’t know much about it.
> See Stewart Brand’s book Whole Earth Discipline for an optimistic
> take from a recent convert. (Ironically published five months
> before Fukushima, but his points still stand.)

I haven't read the book (Whole Earth Discipline), but it seems to have been published at least a year and a half before the Tōhoku earthquake. In any case, advocating nuclear power before an earthquake or tsunami would only be ironic if the author were advocating building new reactors near coastlines or fault lines and allowing them to lapse on safety mechanisms.

The alternative would be to argue for the whole city of Tokyo to drastically alter its energy profile so that an entire nuclear reactor weren't needed, in addition to other plants, to power the city.
GBP is good enough for me. :)
Ask HN: Is it common to run anti-malware on production linux boxes?
A few enterprise customers have started asking / requiring anti-malware on all "computing devices" and periodic scanning.

I haven't encountered the idea of anti-malware on e.g. Ubuntu before, and this seems like an absurd idea. However, it could just be my inexperience showing, so - is anti-malware a common practice? What are the industry-standard products for anti-malware? Is the footprint ever a concern?
Bret Victor has provided a first principles approach to solving climate change. I work at SolarCity we take a similar systems thinking approach and tackle the problems at their fundamental level. We have been vertically integrating the business from manufacturing highest efficiency solar panels, mounting systems that enable fast installation, electrical systems that can work with the grid, financing for homeowners that don't require any downpayment.

Our Software engineering team specifically works on improving efficiency of our sales workflow, geo spatial systems that support our installation crew, grid systems that monitor and work with the grid, and providing the best experience for our customers.

I'm happy to talk to anyone who is interested in joining us. Shoot me an email at mkumaraswamy@solarcity.com

Our career's page: http://solar.solarcity.com/careers/software-engineering/
Facebook deploy changes to production three times a day? Did I read that right?
I guess this is supposed to be an Easter Egg, but all it does on my browser is return search results.

Any suggestions as to what it might be supposed to do, and how I can share in the experience?
The purpose of an air bag is to keep your head from smashing into the steering wheel or dashboard at 70MPH because the car stopped but your head kept going.

The air bag decelerates you to zero over a (relatively) much greater time, meaning much lower forces on your face, brain, etc.

Soyuz lands with a retrorocket and it looks exactly like this:

https://www.youtube.com/watch?v=f2X2kaqYatI

You don't need a long burn to cushion a drop like this. A fraction of a second will suffice.
Please, tell Ukraine and the rest of Eastern Europe about how the Russian thread is an invention of the western media. I'm sure the Russian military support in the Donbass is also just an invention by CNN, right?
Do you find that navigation in the middle annoying, specially since user has to scroll to find it again. Content is great but design didn't quite do justice to the research.
I'll happily trade time spent in meetings with time spent interacting with tickets and agile boards: I can fit the latter in my flow, while there's no chance that I'll be able to fit the former.
Are you kidding me? I remember this dice picture ...from some steganography course I read online :D
Kickstarter has no clue how drone startup raised $3.4M then imploded
it's not that much of a difference, going almost straight up and falling mostly straight down is a matter of burning longer. it is an achievement, it's just not useful for much (for the price) and overengineered at that. if it actually went to orbit and didn't come back, it'd be a bigger thing.
I still don't understand what is meant by the word 'banker' but otherwise the article is interesting.
Basic income without rent controls will just be a transfer from taxpayers to landlords.
I agree. I was responding to the parent comment suggesting Sourcegraph should adopt a similar business model to GitLab and I was pointing out that perhaps GitLab's business model has not been proven successful yet
But why pictures, not just the message? Looks like it's been going on for a few years.
Tunisian bus attack strikes presidential guard in heart of capital
This definitely resonates with me as someone occasionally involved in the interview process from the other side. In my experience the scariest bits of "hidden criteria" are brought up under the umbrella of culture fit. Candidates are posed a minefield of completely non-technical-related open-ended questions, with the consequence that the interviewer is free to draw practically any conclusions they want about the candidate's personality and compatibility with the company. These lines of questioning are impressive to recount, as if the interviewer is a clairvoyant with exceptional powers of insight into the candidate's soul. However, I'm skeptical that this process is any better than random at selecting people who would turn out to be valued, effective engineers. It seems to me that, unless there are glaring issues with arrogance/stubbornness/misanthropy, technical chops and engineering skill are what you should optimize for, not personality.

I've heard of "objective" interviews based on a rubric with a set number of points for each question and little room for interpretation. I wonder how that works out. I feel like even if it's pretty bad, the interview is so completely terrible and broken right now that it might be an improvement.
They don't obfuscate it, but i want a SUPPORTED method of accessing my banking data programatically.
> English punctuation does not significantly alter meaning in my opinion

Let's eat, Grandma!
vs
Let's eat Grandma!

Commas save lives.
800MB Ruby/Rails

What, really? How much of that is the app source? As a byte-shaving embedded developer I have zero experience with Rails.

On the other hand, unless you're scaling really big, the CO2 cost of the computers is probably dwarfed by the cost of the developers commuting to work.
Anyone able to open in on an iPhone 4s? I know I know... it's old, but it legit gave me a warning I've never seen before "This page had a problem so it's been automatically reloaded"
"Yesterday, we launched a very important fundraiser. Over the past year and in particular since we launched the VMware suit, some of our corporate funding has been pulled because we tackle important but controversial issues, like GPL compliance. We have even have had talks blocked or canceled at conferences."

WOW!
We're considering using API Gateway and Lambda for our upcoming API service. Would love to hear feedback from anyone who's tried it. From the linked article, I got one gist [1] which wasn't very favorable for the API Gateway + Lambda setup.

[1] https://gist.githubusercontent.com/mpdehaan/d979252b9c69cfd1...
Ball pit seems like.. trying too hard
Between settlement building and figuring this out, what else is there? ;)

In all seriousness, I made a new character for investigating the relay and fuzzing the server when I wanted so I wouldn't be screwing with my first character.
There's a much more interesting, detailed, account of problems of LEGO title "We had to block the Lego". It's sometimes tricky to find online, but here's one link. (And the first few paragraphs).

http://pastebin.com/RddCXS60

> Carl and Oliver,* both 8-year-olds in our after-school program, huddled over piles of Legos. They carefully assembled them to add to a sprawling collection of Lego houses, grocery stores, fish-and-chips stands, fire stations, and coffee shops. They were particularly keen to find and use "cool pieces," the translucent bricks and specialty pieces that complement the standard-issue red, yellow, blue, and green Lego bricks.

> "I'm making an airport and landing strip for my guy's house. He has his own airplane," said Oliver.

> "That's not fair!" said Carl. "That takes too many cool pieces and leaves not enough for me."

> "Well, I can let other people use the landing strip, if they have airplanes," said Oliver. "Then it's fair for me to use more cool pieces, because it's for public use."

> Discussions like the one above led to children collaborating on a massive series of Lego structures we named Legotown. Children dug through hefty-sized bins of Legos, sought "cool pieces," and bartered and exchanged until they established a collection of homes, shops, public facilities, and community meeting places. We carefully protected Legotown from errant balls and jump ropes, and watched it grow day by day.

> After nearly two months of observing the children's Legotown construction, we decided to ban the Legos.
The idea of an API was the ONLY reason why I created a Simple account. It is really sad that they aren't going to expose an API.
Breast Cancer Cakes (NSFW)
Or just the representatives themselves. How long will it be before some Congressmoron asks, "Why are we giving Elon Musk $300 million to take our people to the space station when Amazon is doing the same thing for $3 million?"
Also, arxiv is physics-biased.

Have there been any significant CS papers published in the last ~5 years that aren't on Arxiv?

The last thing I remember not being there was a set of papers on IBM Watson that were published in an IBM Systems Engineering Journal.

I have a feeling that some papers out of Microsoft tend not to end up there too, but I can't think of a specific example.
On-demand box storage startup set to close, offers advice to entrepreneurs
Nice product. It would be a very good point if you could handle categories and tags. I have tried to fix this lack in Jekyll by building my own stuff for a side project http://www.magazineduwebdesign.com/. You can check the sources of the app here https://github.com/MagazineduWebdesign/MagazineduWebdesign.g....

You have a nice roadmap :-)
Ouch. I hope when I post something to HN I get constructive criticism or even skepticism but I would really not want commenters recommend other similar projects or ideas.
Appreciate the confirmation. Outside embedded, one use for these people aren't appreciating is offloading interrupts or security checks of I/O devices. Along with sensors/mgmt stuff you can trust more. Cost being so low let's one do physical partitioning of domains instead of software.

Also, thanks for the mention of Cortex-R as I hadn't heard of it. A quick glance at their description looks good. About $8 on low end to $50 on high-end. Getting quite cheap indeed for what 8-bits would be required for. Way cheaper than the old champ (RCA 1802 MCU) is today ($150 w/ 1k units).

http://www.intersil.com/content/intersil/en/products/space-a...

Ok. So, I'll probably not have to go to 8-bit or drop large $$$ if I take-on certain projects. Good to know. Dirt cheap chips with large ecosystem, lock-step, real-time, and MPU's... it's like the golden era in tech for embedded start-ups, eh? :)
In Cambridge/Somerville MA the (status TBD) light rail Green Line Extension has apparently already caused real estate prices to rise along the route. And the fact that the plans will be delayed and may be altered/canceled is causing some consternation among those who bought assuming it would happen.

https://www.bostonglobe.com/business/2015/08/25/possible-del...
Robot Race to Hawaii Contest
Exactly. Way too early.
It's funny we tested lambda + Amazon gateway api this week at work.

It's awesome!.. Until you have to deal with the cold start issue. Our first call takes about 1.5 seconds; and then all other calls take about 50-80ms.

Your container stays in cache about 5-10 minutes unless it is called back, there are no guarantees.

This micro service is not called often and for us 1.5 seconds is never acceptable.
1) The labor force participation rate is declining primarily due to an aging population. And even with the decline it's still much higher than it was at any time before the mid 80s (primarily due to women entering the workforce).

2) The % of the world living in extreme poverty has declined dramatically in the past half century.

http://www.vox.com/2015/8/13/9145467/extreme-poverty-global-...

The story of the last 50 years is really about members of the western middle class finally having to deal with competition from the rest of the world due to globalization. While this has certainly had some downsides for the western middle class it has been an INCREDIBLY HUGE BOON for everyone else. It's very hard to overstate how fast east asia has transformed from poverty to relative wealth and how good this has been for hundreds of millions of people.

Go look at a picture of what Shanghai looked like in 1990 vs today: http://gizmodo.com/5558350/shanghai-skyline-before-and-after
My parents, Ayn Rand and God.
Writing tips and the psychology behind them
A tale of two development competitions
Buy some nice frames and put them on the wall.
Why not set a gradient percentage of income against the cost of social/public housing?

The hard cut off for social housing benefits incentivizes keeping income below that threshold to maintain the benefit.

Basic income does nothing to increase housing supply, so urban rents would increase as a result.
What exactly was SpaceX gunning for a "first" in?

First space rocket landed successfully? That's been done many times, starting with the X-15.

First successful vertical rocket landing? SpaceX has done it already.

First successful vertical landing of a stage of an orbital rocket? Nobody has done this yet, and that's what SpaceX is gunning for.
Fun fact: I had an airline lose my and my wife's bags.

Permanently.

On the way to our honeymoon.

Ended up getting reimbursed a significant amount for the resulting loss.

The only bags we've checked, since, have been souvenirs, and that includes month-long trips overseas.
You think that's difficult? Here's you the next challenging target for DB work or whatever after your PhD is done:

http://www.embeddedinsights.com/channels/2010/12/10/consider...

Bet you didn't know they were even still around, eh? Get's better:

http://www.electro-tech-online.com/threads/mc14500b-a-1-bit-...

With manuals and Verilog included. :)
Speaking of which, this came across my twitter feed just now: https://theconversation.com/feeding-godzilla-as-indonesia-bu...

Indonesia is keeping up the burning despite being under Chinese levels of smog.
With PSD2 regulations coming in I think we will see a lot more of this with banks having to open up APIs for merchants and more and more innovative solutions using them. Good work!
Nah. No ads. I don't use those apps to begin with. What my rant was about was the perception that "whatsapp, facebook and twitter" == the internet, and anything else isn't.

There isn't a concept of net neutrality obviously, but thankfully no malicious preferencing yet (I don't think my experience was a result of malicious preferencing, just a result of marketing and giving the population what they want)
I wonder, how does the logo work? Does the original, latin "CNN" logo mean anything in the arabic logo? Or is it arabic and latin smashed together?
inferring here

It appears that Android Banker is a particular piece of malware that does a very good job of mimicking login pages/payment pages of various applications/sites
> anyone wanting to know OpenBSD's position on virtualization should spend 20m-1hr digging through threads like that

Okay, okay. Personally, I think the fact that OpenBSD did not support any of the current virtualisation solutions, and now have an appropriate one in the works says a lot about their position.

And, frankly, what use is an organisations "position" on VM hosting to a user? It either supports it or it doesn't, and if you don't plan on developing it the reasons don't really matter.

EDIT: I'm also going to point out that mailing list posts in general rarely stand on their own, and exist within a context.
I read a few parts of the article and already saw this:

"For example, even with Cortana and searching the Web from the Start menu disabled, opening Start and typing will send a request to www.bing.com to request a file called threshold.appcache which appears to contain some Cortana information, even though Cortana is disabled. The request for this file appears to contain a random machine ID that persists across reboots."

and

"if Web searching and Cortana are disabled, we suspect that the inference that most people would make is that searching the Start menu wouldn't hit the Internet at all. But it does. The traffic could be innocuous, but the inclusion of a machine ID gives it a suspicious appearance."

That's as personally identifiable as you need when you have an identifier locked to the machine that is sent even across reboots. This is even more identifiable than an IP address, even for static IPs (since you can have multiple machines behind it).

Is that sufficient for the claim or do you still reject it? I'm most concerned that you hold anger at FOSS people's "arrogance" over complaints about a bad software package that many people are unfortunately hooked to.

Anti-FOSS advocates here in these comments are behaving poorly; a conclusion they don't like which is supported by facts that are referenced isn't being taken well.

Here's some examples of where it is going wrong in these comments: attacking the messenger, claiming things are false / unsupported when they are, trying to find any minor flaw in what was stated in order to discredit the whole thing, ignoring facts and misleading people about what the source actually says.

That's some nasty stuff. That's Us vs. Them stuff, not "yeah that is a concern, I'm upset about that too!"
It seems almost every time i use the website something is new/different/broken, so i'd believe that they're deploying that rapidly.

The mobile app seems a bit slower, with broken features staying broken for a while. (matching the stated 2 week cycle).
No. There are a number of things that stop them doing this practically:

- Making breaking changes to their APIs break all in-flight clients. This is poor UX for their regular customers if their first party app stops working every week.

- App store approval time is a choke point

- Internal change control is another choke point

- I can find what's changed and deploy a fix in no time.
They do exist for a number of species including black rhino. For many of these species they need open habitat, but the right to hunt them is paid for by sportspeople which in turn goes to the conservation of the open habitat.
What I've done is actually completely legal and specifically protected by the law in the EU.
How little memory have you managed? They claim 100KiB, but if it could be even half that then there are some tremendous opportunities to use it. I'd love to hear more about your work adapting SQLite for Cortex-M-class devices.
> > The license doesn't attach without your knowledge.

> It does if one person on a large team did it without others' knowledge.

No, the license never attaches to your code without a positive decision on your part to offer your code under the license.

Now, if someone does something that makes the code legally a derivative work of GPL code without knowledge of the person releasing the code, the obligation to release the code under the GPL or not at all may be created and breached without knowledge of the person doing the release, but the license still has not attached to your code.

When the breach is detected, you may decide that the best way to deal with the breach is to offer the code under the GPL.

> This doesn't occur for most, non-copyleft code.

Any code, under any license with any obligations attached to redistribution of derivative works -- or which simply prohibits redistributing such works -- can create unexpected breaches when someone includes them in a work without knowledge of the person responsible for the release; copyleft licenses are not at all special in this regard.

> At that point, if it's a derivative work, then your codebase looses its value as it gets GPL'd just because GPL'd code touched it.

No, again, your code base only becomes GPL because you choose to offer it under the GPL. IIRC, the few GPL violation cases (in the US, at least) that have gone to court and not been settled have resulted in fines and injunctions on distributing the GPL-dependent software.

> Note: A former Microsoft employee told me in a prior discussion they identified this exact risk and took steps to prevent it. I never knew if it was paranoia or what could legally happen. Interesting to find last year that my hypothetical scenario actually played out to a degree in FOSS's arch-rival of that period.

The description of the GPL as "viral" was central to Microsoft's PR effort against Free Software in general and Linux in particular.

So, its not really surprising to hear that from that source.
You could use a scheduled cron task in Lambda to make requests to keep your API hot.