skysight-inc/HackerNews huggingface dataset:
I will personally pay you the sum of 500 Bitcoins if you can demonstrate a realistic active MitM attack on OpenSSH that allows an active network level attacker to "pass the authentication request to the original" and gain full MitM.

Conditions:

Public key authentication must be used for authentication.

If it's possible to perform the attack passively(e.g on pcaps), it doesn't qualify.

This attack has to affect setups using both the latest OpenSSH client and server with default configuration.

This attack has to be able to be performed in realtime using the processing power of a 2015 macbook model of your choosing.

This attack cannot rely on attacker having any other access but the ability to tamper with the connection however much he wants.

This attack cannot rely on known flaws in the encryption algorithms.

With full MitM I am referring to the ability to at least access the plaintext communications between the client and server. Eg if the user runs 'sudo', the ability to see the password entered.

Please consider this offer legally binding, if you have any questions I will answer them and you can consider the answers binding too.

Good luck.
I honestly can't get much work done now, I've been looking for RabbitMQ auth plugin sample code and every link I'm clicking now shows me a unicorn.
I was in a go tutorial a couple of years ago where the presenter was including directly from github.

And sitting in a ruby talk when the rubygems compromise happened just after everyone had been told to go upgrade a gem because of flaws in a specific gem.

It's not unique, but it is terrible.
IMO, the anti-pattern in use here is out parameters, Swift has tuples for a reason!
Most of the time it's not major surgery, in those cases I would just get on with it.
only a very old person would think you could take a modern youth away from the Internet without horrifying them.
Betterment for Business Officially Launches Robo-401(k)
"I think we need a way to have a faster iteration cycle for trying sociopolitcal ideas."

One of my personal hopes with Basic Income is that it addresses this issue by providing a safety net so that people who's livelihood relies the existence of the status quo can be liberated from the incentive to keep the status quo. For example, our government creates a Department for Homeland Security to address threats. It employs thousands of people. What happens if the threats go away and the department is no longer needed? Suddenly thousands of people are out of a job. That's thousands of people with an incentive to keep the department in business, which requires threats to our homeland security. Multiply this example across not just government institutions but private as well. People have an incentive to keep their gravy train running, even if it does irreparable harm. We need to remove this incentive so we can have faster iteration cycles, not just for socio-political ideas, but all ideas. Hopefully, a basic income can remove these perverse incentives by giving people a safety net. They're not afraid to lose their job, or move on from a shitty job, because they know they and their family won't go hungry, homeless, or without access to medical care.
like fraud and click fraud are two separate issues. like fraud is highly pervasive, there's tons of evidence on it.

source: https://www.youtube.com/watch?v=oVfHeWTKjag

click fraud less so. i've run marketing campaigns and you do see some clicks missing in google analytics, but it's not as bad as the like fraud.
So stuff like http://www.ncbi.nlm.nih.gov/pubmed/16571180 or http://www.ncbi.nlm.nih.gov/pubmed/16954359 is bullcrap because you say so?

Anyway, have fun.
Fiddling around with several deployment and configuration management options I just came to the conclusion that there is too much code between me and the systems.

I would like to have one bash script that I could start in such worst case scenarios that tests everything and tells me exactly what the problem is.

Just imagine everything is down and you can not trust your dashboards.

What would you put into such a script?
What would you test for?
This resonated a lot with me. I never memorized 6+7 nor 7+8, I couldn't bring myself to do it. Instead I found an easier alternative: make it 7+7 or 8+8 and substract 1.

Luckily I didn't say that out loud, otherwise they might have made me hate mathematics and I wouldn't love science now (:
Or have it be a link to an explanatory news or wikipedia article... But that might be too much, let me be the last to suggest unnecessary make-work for someone else.
Unfortunately for some of us; it's not an option. I have an extremely physical neurologically induced response ("weak stomach" more technically), but to the point that during a minor growth removal I ended up vomiting continuously while passing in and out; needing a day in the hospital on an IV drip for recovery. (couldn't stand up and walk out, despite trying.)

This is not meant as a "pity me" by any extent, I find it hilarious given that my parents would have liked me to be a doctor and enjoy sharing the story. However, it puts me in a "screwed if I do, screwed if I don't" situation when it comes to going under, and for something like wisdom teeth; they can't really have me going all human-fountain on them.

In short, the "if available" bit is the kicker, I'm curious enough to be googling around for non-anecdata research on the actual risk distributions since while comments like yours certainly make me nervous, after years of going under with no issues and doctors recommending it given my situation, I wonder to what extent I'm stressing myself out over a very uncommon occurrence.
> it should be easy to learn

That would be a significant upgrade.
I'm in the US. Mine were already growing above the gums so I could feel/touch them. The dentist I went to put me on novocaine and used a diamond drill to split my wisdom teeth into halves that he then extracted out.

I think people who have surgery, are the ones whose wisdom teeth have not really grown out yet. So maybe that's what the article is referring to.
One slip up by your anesthesiologist and you are kaput. Doctors are people who make mistakes. Minimise risk.
The bigger problem here is the number of build packs only relying on Github as a source of truth. We need to find an abstraction to distribute storage so that there is no single point of failure.
I think when 3D printing can print electronics and metals embedded with plastics at good resolution, then we will see most consumer goods 3D printed whole, rather than being assembled, reducing their cost substantially.

This is more short to medium term - say 5 to 12 years away, but would have a lot of economic impact.
The whole point of basic income is to reduce the friction for obtaining necessities ... which is increasing demand for a limited supply. Demand increases, supply either exhausts rapidly or finds some other way of increasing friction - usually by increasing prices, stabilizing right about back where we started but with higher prices.

In addition, money itself is of limited supply. Reducing the friction for obtaining money results in increased demand for that limited supply of money. Demand increases, supply either exhausts rapidly[1] or finds some other way of increasing friction - usually by increasing prices (inflation), stabilizing right about back where we started but with higher prices.

[1] - "The problem with socialism is eventually you run out of other people's money."
Just one data point, but: as a teenager I was told "your wisdom teeth might end up being fine, but most people end up having to get them pulled; it's up to you." I passed.

Fast-forward a decade or so, one of them was, to use the technical term, totally fucked. It was impacted, uncleanable in parts and thus had to be removed, but had gotten so wedged in that it not only pushed my other teeth crooked, but was extremely hard to extract, requiring the dentist to go fetch some other stronger dentist and then they both worked on it and it took way longer than planned to get all the pieces out.

That was lame, but I still have the other three, and now my dentist says the same thing is happening to those (and even I can tell, it is).

So now I am 41 with a busy job and young children, and I have to find time to have three wisdom teeth extracted in a procedure that is now going to be much more difficult than the simple extraction suggested by my dentist 20 years ago.

So, in my case, I wish I did it then.
Can you elaborate on why you think Google wouldn't know before FB?

Many (most?) people don't go posting anything about pregnancy before for ~3 months traditionally, and odds are you are going to be searching for symptoms when you first notice something is wrong health-wise.

When a doctor or test confirms you are pregnant, I'd be willing to bet that users are immediately pulling up their favorite search engine to figure out next steps vs. blabbing about it to their BFFs on FB.

Now, if you are basing it purely off of carpet bombing people targeting off of demographics, yes, FB probably has more solid data there as it is self-reported and not inferred. But you sure as heck won't get self-reported pregnancy info earlier than Google will know you are interested in it.

If anything, I'd argue Amazon would have that data in a similar timeframe if people start looking up pregnancy books.

This also entirely discounts the notion that there is 3rd party data sets at play which both Google and FB leverage to enrich their data.

All of this is not to say your point on the brand advertising is incorrect--I actually agree with that as the "feed" has become the new television. But definitely do not agree on the specific example cited.
How Following Others Will Leave You Broke
Big spenders do a lot of due diligence to make sure that the money they spend is actually giving them a positive return. It's not like businesses just throw millions down the drain and hope it gives them results. Facebook is working great for them and it is not a scam otherwise businesses wouldn't be spending billions on advertising there every quarter.
If you took one expert and faced him against a room full of experts who all together decided on the next move, who would win?
The accepted English demonym is American, and it has been for the last 200 years. Did you think you would be misunderstood if you said American?

The USA is the only country in the world with the word America in the name. Part of the world does consider North and South America to be one continent, but most of the English speaking world does not. Therefore in English there is no ambiguity when referring to someone as an American.

You'll also note that no one has any issue with Australians calling themselves Australian, despite the fact that Australia is not the only country on the Australian continent.
Increases in life span due to medical technology have been rapidly plateauing as the low-hanging fruit is picked.

True, because incrementally better treatments for cancer or heart disease just mean that you die at 84 instead of 82. But we've only recently started trying to prevent or repair the effects of aging, which has a much greater potential payoff.
> "I think we'll see human activity in space increase by an order of magnitude over the next decade."

However, while I don't disagree with the potential for space activity in the coming decade(s), it makes a pale comparison to the first two-thirds of the 20th century, where humans went from largely ever living on the surface of the Earth (plus or minus 100 meters or so, for the eternity of humankind) to flying on a rocket to the f*ing MOON.
Not just Flint: Poor communities across the country live with extreme polluters
My website runs on a vps with NodeJS as the backend. I could easily self sign a certificate but chrome displays a huge warning to users. How about signing certificates for free google. Https is easy to implement but the fact that it costs is bs.
> January 28, 2016

> 00:00 EST The status is still red at the beginning of the day

They seem to have some time issues as well since it's not yet January 28th in EST.
LetsEncrypt offers free, automated certificates and is recognised in all major browsers (IE, Chrome, FF, Safari). https://letsencrypt.org/
> clever remarks about how Git is distributed but we're all depending on GitHub for so much that we defeat the purpose

Yeah, but they'd be wrong about that purpose.

Distributed systems used by people (eg. email, BitTorrent) always have their major hubs (Gmail, The Pirate Bay). That's understandable: no product reaches critical mass without a main stream. The strength of a distributed system isn't that it has no points of failure: it's that, in the event of a significant failure in an established node (eg. TPB's downtime at the end of 2014), the community can retarget around a new solution (eg. KickassTorrents) at the point in which the inconvenience of the downtime outweighs the inconvenience of switching habits, without a significant dip in service associated with the switch.

In contrast, a truly centralized system like BitKeeper would just outright block progress if the central node were to deny access (which was, of course, the purpose that led to devs like Linus Torvalds changing their focus for a few months, so they they could scale back to full kernel production as they constructed a workable alternative, in Git).
Will it cause inflation, probably. But they don't have to live in the most expensive areas. They can move to a cheaper area. There will be places above and below the inflation curve. Housing is the largest expense so other things would not be affected as much.
I follow professional go. It's true that you play safely when you're ahead, which narrows the margin, but .5 is still considered tightly fought.
likely a data center problem
Be nice if self-signed certs were compatible with vanilla HTTP. Then no warning or complaint from the browser, but minimal security boost over naked transmission.
Doesn't load on Chrome for some reason (could be on my end)
We've been hearing about Stingrays so much I wondered what the average Joe can do to avoid 'em.

This is about the only thing I found, but it's promising for the long term -- http://secupwn.github.io/Android-IMSI-Catcher-Detector/ -- note that they list themselves as still in alpha and to expect false indications.

I think the typical advice I've heard -- turning off your phone or turning off the baseband functionality is pretty impractical for most folks.
Obviously nothing of the same scale, and yes it was always political, but the balance is shifting away from security to all of their other tracks, I counted up the talks from last year and only 25% were in the Security track vs 45% from 23c3.

There were 67 hacking talks at 23c3, and 29 Security tracks at 32c3, it's very clearly on the downhill as there are less talks, and people become less interested in submitting and attending.
Space is hard enough. Charlie Stross, "High Frontier Redux"
http://www.antipope.org/charlie/blog-static/2007/06/the_high...

As Charlie points out, he makes a living fanatasising about this stuff. But it's hard:

Optimistic projects suggest that it should be possible, with the low cost rockets currently under development, to maintain a Lunar presence for a transportation cost of roughly $15,000 per kilogram. Some extreme projections suggest that if the cost can be cut to roughly triple the cost of fuel and oxidizer (meaning, the spacecraft concerned will be both largely reusable and very cheap) then we might even get as low as $165/kilogram to the lunar surface. At that price, sending a 100Kg astronaut to Moon Base One looks as if it ought to cost not much more than a first-class return air fare from the UK to New Zealand ... except that such a price estimate is hogwash. We primates have certain failure modes, and one of them that must not be underestimated is our tendency to irreversibly malfunction when exposed to climactic extremes of temperature, pressure, and partial pressure of oxygen. While the amount of oxygen, water, and food a human consumes per day doesn't sound all that serious — it probably totals roughly ten kilograms, if you economize and recycle the washing-up water — the amount of parasitic weight you need to keep the monkey from blowing out is measured in tons. A Russian Orlan-M space suit (which, some would say, is better than anything NASA has come up with over the years — take heed of the pre-breathe time requirements!) weighs 112 kilograms, which pretty much puts a floor on our infrastructure requirements. An actual habitat would need to mass a whole lot more. Even at $165/kilogram, that's going to add up to a very hefty excess baggage charge on that notional first class air fare to New Zealand — and I think the $165/kg figure is in any case highly unrealistic; even the authors of the article I cited thought $2000/kg was a bit more reasonable.

Whichever way you cut it, sending a single tourist to the moon is going to cost not less than $50,000 — and a more realistic figure, for a mature reusable, cheap, rocket-based lunar transport cycle is more like $1M. And that's before you factor in the price of bringing them back ...
Still stylish.

But, I wouldn't buy one, because I like living, and I don't really want a car that "luckily" doesn't have to meet safety standards. Also, $100k will buy a lot of modern sports car, including a Tesla or a Nissan GT-R (depending on the kind of supercar you like), which also happen to meet modern safety standards. DeLorean's are beautiful, but not $100,000 worth of beautiful, to me, when they also suffer from most of the usual failings of cars designed 40 years ago.
Maybe we just need a shumway [1] equivalent for Java Applets.

1. https://mozilla.github.io/shumway/
how do you know what you have is bacterial as opposed to viral? You may be taking antibiotics for no reason.
this is actually a really good read about it. Perhaps a lot of comments on HN is skewed towards the young tech worker who sees himself as victimized in a souless wage slavery, but we don't hear any opinions on UBI from the truly needy - the homeless, the chronic unemployed etc.
“They’ll like smartphone apps better.”
Probably a popular page atm: http://somatose.com/2011/10/from-github-to-bitbucket-in-60-s...
So now game devs are forced to use JavaScript if they want to make games in the browser? That sucks.
Does anyone know if an extremely controversial new peice of software was recently pushed ?
> People get rich on the unpaid labor of others.

"citation needed" (c)

> There was the whole temp workers thing.

"bullshit" (c). You automatically assume that under other conditions these workers would have made more money. In many similar cases though, they would have stayed unemployed. So you have to prove the point that somebody made some actual wealth from underpaying these workers. Which is possible, but not automatically true.

Also, http://paulgraham.com/wealth.html

Also, I was born and lived half of my life in Soviet Union. I know what you're talking about and experienced it first hand. I've also experienced big time what happens when it doesn't work (and so far there's no good example in the world of it working sustainably).
We will make it to Mars within the Century.
> You're really saying that the way to change it is to simply wait, which is a complete disservice to anybody persecuted in the past, or anybody being persecuted today for things that are "still" unpopular.

That is not at all what I'm saying. The many activists for civil rights did not simply "wait". They protested, they petitioned, and most importantly, they made it very publicly known who they were and why and how they were being oppressed. Literally, the exact opposite of being private.

Most normal people (the 80% in your example) don't really want to be involved in oppressing or abusing anyone. It's easy for them to let it happen if they don't know the people it's happening to and see them as real human beings, but that's what happens so long as the main concern is maintaining privacy.

Look at what's happened since being gay has gone from private, closely guarded information to generally publicly available, or at least not explicitly hidden. Are gay people more oppressed or less oppressed now?
To expand on this, I think you can eliminate a significant amount of this fraud by properly configuring your ad campaigns (or whatever facebook calls them) and using "tricks of the trade". The companies that spend the most on facebook ads, will likely allocate a good amount of resources to hiring people who are experts in facebook marketing. So you have a lot of people not being experts in configuring their ads getting fraudulent clicks/likes/followers/stalkers/customers/etc and losing money on advertising when they go down this route, but the big companies spending more money on facebook as they get better at new_revenue/ad_costs.
Actually, I'm pretty dumb. Can't move the repo to bitbucket since Github is down.
Their source code pointing to Github is symbolic of exactly how this problem hasn't been solved yet.
Hardware, Less Hard
Facebook is the only platform that lets advertisers target a mass audience with very fine demographic precision. Google you lose the demographics. Television, you lose the the precision.

All advertising platforms deliver fraudulent/worthless/imaginary/bogus views. Print has a problem with publishers making up circulation numbers. Television has a problem with ads running while no one is watching. Radio has a massive problem as their listener numbers have collapsed. The display ad exchanges have tremendous problems. Mobile apps have an incredible amount of accidental clicks which may often either be 10 year olds trying to play a game or just outright fake. Video ad networks have a problem with ads auto-playing on repeat that are seen and heard by no one.

Google and Facebook are about the easiest to deal with, by far.
Do you think Australian ISP services is a market that could be disrupted? As an Aus, I would love Google to come through and strongarming Telstra into at least rethinking their inflated prices.
If instead of talking about progress , we start to talk about change, things may look quite different than Gordon's view:

We live in a surveillance society(both governmental and commercial). We are glued to screens, having much less human interactions than before(and some psychologists think it greatly harms our empathy). Boredom is non existent. Something like addiction is everywhere. The variety and quality of our media and maybe experiences in general(think foodie culture) have greatly improved. For many jobs , the rate of learning, and the demand for creativity have greatly improved.

Of course this is good and bad.

And as for business: Business today looks totally different than before the internet.

So yes, the internet is a life changing technology if you look deeply. And there are many other life changing technologies in the work.

As for gdp growth - well isn't it more complex than - great new technology -> a lot of growth ?
Emscripten allows for C++ to be used, and Flash is everywhere Java applets were and then some.
I know a person fired from his Rails dev position who had a sleep issue on the job. They later came under new management and switched to a remote team and let him have his own hours. If you are competent you can do fine with a remote job. You can probably good money and move to a cheaper area.
Shredder claimed to have human-like play at lower levels, so I gave that a try. It works surprisingly well at my level, making plausible mistakes in a fairly consistent manner. When I was playing against it I was in the 1200-1500 range, so I don't know how well it does at higher levels. Also, it had a setting where it would rate you and auto-adjust itself for the next game.

It made playing against a program a lot nicer than other chess programs I had tried.
None of them should have careers because they are in a group that you don't like.... Any comment on Turing yet? Wanna take back your previous comments?