skysight-inc/HackerNews huggingface dataset:
I'm making internal honeypots a thing. I'm making statically compiled binaries that make deploying a honeypot super super easy.

Right now, I've built an HTTP honeypot.

The idea is that if anything ever talks to these services you have an instant alert you NEED to respond to and actionable information about it. I have support for sending you a text message.

It has support for whitelisting certain IPs that you would be doing your scanning from, and post all information to a second URL for logging, as well as a lightweight dashboard to view logs generated by the binaries and more. Next up I need to build an SSH honeypot, FTP, etc.

https://www.chuckcanary.com
Eh, some online banks give good interests like Ally with 1% savings. It's not as good as investing but it is easy and significantly more than any major bank.
I don't get him at all. To me he looks like a Randian dilettante folk philosopher, with a minimal track record of practical achievement.

His AI arguments seem to be of the "If you assume an AGI singularity is possible..." kind, which is suspiciously like assuming god exists, for completely arbitrary values of god, and then debating whether or not he cares enough to hate you.

Most software today sucks so badly it can't tie its own shoelaces without poking itself in the brain and falling over.

How do we know this isn't a general feature of software? Has there ever been a 100% bullet-proof non-trivial software system? Is there anything in the history of CS which implies that such a system is possible?

So suggesting that by (say) 2066 software will not only stop sucking but will be able to meta-improve itself with bug-free perfection to the point where it can eat the world seems curiously ungrounded.
Can't they just do it? (mark it up)
I used it on my Thinkpad x220 and NUC 5th gen (BOXD54250WYKH) and it worked great. https://www.qubes-os.org/hcl/ - The HCL is pretty decent actually. But since they have to work on older Linux Kernel and Xen releases for stability/security and the hardware needs to have VT-d, TPM, HVM/VMX etc enabled - they will always be lagging in terms of the newer hardware they can support.

Might want to try out the BOXD54250WYKH1 NUC - Amazon is still selling it.
AWS definitely feels like a product that has grown organically and needs some house cleaning. GC was able to look at AWS, take those lessons, and improve from the start.
>I wonder if AlphaGo has some specialized knowledge to handle ladders

Yes. A representation of ladders is among the input features of its neural networks.

https://gogameguru.com/i/2016/03/deepmind-mastering-go.pdf

Stone colour 3 Player stone / opponent stone / empty

Ones 1 A constant plane filled with 1

Turns since 8 How many turns since a move was played

Liberties 8 Number of liberties (empty adjacent points)

Capture size 8 How many opponent stones would be captured

Self-atari size 8 How many of own stones would be captured

Liberties after move 8 Number of liberties after this move is played

Ladder capture 1 Whether a move at this point is a successful ladder capture

Ladder escape 1 Whether a move at this point is a successful ladder escape

Sensibleness 1 Whether a move is legal and does not fill its own eyes

Zeros 1 A constant plane filled with 0

Player color 1 Whether current player is black

(The number is how many 19x19 planes the feature consists of.)
Right now we're not great at it. However, the way Spotbot works means that we will be decent at it soon.

We do a hash of the structure, so we know exactly what kind of changes there are. For something like your page, the image sources, the text, the names, the votes, and other content change all the time. Soon we'll have a way to ignore those changes while still recognizing that other changes need to be vetted.

So, for instance, if the padding between the avatar and the user's status changes, we'll still catch that even though we're ignoring the avatar source and the text content.

Soon!
Have to shut the engines off at some point. Any vehicle "reboots" when you shut down the power.
Probably several years. They've only had a small scale human trial of 12 patients so far, and a larger scale human trial is likely to take some time to organize, then of course the post-trial monitoring for possible side effects will need to continue for some time, probably 24-36 months.

Everyone hopes of course that these patients will enjoy permanently repaired vision, but there's no way to know for a long time. Also, stem cells have an unfortunate tendency to turn into cancer. The field is really still in its infancy, but the potential is enormous.
Totally agree. Even if you like your manager, there's still a huge risk of saying the wrong thing and being labeled a problem child.

I'm worried that 1-1s are becoming the next Agile - just another process used to increase control under the guise of empowerment
Announcing Kafka Streams: Stream Processing Made Simple
The interaction is dependent on the website's settings, but one of the available options (which is the default) is to show a popup that lets you know what you're navigating to, such as on http://girlpowder.net/ -- I'll be adding a store logo to this soon, so you know you're navigating to i.e. amazon.

Since some websites might want to make it only have the hover effect, I leave that up to the website to decide best for their users.

Edit: I see that you just might be referencing the main functionality of clicking on an image. If the user clicks on the image and doesn't click on a highlighted area, the functionality will default to whatever happens on that website when a user clicks on an image. A parent <a> tag, for instance, will bubble up to its href as normal.
I believe parent's point is that one should know that C# is a choice, not that they have to use it. How can one make an informed choice if one doesn't know what the choices are? If all you have is a hammer, and all that.
Hmm... I agree it looks nicer.

Who's typing Java code all by hand these days, though? There various IDEs that save me all the typing.

It's also nice to be able to go the declaration of a variable to see exactly what type it is - that's mostly for code not written by myself, or old code that I do not remember. For local variable that's fine (I hope we won't infer types this way for method parameters), so I guess I like it there.
Spyce: Python in outer space!

Basically, a very much work-in-progress pile of code to plan orbital trajectories and interplanetary travel. Its also quite handy when doing simple computations:

>>> # distance to the Sun, in light-seconds
>>> Earth.orbit.semi_major_axis / c
499.00650691887006
>>> # Martian year, in (usual Earth) days
>>> Mars.orbit.period / Earth.solar_day
686.9944644093075
>>> # ping to New Horizons (light roundtrip), in hours
>>> (Pluto.orbit.periapsis - Earth.orbit.apoapsis) / c / 3600 * 2
7.9167895224639375

The graphical interface does work though! (kinda) It's initially inspired from Kerbal Space Program, so it defaults to showing Kerbin and its universe. However, you can choose Earth instead. I like to just zoom in and out, and explore the Solar system; the vastness of that is so mindblowing!

How yeah, and a link: https://github.com/qsantos/spyce/
> would you support a X% tax on every single able-bodied person, with the proceeds used to better help all disabled people?

No.

First, you'd have to figure out whether someone is able-bodied or not. Do you think the IRS is equipped to handle disability claims? There are all sorts of disabilities that aren't bad enough to qualify someone for permanent disability because they're not _that_ bad, not permanent, or both.

Then, once collected, where would the money go? Assuming the fund isn't raided to cover for shortfalls elsewhere — something that happens regularly here in California — the money would get handed out to whomever has the most convincing/numerous lobbyists. This seems like a strictly worse solution than what we have already: people go on partial or permanent disability, get a check cut to them, and then they go out and buy whatever'll make their lives better, not what some person in the capital thinks that people "who have a disability" would want. Nevermind that there's _thousands_ of _different_ ways one can be disabled, all requiring different modifications…

There's also a lot of overlap between "good for people with some particular disabilities" and "good for lazy people". Would you be in favor of Procter & Gamble lobbying for and getting federal funds to make Swiffers? I wouldn't, even though I think pre-moistened mopping sheets are great — that's naked corporate welfare!

Most of us have seen poorly-designed enterprise software and have figured out that they're poorly designed, in part, because the end users are not the buyers and have little input into the buying process. I'd expect a "have A tax B and give the money to C ostensibly for D's benefit" to suffer from the same sorts of principal-agent* problem.

* https://en.wikipedia.org/wiki/Principal–agent_problem
Agreed. Each 100 point of ELO diference translate into a 2 times stronger player.

The one to beat is Ke Jie because he is currently two times stronger than Lee Sedol.
Automating an Android Instrumentation Test Run
Lightbend (previously Typesafe) releases Lagom - a Framework for Microservices
There's a notification in SC

"Seller Central was down from 11:20 to 11:38 PST today. We have corrected this issue, and sellers are now able to access Seller Central. We apologize for any inconvenience."

I didn't notice it down, though.
It is certainly possible, but not normal. Normally the engines are shut off during servicing and the aircraft is hooked up to a ground cart to provide limited systems functionality.
Show HN: CSJS – modular, scoped CSS with ES6
Yes it does! If you keep changing what you consider "AI", every time it makes progress, then it looks like we are never getting closer to AI. When in fact it is just classic moving goalposts.

And the optimists are being proven right. AGI is almost here.
I'll go down as saying the best candidates are perhaps teeth and kidneys.
Exactly right. But they are selling it like some miracle anti-technology movement.
Oh I did. Was just sticking to the first rule of flag club.
A system for managing DNS-data via git-repositories - https://dns-api.com/

A console based mail-client - https://github.com/lumail/lumail2/

A reworking of the Debian Administration website to make it better scale, and experiment more with clustering - https://debian-administration.org/
Fuch's Dystrophy?
I don't understand your conclusion (Azure is best?). App Engine is far and away the most battle-hardened PaaS, going from tons of tiny toy apps to the scale of Snapchat.

I don't disagree that having a PaaS and "marketplace" is important, but I don't see how you seem to conclude that GCP is less relevant here.

Disclaimer: I work on Compute Engine.
The first time I heard of this technique it was (supposedly?) used for airgapped, infected machines to communicate [0]. I don't remember, though if it was proven in the end that that was actually how the malware communicated. There was some skepticism.

[0] https://en.wikipedia.org/wiki/BadBIOS
Couldn't you point it at a test environment that would be loaded up with non-changing content so that UI only changes could be tested against the same data always?
I have yet to hear a logical explanation for why we don't tax and licence bikes in major cities. Paying your "fair share" of road use taxes gives you an equal voice when asking for specific use lanes, and licence plates allow us to better track and punish the few that cause the problems (if I had a dollar for every time I wish I could write down a bikes plate number...).
If you continue to use MS Windows, then you are getting just what you deserve.

Your only solution, given the fact that MS now believes they _own_ you, is to wipe MS Windows from your computers and install a different operating system.
Was not convinced reading your comment. Site converted me though.
I've just got to say, this is probably the best article I've ever read, all thanks to Cloud-to-Butt.
Reading the paper, it doesn't at all sound like AlphaGo uses anything that TD-Gammon used.

It uses MCTS, which is unlike minimax. It doesn't use temporal difference learning, although they say that the policy somewhat resembles TD.

That doesn't sound like 'essentially built on', its sounds maybe like 'slightly influenced by'
I am working on the "Fiera - Arouser for Her" product : http://fiera.com . It is awesome because it's an elegant product to enhance/jump-start arousal for women -- whether through stimulation or as a conversation starter between couples.

It has some very cool technology under the hood which, if we've done our job right, the user will never have to think about. :)
The versions cant really merge, there's runtime differences and you don't want to bloat with two of everything
Cool. Impressive project by the way; I forgot to say that before.

I tried something similar; but with a different approach. I tried creating compound words, a bit like n-grams. I didn't get it working as that was a side-project and I couldn't commit enough time.
Would you be interested in licensing the models for offline speech recognition?
This is correct. A radar or mission avionics system reset isn't a critical emergency. It may force a mission abort, but the jet is still flyable.

A reset event would be more worrying if it was a FCS (Flight Control System) computer reset in flight. Air Asia 8501 did something similar and the jet crashed into the sea. An F-22 pilot failed to properly reset his FCS before takeoff, and destroyed a $150m+ aircraft at Nellis AFB.
The good ones are. The ones that want a project to succeed will learn.
https://cloud.google.com/iam

This is very recent though, and not considered Generally Available yet across the platform (meaning fully hardened, supported, and backed by an SLA).

Take another look!

Disclosure: I work on Compute Engine.
My main concern with GCP is its unreliability. BigQuery API randomly giving 40x/50x errors (that has been happening for over a year), signed URL API returning series of 50Xs every few days, CPU on instances going up to 100% for some unknown reason (they stay in that state until manually rebooted), and many other bigger or smaller issues. And they never respond to your questions.

The UI is also weird (at least by my taste), for example it is not possible to search instances by their addresses, it is not possible to spin up more than one instance at once, and so on. AWS has an ugly console, but it feels more productive.
Oh, I'm well-aware of that and obviously this is big news on sites like this one. I was mostly remarking that this is pretty low on general news radar screens.
Thank you.

Good luck with the product. Looks pretty neat.
That. Indeed there's a whole different mindset for people deploying and orchestrathing servers based on their 'previous' background.

On the previous iteration of CM, I noticed that people that had a prior background on development usually chose Chef, while the SysAdms chose Puppet.
Yes, but there's a good security reason to have those labeled/colored dom0-drawn window decorations.

However, if you want, you can still manually put any window in proper full screen mode. It's just a right click away, at least on XFCE.
It's back up now. That's quick. What's their uptime SLA number? 99.999%? That is a 5minute 15s per year downtime.
What App Publishers Can Learn from Oreo and Nissan
www.guessthekarma.com

It's a simple game where I show you two images from Reddit (SFW of course) and ask you to guess which was more popular. I'm using the data from the site as part of my research into the dynamics on internet popularity.

It's awesome because it's showing that Reddit is a pretty random/fickle thing. In the first iteration of the experiment (we're on the second now), people couldn't really do much better than randomly guessing. If one image had 10,000 upvotes and the other 10, people could only guess the popular one about 55% of the time. I wrote up some quick results in this blogpost: https://medium.com/@gregstod/guess-the-karma-2-0-82a224a691f...

I'd very much appreciate it if you played the game and donated a few data points :-)
BookStorm: an awesome way to explore the world of books.

Why it's awesome: we're helping to maximize intellectual freedom in a world dominated by "smart" algorithms and "social" recommendations with old-fashioned serendipity.

http://bookstormapp.com
Report finds OpenStack still being debated in the industry
How are these websites supposed to make money without ads? Most of them rely on ads to stay afloat, and have been denied from adsense. Whats the plan?
Thanks. I should have clarified--attributing an app install on Android to the source is definitely a solved problem. I was referring more to cross-channel attribution and determining dynamic weighting across multiple touch points.

Sounds like FB is working towards obfuscating that and not giving granular control which is disappointing to hear, but have you done any work around custom weighting like that?
2016 Angular Usage Trends Survey
I don't think that's fair at all to Chris. As someone who has never watched GO before, he kept the topic often to very beginner level questions, and often kept Michael on topic a little bit. I would say Chris added a lot of value to my experience, although this is the first time watching either of them.
Looks pretty cool!

I like that the tool itself is open source.

We found that pixel diffs were pretty unwieldy for a lot of different scenarios. How do you deal with, say, a div inserted at the top that pushes all the content on the page down 50px?
Oh no, not Chrome versioning again... And this time not even on an app. :(

What you're saying is that major number will change with time, not based on some groundbreaking updates. How am I supposed to know if I should be careful when upgrading from version 12 to version 14? Were there massive changes in between? All I know now is that half a year has gone by since last time I updated. Why would I care about that? Yeah, sure, I can read changelog for _every_ _single_ _library_ _and_ _tool_... Really? </rant>

EDIT: other than that, congrats on a new release. ;)
In one single image, mainstream media shows their utter ignorance of security
With respect, I think you and the parent are assuming a level of autonomy among defense contractors that does not exist.
Bridgewater hires Jon Rubinstein
> land value tax comes from the idea nobody should be able to "own" land, you should rent land. When there's a more profitable use for your land than you are current exploiting, you must give the land up. The UK enjoys things like 99 year leases on land instead of in the US where you "buy" land and own it until the heat death of the universe.

That sounds like the scariest solution to the problem of land ownership. There are plenty of cases where the government decides that somebody must give their land up to expropriate more value from it with Eminient Domain laws. Who gets to decide when land is not extracting enough value? Politicians who are bought out by private corporations controlled by a board of directors, none of whom live anywhere near the land being expropriated? Land should be collectively owned by the people living on it and producing from it.
Postdoc Opportunity in Chile
As I said in my post elsewhere, engineers rarely get to make that call.
My definition of a bad product would simply one where the purchaser would not have bought it given the information they learned after acquiring it. A simple way to measure how good a product is would be to see whether the product is recommended by the purchaser, or whether they buy similar products from the same brand/source again.
What is your opinion on banks using bitcoin? Or Bitcoin as a way to route around traditional banking?
For me, GCP comes with unquantifiable existence risk. As in, how do I know that it won't get shut down in 5 years when some VP sees that it's not bringing in as much money as it should? I trust Amazon more in this regard, and their offering is not "so bad" that I feel a need to switch.
I just tried it with speex's wideband setting, and I was able to recover the transmitted message. I had to modify the wav file generator to output in 16-bit PCM instead of float, which speexenc doesn't support.

The narrowband profile also works, but I needed to create a new Quiet profile with a center frequency of 2200Hz.
Author here, interested in how often do you do user testing? Depending how many changes there have been, we do it often weekly. I love to run usability tests, because I always get lots of new ideas from listening to the users.
Expensive yes, although I have it on good authority that I could get a discount on that quantity :-) Also in discussing this briefly with some folks the entrapment systems would be more complex than nets or coffee filters. But lets say your investment was, all in $10B over 10 years and you remediated 60 - 70% of the problem. Would that be, in your opinion, a waste of money? Understand the alternative is to live with existing fish stocks absorbing material as they feed in the area and to have the problem get worse. Seems like, if nothing else, it would make for a good NSF grant to understand the question better.
Jr. Developers #5: How to Improve Code Without Anyone Hating You
Nice. I was just wanting to build my own backend for something like this without having to hassle w/ my own setups for HLS/DASH/chromecast/whatever. I would suggest a bit more documentation or at least overview material on how it looks wrt showing a catalog or other user input features beyond pure playback.
https://www.arangodb.com

A database that you can use as a JSON document store or a graph database - or even both data models combined - within a single query.

Why it's awesome?

I can use one technology for so many different use cases, I'm not limited to one data model and can use a single query language that supports graph traversals and document JOINS.

It's designed to support modern microservice architectures and orchestration - e.g. via Mesosphere DCOS.
Yep, I meant any other trackable channel. For example, DCM right now tracks ad data, but it also seamlessly integrates with GA (and GA Premium). From your site it appeared you just did the ad tracking bit, so I'd want to know how you're baking in other channels (organic, affiliate, email, etc.) and it sounds like for the most part you rely on explicit tagging (which unfortunately doesn't always do it for organic and referral).

Beyond that, until you come out with an algorithmic attribution solution, you really should say more on your site about how you differentiate from GA. Right now I can upload all my cost data, etc. from other engines with no problem, so GA in theory does all of this, and has attribution tools.
As always, there is a relevant XKCD about this phenomenon.

http://xkcd.com/1425/
I'm not working on it but one idea is "camp country" in which farmers, country and rural landowners offer their land for camping for a small fee.

Anyone this this is a good idea?
I'm 3/3 so far! Cool site man
Working on a way to buy a new car online and skip all the dealership salespeople, haggling, upselling, etc.

You can build your car online (colors & options) and set your price, and your customization gets distributed to all of our dealerships (LA only currently) and see who accepts it. Cuts down on the dealer sales funnel as well so it's a win-win on both sides!

https://dealerpinch.com/
During the second game it made a move that was decidedly not human (which helped lead to the win later):

https://youtu.be/l-GsfyVCBu0?t=1h18m15s
It's not normal; 18-24 months is typical between rounds.

If you are gaining significant non-monetary benefits (eg learning a lot from much smarter people, really interesting problems), there might be a reason to stay, but if you are being underpaid and there is no reason to expect it to change, I would get the hell out.
Pro-gun Florida mom accidentally shot by her four-year-old son