skysight-inc/HackerNews huggingface dataset:
That was the challenge. DefuseSec specifically said he would "give $100 USD to anyone who can trick me into inserting the string".
The only way that would work is if he committed copy/pasted code without reviewing it first, which is highly unlikely. Or at least I would hope it is, given that he's actually challenged people to do this.
Reminds me of a scene in the movie "Real Genius". The class was empty of people, was just tape recorders listening to another tape recorder set up by the professor.
‏@DefuseSec > I'll give $100 USD to anyone who can trick me into inserting the string "BackdoorPoCTwitter" into a release of any of my software projects.

@Sc00bzT > @DefuseSec You should put this challenge on your website.

@DefuseSec > @Sc00bzT Good idea, added it to this page: https://defuse.ca/security-contact-vulnerability-disclosure....

‏@Sc00bzT > @DefuseSec Did I just win?

@DefuseSec > @Sc00bzT FUCK. What's your paypal/bitcoin?

[See https://github.com/defuse/defuse.ca/commit/4770ad5c9d4851d40... for commit.]
I really appreciate the enhanced answers.. "OK Google" has become my go to tool for a lot of things... "OK Google... what is 5 ounces in grams", or the inverse. It's almost invaluable, and could definitely make certain classes of applications (such as a calorie tracking app) far easier to use.
The closest thing to what you're looking for would be the Dasung 13" e-ink monitor (http://dasung.com.cn) plus some sort of ultrabook. (Yes, I acknowledge that their web site looks incredibly sketchy but, insofar as I know, it is a real product.) I believe their most recent production run is sold out though, according to their Facebook page (https://www.facebook.com/dasungtech).

A review can be found at http://the-digital-reader.com/2015/07/10/one-week-with-dasun...

(Disclaimer: I'm neither affiliated with Dasung nor a customer.)
As always, it comes down to economics. So long as it's economical for people to run fake review companies online and for companies to buy sets of fake reviews, then it is going to happen. So how do we do that?
I strongly recommend the "Desktop AMP" chrome extension, which automatically redirects to the AMP version on any news site that has it. In addition to suppressing stupid embeds, it cleans up the formatting and skips paywalls.

https://chrome.google.com/webstore/detail/%E2%9A%A1%EF%B8%8F...
I've been disappointed in Yubico since I reported a Replay Attack, in their server, to them and Steve Gibson a couple of years ago. They gave now reply. Steve replied after a called him out publicly. I'm considering creating a like process based on the USB Rubber Ducky. I'm thinking simple one time pad.
https://hakshop.myshopify.com/products/usb-rubber-ducky-delu...
1s
Excitingly, today! If you run the rustup install script on an arm64 device it should "Just Work", but if it doesn't end up detecting arm64 you can download rustup and/or the compiler manually.

* rustup - https://static.rust-lang.org/rustup/dist/aarch64-unknown-lin...

* rustc+cargo - https://static.rust-lang.org/dist/rust-nightly-aarch64-unkno...

Currently arm64 isn't a Tier 1 platform for us, however, so you may hit some bumps along the way. Please feel free to file issues so we know what to fix if you do!
I am wondering why you are not selling your product for what it is. You have made a game/CTF engine/whatever. This is your expertise and what you have spent the most time on. Sell the game.

I don't quite get the recruiting angle. How is this related to the above other than the assumption that your game helps identify smart people? Leave it to other companies to approach you rather than you approaching companies.
Clustered timing of reviews is unfortunately not a great metric for determining whether or not they are legitimate. Many - probably most - companies send out emails to buyers asking them to review, no compensation provided. This is pretty effective, and a big driver of legitimate reviews. The timing of those emails is determined by response rates, which tend to be better on specific days - hence the mails are batched. So for some large entities, you'll see reviews clustering on Thursday to Saturday for example.
> I have not actually achieved step 6, but I blame a detour into learning C++ and wrapping a websocket client in R.

I always assumed detours like that (assuming you are referring to doing/starting that because of the game) would be one of the most useful benefits to playing. It forces you to have to explore areas that you might not normally get into based on your job and interests.
I should also specifically note that you don't need to manually change the signature anymore. It's built in now.
One of my favorite coffee shops in SF has no wifi and is explicit about it. It's fantastic. Doesn't stop anyone from tethering, obviously, but it keeps the laptop warriors out all the same.

And no, I won't tell Hacker News where it is. ;)
A super-nerdy attempt to predict who will win Eurovision
I am more afraid of fake bad reviews.

In the case of electronic, photography stuff and similar you find people get more consistent results with some products. For instance, charging cables. Hypothetically you could buy a $5 third party cable vs a $20 OEM part, but any thought you might have a fire leana to the $20 cable.
But why would you deprecate the ability of a button to send a single event since that's what buttons do. Coordinating them in a mesh should be done outside of the device so it still works as a simple signaler.
I would love to see email support go beyond that, and actually read the question... I hate when I get a canned response that is completely wrong, or doesn't apply.
Indeed. How do we know some fake-review-review site isn't corrupted and taking money to assassinate competitors?
It's a nice reference, but not specific to the Bourne Again Shell. Most of the commands are external utilities. If the index were reduced to only the internal commands, it would become very small.
Hey now! :)

Tinkering with things is a fantastic way to learn. And a desire to tinker for the sake of understanding is a really good tell for a smart problem solver.

Every job I've had has been because I played around with some technology for fun, and then ran into people who had a need for it.

Playing with code can also be relaxing. In my normal work, the code that I write needs to be reliable, maintainable, and performant. Buy playing stockfighter is a way to have fun without the burden of any that. I can do really stupid stuff, just for the joy of it. Heck, I hooked up a spam filter to one of the levels and won. Or built a minecraft stockfighter hologram visualizer.
I really wish he'd document even the barest scraps of the CPU architecture. Is it microcoded? There's 7400 series like 7402 or 7473, and there's 7400 series like 74154, 74181, etc.

"hey kid, I built one of these too, back in the day, and it was damn hard and time consuming, but oh a labor of love. I had no internet, nor any schooling. I read articles in Popular Electronics and I read the TI 7400 series databook. Then I reread them. Then I reread them." Yes, in fact it was snowing, uphill, and I in fact had no shoes!
Easy management of cross compilation is a major plus. Thumbs up!
Note: "must expend energy"

How many Joules did Mendeleev expend in his dream? How many Joules will your clustering algorithm require? In fact, how many Joules before a meta-algorithm supervisor decides on exclusively using clustering to solve the problem?

> A line of elements ...

Indeed. He arrived at the result with incomplete information.

Rightly traced and well ordered; what of that?
..
Ah, but a man's reach should exceed his grasp
It has - see https://hn.algolia.com/?query=seeking%20freelancer&sort=byDa...

But sadly it hasn't made the front page in a while. It seems to be posted around 14:00 UTC - search around then and upvote once it appears.
Yes, that`s true. But if its a big chunk of code it could work.

Also, if he validated the code before copy and paste, the string would be invisible.
i was referring to mac pros. i don't use imacs because of this reason.
Totally agreed with your post-mortem. Classic mistake of a founding team: write version 2 of microcorruption, instead of first de-risking the business side (the headhunting business).
US coal exports are dropping.

According to the EIA, we exported 97,256,746 tons in 2014
but only 73,957,888 tons in 2015, a drop of 24%

source: https://www.eia.gov/coal/production/quarterly/pdf/t7p01p1.pd...
Depends on goals and sources of enjoyment.
"Brute Force vs Repitions" ... 'nuff said.
Build a unique, complex background sound from “tons” of components
Late Riser? Schedule Your Lights to Turn on in the Morning
Show HN: I will (re)design your app for $1k
I'm a Senior UI Designer and I recently left my old job and now I'm looking to start building my portfolio again. (Previous designs are here: behance.net/nico_garcia)

I'm looking for small startups or independent devs to work with them to help them design or redesign their mobile apps. The $1k includes a week of work -plenty of time to finish a normal-size app or mvp-imo. Work will be presented in a PSD or Sketch file.

Feel free to contact me anytime. Contact is in my profile
Just beautiful :)
Combine the sounds into a melody.
Maybe you can have it both ways. There is a good chance we live in some form of a multiverse and our experience depends on self locating uncertainty. The effect of this is big world immortality; we each live forever from our own perspective. There isn't scientific consensus on this yet, but my research and the simple logic behind it has convinced me enough to take it into account in my planning.
Create a food blog
thanks for the link ! question though does anybody have any good resources for doing something similar to this in javascript? I know a small amount of java, no python, and want to brush up my js skills anyways.
Another way to state or interpret what I said in my prior comment is "Unless they actually have broken some laws, all they are doing is playing the game better than most the investors." If they are breaking the law, then they've defrauded investors. If they haven't, even if they've lied, all they've done is just found a new loophole, and investors should have been aware that what they were reading could have been a lie. it's not fair, but that's never been true about the market.
Sure they could reduce expenses by moving but they would also see a drop in income too. You can't compare a SF dollar with an Appleton Wi dollar. They aren't the same
How to find clients who’ll fight for your attention
Both of the implementations you mentioned are not best known for its speed, rather, its their versatility (or bloatedness, some may argue).
Which operations you do the most? I'll try speed up them too.
As far as I could see, it was a request for social engineering (or some other oversight error). It's an interesting way to see how easily someone can make you into "the human element" in an attack.
Would you pay 100 usd to get on the front page of HN and who knows what other popular sites?

Maybe it's just a marketing stunt
Huh? Some of the most clever (and destructive) hacks involve an element of social engineering. Given that security implementations are designed to compensate for human social behaviors and instincts and limitations, social engineering is just as much a part of hacking as cryptography.
> Clients with millions of dollars on the line will never want to place their fate in the hands of an algorithm.

They will want, if it will unlock multi-billion market opportunities. It happened multiple times already, e.g. algo trading robots replaced some human traders.
Is it really that hard to figure out for some issues? Take gun control.

Violent gun crimes are nearly non-existent in rural settings. Plus, gun plays an important role for rural folks including: hunting, pest control on farms, self-defense when the police are 30 minutes away, etc.

Is it that surprising that rural folks say "Hey, that sucks you have a lot of gun crime, but why do I have to give something up that has value to me?"
Yes. What else would it be?

I assume you only write leet codes in assembly?
Amazon likes to make it look like they are "cleaning up" the fake reviews industry, by suing companies out of existence. But in reality they're just trying to drive sellers to use their own, official "paid review" product. [0]

Granted the Amazon program is more transparent (as the review is affixed with a label that says "user was compensated for this review"), but it's disingenuous at best for Amazon to act like they're taking the moral high ground by shutting down these review sites.

[0] https://www.amazon.com/gp/vine/help
The website badly needs documentation. I signed up and have no idea what it is or how it works.

Edit:
And when I went to earn traffic it keeps taking me to a page with racist jokes. Sorry but I'm done with whatever your site is. Here's a smapling of what I was treated to on your site:

"Why doesn't Mexico have an Olympic team? Because everybody who can run, jump and swim are already in the U.S.",
"Why can't you play Uno with a Mexican? They steal all the green cards.",
"Father's day, the most confusing day in the ghetto.",
"Why don't blacks celebrate thanksgiving? KFC isn't open on holidays.",
"What would martin Luther king be if he was white? Alive.",
Something tells me the iTunes and App Store backends are going to be migrated to Swift, most likely using Kitura [1] given their recent close relationship with IBM, and IBM cranking out project after project to make Swift go beyond iOS and OSX apps.

[1] https://github.com/IBM-Swift/Kitura
He had him post the challenge to his website. The text of the challenge contains the string "BackdoorPoCTwitter". By including the challenge in his website, he included the string in a software project (the code for his website). This won the challenge for @Sc00bzT, who was the one who told him to make the change to his website.
I think you read his statement backwards :) He's advocating social engineering whenever possible.
I've had really great experience hiring technical roles with 'homework'. Both product engineering + technical support. Each time, I've made sure that anyone completing the assignment is compensated with a $50 or $100 Amazon gift card (depending on the task). I don't think I've had anyone choose to not participate. I'm also happy to compensate people that make a solid effort and realize they are in over their head and gracefully bow out (specifically that's only happened when hiring borderline technical roles, like support -- no project is nightmarishly difficult).

I understand your time is valuable, and so is mine. I would like to see how you work, on your own time, in a low-pressure environment. The information I receive from that is easily worth $100. Plus, if we do proceed to further interviews, we have a fantastic non-theoretical project to discuss.
For me personally, that's sad and good news at the same time.
After school, I did a 3-year training in a company and basically learned all my programming skills from using WebObjects in enterprise applications. Somehow it felt ancient already back then (around 2007). But I learned to like it a lot. Nowadays there are much more modern and mostly streamlined web frameworks...in contrast to the huge bulk of components WebObjects brought with it.
Now, I wonder what my old company will do now. As far as I know, they're still using it.
How Elon Musk exposed billions in questionable Pentagon spending – POLITICO
If an exploratory test is done for a condition sufficiently rare that a positive is quite likely to be a false positive, then a positive result should not, in the absence of other evidence, lead to an invasive procedure. What action should be taken depends on the particulars of the condition, but just monitoring for actual symptoms of the condition or maybe trying a different test would almost certainly be more sensible options.

The article seems to be decrying additional testing, which is basically just additional information gathering, on the basis that some people might make dumb decisions based on the information. That's probably true, but I don't think it means that more information is a bad thing.
Can you elaborate on this please?
It irrationally bothers me that you didn't use `f` and `g` for your composition example, as that's the common mathematical representation.

function compose(f, g) {
return function (x) {
return f(g(x));
};
}
After (falsely) calling them all racists who would cut off their nose to spite their face, I can't imagine why dislike the ideas of their "urban betters."
Oh man this reads like an artsy web short. A bunch of creatives on macs in a hipster coffee shop. I have nothing against it, its just so deep in the stereotype!
Thanks for the links, what's the Visa policy?
op said the same
100 bucks a month for co-working space seems very very reasonable in most urban areas.
List of Superhero Movies You Don't Want to Miss – ANSMACHINE.NET
Not sure why you've been down voted. I found the talk you cited to be interesting and insightful, somewhat narrow in perspective, but nevertheless prescient, given the problems that occurred a year later.

She has become more controversial of course since then, and more well known politically, which may account for your negative votes. I don't know.

But her observations about the use of revolving credit to counteract the effects of stagnant wage growth (in real terms) is still relevant today. The narrow emphasis on wages however, ignores the wealth creation made using other means, for example, by small business and entrepreneurship.
It's not economical for people to buy them if they get deleted for fraud. Amazon is in a position to use confirmed purchasers of a product as a filter. They can also score account based on how many legitimate reviews they have. Once they cross a threshold all of the reviews get nuked. If an account as 1000+ reviews and rarely purchases anything you just shadowban them.
Super impressive performance!
The "Old John Hancock" building in Boston has a similar weather beacon and an accompanying rhyme:

Steady blue, clear view.
Flashing blue, clouds due.
Steady red, rain ahead.
Flashing red, snow instead.

In summer, flashing red means the Red Sox game has been cancelled.
Reading the leaks, it seems more like the site programmers are trolls doing it for the lulz who happen to also hand over all their info to law enforcement.
Another way to parse this would be similar to: "They ate the pizza with friends"
Day of Reckoning Arrives for BitKeeper's Larry McVoy
What’s the Best Open-Source Hardware for IoT?
Just don't go in the bathroom.
Investors have the best stock market ever – thanks to high-frequency trading
While the USA is far from perfect, it is not nearly as bad as China on allowing services to protect peoples privacy. For one recent example see the Apple V FBI cases and ask yourself what would have happened if they tried that in China.

The USA is also pretty close to perfect on not censoring stuff, while China is the worst of any major country.

2. is a very relevant point, though one wonders if China avoids being too aggressive in abusing that in order to keep the manufacturing base there.

I would however add 3. that this is open source code, and if they were going to put in backdoors or censors they would probably aim to do it in their server's as a result. Since they encourage other people to implement their own servers, maybe just do that before using this for anything sensitive.
I've reported people posting hundreds of shill comments across a company's product line, I think it's nobody's job to care.
Aside: post-mortem is such a funny word choice for our projects, isn't it?
Don't delete and resubmit HN submissions.
Calling a website that happens to host static content in the same repo as its PHP source a "release of a software project" really seems like a stretch.
Man that slow refresh rate would kill me.
Four Season’s 5 Star Hotel in the Sky
I understand the history behind that tension but is that tension palpable on the street, and the homophobia is that sentiment palpable as well?
> Incidentally: should you ever go in to get a bank account at a Japanese bank, remember to edit your company's website to take the words I rob banks because that is where the money is. off your homepage prior to the initial customer interview. Irony doesn't translate well. ("NO NO NO, we're not bank robbers; we're a video game company! Honest!" "What, like Nintendo?" "... In a manner of speaking, almost exactly like Nintendo.")

This is hilarious. BTW the quote is really there - https://www.starfighters.io/ctfs.
Sublime has its own proprietary UI framework: https://news.ycombinator.com/item?id=2822114.
I'm pretty shocked CNN would write an article about WebObjects. The news itself is barely news at all though.
>What makes progressive social policies (ignoring loaded issues like reproductive options and gun control) so distasteful to some of those who would most benefit?

The unsupported assumption here is that those policies would be beneficial.
They sure dropped the neutrality when Nate Silver got mad at Jim Rutenberg for saying Silver missed the mark on his predictions. He definitely returned the high school lunchroom attitude back, and doesn't handle being wrong well at all.
What definition of "software project" excludes Web sites?
"AI winter" is a pretty official term -- it even has a Wikipedia entry. I actually don't think neural networks are just hype, any more than previous AI technology was just hype. A lot of great things have come out of AI research -- logic programming, expert systems, even genetic algorithms -- but each in turn failed to deliver on the unrealistic expectations that were built up around it. We see pictures of ANNs hallucinating, and they seem to promise machines that can dream. But in reality an ANN is just a statistical model trained on a large corpus of inputs belonging to a particular domain. They're profoundly effective at what they're good at, and it's cool to see them pick apart a picture and tell you what's in it.

However, I've been hearing crazy talk, especially in the popular press, about how strong AI is just around the corner, how AIs will soon replace people, what will we all do when machines can do everything for us, and so on. It's been repeated on a ten to fifteen year interval since the dawn of the computer age, it's no more true than it was the last time, and we should know better by now!
​Adobe finds Chrome is popular everywhere, even on Apple's iPhone
Now, it's just a matter of automating it:

curl https://signserver.panic.com:54444/set/0/0/0/0/0/0
sleep 1
curl https://signserver.panic.com:54444/set/255/255/255/255/255/255
sleep 1

If I was there to check IRL, I would probably like the sign to spell SOS using morse.

It's probably a good idea to add a queue and a minimum time for an specific configuration to run, although, that probably defeats the purpose.
I'd love to see full sources and build system that allowed everyone to play with Frank. I was sure I'd made a comment to that effect somewhere, but I can't find it now, perhaps it was eaten by my outdated smart phone.

On the other hand, I believe the paper(s) might very well be more important: exploring the ideas. I think it's a difference between a research project in computer science, and an engineering project. The first lambda calculus was just a project - they thought they'd need years to get the thing running. And then someone just coded up eval() in machine-code and they were bootstrapped.

I to want the implementation of eval(), but I'm not unhappy that they've shared their ideas.