skysight-inc/HackerNews huggingface dataset:
What can we do? Get activist types to stop using Windows. That removes about 99% of the attack surface. I'd like to see the UAE successfully remote root a desktop running debian-testing amd64 and an xorg/xfce desktop. Yes, there's myriad security problems with Firefox and other things.... But every single state-paid RAT tool ivr seen is targeted at Windows.

education is important too. If you can successfully trick people into running a binary you gave them with sudo (or the equivalent) all bets are off.
Watch How America Outspends Everyone on the Military
> It is true that there are some degrees of limitations and implementations that different game engines go through and none of them is a 100% pure CES engine

One thing I vividly remember from learning about ECS is that the main sources on it repeatedly remind you that what UE or Unity do is not ECS, and that the way they understand the concept of "Entity" and "Component" is different. Entity Component System is not what UE or Unity do.
So let's say you built app A and spent 80 extra hours hunting for free SAAS products.

Similar app B saved 80 hours using more popular SAAS apps but has a SAAS bill of $100 a month. But he had a full 2 week headstart in development.

You don't think app B could end up getting more money?

That doesn't mean you should spend $600 hosting on Heroku. But swearing off all costs may be a bit much...
It's 10x more efficient for human purposes. It's not a 10x more efficient mechanism in general. Evolution has no need to produce 10x more rather energy-expensive molecules than it needs, so it doesn't produce bacteria that do that.

Which is also the answer to everybody else wondering about what happens if this gets into the biosphere. Well, have you ever been walking in a relatively natural forest area and come across the sad sight of a natural clearing being totally dominated by wild broccoli plants? No, you never have, because broccoli is completely incapable of outcompeting any natural plant. Broccoli's genes put way too much energy into producing that big beautiful edible bit that all of its competition puts into offense and defense. Similarly, the answer to the question of what happens to bacteria that pours its energy into producing alcohol while its competition is pouring its energy into producing offspring is that if you blink, you'll miss the death of the alcohol-producing bacteria. They're not going to take over the ecosystem. In energy terms you probably stand a better chance of seeing broccoli sweep the meadows of the world than having this bacteria survive in the wild.

(And when I say broccoli, I mean something like what you'd buy in the store. Not merely a rapid reversion to its historical ancestor, which could actually happen, but actual proper broccoli.)
I think what he meant was that each individual mutation is random. There isn't someone intelligently deciding what the next batch of mutations should look like.
This is so, so dumb. Who actually shakes their phone in anger? Very few people. How many people accidentally trigger things like this in the course of everyday usage? Everyone.

Google Maps has the same thing and it just strikes me as some cutesy feature a developer thought would be funny, but is actually very annoying.
How was your access to VPNs, or did you have a chance to try them out? I used to work for a VPN company and China was a constant challenge.
Evolutionary changes occur by random mutation and, in sexual reproduction, by random genetic mixing. Whether or not those changes are successful is governed by survival, but it's not directed by survival. Survival doesn't choose specific evolutionary changes with a goal of increasing survivability.
I still think the numbers overwhelmingly benefit the US vs Brazil here, considering the huge numbers of Brazilians that come here to vacation (and buy a dozen iPads).

Also, did they say why you were blacklisted? Was there a time where Brazilians were denied entry to the US on tourist visas?
There is something to be said for in person peer to peer learning.

My biggest problem was, I'd get hung up on a problem in some bizarre way. Often times when I'm learning in teacher to student only environment (or machine teacher and student), the teacher will notice the mistake, but have a hard time identifying the train of thought that got me there in the first place. Students have an easier time identifying mistaken amateur thought processes and fixing them. A typical (or automated) teacher is so far removed from amateur thought processes, they have a hard time empathizing.

Where online learning systems fall short is the peer to peer. Yes, there are usually forums where students can communicate with each other. But it is lacking. The biggest problem students have with each other is misunderstanding. In a classroom, sitting next to another student, that misunderstanding usually only takes a few minutes, tops, to resolve. In an online forum, that misunderstanding could take days, frustrating students and forcing them to drop the class.

I'm not sure if a video would help for someone like me. The problem is you're trying to streamline a process in how people learn. But people learn in all different ways. Accounting for all the different ways is hard. While I'm sure your video would work for some, chances are it won't work for most.
I think this was a joke, before it got downvoted into oblivion.
Tree *a = new Leaf();
Tree *b = new Leaf();
Tree *c = new Node(a, b);
a.parent = b.parent = c;

null has other uses, e.g. as above for cyclically dependent initialisation.
A solid point; would that more people thought like you. One minor grammar-nazi nitpick, though: "populous" is an adjective describing the size of a population; "populace" is a noun describing the population itself.
They can try to force local computer retailers to install a root CA before systems are sold.
I don't think my point was extreme at all. The example I posted was an extremely typical, even tame example of dependency injection and architecture for the benefit of testability. I've seen countless variations of pretty much exactly that or something quite similar (pulling out explicit dependencies to be injected that should never reasonably change in normal circumstances).

Regarding "should we only exercise them from the UI level" - I'm not 100% sure what you're getting at - but if your point is that we should focus our testing on business-facing use cases and not trivialities of what class calls what method, then we're speaking past each other and are in complete agreement.
I have found these kind of systems that put a ton of effort into unit testing are wasting time. And when it comes to refactor, you end up creating weeks of extra work to make the new unit tests pass.

How a system is wired together is not that exciting and not worth unit tests. If you screw up loading a config file on startup o bet your first integration test fails. Why would you unit test this?
Hello, author here. I agree the title might be a bit controversial but in my opinion, it should reflect the fact that hackers should be doing something beyond building software. An impact a hacker has when doing the other things discussed in the article is way-way bigger.
Killing of gorilla to save 4-year-old boy at Ohio zoo sparks outrage
It might not be mentioned in the article but a lot of online retailers, including with 50% of the purchases I try to make on Amazon.co.uk, refuse to ship to Estonia. Even digital good can often be difficult to purchase.
Strong crypto doesn't help at all if you have the sort of spyware discussed in the article installed on your computer. It knows everything you do.
Meh, i think the problem of Linux DEs is not the DEs themselves but having to face of against Microsoft where they are strongest.

Android got in the door by Google convincing the OEMs to switch Window Mobile for Android, with Google carrying the brunt of the development cost for free.

This happened just as MS was running around in a panic and managed to split their mobile platform in two with Phone 7.

In contrast MS bent over backwards regarding netbooks. They had started shipping Vista, and yet they gave XP another reprieve on execution when Asus started shipping their Linux powered EEEPCs.

Only with major cockups regarding Windows powered warships, and having a former general as chairman of the board, has Red Hat been able to get on the DoDs good side.
Even in Europe a more appropriate date for the start of WWII is September 30, 1938 when the Munich Pact between Germany, Italy, France and Britain awarded large parts of Czechoslovakia to Germany, and, effectively, to Poland and Hungary.
Yeah I remember the benchmarks, didn't look too good. People claimed that with hardware support for transactional memory things could be different. We have that now in the latest Intel CPUs (Skylake for sure), anyone got further information?
Nit: TrustZone isn't a Qualcomm technology, but KeyMaster is Qualcomm software built on top of it (and that appears to be where this break lies).
But who threw the bread, woodman? You still haven't passed your reading comprehension test.

This is very important for the discussion of human-selected censorship.
When Harvard Professor of Energy Daniel G. Nocera announced he was working with bacteria last year, other scientists cautioned it would be difficult to achieve a productive level of efficiency. At the time, Nocera was aiming for 5 percent efficiency—about 5 times better than plants. This month at the University of Chicago, he announced his bug converts sunlight ten times more efficiently than plants.

This increase in efficiency is presumably the novel part of Nocera's latest announcement and upcoming paper.
Haha love the creativity
CHI 2016 Closing Keynote: Salman Khan – Education Reimagined
That's only really true if you're an AI researcher. You could automate away enterprise bucket-brigade code and web-based CRUD apps and destroy an awful lot of programming jobs with no singularity.
Not a good example, because the actual barriers to EVs and solar power are that they depend too _much_ on what's happening now, i.e. existing fossil-fuel-powered industrial infrastructure.
Hey, I really appreciate the elaboration, and I think I am in agreement with you on this point. I have to admit perhaps it was a bit over the top because I thought you were sarcastically using the pro rights gun statement and somehow trying to apply it to this topic.
It's a low effort meme-like post that adds nothing to the article or discussion. Those are frowned upon at HN.

It's not impossible to make joke-y replies to posts and receive upvotes, but it takes a lot of practice (or authority).

If a 100 people would post one-liner memes then the comment section would be no fun to read. It used to be a strength of HN to have an incredibly resourceful comment section with good debate. It was not uncommon for the author of a programming language to chime in on a discussion about said language.

See: https://news.ycombinator.com/newswelcome.html

> The most important principle on HN, though, is to make thoughtful comments. Thoughtful in both senses: civil and substantial.

> The test for substance is a lot like it is for links. Does your comment teach us anything? There are two ways to do that: by pointing out some consideration that hadn't previously been mentioned, and by giving more information about the topic, perhaps from personal experience. Whereas comments like "LOL!" or worse still, "That's retarded!" teach us nothing.

Edit: I see that your account was created 1499 days ago. This may make my reply seem silly (also coming from a newly created account). It was a sincere attempt at answering your downvoting concerns though.
The problem with that, however, is that how I learned to learn in school was entirely ineffective for me. I struggled for YEARS, barely passing math courses, needing special tutoring, HATING history, because it was all presented as some sort of "GET THIS IN YOUR HEAD" problem. There was another HN discussion slightly digging at public schools, let me make clear this was across both private and public schools, the public in fact being _far better_ at treating students like individuals for the most part.

It took me the better part of college to re-teach myself how to think, I largely attribute it to learning how to be a good CSer on my own effort. (To be clear, not that my effort was anything special, but it let me for once see how I wanted to approach the work, rather than a parent or teacher pressing their structure on it)

I'm not sure what my full takeaway from this is, I certainly expect my anecdote not to hold true universally, I think I mostly intend to warn against an inflexible framework for "teaching learning" (as schools so often tend to be, through natural if unmalicious incentives), lest the process become nothing more than an indoctrination into the life lesson of "you will sit here, do this terribly boring and unproductive thing, and have no say in the matter, and will likely be punished regardless".
PMB DemoCRACY DAY SPEECH  AND PDP REACTIONS
Airfare is pretty cheap inside South America. If you're already in, say, Medellin (which is on the site's list), the $160 visa is a larger factor. Flying to Argentina is a better option.

BTW there's also a Brazilian embassy in San Francisco.
Mainnet Ethereum blockchain as of 2016-05-30
What good is strong crypto if your endpoint is compromised? If I can take screenshots and keystroke logs of you in Signal, all the crypto in the world won't help. That's the kind of spyware this article is talking about - full endpoint compromise.
Cédric Villani – Of triangles, gases, prices and men
yeah I was referring to the specific case where the observer is roughly close to x_max for a 10^19 or above event and quite literally in the ionization column. You can get rid of almost all of the electronic and gamma components in with about 10 feet sand, 5 feet concrete or 1 foot of lead, but that of course doesn't stop the muonic component.

(I worked on HiRes/Telescope Array for 4 years on muon detectors and bi-static radar techniques for UHECRs, but that was quite a while ago and some of my memory might be slightly off)

Not sure how much energy would be deposited, but I'm sure it's not insignificant. It's rare enough that no one person could expect it to happen but probably frequent enough that it does happen at least once a decade in a densely populated area.
I was kind of hoping for a document that outlined principles to make the engineering process truly antifragile, i.e. one that would thrive under contingencies.

Honestly, I have trouble fathoming how such a thing would be even possible in the realm of software. Maybe a system that "learns" previous failures and proactively monitor failure conditions / throttles contended ressources? (Seems quite specific already)

And the document surely didn't tell me.
But both of those problems aren't problems, they are solutions to problems.

When I make a web app, it's specifically because i want it to run in a sandboxed pseudo-distributed virtual machine that installs and runs in less than a second, and is removed automatically after some time has passed.

My users don't want to download and install a binary onto their PC, they don't want to have to manage any dependencies I may rely on, they don't want to have to configure anything, they just want to use my app ASAP in a safe manner and then go on with their lives.

If i gave you 2 options, which would you choose?

1. Download and execute this binary blob on your PC.

2. Run this javascript in your browser.

Option 1 provides little protection. I could access GPS, camera, microphone, disk, etc... without as much as a single prompt. And if the PC's permissions are messed up, i can even access other programs' data and even manipulate them.

Option 2 provides permission-locked options to access a lot of those, in a language which was designed to be sandboxed, in a browser with exactly the same amount of permissions as Option 1 (so even if all the permission-locking measures failed or were bypassed, the app is still bound by the same permissions and restrictions as option 1 would be). It installs itself in seconds, it runs fast enough for most use cases, and is cross-platform in a way that nothing else ever has been able to even come close to before.
The tradeoff between verification/validation and openness is definitely a tricky one. I'm the co-founder of a crowdsourcing platform prolific.ac and we settled on system with minimal verification (via sms) with background screening and shadow banning. It's been effective so far at limiting bad actors though I think there are definitely some more effective ways to address this problem.
Azure Functions (Microsoft's Version of AWS Lambda)
Ask HN: Downloading PDFs from SlideShare Without JavaScript?
Is there a way to download PDFs from SlideShare without using a browser that supports javascript?

Ideally, I'm looking for a command-like tool like youtube-dl.
Domestic spying versus projecting power in other regions of the world are completely different and get promoted by people with different mindsets.
no the answer is really simple. bitcoin is like the dollar a currency.
Why? because it does not have intrinsic value.
The only money there is. Its gold and silver. check mike malhoney videos in yt
So maybe, "Hackers don't just write software - they solve problems".
>Anyway, I have no beef with either side, and I know I won't be able to convince anyone here that science can also be viewed as a religion with its own biases. Plus I believe that most of the time science is great. I just don't know about this quest for true AI. It feels religion-y to me.

People definitely have a tendency to anthropomorphize "true AI" that is very religion-y. This doesn't mean that we need to throw out science as a religion among religions, it means that we need to throw out quasi-religous thought about "true AI" and be careful whenever we step off the sure ground established by current scientific knowledge.

>Say I have a choice - pizza or pasta. If I choose pizza, then free will says I also could've chosen pasta. Determinism says if I chose pizza, then the "choice" was always going to be pizza. If you say both that I could've chosen pizza or pasta, and that I was fated to choose pizza, that makes no sense to me.

That's not what compatibilism says. Compatibilism says: you weren't fated to choose pizza, period, and if we reran the whole experiment enough times, so to speak, you would in fact choose pizza some of the time and pasta some of the time, without our being able to predict better than just collecting percentage statistics.
Unfortunately, it's not a website, and you can't presently see it, but I saw an exhibit by the Tactical Tech collective in Berlin called Nervous Systems. It was a really accessible discussion of these issues. It was also especially effective because much of it was more artistic and presented with less commentary, allowing the viewer/reader/listener to draw their own conclusions.

If you know a space which can host them, and you can raise the cash, I'd recommend getting them to come to your locale and invite your friends.

https://tacticaltech.org/projects/nervoussystems
The UAE is also a perfect example of why rubber hose cryptanalysis should be considered just as much as the "evil maid" or keyloggers attack vector. Don't want to give up the password to your dm-crypt volume? Okay enjoy your beatings.
How I Could Compromise 4% of Locked Instagram Accounts
And then you have on x86 the Intel Management Engine, running a whole graphics, audio and network stack, and a full JVM, and you notice that the promise of "more auditable" was just a smokescreen, and it really is just about DRM and backdoors.
Its possible that they consume at such a fast rate that it would likely consume faster than the world can produce
Of course, but that isn't making an assumption, as the OP said the compiler might do.
We’re Sensinum. We’re doing great stuff. Want to join the team?
Cert pinning doesn't just give warnings, it simply refuses connect over MITM, period. Just a few days ago I was at some airport wifi hotspot that was MITM'ing things, my android phone simply refused to go to https://google.com with a warning about this and no option to accept the cert signed by their fake CA.
> In order to successfully pull off the MITM attack against TLS connections they will need a rogue CA or cooperation from browsers.

Well, "fortunately", Blue Coat Systems, leading manufacturer of intercept devices for authoritarian regimes, now has an intermediate cert courtesy of Symantec CA, so they're fully capable of issuing and installing MITM certs for use on their clients' devices.
List of platform-independent GUI libraries
Eek, head bobbing? Having that on by default is a major error for a VR game.
I tried. I worked on it for about 30 minutes and then just gave up. Printed ABS is actually surprisingly difficult to file/sand, it's rather tough stuff. I find it's easier for me to file 6061 Aluminum than it is to file ABS. And as this was a piece with a ~3 inch diameter, and many skinny, flat internal angles, filing wasn't successful.
Best Friends: C++11 Move Semantics and Pimpl
A very simple case would be logging into lastpass.com, your password is passed to lp.com via a https transport.
Relying simply on voting and politicians to solve the problem of mass surveillance is just passing the buck.

The problem is more technical than political. It is a problem of internet architecture and design which must be addressed from within by technologists.

Currently, only a handful of ISPs and Internet Gatekeepers (i.e. Google, Facebook) have ultimate control over the majority of information flow.

If all you have to do is tap a few wires at key choke points (i.e. Room 641a) or hack into a server at FB or Google to own billions of users then that is like marching rank and file into machine gun fire on a global scale.
I feel you; I talk about it quite a bit because it is of interest, and well it affects us all. I even tried to get my sister to read the book "Data and Goliath" by Peter Schneier and she only read about 5 pages book marked it and had it sitting for a month. . .it is futile; Once I got an unusual call about someone being in jail. . .etc etc. I was concerned it may be a friend; anyways the call did not go through and I was running a reverse lookup on the tel-#. Well, two buddies of mine were there with me and one of them remarked "yeah, aren't you like paranoid that the government is spying on you" I looked at him furiously because this person I call my buddy just made a stupid stupid comment. Stupid comment because he obviously misinterpreted my previous conversations about NSA spying into me being personally paranoid about government spying on me; it is not about government spying on me it is about government spying on the people! and most people are plain ignorant and careless! it is unfortunate! they need an 8th grade level NY-Times paper to tell them their news. . .yes that is an ad-hominin.
“Government is not reason, it is not eloquence—it is force! Like fire, it is a dangerous servant and a fearful master; never for a moment should it be left to irresponsible action” (Washington 6)
3D Printed Low Poly Spiderman
The morning paper: a paper from the world of CS every weekday morning
The remedy to this is burden of proof.
Previously: https://news.ycombinator.com/item?id=11772294
We have a test team that requires the product to stay backwards compatible with tests, not the other way.
Strictly speaking, an invention designed by evolved humans is a product of evolution.
https://www.youtube.com/watch?v=P9yruQM1ggc
But that, too, is a symptom of NIMBY policies that push sprawl. Google would love to have fewer, taller buildings (if nothing else, it'd make their shuttle system a lot easier to manage), but Mountain View won't let them.
Until March 24, 2016 there was s $160 fee foe US citizens visiting Argentina. (Just incase not everyone is following Argentine visa policy.)
I agree with the unit-independent part, and you hit the nail on the head, I would prefer a text field, or anything that's part of the file, to give an indication of what unit of measurement the part was designed.