skysight-inc/HackerNews huggingface dataset:
I'll have to put "The Wire" on my ever-growing list of things I don't have time to watch :)

I suppose you're pretty much right about everything here. But with my eastern-connecticut goggles stuck irremovably over my eyes I still have trouble accepting that it can be so hard to get someone to hire you.

I don't think I know anyone under 60 who would object to a girl based on her having a tattoo on her neck.

While in college, working various jobs to pay my tuition, I worked alongside a variety of poor individuals, both rural "white-trashy" types and urban people of various races (It's a pretty rural area, but a bunch of people would take a 1-hour shuttle ride from Hartford to throw boxes around
at the Fed-Ex distribution hub). These people varied widely in intelligence, charisma, criminality, and work ethic. I got to know many of them and had a fairly good sense of what each was capable of. If I am ever in a position where I'm hiring a receptionist or a construction crew or a store clerk or a plumber for my own house, and I get an applicant that looks like one of those guys I used to work with, I will certainly give them a serious interview and determine as best I can whether they are both reliable and capable of doing the job.

Of course, the job will go to the most promising applicant and it doesn't seem unlikely that another candidate with a middle class upbringing would demonstrate better literacy or communication skills or critical thinking abilities (or maybe even work ethic?) and I don't deny that this places the poor at a disadvantage in a competitive job market. But it's not clear to me that this is the same thing as a systematic bias against those who "smell poor".
Any time you read somebody saying "Everyone knows...", question that claim.
Cisco is doing some cool things in open source and let us (read: the team at aster.is who wrote that) do it mostly how we see fit.

Somehow, though, convincing them to use a language that almost never has any runtime errors was not a hard sell.
It's a big difference, especially in a legal sense, and if that attacker is a government player.

Walking in a back door which you have a key for, if argued correctly in a court, is a lot different than breaking in through a window.
I use both Sublime and Atom, and have switched over to Atom as my daily driver. While there's a small responsiveness difference, it's not enough to bother me for most use cases.
Market cap is about $32B, so $50B or so is probably a reasonable ballpark estimate.
The ionising radiation symbol doesn't have anything like the same gut impact; aside from the yellow and black colour scheme, it looks quite neutral and unthreatening.

They seem to have fixed that nicely:

https://upload.wikimedia.org/wikipedia/commons/thumb/3/35/Lo...
People outside of this field are often confused by this. That's why the term "mathematical optimization" is often used instead of "mathematical programming" nowadays.
There is a crucial difference between hardware development and software development that you are missing: hardware has several stages of development/implementation that spans several parties only connected by business contracts.

If you want to squeeze the attack into your analogy, it would be as if a compiler writer was malicious an added an attack to any/all nginx binaries without modifying the original source code.
I really hope you're not involved with securing sensitive systems. This is the nightmare right here. Who cares about hardened a OS when the hardware is compromised in a way that is virtually undetectable. Very few have the resources to verify every item on the board and its purpose. The fact that this is even possible is a problem.
>I seem to have hit a nerve - You've replied three different times to the same thing and are incoherent at this point. I guess you're still trying to convince yourself there's a problem?

Yes, you're absolutely right. And this comment makes it four responses, so that means you must be extra-right. There's simply no other explanation.

So, you obviously completely understand now. Very impressive!
I agree with that, but struggle to articulate why it looks evil. Does it look like decay? Like a weapon? ¯\_(ツ)_/¯
That's the symbol for "The extractor fan in this room is haunted"
Host OS being compromised is one thing. Hardware compromised? VM won't help you
SILE looks promising: http://www.sile-typesetter.org/
Go to the Elm home page. View source. Things have swung too far to the JS side. I'm not going to force my users to have to use that. The beauty/accesibility/advantages of the web architecture is being lost to things like this.
See also: http://lua-users.org/lists/lua-l/2016-05/msg00400.html

It's hard to figure out what changed from the site itself. Apparently all these bugs have been fixed: http://www.lua.org/bugs.html#5.3.2
This was brought up the last time it was posted, to the extent of the post itself being given a confusing, clickbaity, editorializing title about Ken Thompson. But I don't see it as the same thing.

Ken Thompson showed that he could hide a backdoor in a compiler where you'd think you could verify the compiler as safe, by reading its source code and even compiling from that source code, but in fact it was sneakily changing its own source code as it compiled it.

This demonstration, on the other hand, is saying that they can hide a backdoor in a microchip, where you can't verify it as safe.

The chip is not, for example, making the sneaky capacitor disappear when you use the computer to view schematics of the chip.

I don't see where "trusting trust" is involved, just "trust".
"backdoor" and "attack" refer to entirely distinct concepts: backdoor is, given administrative access to equipment or code, installing an hidden component that will be used later by an adversary.

"attack" is the operational word, sometimes using a backdoor but mostly just exploiting a given system to your benefit.

Coming to read this article, I'd have no problem if it stated "the most sophisticated backdoor I've ever seen", but it implied that it exposes an unprecedentedly sophisticated attack - I was expecting something operational of the Stuxnet variety, and instead I got a research paper.

If this article showed how this backdoor was embedded into a real (commercial and widely used) chip - unbeknownst to the chip maker - and later used by an actual adversary, then that would be an attack.
He did not even slightly mention the frame of optimal traffic distribution. He's talking about whether roads belong to homeowners. Optimal traffic is your frame of discussion, and then you go off talking about how tech people model human systems as factories.

It is worth framing this homeowners Waze sabotage as a NIMBY problem, because if the cars aren't being routed through their neighborhood, then it's being routed through someone else's neighborhood. The consequence of unequal distribution of traffic burden means that some people shoulder more burden because they lost in some conflict or competition, whether that's the war of politics or not having enough money or whatever.

There should at least be the empty-handed gesture of discussing why other (poor) people should shoulder disproportionate burden.

If people aren't discussing a substantial global reduction in vehicles, a revolutionary new transportation method without the same issues, or a decline in US population that outpaces growth, then they're talking in code about pushing the problem to somebody else.
Clinton 'wins Democratic nomination'
Physical access to a semiconductor fab isn't exactly easy pickings.
I think that might be a bit outdated since it refers to DOCSIS1, and I haven't ever received a package offer from Comcast before below 200Mbps or so
Chess legend Korchnoi dies in Switzerland aged 85
Late addition: I thought I fixed all the stupid math problems before I posted this, but it's still totally wrong. Even leaving aside the fact the English doesn't have 2,000 prepositions, which I just glossed over :)

A five-word sentence with 1000 options per word isn't 5^1000 but only 1000^5 = 10^15. If we break the movie into 5-second blocks we get 48 of them in a 4-minute movie so (10^15)^48 = 10^720 different movies, which is not bad but we're still 10^513 away. There are a lot more variations we could consider - different actors, costumes, sets, framing, color grading etc. and I think it's plausible that we could come up with enough features. Heck if you talk twice as fast, you could get (10^15)^(48*2) = 10^1440. But it's a lot bigger than I made it out to be.
I had something like this as a kid.

One episode I remember vividly was where I woke up, looked around, and the room was filled with metallic flying saucers each about the size of a large potato, whizzing past my head, clanging as they bumped into each other, and I "knew" they would kill me if they noticed me. It was fascinating but terrifying. It didn't feel at all like how "waking up in a dream" does—I was definitely conscious—I checked, introspectively observing that I could control my thoughts. I hid under the blanket for what must have been at least a few minutes until the whizzing and clanging suddenly stopped, then anxiously checked that the saucers were gone, and fell asleep again.

Probably unrelatedly, I would also occasionally unexplainedly faint, so I was tested for epilepsy and sleep issues because of that. Both came up clean.

The sleep terrors thankfully stopped partway through primary school. I still have the unexplained fainting, but that's a story for another comment.
The flaw is thinking that the improvement comes for free. You're basically gaming human behavior. The narrower lanes eat most of the safety improvement of people driving slower. You only get the tiny bit that was left over by mistake because people slightly overcompensate for the danger you put them in.

But to get that tiny bit you're still paying the entire cost of slowing vehicles down. It takes longer to get where you're going, including for emergency vehicles. The most fuel efficient cruising speed for most vehicles is at or above 40MPH, which you're diverging from.

You're paying full costs for fractional benefits. You would be better off putting some cops on the side of the road with an EMP cannon to disable any cars that show up. Sure, it sounds crazy, but it improves safety by slowing people down so we should do it, right?

Except that there are other, better ways to improve safety. Like building sidewalks, and making sure there is enough capacity on the highways that people don't come down to surface streets to avoid it, and improving mass transit so there aren't as many people driving to begin with.
Oddly enough, about 2/3 of the times I come back to my work computer in the morning, VS Code is unresponsive and needs to be killed. (Yes, I should get together enough data to make a bug report out of this.)

But, yuck, sounds like I should keep using VS Code anyway. I kind of want to be able to use Atom, but 2 MB is a frighteningly low size limit.
I'm glad there's more free material online for optimization modeling and algorithms. Personally, here's my favorite list for algorithms and modeling for optimization:

For learning the simplex method, Linear Programming
by Vasek Chvatal (first 10 chapters):
https://books.google.com/books?id=DN20_tW_BV0C&printsec=fron...

For learning branch and bound, Integer Programming by Laurence A. Wolsey
https://books.google.com/books?id=x7RvQgAACAAJ

For odd modeling tricks for integer programming, Logic and Integer Programming by Williams, H. Paul
https://www.springer.com/us/book/9780387922799

For modeling tricks for convex programming, Convex Optimization by Stephen Boyd and Lieven Vandenberghe
https://stanford.edu/~boyd/cvxbook/

For basic nonlinear optimization algorithms, Numerical Optimization by Nocedal, Jorge, Wright, S.
https://www.springer.com/us/book/9780387303031

I've never really found the ultimate optimization book, but the references above tend to have the right modeling techniques, algorithms, and references. I've found they're a good place to get the right idea and the right words to search for more material.
> So if you execute that intimidation strategy then you are likely to become a prosecution target of legal system.

Possible? Sure. Likely? Hardly. The same legal system that failed to deliver justice to this asshole's victims, is the same legal system that will fail him when he pokes the wrong bear. He's not the only guy out there with the skills to skirt the law.
You can read more about Ansible[0] and etcd[1] here.

Etcd - to keep the configuration in use

Ansible and Teraform to build infrastructure

Example Ansbile + Etcd [2]

[0] https://www.ansible.com/
[1] https://coreos.com/etcd/docs/latest/getting-started-with-etc...
[2] https://gist.github.com/justenwalker/09698cfd6c3a6a49075b
The difference is you or your team have the option to use the magic in moderation vs no magic at all.
I wouldn't say physical access is as clever, though.
A Coalition Says to Congress: End 702 or Enact Reforms
This is a tough one. It's easy to be the expert and point out what will not work.

The crux of it is as he states the false advertising, and how many people will see this and start to use it without knowing what they are doing. However it's hard to separate false advertising, with overconfidence. Maybe they even do not have to be the different things in this context.

The author is correct, this is incredibly hard to get right. Without having some experts heavily contributing and steering a project like this (and, by experts, I mean distributed filesystem experts, not just general distributed application knowledge) it is going to be a long uphill battle, fraught with terror.

But, who's to say that they won't find that type of collaboration. They may just do that, and they may just pull off making a decent project in some years.

But is it hard, hell yes. Is it going to happen as fast as they claim, probably not. Is it a silly idea to build this and not contribute to prior art more? Probably. Is someone a little pissed off about this and taking to the internet to moan about it a bit? Probably.

At the end of the day, file systems are hard, and if your job is to deploy, manage, scale, or recover them, you won't just be blindly throwing your petabytes at a brand new project anyways, and if you are, you should be removed from your current position.

The type of folks that will be early adopters and contributors won't be putting their banking transactions on it.
In Search of the Best Code Editor
The problem here is not the app. People need to understand that the road /is/ public! Your neighborhood does /not/ own the road - everyone does. IMO, The solution to the problem of conjestion is opening of carpool lanes to all travelers, aggressive clearing accidents, creation of visual barriers (blinds) to accidents, and above all global acceptance of driverless systems.
Findings unsurprising, and a rather annoying, popup-in-your-face website.
GM and Ford are drastically less powerful today than they were in Tucker's time. By 1945-1950, GM was already the global leader in auto sales, and of course Ford had been a juggernaut for some time as well.

That's the biggest difference.

Toyota, Honda, BMW, Daimler, Volkswagen, Hyundai, Nissan, Mazda - the combination of those companies effectively neutered the old GM / Ford political monster. It sucked the money out of the old Detroit political machine, making it far less fearsome and influential in DC.

The GM / Ford that Musk is facing off against, is a joke compared to what it used to be able to bring to the table in terms of abusing the system to stop competition.
The night before the California primary?

Seems like even Clinton doesn't believe it:

https://twitter.com/HillaryClinton/status/739983730002022400
A legendary racket from days past! Leave Cisco with technology and engineers, get generously funded by Cisco, get generously bought out by Cisco, inside Cisco enjoy sandbagged targets and guaranteed payouts, lather, rinse, repeat. Self-dealing masterpieces!
Because paper is incorruptible? There is plenty of room for tampering with physical votes too.
A Look at the “Goldwater Rule” This Election Cycle
That's pretty unfair given the fact that it's 0.17. Before this release, server side rendering was possible but super weird. This release includes most (all?) of the big changes necessary to make the server side rendering story great. This is already basically done but not yet release ready.

Please don't reject something based on its current (admittedly not 1.0!) state based on assumptions about its future! Evan and co. are in fact extremely smart and by no means does anyone consider Elm "done." I'd suggest playing with the language itself. That's the important part - not the state of the current runtime.
Or building a currency that relies on keeping your computer secure
Awesome talk - I'm about halfway through and a bunch of it is going over my head, but the presentation is spot on - the presenter is clear, passionate, not reading directly from his slides, and you can tell that he absolutely knows and is confident in his understanding of the content.
Can it be self hosted by users? Is it open source?
Wait-- not that I necessarily disagree with your entire point, but I have moved several times in my life and every single U.S. library system I have been part of (Houston, Boston, etc) has required some form of confirmation that I live in their taxation/service region. Some of them are nicer--we'll mail you a postcard to confirm you get mail!--but the verification is there.

So I think there is some warrant to restricting access to those who have contributed.
What that means is the problem is going to be pushed to someplace else, normally to a poorer place. If areas of living aren't shouldering equal burden, then some other neighborhoods are shouldering disproportionate burden.

That's the symptom of NIMBY.

If we aren't talking about (1) a new transportation method without the same issues, (2) a somehow substantial decrease in cars, (3) a decline in US population that outpaces growth, then we're probably talking either about how to shoulder the problem equitably, or how to push the problem to another neighborhood so you don't have to suffer.
No pop-ups --> 10% as many people join our newsletter --> we can't track whether we are having any impact --> no donations --> website disappears.

I don't find the results that surprising, but many people do.
Flagged, politics are off topic on HN.

Clinton has not won anything, and is facing espionage charges, and may end up not being able to even be a delegate in late July. She is also facing voter irregularity issues in multiple states, and may end up losing delegates in multiple states.

This is nothing but a pointless fluff piece, and I find it strange that the BBC, a UK news website, would bother running it.

If Clinton ends up stealing the nomination, it guarantees a Trump White House for 8 years. For anyone involved in HN, this is an outcome that is not in our favor.
But you don't have control of the supervisor if the attacking process is confined to the VM, do you?

You certainly don't have access to the VM's supervisor mode, since its "chip" wouldn't have this sort of physical vulnerability.
Electron is the Chrome UI embedding shell. The actual editor code is totally different between the two.
Even 4KB demo in browsers is a thing these days.
I am not convinced that the legal difference will carry much weight with all the potential exploiters, but if it does, there is always the question of how you acquired the key.
The demo is really slick. The app does feel better than Google calendar. What was it built with? :)
> So every single gallon of gasoline used in every country is all provided by conflict petroleum?

Of course it is. Petroleum is a global commodity. If there is more demand anywhere then the price goes up and all sellers make more money.

> By the same token, every plastic spork is funding terrorism.

Only the ones that aren't recycled. Make sure you recycle your spork.
It's neat how you can see immigration policy being enacted though. China goes dark in 1882 (Chinese Exclusion Act), then Russia lights up for the New Immigration near the turn of the century and goes dark in 1924 (Immigration Act of 1924), and then everything opens up in 1965.
Title is wrong; updates come over TCP that has been modified not to perform link sharing.

I have seen this with my wife's computer. Though I haven't seen the large-window phenomenon (haven't looked), what I do see is dozens of active connections opened to the same destination, which of course defeats both TCP's link sharing and standard QoS algorithms.

I work around the issue by bucketing any Akamai IP ranges I find into a very-low-priority queue, and let those TCP connections fight it out. Seems to have worked well.

For those interested, here are the Akamai IP ranges I use:

23.0.0.0/12
23.32.0.0/11
23.64.0.0/14
23.72.0.0/13
104.64.0.0/10
2001:428:4403::/48
2001:428:4404::/48
2001:428:4405::/48
2001:428:4406::/48
2600:1400::/24
Oh of course, however you think logically you would need to prove delivery of documents. The default judgement is when the defendant hasn't responded in 30 days. Therefore you would assume you would have to prove the defendant had something to respond to.
As far as I know the isohunt case was settled, so no legal presendent was set?

https://torrentfreak.com/isohunt-shuts-down-after-110-millio...

There's some more detail in the Wikipedia page:

https://en.m.wikipedia.org/wiki/IsoHunt#Legal

As far as I know there are two issues: 1) whatever the technical details, if it can be shown that the intent is overwhelmingly to fascilitate unlicensed copying - then any search engine could be held to be illegal.

b) These other cases are old; there are technical differences between indexing magnet links and storing torrent files, not to mention running torrent trackers. While intent is still important, I'm not sure the technical differences don't matter now.

As far as I know linking to illegal content is (mostly) legal.
Green magic home a new way to live with nature
I have embedded Ruby and Python before so I found that paper interesting to read. Wish there were mentions of languages I'm unfamiliar with (eg: squirrel, javascript). Anyway, I appreciate the design decisions and no doubt Lua has merits, but my personal experience is I haven't found it to be a pleasant language to use or embed.

Garbage collection is a controversial topic too, and if I understand correctly, a part of the reason Lua has a stack based API (with how its GC works). I somewhat liked the level of control I had with reference counting from working with CPython. Some applications may even go out of their way to disable the GC and use weak references to guarantee determinism similar to Apple's ARC. Squirrel, born as a competitor to Lua, looks to use a GC approach similar to Python at a glance..
> I've asked elsewhere in this thread for a single example of this argument (for a torrent site) working in US courts, and nobody had one. Do you know of any?

When The Pirate Bay falls under US jurisdiction, your request will matter.
I think Cisco is going to end up like HP.
You're right, but ugh.
No. If your job is to secure systems there is zero difference. If other than primary has key, it's not secure. If you can break in, it's not secure. Legal arguments are irrelevant.
Yes. I was so pissed off with that company that I refused to pay "on principle", but they were pretty dubious principles actually — I really did owe the money, and nonpayment was probably not in my own best interests.

My failure to pay stayed as a negative event ("serious delinquency") on my credit report with each of the major credit bureaus, for roughly 7 years, just like it is supposed to. Then it disappeared.
I'm also looking for more structured examples but so far haven't found much. These are some apps that go a little beyond the "hello world" kind. Some of them are being updated to elm 0.17.

https://github.com/plentiful/shop

https://github.com/srid/chronicle

https://github.com/CultivateHQ/seat_saver

https://github.com/NoRedInk/elm-blogger

https://github.com/massung/elm-hn

https://github.com/sporto/elm-tutorial-app