skysight-inc/HackerNews huggingface dataset:
Oh, the home invasion argument.

Let me just stand here in your dark hallway with this knife, while I wait for you to wake up, find your keys and unlock your gun cabinet. Unless you're sitting on the end of your bed waiting for someone to jump in your window, a (legally/responsibly stored) firearm will not help you.

And if you are the sort of person who sits on their bed waiting to shoot someone... Then maybe guns aren't for you.

FYI - I'm sport/vermin shooter here in Australia. Literally everyone here who has any involvement with firearms will happily tell you why every conceivable argument about homeowners having access to high powered semi/automatics is totally and categorically wrong.
But they do, and some specifically offer US flag vessels on certain routes. However, like you said, the Jones Act only applies to US-to-US shipments, whereas most cargo is coming and going from overseas -- so it's typically a non-issue.

Here's some actual schedules showing real routes calling at multiple US ports:

[1] http://www.cosco-usa.com/fpdb/Services/schedules.aspx
[2] PDF: http://www.hamburgsud-line.com/hsdg/media/hamburgsd/document...
[3] PDF: https://www.msc.com/getattachment/dfebb208-935e-4060-b0c7-a5...
just like how DVD Encryption (https://en.wikipedia.org/wiki/Content_Scramble_System) was never reverse engineered because the key was too difficult to crack ?
Best way to deal with issues like this, make them care. How? we need to get this message to the masses, to get enough people know about this potential issue, that it becomes an organisational issue for Intel.
All I can see is panic for TeamViewer's incident.
Sure. I'm a pragmatist - if that would work, I'd be happy. One major problem is fragmentation/network effects though - you'd need to get enough developers onboard to make something effectively the 'default' userspace packaging system. Major distros already have a big NIH problem with system packaging, every one having it's own system.

Packaging is a difficult problem - the 80% use case is easy to solve, but the edge cases really require elegant forethought. It also seems that every distro has a different idea of what that 20% is...
The 90's game was Quiz and Dragons by Capcom and it was arcade only.
Do you see any blatant security problems with my proposal? The biggest problem besides DOS is that it leaks passwords to the site, which may prevent this from being useful except to trusted sites. But that can be solved by hashing/salting before uploading to the site, as long as the site publicizes their salting method (which shouldn't present security concerns, right?)
They're facilitating drug trafficking.
>* The files have at least passed through the hands of a Russian or someone who likes using former Russian spies as a pseudonym.

Looks to me that someone desperately wants to implicate Russians or to make it seem that the attacker is Russian. Even the original Guccifer used Russian proxies (as per his Wikipedia entry).

I also read on twitter that ")))" is a Russian version of a smiley face... they apparently omit ':' in ':)'. That version of the smiley face was used in his blog post. Again, that's definitely not a subtle clue.

I hope someone runs linguistic forensic analysis on that whole blog post because the 'broken english' nature of it might reveal where the author could be from and what his mother tongue might be. People who are not native speakers of english make different mistakes based on what their mother tongue is so that's something that might be harder to manufacture. Broken english of a chinese speaker will be different from someone who speaks french, for example.

I've also seen malware analysis reports which show that malware authors often change the locale of their computers and often insert variable names in different languages to further obfuscate the origin of malware.

This is a fascinating case and it reads like a spy novel!
I assume YC board members have consulted with their lawyers as far as their exposure goes.
I'm sorry but how is this a good fit? What is the synergy here? This particular sentence is incredibly vapid:

"By bringing these two companies together we are creating the opportunity to develop and bring to market vertically integrated mobile and IoT services and solutions that deliver extraordinary simplicity and value to our customers."
Gnash, really? What other open alternative to Adobe's player would you recommend? For example, Gnash is the only way to get Flash support on the Raspberry Pi - is that not valuable?
I am sorry if this is a stupid question but why does anyone care if it's Russia, China or a lone US hacker? What's the point of discussing that over the content of this documents?
Yea that's a good idea. I don't like it because it's hacky, but if that's the only option... ¯\_(ツ)_/¯
https://www.raptorengineering.com/TALOS/prerelease.php

It's quite expensive, and prerelease, but from what I heard it fits the bill.
I wrote a tool the other day to help create a Table of Contents https://github.com/kaihendry/toc
So your argument is non-US ISPs are advantaged by greater competition because they get Y but US ISPs are not because they are too incompetent to clone foreign regulation in a way that benefits them?

Hint: There isn't a rebuttal you can make because if it is true, then your argument is false. If it is false, it is an admission that federal regulations do actually function to increase competition to the benefit of consumers. There isn't a third option.

You don't seem to acknowledge the existence of private sector collusion either.
Developing android apps in testing environment
Congrats Bryan.

If anybody deserve it, it's you guys.
I agree, an excellent book. I learned a great deal from it.
After a bit of poking around it looks like the tool was called "padBinEditor" - files and instructions can be found on various English game cheat sites.

As near as I can tell, all it does is let you edit locally stored game data files - to lower a boss's stats and so on. Why this is illegal, I have no idea. JP news reports all mention "bypassing data protection", so I guess that means the data files were encrypted (for some value of "encrypted"). But according to the app's instructions it works on non-jailbroken iOS, so it's not like it's defeating OS protections - it's just getting files from storage and overwriting them. I don't grasp all the details but it seems pretty chilling.
If you are talking about needs from a Maslow's Hierarchy of Needs perspective, the yes, we technically don't need many things at all.

I think that's just picking on the definition of one word. I don't think the argument to ban them stems from a lack of need, but rather, the negative use has so far unmeasurably outweighed the benefits. In which case, yes, I'd argue something so inherently negative should not be available.
Cosmologically we turn to the conservation of energy-mass-momentum wherein the matter fields at one point in spacetime can donate energy-mass-momentum into the gravitational field, and can pick some of that up again at a distance from the gravitational field, typically changing local matter field content's (linear) momentum.

At cosmological scales the "objects" are the various matter fields (in the most general sense, everything that is neither the cosmological constant nor the gravitational field itself) and we concern ourselves with energy-density, which drops with the metric expansion of space.

Sean Carroll goes into some detail here:

http://www.preposterousuniverse.com/blog/2010/02/22/energy-i...

Back to GWs: these change the peculiar motions of matter field content, at cosmological scales giving tiny nudges to galaxy clusters compared to what is imparted by Dark Energy. So even though we lose the conservation of energy, we get back the conservation of energy-momentum.
> * The files have at least passed through the hands of a Russian or someone who likes using former Russian spies as a pseudonym.

Or intentionally made to look like that. Attribution of hacks is on the spectrum of hard to impossible. Who can prove it wasn't the NSA/CIA?
Says Hinkley on hacker news... Is this a trick question?
> I can walk around a bad part of town at 2am, but if I get shot, I'm still going to be mad at the shooter.

I'm not sure calling LinkedIn the shooter in this analogy is completely fair; maybe more like the cop two streets over getting a donut.
Check out the arch linux wiki.
I got an email from Bitbucket earlier today warning me about unusual behavior on my account as a result of reused credentials. Is it an attack across several version-control services?
I would never have an AR-15; an AK-47 would be a far better choice of semi-automatic rifle. However the AR-15 has become the best-selling rifle in the USA and there are so many AR-15 fanboys that they will almost certainly flood this forum with posts objecting to what I am about to say.

- The original cartridge (.223 caliber) that the AR-15 was based on was designed for shooting "varmints" (small- to medium-sized furry mammals): In Vietnam it was found that the M-16 tended to wound rather than kill the enemy, and a new doctrine was adopted to suit this fact. In contrast the AK-47 cartridge (7.62x39) was designed to _kill_ large hairless mammals (men) and does so with dispatch.

- In Vietnam the M-16s (AR-15) jammed all the time. To unjam one you had to put a stick down the barrel and dislodge the jammed round, not an easy task when you're lying on your back and VC are shooting at you with ultra-reliable AK-47s. The M-16 is one of the reasons we lost that war. C. J. Chivers writes about the sordid history of the M-16's development and deployment in his book "The Gun" (link below)

I have often joked that the US government _wants_ their citizens to buy AR-15s because an AR-15-equipped citizenry is effectively disarmed.

I was astonished to hear that the Orlando shooter had an "AR-15" since those are usually "Jam-O-Matics". My astonishment vanished when it was revealed that the shooter used a Sig Sauer MCX, which has a better design and does not jam.

https://en.wikipedia.org/wiki/.223_Remington

https://www.amazon.com/Gun-C-J-Chivers/dp/0743271734/ref=sr_...

You can read an excerpt from "The Gun" at Esquire's site:

http://www.esquire.com/news-politics/a25677/ak-47-history-11...

And here's Mikhail Kalashnikov's 2006 take on the M-16 vs AK in Vietnam and other wars:

http://www.haaretz.com/news/ak-47-inventor-u-s-troops-in-ira...
No. It's in principle as easy as using array of antennas designed to reinforce each others signals.

It's used in normal FM radio.
Joanna Rutkowska has written a nice paper on the topic, highly recommended: http://blog.invisiblethings.org/papers/2015/x86_harmful.pdf

Edit:
There's also a talk from 32c3 for those more inclined to watch a video. I am pretty worried ever since I watched that: https://www.youtube.com/watch?v=rcwngbUrZNg

(which is why I have researched non-Intel laptop alternatives..cliffnotes: GPUs without BLOBs are hard to find and there will be some severe tradeoffs which is expected)
I don't follow what you're saying.

To compare your new password with your old password, you take the old salt, hash your new password together with it, and compare the result to the old hash. If they match, you're trying to reuse the same password. You do this on the server side, naturally.
It is a reference to erectile dysfunction medication disclaimers.
I found it particularly helpful when combined with the quick-switching between apps in Android N.
I don't know if there's a national list, but one FOI request to one council in London got results.

(Most cameras are private, for example in a shop. I don't know if anyone has a list of these.)

https://www.whatdotheyknow.com/request/fixed_cctv_camera_loc...
> To get full GDB documentation you need to use info gdb, the man page states that itself. Man pages are quite limited correct,

`info gdb` is completely unacceptable, and an outrage: standard documentation on UNIX are manual pages, not to mention that systems other than GNU/Linux do not use GNU info.

> Man pages are quite limited correct,

Incorrect; manual pages are rendered by the nroff document typesetting system. Entire books have been typeset for printing with nroff. Case in point: the UNIX Text Processing book, the AWK book, the ANSI C book. The system is extremely flexible and very powerful, once one understands what is going on. When you hold the printed versions of these books in your hand, you can see that they are beautifully typeset and rendered. Brought to you by the same programs which render UNIX manual pages when you type `man some_command`!

What you see on the screen (on UNIX, cannot vouch for Linux) when you type `man ls` is an actual professional typesetting system rendering the content for stdout instead of a printing press!

> I don't care for the for or against systemd arguments but after the initial reaction/learning phase when pulling away from upstart/sysv/init based shit/etc, many of us are actually starting to warm up to systemd.

That's because you haven't had the opportunity to enjoy SMF. When you've worked with SMF, systemd looks like a cobbled-together toy. For example, systemd turns ASCII logs into binary format, just like on Windows. This in turn goes against the UNIX philosophy of

Write programs to handle text streams, because that is a universal interface. [McIlroy]

http://www.catb.org/esr/writings/taoup/html/ch01s06.html

> You are making quite a lot of generalizations without doing proper research.

That's is quite ironic, telling that to someone who does professional system engineering and software development on GNU/Linux for a living. I have been doing UNIX and Linux professsionally since 1993, and working with computers in general since 1984, how many years is that? I spend every waking moment of what free time I have researching UNIX and Linux. To tell me that I'm "generalizing without doing proper research" just because I am not succumbing to GNU/Linux group think is what one could call disingenuous.
I have an earlier edition of "The Art of Electronics" and I'm wondering how different the latest edition is. That said, I rarely open it so it probably doesn't really matter anyway.

I've done only one electronics project since my electronics course in undergrad. I keep meaning to do more, but I never get around to it.
It's the year 2034, the FBI just killed 168 unarmed Americans. It claims that disclosing the reason why they were killed may scare off similar targets. A warrant to do the killings was avoided due to similar concerns.
Senate passes defense bill including women in draft
HN: Is the future of engineeirng research private? e.g. OpenAI or Amazon/Facebook/Google/Baidu - who seem to have taken many of the world's top AI researchers.
I got the same mail, seems like a coordinated attack. Luckily I had 2FA enabled, I'd recommend everyone to do that as well as it protects your account in these cases.

Bitbucket provides an audit log and a list of recent login sessions where you can see if your account has been accessed and if anything destructive was done to it. Github has a similar feature I think.
Were there Baracuda 7200.11? That firmware version was notorious for corruption
Teleport Eightball
> The strongest case that could be made for it, which a couple of people resurrected recently, is that Congress made a decision around 1978 that we should put software in the copyright system. But that was a complete disaster.

Why was it a complete disaster? I've heard lots of criticism of software patents or even closed source software but copyright isn't to blame for either as far as I can tell.
so basically because it is the most practical. who would have guessed coming from the russians? )
I'm really surprised by how little attention this key fact is getting. The best engine for a range extender duty is very different from the best engine for direct drive, internal combustion or not.
It might help a bit. But really the problem is I want to see the top 10 posts from the last week that I missed. Even grouping smaller subreddits together, /top still sorts them by the size of the subreddit and is mostly useless.
IIRC, Linus Media Group uses btrfs for a few of their servers. But, as shown by some of their videos, they aren't the best when it comes to good practice...
That is exactly what I'm suggesting, and don't put it past the FBI to not think things through. If it was too obvious if all the poles got tagged you could do them slowly over time.
Sounds like the Star Trek universe
Chromium only became compatible with linux in 2010.
https://googleblog.blogspot.com/2009/12/google-chrome-for-ho...

Arch Linux packaging files have source history going back to then as well.

Chromium is also an example of a package that took a long time to appear in other distros, because it's really written with the app mindset. It copies and incompatibly customizes most of its dependencies. No one would consider that a great idea for ongoing maintenance and security patching for a typical project, but of course this is a google product-oriented thing with nearly a thousand well-above-average-skill developers assigned, so it's not a problem for them to manage surprisingly huge volumes of code and changes.

Web browsers like Chromium are also a good example of the kind of modern software which doesn't work well with the debian release model, because it's "unsupported and practically broken" in like half a year. That's not true for the "make" utility, or for gimp or inkscape or libreoffice or audacious or countless other useful applications and tools which are not browsers.

I really don't like the fact that modern browsers are a crazy-train and there's just no getting off it.
Google also supports U2F
Bankers love the Democratic party. Why wouldn't they? Bill Clinton ensured derivatives would never get regulated in the same way stocks and bonds are.
"Safety of this product has not been determined"

No thanks. Nothing is worth risking my eyesight.
My experience in Shanghai/Suzhou is very different fortunately. Not very long days if not needed, high salaries and quite a bit of freedom. Very Western feel while we work with Chinese companies with no Western employees.
Neat concept, great cause!

How's the location resolved? Then how you resolve the location to a district?
Mobile App Development India – 360 Degree Technosoft Spotlight
If everything is done server side, sure.
No. The copy of SMF was SystemXVI.

* https://news.ycombinator.com/item?id=10212770

* https://github.com/ServiceManager/ServiceManager/blob/master...
It always has been. Think back to Bell Labs. I think it's simply a sign that AI has matured to the point where it is widely useful and applicable.
SQLite and Android N
Pi-top like laptop with your choice of pi3 or BeagleBone running Linux. The performance of a pi3 is actually decent. It's not perfect as there's a GPU BLOB in the pi3 and the BB also has some issue. It's my compromise for now, hoping the blob will be reversed/replaced eventually.

Or anything that runs libreboot: https://libreboot.org/docs/hcl/

If OpenBSD runs on it that's also a good sign usually as they won't touch anything with BLOBs.
> I never update software that works

This is such a terrible mistake for a browser. You're missing vital security patches. Never browse with an out-of-date browser!
Does anyone know where we can find out more about what the AWS roadmap in this space is?

Based on https://aws.amazon.com/machine-learning/

It seems like some of the competing cloud offerings might be slightly ahead in Machine Learning / Computer Vision type stuff out of the box, but I would be AWS has a plan to do more than catch-up.
This is pretty shocking and should be more widely publicized. A government agency covertly spying on the public with no warrants, no disclosures, and a fundamental lack of accountability rarely ends well. Even worse, both parties and most of the state and federal government bureaucracy are in fundamental agreement about the need for a national security state, only disagreeing about some of the implementation details.

People in tech are in the best position to create some pushback on this, be it through lobbying as stubbornly single-issue voters, or creating some direct (legal) technical counter-measures. It's not that hard to tell which ones are bugged if you inspect the light poles closely, and threatening to imprison people who take pictures of public lightpoles would almost certainly create more backlash than they're willing to risk.
> 1) As per the article, to actually prevent ring -3 malware. The implemented signature is the best way to do this. If we could run our own "libre" code there, so could the attacker.

If the code can be updated by $company, then it should also be allowed for users to update it. It's the same as the UEFI argument (though you should use CoreBoot). If it was impossible to update, then it wouldn't be a problem from a free software perspective. From a security perspective it should still be free software.
I have no problem with companies doing this as long as they inform their employees that all web traffic, including https, is monitored. As a rule, never ever trust a device or local network other than your own. Bring your own device and use your own mobile data connection.

I worked at a startup that was acquired by a big company and subsequently had all manner of crap implemented including zscaler. They didn't tell us about zscaler and when I discovered this I let them know I was pissed.
I think this is time for AMD or IBM's POWER8/9 to step in. If anything a little good PR vis-a-vis the "rootkit nightmare waiting to happen in your server" would be nice.
"Science" really shouldn't ever be the problem. The problem is that people are bad at science. They draw incorrect inferences, they get tunnel vision on a set of results, they overgeneralizw results, they make bad assumptions...

That said, I don't really think itd be a good use of time proving that boredom can be good.