skysight-inc/HackerNews huggingface dataset:
The stuff from Microsoft unfortunately misses a large amount of malware.
Dang tells me that "joke" answers that don't add to the conversation aren't welcome.
The gold standard is now Apple MacOs or Linux. I've converted my parents over to Apple systems and no longer have to do any support for them, Apple products "just work". Worth the premium in saved support, in my book.

I use Ubuntu as my main OS, personally.
Glad to hear this.
Why wouldn't you just buy razors at once in bulk? I can't figure out why Dollar Shave exists.
But hasn't professional licensing and regulation gone a bit too far when driving someone in your car for money is supposedly illegal? What's the crime in that?
Here's a question I have every time I see "RCE" type issues, and I'm completely serious when I ask: what is the use case for allowing remote execution in your software? Why would you want to allow arbitrary code to be executed? Or am I perhaps misunderstanding this, is it some sort of break out of the program bounds which allows execution?
Xcode. A ton of great features but hopelessly unreliable and un-stable.

Here is to hoping that Xcode 8 breaks the cycle.
Execution and timing. Uber had a big advantage in being new & shiny just as the market was ready for it. They tried it multiple times and the first few it failed to gain any traction.
Nice work! Exciting!!
Chronic fatigue syndrome is in your gut, not your head
My intuition says that if your ciphertext after using a one-time pad is trivially compressible, it means there's a strong correlation between your plaintext and your key. It's an interesting thought.

Consider using basic modular addition of letters, with A=1, B=2 ... Z = 26. If your plaintext is HELLO, and you get AAAAA as ciphertext, then your key has to be SVOOL. If you look, that's just an inversion of each letter. H is the 8th letter of the alphabet, whereas S is the 8th from the end, etc. So, your one-time pad was incidentally a simple translation of your message.

I'm not sure if there's any interesting information being leaked this way. Perhaps by seeing that the encrypted message can be heavily compressed, or knowing that it has been heavily compressed, you can assume that the encryption key has some very improbable patterns, and use that to bound guesses about the encryption key.

Not an expert. Not even an intermediate.
Wait, what???? People buy this stuff just to host code????

You don't need either of these for code hosting. Use git as intended by Linus.

If you really feel the urge to complicate things with a web browser, note that cgit is the high-performing repo viewer. Stay far away from Atlassian's bloated Java.
Clever Attack Uses the Sound of a Computer’s Fan to Steal Data
I think they recently are beginning to do Anti-Ransomware, though have no idea how good it is.
Yeah, I understand they wouldn't be convinced to release the source, but that's why I am thinking about a middle ground, to have someone volunteer to help organize it, while still keeping the code private.

Though I guess there's the question of trust... would have to be someone they knew very well.
Actually that is a pretty good idea
The question is: Could the exec team haved have lived in that state?
At least it is only McAfee Security Scan which don't seem to have the kernel stuff.
Premiere Pro and Photoshop has improved a lot over the last few years. But it's let down by the crappy Creative Cloud app which does weird stuff such as suggesting updates that have already been applied. But it's hard to find a better alternative for some of their apps.
I work for a Fortune 500 company who just switched away from the product mentioned in this article for one which I'm sure isn't much better. Besides the overall performance impact, we also have a daily virus scan that runs at noon on every system. Don't normally take your lunch at noon? Oh well, you certainly won't be getting any work done.
Steal the Best (1999)
I spent a long time learning XSL/XSLT. The theory was we'd represent the data on a web page with XML, and then determine how it's to be displayed with XSL/XSLT. I think browsers still support it, but it never caught on.
To be honest, Mac OS X do have things like Gatekeeper.
A ban on LTE over 5 GHz seems a bit heavy-handed and prone to allowing further abuses (as some dude on IRC said about something else, it's like trying to kill a mosquito with a chainsaw: you end up all bloody and probably don't even get the mosquito).

I think the real objectionable part is the requirement that the 5 GHz band be restricted to "licensed-assisted operation", only as a secondary downlink for a system based on a licensed band. A rule that any system using unlicensed spectrum shall not depend on licensed spectrum would block the existing LTE-on-5GHz plan and either get the whole idea scrapped or get mobiles that can work entirely on unlicensed spectrum into the market, opening up the possibility of private LTE networks on unlicensed spectrum.

Given how important centralized choke points seem to be to the 3GPP architecture, I tend to suspect it would just chase licensed users completely off the unlicensed spectrum.
While it's interesting to look into chorded keyboards specifically, the take-away for me here was more the general idea that it's not terribly difficult to come up with interfaces that are objectively more effective than the status quo by a pretty serious margin and still completely fail to achieve large-scale uptake.

On the other hand, I believe there's lots of room for improving on the status quo in a way that isn't necessarily intended to ever supplant the conventional alternatives, just focusing on some subset of users who have a good reason to be willing to invest a little more time in becoming more effective. (This is part of the process that led me to design my own custom keyboard.) If you look at Emacs or Vim users, it's clear that some people are willing to spend a lot of time learning skills that improve their efficiency.
Ridiculous how well this actually works. The target market is gamers but I use it for business.
Porque no los dos?

Having and hiring your own expert to negotiate helps.

But shining some very bright sunlight on practices and abuses helps as well. The more Amazon (and its recruiters) hear "I don't work for assholes", the better.

Markets rely on well-informed participants.

Also Microsoft. And, on different grounds, Oracle. And Google, Intel, Cisco, and Apple ("anti-poaching" market collusion -- the case is still ongoing AFAIK, though I've not been following closely).

I've many reasons for avoiding the industry, but these are among them.
In my opinion the bar is set much too high for the "Root CA death penalty". There has really only ever been one case:

https://en.wikipedia.org/wiki/DigiNotar
Mobile Stroke Unit
Only one major case. There are other minor cases too, but mostly affecting less commonly used small CAs.
What’s the deal with online journalism? (A: Can't measure story impact.)
A startup is usually the most willing to give a good deal for their first "big" (ha) order

So, usually you are just getting a startup's best offer to a startup box company.
There's always somewhere harder to settle. There's always some new creative contraption that needs to be built.
Obviously Evernote is going down. They just want to force ppl to pay. Reality is, note-taking app is a commodity. So easy to find a replacement.

Good luck struggling Evernote ....
Maybe in a conventional ecommerce company but monthly boxes are infinitely easier to manage ops-wise. You only have a dozen or so SKUs, know exactly how much you need weeks in advance and have months to plan everything out.
Or you could just use a self-hosted open source analytics platform, and not worry about the cacophony of bullshit you just mentioned.
I tried the newb pack not too long ago... the experience was too clunky for me. The graphics packs are nice but they always feel incomplete... and even when I had this nice visualization (in a separate window...) it would frequently crashed and I really wished taht I could interact with the game with it.

Yes, they're artists and this is their art, but software rarely -- if ever -- exists in isolation, yet DF acts like it does. You've all these nerds with too much time on their hands building all this ridiculously complicated infrastructure just to play the game in a way that is more comfortable, when instead the DF guys could simply allocate X amount of time and then be done with it. And this isn't a demand that the DF guys make the UI better, just a wish that they would put in a minimal amount of effort so that the community could hook in their own GUI code with a minimum of fuss.

Besides, I write code and debug fussy computer shit all day for work. Games shouldn't require that kind of advanced hackery just to play.

And who cares if they're artists? Neither the artist nor his art are immune to criticism (or, wishfully thinking, critique).
I see the humour in it, but Amazon calls it a "reusable" good.
The point in the article about thinking too broadly is a subpoint of the larger point about the hubris of believing we can solve faraway problems that we've never seen up close. Both focusing on the local problems that we can see up close, and getting out there and seeing those faraway problems up close, could arguably be antidotes to that hubris.
Looks absolutely beautiful. Any countering arguments from locals?

It's been on my list to visit and hike for a while.

I feel like a directly included list of sample places to rent to live/work would be good. Some of the links off to supporting information are a bit small and easy to skip.
Oh, I didn't take it as criticism. Was just slightly amused :)

Not sure the specific situations I mention can be fixed by Rust (or any language), those are design issues basically.
I have the Facebook messenger app on my iPhone and it works pretty well. I still get a full day out of the battery.
So broken. I'm not involved in academia, so the most I can contribute are upvotes here and there, and giving respect to those who push against the current.
Servo, the Parallel Browser Engine
Not everyone defines themselves by what pays the bills, plenty of artists do menial jobs to make ends meet. How they pay their bills is a bad measure of who/what they are, you shouldn't reject someone's self definition because you want to judge them by how they make money. You are not your job.
Pythonista: Python IDE for iOS
Thanka dang. I'm curious if the HN software has flagging ring detection in the same way it has voting ring detection.
Primarily what I allude to in my initial comment, it indicates that they are in possession of specific user information. As I also point out above, I have no idea how informed the users would be about that.

I guess that might not meet all definitions of reasonable concerns.
Facebook says it’s not making friend suggestions based on your location
> This is just another example of how the browser should have been built as an OS instead of an app.

That makes no sense. Should Email be an OS? Should IM/Chat be an OS? Hey its 2016 we don't need to dual boot, we can run VMs.

So everything is an OS into and of itself, nothing interoperates with anything else, and you can say "Look MA, no RAM".

ChromeOS is the closest we have to the idea of "the browser should have been an OS", and frankly its a fucking terrifying idea.
"Apple Computers Don't Get Viruses"

Still a very common misconception, however it's fair to say that macOS is still much "less likely" to be infected because of quantity.

Yes, there are now drive-by packs, crypters and RAT's that include OSX as a target. But the ratio for infections would be vastly lower.
Younique Lashes New Mascara Mood Struck
As it happens, the first hit for that search is Yelp. Do you find this helpful?

https://www.yelp.com.au/search?cflt=taxis&find_loc=Mountain+...
Yup. Chemical reaction to create hydrogen and had it fill a balloon over lunch. One of the other students got to explode it with a match taped to a meter stick. I could feel the air rushing by when it exploded. It was also quite loud but no big fire ball or anything.
What form of combat was this? It sounds as if they were dogfighting, something that is more myth than reality these days. Fighters fight but they don't engage on the equal terms, the duel we see in films. What were the BVR conditions? Was this a missile fight or with cannons?

The concept of two flights approaching each other, seeing each other, and not engaging until they are in dogfighting range is silly. To get two modern fighters close enough for a proper turning fight at least one side will have to be taken by surprise. Otherwise, the long-range missile fight will either decide the matter or place one side in such a poor position that they will withdraw. (Either they are down or will have so reduced their energy that a turning fight isn't an option.)
In this case, things like SmartScreen and Windows Defender was introduced in Win8.
Show HN: Reddit Imgur Uploader
Wow，I've heard slippery slope arguments before, but this definitely takes the cake.
I see no reason why the secretary example isn't complete overreach.
I know of no difference in the performance of the line card once the call is set up (as in I can't hear any), I do know what the subscriber hears from whatever announcement trunk generates permanent signal does sound fuzzy as hell (think ringing/wooshing S's).

If you wanna hear an interesting recording call 425-226-0000 - notice the lack of supe at the end of the call.
Do you have try this in China internet?
As we know, China has a more complicated network.
UDP packets have a large loss.

If it could work better than ocserv, this vpn will be a milestone.
Also, only the fool thinks nearly all art is worth it, or that nearly all art can be "spiritual". Art is 99% crap and 1% gold -- whether music, or the visual arts, or the performing arts, or code -- and DF is one of the few cases in my mind that lands in both categories.
340 billion billion billion billion: possible ip addresses with ipv6
Thanks! It's far from perfect...I'm constantly working to refine it.
not always prime: try n=3 or n=5 or n=6 or n=7 or n=9 or n=10 or ... fun fact: all of these counterexamples have been divisible by 3 or 5.
The question is: Could you have hired that exec team if it wasn't going to be based in NYC?
Google Expeditions
340282366920938463463374607431768211456 to be precise
It looks like the best option is just to get rid of the dropbox api in any existing code and use Apple's new Document Picker instead. It's just a few lines of code, and users can still select dropbox as a provider.
Uber lacks the safety precautions taxis do, and they're leaving cities who mandate the level of accountability taxi companies have. AirBnB customers have reported heavy amounts of racism and bigotry, things that wouldn't fly very far very fast in the hotel industry.

Regulatory subversion is what gives them the margins to operate, and if a few people get hurt or discriminated against, I'm pretty sure Uber and AirBnB are okay with that trade-off.
It comes pre-installed on many machines, and the mindshare is large.

I also attempted to remove Norton from a friend's computer a few years ago. I failed and later discovered that was actually unable to be uninstalled. Norton published some instructions to let you remove parts to the point you could ignore it at least.

I swore to never to touch anything from Norton/Symantec ever again.
I bought ESET/nod for a few machines but now I rely entirely on Windows Defender for the few Windows machines I own.
I feel like the only way anything you want is going to happen is in DF2.
Very true. But from another perspective: even someone with the patience to sit through a grammar course will only learn about the colon in theory.

This tool allows a player to see a colon being used, wonder why, learn why (explanatory videos coming soon), and then use the colon in practice.

Learning by doing is much more effective than learning theory, in my opinion.
Bernie Sanders: Democrats Need to Wake Up
The HiMAT basically demonstrated this. Unfortunately there doesn't seem to be much information online about the program, however some books I've read note that the program was a success.

http://www.boeing.com/history/products/himat-research-vehicl...

Rudimentary fuzzy logic in this kind of platform should be able to defeat a human pilot regardless of the pilots cunning/unpredictability/other human aspects which movies trump as superior human features. But, practical requirements such as range, payload, loiter time, pork barrelling may mean that the platform is otherwise compromised.

Additionally in an era where things such as airborne lasers are becoming a reality, the whole meta may completely change.
Signatures are definitely not hashes. They usually match families of malware or methods of obfuscation. Nor do any respectable AVs scan after something has started running...

AVs usually upload suspicious files from user PCs for further analysis to help aid in discovering new variants/types. The odds your AV has seen it is proportional to the odds of you running into it.

The industry is moving away from signatures regardless. Now AVs use runtime heuristics to spot bad behavior of executables and block them even if they've never been seen; Cylance literally only does this and it's pretty effective.
How does WireGuard deal with private keys on smartcards or other HSMs ?
Open source doesn't really preclude that. They would still have control over committer rights. There are plenty of open source projects in which the majority of code and decisions are made by a handful of core contributors.
Right. Plus, grammar is only one component of concise writing. Many of the original writing samples in the game are grammatically correct but still terribly lousy.
Someone said tmux above.
How to deal with frequent disconnects of 3G USB Dongle on Linux Desktop
> Uber lacks the safety precautions taxis do,

Name those precautions and how exactly they relate to safety.

> AirBnB customers have reported heavy amounts of racism and bigotry

Millions of people stay in AirBnBs and the vast majority of them have positive experiences. There's no evidence of rampant racism or bigotry and any host who acted that way would be kicked off the platform.

This continued insistence that Uber and AirBnB are categorically inferior to legacy companies and only profit by skirting (useful) regulations is ridiculous. If taxis were better than Uber, why would anyone ever use Uber?
Any given _example_ of a random sequence may have less than maximum entropy, and so may be compressible, but a truly random sequence _in general_ will not be compressible. So you can make a compression algorithm that will compress random data in some cases but it will never be able to compress any arbitrary random data. Does this help?
I never got my head around using Vim rather than an IDE, but I can say I genuinely enjoy git. It's very easy to get a lot of value out of it without needing to learn the esoteric details by just keeping to a simple workflow planned out by someone who understands it better. Of course, it was the first version tracking system I'd worked with, so I have nothing to compare it to. It just made me incredibly happy after working on a very large system with no version tracking beyond a boatload of comments referencing a date and ticket/project.
Put Down the Phone and Step Away
In United States of America, government owns you.
Do you mean MacKeeper? GateKeeper is Apple's software that prevents you from installing non-verifed apps, MacKeeper is (from what I can tell, haven't installed it or looked at the site) spamware.
"I'm now convinced there's 'one easy trick' to becoming a 10x engineer and that's quitting your job. You learn out of necessity when you have few resources and no fallbacks. It also seems obvious now in hindsight that the surest way to realize your full potential is to work on your own terms building something you care about."

I couldn't agree more. I see a lot of engineers in startups that claim to have X years of experience, but when you read their code, it more like 1*X years of experience. They never progressed passed the 1 year point because they were doing the same things again and again. Most of the time it was not the correct way either but because they have repeated the same process so many times, its the only ways they knew and naturally accepted it as is.

The best programmers I have seen are always those that worked on their own project with very limited resources. You are force to learn and do things out of the box this way. It's definitely a slow learning process but for me, just thinking back on how much I have learnt (and be able to utilize my knowledge correctly) in the last year is mind boggling.
Actually, I believe birchbox does heavy customization and tailoring of boxes to individuals.
From over here in India it looks pretty good.

In spite of the radically different culture, Uber has improved transportation. It turns out putting Indians into a car and charging them money works a lot like doing the same for Americans.

Facebook and Whatsapp have improved communication.

At work, Slack, Salesforce and Jira work the same as any western office.

Why, exactly, do you think other cultures and the global poor can't use SV technologies?
Ceiling. Unless you have a pendant light, residential ceilings are usually entirely visible from all points (well, unless you're under the coffee table...)
You said that WireGuard was not "a real candidate for the case you're talking about", and I explained why it being (eventually) widely adopted for that case is both possible and desirable. I don't see much point in arguing over what tptacek meant.
You’re as ‘foreign’ as us, Uber tells Ola after xenophobic attack in court
It's considered obvious now, after the CRIME attack was published, but 15 years ago everyone would have said that you obviously should compress first! (I remember this being asked as a homework question when I was in college, with "compress first" being the intended answer.)

Indeed, I think the conventional wisdom was that compressing first would in fact improve security a little bit. This idea goes back all the way to Shannon in 1949, who noted that compressing before encrypting should improve information-theoretic security, because if the messages contain redundancy, then an adversary with infinite computing power can use that to decode the message. (Just try all possible keys, and see if it decrypts to an actual English sentence.) On the other hand, if you first compress using an ideal compressor, then every compressed plaintext will look the same (just random noise), so every possible encryption key will produce some plausible plaintext.

[1] http://netlab.cs.ucla.edu/wiki/files/shannon1949.pdf ; see sections 16 - 19.
>He's saying that what techies consider to be "problems within their domain" is worth some introspection.

But couldn't that lead to exactly the sort of arrogance that Maciej argues against? That engineers think their ability to solve tech-related problems means they are specially equipped to solve more complex problems in society?

For example, if some sociology major who had no programming experience tried to advise me on a challenge I have with some software I'm working on, based on something they read in Wired, I'm probably just going to roll my eyes. Frankly, it's pretty unlikely that someone who no background in the field I've dedicated my professional life to studying, can provide useful advice.

Likewise, do you think an engineer can provide useful advice on how to deal with poverty to a sociologist, one who has spent their career studying this issue? Do you really think the secret to improving society is to have a bunch of techies telling sociologists and economists how they think things should be run?

Maybe the right thing for techies is to pay their taxes, and participate in local elections as informed voters. Other than that, maybe we should stick to tech, and leave running society to the professionals.
A non-compete doesn't stop you from disclosing secrets. That's an NDA, which no one is complaining about.
Data Visualization and D3.js Newsletter Issue 189