skysight-inc/HackerNews huggingface dataset:
So I am still reading through their Linux container security paper, and I like their stuff, but who are these NCC people? In the last few months I have seen multiple postings on their papers and blog posts, seemingly out of nowhere, never having heard of them pry to the container paper.
Can Giraffes Swim?
They probably solved the issue by pulling someone else's plug out and putting yours in.

Repeat every few weeks until number of customers drops under number of available ports in router/switch/gizmo.
The best way to make sure they (we, since I work at Microsoft) get the feedback is by finding out where the product is listening.

A lot of products have UserVoice set up, a lot of dev product teams (dotnet, asp.net, etc.) are looking for GitHub issues.

For Windows 10 I'd recommend using the Windows 10 Feedback Hub - if you hate something about Windows 10, post feedback in the Feedback Hub before you uninstall it.

Visual Studio has this page that explains where best to submit feedback / bugs / feature requests: https://msdn.microsoft.com/en-us/library/b8akas30.aspx

There are lots of us who see your comments on HN / Reddit / Slashdot / etc. but having been part of the Microsoft ecosystem (both inside and out of Microsoft) for many years, I can tell you that there's a huge difference between "I've seen some unhappy comments about X" and "Our feedback numbers show 68% of users want us to improve feature X". Also, specifics are important - a detailed issue report with repro steps and recommendations for what you'd like to see work a whole lot better than "@drunkvs LOL VS suxxxx ikr!!!"

Also, just because I'm an ocd fact checker, Ballmer technically didn't say "open source is a cancer". He said that Linux is a cancer, referring to the strong copyleft license requirements (https://web.archive.org/web/20011211130654/http://www.suntim...). [yes, I very well know that you can run software on Linux without that software being GPL. I'm writing this from Red Hat DevNation :)]

Regardless, I can tell you that our current CEO and everyone I work with is excited about writing great software that runs everywhere.
Node.js Version List
Those surveys include all of the US's massive rural areas. In urban areas there's more choice and much higher speeds. 80% of the population lives in urban areas.

I think its important to keep that in mind when reading surveys like these. Just because some guy who chooses to live in the middle of nowhere gets only 1.5mbps DSL doesnt mean I can't get 100+mbs in urban areas. I'm currently on a 100mbps in Chicago with AT&T and Comcast soon releasing their consumer-level gigabit fiber product. Other cities have the same or better, like Kansas City's Google fiber.

Its dishonest to say that high-rise renters in urban areas should think 10mbps is competitive. Its not remotely so.

This also cuts both ways. I know a building serviced just by RCN and every tenant gets 100mbps and a bunch of channels for a good price. Its a mixed bag, but usually leans on less competitive products.
Not necessarily. It might actually store multiple versions of your password as A.....B...C (where . means some known-to-them character, basically salt), ..A....B.C., etc, basically all the combo-of-3 templates encoded as PWs. Then it asks for one of them and recreates the template before comparing.

Still crappy entropy, though. An eight char password has 56 combinations of 3 positions each, so with N character choices that's 56 * N^3 vs. N^8 the normal way. Gets much worse in comparison with longer passwords.
What's important in a generation where technology is everywhere, is to find the ingredient that actually makes humans intellectually satisfied, happy and productive. The economy and politics of this "system" is secondary to building it in such a way that it nurtures humans' actual well being.

I'd like to see out-of-the-box thinking when it comes to building a system for optimal well being. For instance, are we sure that our common model for a city, where people own housing, and are almost always surrounded by strangers apart from their small group of family/friends, is actually an ingredient for optimal quality of life?

Why not experiment with humans living in structures resembling tribes, which is really what our human intellect evolved into for thousands of years?

Again, in a world where we don't have to worry about issues that we had to worry about in the past (food, shelter, security) and instead we're looking for ways of being intellectually stimulated, I envision group sized sections where people actually live together. The model of european hostels really resonates with me, where strangers actually get to live with one another.

Of course current cities have hostels and have ways for us to live in structures resembling tribes, but the important bit is that we make it part of the culture so that newborns consider this way of living the normality - rather than the normality being to own a house just for you and your family.
Oy.

That reminds me a bit of the SPUs on the PS3 where you had only 256kb of local memory and had to DMA everything in/out. How do you deal with MMUs? Do you just manually map each DRAM bank to a specific task and not even try to share them?
To list a few of the advantages of home ownership:

1. tax write off on interest. But with interest rates low, that is not as usefull as it has been in the past.

2. A few states such as texas, have some additional asset protection on your primary residence in case of bankrupcy

3. homstead exemption on property tax (approximately first $100,000 property value), varies by county.

4. property tax freeze above age 65.

5. some capital gains exemptions for primary residence.

but a store of value is a store of value. Would you be ok with people buying treasury bonds as a store of value ? Or would you incentivise higher risk investments, how ?

Also, private schools, golf and tennis clubs also price out a lot of people. Not too different from zoning restrictions.
I have an Hauppauge HD PVR2 "Gaming Edition", which now costs about $135 and I can recommend. The only downside is there's a long "boot time" after you first tell it to record video (don't expect to just hit a hotkey and capture video 2 seconds later; give it more like 10-15.)

For what I'm using it for, latency doesn't matter much. I'd estimate it has about 1.5-2 seconds of latency, but I've never actually measured it.
People are moving back into a few select downtowns that are being rapidly gentrified. They are not a typical case.

As for the zoning question, it's probably the result of busybody town governments trying to control every aspect of the city lest some developer ruin their perfect vision of the city. I can guarantee that if you propose to build a big shopping complex in the middle of the city you will have people out to protest for all kinds of reasons. They will protest because it will raise their land values (and taxes) too much and force them to move. They will protest because it will bring in people and ruin their "quiet" neighborhood. They will protest because it will affect local water prices. This is how a lot of regulation gets started, because someone is trying to prevent something from happening to their backyard.
Serious question: What do you define art to be? I've taken some introductory Art class, but really never got a clear answer of what art is. How does art differ from kitsch?
Thank you. So it is correct to think that such orderings are ~toplogical in contrast to the our ~geometric intuition?
> How do you deal with MMUs? Do you just manually map each DRAM bank to a specific task and not even try to share them?

Pretty much.
Same here. It's seems to me they're trying to spread F.U.D., but I would love to read more if it's backed up.

On the flip side of the coin, some typically conservative media tried to use Google Trends to prove manipulation of instant search results to be pro-Hillary [1], with the same results of not really undestanding how instant search really works [2][3].

[1] http://www.breitbart.com/tech/2016/06/10/google-burying-anti...

[2] http://www.vox.com/2016/6/10/11903028/hillary-clinton-google...

[3] https://googleblog.blogspot.com/2010/09/google-instant-behin...
ZFS: The other new Apple file system that almost was–until it wasn’t
NCC = matasano + iSec + intrepidus group

:D
Mirror: http://webcache.googleusercontent.com/search?q=cache:aIqxi8A...
Cool. Now only to find an Apple Laserwriter in my neck of the woods. Haha.
Comrades the left are no good at being themselves anymore.

As somebody just slightly to the left of Moldbug, I say we pivot to take advantage of this gap in the market. With Biotech We Can Have Soviet Combinator Startup Make You.

To the Command & Conquer Soundtrack of course.

https://youtu.be/MEc1Dq3sh4U
Now? Go shop around ESO fund, snow ventures, standard VCs, angels, etc and ask them to make a deal to help buy out your stock. If they say no, maybe your company isn't doing as well as you think it is or your company is too small.

Usually these founders give you the standard 90 day agreement and are not Uber-level aggressive in trying to prevent these kinds of deals.

Later? Don't work for those companies or do the math. If you get RSUs then it's somewhat equivalent to getting those 10 year options anyway.
Despite not being a huge Go fan myself, I do appreciate this aspect of Go's database/sql and sqlx packages.
This is the book I am referring to.

As for ghostscript, good point. Is it used enough even on the printer side to be exploitable, or you mean exploiting clients sending print jobs? I don't follow 100%.
Any statistical information can be used inappropriately, so it's only logical that it applies to google trends. We seem to be wired as a culture to take stats at face value, myself included. This is a nice cautionary tale.
Disable the "Windows Update" service. Problem solved.
Thanks. That explains some things.
I got in to see it, basically you dump some string of text to this api with your api keys and how much you want to pay for the painting and then once the artist confirms that you want to buy the painting they make it and presumably ship it to you.
Well written article! I always find it funny when the media claims a majority with their wording when in fact it is an extreme minority.

Like those afflicted with H1N1/Bird Flu/zika/ebola etc.. all are dwarfed by people that die every year from the common flu and yet the news portrays them as epidemics to drum up viewers for a week or two.
I have trouble attaching the idea of "Empathy promotion" to any kind of technology. Example: "Guns promote empathy because they allow us to kill edible things and protect our families". I think people promote empathy en-mass through our "cultural" assumptions first, "technological empathy" is a secondary extension of that ... imho
To be fair to the original point, one could argue that sticker price of rent is more sticky than the imputed cost, and so this is a sneaky way of raising rent that doesn't reduce demand as much.

But that's a more complicated case to make than "kickbacks therefore bad".
Woke up one morning to a very hot Thinkpad in my bag. Windows 10 did exactly that. Extremely frustrating.
I switched to Safari's reader mode to subvert that unreadable design.
Yep. Don't vote and nobody will care about your (unexpressed) needs when making decisions.
I don't have a list handy, but Wikipedia does:

https://en.wikipedia.org/wiki/List_of_dystopian_literature#1...

Not all of these are "corporations grew too big and absorbed all of the worlds governments until they became a tyrannical overlord", but many are.
I deplore this kind of question. What value does this bring to you to ask it?
This sounds a little snarky, but I mean it sincerely.

Unfortunately, I'm not sure how to define the notions of "approximate topological-ness" or "approximate geometric-ness" of an order in any rigorous way, so I am reluctant to answer the question. I would agree that trying to fit the order on the surreal numbers into an existing geometric, or even probably topological, intuition is likely to fail. For me, the order is in some sense a combinatorial construction; but I don't know any way to make that rigorous other than that the definition is game-theoretic, and I think of game theory as a particular kind of combinatorics (as probably no specialist in either field ever would).
Odd it worked for me without any problems
> The US is a single country that started with a blank slate

The US started as 13 colonies with quite different cultures and economies, and barely even the same language. It was not at all clear they would ever unite as one country, and wound up fighting a bitter and bloody war over their differences.

> The US became an economic superpower not because of free trade but because of protectionism.

I've heard a lot of reasons, but never that one. If protectionism made the US prosperous, why didn't the embargo have that affect on Cuba?

> free trade and the like when it is they that stand to benefit from it the most

Free trade benefits both parties equally. Otherwise, they wouldn't trade. Free trade is not forcibly taking things from others.
Yes you can. I see it in SF, all the time.
Oh man, fun times.

Thanks for the insight, seems like an interesting space. I've done the 8-bit micros which are somewhat hard-realtime but never something at a larger scale.
Wages in Amsterdam are lower than London, but the Netherlands have a great deal for ex-pats: the so called "30% rule", which means that you only pay tax on the remaining 70% for the first 8 years there. So your take home pay can be really good (and it has other benefits like a good healthcare system, free education for the kids, etc).

Also, if you want to start a start-up low wages are actually a plus...

(Source: I started a startup there and have several employees on the 30% rule)
Heavybit's June 27th DevToolsDigest
AFL usually requires you to write a "driver" for the program you want to fuzz. The driver does two main things:

1. Take a binary blob of input and pass it to the program somehow.

2. Record execution path traces into a shared memory section.

You could likely modify the Ruby VM to record path traces, and handle the binary blob in Ruby code.
> There is no concern for how many shares we granted in the past to other employees or whether or not they are still holding them; the only concern is the current market... it would be irrational not to increase the option pool if that’s what was needed to be able to hire someone.

This is the part of this post that I can't believe is true. At the end of the day a company only has so much equity. How can the amount you've given out be of no concern in issuing stock to new employees? Isn't that tantamount to saying equity isn't scarce? When does the amount you've given out become of concern and in what context? If the answer really is that the amount of equity you've already given out never becomes a concern to any aspect of your company then why would you ever limit the amount of equity you give to employees?
#wellactually We don't talk about ASP.NET MVC as a separate thing anymore. It's just ASP.NET Core. So you might build an MVC app on ASP.NET Core, or build APIs on ASP.NET Core, etc., but it's all just ASP.NET Core.
https://docs.google.com/presentation/d/193UcK-0Ec185Pf_WZNNZ...

http://civichall.org/civicist/defined-by-the-filter-bubble/

May help with English context.
If 80% of the US population lives in urban areas, and 50% of the US population only has one choice for 25Mbps service, then that means at least 37% of the urban population only has one choice. If 72% of the entire US population had at most two choices for 10Mbps, then that means at least 65% of urban dwellers do.
>"Cease this chicanery at once! You must refund my monies..."

This is incredible. Any other emails you remember?
That's how I got 6/6 as well. It's less about the actual words and more about if the poem was actually talking about anything coherent.
Instagram Killed Hyperlax
It's trivial with music, and I don't think that DMCA violations count as "piracy" as such. The biggest argument ethical argument against piracy is the theft of someone else's work. If I've paid for it, that's a solved problem, as far as I'm concerned.

And anyhow, I don't have any appropriately-licensed media playback software on my machines. If I want to play something back on something besides a dedicated hardware player, then I'm already violating the same sets of anti-circumvention laws.
Final Blow: ALGORITHM INTFACT
I've taken to using seperate Chrome users to split personal / work, which might be a useful workaround.
Your comment is ridiculous to the point of lunacy. And it's far too far removed from the subject matter for you to try to claim some argument ad absurdum crap. The fact of the matter is that, in that situation, you still had the gun pointed in someone's face.
Netgear router Web GUI password vulnerability
> We would need to stop the trend of having a small number of large stores and move back towards having a large number of smaller stores.

This would be highly inefficient and result in higher costs of goods and reduced options for consumers.
This is very true. I actually wouldn't mind adding this to the article.
Glad to hear it. As mytummyhertz said, NCC Group (where we both work) is made up in the US from iSEC Partners, Matasano Security and Intrepidus Group consultancies (who were all purchased by NCC Group in the last few years). In the UK it's primarily NGS. iSEC Partners/Matasano/Intrepidus Group/NGS have published research/security presentations/tools (sslyze) etc for years.
Extra Mass on Bike Wheels Is Worse than on Frames
White House warns Congress not to kill net neutrality and cable box rules
Show HN: DynaMix – A new take on polymorphism in C++
The PHP Security Platinum Standard: Raising the Bar with CMS Airship
I don't really understand by what mean the financial centre will move because of brexit. London has been a financial centre way before the EU even existed, and the bankers do not need to be located where they book things. All banks will need to do is to open or buy a bank in the EU and book their activities there. Some staff will have to move, most won't. If traders or asset managers have to choose between living in London vs Zurich, Luxembourg or Frankfurt, you can bet they will prefer London because of the language and quality of life. Many financial institutions are based in Delaware in the US, but are really ran from New York. Is Delaware really a financial centre competing with New York?

There has been a lot of fear mongering going on in this campaign (on both side) and I would take with a big pinch of salt the catastrophic forecasts of the world post brexit.

Disclaimer: I work in a bank in the UK.
Microsoft restarts because updates are in files that are "locked" and can't be switched-out until the system is rebooted. After you install the update, but before you reboot, your system is still running the old known-buggy code.

Linux doesn't lock files; instead it creates in-memory copies of them. So the updater can update the on-disk version without any troubles. But if you think about it, it has the exact same problem: until you reboot, your Linux box is still running the known-buggy code.

So there's absolutely no technical reason Windows needs to reboot more than Linux. The only difference is that Linux developers decided "meh, the user can reboot when they want". But unless you reboot after installing your Linux updates, your computer still has the bugs.
I am an American and so had a previously existing account with Amazon.com. I had it shipped to a friend at a military base in Frankfurt and I just popped down from Berlin to pick them up once I had a small stockpile.
I'm working in Antarctica and we BARELY caught one of our science systems a couple hours before it was about to kick off that stupid auto-upgrade. It would have broke a very expensive and custom box built to run these experiments, which was transported down here at great cost. If I hadn't been wandering by checking on something else I'd never have seen the window and it would've wrecked some poor grantee's years and years of work, just like that.
Introducing #Stickers on Twitter
No, it's because people with a car centric viewpoint push solutions that prioritize the car to the exclusion of other things, making cars a requirement.
Ah, yes sorry. I've heard this advice given often for the "Windows 10 problem", but given to users who definitely would never bother/know to update manually.
You've sidestepped the issue with your comment in a way that unfortunately just confirms it. But let me try to answer these concerns.

As I said, there's no defense of militarism in asking people not to post ideological rants here. If that weren't true, it would mean there is no civil way to state your view. That would be a rather strong refutation of said view.

Re my personal opinions: you're assuming that you know what they are and then getting angry at your assumption. That's a self-referential activity.

I know how tempting it is to conclude, when we moderate X on HN, that our politics must be anti-X. But even perfectly apolitical moderation, if it were possible, would generate the same reactions—more of them, actually, because there would be more Xs. So that feeling is not to be trusted. It's too easily explained by the simpler theory that none of us likes it when our own statements, or ones we agree with, get criticized.
If externalities are present, there is no general solution to the problem of optimizing either individual net utility or social net utility. Markets don't do it perfectly, but no other solution does any better, and in fact the most common alternative, government regulation, does worse on average.
It kind of is yeah. A new language is posted on reddit every day.
There is no guarantee that markets will figure some of these things out over useful timelines for individual humans.
You can hold those perspectives, but it doesn't change the fact that wealth inequality affects vastly more people than, by your suggestions, issues of sexual orientation and race.

I would even stand behind the notion that wealth inequality affects literally everyone, both the haves and the have-nots, while the other issues affect a minority, by definition.

I would also argue that it is perhaps advantageous to those minorities to rally behind the unifying cause of wealth inequality in order to maximize their political impact simply because if they focus on minority issues, their voice is diluted among the concerns of the overwhelming majority (which, in this particular case, is still white, in the US).
The world’s losers are revolting, and Brexit is only the beginning
I'm starting to have the feeling that those very early employees are about equivalent to an angel investor, and they should be getting some sort of angel investor equivalent terms.

Otherwise once people really start realizing the negatives of being an early employee vs. founding your own startup it would be hard to hire otherwise.
Primitive sets for Android
Note for others: had to click "text only version" to read
I can't recall ever hearing of a campaign for residents, as distinct from citizens, to have the vote in parliamentary elections. You were and still are free to become a citizen or even decline to become one and campaign for voting rights for permanent residents. Political change doesn't normally come from just asking nicely. It took a fight to win the vote for working class men and another fight, not just a war of words but physical violence, to get the franchise extended to women. I'm not saying you should start stockpiling weapons but you could at least do some campaigning.
Does anyone else think Y Combinator projects have been getting rather grandiose of late?
The other one is being busy "startupping" and not, you know, actually building your business.
Eat some food. Not all of it.

I honestly don't see how you think this is a reasonable straw man you've constructed.
"Anime (Japanese: アニメ), is Japanese hand-drawn or computer animation. The word is the abbreviated pronunciation of "animation" in Japanese, where this term references all animation." https://en.wikipedia.org/wiki/Anime