skysight-inc/HackerNews huggingface dataset:
You might not be as far from the cutting edge as you'd expect.

From what I've seen, fuzzing is divided into two major camps (I'm generalizing to the extreme here):

1. Mutational - These include tools like AFL, are gaining traction in the open source community, and have a lot of applications, perhaps most notably in library and application fuzzing.

2. Generational - These include commercial tools Defensics and PeachFuzzer, and open source tools like Peach, Spike, and Sulley. The state of the art is held by commercial offerings in this camp, and it's what businesses are more likely to be interested in.

My hypothesis as to the reason for this split: Open source hackers are interested in finding bugs. Businesses are interested in assurance that their software is safe ("safe"). Protocol-specific tools give the impression that we've done the best we can at securing IP/TCP/TLS/HTTP/etc. Defensics is by far the dominant offering (in terms of apparent popularity), and Peach is the only active competitor I've ever found.

The open source generational branch is moving very slowly. The primetime candidate was once Peach, now called Peach Community [1]. Unfortunately the corporate backer switched to a closed solution, and left the open source tool out to dry. The latest tool of note besides Peach is Sulley [2] [3].

Books: I haven't found any books that go below the surface. "Fuzzing: Brute Force Vulnerability Discovery" has decent reviews on Amazon, but I found it more breadth than depth.

Papers:

1. IMO the seminal paper on fuzzing is Rauli Kaksonen's thesis, "A Functional Method for Assessing Protocol Implementation Security." [6] This will take you almost to the state of the practice. Kaksonen was a co-founder of Codenomicon. Very interesting read.

Talks: If you want cutting edge research, conference talks and blog posts may be as good as papers.

1. 2007 Blackhat conference Sulley talk "Fuzzing Sucks! - Introducing Sulley Fuzzing Framework" [2]

2. Google Charlie Miller fuzzing. My favorite slide decks are [7] and [8]. High fives (and a beverage on me should time and space ever permit) to anyone who can find audio or video from the actual talks.

Shameless plug(s):

1. Due to lack of response on Sulley pull requests, I forked to a new project called boofuzz [4], and I commit to at least address pull requests more quickly.

2. I'll be giving a fuzzing talk at Defcon 24's Packet Hacking Village which will address, among other things, the state of open source fuzzing [5].

[1]: http://www.peachfuzzer.com/resources/peachcommunity/

[2]: http://www.podcast.tv/video-episodes/pedram-amini-aaron-port...

[3]: https://github.com/OpenRCE/sulley

[4]: https://github.com/jtpereyda/boofuzz

[5]: https://www.wallofsheep.com/pages/dc24

[6]: http://www.vtt.fi/inf/pdf/publications/2001/P448.pdf

[7]: https://cansecwest.com/csw08/csw08-miller.pdf

[8]: http://pages.cs.wisc.edu/~rist/642-fall-2012/toorcon.pdf
Love this, brilliant.
No, but if capitalism seems healthier and more popular to you today than it did in 1996, I want some of what you're smoking.
8 year olds should be protected by their thoughtful parents in these matters.
But it hasn't stopped paying in money, and the EU could easily strike a separate deal to allow continued participation in Horizon 2020 if it wanted to.

My point stands: the EU allocates research funding based on political concerns that have nothing to do with science. And that needs to stop.
Don't tell this the Scotts ...
That's one of the reasons I've stayed away from 'beta blocker' medications even though they're designed to tone down stage fright to a bare minimum. There are, from what I've read, potential side effects that can be rather severe. As in, some real unwelcome motor/cognition changes. That's enough cautionary literature to keep me away. Strangely enough though, I'm not anti-supplement (vitamins, PH stacks, etc) in the least.
> What to do...

Go find a small-shop, where you can learn and grow. Where they will appreciate your contributions more. And you'll have greater impact.

Be so good they can't ignore you. Incidentally, that path will also make YOU a future prime target for the Big Guys. Google especially is fond of acqui-hires >
> http://blogs.wsj.com/digits/2015/12/23/bebop-was-more-than-a...
Sharing your Netflix, or ANY online password is now a federal crime
There will be no monetary fine.
This whole page looks very sloppy. In addition to the weird name, the grammar is iffy and sentences don't sound native. The fonts are also off.

It makes me wonder if this is actually a Microsoft project.
Apple is obsessive about using every square mm inside of an iPhone case. I can definitely see them saying "that chip would take up room we don't have for a feature few people ask for", and drop it from the design.

The next version of the iPhone probably won't even have the headphone jack so there won't even be the possibility of using the headphone jack antenna trick. Not unless they engineer it into the lightning connector (ha!).
We're on the same page here. :thumbs-up:
This seems like an overreach of the government's power more than anything. And if anyone is to blame, it seems like the responsibility should be on the Youtube creator to do the disclosure and not Warner Bros(so they should fine "PewDiePie" rather than Warner Bros), since they ultimately broadcast the noncompliant material.

It seems like this happens in the newspapers all the time. I'm actually unfamiliar with the FTCA. I reread pg's essay[1] and I guess the main difference with sponsored content in the newspapers is that the reporters don't directly benefit from the sponsored content. I don't know - there's an awful lot of sponsored content on news sites nowadays, and I always imagined the reporters did it for the money.

Is it actually illegal to take money to publish sponsored content in a newspaper without providing a notice of this?

[1] http://www.paulgraham.com/submarine.html
Interestingly we can probably study that as in the US we have two cohorts already. Call it "Outcomes of law enforcement actions compared to net worth; a study of recidivism" or something similar.
Please note that this was before my link switch. Please go to http://hxxbit.vinci.cloud/2016/07/08/whatkilledsun/
Apple’s Swift Playgrounds can help you learn to code, but it’s no HyperCard
Astonishing. From "Pokemon Go sure is popular" to "we need more affordable housing and more redistribution of wealth". Is there a better demonstration of the fact that some people just can't help but see everything in the world through their tiny little single-issue lens?
Snake oil (cryptography)
Russia has NEVER had any kind of democracy, so Putin can not really have damaged anything that wasn't there. Russian people have, for many centuries, accepted only authoritarian rule.

On a tangent.. I am yet to find anyone who can actually give me an example of a working democracy. I believe the concept is flawed and either mis-used or abused by everyone who has ever used the term in a political (as opposed to academic) setting.
I talked to a senior diplomat recently. He said that when talking to diplomats from China, Russia, the US in the beginning of his career some 30 years ago, nobody asked about the EU opinion on issues. In the last 10 years, however, he never heard "what does Britain or France or Germany think about XYZ" but only "What does the EU think".

What some leavers don't realise is that the entire world had gotten used to dealing with the EU as a whole and that the world probably doesn't care that much about what Britain (or England/Wales) thinks about tariffs, terrorism, refugees, wars, human rights, etc.

Britain will have to follow the EU on many issues if it wants access to the common market.

Britain is going from having a very strong voice in a very powerful organisation that the world has to deal with to being a rather small country the world can largely ignore.
Google makes its money on the Cloud side --- Niantic's running its infrastructure on Google Cloud.

https://www.nianticlabs.com/jobs/
Free exchange of research money has no requirement to be connected to immigration or trade policy, these are unrelated things. Countries can easily collaborate on research without something like the EU, as evidenced by the number of CS papers I read that are for example USA/Israeli collaborations.

The EU is failing because its blind, ideological insistence on connecting lots of unrelated things together to make an artificial club (really: the beginnings of a new country). The EU's petulant "retaliation" is treated by far too many as a given, when in reality it is a policy choice driven by a quasi-religious devotion to an abstract vision.
May or may not be an issue for you - affects iOS only, if I'm reading this correctly.
There's a startup called Plugless that makes wireless charging equipment for cars[1] (basically a scaled-up version of the wireless phone chargers). The current version puts out around 3.3kW continuous - not quite that 20 kW, but in the ballpark. Perhaps that technology could be developed to suit that niche.

[1]https://www.pluglesspower.com/look/?jump=tech#tech-specs
How highways wrecked American cities
yes. the wording and the fact that other people seemed to agree with the op made me spend way too much time on this.
> if TTIP goes ahead it will be the only route to US trade deals.

That's just not true [0] [1].

There's been a lot of movement relating to countries being open to global free trade [2].

[0] https://www.washingtonpost.com/news/powerpost/wp/2016/06/29/...

[1] https://www.theguardian.com/business/2016/jul/11/brexit-is-a...

[2] http://www.theguardian.com/politics/2016/jul/08/business-min...
The Ultimate (SaaS) Churn Rate Cheat Sheet
"Fertility" does not necessarily mean "fit offspring", but your point stands.
Collateral damage?
Wait, you're telling me that a highly sensitive organ that maintains a complicated electromagnetic and chemical signaling system within a medium of fragile and compressed axions is difficult to tweak with grossly tuned omnidirectional fields?!

Surely, you jest.
More manipulation through bad statistics. You can't evenly divide by the population ratio to get a meaningful number. Law abiding citizens have fewer police interactions than criminals and criminals are disproportionately African American.

I hate to roll up statistics by race because it should never be used to judge an individual of that race, but this is what the mass media and BLM are forcing us to do. The reality is that there is no statistical evidence that one race is being targeted in police killings more than another.
NBC Universal patents a method for hunting BitTorrent pirates in real-time
It would also be nice to get the aviation band which is just above FM at ~120 MHz range.
Especially if you assume that the scientific method is always valid--that all true statements can be determined empirically--you can't make statements like "Ultimate Meaning doesn't/does exist". If Ultimate Meaning cannot be defined, it cannot be tested for or measured, so no statements about it can be true or false. The answer to meaning would not be false, but null (or maybe 42).

Just like 42, "atoms and the void" here is just a science-flavored attempt to answer a non-question.
Not available in Russia either.
There has been much talk of a big cut in that assistance - it is being seriously discussed now. Plus the setback in UI and cross-border job opportunities by a hard border. Combined, this will flame hardline republican sentiment (left of Sinn Fein), as well as loyalist discontent with setbacks. This would cause increased military presence from England, which would add more fuel to the flames, and things could easily spiral back into violence once again. Historically, these things tend to flame up every few decades in Ireland.
For the Perfect Jerk Chicken, Fly to Newfoundland, Then Drive Seven Hours West
Google aims to train two million Indian developers
1. It reads like she orchestrated these events, which is obviously not true.

2. If there's a problem with police and "race relations" in this country (which I believe is the case) it behooves us to address it.

3. I'm not aware of how Clinton is antagonizing Americans against each other over this.

4. Trump is not exactly a uniter, if you know what I mean.

Disclaimer: I'm a Berner who will vote for Clinton under duress.
European research projects I know about get their expenses reimbursed after the fact. For example, you buy some (potentially very) expensive equipment, claim the expenses in the yearly financial report and (if the Commission accepts your claims after review) receive money to your institution's account. That can be a year and a half after you had to pay for your equipment and in the mean time your research institute, university, etc. must cover it for you. I don't find it surprising that people are anxious to proceed with projects when there is uncertainty whether they will get their expenses paid in the end.
The lead author, Nicholas Christakis, is the man who was reviled by some students at Yale during the Halloween costume debacle: http://www.theatlantic.com/politics/archive/2015/11/the-new-....
Vox is everything that is wrong with late journalism.
I thing you are right.

Everyone should learn some basics, just to get a sense of what is possible to automate and what is hard.

Being a professional developer is another thing. To be happy and not feel miserable at work, you actually need to be rather intelligent in multiple ways, and in addition to that also really like it. A certain stubbornness is also required.

I have had plenty of colleagues that were awfully nice but some how never really got a grip of what they were doing. Most of them quit and some of them got administrative jobs which I think they managed to do rather good if perhaps not great.

I think that some people are just not able to keep all levels and abstractions in their head at once.
I'd like to tell him to stop telling me what I want.

And also maybe to recognize that cell data is expensive and overages can be punitive.
What would be really interesting is a service that would tell me the build status and code coverage metrics for each version of a dependency I use in my project (and each dependency they use their projects and so on).

Even more interesting would be something that would attempt to force code coverage analysis on projects that use a standard testing framework, have a certain amount of tests present, but don't have CC configured in their project.

At first I was thinking that is what this service did but it doesn't appear to be the case.
See, I was going to respond to your good point in a thoughtful manner, except you had to follow up with a personal attack. This is why people with different political views can't have reasoned discussion.
I am not surprised. Theranos exists as a cult of personality around Holmes and without her, it would be obvious that they provide no value over their larger, more efficient competitors.
I think the article's author agrees with you. It's important to keep in mind when one is putting spoked-wheel makers out of business because those people are people too; you want to make sure you at least have an understanding of the situation and what the way forward looks like.

i.e. it's one thing to acknowledge that buggy-whip manufacturers are going under when the car arrives; it's quite another to scoff at them with "Well, they should have known better than to make buggy whips---like their forefathers did, because it was a super-stable industry and it's their core skillset."
That's not how EU funding works. It distributes funds with many rules attached, but implementing those rules is the job of local government bureaucracies not the EU.

The EU regional development funds are notoriously wasteful, I wouldn't ascribe any value to scale or institutional experience.
So the UK economy is already completely isolated from the EU, unaffected by anything going on? Oh, well, then, an awful lot of this Brexit stuff is way less of a problem than people are claiming.

I have to say that the analysis of Brexit has been some of the worst "justifying a predetermined conclusion by hyper-local rationalizations" I've ever seen in politics, and that is saying something. You can tell something is a rationalization when it feels really satisfying, but if you try to take the rationalization out into the rest of the world it either makes no sense, or even outright contradicts the thing being rationalized. Whether Brexit is good or bad, it's going to have little to do with what I've heard from either side.
I think consumers should start to learn to think for themselves and stop relying on the state, bans and fines.

Absolutely, it's best to assume any who cares enough to do a review is biased in some way. Then it's just a matter of selecting reviewers who have a track record of honesty, and similar tastes as yourself.
The facebook feedback of Pokemon Go has been astonishingly the joy people have of seeing people leave their homes to play games. People meeting new people with similar interests and people having interest in Pokemon that would never have thought to have it.

This article's fear of 'no value' is short sighted for a game that just came out, it could easily be the catalyst that gets people to go out of their home and make economy again. I've already seen pokemon go lemonade stands.
The market for this is hilariously vanishingly small. There's no way anyone would ever manufacture this at scale for the 1% of 1% of people who even know what SDR is.
Eh? Academia has definitely been hit hard by austerity like the rest of the public sector. There have been basically no pay rises since the Tories came in.
I don't necessarily think the author thought the old system was better. The author seems to think the old system was well-understood and government regulation was better equipped to control it; the new system requires new thinking and possibly new policy that would have been anathema in the past (Americans have an unhealthy aversion to "resource redistribution" tax policy as a principle, in spite of how much it is practiced. In an economy where money is flowing with heavy concentration at points because audiences are no longer geographically captive, that kind of tax policy may become necessary to prevent the economy from shutting down due to lack of purchasing power---or to prevent revolt due to general anger at large wealth disparities).
Demystifying VR: How Sports and Virtual Reality Are Coming Together
Silly commoners, laws are for poor people!

Amazing, simply amazing. She's led a company that has either committed such gross negligence as to not be trustworthy to operate a lemonade stand let alone a medical company OR been openly defrauding both consumers and the Government but remains near as makes no difference completely unaffected and will walk away not only a millionaire, but apparently still employed.

I hope one day I reach that magical level of employment where no matter how bad you fuck up, you still win.
The land reclamation on Itu Aba was almost non-existant compared to the land reclamation China was doing. Itu Aba is the largest naturally occurring feature in the Spratly's and does have fresh ground water.

You can see some of the before/after picutres of Itu Aba and some of the other features here: http://amti.csis.org/before-and-after-the-south-china-sea-tr...
This New Chip Startup Wants to Bring Open Source to a Stagnant Industry
One word: Lavabit.
I'm going to spare you the mundane instances of working democracy throughout pretty much all of the West. But you can undeniably see democracy in action whenever a change feverishly opposed by an establishment happens anyway through a due process. E.g. exiting EU or nominating a raving populist as a presidential candidate.
FYI We're looking to integrate VersionEye into the GitLab interface.
>> If you feel too lazy to furnish proper nourishment for yourself, you're not really hungry.

This is incorrect, probably worrying.
The Irish economy was carefully constructed around the 12.5% rate for decades -- the UK is foolish if it thinks this new 15% rate will work for it and can just copy it to emulate the success Ireland has seen from its own rate.

The low rate works if you're a small economy with access to a much larger economy. With Brexit looming and given the size of the UK it doesn't fit either of these important criteria for the strategy to work.

I think Osborne lowered the rate the prevent an exodus of companies from the UK more than attract others to it.
Insanity of proponents of pseudoscience has no boundaries.
What Does the Refresh Option in Windows Actually Do? It’s Not What You Think
It's not at all discouraging to argue over the best encryption, it's plenty healthy to keep the research going so weak/defeated methods get deprecated and only the strongest remain in use.

But you're right that endpoint security is the next monumental task and the challenges are not entirely unknown [1]. How do you suggest we proceed to achieve trustworthy hardware?

[1] https://libreboot.org/faq/#intel
So good. If you actually wrote a fictional account of this, your editor would turn you away for not being realistic enough.

"Are you kidding me? The guy just coincidentally found a map in the public archives? It happened to have been forgotten by them? And it was a secret passage? And now you claim part of the monastery was a hotel? I suggest you read up on some real life cases before you attempt fiction."
I routinely tell my son "I dunno, that kinda looks like it sucks. Lets wait and see"
What are some C-level skills?
My first thought was that they'd include the compiler in Firefox, when I read the title.
Online physics learnware
Solar is bad for any aircraft that needs to change altitude rapidly, or contend with weather. The best way to transport passengers on a solar-powered aircraft would probably be to have a very large solar powered plane that remains airborne for months at a time, flying above the clouds, with smaller airplanes that shuttle passengers between it and airports.

Of course with that you have to deal with the issues of rendezvous of two flying aircraft, energy storage through the night, and pressurization of a large space. But it would avoid many of the inherent issues in solar powered aircraft.
s/can't/won't

Not saying you don't have a valid complaint, but let's not forget what can't means.
Thanks, we updated the HN title to the much more unambiguous form.
As I wrote, the tax cuts are being proposed to compensate for lower investment due to brexit, and it is unclear whether they will be able to compensate fully.
This looks great, thank you. They're still prohibitively expensive for small runs (for 10 boards, above, the cost was $100/board, but for 1000 it fell down to $2/board, and I'm sure protolabs is similar), but at least your comment and the GP takes me from "I wouldn't know how to even begin making this thing" to "Looks like I can just send these guys designs and my box prototype and get assembled PCBs and boxes back", which is almost there, pretty much.

Thanks again!
I've started using clojure.spec[0] in my regular day programming with an eye on using generative testing, which I understand is a form of fuzzing. I'm very new to this, but it feels incredibly practical in terms of bang for buck - like the 'cutting edge' of practical use. I'm not sure what it's academic background is, but I'd highly recommend reading and listening to what Rich Hickey has to say about it. He's a smart guy.

[0]http://clojure.org/about/spec
[1]http://blog.cognitect.com/cognicast/103
Can someone explain what the desired features of a "hand cipher" are?
If they do give a deal to the UK wouldn't that trigger more exits? If countries see they can leave the EU and still get a trade deal they'd be more likely to leave than if they saw the UK get shafted (so to speak).
Really?

I've had no trouble with YourMechanic.

I've never used Yoshi...but I have a gas station at the end of my block and I talk to the owner every so often so I'd feel weird cutting him off like that. xD