skysight-inc/HackerNews huggingface dataset:
You can mitigate the exploit against standard mass storage drivers, yes, but there are other ways. It appears in this case the host was compromised (so able to override the drivers).

If a userland program can get at the raw HID interface, that can also be used for exfiltration to a tailored device.
It sounds backwards, but if you think about it: A marketing firm's job is to "wow" you, not be efficient. Sure, they'll "waste" money on trivial, flashy bullshit, but that's kind of what marketing is
I've never heard the word "disease" used that way before. Does it get confusing using such an unusual definition?
OT: Interesting. I'm using a VPN service while at a public cafe waiting for my car to be repaired.

No PDF for you.

On the one hand, I understand. On the other, it seems the Internet is becoming an increasingly differentiated network.

Guess I'll finally have to bite the bullet and set up my own VPN server -- and hope it's in an IP address range that is not overly flagged.
What to do when you realize your CEO is masterfully implementing the "processes" described in the handbook? I left ... any similar experiences?
Supposedly, the "drop USB drives in the parking lot" works pretty well to get around air-gapped systems. As well as mailing USB drives to the receptionist, mail room, etc.

Also, this thing was running as a local admin on a domain controller. So either the DC's weren't patched or some zero-days were used. Or perhaps an inside job.
World's longest hunger strike ends
Especially true for nurses. Very tough job, but there's more money in it than many realize. My friend who already does well for himself is now going to do 1 more year of school to get a CRNA and says he'll likely make 160k in Miami or 220k in SF. Yet a co-worker asked "how can nurses survive here?" SF nurse salaries are public and you can see they can out earn most engineers esp via overtime (which lots of engineers work uncompensated). Still, nursing is a very tough job and can have a low status stigma.
Google Compute Engine Incident #16015
> You mentioned Common Lisp - it's a great example of a cathedral. A language carefully designed by a committee, which took into consideration all the previous Lisps that were in popular usage. You can tell there was a lot of thought behind the process.

Common Lisp was designed as a unified successor to Maclisp, in response to an ARPA request.

Not to Scheme, Interlisp, Lisp 1.6, Standard Lisp, Lisp 2, LeLisp, ....

Scheme was further developed. Interlisp died, Standard Lisp had a Portable Standard Lisp variant and then mostly died. Lisp 2 was dead before, LeLisp died later.

The core of Common Lisp was designed in 1982/1983, decided mostly by a small team of Lisp implementors (those had their own Maclisp successors) with a larger group of people helping out.

1984 a book was published on the language and implementations followed.

Standardization then came as a more formal process later with goal of creating an ANSI CL standard - again it was mostly US-based, paid by ARPA. Areas were defined (language clean-up, objects and error handling), .... Proposals were made (like Common LOOPS by Xerox) and then subgroups implemented and specified those (CLOS, ...).

> You can tell there was a lot of thought behind the process.

There were a lot of people involved. Not just the X3J13 committee. It was also a community effort at that time.

https://www.cs.cmu.edu/Groups/AI/html/cltl/clm/node3.html#SE...
I take offense with " the bottom 50% for a discount via H1B indentured servants."

There's probably a mix of talent in H1B visa workers, but I know several and they're among the top talent in the U.S. Some H1B visa holders have gone on to found multibillion-dollar companies.

I don't live in the U.S. and don't face H1B visa competition (we do have Venezuelan and Cuban and Spanish engineers coming here to Uruguay so something similar), but it shouldn't be seen as so black-and-white. They can help grow the pie, they're not out to take a slice of the pie from native-born engineers. Maybe you should help them negotiate better rates, or a better visa that allows them to do so.
I am not. Programming is just a hobby and I am not very good at it. I am a lawyer, and my comments would apply to law as well (except that the barrier to entry is a bit higher since regulation forces people to go through law school). Your comments about physical strain, mental toll, risk of burning out etc. describe my field well, though. And I doubt salaries for lawyers and programmers are that different anymore.
Agree. But one should design software without the obscurity layer, then it's okay to explain how obscurity can be set up during deployment.
"making partitions that windows doesn't see is trivially easy"

Are we talking "partitions Windows wont mount because they aren't FAT/NTFS" or "partitions that literally do not show up to Windows Disk Management because the disk itself is showing a different capacity. EG: A 16GB USB reporting only 8GB, regardless of the OS installed"

Like one of these, only malicious

https://www.neowin.net/news/fake-chinese-500-gb-external-dri...
As to the secure enclave, the very nature of a target that's in SO MANY hands, means that's it's unlikely to ever remain secure from a motivated state. It's such a catch-22... buy into the mass production, or have something that might really be strongly encrypted, but stands out like a sore thumb by virtue of not being the mass production model?
Is there any hope that if chat bots do actually become widespread in usage that eventually we'll be able to aggregate their collective knowledge similar to reinforcement learning for a single system? That seems like the only likely way we'll ever be able to train AI in something as complex as language.
Two weeks! Any story that takes more than 2 days is generally broken down into smaller stories. A two-week project is more like a small epic...
Anyone know a tool to stop people from being able to tag you (in their posts)? this shit is getting out of hand..
Twitter opens Moments for more influencers and brands
CloseCar: All currently free car sharing cars in Berlin
It's only proof that they desire more money or can find a use for more money. "Need" is an overloaded term. I know developers with six figure salaries who feel like they "need" more money and occasionally do contract work on the side as a result.
Even if they didn't otherwise use metric, it would make sense for them to use it here since the ultimate goal was to have the metric-using citizens of Axis-occupied countries carry out the sabotage.
Understandable, the title of the book is really misleading. I think because "winning" friends implies some sort of competition and "influence" often has a negative connotation, like unduly influencing someone to do something not in their own interest.
You can change your privacy settings so you have to approve everything before going on your wall/feed.
Is there a workaround for this paywall?
If we use animals as a reference, I would say that consciousness is more fundamental than language, so most likely we need that in place before we can get AI to be able to effectively understand language.
Ask HN: Reducing sleep while staying productive?
Hi HN!

I recently started a new 10-7 job and am currently suffering of loosing myself in daily worklife. It might be the change from 8-5 to 10-7 but it feels my free time is close to non existent.

I have a lot of projects and smaller things that I want to get done and am pretty good in organising my free time with GTD but I start to fear that my free time is just not enough. If I leave the office at 7:30, I might be at home by ~8:20. Cooking and eating and it's 9. 3h and it's 12am. Sleep until 8am and the cycle repeats.

During self-reflection I started to realise that my mood began to suffer due to having very little personal achievements outside of work because of this.

My question:

I want to push my limits and get as much time out of my days as possible. Productive people of HN, how do you organise your free time outside of work? To how much time can I reduce my sleep cycle while staying productive?
is it geolocation for a car? or something else also?
Farmers tried to switch to natural predators (ladybug lavae etc.) from pesticides. Monsanto ramped up the marketing for pesticides.

Today they are a leading provider of natural predators.

Monsanto will not "be destroyed" by one patent or market shift.
It's up to ticket creators to pipe up if their request hasn't been worked on forever. But we recently reviewed the whole board with the PMs and that was pretty good for getting some things out of limbo, and closing others that never got that important.
It seems to me that a full mastery of language requires a grasp of semantics, that is the ability to understand what a sentence means. I doubt it's possible to do that without having basic common sense along with an overall representation of the world, and that looks very close to strong AI, imho.

So I'm not surprised computers keep on struggling with language applications. Once they succeed strong AI will not be much further away.
Correct me if I am wrong: redis scalars are limited to strings and this seems to support integers and booleans. The query language is also different.
So, I must conclude that something else is going on. Slashdot, is it you?.
Some recruitment firms are good, but you have to be prepared to blacklist and phone-firewall the bad ones.
A law like this seems misguided and designed to score political points rather than solving any real social issue.

People suffering from this type of malnourishment in most developed countries account for a tiny fraction of the population. But it's much easier to go after a few outlier cases than pointing out the elephant in the room (pun intended) with regards to public health and pointing out how basically the majority of people are now overweight or obese.

I'm not a huge fan of most people being vegan because it requires a much higher level of dedication to getting enough protein and other nutrients than most people are willing to devote to it. But there are in fact vegan athletes and even elite bodybuilders, so it's not impossible to have a productive vegan diet that gives a normal person a normal healthy life if you put effort into it. I say this as a dedicated meat eater.
Are you American? Just curious on your perspective.

Those "arguing the words on the page are so sanctified" I take for you to mean are originalists/textualists. Most people in that camp are not against the death penalty.

Bigger picture, the words on the page DO overturn the results of the democratic process. The US holds the Constitution as its highest law, and any law implemented (democratic process) cannot conflict. If it does, meaning the (unelected) judiciary interprets the law that way, then it is invalid. But that's viewing checks and balances only one way. The executive and legislature (both democratically elected) also check the judiciary - they appoint the Federal judiciary and confirm, respectively. Those appointed judges may choose to interpret the Constitution in a more modern context, while others may stick to originalist thought. What I think you're missing is that it is the prerogative of the judiciary to choose how to interpret. There is nothing in the Constitution itself that mandates originalism, pragmatism, or anything in between, and given our system of government the only place to specify such a thing would be in the Constitution itself. It wasn't there in the beginning and we've made no such amendment. And we probably wouldn't, because judicial independence is a very important principle.
You betray your political leanings here:

+ If by "the Planned Parenthood story" you mean the allegations of selling body parts from fetuses, the story was fake from the get-go and the "citizen journalists" [sic] edited their recordings to push their right-wing agenda. [0]

+ Contrary to what right-wing conspiracy theorists claimed, the IRS wasn't targeting conservative nonprofits specifically; it was looking at other characteristics based on keyword searches. [1]

[0] http://www.cnn.com/2015/10/19/politics/planned-parenthood-vi...

[1] https://en.wikipedia.org/wiki/IRS_targeting_controversy
Well one of the linked/related attacks, called "Equation," was apparently distributed at least once via CD without a person on the ground (near the target, at least).

It says that the CD, containing data about a recent research expedition, was mailed to an academic. It was apparently intercepted in the mail, compromised, and forwarded on.
Do they really like it? I don't know. I personally try to avoid it and find pre-compile packages. I guess the advantages of building from source is that you get the latest version and you compile for your very specific architecture, which usually means that the program will run better.
I support GPL enforcement in general, but I am sort of conflicted about who's in the right in this particular case (which is why I'm definitely supportive of a court hearing the actual arguments!).

VMware has segregated their proprietary "stuff", namely the hypervisor monitor, from the variant of the Linux kernel that runs a bunch of hardware drivers. This segregation doesn't involve a separate address space, and does not (I think) use the official Linux userspace ABI that is documented as one border of where the GPL ends. So, on the surface, the default assumption should be that it violates the GPL.

But it seems like it would be conceptually straightforward to use something like Xen's driver domains (http://wiki.xen.org/wiki/Driver_Domain) to run Linux in a separate virtual address space and pass through all the hardware to it. There might be technical complexity, but it's doable; VMware already has a product (Workstation) which takes a normal, running Linux machine, loads some GPL'd kernel modules written by VMware, and inserts the VMware hypervisor above the current kernel. ESXi could, in theory, do the same thing.

If the result of the lawsuit were to force ESXi to make that architectural change, would that really be a win for free software? And if that architectural change is doable, and results in no benefit to Hellwig (maybe just some annoyance on the part of VMware's developers), what legally-actionable damage is being done by Hellwig's code being used the way it currently is?
>Even startups which are doing well and generate profit tend to go on to raise money from VCs - This sounds ridiculous

So how does one expand a profitable business? Save up those earnings until you can buy a factory outright? Good luck with that. Meanwhile, I'll be financing the cost and leaving you in the dust.
Why do the authors report performance at O0 and O1?

AFAICT, the experiments are all single socket. There's an important difference in coherency overhead for single VS multiple sockets; same for futzing with page protection. It also looks like they only tested a single producer/consumer pair. I expect page protection tricks don't scale as nicely when you have 20+ pairs on two sockets: contention on the page table and IPI storms. The mprotect trick also seems to depend on using small (4K) pages, unless you're OK with fairly stale data; probably not ideal for overall app performance.

Also while they indirectly mention the batching trick of the disruptor (keep a reader-local copy of the write index and vice versa), it's not tested… and also not tested with a forced lag between the reader and the writer. If you want to avoid the ping pong, you can let the reader keep a copy of the writer's write pointer (and update the copy when the reader catches up), and artificially make the reader lag behind the writer. That lag gives much simpler code on the hotpath than the MCQueue they mention, which would be the closest equivalent to a laggy disruptor (keeping in mind that the disruptor pattern tends to be used in low latency settings, so that configuration is unlikely to be benchmarked, except indirectly, with cacheline-sized queue items).

It's interesting work, but as is too often the case, the benchmarks give me no actionable information.
They're even snooping around in people's WIFI streams to enforce that now.
Is AWS Aurora a sound reason to start with MariaDB/MySQL?
Starting a new online project means choosing a database, and switching costs seem high. Even a prototype or MVP would ideally use the same database as later versions.

Does it make sense then to choose MariaDB or MySQL so that some day I can drop it into Aurora (starts at large instances)? Otherwise I'd likely go for Postgres... Server in nodejs...
So we can add C# and Lua to the list of languages that have good lambda support.

I forgot lua before. Lua is pretty much javascript except without all the screwups and with 1-indexed arrays.

>It is, but semantics is supposed to correlate with syntax in a sane way. In JS, it does not - you can place "var" inside a block, but it's not actually scoped to that block. If they required all vars to be declared at the beginning of the function, it would have made more sense. And I'm not aware of any other language that made the same blunder, except for old (pre-.NET) Visual Basic.

Ah. Yeah. Well, that's why let exists now.

>return

>42

All right, I'll give you that.
Concurrency Behavior: MongoDB vs. Couchbase
I buy side projects -- if you have traffic / revenue, drop me a line with the URL and some high level stats and lets talk.
The difference being, the older you get the more you will be perceived an expert at law. Your experience ages like a fine wine. Experience in tech ages more like a ripe watermelon sitting in the sun. Your earning potential will only go up the longer you are a lawyer. That is not true for those that stay developers their entire career.

P.S. I also spent a great deal of time getting degrees. B.S. in computer science and a Master's in Software Engineering. It is often not required to get a job, but it is still a barrier for many openings.
Only use I have for FB with my limited profile is Messenger and with an Electron app there's no ads. [1]

[1] https://messengerfordesktop.com/
woah ... this is cool. only knew the more traditional teletext website: http://www.ard-text.de/
> 1 million dollars at what time, the time he had it?

That's correct.
As founder of Soverin I'm definitely biased, but it's great to see that awareness is growing and this discussion seems to strike a nerve. Some great insights here, thanks for that. Moving from Gmail was actually one of the reasons for my new startup. Wanting to build an honest alternative and decreasing my data footprint. A Gmail importer was one of our first things we build to make switching as effortless as possible (https://soverin.net/features).
I am really interested in the technical details. I think we have yet to see a working (and practical) approach to this.
Part of it is probably because precompiled binaries are rarely built with flags that allow advanced instructions (MMX/SSE/AVX) to be used because the binaries would not be very portable. Building from source you can add -march=native to get faster code (although sometimes I suppose this is risky).
H) Age

It is a common belief (especially among startups) is that developers have a "shelf life."
That's what I've done. Just to be clear to the grand-parent, you are still tagged. It just doesn't appear under... I've lost track of the FB terminology: On your "wall", profile, whatever.

It will still show up in your "newsfeed" of other posts -- the thing you typically browse.

It's an example of a dark or semi-dark pattern from FB. You can't really stop it, nor others' actions with respect to it. You can only limit some of its propagation and perception.

You on FB? You get tagged.
per month, day, week?
Good luck. I suspect in no time uBlock Origin will have found a way to remove the ad elements from the DOM, even if they are served directly with the html of facebook and not a 3rd party domain.
In that configuration the computer is the host and the phone is the 'device'. You'd have to either install some kind of remote viewer on the phone (e.g. Chromecast), or reverse the host relationship and put something like the DisplayLink chip in the middle.
Well, what do you expect them to do for you? Nationalize and manage your IT infrastructure? They and the DoD publish security guidelines for servers, desktops, etc that any business or government agency can follow. Also do you use SELinux? That's NSA as well.

If you want regulation, that's Congress and POTUS, not the NSA.
I had a teacher in high school once explain to us a side lesson on time management, she says she used moments of "downtime" in the school day to do grading and lesson planning so she almost never brought home work as a result.

I took it to heart. It worked very, very well for me in college. I'd always have homework with me ready to go and when I was waiting for a class to start, or any other short time with nothing to do, I'd do homework. I'd only get a bit done at a time but it really added up and reduced my take home workload considerably.
What You Have to Get Right in a Startup
> Well paid and high in demand everywhere in the world, very little "soul crushing" (and can even be very fulfilling) compared to most jobs and you can even get a job where you work from home, anywhere you want, with flexible time etc.

Assuming you like and are good at a specialty that is in demand, and can convince someone else of that. As someone who does not like web or enterprise CRUD development I don't feel very in-demand, nor do I feel like I can get one of those sweet working arrangements[1] that get discussed here. I have spent the past couple of years wrestling with whether to keep trying to do what I want to do (real-time embedded systems) and be "underpaid" doing it or do something I am good at but really don't like (Java backend systems/"big data") in order to make more money. I think the latter is going to win by default, since I have been out of the embedded game too long at this point.

[1] Not to say my current arrangement isn't better than average with respect to flexibility, vacation, benefits, and such. I think the average HNer would probably consider my fringe benefits kinda crappy.
Ah, sorry. My content blocker does that for me.
I'm in the same situation, and I haven't found any marketplace save for Feinternational where you'd be able to buy something like that. Either you can buy SaaS with million+ run rates (which of course cost a lot), or you find mostly ecommerce/AdSense/affiliate type of businesses (Flippa etc).
FB can't win this cat and mouse game. If the ads are to be distinguishable then there will be inherent properties that will lead to them getting blocked.
They are welcome to try. And I am welcome to try harder to block them.

As long as they don't try to force some sort of legislation on how people can use their internet connection, and their internet browser to fetch and display content, there's no problem.

The real problem is Facebook is already full of advertising disguised as content. From sponsored posts to content from things you "like". So I'm kind of surprised they need to go out of their way to explicitly announce that they will be disguising ads. They already have the power to inject it in the middle of content invisibly.
And it will last a few hours. :)
(psst... Fred Brooks is the software engineer; David Brooks is the New York Times' conservative commentator.)
I'll add this to my list of reasons why I'm not on Facebook.
Please don't do this here. We ban accounts that violate the guidelines with comments like this.

https://news.ycombinator.com/newsguidelines.html
Vue.js, an alternative to Angular and React
This is also why AI won't overthrow us and become our masters. They don't even know what it means to be a master.

EDIT: This is the most volatile comment I've ever posted. It has been going +2, -2, +2, -2 for the last 35 minutes. People seem to love it or hate.
MongoDB returns inconsistent query results. Couchbase avoids this problem with skip lists and snapshots.
As the saying goes, if you build a bigger wall someone will use a bigger ladder....
These guys might disagree. Sometimes they make sense which is interesting http://sumve.com/ai-chatbots/relationships/relationship-bots...