skysight-inc/HackerNews huggingface dataset:
That's not exactly true. With some newer tools, it's possible to export to an OpenGL Linux executable, but in other tools, especially older ones, it's still so specialized for DirectX that's it's not always possible especially with AAA games, and companies don't have much incentive to make Linux versions because the market share is significantly lower than Windows. The only reason that it's more easily possible with game platforms like Sony and Nintendo's hardware offerings (MS uses a special flavor DirectX for Xbox) is that the two aforementioned companies plus a lot of other game dev companies pour a lot of money into developer resources that Linux distros doesn't have.
You seem interesting, mail me and let's talk.
Openly revealing how to factor large numbers without at least months of notice would definitely lead to many people getting stolen from. I'd bet it would also lead to people being killed, but possibly would save more lives than it cost; too complicated to resolve. So even if the responsibility is indirect, it's there.
This attack purely relies on CSS. There's no JS involved. (Okay, there is in the PoC, but only to provide the alert listing what sites you've visited; the data leakage can be exploited with no JS involved.)
How about, while we're at it, giving judges the ability to invalidate an arbitration clause when a case in their jurisdiction is brought to their attention and they deem it "worthy" of a full trial?
I might avoid telling anyone that my brain carries a superweapon, but I also might put three or so of the RSA challenge numbers in an anonymous letter to someone at the NSA and the chair of the Mathematics department at Harvard saying that I'd appreciate if they could spare a room for a potentially interesting lecture in 3 years.

Another option is pastebinning an innocuous message signed with private keys of an implausibly diverse collection of sites and then dropping a link to that in front of a large audience including at least one person who could understand what big of a deal it was.

Either of these is a multi-billion dollar firecracker, of course.
John Oliver discusses the potentially grim future of journalism
Hey, that looks amazing! I was wondering about the software/hardware controlling the telescopes themselves, but cannot find any information on it on the website, is there any link, or that's more "behind the scenes"/non-public info?
That depends on how apathetic/ignorant the residents of that country are.
Failed at what exactly? Killing people? Various forms of Socialism are responsible for approx 100 million deaths in the 20th Century. Capitalism has brought more people out of poverty than any other system in human history. After all, Capitalist countries have to build walls to keep people out while extreme Socialist countries build walls to keep them in.
“Clock boy” Ahmed Mohamed sues Irving schools, police for wrongful arrest
There's a movie called Travelling Salesman about a group of computer scientists who successfully prove P=NP for the NSA or whoever and the whole movie is them debating what to do with their discovery. It's not great, not bad, but it's worth watching if that kind of thing interests you.

https://en.wikipedia.org/wiki/Travelling_Salesman_(2012_film...
Venezuela has the largest oil reserves in the world and they still failed. That's a special kind of insanity.
Mac used to be the same story, but now I would bet that at least 10% of indie game sales are on Mac.

If you're using tools like Unity, then shipping to Linux is not nearly the headache it used to be.

I play a lot of games, but thanks to this shift I no longer have to run Windows (can't play overwatch but I can live without it for now). I, for one, am glad I don't have to double my purchases.
If you wanted to be really evil you would send the message and make it look like it came from your worst enemy. I would imagine that it would only be days before they became intimately familiar with the phrase “extraordinary rendition”.

More seriously I would say nothing.
I don't believe that was true when the article was written.
Are we using "difficult" to mean "takes longer than the universe"? Since presumably that would be why we trust it for cryptography?
Where has capitalism failed spectacularly?

I can only think of counterexamples. Though triggered by speculation, after the first few months, the Great Depression was sustained by increased tariffs and the government crowding the private market. The 2008 recession was caused by the government meddling in loans.

And on the other side...communism has failure after failure: China, USSR, North Korea. Socialism too, ranging from mild (rampant unemployment in France and Spain) to severe (Greece's finances, or the reoccurring South American crises).

What spectacular failures were you thinking of?
https://en.wikipedia.org/wiki/Rat_Park#Reaction_to_the_exper...
http://www.ncbi.nlm.nih.gov/pubmed/9148292?dopt=Abstract

I should say, the results have not been replicated. There's only been a few attempts. Maybe the replicators screwed up!

To quote the root article: "But ultimately I should be able to replicate your findings and you should be able to replicate my findings, otherwise it’s not science, it’s bullshit."

So far Rat Park has not be replicated.
Does the FDA have the knowledge and experts to really understand if the firmware is good or bad though?
Thanks for the info but I think that I was looking for something more obscure :-). Smalltalk, Lisp, and Erlang are all pretty much household names on this site.
The bug fix turnaround makes waterfall look downright lean, though.
One of us has written PAM modules that are being used in production environments and the other one of us is you. I still wouldn't think to look there if I didn't happen to recall, in my junk drawer of Stuff I Shouldn't Need To Know But Do Anyway Because System Administration Is Bullshit, that pam_motd.so is a thing.

And it gets better: by cavalierly modifying that, you would have been wrong besides; you just turned off MOTDs, not controlled them, because that is the update-motd horrorshow's job. So explain to me why any of this matters to the problem at hand in the first place?
Russell Williams Porter, one of the founders of "amature" telescope making and lead the movement to make telescopes affordable to the average person. He is an unsung hero of modern astronomy and general badass. For more info on him: http://www.skyandtelescope.com/astronomy-news/a-root-of-amat...
Interesting option, especially if you live in a cold climate :)

Hard to imagine a cooling setup for these that is not at least a bit noisy, especially since most affordable PSUs and fans will be meant for servers and therefore noisy. Good if you have a ventilated closet nearby, not so good otherwise.
This is similar to discussing what one would do if you invented an efficient quantum computer, which is something many private companies and governments are chasing. If one government had this ability they'd have no incentive to disclose it, they'd just crack every encrypted communication out there.
If the same vulnerability is present across a large range of devices, a public exploit has a much larger impact.

I'm not advocating for security by obscurity in the slightest because on balance I think it's bad, but we should acknowledge that publishing your source does change the potential cost of mounting an attack in various scenarios, and some of them might actually favor obscurity.

Nobody except the most determined attacker will attack a device with some custom, unpublished code. On the other hand, popular software have a variety of exploits in the wild because their popularity makes them more attractive targets, one consequence of which is enabling script kiddies (since the hard work can be outsourced).

> it gets patched within hours and it may take a day or two for it to be distributed to everyone

This doesn't work for embedded devices. Hence why it might not be a great idea to publish their vulnerabilities, or tell the whole world that you're running on old vulnerable source.
There is also the benefit of being able to use one custom domain, and have multiple accounts attached to it.
Not similar at all actually. You're talking about software written over a couple of years (by humans) that is supporting our current biology versus biological processes that have "optimized" us over tens of thousands of years.
https://news.ycombinator.com/item?id=12250918
No, RSA depends on factoring. Virtually nothing else does, although the conventional discrete logarithm might be related to factoring.

If RSA was broken, we'd deprecate RSA and move to elliptic curve. Continual advances in factoring and index calculus are in fact the reason we deploy elliptic curve in the first place. Almost every mainstream browser handles it fine.

No matter what happens with factoring, we should all be transitioning away from RSA anyways.
"limited telescope time "

Hubble is nearing its end of life. I always hoped that robotics would have advanced enough to replace aging parts before it re-entered the earth's atmosphere. Webb and Hubble could both be fully utilized.
It's not pseudo-religion, it's actual religion. I can't say whether or not it works, and my stance on religion is neither here nor there, but it's why I'm so very, very against court-ordered AA. Not only is it cruel to people who are there for actual help, but it's state-sponsored religion.
How could you take advantage of the leak without JavaScript?
I can see how the average reader would read the headline and article and come to the conclusion that this is evidence of another flaw in the justice system. One problem, however, is the emphasis the article places on federal courts. Federal criminal charges are, by their nature, rare. Big drug investigations, terrorism cases, human trafficking, etc. If the feds are on it, it's likely a more elaborate case requiring many more law enforcement resources, more evidence gathered, multiple defendants, etc. It's no surprise these cases infrequently go to trial, they require longer to investigate and prepare, they are more infrequent, and there's so much evidence and the odds are so against the defendants that most defense lawyers advise their clients to plea out. The federal bench, therefore, is a very different beast from state courts where you see the majority of criminal cases tried.
If addiction is not a disease, people would have to be responsible for their actions.
>Rat park is unreplicatable

Much of social science is unreplicatable, psych especially. Is this because it's wrong, or because of other factors? Take the easiest, most commonly replicated, least contentious conclusion one can come to in a drug study, namely [0]: "rats will intravenously self-administer (IVSA) cocaine". As you can see if you read the link, there's all kinds of caveats to this statement! If you're not very scrupulous about everything from catheter diameter to the cleanliness of your lab coat (yes, seriously), even this piece of orthodox obviousness can suddenly become "unreplicatable".

>It's a sham

It's very difficult to get funding for a large-scale drug study that goes against the underpinnings of the grant, hypothesis and conclusion of almost all the other drug abuse rat-studies of the last forty years. Publish-or-perish culture is no less pervasive in psych, and generally speaking, heterodox opinions don't get a lot of airtime in grant application review, let alone academic journals. How many other institutions have even tried to replicate Rat Park, let alone actually achieved some shadow of its methodology? I think the answer might surprise you. edit: or not, you've looked it up! Great! See?!

>I'm sorry

I'm sorry, too.

[0] http://drugmonkey.scientopia.org/2014/07/08/the-most-replica...
K-NN classifier for image classification
You don't understand big company politics. Number of reports determines whether a person is a manager, senior manager, or director and makes $120k, $170k, or $350k. The main metric of how good a manager is is simply butts in seat. Actually doing stuff doesn't matter.
A google search turned up "General Principles of Software Validation; Final Guidance for Industry and FDA Staff"[1]

My understanding is that they don't review the code, but they do review all of the validation that goes into making sure the code does what it should.

[1]http://www.fda.gov/RegulatoryInformation/Guidances/ucm085281...
and an easy to setup environment.

Hardly so[1] --especially for general/non-technical users.

[1] http://doc.sagemath.org/pdf/en/installation/installation.pdf
> More seriously I would say nothing.

Is the logic of this decision to protect yourself, or to preserve the status quo? If protection, wouldn't the logical decision be to make a full public disclosure and go out of one's way to make it clear that there is nothing more to disclose? In that way, you remove the reason for someone to attack you (unless they are vengeful), as you are no longer "part of the equation" (boom, boom).
Didn't they let a lot of people go in the last two years? It seems sensible to me to downsize office space after that kind of thing. Would it be better to their PR if they just burned money on the empty space?
The `href` attribute of the visible mole could pass the data back to the server.
This is why American politics is so poisonous. When people disagree with you, it's not because they have a different point of view, it's because they're "bad".
I agree with this 100%. Crashes are a way of not-so-subtly reminding you that your code is still buggy, and exactly where it crashed is usually a good indicator of where to start debugging.

Rule of Repair: Repair what you can — but when you must fail, fail noisily and as soon as possible.

To take this example to the extreme, imagine if the default state of the runtime/OS were configured so that invalid memory accesses didn't cause segfaults, but e.g. yielded -1 or 0 or some other value and simply let the code continue... by the time you see something wrong, it's probably very far away from what originally caused it.

It's funny to see OpenBSD's printf doing this explicit null-checking and that they are considering to remove it, when AFAIK Microsoft's C library printf has always done the IMHO sane thing of just reading and writing to whatever addresses it's been given --- and if they turn out to be invalid, like null, then it crashes as it should.
If you turn JS off, you'll still see a mole in the position which signifies your visited subset of tested-for addresses. If you inspect the code, each position has multiple anchor elements, the last of which has an onclick right now. All you'd have to do is add a href to it.
Ok makes some sense but why not just provide the API and a mechanism to change where data is sent after you have decided not to support the device anymore? Surely that is not to burdensome and will give someone out there the option to continue using the device (and probably save some goodwill over the dropping of support)?
Do we have data to suggest the poor have more problems with addiction?
Am I the only one who hears echoes of AOL-Time Warner in the Jet.com acquisition by Walmart?
Is it really that sacrilegious to just put your comments inside of a parseable data format?

Python provides programmatic access to docstrings, for example, and it has many valid uses.
Well yeah. That has use, but when one mentions claiming negative results to black, I assumed that was for pictures. Obviously negative values mean something in other places, but I assumed we were talking about pictures.
Lesson of Theranos: Fact-Checking Alone Isn't Enough
> semantics

here we go

dis-ease: not being easy, uncomfortable, sickness

> (pathology) An abnormal condition of a human, animal or plant that causes discomfort or dysfunction; distinct from injury insofar as the latter is usually instantaneously acquired.

There is no debate to be had at all. I get where this comes from, the scientific definition is more involved, but then addiction is just a symptom, while the damage, eg. to the nervous system, is material. Would ignorance count as disease?
A more honest statement would be: "We're living in a world where rich investors have little use for honest business practices". The communities these businesses operate in have to bear the true costs of the business practices of companies like AirBnB
What if they had to subpoena a tomato grown in a field next to the toxic waste dump? What if they opted not to examine that tomato because they didn't have the resources to issue, process, and support, the lengthy bureaucratic process involved in such things?
that's assuming no one changes defaults... if your a large enough provider you are tweaking these settings.
I've seen ball lightning twice, both during my short stint living in rural Nebraska as a kid. It was correlated with, but not directly underneath, the hyper-energetic thunderstorm systems that are typical for that region. It is really interesting to observe because it doesn't follow the rules you intuitively expect.

The most memorable incident was when it dropped out of the sky directly over a little league baseball game I was playing in. Several dozen people saw that one. It hovered, sizzled, zipped off, and disappeared. They called the game on account of weather.
>I can't say I am a big believer in the whole concept of juries

Care to elaborate on your objections? Juries exist so that it limits the ability of the State / prosecutors or defense teams from lobbying or coercing 'professional jurors'. You do not want the people who are determining if a citizen broke a law beholden / under the thumb of the state. I say this even as someone who had a jury rule against myself in a civil case that both sides (defense and plaintiff) thought that a judge would rule in my favor.

"Oh geez you've not been chosen to sit on a jury recently, your paycheck is going to be a bit short this month. Maybe if you agreed more with the prosecutors..."
Seems like the article would convert one to a true believer in trial by a jury of your peers. 'cuz the prosecutor and the judge are not your peers, and in many cases working together against your interests.
>seems like a debate about semantics.

The article specifically addresses that point:

a slim majority of the panelists, including Murphy, did not want to emphasize the word "disease," because it implies that chemical dependence is primarily a function of pathology, when in fact environmental factors (dysfunction at home, stress at work), learned behavioral patterns (binge drinking, for instance), and economic disparities have been shown to play a significant causal role. Clearly, the debate was not just semantic.
Almost all discussions of whether something is or is not a disease could be usefully replaced by a link to that article.
We're talking about piles and piles of burnt meat though.
I agree with you in general, but since we're talking about embedded devices that can't be updated, here's a concrete scenario:

1) White hat finds a vulnerability in the source code which applies to a large number of devices.
2) Source is patched but vulnerable devices exist in wild

Now all an attacker needs to do is find a vulnerable device; because the source code is public like OP suggests, figuring out which devices are vulnerable is trivial.

Unless I'm missing something drastic, this is actually a problem in the embedded space where obscurity seems to help.
All things hack
find out if your husband is cheating.
A private investigator can find out fast because they have GPS tracking devices to track your husbands location.
They can get phone records such as deleted text messages. They can monitor their computer usage.
The use hidden audio and video devices. They can send in female decoys to test their intentions.
A private investigator will get the truth quick. for confidential consultation or email icehackerzz@gmail.com icehackerzz@gmail.com

- HACK INTO ANY SCHOOL DATABASE AND CHANGE UNIVERSITY GRADES, no matter
how secured
- HACK INTO CREDIT BUREAU DATABASE AND INCREASE YOUR CREDIT SCORE
- HACK ANY EMAIL OR SOCIAL NETWORK AND KNOW IF YOUR PARTNER IS CHEATING
ON YOU
- HACK INTO YOUR PARTNER'S PHONE PICS, TEXT MESSAGE AND LISTEN TO CALLS TO KNOW IF HE IS CHEATING
- Hack INTO ANY BANK WEBSITE
- Hack into any COMPANY WEBSITE
- HACK INTO ANY GOVERNMENT AGENCY WEBSITE
- HACK INTO SECURITY AGENCY WEBSITE AND ERASE CRIMINAL RECORDS
- Hack into CRAIGSLIST AND REMOVE FLAGGING
- HACK INTO ANY DATABASE SYSTEM
- HACK PAYPAL ACCOUNT
- HACK WORD-PRESS Blogs
- SERVER CRASHED hack
- UNTRACEABLE INTERNET PROTOCOL etc
- HAVE YOU OR YOUR CHILD BEEN BULLIED ONLINE BEFORE AND WANT TO GET BACK AT
THE PERSON, WE CAN HELP YOU TRACE THE ACTUAL LOCATION OF THE PERSON AND
DO WHATEVER YOU REQUEST TO THE PERSONS COMPUTER
- IS ANYONE BLACKMAILING YOU ONLINE AND YOU WANT US TO GET INTO THEIR
COMPUTER AND DESTROY DATA AND EVIDENCES AGAINST YOU?

Or email icehackerzz@gmail.com
Although from hearing about the Apollo Guidance Computer, it's just as much of a miracle they were able to get it to work without any debugging or compilers, with basically one shot to write the program to ROM.
I used to work at a diagnostic medical equipment company. Rules were slightly different for us (diagnostic rather than therapeutic = lower bar) and we had FDA audits. They were basically making sure we had written down our processes to an adequate degree, and checking that we actually followed what we wrote down. They most definitely were not doing code audits (which isn't their job or area of expertise).
MR5TORM BEATZ- WANT YOU (INSTRUMENTAL)
If I had a pacemaker I would most definitely review the source code for it if I could get access to it. Even if it meant learning golang or ARM assembly or whatever the kids use to build pacemakers these days.

I'm sure I'd lack a lot of the heart mechanics side of the equation, but I would be very highly incentivised to hunt out programming bugs.
ICE FOG HACKERS
Good day Loan Seekers Solution for your financial problems,

We are a fully registered and certified loan firm, that offers secured and unsecured loans to individuals and companies at a very low interest rate of 2%. We offer long and short term loans.Our company has recorded a lot of breakthroughs in the provision of first class financial services to our clients, especially in the area of Loan syndication and capital provision for individuals and companies. We have brought ailing industries back to life and we back good business ideas by providing funds for their up start. We have a network of Investors that are willing to provide funds of whatever amount to individuals and organizations to start business and operations.We are a group of energetic and experienced loan professionals with thorough knowledge of financial markets.In general we offer mortgages, home loans business loans and bad credit loans commercial loans, start-up- working capital loans construction loans car loans, hotel loans Xmas loans Our interest rate is 2% per annual repaid, our loan takes a maximum of 3 working days,to get to all approved customers across the globe. You can contact us via
icehackerzz@gmail.com
Tummy Tuck
Judges have great discretion not to accept plea deals. A plea isn't just an arrangement between a defendant and a prosecutor. It involves an extended process where the defendant presents the plea to the judge and the prosecutor offers the facts it would offer at trial to prove the allegations.
Show HN: Sassoon – Sass and Less editor (concept)
Oh come on. I can't yet downvote articles and posting comments while not upvoting the title is my vent, but if I'm being down voted I will have to continue.
10th anniversary of the first release of Dwarf Fortress
The comments are gold. Better than YouTube.
Wow. How do you put up with that kind of behavior from such a mission critical device like a phone?