skysight-inc/HackerNews huggingface dataset:
I believe you've previously argued that one problem with current computer crime sentencing is that that difference between a misdemeanor and a felony is the number of iterations of a loop. My add-on to that if it is so easy to increase the scope, then perhaps such activities shouldn't even be bona fide criminal! Hence my allusions to "wildlife" and "Internet background radiation" - phenomena that can't really be ascribed to an individual's intent but will still mess stuff up.

Regarding intent - we don't need sledgehammer-crime laws to cover intentional destruction of a computer system using a sledgehammer. So why do we need network-crime laws to cover intentional destruction of a computer system using network communication? It seems like in either of these cases, one should be prosecuted for intentionally destroying a computer system regardless of the chosen technique.

I think this is where the culture divide originates. Because for many instances of cracking, curiosity is the sole motivation. While things can be damaged in the process (and thus one would be civilly liable), there isn't justification for criminal charge of malicious destruction. Of course, the curious cracker is still trespassing - but contrast current sentences with the general severity of meatspace trespass.

Now, this specific case does seem to have more serious intent than simple curiosity. And it's hard to find a guiding analogy, since analogous situations range from publishing the contents of a journal shoulder-surfed at a coffee shop (ie "tough shit!") to publishing the contents of intercepted postal mail (another area where technical abstractions have been warped into creating extreme penalties).

Perhaps if publishing someone's "protected" (in Java parlance - not public, not strictly private) information makes us feel that some wrong has been committed, then that itself needs to be the crime. Switching the paradigm to one directly based on activity (rather than access) could certainly help to curtail commercial surveillance bureaus who currently trade in this kind of information with impunity.

AFAIK, "Indie developers" aren't creating life-critical devices and should be disclaiming any use of their tools for such (eg "NO WARRANTY"). Every IC datasheet doesn't contain an explicit disclaimer regarding such just for kicks.

And if a shop is, for instance, creating and integrating life-critical Internet-connected medical devices based on Linux/C !? They should be scared away from that activity.
I disagree, more exposure is good
Ah, sorry. Charcoal. I'm a traditionalist :)
Changed. Haha, the colours come from google logo :)
That was a whole lotta nothing
This doesn't sound correct. What if the attacker times the operation so that the bit corruption occurs after the checksumming but before being actually used for cryptographic operations?
I don't see any reason it would need to happen through AR. It is neural lace after all. You wouldn't need to see anything, you might just "know" answers once you subvocalize a question.
It's less a fork and more of an add-on, PC-BSD (now True-OS) is FreeBSD with a fancy installer and a preconfigured desktop. TrueOS server is FreeBSD with their admin tools installed. Kris Moore, the creator, is a member of the FreeBSD core team, the projects are close.
Sort of.

I'm actually a little sympathetic in this situation. Most theaters (and many other public places) prohibit people from possessing the means to defend themselves, and yet also fail to provide security themselves. It's unfair to pull crap like that, but they get away with it.

However, in the end, I'm too libertarian to say a theatre should be required to do or not to anything for its customers.

But boy does this situation suck for the customer.
Unfortunately, being able to see and hear the actual model you're thinking of buying is rather important if you care about audio and visual quality, and certainly in my city, even the relatively high-end stores have been full of "smart" models lately.

Also, the next logical step for "smart" devices is to establish their own wireless connections via alternative channels if they aren't connected to a household network. Privacy is fast becoming a thing of the past if you let anything with sensors onto the premises, and short of wrapping their home or office in a Faraday cage, there is disturbingly little anyone can do about it as more manufacturers reach agreements with network providers to handle their phone-home data needs.
I made a similar proposal 3 years ago and submitted it to HN. There was a bit of interest, but a lot of people back then seemed to assume that passwords were going the way of the dinosaur anyway so why bother?

https://news.ycombinator.com/item?id=5743057

Now that Persona is defunct and there is no privacy-respecting alternative in sight, perhaps we can finally acknowledge the truth that passwords are here to stay for the foreseeable future.

Also, using .well-known looks better than what I originally proposed (header or <meta> tag). For maximim compatibility with existing systems, there should be an option for this URL to respond with the actual login URL as well as any restrictions on the password format (length > 6, numbers > 1, symbols > 1, disallowed symbol list, etc.)
With the Dropbox hack for example, the reason they got hacked is because one of their employees reused a password, presumably from another site that got hacked. So that's one vector, where every time a site gets hacked, people using weak passwords (and reusing them) create the risk of future hacks.

But more generally, exposing your account credentials allows others to impersonate you and potentially scam others, expose the data of others, etc. In the case of Last.fm there obviously isn't a ton of potential for abuse directly, other than maybe firing off fake song plays to pocket the royalties, but the potential for greater harm exists in the general case. E.g. consider the enormous percentage of credit card transactions that are fraudulent, largely because of scammers using PII that's stolen in these large scale hacks. That absolutely effects the fees and interest rates for everyone else using banks in any way, so even if your own identity isn't stolen you're absolutely still affected.

And even in some hypothetical scenario where the only person harmed would be the person using the weak password, there is still precedent for regulation because we have laws requiring people to wear bike helmets, preventing kids from smoking, etc.
What is your point? I didn't say Kratom is harmless. All drugs can cause harm and all drugs have the potential for abuse.

What I said was that Kratom is far less addictive and dangerous that typical opioids. A Kratom overdose is most likely to result in nausea and stomach irritation, not in death, and quitting a daily Kratom addition is far easier than quitting a daily oxy habit.

The article you said linked there were a few hundred calls to poison control centers around the nation during a year. Just last week, 174 people overdosed on heroin derivatives in Akron, Ohio in six days. Twenty one people died. Ohio's Governor just declared a medical emergency in the state the epidemic has gotten so bad.

http://www.chicagotribune.com/news/nationworld/midwest/ct-he...
This is not really true. What the US banned were toys and novelty items based around easily-swallowable rare earth magnets. The ban is on marketing and packaging, not on magnets themselves.
This is a serious discussion, you racist jerk!

Oh, wait, you're back after 5 years away... Then welcome!!
Not quite. I've heard of it, but nobody I know has.
I have one of the affected TVs and I don't think that I have ever used the YouTube app on it. This is primarily because it has always been hooked up to something smarter: a computer, game console, or Apple TV. The interfaces on smart TVs of that era were abysmal. Now that all of the modern boxes and TVs have voice search and everything, I can't imagine there are too many people who are extremely heartbroken over this. Especially when you look at the price of a Roku or FireStick.
Totally agreed. Some people have an unreasonable fear of migrations (not to try to put words in the above poster's mouth, just pointing out something that I've noticed). You generally shouldn't worry about migration-related downtime with Postgres if you're not using table constraints, using columns with defaults, or changing a column's type. There are very few migration procedures that require something like a table rewrite these days, or even an index rebuild.
The cheapest I know is http://winity.io/ ($12/month i.e. $144/year).

Your price expectation is unrealistic. At $50/year a provider would earn $500 after 10 years. That has to pay for the actual hardware, windows license, space in datacenter, power, bandwidth etc. It's a miracle that winity can provide their service for $144/year.
You're right, I stand corrected.

http://www.hellenicshippingnews.com/dry-bulk-shipping-under-...
> "Day 2 (if they haven't used the product): Have you had a chance to use {ProductName}? - Body of the email went over a few benefits left out of the second email..."

When I get this email, I unsubscribe/ignore/tell them I'm not interested. If it's too high-pressure, I'm out.
Or easier provide a Dockerfile
Scared me straight. I'm chucking mine.
Head Transplants and Idealism
Phones can be cheap - I have a $30/month prepaid cell phone with 5GB, unlimited video/music. Paired with a google voice number, it's effectively unlimited everything. https://www.walmart.com/ip/Tmobile-30-Wireless-Airtime-Card/...
cant you limit sharing to Read/eXecute pages only?
Find your representative and shoot them a quick note. It only takes a minute, and it may make a difference.

http://www.house.gov/representatives/find/
For sure I liked the separate IB/PB. Good call! It was faster to develop in NS than in anything else for me.

At the time, I loved the digital librarian and menu system. After leaving and going back a few years later the WS seemed a little too dated for me. I use the context menus in BlackBox on my linux box. OS X seems to be my comfort zone now, which tends to color memory. Though I also found the IB/PB split much faster to work with. That's for sure.

You've got me fired up. I'm installing 4.2 ent in virtualbox now, which will be the newest version I've used :) Thank you!
Mentions and typeaheads for Draft.js
Should rename this to "We're winding down Starfighter" or something like that.
A quick google says that brass is a non-ferrous metal.
On the bright side:

1) You can write code that ships.
2) You can hold down a job.
3) You have at least one friend who is willing to let you sleep on their couch.

Sure you've done some stupid stuff, but that's in the past. Just save some money next time. :)

And your worth as a hunan has nothing to do with being able to implement a splay tree blindfolded.
Yes, to be safe you'd have to do the checksum after performing the RSA operation.
I captured my whole research while learning about startup traction
"does nothing to tell an LP what a company’s ultimate value at exit will be"

"nothing" is the wrong word here. My experience is that the "marks" are indeed quite helpful and for the most part, reasonably accurate.

My experience is also that many portfolio company valuations are not particularly sophisticated.

The hedge fund comparison is odd since many hedge funds investments are as illiquid or more.
depends, do they run node? because there were successful javascript rowhammer implementations demonstrated
Two common options are magneto-torque rods that that use the earth's magnetic field or reaction wheels that spin masses up and down to provide torques to provide attitude control. They've documented their attitude systems btw on the site [1] it's magneto-torques and a "spin torquer" which I hadn't heard of but looks like it's another type of magnetic attitude control.

[1] https://upsat.gr/?page_id=26
It really just sounds like the author has a vendetta against Google.
I generally don't think that people who hack for curiosity should receive custodial sentences on their first conviction.

But Guccifer isn't that. He wasn't curious about how things worked. He was curious about the contents of Jeffrey Tambor's mail spool. That's a malignant kind of curiosity, and I feel no compulsion to mitigate its criminality. We should be using criminal law to keep creepy people from invading other people's privacy. (Yes: that includes anyone who might be doing that improperly under color of law).

All that aside, most criminal sentences are far too long. Guccifer's is not at the top of my list of crimes that should have their sentences ratcheted down, but it's not entirely off the list either.

Be careful about the goal-posts here, please. Guccifer didn't hack life-critical systems. Any cat-sharing startup can create the same kinds of risks to Jeffrey Tambor that Guccifer's targets did.
I don't agree with that because you really just query the keys for users that have the attribute in question without inserting a ton of nulls and having to work out changes to the attributes when you realize "I wish I would have thought of that column" several iterations later. Spending time up front agonizing about the "overt schema" strikes me as an anti-pattern when you are likely going to pivot later and it's super convenient to just use the same tables as you have been using all along. New users are different in that case but not so totally different so just but the new attributes into the column keyed on "pivot1" or whatever.
To be fair, you can write CHECK conditions which are arbitrary expressions involving JSONB values. Though at that point you might as well just use a normal column.
The font is monofur, my favourite programming font. You can download here https://github.com/powerline/fonts
We could do that, or, instead, we could argue about whether we should do that so that the ratio of comments to upvotes stays near or below 1, so that a dumb tweet doesn't race to the top of the HN front page.
I've learned to completely ignore anything launched publicly at google IO (wave, ara, glass, etc).
How to copy Blu-ray to ISO
And a lot of people have a lot less than $2,000 to their name! It's more than enough to help you get started with wherever you go from here.
I'll second this
Every agent in an arms race is behaving rationally, from their perspective. The only solution is cooperation, but corporations have less incentive to cooperate than, say, nation-states.
Sorry for that, I have changed it.
WHAT TO DO IF YOU NEED HELP [1]:

Crisis Text Line provides free assistance to anyone who texts "help" to 741-741.

If you prefer to talk on the phone, N.I.H. recommends the National Suicide Prevention Lifeline: 1-800-273-TALK (8255).

[1] https://news.ycombinator.com/item?id=11550822
Have hope. Went through a similar experience. There's nothing wrong with retreating and regrouping at home. Set manageable goals, like getting out of bed before noon and eating two meals a day. Work your way up slowly. See a therapist who specialises in solutions based therapy.

Life is an experience. You've experienced the shitty part. You also deserve to experience the good parts. I told myself all the time "I want to see my potential". You should at least see yours, right?
The bottle opener on the end of my grill spatula is the only bottle opener in my entire kitchen that I can reliably find (because it's affixed to this huge grill spatula).

I use it to open bottles far, far more often than I use it as a spatula. I don't think I even grilled this year. Someone should make a grill spatula + bottle opener combo without the useless spatula part.
First, take a deep breath. The sky is not falling. You know more about programming than 99% of humans. Relax.

Think of an app or service idea that will help people and make you money.

The only thing you need to do is this. Then, once you figure it out, figure out how to build it, or have others help you build it.

This will take care of your income. Stop with worrying about letting your parents down or getting your ego bruised.

Everything will be ok. You sound like you're dealing with a mental illness. There are millions and millions of people with similar issues. It is not the end of the world. You can cope and thrive despite it. Eat healthy, exercise, start loving yourself and giving thanks to the universe and anyone you can. If you read these words know that if you follow these simple steps you'll be better than ok.

I'm rooting for you.
D
IPv6 has a humongous private network range, though. fd00:/8 has 2^120 IP addresses. You could set up a Docker bridge with that range and run containers with random addresses. Correctly guessing one of 2^120 addresses would be nearly as difficult as cracking AES128.
>And even if NASA was on track to meet that goal, they still would have missed 2016 QA2, which is only about 50-100 feet. Asteroids of this size are so small that there's almost nothing we can do to detect them. And they can still cause a lot of damage. The Chelyabinsk asteroid, which exploded over Russia in 2013, damaged multiple buildings and injured over 1500 people. That asteroid was only about 55 feet wide.

So it was a city destroyer at best, let me know when it's a continent/planet killer.
Cool blogpost. People that enjoyed this might also like to take a look at "The Architecture of Open Source Applications" http://aosabook.org/en/index.html.

Also, a few months back I annotated the original Tor whitepaper here http://fermatslibrary.com/s/tor-the-second-generation-onion-...
This court ruling is a ‘fatal blow’ to consumer protections, advocates say
> Protip: Use the planner config settings[1] (one of which is mentioned in this article) with SET LOCAL in a transaction

We've wanted to do this but the last I checked, Citus, the software we use to shard our postgres databases, isn't able to handle setting configs in a query.
Note that Google specifically hires heavily for "culture fit" or "Googliness". From my experience as well, I'd say Google hires people who think like Googlers, and ergo, Googlers tend to be pretty similar.
A blast from the past.

Top email domains :

1. hotmail.com
3. yahoo.com
4. aol.com

49th most used password: Blink182
Presumably that would be covered in "smarter and more proactive next time."
Staffjoy | https://www.staffjoy.com | San Francisco, CA | ONSITE

Staffjoy is solving the most interesting problems in workforce management. We help businesses to create and share schedules with hourly workers. To do this, we have built complex workflows into web applications for both managers and workers. We were apart of the first YC Fellowship class last Fall, and now we are a 4-person team based in Fisherman's Wharf. We just opened up a position for a scrappy, self-starting marketing professional to build our brand equity from the ground up.

Our tech stack is primarily Go, React/Redux, Kubernetes, Bazel, and some Python. We ship quickly and often - see what we have been releasing at https://blog.staffjoy.com

We're currently hiring:

* Marketing Manager
* Dev-ops Engineer
* Front-End Engineering Lead
* Full-stack Engineer

Apply at https://www.staffjoy.com/careers/
I think most people just don't want to get sweaty at all costs :(
Yeah, I will optimize it. Thanks.
Disappointed about this one - I guess this was just too early (like glass). They had to create a lot of both hardware AND software to make it work. Expensive and risky work for a single company to take on.

I was honestly holding off on a cell phone upgrade hoping to get my hands on the developer version of this early 2017.
People always say this about the iMac but the fact is that the iMac is cheaper than the competing displays. You literally get the computer inside for free. If you don't like the computer inside you can ignore it and use the iMac as a display.

Anyway these days a computer should last you five years easily.
Internet of bricks!
Why you tend to stay away from AWS ecosystem?
Exactly. And if the rest of the world goes to hell in the process, so be it. In fact, Russia has a basically win-lose, zero-sum of international relations, so I am guessing this sort of outcome would make Putin very happy.
I gather this is a joke.

But more seriously, there's a school of thought that HTTPS is "faster" than HTTP. Which isn't quite true except that HTTP2 is faster and only operates over secure connections.

https://www.httpvshttps.com/
I've always been very meh towards 3D, but found that it works quite well in a VR cinema. The 3D effect is more pronounced, more natural, and there are none of the downsides (blurrier/dimmer). On the other hand, the 2 hours with a DK2 on watching the Jurassic Park remaster wasn't very comfortable ergonomically. A great deal of potential if they reduce the weight however.
I have a company that has built a lot of smart tv apps. I can say that the Sony TVs have consistently been the least performing of the bunch. We don't support most 2012 TVs anymore and that's on more solid TVs like Samsung and LG.

This is a pretty natural evolution it's hugely painful to support legacy TVs right now and 2012 is about where they're becoming too old and underpowered.
VC as a fund class is literally about finding outliers. How much of that is luck is arguable* but it doesn't make any sense to ignore outliers when comparing returns.

* How did Sequoia end up as the only VC that made money from Whatsapp? It certainly wasn't an accident.
If your requirement is mainly indexing and search, then the performance of Sphinx (http://sphinxsearch.com) will be must better, even for large amounts of data.
I'd also say get community involved early in your project. Use something like Baqqer to put it up, embed newsletters, open up a shop, get feedback/help and give it some distribution.
I read the title and I thought "mark" as in "the target of a scam". I was super excited to read a post about how VCs scam founders but get away with it because they're, well, VCs, and on a VC blog, no less! Imagine my disappointment on clicking the link...
“Let me tell you something you already know. The world ain't all sunshine and rainbows. It's a very mean and nasty place and I don't care how tough you are it will beat you to your knees and keep you there permanently if you let it. You, me, or nobody is gonna hit as hard as life. But it ain't about how hard ya hit. It's about how hard you can get hit and keep moving forward. How much you can take and keep moving forward. That's how winning is done!”

― Sylvester Stallone, Rocky Balboa
Looks like the directive for dnsmasq is stop-dns-rebind, for anyone wondering.
Eh, Apollo 11's difficulties were not a computer crash, but the computer throwing up repeated alarms saying "You are asking me to do to much, so I'm going to follow the rules you instilled in me about what tasks are vehicle critical and what tasks can be dropped." AKA the 1202 program alarm. Which happened because the rendezvous radar was left in the AUTO mode for descent, when it was only meant to be used for ascent.

https://www.hq.nasa.gov/alsj/a11/a11.1201-fm.html
I recall being asked to look into a perplexing problem with some legacy technology a few years ago. An 80s era radio controller system was effectively some DOS software running on a DOS embedded board. The boards were dying from old age. Replacing them with modern industrial PC boards wasn't working as expected - the software wouldn't run. The techs had tried various methods of slowing down the hardware to match the software's expectations to no avail. After much probing about (all original source code was long ago lost - if it was ever available) I found the code was crashing inside something that looked like an RS232 driver. Specifically the software was using what was apparently an undocumented scratchpad register in the 8253/8254. The modern PC's hardware emulation didn't cover that (the data was always reading back as 0xff - enough of a problem to turn the delay_n_millisecs() type routine I think I was looking at into a delay_forever() routine). The lesson, as always, avoid undocumented quirks unless you have absolutely no alternative.