skysight-inc/HackerNews huggingface dataset:
My reading of Krebs On Security (krebsonsecurity.com), Mirai scans for factory default passwords or hardcoded default admin credentials. Going at this as a non-technical person, I would:

* Inventory all IOT devices in your possession.

* Find the device manuals and make sure you've changed the default password(s). Note there may be devices where it appears you've updated, but that have secret credentials you can't modify.

* Make note of which of your devices do not have an obvious way to change the factory default password.

* Keep an eye out for lists of devices that are known problems, here is one such sample list: https://blog.sucuri.net/2016/09/iot-home-router-botnet-lever...

* Check each manufacturer to see if they have issued a firmware upgrade to address security issues. Apply update.

* Think about retiring devices that appear on the "bad" hardware lists or the devices with unchangeable factory defaults.

Hope this helps.
I think Chomsky is more appropriate, although the leader? I don't know...

There is a raise of leftists (at least in speech because in substance from Sanders to Corbyn there so much "left", rather a mild "right")
I suggest a gradual approach. Anyway, the manufactuter has more costs so the price is going to be higher. How higher in the long run? Maybe not much. We already experienced the same progression towards safety with materials that don't poison us and appliances that dont catch fire or interfere on the radio spectrum. Every one of those steps cost money. We still have cheap stuff to buy.

The difference here is that those devices must be maintained or retired. So there could be a recurring cost. Eventually there will be ecosystems of companies taking care of the update and maintenance of devices made by their customers (the manufacturers.)

We also have to educate people, to the point that they will feel ashamed to buy unsecure devices and inadvertently help the criminals behind those attacks in the news. Nobody wants to help the mob (or worse) by keeping their stuff at home, right?

This is going to become a matter of national security in every country, because those attacks can be used as a weapon to incapacitate vital infrastructures.
> get past the simple NAT.

UPnP

Though you still have to exploit.

I wonder how many are running some linux variant though, and have some remote execution vulnerability on their web UI (maybe even without logging in)..
Well, they didn't call it Brinrank :)
That sounds a lot like harassment.
This is actually a common misconception perpetuated by zealous Scientific American reporters (and cognitive scientists :) . Many complete, consistent self-justifying axiom systems exist today. Formal verification schemes employing metamathematical logic also exist and can be both complete and consistent. Even MORE systems have been created that can verify their own semantic tableux exclusively (and by extension are consistent & decidable). Even still there are systems like Presburger Arithmetic, which can by proven decidable (although they cannot prove themselves)

On page 12 of the english translation (and possibly the original german), Godel addresses certain criteria for distinguishing a sufficiently powerful system (as well as recursively axiomitizable, etc).

I have personally written such a software verification scheme, and even have an inferior interaction mode for SMT solvers that can help you verify such schemes (it's in my profile & github).

There are also great books like the extremely cheesily-named graduate textbook: "Your Guide to Automated Reasoning", that examine this issue from every perspective imaginable.
An over-engineered system is a system where the complexity of the requirements is not proportional to the complexity of the solution.

The part that is counter-intuitive, is that a rather simple idea can sometimes have very complex requirements.
Sadly the present state of software engineering is mostly incapable of archieving what your reasonable expectation is. Malware can exploit bugs in the devices to get arbitrary code execution (=run any code the attacker wants).
This in particular angers me because it's so broad IMO and antithetical to open source and security research. This smells like political pressure and censorship. Like the beginning of the end for GitHub...
Yes, your understanding is correct, though a CA can use domain ownership to skip DV checks (if you validate requester is X Inc and X Inc is listed in WHOIS, no DCV needed).
Europe has much better, cheaper Internet than the US, but the prices you cite aren't better than what you will find in the US.

In NYC I am paying $69/mo (approximately 61.50 EUR) for 50/50, and that's fiber. No TV.

I have seen bandwidth prices cited in places like Bulgaria, Estonia etc. that are much better.
Ahah, I was doing systems programming in Pascal dialects and Modula-2 before having to know C was a requirement.

Of course one always has to validate security, but with C each line of executable line of code is a possibility exploit, which grows exponentially with the amount of developer touching the code and their respective skills and UB knowledge.
Land would still cost a lot because a lot of people who make a lot of money want to live there, and most of them want single-family homes with yards and driveways and school, churches, shopping centers, parks, and residential streets nearby.
Best mexican food recipes for [menudo]
I think he was trolling (war on terror, advancing democracy through oil contracts and all that...)
Proud travel history
I am working in Afghanistan with mod A's a civilian employe ,how to submit previous travel history in canada immigration
I don't know what the averages are, but I'd say in towns the most typical are terraced houses with four or five floors - sometimes that's one apartment on each floor, sometimes two.
No. It's just cheaper to make identity fraud without centralized database.

You pay few thousands to regional officer in any district and they issue you a handwritten internal id book [0] with whatever name you want and there is no trace of it. If something happens they would claim that id form was fraudulent or stolen.

However, when you get tax number, it goes through central office and leaves paper trail and entry in some database that records such issuance.

[0] http://images.delcampe.com/img_large/auction/000/226/943/305...
I tend to operate under the assumption that everything will need to change, so I need to make it easy to change.
The simplest idea is to put your exploit as JS payload in some shady ad network or auto-cracked PHP website, and get to the devices by scanning & fingerprinting devices on the browser's rfc1918 network. Then use a reverse shell style connection to c&c.
Winx Dvd Ripper Platinum 7.5.15 License Key and Crack Full Free
Can you name a few fashion startups?

One that comes to mind is Nasty Gal. I think it's missing the problem of men; we have no equivalent and finding good clothes can be a challenge.
From a short experience as a contract-less freelancer: People will try to take advantage of you.

Once the product is finished (or close to), they will try to scrap what they can, host it on their own and stop paying you.

You will need to figure a way to stop this from happening
For me it was installing WordPress with themes that would ping my server. Anyone with PHP knowledge would be able to figure it out in a few hours, but it stopped most "non-technical" users from trying anything weird.
> Not fearing change, being able to handle change is the skill required

Agree x1000, I'm currently dealing with a situation stemming from this sort of thing (not being able to handle change, in software design, and philosophically with the architecture).

I also keep using the term "evolve" with respects to how to develop a good codebase. You can use design pressure to drive abstraction and logical components of a codebase. If you try to figure all that out from the start, you're going to have a bad time.
I don't understand how they can scan IoT devices if IoT devices are behinds a router which is usually our home network setup. So we will expose a public IP, and NAT is usually not enabling by default anyway so how the heck they can telnet/connect to the IoT devices to brute force password?

It seems like somehow we
Why isn't there a mechanism for informing device users?
My only question: is it better to start a separate fund (OS fund) or company (Kernel) for biomedical research rather than joining a pre-existing one?

The article said that Pfizer annually spends $7-9bn on R&D. Maybe resources are spread too thin; people want moonshots in the biomedical industry as there were in tech, but barriers for entry in this field seem too high.

The benefits are long-term, something I think private investment won't be interested in but perhaps private innovators will be.
Probably because they get help from Russia or China.
People that are politically interesting (for states and others) have obvious reasons to protect their privacy. You need politically interesting people to fight for your rights.

You want to protect your privacy so that in the event that you become politically interesting, they don't have a backlog of your data. Furthermore, you want to protect your data to not be dissuaded from any (even subtle) actions that you might take if you weren't affected by a chilling effect.

You want any person who hasn't been previously cognizant of the dangers of privacy to not have that hang over his head, in case he becomes politically interesting (even not on purpose, like could be the case with whistleblowers), or become politically interesting, like an activist, journalist, etc. Any free society needs this. To do this, everyone needs to have privacy.

Finally, even for the first group to have privacy, everyone has to have it. It's not something you can just give to specific people.

I'm assuming you know that there are plenty bad things can be done with data, if someone is willing. I hope that's evident. Not mentioning what criminals could do with it, or how corporations can abuse people with it. As they routinely do.
Is there any sense in which this is solving NP-complete problems in polynomial time? They're clearly aiming at NP-complete problems, but it's not clear how efficient this machine is or how general it is.
It seems we agree. Each framework is deliberate, while the number of frameworks being higher than everyone agrees it should be is a side effect.
What if the download gets interrupted due to network error and bash runs something else than what was intended.
E.g. the script has:

rm -rf /tmp/something

But when the pipe gets interrupted it executes:

rm -rf /
It depends. How much the scope and vision of a project will vary in 2-5 years and 5+ years will vary greatly depending on the project. A small internal app for an institution or business probably should be far more cautious and simplistic than a consumer program designed to scale out as the business grows and customer needs change.

Fit for purpose seems to be the idea that the author is conveying for an end-user level, and I feel that's something that gets lost in Slack chats/at the conference table whiteboard when designing things. A program that just does what it's supposed to isn't really lacking features, it's just doing what it should. I've seen this countless times with project management just hitting feature bloat after the initial part got to the "works somewhat reliably" stage, and suddenly it's time for the feature set to expand for some reason. In the projects I was dealing with, it happened as people tried to satisfy their egos and to show off; this isn't always the reason, but it's a reason. Other times I'd assume it's just a neat feature that someone wants to work on but has no where else to put it.

I think it's just important from the get-go to determine do you really need software that evolves or do you need software that works really well at what it's supposed to do. I'm sure you can do both, but at a certain point it seems like these two directions start to pull too far away from each other.
Yup. Not to mention, Couchsurfing, an actual home sharing site, predates Airbnb by five years.
What's the difference between durability and availability?
Cloudflare still refuses to support basic 2FA (2012)
the New Outkast- Must Watch
My take away from this is you need to ask 'why' as often as 'what' and 'how' when developing software.

In my experience many software developers completely fail to challenge the 'why' of what they're being asked to do, and jump right to design/coding.

To be fair though, not all software developers work in an environment where they can, or feel they can, ask or challenge the 'why', but the software will only benefit if they do.
how do you know your program was correct?
Best Java 8 Tutorials
I hear they call it "design patterns".
I am not sure you will think the same if someone in your family is at the local hospital and the electricity has been shut down
Underneath the curl|bash method, which is what is being discussed I believe, there is a link to a "more secure installation.": https://rvm.io/rvm/security . These instructions have you download and verify a signed installer.
The FAA has imposed a height limit of about 15 storeys on downtown San Jose. It's right in the takeoff path from SJC.
I had hoped the rise of Trump would kill the 'political correctness' nonsense the right-wing pushes once and for all.

It's a conspiracy theory just as much as 'climate change is a Chinese hoax', 'globalist bankers are plotting to destroy the US economy's, 'Mexico is intentionally sending its rapists' or 'the war on Christmas'.

Notably, PC-attackers focus on colleges and young people, which is the segment that overwhelmingly reject Trumpism (coming fourth in several polls). No wonder they're scared, the GOP is dead to young people.

Instead it seems like we just have to wait for the victims of this hoax to die off and the people who have been running the media campaign dedicated to scaring them to retire before sanity returns.
This will really monopolize ISP in many places including my town.
How does this meme keep getting repeated over and over and over when it was wrong the day LE launched? It doesn't even make sense if you just think about it. Why would you need root access to make some HTTP calls? Most ACME clients don't require root. The one-click-and-reconfigure-my-webserver obviously requires root.
It baffles my mind that anyone in the developed world in 2016 should be unable to prove such basic things as who they are and what country they belong to.

In the U.S. the problem is not proving basic things, but preventing the government from building up a huge profile of everything about you, from what you ate and where you've been to the size and color of your underpants. Even that wouldn't be such a big deal if the government wasn't ultra paranoid and just constantly spied indiscriminately on everyone, actively trying to use that information against you, under the auspices of "protecting" you.

Bureaucracy in the U.S. is actually pretty simple and straightforward, and it works. For example, every time I compare how easy it is to buy, insure, register a vehicle, and renew its registration in the States, and then compare with a certain country in central Europe, I just want to scream and tear my hair out. In the States, it's a straightforward, practical, uncomplicated matter: after all, owning and driving a vehicle isn't a big deal, and shouldn't be one. The European country in question? WOE TO YOU: prepare for a protracted ping-pong between the local police station, the central police authority (ministry of internal affairs), the insurance company, back to the local police authority, then the technical inspection station, then the local police authority, and let's not forget at least two trips to a notary public. Oh yeah, and I almost forgot to mention at least one trip to the tax authorities. Payment to authorities? Not before you've been sent several times to a local newspaper kiosk, after waiting for up to two and a half hours in a line, to buy special government stamps, which then only the bureaucrat is allowed to affix and annul with a seal on the actual documents. And the entire time they all arrogantly stare at you wide-eyed, "but sir, what are you getting upset over?!?" Oh yeah, and your documents, like a birth certificate, aren't allowed to be older than six months. I mean that's "completely logical", because we all know that the place and time of one's birth is an ever changing variable, right? And yet, my driver's license which I've had since well into the last century isn't up for renewal until 2069... but get this, if you're tech savvy enough and get a login and a password(!!!) in a special governmental database (only in person at a physical teller, of course!), you can print some of these documents at home, SHA-1 check summed with a crypto key from the ministry of internal affairs, gratis... super consistent and fair to all citizens, huh?

In some things, U.S. is light years ahead. And when I see how easy it is to do things like that in the U.S. I feel I'm completely justified to question why the process cannot be as simple and as uncomplicated as it is in some other countries. In Singapore for example, it's enough to fill out one paper and get a company registered in up to 15 minutes; if it works there, it can work everywhere.
This are not spoofed IPs- it looks like normal traffic to the ISP, from their customer real IP addresses.
The problem is, you're not making a transactional choice. You're not just choosing the internet for you, you're affecting the internet for everyone.

I also think assuming that you know this can't hurt you yourself is naive, but it's just easier to point to people in more vulnerable spots.
I always get Aerons used on CL. In the Bay Area, if you shop around for a few days, you can get one for $300. My last one came from a dentist office. I sold my OK-condition size C for $280 and picked up a better-condition size B (which is actually my size, at 6'0 and 220# with a 44" chest and 36" waist) for $300 later that day. It was the second one I called about; the first person didn't call me back fast enough.

Agree that the lumbar support is more comfortable but PF does have some benefits. I like that they redesigned the arms which support the seat above the part which connects to the top of the gas cylinder. Hopefully this will have less tendency over time to wobble.
Outsystems, a low code, rapid app development platform
Every Election
States have and will routinely harass and otherwise dampen the efforts of activists, dissidents, even journalists. I think examples of that are easy to find. Furthermore, they can't really have good privacy unless everyone does.

For a general case of the harms of privacy invasion, I recommend reading relevant chapters off of Schneier's Data and Goliath. Brilliant book.
Why? Is there any remote need to generate scary faces? Or is it done just to have catchy PR title. I hope there is some real motivation to do this line of research.
durability means you'll get your bits eventually.

availability means you'll get your bits immediately.
> The latter does not give me warm Rust feelings today. There's a SIMD crate, but it doesn't look maintained and only works with the nightly compiler releases. I didn't think there was any stable way to do inline assembly, so I think linking C is my best bet here?

Yeah, the person formerly working on simd is no longer able to contribute to random open source projects. It's still something the Rust team wants to make stable, just not right now. SIMD is a bit complicated because you need to address target support in a straightforward way.
After having an aeron at work, I had to get one for myself. Now any non-vented chair feels sweaty and wrong after a few minutes.
Upon reading TFA three times, it is still unclear to me who is waging a vendetta against whom. I vote clickbait as well.
No the thing is i've had to learn all of this the hard way. using opera with a custom sync phrase, as well as using the opt-out addons that google provides. Canvas blocker, Ublock origin, and cleanlinks to get rid of the UTM strings on links. Oh and not using chrome whatsoever.
And it is incredibly hard to predict the future. So I just try to engineer things forcefully for only today's needs. And instead of future-proofing, I try to make it easily comprehendible. Make their intentions as explicit as possible. Comprehension trumps everything. Because before we can actually change code by typing it in, we need to be able to hold it in our head and mend it there. And if you can clearly see in your mind's eye what is currently there, you can see what it can become.

The above applies only when we have to 'predict' the future. Oftentimes we know the future already - there is going to be ton of traffic, we are going to need an API for this use case, we are actually going to stay in business etc.
Availability is the % of times you try to access your data that you get it back. So 52.5 minutes of downtime a year is still within SLA.

Durability is the % of your data that doesn't die. Eleven 9s means that if you store 1TB on AWS S3 you can expect to lose 10 bytes and still be within SLA.
This simply is not true. Plenty of connections with socialism if you read the 25 principles of the NSDAP as translated at the Nuremberg Trials.

For instance: "All citizens must have equal rights and obligations", "Abolition of unearned (work & labor)income. Breaking of rent slavery", "Nationalization of all associated industries","Profit sharing of heavy industries","Expansion on a large scale of old age welfare","Provision of a law for free expropriation of land for the purpose of public utility". "Enabling of every capable and industrious German to obtain higher education", "State to support all outstanding intellectually gifted children".
A simple AI to teach Google Chrome's offline dinosaur to jump cactus
Looks like they have re-branded as Z2 on Oct 18
https://www.wired.com/2016/10/zenefits-reboots-z2-might-not-...
> (Given a modest test suite and checking parameters at external API interfaces, scripting languages didn't have much problems with bugs that could be found at compile time, imho.)

Not my experience at all.
In the world of signed payloads the delivery, (2), includes all the distribution infrastructure. And trusting the vendor, 1, means verifying signature of the payload with their public keys. The assumption here being the building and signing infrastructure is more secure than the distribution infrastructure.

This level of security isn't desirable for everyone in all situations, but it's not just dogma and it's not "the same thing".
I assume you mean OCaml's "utop" ?
Heh, the Glass picture is really old. I used to be quite the Google fan, a few years back. Then I paid a bit more attention to the cost, and have been moving away since.

The managed hosting for Sandstorm is a good step in the direction, because it's very easy to me to move between Sandstorm servers, but I'm not super confident on running my own right now, and it's still in early development as a platform. But Sandstorm on their servers runs the same as Sandstorm on mine, and unlike leaving Google, where I have to figure out how to transplant my data from their proprietary apps to other apps, I can move my apps and data perfectly between Sandstorm servers.

I do place a high degree of trust in Kenton Varda (founder of Sandstorm.io) specifically to keep Sandstorm doing what they should. If I ever feel that trust is misplaced (and I keep a close eye), I'll move.
Thanks! I've been playing with Spacy lately. I've a product idea that requires NLP and I'm unfamiliar with NLP research and techniques. The idea itself is rather complex to implement, so I'd like to have a couple of interesting toy/side projects to hone my skills first. I hadn't thought Kaggle, that could provide a few good projects for understanding NLP tech better.