skysight-inc/HackerNews huggingface dataset:
One of the Krebs articles mentioned an idea of a certification (similar to UL) which could be on products like DVRs and web cams. You can't ever certify something as completely secure of course, but the certification could indicate "firmware updatable", "no hard-coded default passwords" and "where there are passwords they are generated randomly and unique to each specific product" (not family of products). Maybe even "consumer can change all passwords to new randomly generated values". I can't say that all or even many consumers will care, but if ISPs stepped up and started emailing customers about suspicious traffic coming from their home networks indicating one or more devices may have been compromised, maybe a good number of consumers would start to look for that certification when they buy. Which is important because, let's face it, if insecure products don't actually impact sales then a lot of companies aren't going to care at all. You can try to punish bad behavior after the fact, but only if their government cooperates and even then I think many times they'd just fold up shop under one name and open again under another. You really have to address it at the point of purchase to affect company behavior IMO.
Do you really think nobody had explained it to the girl's mother like that? It sounds like she was trying to end the conversation in the easiest way possible, and she knows how to do it because she's ended that conversation so many times before.
The Quest for Meaningful Work
"Assange's vanity than anything else" -> Don't get too ahead of yourself. Has there been any instance where Wikileaks had made a false claim?
> There's no RFC that talks about methods for preventing or mitigating hundreds of thousands of machines all sending arbitrary traffic at you at the same time.

The RFCs generally say that the problem is "you", i.e. the target. Of course those device makers could make their devices a little more secure, can't argue with that, it's another form of complacency. Still - the attackers are only able to do this because their targets are few.

If there were thousands of DNS providers such as Dyn each serving a small number of clients spread all over the world, it'd be impossible to attack them all.

To cause maximum damage you need to identify hosts that are common across many big companies. Someone did their homework and figured out that lots of companies are using Dyn for DNS, and for the East Coast of the US this is just a handful of servers. If the same DNS services were spread across 1000 servers, then the attackers would need proportionally more "power" to knock them out. DDos-ing 10 boxes is _so_ much easier than 1000 (approximately 100 times easier, to be precise).
I think if the cost of sending people to Mars really did fall down to those estimates, then countries themselves will try to send colonists, only because if they don't, and others will, then they will "miss out". Imagine if China insisted it wanted to send 10 000 of its people there? I'll wager europeans, americans, russians and indians will want to send at least as much, just not to be exposed as "weaker". It'll certainly be a factor in their decision making at least.
Or someone else can step in and flame and/or downvote and/or fire you because we don't want to lose valuable community members, colleagues or employees because of your childish attitude ;-)

You are welcome, I feel you have earned my downvote now.
USDCHF: Resumes Short Term Bullish Uptrend
Well you correctly diagnose the biggest problem with DI: it's all or nothing.

Only nowadays all usually includes significant 3rd party library code and everybody is stuck trying to figure out how to get their DI magic in place when said 3rd party code doesn't cooperate.
I want a personal mobile phone that I can use to communicate with my friends and surf web pages with no history shared with anyone.

Who else wants this?
Idiomatic Rust guides would be very helpful
Blame the Internet of Things for today's web blackout
You totally could attach it to a different setting, but figuring out that setting is in itself tricky! Like, I think a bunch of the military dynamic in the game is tied to the pseudohistoricity of it. While it isn't strictly historically accurate that, for example, dragoons devolve into soldiers when defeated, there's a certain amount of concreteness to the concepts involved (okay, you lose your horses before your guns) that makes a lot of sense. So I think you could make a more micromanagement-focused 4X, but I don't think you could really learn too many lessons beyond the very general ones from Col in the process just because so many of the game concepts are so tightly tied to the historical context around it. (That's huge, huge praise for Col, btw. It uses its setting to inform game features, not to merely dress them up in the way that, say, Civ does.)

For another example of a game that sort of falls down when it becomes so unmoored from something we recognize as reality, I'd like to suggest Pandora: First Contact. In addition to just not being a super-great game, I feel like the fact that it relies on transposing "familiar" concepts to an unfamiliar environment and just totally falls over in the process. Ditto Beyond Earth. Alpha Centauri actively doesn't do that, but it was also designed by Brian Reynolds and he's a rather sharp individual. =)
How would squirrels defend?
How to create an MVP for online marketplace?
I do sometimes try to take down trolls but have almost given up because it feels like nailing a jellyfish to the wall: easy but doesn't stick and might hurt me in the process.

Edit: add "try to", not because I feel I didn't win but because it feels so useless as that kind of trolls seems to be unable to recognise when their views have been shot to pieces.
Have a look at zssh.

... and shoutout to the 514 ;-)
For this purpose, MIT's Eulerian Video Magnification is next to impossible when you have both color changes and large motions (it is better suited to magnifying small motions, or subtle color changes in unmoving patches). NASA Glenn's thearn has developed another approach which has the same problems (https://github.com/thearn/webcam-pulse-detector).
We developed our own solution, involving (among other things) pixel-accurate facial feature detection and filtering methods not subject to FFT's regularity assumption
What use is TLS if I can't know that when my browser says I'm talking to example.com, I'm actually talking to example.com? I've got a secure connection... to literally anyone who can mitm me. PKI isn't 100% secure, but it raises the barrier significantly. I, as someone who owns a coffee shop or runs a corporate network, can't just go out and get a cert for google.com.
Ha. Thanks yes. Too busy selling stuff to get around to fixing the website. It's on the list of things to do...
Your post is late, but I would like to +10 it.

AFAICT, Mirai gains access ONLY through telnet on port 23. I see no one mentioning that anywhere here. If you do not have a device with something answering on port23, then you cannot be p0wned by Mirai.

Can anyone verify that statement as correct or incorrect?
I was a little kid connecting to the US gov list of 800 number BBSes and always had fun choosing Kermit as my protocol, but ZModem was much faster!
"I get what you're saying here, but if the chief virtue of the educational system is that it beats people into submission ready to face life in authoritarian (or micromanagement-disguised-as-teamwork) workplaces, I'm not entirely convinced that it's something worth protecting."

I'm against the public school system. So, we agree with each other. Yet, I'm for putting them in situations where some aspect of what they have to do is dictated so they learn respond to that properly. Some of them will allow a clever response to succeed while others will not. Just like in real world.

They need to expect and be ready for this as the authoritarianism is dominant in workplace and government.
LibVMI: virtual machine introspection
"if ISPs stepped up and started emailing customers about suspicious traffic coming from their home networks indicating one or more devices may have been compromised" - I remember Comcast doing something like that back in 2008ish.
In that case it's doubly efficient as we are both entertaining each other at no cost to sensitive community members!
Iceland Is Drilling a 3-Mile Hole to Tap Magma Power
The lawsuit will work because US distributors and retailers (hi Amazon) have joint and several liability for damage caused by defective products they sell.

You don't have to chase small anonymous overseas manufacturers. Distributors, acting in their own self-interest, choose to not sell the offending products.
Yup! It's only once every year or two that I've needed it, but damn is it a handy thing to have in your back pocket when nothing else works.

Last time I needed it, I also ended up using xxd to get the zmodem binary on to the device. Fun times, fun times. The device was buried in a concrete box under a frozen highway, and the Ethernet died, so we had to find a way...
Well, ok. But apparently someone at NASA thinks it is plausible. Argument from authority heuristic tells me to listen to them rather than you in this case. Since you are not coming with any links or specific argument against what was said there, that is pretty much all I have to go on.
Kermit was in the same space as Zmodem. I remember it fondly, as they were very progressive around "open source" way back in the early 90's, and probably earlier. They accepted what was essentially a "pull request" over USENET discussions forums from me to add a feature.

http://www.kermitproject.org/ckfaq.html
I agree completely, in fact it seems odd that the article is really complaining about the format being more complicated than bzip2 or gzip, when the comparison is not really apples-to-apples. Comparing it with zip would seem more sensible to me.

A compressed container format that allows quick access to individual files is very useful and actually improves data security - corruption in one part of the data will be far less likely to ruin the entire collection of files, whereas corruption in a compressed tar file may lead to the loss of everything (I know recovery tools exist, but they cannot prevent one file in the container being dependent upon data from another file.)
The more time goes on, the more confident I become in the notion that I am currently living in an episode of Black Mirror.
True...yet I am still not convinced about the clear advantages ;)
"I see this all the time. Startup founders hiding their ideas because of the fear that someone will steal it. Remember: no one cares about you. Your biggest issue is getting discovered. If someone steals your idea, that means you’re doing something right."

This advice is wrong. My current successful business was the result of an Internet post from a person that had the same idea. I had more money, resources, and time, and I crushed them before they even had a chance to get their MVP perfected. They went out of business within a year.

Announcing your idea too early can bring unwanted competition with more resources than you. The key is to validate your idea before working on it. This is different than not keeping your business a secret.
Yeah, they should add the meta/viewport with scale=1 tag to the head, and it would improve readability on phones. I mean it't annoying that the web is in a state where that is necessary, but until it's solved, it's better (and not much more difficult) than nothing.
NetFPGA is a great development board with a lot of features. Unfortunately its size and research quality software/firmware do not make it a suitable device for deployment at scale into production environments.
If it is foreseeable that your defective product would be used to harm another person, you can be held liable. Yes, the intervening actor is behaving illegally. That doesn't matter. You still bear your fair share of responsibility.
> xz wasn't chosen for its archival integrity AFAIK, it was chosen for its size.

No: that's why the LZMA compression algorithm is being used. The switch from the original LZMA container format to the "improved" xz container format had nothing to do with size, as the old container generated slightly smaller files in addition to not having this combination of negative properties.
> Why unfortunate?

This is a leading question. Leading questions are obvious when the question they ask cannot be answered with a simple statement. Leading questions are a sign of dissonance and should never be answered, unless one desires the dissonance for themselves. Dissonance itself creates suffering, which is an inefficient process that attempts to resolve the dissonance in a way that causes the holder the least amount of suffering in the near term. "Thicker skin" is simple a reference to burying dissonance. "Troll back" is a reference to spreading the dissonance to others. "Finding different company" is impossible as the Internet now connects all of us. Better buckle up.

It's been my experience people will rationalize being an asshole until they start accepting themselves for who they really are. What is fun is to see someone solve that dissonance on their own and realize the truth that willful suffering is more efficient than offloading your suffering to someone else.
That part with the "casual remark" is something that I experienced myself. In middle school I was bullied by a neighbour of mine. The weird part was that on some days he was really nice to me and he acted like he was a good friend of mine and on some days he was a total dick. I learned that when I approached him in the morning and talked to him (about homework, video games, whatever) he was nice to me the whole day, when I had nothing to do with him he became mean and started bullying.
Ironically, an implication of your words is that a state owned video sharing site would not only adhere to the 1st amendment much better but would also serve consumer interest in a more balanced way.
If you want to buy every stock in the S&P500, any reason not to use Robin Hood with their $0 transaction fee?
Still much denser. Around 150 ft^2 per employee.

https://www.google.com/search?q=square+ft+per+employee
The VTI, for example, has an expense ratio of 0.05%. You'd need $1.2M invested to pay Vanguard $50/month (which is my Internet bill).

Probably there are other optimizations with a better time-money tradeoff than manually managing your portfolio.
That was part of my point. If you're a 600 pound gorilla, then you don't always need finesse to beat a hundred pound competitor.
Probably they got beaten because of orders of magnitude. They were prepared, but not for cyber nuclear war.
I don't know about hacking but when my ex was cheating on me, a friend of mine referred me to Mr Robert I thought it wasn't real but he later proved me wrong by helping me to spy on my ex-husband and got me all the necessary evidence I needed. He helped me to hack and spy on his emails, mobile , all his social media and his bank accounts, Robert did all this remotely without touching his devices. You can contact him with mastershield55@gmail.com if you are in the same shoe as I was..
And yet the boys over at xorg wants to throw that part of X11 out the window and use screen scraping instead...
Unusual quantum liquid on crystal surface could inspire future electronics
> Even if you are the most dedicated Clinton supporter there is, you have to realize how one sided media orgs across the line can become.

You'd be surprised. My friends and family seem to be doubling down on it. They either outright don't care or they are encouraged by the underhandedness of it all.
Pain of over engineering might be more hidden and difficult to point at, but in my experience it hurts much more. At least with under-engineered code you know what to do... But will you ever be able to remove unnecessary abstractions?
This is true. Does this make the accusations less credible?
After a second check: that extra 70kb (on top of the 12kb size of NX) is mostly from the FireBase and EventListener APIs that I use for real-time networking.
The Debian file format also doesn't take advantage of any supposed benefit of xz over lzma, and so is simply taking in the cost of xz's larger file size for what I consider to be "absolutely no good reason" (and as a major downstream of dpkg I pointed this out to its author a month or two ago when I re-asserted non-deprecated status for .lzma Debian packages as now one of only two noticeable changes I maintain to dpkg).
I sell a defective telephone pole. A vandal comes along and pushes it. The pole falls on your house. I am liable for damages to your house. The vandal is, too.
The article's point is, in part, that xz is more like zip or rar than gzip or bzip2, and use of it like those is incongruous (e.g. .tar.xz files). (Its other points are that xz has a number of systematic flaws, in its error detection and some "misfeatures".)
But the guys you stole the idea can be succesful the same way as you.
Russians seek answers to central Moscow GPS anomaly
Buffett is close to winning a $1 million, 10-year bet he made with the head of the hedge fund Protege Partners.

The bet was simple. Buffett would invest in a Vanguard S&P 500 index fund, and the hedge fund could do anything they wanted.

http://fortune.com/2016/05/11/warren-buffett-hedge-fund-bet/

http://www.npr.org/2016/03/10/469897691/armed-with-an-index-...
I think you're mostly right, but is it not a form of learning with an expiration date? Like, once a user of this strategy reaches a certain age, it becomes socially unforgivable?
Diablo Canyon?
Bitfinex attempts to communicate with the hacker
Vote for Net Neutrality
Your advices are still very imature, imo. Long long way ahead.
This will never work. Many have already tried to claim that IQ tests are 'racist' and this will just be another claim of discrimination.

The reason students are saddled with debt is because the government controls the loan system. Universities don't care that you can't pay the debt back (and get their money up-front) and continue to inflate the costs of administrative salaries and classes.

If you take out government-backed loans, the universities will be forced to lower the cost or nobody will be able to afford it.
I think everyone trolls, to a greater or lesser extent, and whether they admit it or not. It's a form of a prank/social response experiment when done in taste. The current political climate in the US, however, has brought out some ugly, inhumane behavior I'd never thought I'd see in the present age.
> a friend of mine referred me to Mr Robert

I think you mean Mr Robot?
While I agree that you should use PAR-like error correction systems when doing archival, one of the points of the article is that xz has poor error detection and recovery, compared to any of the other formats available.

If it offered none, and explicitly stated that, it would be one thing, but it offers some that functions quite poorly in practice, which is rather another.
Other than that, if we had some tool inside Rust ecosystem to support server side rendering for frontend, Rust will be the ultimate language of web.
Possibly, but why bring on more competition? From a business perspective, this is not a very good idea and will only make it harder for you to succeed.
I think there is an important difference between engaging people in controversial conversations and trolling.

In person, body language and tone are often enough to understand when someone is playing the devil's advocate or when they are otherwise stating things that they may not actually believe. When both parties understand this is going on, there is no trolling. Alternatively someone may have honestly come to the controversial opinions they are espousing. Again, body language and tone can often (not always) communicate the honest advocacy of controversial ideas and in this case there is also no trolling.

But when one party is misrepresenting their opinions in a way that the other party can not discern, you've moved away from just 'controversial' to fraudulent.

Online, almost all of the nuance of tone, body language, mannerisms, age, and so on is gone and all you are left with are the words making it much, much, easier to successfully execute the fraud.

To be proud of trolling is to be proud of engaging in deceitful and fraudulent interactions with other people.

Curiously I think there is at least one scenario where I don't think that deceit and fraud are necessarily unethical and that is in response to deceitful or fraudulent behavior. So pretending to go along with an online scam just to keep the scammers resources tied up isn't a bad thing. I believe in self-defense.

And just to be clear, when I read the parent comment, I did ask myself if it was a some sort of self-referential trolling attempt. Who really knows?
People doing theorem proving and formal methods know what complex numbers are, I can assure you. Mathematicians have plenty of statements about the properties of complex numbers, and many theorem provers have libraries that even formalize those statements and proofs in mechanized, automated ways that can be trusted. I'm not sure how "complex numbers are involved" is any more of a mystical problem than "finite-field arithmetic is involved" is a problem: it isn't.

I think I get what you mean, though. No, you cannot prove "my drone is magical and awesome and will never crash land even if I tell it to, and it takes the best pictures of any drone". You cannot mathematically prove "My on-board sensor will always work and defy the laws of physics and never be inaccurate". You CAN mathematically prove "My drone control software never reaches an illegitimate state, that would cause the system to deadlock or hang due to a software error, making the drone crash in a possibly dangerous, uncontrolled way". You CAN prove "My software will respond within exactly N cycles, at most, to any external incoming sensor signal".

That kind of guarantee is extremely valuable for such systems. It isn't easy (and requires deep, conjoined assumptions and proofs of both the hardware and software), but it's hardly impossible.

And sure, there is only so much the model can prove to you, at some point it has to exist "in the real world". This isn't really a counter-point to the actual formal methods field, though.

To couch it in a more concrete example: when people like Intel say "our CPUs don't catch on fire", they only mean it in a very specific sense. Sure, you can shove newspaper up next to your heatsink, and then when it catches on fire say "See! You were wrong!" But the reality is that their statement is sort of couched in the assumption that, well, you aren't going to do that. It's fairly reasonable to assume some limitations of your model. But this really has very little to do with being able to formalize general mathematics (like complex numbers or finite fields or N-dimensional spaces) using a theorem prover, or whatever.
Vue's single-file components (html, js, and scoped css) are super-appealing to me.

The message is something like: "These concepts you understand and use all the time? We aren't going to make you abstract them away. We're going to use them as the foundation for a new way to build apps."
> Imagine being Jewish in Germany just before WWII.

Really? Getting trolled online is like the holocaust?
Supporting only one language is a very big limiting factor imho.
Are you aware of some well-built systems for enabling that? What you're describing, while simple in concept, is not so simple to set up. There's tooling to be written and authentication to synchronize.
Yes, Seeing the "ZMODEM" on the front page triggered some nostalgia... waiting for hours to download a few megabytes. At least ZMODEM supported resume!