skysight-inc/HackerNews huggingface dataset:
I haven't been following this, but are you saying that Wikileaks asked for this to happen?

Because what I read in the tweet pretty much says - we don't want this, please stop.
I disagree. It should be the responsibility of the ISPs to monitor their network and shut down the harmful devices. Going after the hardware manufacturers is pointless, many of them are far too small to do anything about the problems they've created. You can sue them out of existence, but dozens more will pop up in their place.
Nope, for example if an application is designed without dependency injection because it is more "lightweight" it is a pain to introduce it later.
If you designed it from the start to have clear dependencies and with an IOC container then you'll have a much easier time in changing it when there are new requirements.
As you can see the boundary between good engineering and over engineering is pretty thin.
And it obviously depends from the context.
In a toy application probably you can survive without a container.
In a real world project you are going to kill yourself without it (been there, seen that).
This argument makes no sense?
I am not a big fan of Cherry keyboards in terms of typing experience - on those I have used, I had to push the keys pretty hard, and there was little tactile or acoustic feedback. It feels like dipping my fingers into cold honey.

On the other hand, those things pretty much last forever, I have two of 'em still sitting on my shelf that must be 16 to 18 years old, and they worked perfectly the last time I used them. They are still PS/2, so I can no longer attach them to any of my machines, but something inside me refuses to throw away gear that still works.
Ask HN: What means do you provide for people to contact you?
As a developer I am in a constant process of consolidating my online footprint. One topic I am not sure about yet is what public means I should/can provide for people (meaning everything from chance encounters to paying customers) to contact me.

How do you do that? What channels do you prefer for what and why? How do you prevent spam?
Until Google starts serving pages from our phones...
I'll take it.
In most modern networks like GSM DTMF are send via non-sound channel. Actually that was done because of famous Woz's blue box.
It is - this legislation from 2010 is about lets of <30 days.
Wind Turbine Fire india
Another speculation is that these were very specific attacks. Are there any online monitoring / logging / audit services that stopped being reported to? I know that at least the SPF checks failed for emails. Some other infrastructure could fail too.
Incredible Peoples are Awesome – Amazing humans in the world
I do find that there is something surreal about Twitter and the U.S. election, it has become a primary communication channel. We used to have 'I have a dream' speeches, nowadays it is lol txt tweets. Donald Trump's contribution to this tweet-thread is an example:

"Wow! @wikileaks admits its supporters are engaged in anti-American cyber-terrorism. No wonder Wikileakes loves me so much! #ImWithPutin"

Is that really from a presidential candidate? With a misspelling and a hashtag that is not what you would think would chime with the electorate. Plus some narcissism thrown in, just to make you cringe.

As for the tweet itself, I am amazed that Wikileaks thinks Assange is that much of a hero that they think that some anonymous fan would take down the internets in response to Assange's internets being taken down. There is some conspiracy minded thinking going on there, warranted or not, it is not the sort of mindset that Wikileaks need to be in if they are to function as an organisation. For instance, if some real conspiracy was going on, e.g. the U.S. military were running a 'cyberstorm exercise', then Wikileaks would have taken the bait. In so doing this takes discussion away from what Wikileaks seek to publish and towards the ethics of hacking.
PS/2 to USB adaptors aren't very expensive.
You don't have to, because any programmer group is already usually male dominated.
Yeah, that's the thing about a $150 chair from BigBoxCo vs a close-to-$1k-new chair. The expensive one will always be comfortable, but the cheap one never will. You can get parts to keep the expensive one in top condition, but the cheap one require replacement every couple of years. You can get a used nice one for about 2x the cost of a new cheapie and it'll probably last 4x as long before needing anything replaced, and it'll be more comfortable and much nicer the entire time.
Yes, but of course the lost productivity of the eastern continental U.S. for just a few minutes likely dwarfs the wasted electricity by many orders of magnitude.
I think you misunderstood. Sweden has a census, they just don't have a voter roll you can look up to see what race your neighbour is or what party they belong to.
But they are big enough to pass FCC, CE (for Europe) and all the other certifications required to sell their goods. This is only one more compliance test to pass. It's not special because it's computer stuff.
Eh :).
I'm skeptical about how feasible it is to send enough solar panels to Mars in order to power a base.

Everyone's keeping quiet about the inevitable role of RTGs or fission reactors in early human Mars exploration.

Solar will come either via an abundance of payloads delivered to Mars as things ramp up, or via panels produced on Mars itself.
I believe most experienced software types would agree that maintaining systems over time is a rather different skillset to building them in the first place. 'Fire and forget' is a great short-term commercial strategy, but usually a terrible operational one.

Certain (usually early) stages of a project may be time or resource rich or permit wide-ranging changes with minimal risk (client impact, downtime, live failover requirements, carefully engineered change-overs, etc.). At these times, an experienced person might opt to utilize resources to 'over-engineer' for contemporary requirements in the knowledge that it is a strong and well-reasoned long term play, while to the less experienced, non-technical project managers or stakeholders this may seem questionable.

Ultimately, every project is different but there is a 'sliding window' of project resources (particularly time and the availability of low-risk incremental change) and requirements (expanding, shifting, contracting).

A famous quote from a famous figure on migration: Those change-over things are really severe. Really severe problems. - Joseph Henry Condon, Bell Labs.[0]

Perhaps ultimately, over-engineering may be inefficient but efficient if considered in light of the alternatives: by parable, eventually including a rewrite in javascript that also reads email.

[0] https://github.com/globalcitizen/taoup
Calling for government regulation of devices is all fun and games until the government comes along and mandates closed source, irreplaceable firmware like the FCC did with Wifi access points.
Machine Ethics Podcast Eps 7. With Designer Sam Hill
To be fair, those have been very effective in keeping my non-techie family members from accidentally installing malware because they'll at least check with me when presented with a scary system dialog. And it hasn't impacted my own use other than the occasional extra clicks. In a locked-down corporate setting, I can see how that could be maddening, though.
Elon Musk: negative media coverage of autonomous vehicles is ‘killing people’
Relatively trivial. Mirai didn't prevent future access as far as I know. But it would be illegal as well.

Warning the users would be much simpler. The hosts used to report infections are known. Destination port for the infection is known and normally not exposed.

I think that at this point ISPs should do the same thing with incoming port 23 as they did with outgoing 25. Disable by default, allow people to enable if they want to.
In a perfect world, we would all operate our little empire, where we control every piece of infrastructure, and would not be reliant on any other provider. Alas, maintaining that infrastructure has costs... enormous costs, and to get a product to market quickly, you often can't do it on your own. Maybe industries like banking, defense, and healthcare are different, but for the majority of us, we just can't afford to build our own basic internet infrastructure and compete in the marketplace.
By saying "We don't want this, please stop" the implicit assertion is that it's being done on your behalf, and there's no reason at this point in time to assume it is.
I think we disagree on two points. First, I don't think the influence of RoR was as sweeping as you do. This is probably just a difference in perspective or preference.

Second, regardless of that, I think the JS ecosystem is well-enough explored that the chances that some single new idea or platform is going to dramatically change everything doesn't seem very likely to me. For reasons I've mentioned in my top-level comment on this page, I think diversity of the JS ecosystem is going to be with us for a while.
No, it does not. GOST algorithms usage is a must inside government structures without any exceptions.
OMG, that looks like a parody of a 1990's web site, except that it's not a parody.
So how long are in France for? The tax stamp process is pretty wild. Have you had the pleasure of dealing with the OFii or prefecture yet?
End-to-send security is much better than the in-flight protection TLS gets you, and even that only as far as you trust the half-assed pki. I imagine most crypto experts don't put much faith in the integrity of their hosting providers and are not in the business of opsec themselves. Of course end-to-end only helps if people actually perform the check...

TL;DR They probably think TLS in software distribution = false sense of security.
Agreed. And I would even go a step further. Most often ed (tech) companies focus on education as opposed to learning. It is all about efficiency, organization, administration, and improving conventional education or schooling processes rather than improving the learning processes of the student.
Yet they keep encouraging Californians to relocate to Texas, bragging about low costs and a pro-business environment: https://texaswideopenforbusiness.com

Perhaps a screening process is needed?
As far as I can tell, this anti-government paranoia in the US is just an internet bogeyman. It doesn't seem to stop the elite from doing anything, whether good or bad. It certainy hasn't prevented the US from compiling databases about its citizens.

Japan is the first country I've heard of that records family info in this way. But Australian states do have central land registries, these are maps which have the final say own who owns what.

In the US this system is rare, and the resistance has not come from Tea Partyers. Rather from the industry of title-insurers who benefit from the unceratin property rights created by the title-deed system.
Which, of course, will result in a worse security posture. Interesting technical ideas can be found in the actual research being done on embedded device security out there. This comes to mind, for example: https://lwn.net/Articles/568943/
Okay, so some regulator comes up with a security test, the device passes the test, and then later on some security researcher discovers a flaw in either the test or in the device in a way that was not expected. What now? The manufacturer may well be out of business or they may be too small to recall all of their devices. They cannot be counted on to remedy the situation. As much as you'd like to blame the manufacturers, blaming them won't do much good.
https://github.com/tjwei/play_nsfw
I have some experiments along this line.
I will be interested if you take time to write this up.
Believe it or not, people working on theorem proving are aware that computers use finite arithmetic, and they take this into account. Yes, floating-point computations are hard and painful to verify. But no, it's not that easy to hand-wave away the whole field :-)
Prediction: There will come a time in the not so distant future when even 140 characters will be beyond the alt-right's attention span.
PKI is a business model. That download page suggests you to verify downloaded tarballs with OpenPGP key, or visit Git repository to look for signed (OpenPGP again) tags there. Of course you have to setup some kind of trust for verifying keys. If your browser shows you such kind of errors, then seems that you do not trust CAcert.org used for certificate creation. You may retrieve OpenPGP keys and find signature you may trust. PKI (HTTPS) is single point of trust, OpenPGP provides much more ones.
Steve also spent his and his companies time and creativity designing products for these guys - https://www.youtube.com/watch?v=eqceHviNBC4

Which is why 50 million Americans are willing to vote for Trump. Cause all the turtle neckers...you know...are working on "magic".
That's a parody account.
How even whois verification works? It don't contains email of domain registrar, not registrant?
I think I must have missed some context here or misread since an attack on an electrical grid is substantially different from disrupting major web services.
Tells what people? How do you know who owns a device?
I'm counting the days until cars will be weaponized remotely via rich text message received on your onboard entertainment/computer system which isn't physically disconnected from the vehicle controller because it at the minimum accesses status info.

Some grave accident is the only way mandatory minimum standards and improvements will be had, unfortunately. It would be enough to disable breaks remotely for regulation to appear.

It's ironic that (semi-)autonomous driving will improve safety, while all the added software and network connectivity will accelerate the need for software quality requirement as used for airplanes, because software defects will be deemed lethal. I really hope it will happen before someone or something remotely causes a vehicle to cost lives. That said, I suppose a vehicle would turn off the motor if everything else (sensors, actuators, ...) fails.
I'm using commit logs for my suicide note!
Not to you I'm not. What's your point? That demand shocks have supply responses?
1177 BC – The Year Civilization Collapsed [video]
Are you actually refering to referundum as the "most democratic process" when they are (mostly) always accompanied by massive propaganda ? The Brexit one being no exception (on both sides).
I beg to differ. There is so much botched typography on the internet and widespread use of Arial-like fonts that monospaced, while not ideal, is far from the worst of choices.
I wonder where the bulk of their training images are from? The website doesn't seem to indicate it. These remind me of the parallel universe in "Stranger Things."
Email is still a great aggregation point. Everybody can send it. You don't need an account. And if you want to, you can redirect pretty much every other channel into it.

Spam is also pretty much solved for email. Filters are so good that most of the spam/scam doesn't even try to avoid them.
Your Netflix stopped working. You're talking about going to war.

If you're being attacked, I'm not sure what international law has to do with it.

That's incredibly naive. Trumpian almost. Even in the midst of real war (you know, when people are dying, not sitting on the couch unable to place a Prime order), we follow international law. Because we want everyone else to as well.
So you'd be fine with Wikileaks being shut down at this point?
All it needs is a keyboard, and WiFi mosule, and its basically the last project I worked on! (Some key differences, but close enough).

Seriously though, setting up mini laptop-style devices with a REPL and perhaps an SD to flash programs to, took off as an option at some schools in my area.

Students learn with a device that:

* Is simply maintained, and won't bring down the network
* With a device that doesn't have the same privileges as their machine. (Running Python locally? Students can disable GPOs)
* They can take anywhere and play with anywhere
* Can be cheaply and quickly replaced

The risk/reward scenario meant schools loved the device. To most students, it replaced their TI calculators. Especially for games, once we taught them how.

This project is very cool, and approaches the magic I felt when I got my very own first DOS machine, and discovered BASIC. But it has modern conveniences.
Yes, as long as your keys are indepdenent. If your keys are correlated, the weaker cipher can leak out your key and make the whole construction weak.
That might be the worst political analysis I've ever seen. Opposing equality and liberty, how hilarious.
When I interpret it I see it as a valid point:

When it's not one person or group doing it but the responsibility is widely distributed in space (many people in many places) and time (evolving complexity) we tend to just accept things as "that's just how it is" and not even try to challenge it. Which of course has a practical aspect, since it is about the hardest thing of all to try to change this kind of stuff.

For example, when I compare my Atari 1040 STFM and what I could do with it with the progress in hardware and software and what I can do now I can only conclude that hardware and software advances greatly outpaced the actual "customer-facing" abilities of the system. Sure I can do much - much - more now, I'm talking about scale comparison. So all those much-greater-scale advances disappear somewhere between the internals of the system and what the user gets in the end. But saying exactly where or even changing it would be an incredibly challenge, and given the continuously changing landscape practically impossible.

Not sure how that applies in this context, "overengineering" after all is exactly not what I describe since that's a word meant to used for a deliberate design process, but that's my thoughts for the above comment and the issue raised by the OP comment about page size and complexity on Medium.
Ideally, at least half for fun, yes.
> This type of install script can't be run offline, because it needs to fetch dependencies (so you can't download it once and run it on multiple systems, and you can never run it on an airgapped system)

Well, you could if the script was written well enough. Back in the usenet days shar archives were a thing. Basically a shell script that had a large uuencoded payload (which itself was probably a tar file), so that you could just run it and get binaries out.

Of course no one actually does that any more since conversion to unicode bloats the archive considerably. But there's no technical reason why it couldn't.
Man this guy is so full of shit, he throws strong words everywhere without knowing their meanings...
> The software was designed following best practices. It is stable, people iterate quick. You can take your time to think about the best solution.

Except that the messy project you were working on before sounded like a one man project. And at every new change request you delivered, working by yourself, a pretty big chunk of value.

Now, in the nicely engineered project, you work in a team. The team is iterating in sprints that require a number of developers two or more weeks of work to deliver the tiniest feature. Yes, iteration is quick, but it doesn't really deliver much value. Every time the new CEO requests something even slightly different from the exact functionality that was developed so far, the project architect's answer is that this will not fit in the current set of features, and it might be possible, if ever, after another series of sprints that will take multiple months to complete.

And the funny thing is that, while in your one man project you were considered a lone cowboy working on a relatively simple system, the architect of the current project (that delivers more or less the same functionalities but requires 5 or 6 times the time and resources to maintain) is considered a demi-god "because the project is so complex". Because of course the CEO measures the complexity of the project not but what it delivers, but by the amount of resources consumed by it. And while the CEO of the previous company was annoyed when a new feature required more than a week to implement all by yourself, now whenever the new architect says "we need more resources for that", this actually increases his power and consideration in the company, as it is taken as a sign of the complexity of the project.
They will use JS where it makes sense, e.g: web UIs to drive some background components. These are new projects.

Let's see if that first mover decides to show up.
The major difference between physical products, and network products, is that the damage caused by most physical products is limited to their immediate vicinity. Network products have no such limits. IOT devices in Calcutta can harm networks in the U.S. That isn't true of a bad lawn-mower or blender. The network operators and ISPs need to step in and do better policing of their networks. This of course, raises other issues but blaming device manufacturers, even if it really is their fault, just wont work.
I'd go a bit further. Log before the operation. If you want the duration, log it separately, afterwards.

This prevents issues where the long operation fails for some reason and never leaves a trace. Yes, you should also log failures, but sometimes that may fail too if the long process manages to crash everything.
I do prefer E-Mail too but witnessed people from my (younger) siblings generation to dismiss it as a thing you have to provide for some service (e.g. instagram) to sign in to.
> True, it's time to make a change and start educating family and friends about this issue and the alternatives.

You can't just educate everyone. The law need to change to make this sort of thing illegal. Personal data should be limited, and controlled by the person involved. You should not be allowed to sign it away.
This will probably make a very good "storytelling like" medium post.
Any act of measuring a system changes that system. Pagerank did more to destroy the value of the web of links than any other technology before it because it was so good at measuring its value. Extracting that value then instantly leads to diminishing it because others (in this case the link spammers) want a slice of that huge pie.

I believe that each and every technology that successfully manages to index the web in a new and useful way will further diminish the value of the web.
Didn't we try this same argument already with gun manufacturers? How well did that work?

The problem with holding manufacturers responsible for releasing a potentially dangerous product is that the manufacturers view compliance with regulation as an obstacle to maximizing profits, and seek to avoid it. Manufacturing is also centralized and they organize and lobby politicians to influence regulation.

Consumers are distributed and disorganized, and I predict that blame for not securing your IOT device(s) will stay with consumers for the foreseeable future.

I agree some standardized testing would be a good idea though.
How important are they really? If they aren't trustworthy -- and I think there's a great case to be made for the fact that Assange is not -- what can wikileaks do that some other website can't?
The Dell Precisions that are just rebranded Dell XPS laptops. They're nice at first but get annoying after a while. That said, the 5510 feels a heck of a lot more durable than the m3800 I used to have.
According to this article Universities are hedge funds with schools attached.

https://www.thenation.com/article/universities-are-becoming-...
Have you planned to share app source code? Or can you share it?
In Praise of Scripting:  Real Programming Pragmatism
Mirai is pretty basic and use default device password which wasn't changed by the end user, so manufacturer will probably says it's all user fault
DR WILLIAM PIERCE