skysight-inc/HackerNews huggingface dataset:
The article states, "an OpenMP application written in the C programming language ... is compiled and the generated hardware is synthesized, technology mapped and place and routed to yield a bit-stream. This bit-stream is used to program the FPGA and the user can start using the enhanced OpenMP-accelerated application."

The article links to a full text paper:

Podobas, Artur, and Mats Brorsson. "Empowering OpenMP with Automatically Generated Hardware." SAMOS XVI. 2016.
http://www.diva-portal.org/smash/get/diva2:1033786/FULLTEXT0...

Here is the abstract of the full text paper:

OpenMP enables productive software development that targets shared-memory general purpose systems. However, OpenMP compilers today have little support for future heterogeneous systems – systems that will more than likely contain Field Programmable Gate Arrays (FPGAs) to compensate for the lack of parallelism available in general purpose systems. We have designed a high-level synthesis flow that automatically generates parallel hardware from unmodified OpenMP programs. The generated hardware is composed of accelerators tailored to act as hardware instances of the OpenMP task primitive. We drive decision making of complex details within accelerators through a constraint-programming model, minimizing the expected input from the (often) hardware-oblivious software developer. We evaluate our system and compare them to two state of the art architectures – the Xeon PHI and the AMD Opteron – where we find our accelerators to perform on par with the two ASIC processors.
Philippine President Duterte announces separation from U.S
But on the website it says they have 30m users only?
The before and after pictures (mountains) are two completely different pictures. Is the trick that your photo gets substituted by a better one? That would actually be not a bad thing...

Anyway, this has got nothing to do with kodak cameras whatsoever, just licensing a brand name.
Responsible disclosure and proper handling of passwords as well as not storing credit cards. Barring no breach at all, this is about as well as something like this can go.
Whenever I see something being sold for outrageous amounts of money (like some book on Amazon which can be bought new for $40, but some people are selling used for $1400) my first suspicion is: money laundering.
I'm confused, how is SSH an example of defense in depth? It is an access method. You should absolutely harden your SSH configuration. Fail2Ban is useless on a properly configured SSH server (no root, no passwords, no kerberos, only keys). Managing the keys at scale, well that is a different story.

I agree with you that ASLR, NX, and CFI are the most important system level defenses to employ.
Uh, this sounds like a paid advertisement.
As I wrote here in another comment: I expect conscious AI to be achieved sooner than replicating what human hands can do.
How about handling TLDs like second level domains but make them free, instead of requiring money for them get a few big companies and enterpreneurs to fund this "root level free as in beer registrar"

We all know running nameservers doesnt require magical unicorn blood and shouldn't be as obscenely priced as is now.
If I'm reading this correctly it works only when there's already access to a user account on the system. So you need to have an existing vulnerability already [eg an untrusted user].

Interesting whether it will give new root exploits for Android as suggested in the comments.
People use bit.ly specifically to shorten long URLs; for example, URLs with long Google analytics parameters (e.g. &utm=...) so that would defeat the purpose of using bit.ly.
Commuting from my place on Geary/Broderick to Chinatown on a bus takes around 30 to 40 minutes and costs $2.25 one way.
Taking an Uber pool takes 15 min for $4.50.

SF is riddled with Uber and Lift drivers for this very reason. I bet at any given moment, 80% of the cars downtown are rides for hire. The city should just subsidize with a few billion a ride as a service platform and stop wasting time and money on something that will always be sub par.
> it would be odd if their porn detector had such a huge gaping hole in it

phrasing!

I couldn't resist.
Fwiw, you should never think about an OS in terms of what security features they have enabled by default. The OS is almost always designed to help the user use programs and to help programs run. Just assume it is not secure until you do an audit + lockdown yourself.

If you want a secure system by default, you should probably not use Linux. I would go with OSX or OpenBSD to start.

(And finally: mounting /usr read-only isn't actually a security feature, because if you can exec code you can run a privesc and remount /usr read-write; mounting as noexec could arguably be considered a security feature)
IANAL, but it's just a catch-all clause so they could kick "abusers" without worrying that whatever "infraction" was not explicitly enumerated in the terms.

For comparison, CrashPlan has a similar clause (see section 11)[0].

Ditto Backblaze (see "Our Rights")[1].

I wouldn't be surprised that all "unlimited" consumer products have similar clauses. If this is a concern for you, use a metered product.

[0] https://support.code42.com/Terms_And_Conditions/End_User_Lic...

[1] https://www.backblaze.com/company/terms.html
He went on to say further things about them.
So basically, if you wouldn't give a user sudo, they shouldn't have login access at all? Certainly works for some scenarios, but not practical for many others.
H.R Gigerish.
I see "Join over 40 million people worldwide" [0]

[0] https://www.weebly.com
It seems like both SELinux and AppArmor could be configured to block access to /proc/self/mem which should mitigate it.
It's difficult to see how AWS and GCE can justify their ridiculous bandwidth charges given how low they buy it in bulk. This is plain profiteering. With cloud bandwidth was supposed to become something one takes for granted not something to fuss over with calculators.

And the whole nickel and diming charges that force users to needlessly seperate their computing needs into storage, compute, memory, bandwidth, reads, writes and what not are actually forcing considerable complexity on users.

This cannot be brushed aside as a good model for cloud when valuable user time is being wasted grappling with needless intricacies that have no reason not be flat.

End users cannot buy bandwidth at low bulk rates and for things like backups may be faced with considerable overcharges on their local connections.
Yes another automation factor is automated deliveries that can happen during the night rather than during office hours.

And remote working + VR - say no more!
yeah, this can be really awful.

Normally as a contractor, part of my value is that I can adapt to fill in the gaps left in the project. Thats almost always the best thing for both parties. Instead of pointing at a flaw and screaming that it needs to be fixed before I can work, I just fix it.

On a fixed bid, depending on the difference between the reality and expectations, that can put me underwater pretty quickly.

So I end up calling them and saying:"I assumed you had tests, and the board was working, and that I wouldn't have to drive back and forth to your office 6 times. Now my hourly is $7.50 assuming I could finish right now. So are we going to fix this or am I going to walk away from this giant sunk cost."

This conversation never goes well.
Why should this fuel just Republican attacks? The number of people that walked out of the DNC convention because of the rigging against Sanders shows there is far more trouble than just Republicans. The movement within the DNC that actually stands against government corruption will only grow stronger.
What you want is a language model. This will give you the probability on a word by word basis.

Something like [1] is pretty much state-of-the-art. It's worth noting that the kind of writing you are doing change the probability significantly. [2] shows this quite well.

[1] https://colinmorris.github.io/lm-sentences/#/billion_words

[2] https://colinmorris.github.io/lm-sentences/#/brown_romance
Yeah! To hell with gaming the algorithm of the day.
Another long read on plane spotters, this time from Australia: https://www.buzzfeed.com/andrewmcmillen/things-are-looking-u...

Usual disclaimer about it being good despite being on BuzzFeed.

Also this discussion was about a bot that tracks dictators flying to Geneva, potentially for money laundering: https://news.ycombinator.com/item?id=12748169
Canonical Livepatch Service – Apply critical kernel patches without rebooting
OSX? How is that more secure by default than Linux?
That would seem to be their choice to make, rightly or wrongly. And, to my point, there's plenty of space for people around the US and even in cities--just not in some specific places today as they're currently built out and provisioned for infrastructure.
He says in his post that his product would've revolved around allowing merchants to set rules on who could buy. Radar is a product centered around Stripe using deep learning with their own data to detect fraud; allowing merchants to set rules is just the cherry on top.

OP mentions Braintree but is rightfully hesitant. The release of Radar might send them playing catch up and OP is a solopreneur that could just as easily be working on something with less competition.
Nigeria has a higher per capita than India, which is considered the #7 economy in the world.

What low per capita income tells me is that despite being a wealthy country citizens don't have a lot of opportunity to earn wealth. Which is my point.
> Having three years of cars in your backlog isn't winning. Waiting three years for your car to arrive isn't revolutionary.

By this logic, Apple is a huge disappointment because they won't give me my iPhone 8S until 2019.
I think its the reason why there's a lot of cyber crime from eastern Europe.
Gitsome – A Supercharged Git/GitHub CLI
Self driving cars change what roads mean. Once we get to full fledged self driving taxi culture, cars won't park. Car sharing will be common at the cheaper end. So it becomes a lot more like busses. Much smaller fleet on the road. I expect that roads will get pedestrianized, returning them to common usage, because a Google car will calmly stop if a child is kicking a ball in the road.

Trains are intrinsically unequal, they serve hub towns at best and cities only at worst, they are dirty, cramped, noisy, unprivate and they don't go when or where you want to go. Even with Google maps seaming together journeys out of trains and busses, you end up waiting and walking a lot. And trains are an intrinsic monopoly with a staggering up front investment, you can't make them better with market forces. I foresee self driving cars cannibalizing the train's market of people who just want to pay for journeys rather than the vehicle.
Just (adverb):

1. Exactly.

2. (ironic, oblivious) Used to imply that an otherwise impossible task is just the opposite.

Time travelling is possible. We just need to get our hands on some of that negative energy.
And on Android. It completely kills the mobile, what a horrible product page.
Looks like they exceeded some kind of stupid limit on a cheap hosting provider... anyone got a mirror?
Maybe if you use a WeakMap with a transferrable object and assuming that if you postMessage a transferrable object and then get it back later and still have the WeakMap recognize it as a key. I'm not very sure that last part would work. I don't think GC-links reach through iframes in a way that would enable that.

WeakMaps are more limited than most people seem to expect. They're powerful tools that enable many new powerful patterns, but they don't expose the workings of the garbage collector. They're very different from Java's WeakHashMap for example. In Javascript, the only way you can tell whether the browser is using a garbage collector or not is to try to run out of memory. Without crashing, there's no way for some Javascript code to observe the runtime's GC behavior at all by design.
If you are curious how these facial recognition systems actually work, check out https://medium.com/@ageitgey/machine-learning-is-fun-part-4-...
I'd guess Little Szechuan[1]. Note that the original University Ave location in St Paul is now hot pot only.

1: http://littleszechuan.com
Wow only a 5" screen, BUT with full HD resolution and a 3000mAh battery?? Can't get that anywhere! I know many HNers besides me appreciate a phone on the smaller side. Usually that means the screen stays at 720p (Galaxy Alpha, Galaxy * Mini, Sony Xperia Compact) and the battery suffers (Galaxy alpha has only 1800mAh.) $550 is not a mini price, though. I'll hold out for a couple good reviews.
Using computers for political purposes sounds really fishy to me. They're too easily hacked. Witness all the electronic voting machine fiascos.
Less published exploits. Okay, so "more secure" isn't exactly correct, maybe "more difficult for a 10 year old with Metasploit to own it"
The controls are the only way I'd play a console shooter. It does come with same game play and level design restrictions though.
I think it's better to define field specific read/write permissions through the serializers. In the serializer's Meta class, you can define a readonly_fields tuple containing the string names of the read only fields
OSX, really? It's had more than one privilege escalation exploitable from just a shell prompt (eg. the DYLD_PRINT_TO_FILE bug).

Not really surprising since it's overwhelmingly used in practice as a single-user system.
I don't get why the US (and it seems similar in other anglophone countries) has so many problems in building up public transit in cities. Even politically - aren't US cities rather left leaning, like in Europe? Doesn't that lead to a preference of public transit and work against NIMBY groups?
A software ecosystem of chatbots
More details and background: https://www.leakedsource.com/blog/weebly/
Healthy Chairs for Women, Men, Kids and Seniors in Vancouver, BC
It's shame this is downvoted because it's the key insight of the two propositions:

1. the lack of ET-evidence is really odd and could be indicative of a barren universe

2. The outcome of 1 civ / universe is a really odd output (vs. a zero/many civs) from a Drake-equation-like natural, random universe.

Which should, if we can fill in the gaps to the above sketchy proof, cause the most rational among us to wrestle with the idea if we really know what's going on.

I'd add the other most salient fact is how quickly we're gaining the ability to examine proposition #1, by say in this case, datamining astronomy data sets...

3. In a few decades we'll have a pretty exhaustive survey of exoplanets that should find a TruePositive if there are some to find, heck even a photosynthesizing planet in the galaxy should suffice.

Taken together, there should be some philophizing about the idea that we could end up proving ourselves to be alone, all within the forseeable future, while we're still all still on Earth.
Weebly to Notify 43M Customers of Data Breach
> Prediction markets have also had some high-profile misfires, however — such as giving the odds of a Brexit ‘stay’ vote as 85% on the day of the referendum

I'm continuously annoyed by this. The prediction was 85%, not 100%. I'm guessing if you looked at all the 85% predictions, about 15% of the time the other outcome happened. That's what 85% means, after all.

You can't just round all predictions to the nearest integer and call it a "misfire" when the unlikely events happen. 1 in 7 events happen all the time! The misfire would be if 85% events always happened.
Iron Sharpens Iron: 3 Reasons I Love Working with Startup Founders
> Backblaze B2 was a strong candidate... The one
> issue is that they seem to have inconsistent latency.

I work at Backblaze, and B2 is our second product (Online Backup was our first product). We are less experienced at serving up data that has fixed latency requirements, but we're learning and actively improving this area all the time. I'm curious when you last tried it and I would be interested in hearing about your experiences (in a personal message if you like).

In a nutshell, the first time we read a file we build it from the vaults (vaults are our lowest layer which is reliable but slowest) and that should be fairly consistent with some caveats (see below) and then for at least the next 24 hours it should be extremely fast and consistent being served out of our SSD cache layer.

Caveats: If you upload a ton of files it is getting loaded into the most recent vault we have deployed. So for three or four days you and everybody else are uploading tons and tons of files to this exact vault causing great loads. After ten days the vault will be "full" and we'll deploy another vault and suddenly serving up your files will become a lot more consistent and easier and faster because the vault is almost entirely idle.
What we just started doing is deploying twice as many vaults at once to lower their load in half while they "fill up" making the response in the first 10 days faster and more consistent.
The Bolt ships in a couple months.

It doesn't have the self driving hardware, it's otherwise comparable to the Model 3.
Wikimedia files petition against extending the ‘right to be forgotten’ globally
Look, this was 100% Russia. 17 government departments have certified this was Russia. This has Russian fingerprints all over it.

<sarcasm>

Edit: man, this got unpopular. Curious if people dislike the sarcasm, or the sentiment of regular unfounded claims Russia is responsible-- at a gov't level, for major "hacking" transgressions.
One company that does this is Forter: https://www.forter.com/
Yeah, I can't get into two of my Gmail accounts even though I have all the information it asks for. It simply doesn't work. I just want to delete them too (not even sure if that is possible), because I refuse to use Google for anything now days.
US was never a democracy hence the electoral college. Founders didn't trust the public to elected the highest position in government or US senators. Only the house was directly elected.
Trains are an artefact of income inequality. Someone can afford to build them and it's not you. Someone has all the leverage over whether you get a ticket to ride and at what price, and it's not you.
That job listing is just so sad. Who starts a senior android role's requirements with "git workflows"?
This reminded me of Nodyn[1], a Node-compatible JVM implementation, which it appears is no longer actively developed.

[1]: https://github.com/nodyn/nodyn#notice
From the US attorney's response to Mr. Martin's attorney's motion for a detention hearing:

> The Defendant also had encrypted communication and cloud storage apps installed on his mobile device.

...like...their browser linked against libopenssl and they had the stock Google Drive or Apple iCloud apps?

> The antipathy demonstrated in this letter raises grave concerns about the Defendant’s intentions and potential actions should he be released

The letter strikes me as having been written by a person who is fairly odd, but possibly has good motives. It's hard to understand the context but if indeed it was signed by "Hal" and somewhere in/on/near his workplace it's suspicious indeed.
Sorry, I'm not sure what you're getting at, I read the post and I'm more than familiar with what Stripe is up to.

There are countless startups building on Stripe's API, if Stripe hadn't done this there would have been plenty of other competition. I would expect OP's service to have planned to differentiate themselves by target market, effectiveness, price, or payment processor.

Stripe just has a really easy API, but the competition has almost caught up to them. Anti-fraud is a hard problem, so if OP's solution is really novel, it should be applicable to other platforms.
New Nanomaterial, MXene, Best-Ever Protection Against Electromagnetic Inference
Advertisement is not only marketing, it's also art. Even if ad agencies will fail to convince some porn site or condom producer to use such ad to generate news, they still can create social ad and submit it to advertising festivals.
Totally agree. I think they are great for what some people refer to as "exploratory testing".
"A nanomaterial coating made of a material called MXene discovered by researchers at Drexel University in 2011 has now been tested in multiple applications. The results? It works better than copper and aluminum in protecting electronic parts and devices from electromagnetic interference (EMI)."
With that you would end up with something more like Sizzle[0], not necessarily jQuery.

[0] https://sizzlejs.com/
Also, "Nokia" is not a camera.

But anyway, there is probably a customer segment, but it might not be that large.

But the camera design language make sense, i think, especially the leather and larger knobs - even on a phone.

Functional-ish instead of apple minimalist - at least I can tell a difference from the rest.

But then maybe they should have a real lens and not a faked plastic thing around it to make it look bigger.
Andrew Wiles on What does it feel like to do maths
Using a phone as a login credential is risky from a reliability point of view. At least with passwords and security questions you can (in theory) have 100% dependable access to them anywhere in the world if you memorize them, back them up, or put them on an encrypted USB flash drive or in an encrypted cloud location.

You can't do that with a phone. You can't duplicate your SIM card. If your phone is lost, broken, stolen, or your service is cut off or unavailable for whatever reason, you're screwed. At least with passwords, security questions, or hardware tokens (of which you can have several), you maintain reliable access no matter what if you've made backups.
Wouldn't that affect how people trade? If you can spend money to influence policy, it might be worth making the "wrong bet" and losing money.
Project Releases All Current Congressional Research Service Reports
Aren't SD cards and cartridges different? I thought that cartridges used ROM while SD cards can be written to.
it's definitely a joke. everything in the store is overpriced, FAQ item "how can I uninstall linux" links to a video of a guy smashing a computer, etc. look at this FAQ item:

What's with the stupid (logo|website|twitter|github account)?

It would have been fantastic to eschew this ridiculousness,
because we all make fun of branded vulnerabilities too, but
this was not the right time to make that stand. So we
created a website, an online shop, a twitter account, and
used a logo that a professional designer created.

I think the author is just snarking about either branded vulnerabilities or the hype that this issue is getting. or both?
What's a better alternative to SSH?
I have had people come to the counter and ask to send money to Nigeria and other places. I have to make sure everyone at that money desk knows about fraud.

Never wire money to someone you don't know. Never. [0]

Have you won a prize?
Once you deposit the moeny, will they send you more money?
Was it a tax refund?
Is there a serious medical situation you are helping with?

[0] http://corporate.moneygram.com/compliance/fraud-prevention/c...

All too often the people coming in to wire money know the fraud detection questions.. and say our answers in advance.. "Yes, I met them," for example. Plus, these are regular customers that buy and return other items.. they are friends by work-customer-association.

They know the workers who refuse their transfer..

They know the system that requires suspected fraud and how we have to report it..

They still don't know how to spell the persons name, so they take out their rabbit eared email out of their purse next to their cane and read each letter out loud..

"I think this is a scam," I say.

"Can I talk to a manager, please. Now"

"I am a manager. I will not proceed with this transaction. "

In the end if someone wants to send money to someone they don't know they will find a way...