skysight-inc/HackerNews huggingface dataset:
Isn't that a common setup for "lights off" servers, where you use something like IMPI to get virtual "local" access to your console?

Now, you should have this sort of access seriously locked down, since hardware vendors are very bad at creating secure IMPI ports, but some people don't last time I checked, which was a few years ago. And someone compromising your system for that (e.g. the firewall in front of them, the VPN to it, or your systems you use to access it) could also get in.
Just because they have access to your contacts doesn't mean they store. Most likely all they do is check to see if they're on WhatsApp.
Microsoft Photosynth to Shut Down February 6, 2017
I wrote a course scheduler for students at my previous university. It doesn't have that many users, but I get a "thank you" every now and then, which is enough motivation for me to keep it updated. In any case, I automated the entire course data update process, so I only need to run a Python script before the start of each semester.

It's running on the Heroku free tier with a cheap domain, so it only costs me a few cups of coffee every year.

http://jadawil.xyz (sorry for the crappy design!)
> Now, what value has verified software which runs on buggy or (theoretically) compromised hardware?

The vast majority of bugs and vulnerabilities are due to software, not hardware. There's tremendous value in pushing that boundary back to the hardware layer.
A/Bingo, a Rails A/B testing plugin that I wrote in a part-time week and used for a few years. The main reason I'm proud of it is Ben Kamens and company ported it to run on Google App Engine for Khan Academy, where it formed the core of their experimentation platform for a while.

http://bjk5.com/post/10171483254/abingo-split-testing-now-on...
I agree with most of this, but I beg to differ with the last bit :

> [writing] some Elm code on server side [...] just seems like putting a square peg in a round hole

We are actually writing server-side elm for a living. We mostly have a Scala background and we actually think elm is a pretty great fit for backend code.

Agreed, the absence of typeclasses is a limitation of the language. Yes, it means, you can't have a `Set RandomObject` or `Dict RandomObject SomethingElse` (among other things) and that can get pretty frustrating for folks coming from almost any other strongly typed language.

However the real question here is not "is this language worthless because of that", but rather "can I overcome that limitation for my specific use case ?".

My personal take :
- If you are considering a switch from JS to elm (server or client), the point seems moot, as the language features described here are far from being available in JS.
- elm suits _some_ server side application very well. Not _all_ server side application.
I agree with most of this, but I beg to differ with the last bit :

> [writing] some Elm code on server side [...] just seems like putting a square peg in a round hole

We are actually writing server-side elm for a living. We mostly have a Scala background and we actually think elm is a pretty great fit for backend code.

Agreed, the absence of typeclasses is a limitation of the language. Yes, it means, you can't have a `Set RandomObject` or `Dict RandomObject SomethingElse` (among other things) and that can get pretty frustrating for folks coming from almost any other strongly typed language.

However the real question here is not "is this language worthless because of this or that", but rather "can I overcome that limitation for my specific use case ?".

My personal take :
- If you are considering a switch from JS to elm (server or client), the point seems moot, as the language features described here are far from being available in JS.
- elm suits _some_ server side application very well. Not _all_ server side application.
Experience?

Everyone is talking about X, but I've never used it. Perhaps I can build something simple just to dip my toe into X.
Audio button that rocks (CSS)
Election Security
It's like the rise of California wineries. If someone wins they all win.
Google and Facebook ban fake news sites from their advertising networks
>Security contractors recently discovered preinstalled software in some Android phones that monitors where users go, whom they talk to and what they write in text messages. The American authorities say it is not clear whether this represents secretive data mining for advertising purposes or a Chinese government effort to collect intelligence.

We can tell the same about Facebook, Google, Yahoo, Twitter, Uber, Microsoft, Visa, AmericanExpress...
Got an example?

That is, of a government entity that explicitly rejects software products made by recognized (for-profit) companies because it's an open source.
To Learn requires time. Also, developers and Ops have a lot of work to do. Why should I spent time to learn a lot of things about ops. I want to code
Which is why you use httplib[1] for sending HTTP requests.

>>> import httplib, json
>>> conn = httplib.HTTPConnection("httpbin.org")
>>> conn.request("GET", "/get")
>>> res = conn.getresponse()
>>> print res.status, res.reason
200 OK
>>> data = json.load(res)
>>> print data
{u'origin': '0.0.0.0', ...}
>>> conn.close()

[1] https://docs.python.org/2.7/library/httplib.html#examples
Python is not really object oriented. To get information hiding you have to wrap your class in a closure and that closure has to track the individual instances. It's not clean code and it's horribly inefficient.

Python is also not a functional language.

Python provides language structures that allow you to use both styles of programming OOP and functional as-if-it-was.
From the article: "Kryptowire took its findings to the United States government. It plans to make its report public as early as Tuesday."

Can you share the report yet?
Does the algorithm yield the exact path to the target volume?
Well thanks anyway, I enjoyed it!
The hardness of the material is critical. Ferrous material sounds like metal, which could just melt/spatter on impact. Probably not make a good cutting medium.
I've heard Signal has US Government backing, which makes me scared for an NSA backdoor. Any idea about this?
I wrote a SAME encoder that runs in your browser: https://github.com/aaron-em/same-encoder

Hardly game-changing, to be sure. I did it for fun and to see whether it was possible at all, and as far as I know nobody actually uses it for anything. But there's something about synthesizing audio a byte at a time and playing it back in a web browser that tickles the same sense of magical possibility that I first experienced as a kid learning BASIC on an Apple IIc. Our industry's grown up a lot since then, of course, and I've grown up with it - but, every now and again, it's delightful to be reminded of what led so many of us into this line of work in the first place.
My experience, coming as somebody who has experience on the large end of embedded (100's of MHz, 100's of MB RAM, MMU, running Linux), albeit a while ago, is that it's hard to break back into it if you've been out of the community for a while.

The last time I was looking for a job, I had been doing non-embedded, including kernel and low-level for 8 years or so, and I had the darnedest time finding embedded positions to apply for, let alone get calls back from.

Startups that do embedded seem to mostly get the embedded done in the MVP stage, and by the time they're looking to grow, they've got a (small) team already doing that work.

In fairness, this is partially self-inflicted; iRobot has been on the monthly whoishiring threads for as long as I've been looking for jobs in the Boston area, but I decided long ago that I'd never work in defense (or finance).

Recently, I've added to that list "companies whose business model is selling their users' information" (many of them these days), and "companies whose entire sales pitch plays on your fears" (a recruiter tried to put me in touch with a company that does baby monitors that measure some basic health parameters, and their promotional video was appalling to me).

I kind of stuck a toe across the first line, and tried talking to somebody Fitbit-esque, but never got a call back. I also wound up with a connection into an electronic paper company, but that went cold after submitting a resume. Ditto a company that does automotive suspension stuff.

I realize that being out of the community for a while makes it hard to get consideration if there are other candidates who have current experience, so I started a personal project building a clock out of VFD tubes, and added a github link to my resume before submitting several of those. That didn't seem to help.

I got hired doing non-embedded before I finished the clock project. I'm at the point of needing to learn EAGLE, lay out boards and get them made. That was a year and a bit ago; right now I've got other projects that take up my weekend time.

To respond directly to your point, I'm willing to bet that there are two factors at work:
1. Supply and demand. If demand exceeded supply, I would think that I'd at least be able to get a call back with my background.
2. Hardware is a hard row to hoe. There's a lot less capital invested in a hotness.js project that flops, and it's a lot easier to scale if it takes off. No, it's not necessarily easy, but there's a wide gap between "provision more instances on EC2 and fix the bottlenecks in the architectures" and "the factory is already at capacity and the supplier for the key part is backordered for 3 months". The money that doesn't need to go to covering those risks can go into your pockets.
The kickstarter page has a 'preorder' button. So did Kickstarter give up on the 'donate to fund artistic endeavor/get a premium' model, and just switch to selling things now?
But the website is down right not.
Everything is resource constrained environment.
With exposure to larger traffic hitting various services comes experience to not do things like that. Somebody had to keep the world running and some of us do care for proper engineering approaches.
When does white space matter in HTML?
This seems very similar (or perhaps even worse) than the fact pattern in the HTC/Carrier IQ case.
https://www.ftc.gov/news-events/blogs/business-blog/2013/02/...

Did you provide the Federal Trade Commission with an advance copy of your report, or just DHS? If not, why not?
Epson L455 Printer Driver Download
YMMV obviously but having used CyanogenMod for the past few years on various devices I've found it to generally exceed the stability of vendor-provided Android. Not to mention the better user experience and more rapid security patching.
Automation to look for secret API tokens in APKs - https://android.fallible.co

Its pretty basic, it reverse engineers code and scans strings.xml and AndroidManifest.xml to look for random strings and print it on the UI.
In terms of techniques, I would suggest writing some spike code to flesh out ideas.

Good luck.
ARMv8 in the Datacenter – 96 physical cores 0.50/hr
This is a great point. Tesla is, to me, fundamentally a battery company.
Yes, this was what led me to now look for an alternative to WhatsApp.
Computation is not “Input to Output”
"Custom roms never run stable from my experience and that is why I have stuck with Google Nexus devices in the past."

Coincidentally enough, the custom ROMs for the N4 and N5 are ubiquitous & surprisingly stable. My N4 running CM 10.1.3 has yet to crash or freeze w/out my fiddling with Privacy Guard(been fiddling with it for 2 years, became daily phone only recently). The Sailfish OS ROM has come a long way and is still actively updated. Sure they're dated & SFOS is somewhat limited(and trust isn't quite on par w/ Maemo) but what else is there? Yeah, Neo900 was an admirable reboot attempt, but roadblocks have put them even further behind the curve.
Nearly every website owner I've worked with is obsessed with users getting 404s from old incoming links. First I wrote a cron to summarize apache logs and email a report, but that involved me building redirects or a cluster of cms changes. Its evolved into a super simple tool to help site owners see user 404s in near real time and setup their own redirects until our team gets around to fixing them. Super simple from a tech pov, but it's completely removed a huge set of annoying tasks from my plate.

Toying around with productizing it as https://www.404fyi.com
> Obviously, the system partition is encrypted and it is not possible to decrypt it

Root shell access, but encrypted partitions remain that way. It becomes a case of ensuring a strong enough cipher and key.

Banks might need to consider encrypting the boot partition for ATMs, despite the hassle this can cause.
What means simple? Also, do you talking about to stop CI/CD flow? Why not to provide a way to keep that flow on production?
I guess that would be number of developers/machines they were using during development
> Without interaction there can be no intelligence. And there is no interaction without a body of some shape.

I disagree fully. Can a person born quadriplegic not be considered intelligent simply because they can't interact with things? They can interact by communicating, same as a computer can.
They made all the pictures in the book downloadable, so you can make your own print if you'd like
Isn't Tesla's battery tech developed by Panasonic? And I believe that some of their initial Autopilot tech was sourced from Mercedes. It's very difficult to find an auto manufacturer that can build a car from the ground up, primarily because the economics aren't scalable.
I've read several of your comments on this thread and, while you do make some good points, you are extremely condescending. So condescending that it is almost impossible for me to read an entire one of your comments.

In the wild, yeah, js failovers are a good idea. But this is a show HN...the author had no idea if it would even work and just wanted to get something out. Instead of substantive comments designed to help the author build a better application, you instead choose to go on a failover holy war??? That's not only weak, it's uninteresting and absolutely not helpful.
I would like to see how this develops.

One thing is _allowing_ installation by removing DRM/copy protection of the software and a different one is licensing such software.

Looks like the navy first tried the software on their lab / pilot deployment. That will explain they bought 38 licences first.

Then, they wanted to use the software on live systems; but they weren't able to do it.
Why?
Probably the product activation needed internet access and that's not feasible for a military setting (in the worst case scenario it could be used as an attack vector to gain control of the installation).
I am just guessing.

I bet the Navy installed by mistake the 558K copies of the software because someone without the right information copied the files into an image server and...

...well, the rest is in the news now.
Angular and How Open Source Languages Are Redefining Enterprise Software
It depends on the type of application and the requirements and expectations of its users. I wouldn't recommend having a web app talk to its database over a WAN, for example. Unless it had a decent caching layer in between.
Why buy a $300 book full images of products when IKEA gives you a book like that for free?
I have a custom ROM on my oneplus 2, it's smooth like butter.
CodeKata: Because Experience Is the Only Teacher
_theInitialCommit: An Interview about OSS with Prakhar Srivastav
If it's only sms then that's not that bad. Are the SoC setup in a way to make crypto practically impossible on these ?
Each premium data set is priced differently. Prices are set by the data vendor, ranging from totally free to $150/month. Most are in the $5 - $50/month range. (I work at Quantopian).
An Ancient Tsunami That Ended a Civilization Gets Another Look
https://invoice-generator.com

I made this 4 years ago for those times when you just need an invoice. Today 10s of thousands of individuals and businesses use this each day to get paid. It's free to use with no login required. Instead it uses localStorage to remember data.
This does not "bypass Linux Disk Encryption". It gives you a root shell but the disk will still be encrypted and you still do not have any access to the decrypted data unless you know the passphrase.

This is no different to booting the system from a different boot medium. This might be an issue on a kiosk-style device, but not a typical personal computer. It only matters where an attacker has physical access to your keyboard and monitor but not physical access to your computer itself.

If the attacker has physical access to your computer itself, then being able to get a root shell this way makes no difference, since there are many other ways to get a root shell anyway; none of which are considered security vulnerabilities.
> Dead man's switch, a website to email people after you die:

Whats your thoughts and learnings on this one... it seems dark to me.. but i might be completely wrong..
> For the record, what I (and others, and I assume the parent too) understand as concurrency is many threads in a single core (interleaved/evicted, scheduling, quanta, yadda yadda), while parallelism means running multiple tasks in multiple cores at once.

In computer science, concurrency is a system of non-deterministic interleaved components, parallelism is a deterministic performance enhancement for programs by running fragments of it simultaneously.

For the purposes of verification, non-deterministic interleaving is the truly challenging problem, so the paper's use of "concurrency" seems reasonable.
To be a devil's advocate: That's true, but still it's the last 10% that is hard when using a well-known framework, compared to 100% when you handcraft everything in a basement.

If you use a well-known fwk, you can tell junior devs and new devs to google stuff when in need (as a first line of help), otherwise, you need to write a ton of documentation and/or devote hours per week on support, at the times when you have the least will to do that.

There's no one-fits-all solution, depends on the project, team, constraints etc.
Interesting point — it seems that right-wing misinfo is usually of the reactionary outrage kind (e.g. group X is doing this, this is outrageous, that's why we need [some variation of a return to morality]) while left-wing misinfo is of the revolutionary outrage kind (group X is doing this, this is outrageous, that's why we need [some variation of revolution])
You jest, but in one of the discussions for EME, that exact case was brought up.

Only they wanted to drm javascript sent to the browser. We got rid of Flash only to see a new hydra head emerge. People clamoring for javascript applications should be careful what they wish for. They just might get it.
You're welcome! :).
Found it through Spacemacs. Totally love it. Even if it were to be your most used creation, it totally deserves it.
111 Powerful Lessons to Learn from 18 Famous Successful Business People
Show HN: Test and Improve your security against DDoS attacks
I cut my programming teeth on the open-source engine of an online game I was into. It was C, and I had no prior knowledge of C, or anything else besides BASIC.

I didn't care about career development or resume padding. I was just a teen! I wanted to understand how that game worked, maybe add some cool stuff to it.

Things like pointers, memory management... I learned by copying existing code. I understood it because I had experienced it. If it was code for a fireball, I had experienced that fireball, in-game.

Now I'm a full-time programmer making more money than anyone in my family ever dreamed and it all started with that open-source game engine :)
Tola raises $295M, growth stage fund targeting the future of enterprise software
Cool thanks, that's good to know.
lol. explifying the apple design itself - a beautiful, but less practical embossed white cover.
might I ask how you were able to get the APKs from the play store?
The iPhone's interface might be details, but the iPhone itself certainly wasn't. It singlehandedly brought smartphones (and the screen-only form factor) to dominance. Of course you can argue it was timing and someone was bound to do it, but others didn't do it.

The iPad "created" (again, technically just brought to prominence) the tablet form factor. The iPod fundamentally changed music forever, the shitty Apple earbuds are iconic in and of themselves, and barely anyone even purchases those.

Furthermore, I contend that Apple changed design as a whole forever. It takes high end boutique design and without fail sets a new bar across every industry they set foot in. Great design has become a prerequisite for consumer products. On the one hand this trivializes design in that few of the people demanding Apple-tier design understand the amount of work it takes, but on the other hand it means companies can look at Apple's astronomical margins and perhaps justify stronger investment in design.

The entire history of Apple is pretty fascinating, but from a design perspective alone (i.e. not necessarily a technical perspective) I think the last 15 years or so contain the highest density of notable strides forward.
Reading through the article, it seems like I remember Windows 10 exposing all of these settings to the end user.
This "push button to not die" BS is why I don't play console games anymore.
I'm doing embedded contracting between startups. Its been pretty easy to find work, but I've been doing this sort of thing for decades. In fact, 4 days after quitting the last startup (new investor changed direction) I got a panicky call from an old contract begging me to pick up a project. It had been 10 years; they found my number in an old rolodex.

Embedded now has plenty of that 'large end' work now, since SOC/SOM prices have come way down.

As for iRobot, I actually called them. They split in half; their whoishiring entry is the Roomba people not the military people. But they're strangely still putting 5 tiny controllers in each vacuum instead of one hefty processor. And they're an east-coast Boston company, quite a bit different from a west-coast startup.

Re: Eagle. My college roommate wrote a board-layout package with some friends called Eagle years ago. He's from Austria. I wonder if its any relation to the modern product?
CMake Server Support in Qt Creator and Elsewhere
It seems we would have to know how machines actually launched the software to speculate on intent. Its possible this was accidental.
Admittedly they did ship a lot out of core outright, but a single line in `Cargo.toml` fetches any of these things pretty expediently, and they're still well standardized across the ecosystem.

zip = "0.2"
tempfile = "2.1.4"
getopts = "0.2"
hyper = "0.9.12"