skysight-inc/HackerNews huggingface dataset:
"The free market crowd would argue that the surviving companies will bake in the right security if consumers demand it. If companies don't take it seriously, either their customers aren't demanding it, or they will be replaced by companies that do a good job at it."

I mostly argue that myself where the problem is demand-side where customers don't put money into it. There's a few things on supply-side to factor in, though:

1. Companies lie to customers about how necessary these vulnerabilities are. They condition them to expect it. They also charge them for fixes. It takes almost no effort to knock out the common ones with only 30-50% premium for high-assurance of specific components. Even premium producers often don't do either with those that do so rare most consumers or businesses might have never heard of them.

2. Years of lock-in via legacy code, API's, formats, patents, etc means consumers often don't have a choice or only have a few if they want the modern experience. Many times specific choices will even be mandated by groups like colleges. Market created the problem that now lets it milk a captive audience out of money. It won't solve that problem no matter what they want.

These two, esp 2 given patents and First-Mover Advantage, are huge reasons the market alone isn't likely to fix things. Some regulations could deal with them. The market can also fix things where these two don't apply. The market can also be combined with regulations like with DO-178B market that regularly outputs high-quality software far as I can tell.
Open your web inspector, set the console target to the iframe, and type "alert". Notice that the alert function is overridden.

Set your URL to https://xss-game.appspot.com/level1/frame?query=a;b. Notice that the ";b" is removed from the results page.

Challenge your initial assumption about the checker being stupidly naive. Notice XSS bugs in your own code afterwards.
This has always been the case. It has always been madness to post on user forums under your real identity. In the 'viral era' -- the age of mobile broadband, the age where any post you make or photo you send can get the attention of millions and ruin your career before your plane lands [0] -- it's pure madness to expose yourself like this.

[0]http://www.nytimes.com/2015/02/15/magazine/how-one-stupid-tw...
>We suspect that they do this without there ever being something it is like to be a CPU.

Maybe there is, and every process has an interior. The ones that lack concepts like learning, feelings, memories, building representations, etc, aren't fundamentally different but are just boring and don't tend to affect the world in self-reflective ways. Like comparing a cellular automata where all cells start dead and stay dead to Conway's game of life.

The mathematical universe hypothesis[0] and the novel Permutation City by Greg Egan don't put it this way but I can't help feeling they're related and worth looking into.

[0] https://en.wikipedia.org/wiki/Mathematical_universe_hypothes...
Any capacitor, super or not, has a very tiny internal impedance for DC. So a shortcircuit is liable to max out the current output.
One time while studying for a final exam, I did a final review of the Wikipedia article and noticed a quote which was an exact match for a paper that I had just read, and it was followed by [citation needed].

Adding that citation is one of my proudest Wikipedia edits ever.
I was once on a forum where you could pay some of your karma to change someone else's signature. It was pretty good fun.
Well, I won't go so far as to say that I found the issue, but I have found that through some mysterious set of conditions somehow my laptop learned my mailbox passphrase. I use lastpass, but lastpass doesn't have a record in the database with it (I would never intentionally have it save such a passphrase). I disable browser password saving on any system I use. I've only ever typed that passphrase on the protonmail website to decrypt my mailbox.

This is very strange. If I tell lastpass to autofill the password on the mailbox decryption page, the password fails. But somehow it starts out filled in with the correct one. Honestly totally at a loss, but probably not an issue with ProtonMail and more likely some accidental thing I must have done to put it into memory. No clue what I did wrong.
> The free market crowd would argue that the surviving companies will bake in the right security if consumers demand it. If companies don't take it seriously, either their customers aren't demanding it, or they will be replaced by companies that do a good job at it.

This was addressed in the hearing. Schneier says its a negative externality, like invisible pollution. The problem is that the consumers don't care because they aren't the ones getting attacked by their devices. Instead their devices are quietly using their residential internet connection to help DDoS websites. Would you pay $20 more to buy a different DVR that is less likely to annoy a random person you've never met over the internet? Most people don't care, and don't have the knowledge and experience to care.

Because consumers won't pay for it, the manufacturers don't bother to invest in security engineering. (These are low margin products after all). As a result we're all worse off.
"Investigating" is a pretty generous word there... There's not enough tinfoil in the world...
That's the benefit of shipping binaries, but the downside is they're harder to patch / swap dependencies. Trade-offs, always.
I mean, honestly, it's not a crazy trade-off to let people see the username, especially if you have a registration page that's going to tell people "sorry, that name is already registered."
That's not 100% true. There are lots of different theorems that are "central limit theorems", and that work across different cases.

You can have CLT's with non-iid variables (either the aren't identically distributed or aren't independent). The math just becomes much harder, and you have to assume specific dependence structures.

For example
https://en.wikipedia.org/wiki/Martingale_central_limit_theor...
the donald is well moderated, esp. from doxxing and other personal stuff. they are of course very lively and get to the nerves of leftists, but that's about it. it's actually quite entertaining if you can leave behind enmities (and don't take it too seriously).
What resources did you use to learn swift?
Merkle trees can help here. Basically a tree of hashes. If you keep track of the root hash, it's easy to prove any individual leaf has not been altered.
Yeah. That would be great. I'd go so far as to say that it would be a really Useful network. If you catch my drift.
I don't even know where to start.

Do you have any sources on your first claim? Or on your other claims? Also, gun control costs elections that would otherwise be won handily? With so much going on on this last election, do you think the barely discussed topic of gun control was the single most important topic to blame for an election that could otherwise have been won, and won handily? Would you have Hillary be against gun control, offering the majority of people that favour it no major candidate reflecting their beliefs?
>If they control the checksum check they can alter it too.

This could be done via an open source browser add-on.
/r/the_Donald has this stupid conspiracy that a pizza parlour is a child sex ring and Clinton was involved, that became /r/pizzagate which the Admins tried to clean up because its retarded and was doxxing innocent people so they called the admins paedophiles.

I feel stupider just for having had to type that..what a world we've built.
I think we're mostly in violent agreement here.

Let me try to re-state the point I was trying to make: the only reason there is anything special about 8 bits as a unit of data is because hardware is built to operate on units of 8 bits at a time. Whether you call these things "bytes" or "words" doesn't matter. You can call them florbs for all I care.

The fact that florbs are 8-bits wide is mainly for historical reasons. There is no particular reason to make the magic number be 8 (except that it's a power of 2), and indeed there have been historical examples of hardware with florbs of other sizes. The Intel 4004 had 4-bit florbs. The PDP-8 had 12-bit florbs.

Modern hardware is built to natively handle florbs of multiple sizes, typically 8, 16, 32 and 64 bits, but sometimes other sizes as well (e.g. 80 bits for extended precision floats, or 128 for SSE5 instructions). Because of this, many algorithms are designed to operate on binary data in these sizes, and because of that it can be helpful to have binary data in these sizes exposed in your programming language. Python exposes 8-bit florbs, but not other sizes of florbs. Common Lisp has arbitrarily sized florbs. If you're doing certain things (like crypto) having access to florbs larger than 8 bits can be useful. That's all.
https://www.youtube.com/watch?v=9YOEEpWAXgU

Well the technology is great, even if the internet in Jackson Hole is bad.
Reddit isn't meant to be a source nor is Wikipedia, but it's a place to find information. They can be seen as central hubs to get information.

If a person comments on Reddit with a valid point and sources all his facts, why does it matter where said comment is made, and honestly, it doesn't matter if admins can edit it or not, really.

Look at it like posting an EXE and also linking to a credible site containing it's checksum. As long as you trust the linked site, then it doesn't matter where the EXE is posted and if someone has access to modifiying the EXE, all that matters is that 1. you got the data, 2. the data checksum matches the source.
I had to double check the number. Never thought that Skyscanner was this profitable.
I've used Vue w/ Rails so far and it's been pretty good. The one real complaint is that I really wish is that I could use Vue components (.vue files) in a better integrated way with the Rails asset pipeline.

react-rails does this really well, making JSX transformation a drop-in gem, vs. having to set up some kind of front end task runner of sorts and constantly having to commit compiled files and such.

Beyond that, Vue has been amazing, and I really love it.
Are you planning on writing all these articles yourself?

I hope you realize you need a pretty large team to run a news website.
>You can not use if "statements" as expressions in Javascript (which sucks quite a bit).

It does indeed, and it leads to some ugly code:

a = function() { if(1>0) { return "Yay" } else { return "Nay" } }()
According to the article, before that, one professor's report lead to a near extinction level AI winter in the U.K. for a decade, which also effected Continental research funding. So more than one major winter.

As someone who rode part of the Lisp Machine wave in the early 1980s, I must say the all the "machine learning" ... ferment seems to be too weak a word, that I read about on HN nowadays is heartening.
>nobody should fear a state monopoly on violence more than the left

This is your opinion only.

>What I don't understand is why they don't understand that.

Perhaps that's because you don't understand "the left" which is of course no more a monolithic, uniform entity than "the right".

It's almost like politics is full of nuance, and issuing blanket statements like the above just simply doesn't work unless you're talking to people that love platitudes. Like the right.

See what I did there?
Yes, an account with thousands of karma can be permanently shadowbanned by triggering a mod. The problem is that the line between unpopular opinion and inflammatory can be completely subjective in many cases.

This site implies that comments should be analyzed rationally, but comments from shadowbanned accounts do not get this treatment. It's the equivalent of claiming someone will be allowed to take place in a televised event but then secretly cutting all of their responses out of the broadcast.

Shadow banning is anti-intellectual behavior because it's essentially a systematic ad hominem.
What people think about laptops with numpads?

I had one 5 years ago and I found it horrible. Your hands are to the left from the screen.
Gas lighting is some pretty advanced abuse. I wonder how often this has occurred before now.
Brilliant. I had no idea, got to love the British culture.
They blocked /r/pizzagate (which is now on Voat - /v/pizzagate). People had been sending abusive comments to /u/spez for basically the entire election.

As to what #pizzagate is, it's largely buried in searches now but this is a good intro:

!!!!! NSFW !!!!!

http://vigilantcitizen.com/vigilantreport/pizzagate-4chan-un...

!!!!! NSFW !!!!!

Basically, some people found some really weird and creepy photos and weird emails in the Podesta dump and started digging. Things have kind of snowballed from there.

Feel free to go back to the Podesta dump on Wikileaks and look things up for yourself. Just start searching for mentions of "pizza." A lot of the things have been taken down now and only exist as archive links, though.
Wait, they can't just delete the parts they don't like and then claim the data was "personal"? ducks
"lively" would be a very very generous representation of what that sub is.
The rest of reddit will accept this because everyone hates /r/the_donald anyway. That subreddit is an abuse of the system already.
Yep. I can see it now...

"Scottish technology firm Skyscanner sells out to foreign interests".

vs.

"British technology firm Skyscanner does something the media sees in a positive light"
That seems to describe an NYT journalist emailing members of the Hillary team and talking about their candidate in positive terms.

Maybe I don't expect enough of journalists, but I'm not really seeing the scandal there. Buttering up a source by talking positively about their candidate seems... sensible?
"In short, I think regulations will prevent more damage than post-hoc legal retribution."

Time has proven that wrong so far. We got a lot of highly-secure products after DOD's Computer Security Initiative giving clear guidance plus financial incentive. DO-178B and other safety-critical markets are cranking out lots of them on safety side. So is segment of smartcard industry focused on high-security.

Regulation works so long as it has effective standards, they're clear, evaluated against product, and must be followed to sell the product. As in TCSEC era and DO-178B, reusable components for common cases show up to reduce the evaluation cost or risk. Open-source security would likely get a boost, too, as companies sponsoring it would sponsor certifiable versions with the higher QA.
Unlambda as a language may be a joke (the funny kind), but learning it is incredibly enlightening, and makes you understand some fundamental concepts of computer science.

As such, I think it represents one of the most enlightening esoteric languages out there together with Brainfuck.
It says it now requires 30 - 50 Mbps, I would assume relative or this compression algorithm is the real story here. Though, it could of been uncompressed bitmaps or something to begin with.
Have I been pwned and spam lists of personal information
Please, tell me more about this wonderful futuristic technology.
December 2, 2016 Midwinter Clinic by Vancouver and District Dental Society
Note that Facebook also has a formidable AI research group called FAIR and they are pursuing goals close to DeepMind's, while openly publishing their results and tools.
There is a lot of social media unicorns that don't contribute much to research which are not Facebook.

Who knows, maybe there is no real need for a dozen of global social media companies that provide roughly similar features to the same users?
What is the tension about exactly? That they don't align with their own personal political views?
You can use a client to update the record of your dynamic IP. I don't know if that's what he's doing, but it's in all the Pi web hosting tutorials.
Thank you for this. Learn your history, kids!
"investigating" in the same way they "investigated" a daycare and the Boston bombing.
That is a nice and tidy analogy. However, economies are not nature. Private property rights do not exist in nature, might makes right.

An economy does not work without the creation of a collective fiction. Its rules, its laws, and especially the concept of value simply do not exist. It is faith in the system, that same faith we all accept when we look numbers on screens and find that as an acceptable way of determining ones wealth.

Economies are religion. If there is no confidence or faith, then we have effectively killed something that never existed in the first place
That's very different from changing the actual message text. That lends itself to "disregard that, I suck cocks." Editing content leads to, well, you saw.
And any user can claim to not have said something, citing this as evidence.
Thanks. I'll admit this is a field I'm completely unfamiliar with. (I was actually considering bug bounty hunting in the future, thanks for the wake up call.)

I actually noticed the ; was being removed and am very confused as to why, but forgot to mention that in my earlier comment.
In what way is it an abuse of the system?
How to compete in the era of Amazon
They were just doxxing people left and right. I am not sure how that constitutes an "investigation"
Sounds like real life. :/
(I can't reply to untog since it is too deep in the thread but this in reply to their comment)

When you are professedly a journalist, you are to report the facts unbiased, not get friendly and in bed with campaign insiders, running your pieces by them to get their opinion. There are many more heinous emails than the ones linked by parent, specifically some that are exchanges making sure the narrative that was going to be published "sounded good" to the Hillary camp.

That's not journalism. It's propaganda.

My own observation: the fact that we have to get apologetic about this behavior further proves the point.
This would be true if they were just removing large denominations from circulation.

As it turns out, they are replacing those denominations with equal or higher currency values.
Please stop using this "alt-right" terminology. All its doing is trying to put a neutral label on a group of vile people. People that are blatantly racist, misogynist, and just anti-American. These are the same kinds of monsters that started the "National Socialist German Workers' Party" in the 1930's. They used the same rhetoric and played on desperate people's fears and prejudices.

My grandparents didn't fight on two fronts to see this bullshit taking over the United States.
So you acknowledge morals can be told through stories. And they are. Like, you know, in the Bible or fables. You just don't believe they have "credence". Which I never asked about. Good debate.
>2. Manufacturability. I expect this is the big problem. It's a chemical engineering problem to scale up a "nano" process. The article says it's not ready, but doesn't say what the biggest challenge is going forward.

Quoting from the article: "The team at UCF has experimented with applying newly discovered two-dimensional materials only a few atoms thick to supercapacitors. Other researchers have also tried formulations with graphene and other two-dimensional materials, but with limited success."

I'm not sure if they used Graphene specifically (the only other 2D matl I know is silicine) but there are manufacturing issues involved with Graphene especially around mass production but these are being solved. Graphene used to be one of the most expensive materials in the world to produce (per unit weight). It is now (2015) "only" about $100/kg. compare this with something like thermal coal (another carbon based matl) at under $100/t. There is still orders of magnitude in the price before economics look good.

edit: That is not to say it is worthless the price has fallen fast in last 5 years it just needs to keep at the same trajectory for a while longer. Graphene is after all an extremely new material. I don't think there is anything fundamentally impossible to solve manufacturing wise and economies of scale should kick in as demand for it increases.
...I am a kid. Well, a highschooler at least.
It's more than just stupid too.

Innocent people have had death threats over seriously bizarre allegations. The FBI really should be involved and people charged.
I would start with a skeleton crew, including volunteer contributors, and scale over time as readership increases.
That you think they're actually expressing their political views instead of shitposting to rile up actual trump voters while pissing off the rest of the internet is fairly naive.
I agree, and there are many comments threads on this post describing the magnitude and the consequences of what he did.

I just wanted to point out the growing problem that is the The_Donald and similar communities, where they relentless harass others.
I could see a small hackfest team of ~5-10 people getting this done over the holiday weekend... maybe that was spez's intentions all along.
Even with just two lost days, I'm looking at something like a decade before LASIK pulls ahead.
The Chinese government DID lose a lot in that incident, basically a lot of the goodwill they built up during the olympics, a good image in the west that basically disappeared over night. "Western Media Bias" wasn't really a thing between 2007 and 2010-11.

China can block all the websites they want, the damage they do to their local internet industry is probably irreversible: they are unable to compete in even next door markets like Myanmar and Cambodia! On the one hand, they block the big western internet companies out of china, on the other hand, they give up the rest of the world. From the west's perspective, it is a reasonable tradeoff.

Google IS mobile, even in China, Android is a big thing. I heard they want back in mobile; e.g. Android Play Store, they don't care about search in China, it isn't where the future is for that market anyways.
A combo of per-customer authentication at packet-level, DDOS monitoring, and rate limiting (or termination) of specific connection upon DDOS or malicious activity. That by itself would stop a lot of these right at the Tier 3 ISP level. Trickle those suckers down to dialup speeds with a notice telling them their computer is being used in a crime with a link to helpful ways on dealing with it (or support number).

Far as design, they could put cheap knockoff of an INFOSEC guard in their modems with CPU's resistant to code injection. Include accelerators for networking functions and/or some DDOS detection (esp low-layer flooding) right at that device.

https://en.wikipedia.org/wiki/Guard_(information_security)
Small town Football politics
Usenet, I get it. ;) Maybe there's a sweet spot somewhere between the Facebooks and models like Usenet.
This brings up memories of when moot messed with /pol/. He turned off the spam prevention scripts and captcha, made every post look like a doubles post, and let an audio recording of cuck porn play on the board page. That was sort of expected from moot though and it was 4chan after all.
>>> Anyone with a smartphone knows the problem: After 18 months or so, it holds a charge for less and less time as the battery begins to degrade.

Really? That's still a thing? These aren't nicads. I've found that my phone doesn't report full charge as often, but it still lasts for a similar amount of time. My 5+yo netbook's battery is still reporting 80% of its design capacity.

Imho, such apparently dramatic falls in capacity often have more to do with running apps rather than physical degradation of the battery. Talk to me after a reset to factory settings.
Sure, but I wouldn't be surprised if they had to whip up custom hardware to make it happen. I'd think you'd want 3D cameras on the phone, plus AR glasses that would need to be light enough for travel.