skysight-inc/HackerNews huggingface dataset:
Ransomware attack on San Francisco public transit gives everyone a free ride
I found Lobsters some time ago through my blog analytics when one of my posts got some traffic from there. Reached out to my (limited) personal network in the tech sphere to see if I could land an invite, but nobody had ever heard of it. Didn't feel comfortable messaging random users for one, so I gave up. If anyone is monitoring this thread and sending invites, I'd love to have one.
I'm not sure how you arrived at your conclusion. US transportation energy consumption for all purposes (goods and passengers) is much higher per GDP per capita than for any European country. For example Germany has a per-capita GDP about 2/3rds at much as USA, but uses less than 1/3rd of the energy for transportation.

Not sure what you're getting at with ignoring metro rail systems.
You can use it as a keyed hash function by adjusting the IV. See: https://docs.rs/seahash/2.0.0/src/seahash/.cargo/registry/sr...
Simplifying complex business logic with Python and Kanren
Show HN: Easy distributed logging with Express.JS, Request, and Winston
To me the initial "So..." is something that was very noticable in conference talks etc a few years ago. (Probably replaced now with "Whassup?", even when talking to a non-existant audince, i.e. by YouTubers)
How your surroundings influence your diet
"What do you think about..." works really well for me. Whenever I'm asking my team why they are doing something, I just ask them to tell me what they think about it. Instead of why did you use node.js instead of java? I ask, what do you think about node.js as a choice instead of java?
As a potential backdoor with access to a computer with compromising the OS, how much is ME neutralized by just not using the integrated NIC and instead using a PCI-E or USB NIC?
Investigating the RCE attack that knocked out 900,000 German routers on Sunday
Because it's benchmarking a hash function, not a language?
Without even trying to figure business cases out, I think it should be obvious that going after busy aviation routes should succeed without more intracity transport: there's obviously "enough" public transport for aviation to succeed there (where that "enough" might be the fact there are plenty of car hire agencies at the airport along with one or two bus services!).
Only GIC (interrupt controller) bugs needed to be fixed. The GIC is standard since the Cortex A9.
On the A9, you have to use an HAL extension (declared in ACPI) for the timer(a sample is available on MS' Git repo). On the A7/A15 and later, Windows uses the GTDT ACPI table only, so nothing is needed :)
World Chess Has a Big Problem
Sounds similar to the clipmaps UE4 uses for signed distance fields:

https://docs.unrealengine.com/latest/images/Engine/Rendering...

https://docs.unrealengine.com/latest/INT/Engine/Rendering/Li...
That's why you fetch the ZIP from Github here: https://github.com/gchq/CyberChef/tree/gh-pages

Then you download it, and open it in a sandbox VM with no Internet access
Investors sue Theranos and its founder Elizabeth Holmes, alleging fraud
https://github.com/stcarrez/etherscope
Launching Kickstarter while International student
I'm launching a Kickstarter while on a F1 visa.
OPT takes about 90 days to get, which is way past launch deadline. What is the best way to ensure that I'm not arrested and sent home?

(I'm happy to pay taxes, hire Americans etc but bureaucracy seems to be outdated.)
Could you point to a reference for the non-confluence of logic without excluded middle? It sounds interesting and a quick Google search did not find anything.
> Even more useful would be compiler-level feedback of how to stay within the constraints needed to auto-vectorize your C/C++ for loop. (I need to make this data access const etc)

Specifically for clang you can use the new opt-viewer [1] to annotate the source to find hints on what could/couldn't be optimized/vectorized. Requires compiler flags only found in 4.x/trunk, unfortunately.

[1] https://github.com/llvm-mirror/llvm/tree/master/utils/opt-vi...
The phrasing there is confusing. Does the NIC break because the ME is neutralized? Then rebooting again with the ME neutralized will break the NIC again.

Why would the NIC only break once after the ME is neutralized? The system is started from a fully powered-off state after the ME firmware is updated. Maybe the NIC has some sort of non-volatile state that gets updated when the ME fails to initialize, and then the NIC starts working again. That's the most complex explanation so I thought it unlikely, but I'm happy to hear more from someone who has actually neutralized their ME.
This is is not a knock against SeaHash, but I was looking at buffer.rs [0] and noticed pretty much all the code is wrapped in unsafe {} blocks. How much advantage is there to rust implementation vs c++ if unsafe is used so liberally? I ask this in ernest.

[0] https://docs.rs/crate/seahash/2.0.0/source/src/buffer.rs
Would love to compare this to word charts of their questions asked and see what topucs they ask about. Sort of a dunning kruger test.
This is so lost. I am imagining ways how this is even a workable experiment for them. Misguided attempt to reach millennals? 'Social news'? It just boggles the mind. I am sure someone will know more here.
> Honestly you could probably run something like that without any capital expense at all by just collecting monthly premiums and advertising "$1000 if we can't charge your EV in an hour" and then never paying out due to fine print or paying out $1000 in service gift certificates.

That's one of the most succinct examples of a certain patently unethical SV style way of thinking about business I've ever seen. Perhaps Parker Conrad's got the bandwidth to be a cofounder.

I mean, I know it was posted tongue in cheek, but taking money from people and then leaving them stranded is, you know, wrong.
Making all of these available and chaining all of these together wouldn't be a simple script. It would be a humongous collection of different scripts.
Warn HN: Namecheap.com Cyber Monday WhoisGuard Issue
Presumably due to the heavy traffic, Namecheap's ordering system is sometimes failing to add WhoisGuard protection by default to eligible domains when you add them to the cart.

Failure to notice this during the haste to complete an order results in your personal information being unwittingly published in various WHOIS databases forever.

For example: I've had multiple domains with the same ccTLD extension in the cart, and somehow a single one would arbitrarily lack WhoisGuard, while the others possessed it as expected.

After reviewing past orders, I realized I'd already been burned, hence this post. Be careful!
> If there is no central directory of identifiers to public keys, there's no way my mom will use it to send me anything

She'd never use an app where you two bump phones with NFC?
Yeah, need to fix that... Just got rid of the javascript so it's back up.
Unless the alternate mechanism is going to have the same termini,like as the air routes (as in, at the airport itself), it still likely needs additional local transit, even if the existing network is adequate to support the airport.
Sure thing, but everything is dangerous if you let kids eat them. Imagine your kids drinking bleach because it looks like lemonade. Or sitting on the stove because it's nice and warm. Or eating bees because they are nice and fuzzy. Or eating batteries because they ace small and shiny. Or eating the buttons off of their shirts, which then may be brittle, break inside their bodies and puncture something. Or what about sitting behind a door and someone then opening that door, hitting them just the wrong way causing permanent blindness...

It's just strange that people seem to want to point at super specific things and say: "those are inherently dangerous!"

We could agree that oxygen is dangerous because it reacts with almost anything. Does that mean we're going to have oxygen banned? :p
Cryfs – A cryptographic filesystem for the cloud
Thanks this is awesome. For some of this stuff I usually use the Python REPL. But why go through the hassle when it's all here for stuff like date time conversions etc..
I know that New Zealand's MetService found that WRF running AWS is competitive, but I don't know if they published the results. Can put you in touch with their main point of contact for this kind of work.

Abstract is here: http://www.eresearch.org.nz/event/eresearch-nz-2013/do-hpcs-...
How to update it for this decade: Replace Cyber with Data !
Oh jeez. However is something I do too.
Thalidomide is not a good poster boy for regulation as it was not regulation, but sloth that stopped the approval of thalidomide in the USA. If the company involved had decided to hold off selling it in other countries first the FDA would have approved it.
Review is by Thomas Pakenham, author of a couple of very cool illustrated books about specific, exceptional, trees:

https://www.amazon.com/Remarkable-Trees-World-Thomas-Pakenha...

https://www.amazon.com/Meetings-Remarkable-Trees-Thomas-Pake...

They are just amazing books. I can't say it better than the Amazon reviewers.
> the traditional Nexus pricing zone

There’s an iPhone selling for 200-250$ right now?
I'm not familiar with any of the specific reasons why manufacturers fork the kernel. But an obvious question to be addressed is: Can the kernel be modified, so they can achieve their use cases without needing to fork it? By making it more modular in some parts, or adding hooks they can attach to...
Arduboy – A game system the size of a credit card
I think the most important lesson is that the arms race against laptop theft is ridiculous.
Doesn't work at all on IE11/Win7, blank page, errors

SCRIPT438: Object doesn't support property or method 'findIndex'
File: bundle.js, Line: 2, Column: 26381
Theranos Sued for Alleged Fraud by Robertson Stephens Co-Founder Colman
None. But once you're out of the buffer code, it's safe.
> Yes, it's fast, but at what cost? I would gladly give up a massive fraction of my performance for better security and portability - and that's why I program Java.

While I agree with the sentiment, a problem with Java is that you're dependent on a runtime environment with a fairly consistent history of vulnerabilities, right? [0][1]

> Personal opinion here, but with few exceptions C/C++ are inappropriate languages for starting new development at this point.

Maybe, but now there's SaferCPlusPlus [2]. At least it may be a practical option for improving memory safety in many existing code bases.

[0] http://www.cvedetails.com/product/19117/Oracle-JRE.html?vend...

[1] http://www.cvedetails.com/product/1526/SUN-JRE.html?vendor_i...

[2] shameless plug: https://github.com/duneroadrunner/SaferCPlusPlus
Yes let's stop all scientific and technological progress which isn't directly related to achieving utopia on earth, until a hypothetical point in the future that will never come.

Slapstick arguments don't help. The whole point is that none of the proposals offered in the comment above yours are even remotely "utopian". They're all pretty much common sense (or should be by now), actually.
Except the hash format needs to be decided ahead of time. If you ask a guard if they had seen someone with a peg leg they may remember this even without any other instruction.

If you really want to use a range of questions then police codes is a good proxy. The guard may say we have people in the drunk tank, but not anything else.
Well, there once was a very nice mobile platform called Metro Design, but it got stuffed.

It's a very rare industry that does not have at least three players. Two, just Android and iOS, is a strange number.
Why would you need to redirect to an adult site to make your point, when you could have redirected to something more interesting and relevant and SFW?

Like this for example:

https://www.google.com/search?q=cross+site+scripting
It seems like a small kernel of unsafe code, while the rest of the library is likely written safe. Perhaps more of this could be written safe?
Thanks for posting about this, more people should know about it!
With regard to the comments after the aside:

The former model has become a “fad” because of technological progress in e.g. logistics and predictive analytics. The wording “send some stuff to you every month you don’t get to pick the stuff but trust us” belies the fact that this is actually a very difficult problem with a very interesting solution. If some instance of this model succeeds it will be because it managed to create a service that improves lives at _essentially zero cognitive cost_. To cultivate and then engage with certain preferences takes some amount of time and energy and to be able to offload those costs to software is, at the very least, interesting.

The latter model is only uninteresting under the assumption that the products will never work in the sense you mentioned (efficiency improvement). I’m not sure there’s any reason to assume that “smart”, “connected” products won’t improve substantially in the relatively near future. I also think there’s plenty of simple tasks that could be automated in a meaningfully useful way. For example, cooking rice.

More generally, building a profitable, sustainable organization of human beings is intrinsically useful and interesting. This last part is less a reply to your post and more a response to a cynical (in my opinion) tone throughout this discussion.
How do you think it accesses the network? In fact, I don't think every version has network support in the first place.
I thought I was losing my mind trying to go back. Cool service though, I might give it a whirl with my (smallish) team since Skype is becoming worse by the month it seems.
That's exactly what it (clang) did.
That's why I'm buying my grandparents a Subway card. You can reload it online and they love Subway they just don't want to splurge to go there whenever they go in to town. I know if I load this up for them they'll have a treat whenever they're out to a doctor's appointment. It has the added benefit of me being able to reload it when they run low.
As someone who has perpetual trouble finding well fitting dress shirts off the shelf - the MTailor thing seems interesting. You do raise something valid - I suspect they're selling affluent customers, because they're easier to reach, and are willing to try something novel.
x86 chips are themselves almost complete SoCs at this point [1]. That's why you can buy things like Compute Sticks, after all.

It's true that Intel is by far the largest supplier of x86 chips, and so you get some level of "standardization" with things like Intel HD Audio. But that's more the effect of a monopoly than anything else. Competition breeds fragmentation, but given the choice I'd rather have competition.

[1]: https://www.techpowerup.com/img/15-08-18/77a.jpg
Awesome start. Here are some features our team would like to see:

- Private rooms with an owner
- Persistent rooms (once everyone leaves, all the content is lost)
- Outbound calling to real phone numbers (let us call out to a conference line, or someone's cell phone)
With excluded middle. This is the explanation that clicked for me: http://stackoverflow.com/questions/24711643/how-come-that-we...
The title is confusing. If it tries to compete with other hash functions, why does the title have to bear "in Rust"?
We'll fix user facing issues once we have users is self-defeating.
Better integration within the Rust library ecosystem. Instead of having to install a C/C++ library through my package manager, I can just add the seahash dependency to my Cargo.toml file and cargo will handle the rest.
The issue with proportional representation is that it may reduce the concentration of power amongst the parties, but it will make political parties more important than individual representatives, and promote a hyper-partisan attitude. When turning out 'your side' is more important than convincing the median voter, the parties will focus on their bases, and the candidates will be dependent on the party, which means there will be less room for compromise. This is not so important in multi-party parliamentary democracies such as Italy which have a history of 'minority governments', but will make the executive branch of the USA even more partisan.
To be honest, I think we both lost the point of the conversation.

All I was trying to say is that those that (1) respect/value FOSS but (2) end up buying/consuming a proprietary solution due to the current shortcomings of the free alternatives can still support FOSS, which might lead to (3) not needing proprietary solutions in the future.

I don't want us to be arguing past each other, so please help me understand what you mean by "this is not how it works". Does it mean that you think that such strategy can not work? If so, why not?
Let me see if I can get it working again, it was a while ago. If so I'll try get it up on github for you.
The ME firmware includes a Java VM so that other companies can run their secret apps inside the ME's environment (e.g. DRM crypto plugins). That is just one example of all the features included in the ME firmware, and none of it is published or well documented, much less audited at the source level by an independent third party.

The ME is very alarming, and seems to only become more alarming the closer you look at what it is designed to do.
Same here. Working / easy screen sharing is what I need. And would be happy to switch from Webex / GTM / others to here if that were to work. Nice job otherwise!
You moved from a sub $200 entry-level phone to something that is (in my country at least) 4X the price and impressed by the experience?
Not exactly a fair comparison.
The way I put it is that most of the complexity of the story was removed, but there are still some gestures in the direction of complexity. (For example the anecdote about "kangaroo".)

I assume it's at least partially because the movie is intended for a global audience, like most blockbusters these days. Some things get lost in translation :-)
The election memes apparently really got to me, I was confused to see the headline 'Cuck filter' for a moment in HN frontpage.
Because the unsafe code is isolated into an easily-auditable portion that basically just exists to perform word-aligned reads of a byte buffer.

It might be nice to factor this out into a separate library, but it's fairly harmless.
Huh, do you think all the status-quo-preserving douchebags will want to live by themselves? That's no fun, is it? Then again, the internet is young. Maybe such segregation would work, but I'm not a fan of the idea. I'd rather try getting everybody on the intellectual boat, mostly to avoid segregation but also because smart asshats exist (my hope being that the beauty of responsible society swings them over).
To 1, they answer this in the paper; one knows it because

The xor operation in Eq. (1) ensures an important property: h1(x) can also be calculated from h2(x) and the fingerprint using the same formula. In other words, to displace a key originally in bucket i (no matter if i is h1(x) or h2(x)), we directly calculate its alternate bucket j from the current bucket index i and the fingerprint stored in this bucket by

j = i ⊕ hash(fingerprint).
Truly an amazing million dollar investment on Thiel's part. The Trump presidency is his next unicorn.

Looking forward to America becoming a kleptocracy just like Putin's Russia, with Thiel and friends leading the charge.
We shouldn't be exploring other planets until all we've solved all problems here on earth.

Except that that wasn't what the above commenter was saying, of course.
Same wonder here, what are the reasons they do this?
I'd consider switching to an iPhone, but lots of my music is just MP3 files and I'd hate to lose the ability to play them on my phone. Using iTunes is not an option.
I came to detest assert when I was working on a project with another guy, who used it generously, as a substitute for assertions in (non existing) unit tests. Nothing would annoy me more than working on my code, running it, and having all sorts of weird assertions pop up all over the place from this guy's code.
:( I will fix. Thanks for the error message. I only use findIndex once, fortunately.
I think he was working on the start page for Mozilla 1.0 in 2002. The credits page [0] for the 1.5 start page lists him among the contributors to 1.0's.

I couldn't find any remarks from him in 2002 about Mozilla's chances, but in 2001 he said "I think not. In a world of free browsers, the flavour of the month can change like that." [1] in response to a mailing list message saying that Mozilla would not be viable competition on Windows due to bugs, which is somewhat less optimistic than the "pretty good" odds in hindsight, but it's much more so than "very long odds against us retaking any browser market share".

[0]: http://www-archive.mozilla.org/start/1.5/credits.html
[1]: http://marc.info/?l=mozilla-ui&m=100168107415632&q=raw
Moesif is offering over 50% off on yearly plans for their API debugging service today.

http://on.moesif.com/cyber2016-plans

More on Moesif: https://assets.moesif.com/docs/5e47hqj
In the 80s and early-to-mid 90s, most movies weren't offered for sale to consumers. Big blockbuster movies sometimes were, but those were the exception. Places like Blockbuster or your corner video rental store bought VHS movies for around $70/ea and then rented them to consumers for $3 or so. That changed somewhere around the late 90s, when people began buying movies on VHS and DVD, and the price dropped significantly.

Source: I worked for a small video store in the early 90s.
you can always right click the back button. except when your browser isnt nice.
Thanks! Yes, with excluded middle is what I meant.
Because it's probably the most notable/unusual part of this hash function. Virtually all other hash functions for at least a decade have had their reference implementations written in C or C++.
As others have mentioned, Rust allows you to write a safe wrapper around unsafe code. In this case, all of the functions implemented in buffer.rs are safe, even if their contents are not, so they can be used without having to worry about unsafety.

Another advantage over C++ is that it's much more clear what code is safe and what isn't, as unsafe code is wrapped in `unsafe` blocks, as you mentioned.
Introducing: Responsive Design Mode in Firefox Developer Tools
> The issue with proportional representation is that it may reduce the concentration of power amongst the parties, but it will make political parties more important than individual representatives, and promote a hyper-partisan attitude.

What you say is arguably a valid concern for one particular method of achieving proportional representation (the Party List Proportional method), but there is no clear reason it would be for other methods of promoting proportionality (such as multimember districts with candidate-centered elections using Single Transferrable Vote.)

> When turning out 'your side' is more important than convincing the median voter, the parties will focus on their bases,

That's already exactly the case with the US system, where elections are won more by turnout and less by conversions. The duopoly naturally produced by FPTP makes efforts to depress turnout of the other sides likely voters (whether by targeted propaganda or actual suppression) a strong tactic.
Yeah but the FOSS guys decided it would be too hard on companies to make the AGPL provisions part of the GPLv3.

I think that makes them hypocrites, but oh well.
Interested to know how many sales come through from this Hackernews/Medium post.
Apply the standard risk management quadrants -- magnets are small and easy to swallow, so the likelihood of an incident is high if magnets exist in toys. The consequence is emergency medical interventions, which is also high. So it falls into the worst quadrant. Many of the other things you mentioned have either a lower likelihood, or lower consequence, so they are not as serious.
AAA has service trucks with generators for EVs on them. An AAA membership is something like $100/year.

Too late Silicon Valley! Go growth hack something else!

https://electrek.co/2016/09/06/aaa-ev-emergency-charging-tru...