skysight-inc/HackerNews huggingface dataset:
To download, I used:

curl https://pred.me/gmail.html -vo /tmp/pred.me.gmail.$RANDOM.txt

There appear to be no malicous/unsafe <scripts/> at the moment. No HTML tags.

Just one email per line, and a colon (:) delimiter for the password.

The MD5 hash is:

c1d5f3998459acea8d32937a4485c0b7

Availability is spotty. The server is refusing connections, probably due to high load.

The IP address resolved to:

81.4.110.159

I don't think the direct link is out of line. Some users might need guidance on how to safely inspect the file.

In terms of HN community conventions and common behaviors, people will often submit a question like "Ask HN: Lorem Ipsum..." and then provide follow-up details in the message body, including relevant information, such as the details I've provided above.

This way, if the owner of the resource at the address starts serving up malware, users can verify the content before consuming it.

These are merely community memes though. Not any sort of auspicious, high-minded "best practices as prescribed by experts" or anything. Just some stuff a bro might do around here.

Also, WHOIS info might be useful, if safety or malware is a concern...

http://whois.domaintools.com/pred.me

This doesn't preclude the domain owner having been pwnt and used as a patsy. Or even whether that person might have a valid reason for hosting the file?
Don't forget there's a middle ground between not having them and manual, formal verification. It started with Eiffel with basic contracts that checked properties during testing and/or runtime. That did well in commercial deployments. SPARK took it formal with a basic, boolean encoding for programmer understanding. It uses a subset of Ada to prove absence of all kinds of error conditions without runtime checks or manual proof. It can optionally do more with a theorem prover but optional. Eschersoft did Perfect Developer to do it in high-level language with C, Java, or Ada generation. So, at least three are doing it in products with industry deployments with two highly concerned about performance in low-level applications.

Although I'm not getting into this dispute, I will add in general that Rust might benefit from such contracts or push-button verification of key properties as deployed successfully in Eiffel, SPARK, Ada 2012, and Perfect Developer. A language subset might be used like in SPARK to allow automated verification of those sections against common types of errors. Three follow-up benefits will be easier changes/integrations in maintenance phase, automated test generation from specs, and aiding dynamic analysis by giving it invariants to look at. Could be optimization benefits but I'm not qualified to say on that. Intuitively seems possible like using minimum-sized, data structure for a number range in spec or type. Stuff like that.

These techniques are really under-utilized despite being proven out many times over in high-reliability products.
> The CEO can't know what every last person in the organization is doing, but they should be incented to make it their business to a culture in place that doesn't permit this

Where I'm from, there's a group af crimes such that if an employee at a company does them, the CEO will absolutely go to jail, even if they knew about it or not. For example, if your company produces toxic sludge as a byproduct, and someone at the company dumps it in nature instead of properly taking care of it, it's jailtime.

Unsurprisingly, compliance with some environmental protection laws are A+ at all companies. Personal liability works fantastically as a motivator for companies.
The theory that someone is valuable enough to be worth the compensation packages given to leaders of this type of company, but not effective enough to prevent this sort of thing if they give it an honest effort, strains credibility.

The theory that the incentive structure discourages that sort of honest effort is much more plausible. The correct response, if that's what's going on, is to change the incentive structure. Prison being what it is, I'd far prefer a way to do that without sending anyone there, but there does need to be some kind of consequence.
It's only more useful than structured code in a few niche situations, and even then, it doesn't usually provide massive benefits. It's a language construct that doesn't carry its weight.
I'm in the middle of the second "Off to be the Wizard" books and this is exactly how they deal with it. Really it just comes down to abstracting away everything under hood and relating to existing concepts and ideologies.

Even today, most people wouldn't get how a car functions, but they would understand that you push this and turn that and this moves you.
Thousands Flee Aleppo, Syria, as Government Forces Advance
https://vimeo.com/193466257
A crisis hotline that I worked for simply banned trainees from saying "why" or "I" during training calls. Omitting those two words makes it surprisingly hard to be judgmental or confrontational.
You didn't do a very good job hiding your astroturf.

Real people don't create an account just to post a coupon code.
Have you looked at Siphash? I remember reading recently that murmur has been found to have some predictable hashes independent of salts but a lot of big names still use it since it's fast and has good properties.
Java is a terrible first language. Python is even worse. They both require a good understanding of a ton of different topics to understand them as anything but magic incantations.
At what point does ignorance === innocence? At at what point does claiming ignorance === innocence?

What are some of the challenges in proving malicious intent in these kinds of, ultimately, financial transactions?

The way the last financial crisis was "concluded" and the way Theranos will likely conclude leaves me with little to no hope for our justice system.
Actually, there are Win 10 mobile devices stuck in some old build.

Also, there are also some devices from some OEMs that are not supported in the insider program.
I would also like to add that they saw their intelligence as a very specific one well tuned to doing IQ tests/logic puzzles.
This is all true.

So don't do that.
Are you objecting to my opinion or that I expressed one?
I've always thought Java was an awful introductory language. It's a decent teaching language but in order to actually understand what's going on and why, you need to already be familiar with huge swathes of modern computer science.

Python is even worse, because it's so high level and so much happens 'by magic'. Don't get me wrong, it's a great teaching language because it does cover so much ground, but it's terrible as a first introduction for a new programmer.

They need to start with something simple and fairly concrete. Maybe even start with a simulated 'toy' assembler (first semester CS101 = Zachtronics games?) then something like Pascal to teach the basics of control flow and sequential processing.

Once students understand primitive data types, control structures, functions, and compound user-defined data types, they're probably ready to learn some OO.
Alleged Muni ‘hacker’ demands $73,000 ransom
I'm sure there are all kinds of legitimate reasons you can get bad credit, before we even get into all of the mistakes that could be made.

One of my credit cards gives me monthly updates on my credit score. It always lists 3 positive and 3 negative factors impacting my score, no matter how good the score.

Currently one of the 3 negatives is "highest credit card limit too low". Not debt:available. Just straight up "too low a credit limit on your highest-limit card". And yet, I could buy an entry level luxury car on several of my credit cards.

I'm not implying that a silly ding on my credit like that is as 'serious' as delinquent payments, but... well, the truth is, I have no idea. And isn't that the point?
Considering that he makes a lot of money when things go right he should at least pay a lot of money when things go wrong.

The reward structure is a little one-sided:

* Things go well, CEO makes a lot of money and stays.

* Things don't go well, CEO makes a lot of money and leaves.
You've made a category error. My indirect suggestion that one should think more deeply before proposing a law was not intended as an argument. It was intended to prompt you to think more deeply.

Do not feel I am attacking you. I simply believe that you have experienced the "there oughtta be a law" emotional reflex to an unpleasant situation and that on further reflection you will realize that that actually won't work well.
Leaving the solar system, as usual.[1]

[1] https://xkcd.com/1189/
Personal liability may also be good limiter for size of companies. If something is unmanageable, it should be split up.
If you can limit it to normal shifts and control overtime, it's not so bad. Also, it depends on whether working conditions are reasonable or not. My company could manage essentially none of that. Working conditions were extreme heat near a furnace (we had fans...), working hours were completely dictated by customer schedules and overtime was frequently required.

All of that added up to a perfect storm of awful working conditions. I was motivated to work as hard as possible simply so I could get the hell out of there every night.
The NHS and at least 47 other organizations according to that list.
Elizabeth Holmes for president in 2020, she has the skills and mindset to do it. Ok, that joke was in bad taste. Can't hurt to have a giggle about unfortunate happenings, though.
That's super interesting to hear. Can you provide any links to good articles on the topic? This type is reform is something that I think would improve the banking system.

In theory, this keeps CEOs from pleading ignorance as an excuse.
The timing of the ad makes me think that they are going after holiday shoppers. Might not be a waste?
Big whoop. No jail time served. Stumpf stepped down and the criminal enterprise (that remains till this day) was charged with millions that when compared to their profits (in the billions) range, what really was accomplished? The worst thing that happened here was he lost his job but kept a nice severance package and took a vacation. Talk about justice.
This is not accurate. My credit score is quite low for a person with zero debt and great financial standing, because I don't have a credit card. I am being punished for not buying a product that I have no need for.
I am surprised by the sheer volume of tech professionals who have been responding to this article today by unapologetically reinforcing it's primary position. The idea that the industry should have no accountability for it's actions seems to be the jarring consensus.

I want to believe that those of us who are opposed to the use of technology purely for greed and power still outnumber, but am starting to feel like maybe we are an island and a dying breed, giving way to a new callous generation of technologists who wish to wield the power of social technology for only individual ambitions over the democratic idealism of collaboration that it was founded on. This is a dark time indeed
I think the issue, if there is one, is that arguably the more appropriate thing to do would have been to implement the code without unsafe, using an intrinsically correct algorithm. The type-punning is premature optimization. _That_ was the misstep.

That the byteorder crate exists is irrelevant in as much as this was an example of the urge for premature optimization leading the developer down the wrong path. The same amount of time pondering whether to even bother using a pre-existing library might have been better spent second-guessing the urge to type-pun at all.

Also, looking at the byteorder crate, I wouldn't be surprised if it's even slower than the simpler and correct loop I posted elsethread. read_num_bytes in that create uses copy_nonoverlapping, which I assume is analogous to memcpy in C. That's a very round-a-bout and inefficient way to accomplish the task, and likely patterned after similarly bad C code.

To even make it worthwhile, any byteorder library should provide some kind of iterator interface so that it can maintain alignment state while permitting the loop to be unrolled by the compiler. (And it might require a closure or someway of expanding a block of code inline.) That's probably the only way it could outperform the simple, hand-rolled, endianness- and alignment-neutral solution. But it doesn't provide that kind of interface AFAICT.

It's all sort of ironic, which I suppose was the point upthread--this is an example of the irrational urge for premature optimization and of bad programming idioms being hauled into Rust land completely unhindered by Rust's type safety features. And the better, correct, and likely more performant way of accomplishing this task could have been done just as safely from C as it could from Rust.
Then again, there have been reports pointing to the US gov requesting social media accounts for scanning for visa waiver countries.
Working together at a company 15 years ago. Friends since then.
There seems to be many problems you faced that could have been avoided just be asking questions :(. For example, asking "do you have experience shipping to Amazon fulfillment centers?". Or talking to the several folk in industry and the CEO ahead of time.

I also have an issue with the Big Lesson of "order at most two times what you've already sold". The lesson shouldn't be a rule of thumb. The lesson should be to find methods to gauge interest better, not just "2X maximum".

Anyway, thanks for sharing. I obviously thought it was an interesting read and it got my brain thinking.
2 day, 3 day, even 4 day - I don't really care that much. I don't have to care about cost of shipping, it shows up "pretty fast" and that's what counts. I'm not trying to choose one vendor over another based on shipping cost, shipping time, etc. I just buy it and don't worry.
Do you believe that when she started out founding the company she was planning to commit fraud? Regarding shameful, how do you feel about the word intent?
Beating the Compiler
Windows 10 in-place upgrades are a severe security risk
I reckon it should be "for decorative purposes only, not for human consumption"
1) Saying that it's for benchmarks only seems a little harsh, since once it's in a few BLAS-like libraries it will probably be widely used.

2) I'm pretty sure this won't be in KNL. It's a proposed future extension, and I don't think there has been indication of where or when it might land.
How is a crime and not just a terrible investment in a charismatic individual?
The Probability and Statistics Cookbook
Soecifically for weddings, what was the demographic / criteria that you targeted ?
The cost to manufacturers (and the cost passed on to Google) is most likely much higher for security updates than for including Google+/Google Apps
Do you seriously think Wireshark tells you anything about what is being sent to servers? All it tells you is what hosts are being contacted, but for anything else, you're completely in the dark.

> This is not a good argument IMHO.

I totally agree, so why did you make the argument that you felt that Apple respects your privacy more than Google does?

There's literally no way to know.
any comments on your greed? if you just made the kick starter quantity we wouldn't read this crap.
Show HN: Sign up to receive 500,000 emails from the Enron email corpus
Can someone from the US please explain what's up with your government.
Cash is for criminals: Why we should scrap big notes
What we need is a federal licensing agency for bankers that is similar to the state-by-state licensing agencies for lawyers. That way, when a banker gets caught violating ethical obligations (e.g., defrauding people) he can be disbarred from ever working in finance ever again. Proving an ethical violation is much easier than proving a criminal act.
any comments on your greed?

if you just made the kick starter amount we wouldn't have to read this, however now the publicity of your failure will bring you more sales...
The difference is he didn't personally direct people in a criminal way for personal profit. The fact heads didn't role is what is the real issue here. There should have been a strong internal house cleaning after this became known to the top. But they apparently didn't react in a satisfactory way.

This is where the CEO was at fault. He didn't send the right signal that this type of behavior will result in a skewering. And he (and others at the top) deserved to lose their job as a result.

But to claim he was knowingly profiting from some sort of criminal conspiracy is unhelpful hyperbole.

Whether or not the people who created this internal culture and ignored the malicious behavior of thousands should be criminally liable is another issue. But he was certainly separated enough from it where anything beyond a shameful career ending is a bit much.
Theranos investor accuses Holmes of lying about blood tests
Yeah, this exists, and would be interesting. I again think that it's a bit too extreme a solution to be baked into Rust itself, but I'd love a SPARKish Rust variant.
Towards Version 1.0 [of the dependently-typed Idris programming language]
http://www.nytimes.com/2014/08/19/us/19dam.html

30% less fuel usage than trains.
When SipHash was presented at CCC, it was alongside the proof of concept attacks against MurmurHash and CityHash. See the "Attacks" section of [0].

Murmur was notable at the time for its use in Java and Ruby. Ruby has since moved to SipHash-2-4, while Java (OpenJDK) has thrown up its hands in disgust at the problem and created a binary tree fallback mode for its HashMaps[1]. Which at this point I'm pretty confident is the only rigorously correct solution.

[0]: https://131002.net/siphash/

[1]: http://openjdk.java.net/jeps/180
What do the libertarians say about this theft? While I understand the idea of the free market, I don't see how that would have protected the consumer in this case. The CEO has millions of times the power of the average consumer, and can harness thousands of people to his agenda.

The consumer is left to either (a) pay the "idiot" tax of being stupid enough to sign up for a thieving bank, or (b) rely on the government to protect his best interests.

While I have severe misgivings about the efficiency and corruption of large government, I find it hard to argue that a perfect "free market" would be better for the consumer.
Low (Human) Memory Computing
They used an experimental technique, for one thing.

http://www.nytimes.com/2014/08/19/us/19dam.html

http://www.circleofblue.org/2014/world/despite-delays-billio...
On the Day She Stops Nagging You
> IMHO, too much of NTP relies on GPS, but that's a separate matter.

I'm curious to know more. Can you please elaborate or point to some articles discussing this?
I guarantee you they are selling the data to private investigators to track down targets. Happens with mall security too. The NSA doesn't need to track everyone. They just need access to the private detabases.
The biggest ones are ruthless and they're not apologetic about it. Still can't dislike them as much rent collectors though, at least they're doing something and if they stagnate they'll be overtaken.
When you claim that you have a machine that does X and you KNOW that's not true, that's fraud. Amazing how people struggle with this simple concept.
I can't help but feel sorry for the mice, I can't imagine what it would be like to not have control of your limbs. I understand the purpose is the opposite, however.
Sincerely asking, how long would it take for Microsoft to release their own distro or would they rather buy SUSE or Canonical?
great capitalism, great democracy
Israel already does that for sure. The USA already has the right to reuse entry to non citizens for any reason, or no reason at all, just like every other country. Nothing has changed recently as far as I can tell.
I've seen the numbers for the company I work at and when they adjust their Google ad spending amount, it correlates pretty directly to sales. I was quite surprised as I had a similar feeling before seeing that.

What's interesting, though, is that the company I work for does a lot of repeat business. So I don't think we actually pick up many new customers. It's more that the ads encourage our existing customers to visit us again. They may not even click on the ad.
Probably not shellinabox, but this is one tool you may be interested in, if you want to provide shell interface to CLI programs on the web. https://github.com/shellinabox/shellinabox
I'm rather astonished at seeing this from Rogoff. Certainly cash does facilitate crime, but it appears he's overlooking the costs of a society where anonymous or casual transactions are impossible, or basically saying that the economic value of privacy is $0.
You engaged in standard read-in to my comment, not even trying to understand what was meant. You say that "it's hard to take you seriously", yet the HN guidelines are clearly on my side of this issue.
https://ntpserver.wordpress.com/2008/09/10/ntp-server-stratu...

http://www.ntp.org/ntpfaq/NTP-s-refclk.htm

TL;DR Most NTP networks are relying on GPS versus a high precision on-site time keeping device. Break GPS, and you break timekeeping for a wide swath of the worldwide NTP pool. But thems the breaks when you can get access to atomic clocks in space (each GPS satellite carries an atomic clock on board) just by sticking an antenna out the window.

If you require precision time for critical business operations (financial transactions, global database operations), you should be running a precision time source locally at your datacenter; for under $20 an attacker could deny you GPS timing.
I doubt the Consumer Financial Protection Bureau will survive the upcoming Trump/Republican attack on federal regulatory agencies.
White+House+rebuts+Trump+vote+fraud+claim+•+THE+WORLD+INFO
I think you want the dative "tyrannis" rather than nominative "tyrannus".

https://en.wikipedia.org/wiki/Latin_declension#Second_declen...
The advertising industry seems to rival the military in its fondness for acronyms.
163 Stanford Innovation and Entrepreneurship Courses
Have you ever been bitten by unsafe code?

IMHO any metrics would be gamed and prioritized above actually quality. As actual quality isn't suffering, why add the unsafe metric in at all? Seems like paranoia not born out of experience.