skysight-inc/HackerNews huggingface dataset:
43% of the New York metro area is married, presumably many more are cohabiting. So, if we relax that constraint to "don't have to share a bedroom except with a romantic partner" then we are potentially already there.

Of course, the proportion of married couples could be much lower in Manhattan, and it's not necessarily the same 43%, but you get the idea.

More to the point I'm very interested what tradeoffs you think are worth literally never having the chance to be alone in a room. Without a shadow of a doubt I'd kill myself, and I'd never dream of brining a child into that miserable existence.

[0] https://censusreporter.org/profiles/16000US3651000-new-york-...
The malware was generic malware. Anyone could buy it. It was not employed only by Russians. So finding it on a laptop is not strong evidence that Russians put it there.
Thank you. I thought I heard some sort of high-pitched whistling sound from this account's comments but wasn't quite sure.
Sure. I live on the border of West Valley City and Taylorsville, near I-215 (https://www.google.com/maps/@40.6779915,-111.96276,15z).

Utah's always had a strong software industry, dating back to WordPerfect and Novell. Lots of jobs are in SLC of course, but the rest of Utah Valley has even more, e.g. Lehi and Thanksgiving Point. Known as "Silicon Slopes" (https://en.wikipedia.org/wiki/Silicon_Slopes)

Great place for families or outdoorsy people.
Atwood's Law [1] ... Mainly because the web browser is the single most broadly available interface with JS being the most accessible language to use in that interface. There are definitely other JS x86 emulators out there. JS isn't the fastest available, but it's far closer to run everywhere.

[1] https://blog.codinghorror.com/the-principle-of-least-power/
sql injection is commonly caused by combining your query with its related data parameters in unsafe ways. you are emitting raw user input you received to another program, the database, it's your responsibility to give this to the DB safely.

you still have to be careful, and when you follow all the right best practices you can safely ingest raw user input.

I've worked at a company that escaped user input before inserting into the DB. it's a horrible nightmare I don't think anyone should have to experience.
I love the idea. I travel internationally quite a bit and would love to be able to easily send a picture to my wife or parents in the mail. True, a text message is easier, but there is something fun and more personal about getting a physical thing in the mail.
Hi CaveTech,

Great point with a simple answer. I don't have any print samples yet. Turns out the Printing On Demand companies I was working with enjoy taking of several weeks on either side of Christmas. I'm pretty miffed about this myself, frankly.

To further put your mind at ease, I have extensive experience working with printing-on-demand and dropshipping services. I've built out complete pipeline integrations with IngramSpark, Ingram LightningSource, and ZenPrint from scratch. If you keep the journal, you will get your book. Guaranteed.
> don't do embarrassing things and then sulk when you're exposed.

Thissss. I'm so sick and tired of the hypocrisy. If there was a "Chinese snowden" who leaked that China was doing the same stuff we where it would start a war. If Russia or China started building military bases through out the world for "democracy" we would loose our shit.

Why are we surprised when other world powers follow our example and try to hack the shit out anything they can get their hands on. Can't we be grown ups about this? It's a total double stAndard. We mess with so many elections around the world, and cry foul when someone does it to us.

Don't get me wrong, I understand why we do it, and sometimes agree with it. I feel like it stems from almost a prehistoric primitive tribal instinct - I live if my tribe lives, and to do that we have to control the other tribes.

By all means continue to dominate other countries, but PLEASE STOP USING THE MORAL SUPERIORITY CARD.
Ah, cool. My workflow is essentially "write Python until it's too slow, then profile and write C," so maybe it's time I move to a Go/C approach.
Today I learned Charles and Ray Eames created the incredible "Powers Of 10" short film that I vividly remember from childhood. How about that.
My Last Drawing of the Year 2016 (BUGATTI CHIRON)
Remembering Roger Faulkner, Unix Champion
The Pro Mouse had one button when five were becoming standard. The Mighty Mouse would only right-click if you lifted your index finger off the mouse entirely. The multitouch on the Magic Mouse is woeful in terms of discoverability and frustratingly erratic. Ergonomics have been consistently poor, owing to Apple's refusal to make a mouse that actually fits the human hand. None of their mice are comfortable in palm grip, because they're needlessly low and flat. The rounded edges and gloss plastic of the Mighty Mouse and Pro mouse are difficult to control in fingertip or claw grip.

By comparison, Microsoft achieved near-perfection in mouse design with the venerable Wheel Mouse Optical 1.1a. After more than a decade, that mouse is still perfectly usable for competitive gaming. Contemporary high-end mice from companies like Steelseries and Zowie imitate the shape of the WMO very closely, because it's exceedingly comfortable for a wide range of grip styles and hand sizes.
I wish we were :)
We reverse engineered the IOC's included in Thursday's report from the FBI that released malware data that is supposedly associated with the 'Russian' election hack. Turns out it's a hacking group in Ukraine, anyone can get it for free (but if you're nice you'll donate to their BTC account) and the DHS and FBI sample was several versions behind.

https://www.wordfence.com/blog/2016/12/russia-malware-ip-hac...

The trouble is that the report was released at the same time as the expulsion of 35 Russian diplomats and the whole context around it, including some of the language used in the report, implies it's proof of a Russian election hack.

We also analyzed the IP's they shared and they're just a mish-mash of known attack IP's around the world - probably hacked hosts being used as an attack platform by everyone. ISP's include Linode and Digital Ocean.

I'm having serious Colin Powell UN flashbacks here: IC releases questionable data as justification for military policy decisions.

I've done two interviews this morning about this story and I'm told by one very well known journalist that publications both on the left and right think this whole thing stinks. Here's RS's take.

www.rollingstone.com/politics/features/something-about-this-russia-story-stinks-w458439
if you're running commands on the server I would consider your program as emitting output directly to another program. it's up to you to make sure you call it correctly and not emit raw user data
Seriously, come visit!
In order to afford a decent newer house in the suburban beltway (DC) you need to spend 500k+. That's $2200 a month. Personal property tax on a 3 year old SUV and a new sports car is $2700 yearly. Car insurance is > $300 monthly. Car payments >= $1900 month. (college + personal) Loan repayment = $400 monthly. Food and gas + energy >= $600 monthly. State and federal tax + ss take about 45% of gross.

Upper middle class == ~ 170k a year. Welcome to northern virginia.
Since when is Go "based on Oberon"? Pike himself claims that it was "based on C", with obvious influence from his own work on Squeak and Newsqueak.
I think "it's not obvious how to sanitize input" is the main point here --- one advantage of the %-style format strings, they're easier to parse and escape.
WritingFlow my experiment for the new year
> If you spend three months in the Schengen area during any six-month period, you must wait another three months before you can apply to enter the Schengen area again without a visa. If you do not meet these conditions, or plan to stay in the Schengen area longer than three months, contact the embassy of the country where you plan to spend the majority of your time to apply for a visa.

If you are fine with this then that's a good idea. But it's hard to really settle down knowing you need to leave in 3 months, and can't return again for another 3 months. I recommend getting a residence visa like the freelance visa. You can still consult for a US company after getting the visa.

https://travel.state.gov/content/passports/en/go/schengen-fa...
Everybody Loves Chocolatey – install apps from windows cmd
This (deliberately cultivated) Russian hysteria is a withering indictment of the intelligence (or lack thereof) of the American people. Not only should Americans demand proof for these wild claims, they should demand the transparency that a Democracy demands. Instead they blithely accept whatever propaganda the government (and their media outlets) spew, and willingly accept the excuse that the evidence "must be kept secret". The ignorance of the masses is perhaps the one true constant in human history. The attacks leveled at (the few) intelligent people who demand proof (from professional, paid misinformation experts like those at the CIA) before accepting these serious allegations bring to mind a famous interview.

>Göring: Why, of course, the people don't want war. Why would some poor slob on a farm want to risk his life in a war when the best that he can get out of it is to come back to his farm in one piece? Naturally, the common people don't want war; neither in Russia nor in England nor in America, nor for that matter in Germany. That is understood. But, after all, it is the leaders of the country who determine the policy and it is always a simple matter to drag the people along, whether it is a democracy or a fascist dictatorship or a Parliament or a Communist dictatorship.

>Gilbert: There is one difference. In a democracy, the people have some say in the matter through their elected representatives, and in the United States only Congress can declare wars.

>Göring: Oh, that is all well and good, but, voice or no voice, the people can always be brought to the bidding of the leaders. That is easy. All you have to do is tell them they are being attacked and denounce the pacifists for lack of patriotism and exposing the country to danger. It works the same way in any country.

> In an interview with Gilbert in Göring's jail cell during the Nuremberg War Crimes Trials (18 April 1946)
Ask HN: Is there any good way to search HN?
I wanted to find a link I saw earlier today about hackers who use sound to jump from your laptop to your phone... but I can't find it.
I wasn't implying you directly, as it seems (from comments in this thread), that you are benefitting from a wave of PC-pressure. The internet-collectivist movement is strong, so it could have quite easily been a fan.

In any case, it's cool that you're responding to a thread about your blog. I wish you and yours nothing but health and happiness in 2017 from here in Russia.
Pretty awesome! Just used it and it worked easy-peasy! Now if I could only upload a boat load of addresses...
Absolutely, correct. In college, I worked for a security team contracted to GE. There's an absurd number of APT trying to get details about GE's engines and production. Executives, engineers, even pilots would have to send their laptops to that team for inspection. Finding newly created APT viruses is a weekly event. You end up seeing trends -- like a specific file, or registry keys, or running 'strings' on a binary, etc. -- that it becomes obvious that you can tie multiple incidents to the same author/group.

A word of advice: Don't go to porn sites, install Limewire (dated; today's equivalent), torrent, TOR, etc. on your work computer. Conversely, keep your work off of your personal computer.
Exactly. I think we're a bit too impersonal and anti-social with Snaps, Grams, etc. Taking something digital into the analog world makes it more meaningful :).
At some point I'll create a web interface and allow CSV address components. Whenever I find the time though :p.
There seems to be work on "big fish" to be done, like:

- Weather Prediction

- Stock Market Prediction

- Healthcare (Better prediction, better reading of diagnostic tools)

- Poker
> It should have used something with a limited list of named arguments, or maybe a dict.

That's what "old-style" python interpolation did :)

You could do |"hi my name is %s and I live in %s" % (name, place)| or use named arguments with a dict (|"hi my name is %(name) and I live in %(place)" % {"name": name, "place": place}|).

I like JS format strings -- you can write arbitrary code in them, but they are compile time only (and use a different string syntax). So you can have |`Hello my name is ${name} and I come from ${place}. My profession is ${generate_random_profession()}`|. The backtick-string isn't a different type, and can't be moved around like a value. It's a different kind of way of specifying a string literal, and will be evaluated when specified. No way of doing injection there.

I suspect Python wanted to make it less verbose with new-style interpolation, and went a bit overboard with field access without realizing or caring about possible security issues like this.

Of course, python has a third kind of format string; interpolation string literals (|f"hello my name is {name} ..."|), which work like JS and Ruby. This is what you should be using IMO.
I think that the US govt is now throwing it's toys out of the pram because it thinks other countries (Russia) are using the same methods that the US employs to attack it's enemies and to influence the elections of other nations against them (the US). Personally I think it shows a huge degree of paranoia within the US govt, either that or it is a handy way to try and elicit support for future actions (further economic sanctions) against Russia. Especially as this comes a day after Russia brokered a peace deal in Syria, something the US could not achieve.
I was curious about a couple of things that weren't clear in the article.

1) Did you actually verify that the IPs provided were part of the Tor network, or did you just see that their rDNS records currently have the string "tor" in them, as you described in the article?

2) Did you identify the malware you reversed by file hash, or did you find something that hit on the provided Yara sig?

I think adding these details to the article might give technical readers some more insight into and more confidence in the methods used.
> Besides, if you don't want to be embarrassed then don't do embarrassing things and then sulk when you're exposed.

I don't think that is a very good argument. If you were to look through the email of most middle-sized organisations you would be able to find embarrassing things.
I really like this idea!

I've been wanting something similar, but instead for the postcards to be sent from the country that you are traveling from. Such a service would be hard to implement though.
Neat implementation, but loses the human being portion that makes postcards special.
Ruby format strings are like old-style Python format strings. They only map to names or positional arguments. Perl also just maps to positional arguments, like printf. The most you can do is mess up the string by moving around positional args.

JS format strings get evaluated at "compile time", as do Ruby interpolation literals. You cannot have a string with format specifiers in it, you can have a backtick-delimited string literal with format specifiers in it. The formatting is done when the interpreter encounters this literal; the user can't input such a value since these literals aren't a different kind of value.

> because it's not realistic

Done reasonably often for i18n. Not a good i18n solution, but for many it's good enough :|
Looks like recursive anonymous functions were introduced in Erlang R17, which is quite old now. Does anyone know the current status of this feature in Elixir or if it has been implemented yet?
fortune | cowsay | lolcat
Oops, I probably came off the wrong way, sorry. My comment was meant to help Western European perspectives (and more specifically, HN comments) pass the mental filter Americans are prone to using on them, in the hopes they go beyond their usual audience.

Lots of "valuable" citizens here with regard to network effects, always worth a shot to help others express themselves better!
I've also heard from a number of sources, including Finnish acquaintances, that there's more consensus in Finnish society about what kids should be doing in school.

In the U.S., there's a decades-long consensus that schools should be better, along with heated, unresolved debates about all the details: discipline (including physical discipline), religious instruction and history, evolution, violence and bullying, homework, sex ed, sports, civil rights history, vocational training, school district borders and school assignment, arts and music, financial literacy, dress codes, cafeteria menus, disabilities and mental health issues, handwriting, testing, student transportation, animal dissection... The list goes on and on, and the battle lines are more complex than red versus blue.

Since there's no agreement, but everyone thinks they know part of the solution, politicians (and voters) at every level of government attempt to impose their will on the schools, meaning more and more regulations for educators and students.
And this leads to a race to the bottom where everyone loses in the long term (pathological emergent behaviour), even the shareholders. So you sometimes need legislation that provides a legal (and level playing field) floor below which you cannot descend, voluntarily or otherwise.

EDIT: fixed grammar
How To Crack - a tutorial by the Old Red Cracker.

One of my favourite quotes: a red flower in our mouth, a cold determination in our fingers, a computer not far away... death to Gates!

At the time I took ORC very seriously and to this day I still have the same contempt for MicroSoft as back then, even though nowadays MS has become mostly a bad joke, a pathetic shadow of its former self.
Ah, that looks great. I live in Seattle unfortunately.
Why Russia’s Economy Survives
Your second sentence is false, and your own article says that.

The web shell is made by a Ukranian group but there is absolutely no reason to believe the people who used the web shell are Ukranian, nor is there any reason to believe whoever hacked the DNC uses the newer version.

It's alarming to me that you, someone who knows a lot more than the average bear about this topic, continues to spread the FUD that this was anything other than what the 19 departments who are members of the Intelligence Community have said.

Honestly, I believe you're using this to spread your own brand, and you should be utterly ashamed of yourself.
Not sure why the post above has been downvoted to 0. Too bad. It's some of the best research we've ever done.

We didn't look at the hashes or using hashing to identify anything. It's quite a story actually:

The report provided a Yara sig for PHP malware. We used that to search our own attack data that we log and we found the full malware sample that matched the sig.

But it was encrypted. It's a small piece of PHP that gets a key from a POST param or COOKIE and decrypts the executable code and runs it. Quite smart actually if you want to obfuscate code. So we needed the key.

We looked at our attack data and thankfully we logged one of the attempts by an attacker to access the malware including their key. It was just 4 lowercase chars so we could have bruteforced it.

We decrypted the malware. That gave us the name and version. We googled that and found the distro site. Claim they're a Ukrainian group and the version DHS has a Yara sig for is several versions behind.

We downloaded it. It's a standard PHP 'shell' malware which means it's just a utility to manage a compromised site. File management, upload, OS info, OS command running etc. Nothing super scary and the most common malware we see. Nothing that would infect a workstation in a watering-hole attack.

Regarding the IPs: No we just did a PTR lookup and assumed they're Tor exit nodes as they say they are.

Mark.
There is an interesting dynamic in Finland that arises from the substantial wealth transfers and the small size of our economy.

This creates a situation where the difference in income between a teacher and a lawyer or an MBA is not very big. Teachers in Finland enjoy a very long vacation, also. Basically for top talent the choise is between a very meaningful job, autonomy, ok pay and looooong vacations and working long hours in dronish jobs and not getting paid that much better.
Just read this article, "The retirement wave changing Sydney" about the effects of boomers retiring in Sydney and ^holding the crease^ in the housing market. [0] Interesting effects (economy slows as displaced younger workers have to travel further).

[0] http://www.smh.com.au/nsw/the-retirement-wave-changing-sydne...
I think it's rather sad what Google has become; in an attempt to make search "more human", they have also quite successfully replicated all the disadvantages of asking a not-so-intelligent human to find what you're looking for, complete with second-guessing and subtly modifying your queries as well as not showing everything that does match. I am not completely convinced there is an ulterior motive behind it, but it could certainly be one way of controlling what the population thinks or even the language: if all searches for foo are silently redirected to fob or a similar but actually different thing, then it reduces the ability to discover --- and subsequently propagate --- information about foo.

Near the turn of the century(!), I remember hearing that the Internet was one of the places you could find information on very obscure/fringe subjects, and for a while that was actually true; but now it seems that search engines are gradually cutting off that fringe in optimising for the popular and mainstream.

I also noticed Google's search results took a nosedive in quality (~2010) not long after Fravia passed away --- I doubt there's any correlation there, but that felt a little surprising to me.
I think Affinity is closer to being David vs Adobe's Goliath.

With existing Windows / Mac vector and pixel tools, and a forthcoming Digital Asset Management (1) tool like Adobe Lr, they can take on Ai, Ps, and Lr.

I've been enjoying Lr for years but am turned off by Adobe's subscription cloud pricing model. The standalone hasn't been updated with features in quite some time. I think Adobe needs some competition.

(1) https://affinity.serif.com/forum/index.php?/topic/13981-digi...
I would argue that a reasonable person would actually read a correction. it's not exactly un ringing a bell but many of us come away with the truth even if we believed the original at first
Unfortunately for many, the risk of slow job markets where homes are affordable pushes many away from where they are and towards the cities with more opportunity (and higher prices as a result).
Wow, way to remember that. I've keep it around asone of those "hey I could do this eventually..." sorts of things that's probably not worth it anymore given that a raspberry pi and the official touchscreen is <$100.

> I don't even have any working chumby 8" devices anymore.

Do you want one?
A lot o people are betting in AR and how big is going to be.
It's pretty clear he sees himself as an ally to Julian Assange, and is jumping to his defense.

It's sad that this is what it's come to, and that we can't separate WikiLeak's role in this from the Russians. Good journalism would be explaining to the people how WikiLeaks works, and how the source of the information isn't relevant to WikiLeaks.
The Extraordinary Size of Amazon in One Chart
I'll consider switching to a different engine.