skysight-inc/HackerNews huggingface dataset:
I understand that laws can have an immense impact. In fact, I believe that our bad network access and copyright laws have enabled things like Facebook to become scary data-hoarding monopolies in the first place.

Without the CFAA, without improper application of trespass to chattels, without improper application of the Copyright Act to RAM copies of pages that exist for mere microseconds, and without considering exploitative browsewrap "agreements" legally binding, Facebook (and most other "walled gardens" that effectively downgrade the WWW into just another technical curiosity in content delivery instead of an independent, open, and free publishing platform) could relatively easily be harvested and reduced to something like the decentralized protocol described above, which would greatly enhance individual privacy and control moving forward. But I digress.

Uber and AirBnb have physical-world touchpoints that are easy to police using our existing police and justice infrastructure. You're driving a car with revoked registration or renting out a unit in an area not zoned for short-term rentals and/or without the proper licenses. These are straightforward violations that are trivially observable, relatively simple to prove beyond a reasonable doubt in a court of law and reasonably within a jury's comprehension and familiarity, and we can send a real guy with a gun to come and haul you off to jail if you break these rules.

All-digital conduct, like storing too much metadata, is much harder to detect, curb, and assign accountability for. And even if Facebook itself is stopped from making the correlations or compilations outlined by such a law, nothing can stop under-the-radar third-party scrapers or special-privilege actors like intelligence agencies from combining the data exposed to Facebook and ultimately achieving the same end: an uber-effective mass surveillance system capable of identifying anyone, anywhere (potentially even digitally) with nothing more than a semi-decent picture of their face.
I have to deal with a pre-REST, pre-SOAP XML API, which I would love, love, to be able to handle in Rust. But until Serde-XML is able to deserialize more of that stuff and preferably handle XSDs, I'm stuck too.
Assuming his intelligence organizations hold to those recommendations. This whole thing smells of politics. Where was all this concern 2, 4, 6 years ago? You think cyber attacks weren't going on then?
You can always use a reverse-proxy to circumvent CORS.
How was it super useful? (Not doubting, just curious)
I recall someone from, IIRC, Africa, being asked why they wanted to move to the USA. They said, "I want to go somewhere where the poor people are fat."

Yes, life stinks if you're poor in the US. Yes, it's been getting worse. But also yes, life stinks much worse if you're poor in many other places, and for many of the poor in those places, life has been getting better.
Folks, the point of this report is not to justify the punitive actions taken today. It is to provide information that companies can use to protect themselves against similar attacks in the future.

So if you judge it by whether it "makes the case" against Russia, it will be lacking. We don't need 100 comments pointing that out.
Show HN: ReJSON – a JSON data type for Redis
Redis v4 is planned for GA in a few weeks and it comes with a new modules API. Over the last months we've been putting together a few of these modules, and yesterday we've published the preview for ReJSON.

ReJSON is a Redis module that implements a data type for storing, fetching and manipulating JSON values stored as binary objects. The API is faithful to the Redis spirit with a new set of commands (https://redislabsmodules.github.io/rejson/commands), and the same spirit is maintained in terms of performance as our our early benchmarks suggest (https://redislabsmodules.github.io/rejson/performance).

The project is currently under active development and we still have improvements planned before calling it an MVP (mainly reducing memory overhead and performance optimizations). That said, anything you say can and may be used to make ReJSON better, so feel free to drop us a line here or anywhere else :)

Source code: https://github.com/RedisLabsModules/rejson

Docs: https://redislabsmodules.github.io/rejson
It forces you to explicitly say that you know you're forcing a value into a narrower type; I think the fact that might mean loss of information is understood, by definition. What would you like it to do?
What are accusations about, to start with?
And it's wrong too. Clearkey, Widevine, and Playready are all video DRMs in HTML5.

Also, EMEs exist in all major browsers. https://developer.mozilla.org/en-US/docs/Web/API/Encrypted_M...
Until there's an automated way for a database to tell a developer that their particular query is running terribly because of some defacto reason there'll always be a need for a DBA to interpret and investigate, though, I wish it weren't so. I wish we could just treat databases as "dumb" stores of information that could be queried in n number of ways without issue. Some or most DB-as-a-service offerings will handle the mundane tasks of backing up, upgrades, etc. but I know of none that offer this DBA-like level of service where an automated tool can tell you exactly what's going wrong, basically take the context of your query and match it with the current execution plan and the underlying structure of the tables and your data (data types included) and tell you what is wrong. That'd be a huge innovation if it exists. And I'd be out of a job.
I am the exact opposite. I very much mind paying for a DLC. The game should ship as close as possible to a complete state.

However, I don't mind paying for consumables and upgrades. I work 40 hours a week. I don't have time to farm the in-game goodies. Let me pay to keep up with my unemployed friends ... otherwise I will simply go the illegal way and buy gold from a chinese farmer.
You are assuming the poster lives in a democratic system.
They could just as well be a paid bot from an autocratic state.
You heard it here first, everyone: economic indicators are actually just a plot by the manufacturing sector.

https://fred.stlouisfed.org/

Can you take a look and help me pick which of those 421,000 pieces of time-series data are the conspiracy ones so that I know not to look at them any more?
The most common source of those suggestions is phone contacts. Anyone using the Facebook (or Instagram) app is sending them a copy of their entire address book to be used for network mapping purposes.
This seems to work in Firefox. Disables notifications for all sites.

about:config
dom.webnotifications.enabled => false
Steve Jobs killed Flash by banishing it from iOS, and then WHATWG, the Chrome team [1], and Mozilla [2][3] started rushing to cram [4] all sorts of JS APIs into the web platform instead. Still, it took almost 5 years to catch HTML5 up to the capabilities provided by Flash [5] -- and that's if all vendors agree on which APIs to support [6]. Mobile Safari right now lags behind, which is not to the detriment of Apple: every developer wanting presence on iOS will adopt Apple's preferred workflow, and to date they have had no strong incentive to promote web-based apps, unlike their rivals Google and Mozilla.

Adobe tried to play it cool by pivoting to AIR, a Flash-to-Native generator, which luckily they already had. Meanwhile they put out a press release trying to position their upcoming tools as the preferred toolset for HTML5 production, but this mostly hasn't panned out.

[1] https://news.ycombinator.com/item?id=12174503#12175561 [2] https://news.ycombinator.com/item?id=12129691#12131403 [3] https://news.ycombinator.com/item?id=12192509#12194161 [4] https://news.ycombinator.com/item?id=12129691#12135175
[5] https://news.ycombinator.com/item?id=12259435#12259940 [6] https://news.ycombinator.com/item?id=12758085#12760949
~ grep IPV4 JAR-16-20296.csv|awk -F ',' '{print $1}'|sed 's/[][]//g'|sort -u|grep -f exits -c
191
~ grep IPV4 JAR-16-20296.csv|awk -F ',' '{print $1}'|sed 's/[][]//g'|sort -u|wc -l
876

At least 191 of the IOC IPs are (probably random) Tor exit nodes :) The actual number may very well be higher, I just grabbed current exit node list from https://check.torproject.org/exit-addresses

Here's the PHP backdoor the YARA rule is for http://sprunge.us/ReFg I'll probably put up the rest of the samples in a sec.

Edit: Here, I uploaded most of the samples listed in the csv http://www.filedropper.com/samples_5

Edit 2: The obfuscation used in the russian PHP shells looked awfully familiar, I think the shell they're using could very well be this one http://profexer.name/pas/download.php originally shared on a .ru hacker forum.
> I'm a huge fan of the work here & strongly strongly believe in file-system oriented architectures.

Me too! You might be interested in the way scheme-handlers abstract/generalize filesystems in Objective-Smalltalk. http://objective.st Super-simple + superficial example:

file:hello.txt := 'Hello World!'.

I've used the same concepts to treat a sync system effectively like rsync. You have common names (possibly translated) and tell the system to copy things over. It tells you when it's done so.
This chart is so nonesense. HTML is deprecated? Really? And how is having more versions a higher risk of obsolescence, but having /multiple specifications/ reduces risk?
What you're saying, essentially, is that if you only have a one-sided derivative (change in conditions from past to present is known, but not from present to future), you shouldn't call it "the derivative" (i.e., you shouldn't say things "are getting" better). I can perhaps agree, as a technical matter, but I think your criticism is over-sensitive for a non-math paper.
Do you ever get tired of pushing the trope of "expensive phones and 4k TVs and eating out" ? I'm just curious.

Because the necessities have been going up at a far faster pace than the digital pseudo-luxuries.

Just as an example, my projected health care costs for 2017 went up by an amount that is larger than a nice phone + eating out every other week combined.

That's just the increase, with no appreciable benefit to me in the services provided.

I'm sure many people could provide similar examples with rent or other necessary services.
I feel it is a growing trend as the net makes it easier and easier to go "release now, patch later".

Except that rather than patch later it gets left in place. And then rewritten from scratch in whatever is the buzzword language of the day some years down the road as the guard changes.
What exactly is this? A list of IP addresses and countries? It's unclear which attributes from this list associate the hack with Russia, and presumably it's more than IP address seeing as how trivial proxying is.
Once and for all: Not everyone must show up at the office!
Yes, we know... And?
An important aspect that the author, in my opinion, doesn't touch is attention. Most of us, humans, tend to be capable of paying attention to a _single_ task for little time, such as some hour. Now, take a computer. A computer, given sufficient electricity is capable of paying attention to such a task until its hardware has problems. Imagine if someone such as Einstein or Schroedinger were capable of paying attention to a single task (such as unifying physical theories) without needing food, water, waste release, sleep, social life. Also the task is poorly defined: increasing an A.I. intelligence isn't a single task, it can be achieved by, for example, creating faster hardware, increasing efficiency, optimizing software, as well as much higher level tasks.
If you write the book I'll buy it
Your code isn't any worse than tens of commercial systems I've looked at professionally. The difference is just that yours is shellcode, so there's no-harm-no-foul in poking holes in it publicly.

OCB is a good choice, as would be Chapoly (since the Salsa core and Poly1305 MAC are both extremely simple in code).

Since you're Windows native, you should use the system's secure random number generator rather than OpenSSL's.

I still don't understand the authentication model here, or how RSA is really helping.
Obama orders sanctions on Russia after campaign hacking during US election
Text to Image Synthesis with Stacked Generative Adversarial Networks
The drones are only available after a certain tech level and require a lot of power to operate on a large scale. They have pros and cons like all the other tech. You need a balance of drones with well planned conveyer belt layouts to do really well. +1 for factorio, biggest non-baby timesink I've had in years
Tangential question: Do you know if it's possible to identify financial institutions which don't sell this kind of data? Credit unions?
Nothing about this supports a Russian attribution.
I'll never say! Unless someone else says! :)

(I could be wrong!)
2 minute papers video: https://www.youtube.com/watch?v=rAbhypxs1qQ
> This whole thing smells of politics. Where was all this concern 2, 4, 6 years ago? You think cyber attacks weren't going on then?

It sounds like you're both complaining that the government is doing anything about cyber attacks, while also complaining that it hasn't done enough about cyber attacks.
Hi, Alex. Nice new material design templates and open sourcing them! It looks like the developer wrote their own code[1] to achieve the material design look and feel; will your team be using Google's Material Design Components in HTML/CSS/JS [2] in the future?

[1] https://github.com/creativetimofficial/material-dashboard

[2] https://github.com/google/material-design-lite
But then you're back to needing to run your own proxy server as it's also going to have to terminate SSL and therefore will be able to read everything that goes through it.

For this to be truly useful, it needs to embrace the "go to a URL and it works" paradigm of the web. If I need to install something locally, or setup a proxy server, or install some code on my git server, it's a non-starter to me.
Almost. I recently revived the original Boyer-Moore theorem prover from the 1992 sources. I had to make only one change to get it to run with Gnu Common LISP. The name "EXECUTE" is now being used by a standard library, and I had to rename a function.[1]

(It's fun running that on modern hardware. It was painfully slow when I ran the original around 1980. Now it can prove the basic theorems of number theory in a few seconds.)

[1] https://github.com/John-Nagle/nqthm
If you doubled salaries in Paris, you'd get more people from across Europe moving to Paris. If nothing else, it would put Paris on my list of alternative destinations after Brexit.

High salaries make people move. The cost of moving is just another price.
But of the amount of phosphates making it into bodies of water almost entirely come from commercial farming, not people's houses.

Removing it from commercially produced soaps is insane if commercial farming isn't also prohibited from using it.
> Errors in the software of the radiation therapy machine Therac-25…

Caused by unsigned 8-bit integer overflow combined with (presumably) treating 0 as falsy. May or may not have been solved by using Rust (but probably wouldn't have because it sounds like a logic error in "clever" code).

> Errors in the software of a MIM-104 Patriot…

Caused by loss of precision in floating-point calculations. Would not have been solved by using Rust.

The other two were more likely human or mechanical than (unspecified) software errors.
> Give me a reason to trust them again?

There is not a good reason to do so. The trust has been broken and we should consider them corrupt if not overtly adversarial to the democratic process.

No officials took responsibility for the excesses revealed by Snowden, or promised any sort of remediation. Such smugness in the abuse of power is a very scary thing.
You clearly don't understand the intelligence process if this is your critique.

First, the people making the DNC hack report are not the same as the analysts who worked on Iraq. The IC is not a monolith.

Second, the Bush White House saw the intelligence they wanted to see.

Third, burning sources and methods is a very real concern in intelligence gathering. That reality can't be ignored no matter how much you want information to be free and open.

You don't have to trust the IC. In fact you probably shouldn't take what they say at face value. But there are very good reasons for why they operate the way they do.
Are you under the impression that different parts of the US government typically "speak" with difference voices? This was an official government publication, that means "Who" is "The US Government", period.
> i 've never seen 2 birds collide.

Just to nitpick, this is how birds of prey hunt :)
I'm a polyglot programmer and for me Rust is mostly about the awesome abstractions and the great community.
I think this comment and the OP are both correct. The point of Rust is safety, in the sense that memory safety should be the default for all programming languages, and has been the default for all non-systems languages since the 90s. The only holdouts have been because people used to claim that memory safety wasn't possible without making a language unusably slow, which Rust has disproven. In all my years of teaching Rust, I can't count how many times I've told people that you can have a memory-safe systems language without garbage collection and have them look me in the eye and say, "what, no, that's supposed to be impossible", and I still get a kick out of it every time.

The importance of Rust is that it's raised the baseline for low-level languages in the modern age. If any future systems languages emerge that don't feature memory safety, it will have to be a deliberate choice that must be defended rather than just an implicit assumption of how the world works.
That's a law going into the effect over a year from now. Backup cameras have been popular long before the Feds decided to mandate it. The point is that plenty of people pay extra of their own volition to have stuff like backup cameras, blindspot warnings, automatic headlights, etc.
How do bunch of ip addresses form china/Sweden/germany/canada make this attack attributable to russians .
It freaked me out in the recent video about tech in Russia. You could take a picture of someone with your phone and it'll find them in social networks. Eg you could take a picture of someone on a street them find everything about them.

You can't stop progress.

See 30 minutes in.

https://www.bloomberg.com/features/2016-hello-world-russia/

https://findface.ru/
I agree with the premise of the article.

However, I feel that Steve Klabnik is trying to dispel myths about Rust not being anything "but" safety, to shape how other Rust developers talk about Rust, not denying that Rust's central purpose is around being a safe language.

This is because there is a lot of miscommunication about Rust. A lot of people who aren't immediately sold on the language walk away thinking it's slow (it's not), it's complicated (not really), and not production ready (it actually is). And that's because Rust developers don't know how to talk about Rust. I am guilty, for one.

Since Steve is such a huge part of RustLang development, it's his duty to direct the conscious effort to promote the language.

No reason to get into a debate over click-baity titles. :)
Why I'm Leaving San Francisco
Ugh, "starter homes". Someone saying that about their most recent purchase usually tells me all I need to know about them. American over-idealism at its finest.
Gwern's response to the complexity arguments: https://www.gwern.net/Complexity%20vs%20AI
How does it feel following your true ideals of open source software, installing AOSP on your mobile device, with the ability to use apps from the Play Store?

What about updating the BSD distribution on the PS4?
"Combined with low water pressure, toilets clog and break down"

There's all I need to know to stop reading: the author doesn't even know enough about how toilets work to write intelligently on the topic. (The point being that water pressure has nothing to do with anything but refilling the reservoir tank.)

Go buy phosphates at the hardware store to add to your washer? Now I'm picturing someone who took Ayn Rand just a little too seriously, stamping his foot like a toddler "don't you tell me what to do, no matter how much it shits all over everything for everyone else!" And then just makes shit up without critical thinking as long it supports the narrative. Because gummint. (BTW, I recall soap makers advertising their lack of phosphates before individual states started banning phosphates, probably because the overwhelming evidence said it was bad. So without wasting time on references to refute an article not worth refuting, I call bullshit on this one, too.)
You like numbers ? See those numbers

- What does it mean that the page has live data visualization. How often is the data updated ?

- How many sources of data are there. Does it cover all of them in every country ? Are they all online all the time ?

- Why is Estonia dark brown the whole time but when i click on it is see

wind ++
solar ?
hydro
biomass ?
nuclear
gas ?
coal
oil ?
unknown ++++++++++

and it still has 595 gCO2eq/kWh

- What does "?" stands for in the results? Are some sources unavailable or is the data corrupted or what ?

- Why there is nothing under coal ?

- What does unknown here mean ? Does it contribute to gCO2eq/kWh ? I mean, so much of unknown energy. Are you serious ?

- What is the metric used after all ?

Is this software even alpha ? What is the version ? That is all very important when you create "facts" like this in Internet
Man, $10K - soon we're going to hit a threshold of some sort, and automation is going to explode.
Exactly my thoughts. These are not meant as better new implementations but as high-level abstractions.
Why trust them in the first place, look at the evidence and if you disagree with a conclusion, be able to say why.

This is the whole problem we're dealing with right now - people just decide they do or do not trust something. Don't agree with a fact check? Just call it bogus and move on, even though it might be a 50 point case they make why bother finding a flaw in their reasoning and using that to refute their conclusion when you can just be a cynic and shrug it off. Don't agree with climate change? Just pick the 1 totally debunked study that supports your case and ignore the 1000 that don't that haven't been debunked.

So I ask, in the analyses that have come out (not just this one), what do you disagree with? As far back as June crowdstrike released a report [1], I assume you went through it in detail and can point to flaws in its reasoning as well?

[1] https://www.crowdstrike.com/blog/bears-midst-intrusion-democ...
Yep. That may not be the intention but it certainly comes off that way.
Yeah, I found where to disable it in Chrome. I held back for awhile, thinking, "what if there is a website that I would like to receive notifications from?"
A philosophical mantra repeated many times throughout history in varying amounts of eloquence and simplicity - Stoics, Buddhists, X Anonymous type groups, Jews, and even freaking Mother Goose!

I don't think it particularly bad advice myself.
One of the best low flow shower heads I've used: https://www.amazon.com/Delta-75158SN-2-0GPM-Shower-Nickel/dp... OR https://www.amazon.com/75152-Single-Function-Shower-H2Okinet...

In terms of dishwashers, I will be looking for 240v or a miele/bosch.
Unfortunately it seems that maintaining the party line is more important than the "representative" aspect of the representative democracy. If you go against the party line, you could lose your job and status as an MP, if you go with it, you could be voting against what your constituents wish.

Also, the law of England and Wales and NI make it so that you cannot possess even certain drawings. There is no line that they are afraid of crossing. Fortunately, an immoral law does not deserve to be obeyed.

"Laws that oppress people have no moral authority." -- RMS