skysight-inc/HackerNews huggingface dataset:
Little Snitch users are the kind of people who can and would expose CIA beacon signals. It's not so much that LS users are juicy targets, but rather that they are substantial exposure risks.

You might say, well, just piggy-back the signal on something else. Indeed, that is better. But that solution is far more complicated because you have to control (cooperatively, or coercively) a legitimate end-point.

Ergo, I don't think it's clownish at all for the CIA to target LS, it addresses a real threat (to them).
FWIW I took the ethnic descriptor just as a bookmark not as a condemnation of the person. I think they were referring to the scripted father/daughter bits and the "oh wow you were 6 thats great", not anything about the presenters accent or background.

Probably not relevant for an HN comment, but also probably not anti diversity.
Yes, this is why we (Netflix) default to tsc over the xen clocksource. I found the xen clocksource had become a problem a few years ago, quantified using flame graphs, and investigated using my own microbenchmark.

Summarized details here:

https://www.slideshare.net/brendangregg/performance-tuning-e...
It's quite rare to find GPUs being used in genetics.
Trump plans a second ban
It seems to be a dump of a git "wiki" that is shared between a bunch of devs within the agency.

The content mostly centers around typical wiki style documents where developers are chatting between each other and leaving useful snippets of code and discussing different attack vectors and approaches. It's organized into folders relating to different technologies, platforms and tools.

There isn't a "use me to gain root on an iPhone" program anywhere that I can see, although there are some hints that those things actually exist in the main git repo.

In general there seems to be a lot of information on performing pre-cursor work to get devices into a state where they can be compromised via firmware rewrites etc.

There is quite a lot of interesting information that I'm sure will be of use in hardening systems in years to come, so it isn't all bad news.

It reads as kind of a "Book of tips and tricks" mainly as well as the results of various attack attempts.

Linux seems very low on the list in priorities for attack development. I did see something about opening a side channel inside an SSH session, but it doesn't seem to be a focus.

"X capability that injects a pthread into an OpenSSH client process creating a surreptitious sub-channel to the remote computer."

Certainly looks like they are having a lot of fun attacking Windows boxes and Apple phones mainly, plus Android devices and a smattering of common routers and other gear.

They also seem to have a great sense of humor. Some of the comments are hilarious, as are their project code-names. I laughed at the code sample for a Windows keyboard logger using DirectInput. Does that thing really work? :-)
>"Cooking is a social and emotional practice that creates a lot of meaning in our lives...So a product that takes centre stage in cooking practices also creates a sense of attachment by being an agent in our social and emotional lives."

Note that this is the opposite of Soylent, which treats cooking and eating as a distraction from the central problem of nutrition.

(I suppose you could alternatively say it's a complement to Soylent, which you could characterize as unhitching nutrition from cooking and eating rather than banning them from the process, letting people choose whether they want to pick up all the activities together or separately.)
> acting solely out of greed.

That's a weird thing to complain about. In a capitalist country, how would you prefer companies act? Not greedy? The whole point of a free market is that everyone tries to maximize profit. There are a lot of things you can point at to claim that Uber is evil, but I don't think greed is one of them.
Once things start leaking you're a very small step away from them mixing accidentally.

Unless containment has been set up in such a way that this is a geographical impossibility (for instance, on two sides of the Rocky mountains to stop accidental mixing in groundwater).
FWIW some people have foreign (Canadian) Google Play accounts (for example) but still live in the US.

Or maybe it's just me?
Switch and Breath of the Wild are Nintendo’s best launch sales ever
No one forced me other than myself - I just don't have the time to focus on two courses and meet the demands of my current employer (which spills over into 50-60) hours per week. I took a quiz that I am sure I failed, and chose to withdraw instead of getting below an A in the class.
First Images Arrive from NOAA’s GOES-16 Lightning Mapper
I think the personal attack was unnecessary there.
That is literally the definition of "execution style", when you are killed at close range with no means of escape
I'd say the design work is Step One in branding, but identity is a bigger picture. Using the standard example of Kleenex as branding so strong that it became a household word, they could redesign everything, but their identity is still solid. That is your final branding and identity goal.

So the design work is an important piece when starting. But it has to be backed up by product, and just as importantly, by service. The three together make up the identity with which people will associate your brand. Don't over-invest in one, while leaving the other two behind.
I find this very revealing: it's easier to argue against an objective claim—even if all the evidence points against you—than it is to argue against a normative claim. So it's easier to deny "global warming exists" than it is to deny "if global warming exists we should make sacrifices to prevent it" even though, abstractly, it should be easier to make a strong case for the first point. Zooming out even more, it's somehow easier to argue against established scientific fact than it is to argue for valuing shorter-term concerns more and longer-term ones less.

Part of this is that if you argue against the first position you might be labeled as uniformed or ignorant, but if you argue against the second position, its supporters will tar you as immoral, evil and generally a bad person.
The article made it unclear what the difference between a "digital twin" and an engine-specific record is. I assume the difference is that they're building a model of some kind, but you wouldn't know that from searching for [twin] in the article.
Yeah, I understand not wanting Uber in your country and going after the company, but to hit bottom-tier employees is just wrong. Reminds me of the US justice system in the finance sector.
Not sure, I'm on a Late-2016 MacBook Pro, the monitor should be good (but I'm not a designer).
Out of curiosity, what's the difference between browserling and a service like browserstack?
> 128 PCIe lanes in a 1S system is unprecedented

Yes, definitely drooling at this. Assuming a workload that doesn't eat too much CPU, this would make for a relatively cheap and hassle-free non-blocking 8 GPU @ 16x PCIe workstation. I wants one.
> It's conspiracy-nut territory

While I agree, it was also considered conspiracy-nut territory to have believed most of the stuff in this leak. Look at how the wider tech community treats people like McAffee and Stallman.
The purpose of the market is not to determine valuations, it is to facilitate transactions. The transactions happen at different prices (very close together) - the idea is the market participants (buyers and sellers) have their own ideas about valuation and enter transactions accordingly. All else is speculation.
TicketCity | Full Stack Developer and Developer Lead | Austin, TX | Onsite https://www.ticketcity.com/
We are an eCommerce marketplace for live events (sports, concerts, theater).
If you get sh*t done and love working on a close-knit dev team, we want you!
Our stack: Javascript, jQuery, React, MS-SQL, ElasticSearch, Node.js, .NET
https://www.ticketcity.com/careers-at-ticketcity.html
Feel free to email me (Caitlin) at csullivan@ticketcity.com to learn more about the roles, the Dev team or life at as a TicketCitizen!
Does not do sous vide, but it certainly can replace your rice cooker and slow cooker. Only trouble is having only one appliance prevents you from cooking parallel (making curry _and_ the rice to serve it over, for instance, would be a problem).
Japanese curry (beef or pork) comes out fantastic, it's a simple recipe to start and even easier in the Instant Pot.

Freezes and reheats very well.
The vast majority of our history was spent with substantial limits on the ability to collect, distribute, and access information on any one individual, let alone cross-compile information from multiple sources or for multiple individuals.

Scale and rates matter.
Sadly this is Android only.

We can only blame Apple for that though, and not Mozilla for a lack of trying.

I was extremely surprised and disappointed (to say the least) when I moved to iOS and found this missing.
Great for hummus; great for purees; great for pastry doughs.
Sudan, Africa's most misunderstood country
If you are interested in this sort of work, we've been doing this for years at Facebook and are publishing all our "codemods" in a repo:

- JS: https://github.com/cpojer/js-codemod/tree/master/transforms

- React: https://github.com/reactjs/react-codemod/tree/master/transfo...

We built and ran the codemod they talk about in this paper many years ago across thousands of files. Unfortunately, we didn't have the infra open sourced so the actual codemod didn't get open sourced.
We're watching more video, just not on TV
Your comment must have been seen, as it was just reopened and put on backlog. Hi, MS team members! :)
"IBM did it first"

Well not with HBM (which is DRAM), but huge amounts of L3 SRAM on a MCM... POWER5 I believe.
I'm more than willing to admit I could be wrong. And maybe Intel will push the TDP envelope with servers as well if Naples proves a threat when things all shake out. Just if Intel hasn't put a ~250W server chip into production I doubt AMD will then again if it performs that much better then there's a calculus there that will need to be done. My prediction, based on no evidence, is that this 32-core chip will be clocked at 2.6ghz and boost to 3.2. Shot in the dark, but given current TDPs that's where I think things might shake out to.
Believe it or not, I actually sold them to a museum.

I listed them on eBay as defective along with a detailed description of their issues, and they were both purchased by some sort of museum place in New York I forgot the name of. They sent a truck out to my place to pick both of them up.
Why not point to the actual ancient exploits from circa 2011-2013 for Android versions below 5 and Chrome versions below 40?

https://wikileaks.org/ciav7p1/cms/page_11629096.html
There's lots of case history where people are faced with a court order compelling them to return ill-gotten gains, and when they claim "I can't do it, I don't have the money." - they are found guilty of contempt of court if the court believes otherwise. Burden of evidence is not on the court to prove you do have the money, just as in this case, the burden wouldn't be on them to prove you can retrieve the data....
"The first thing that comes to mind is showing care for people I find unlovable."

Most of my friends describe me as more religious/spiritual than most religious people they know, yet, I consider myself closely aligned to atheism.

One of my good friends (an Anglican) told me about a community activity to promote girls only. I asked why the church was so sexist and he said nobody had challenged it (supposedly they ONLY get government grants if ONLY females are helped!!).

Needless to say, he kicked up a fuss and the church is now split fairly evenly on the topic of "should boys be given ANY support".

When you said about religious people acting selflessly, I had to chuckle. I know some lovely religious people and some prejudiced people. Religion is no judge of character or empathy.
While I'm a huge fan of what ES2015 has brought to JavaScript, the "class" keyword was a huge mistake. There are no classes in Javascript, there are only objects. By embracing prototypal inheritance you will write cleaner code with fewer errors.
That's the case for all non-safari browsers
This article is a nice reminder of the truism, "don't do things in a shitty way and they won't be shitty." That is, whiteboard interviews aren't inherently terrible, it's just that a lot of interviewers ask terrible whiteboard-based questions, like asking to code in unrealistic circumstances.

But I think that also kind of highlights what DHH and others are trying to get at - a lot of programming interviews are terrible because they abuse the whiteboard, and that needs to stop.
Mass surveillance was conspiracy nut territory.

Wide spread market fixing, libor, gold, silver was conspiracy nut territory.

The US engaging in blscksites and systematic torture was conspiracy nut territory.

But criticizing your pro Government apologia only results in comments being banned and removed -- perhaps just more conspiracy nut territory?
Ask HN: What is the employee turnover rate at your startup?
How is your company dealing with turnover and what are some factors that have come into play with people staying and leaving?
I think the impact would be similar to the impact eminent domains laws have on real estate investment.

What do you think the impact of withholding drugs from those that can't afford them could be?
Good design is as little design as possible.

I bought a Bravia, it doesn't connect to the Internet and it doesn't have a camera or microphone aimed at me, it performs quite well at being a television.
I love how simple your site is. I hope is stays around. I would take everyone's advice and remove the animations. I and a few other people I showed it to in the office all had the same annoyed reaction. Everything else is great and seems to work!
Yeah, but why would an insider do that? It just seems like it's exposing him/herself to undue risk for no real benefit.
> Firefox for iOS is a lie.

That's a bit harsh.

> It's a non-Firefox browser just set up to sync FF settings and bookmarks and kinda look like Firefox.

It's a WebView-wrapper like all other iOS "browsers" because that's everything Apple will allow. To be fair though, synced data, history, passwords and settings is probably one of the most important things for a mobile user, where entering things manually is a pain in the ass.

Basically NOT having this would risk losing users on the desktop (to something which does sync). And right now, Firefox can't afford to do that.
This is TOTALLY wrong.... All code developed by US Governement is PUBLIC DOMAIN.
> The Prenda modus operandi doesn't seems much different than what the US Police is doing, so why do they face prison ?

There are a lot of reasons, the most critical one being that it involved multiple levels of misrepresentations to the involved courts, which is not part of a normal law enforcement sting operation.

(There's also a difference between a criminal sting operation where the prohibited offense is, e.g., buying the goods being offered vs. a civil copyright "sting operation" where the prohibited offense is "copying some work without the consent of the copyright owner", and the active assistance of the copyright owner is involved in the act of copying.)
5 Features You Should Be Excited About in Visual Studio 2017
I made one foray into language creation that some folks may find interesting, although I am very much an amateur. I designed a declarative language attempting to mimic the structure of human concepts. The idea was partly to try out this hypothesis that all concepts are reducible to 'types' and 'relations', and to try creating a language based on those two primitives. After coming up with some concept hierarchy, you could use it to generate particular instances of the root concept—the idea being to use it for procedural content generation. Here's some sample code:

Chair:
(legs: Cylinder, seat: Slab, back: Slab)
{
attachment(legs, seat)
attachment(seat, back)
}

TestType1:
OriginType
(
a: unsequence[x: Type2, xor[y: {Type3}(), z: type4]],
b: optional[Fruit], c: >3[pet: Animal], d: 2[Animal(Blah){}]
)
{
constraint1(x, y, z)->recognize->toInt
constraint2(x, z.a.b.c)
constraint3(z, y)
}

I wrote a grammar for the language and generated a parser, and have a design for the runtime on paper—but, the design was rather complex and for various reasons I thought it would be best to build a general purpose data structure visualizer to assist in writing it. That ended up being a quite large project on its own, which I'm still working on (quick demo: https://www.youtube.com/watch?v=HpxgUVNAhXc ; more info: http://symbolflux.net/projects/avd).

I also realized recently that my main 'innovations' were already covered by the logic programming paradigm decades ago, so that has discouraged me some. (And I've recently started thinking that machine learning will be better for doing procedural content generation than anything produced by explicit descriptions.)
Interviews don't demonstrate ability or aptitude so much as they demonstrate ability to keep a cool head under incredible pressure. It doesn't matter how soft you make the whiteboard question: you are getting lower quality signal in an in-person office interview than you will in any other venue. Interviews are incredibly hostile experiences and nothing you can do, including comfy chairs, bright, cheerful surroundings, or free drinks will change that.

We need to engage with the fact that these interview processes are just stupid. We know a number of better ways to extract signal from candidates, but we keep interviewing face-to-face for technical ability because that's how it's always been done.

A number of companies are trying to embrace work-sample challenges to boost signal from candidates. But I don't think they get it. They assign take-home work before or after an interview, and still make decisions on candidates based on an "interview loop". If you have an interview loop composed solely of people, I don't believe in your process. We had a sort of interview loop at Matasano, but the open secret was it largely didn't matter, because if your (numeric) scores on our work sample tests were solid, the burden of proof was on the interviewers to override the work sample tests.

We worked with a number of different hiring groups at Starfighter last year, some of them quite smart, and at none of them did I see a process that deliberately and meaningfully insulated itself from "I'm having a bad day and haven't eaten lunch yet and now I have to interview someone" bias, or from "I'm putting you, the candidate, in the most uncomfortable imaginable professional circumstances and expecting not only perfect recall of the intricate details of your craft but also that you recite those details in a way that demonstrates confidence and ability to get things done".

All the hiring I see is still done by by subjective X-factors; worse, each interviewer in a "loop" has a different X-factor. Where's the table-flip emoji when I need it?
Turkey to Investigate Antitrust Complaint Against Google
Absolutely true. But just like we shouldn't forgive Uber their sins because they improved the market, nor should we condemn their market changes because of their wrongdoing.

And "caring" is something almost no companies do. Even in pure capitalism, companies don't WANT competition. They don't CARE about their consumers - they just want to make as much money as they can.
It has been reopened.

I am curious, did you vote for this item? If so, did you receive an email when we closed it?

Thanks!
Eric, VC++ Team
The Samsung TV attack seems rather lame. The attack apparently has to be installed via a USB device, which means somebody has to physically reach the TV. If you can get that far, there are other ways to plant a bug.
The documents don't indicate they've been able to install it remotely. Looking into remote update was on the to-do list.

There's little interesting technical detail in any of this. It looks like stuff that would be classified CONFIDENTIAL; it's mildly embarrassing, but doesn't give much away.
How terrible for them, all they did was break the law and get caught.
I'm the developer responsible for multiprocess on touch screens. There was a mixup in the release notes.

This is what the realities of the situation are:

Touchscreen Windows users running 32-bit Firefox 52 should have multiprocess.

Touchscreen Windows users running 64-bit Firefox will not have multiprocess until version 54.
Actually you can monitor the packets coming through your network and prove whether it is recording or not.

Also reverse-engineering the Alexa, and taking it apart will allow you to see whether there is enough storage space for lengthy conversations. Which are only stored for in-transit post the wake-word however.

You can delete your recordings on amazon.com and google also allows you to delete your recordings if you use google home. So this will give you insight into what recordings they do have.
Thanks. You might also like this talk by Edward Kmett on Propagators (not a talk on sheaf theory, but it touches on similar ideas) -- I having been thinking on how to unify the ideas in sheaf theory with propagators and would be curious if others see similar connections:

Edward Kmett on Propagators
https://www.youtube.com/watch?v=DyPzPeOPgUE

"Propagators" as introduced by Sussman et al. from MIT a few years back:

The Art of the Propagator
http://groups.csail.mit.edu/mac/users/gjs/propagators/

We Really Don't Know How to Compute
https://www.infoq.com/presentations/We-Really-Dont-Know-How-... (Sussman at StrangeLoop)

Constraints and Hallucinations: Filling in the Details https://www.youtube.com/watch?v=mwxknB4SgvM (Sussman at Google)
Indeed. I also spoke about this topic a lot: https://www.youtube.com/watch?v=d0pOgY8__JM
The etymology of fact comes from event.

http://www.etymonline.com/index.php?term=fact&allowed_in_fra...
Reinventing radio with Anchor 2.0
I have three recommendations: 1.read "Thinking, Fast and Slow" by Daniel Kahneman 2. think in Bayesian term about statistic when you see the "facts" they claim from a report 3. being okay with the fact that you might waste time and efforts or being wrong on thinking regarding about issues (disclaimer: I am not a psychologist or data scientist)
Instead of stepping down, it looks like Travis is hiring a COO
http://www.recode.net/2017/3/7/14843680/kara-swisher-uber-ce...
What I meant was that the implicit condition may be too context specific, dunno, maybe some NIC flags or something that are extremely unlikely to be caught by tests (especially written by anyone working on the code piece), code reviews or any such measure. Because the code works seemingly well until underlying conditions stop being satisfied.

Such conditions happen all the time, but are unproportionaly painful to debug in bulldozer code :(

Rant: Even though tests are nearly invaluable, though I personally believe that tests written by the same person writing implementation give a bit false sense of security. I see spec, tests and implementation different representations of author's understanding of the problem. If any two of those (e.g. tests and implementation) are produced from the same mind/understanding then they cannot be used to verify that understanding behind each other is the same.
Every society rations medical care, it's a finite resource. Sure, bureaucrats in some countries do a cost benefit analysis with human lives. That's unfortunate, but I believe it's better than what we do in the US. Here we ration medical care by patient wealth, which strikes me as dystopian.
I own an Anova and a Joule and enjoy both. One item I enjoy a lot is a generic vegetable cleaver. I find them to be better at making consistent slices. Cheapest piece of cutlery I own but the one I use the most.
Intuit bought Mint, and the whole thing is built on top of Yodlee. http://yodlee.com/
SNAP down a further 10%
Shhh, look over there. Russians and Julian Assange's agenda! You don't want to weaken the US do you?
This is slick. I signed up 20 minutes ago. Your onboarding is really smooth. I also like the corny jokes. Just dropped you an email!