skysight-inc/HackerNews huggingface dataset:
https://www.cvedetails.com/vulnerability-list/year-2016/mont...

Note the types of vulnerabilities and the languages they use. DoS, File Inclusion, XSS, Exec Code, Dir Traversal, Priv Escalation, SQLI, Bypass, CSRF, Info leak, etc.

Many of them (including ones in C) have nothing to do with memory protection. Those that do (null pointer deref, use-after-free, memory leak, buffer overflow, etc) are all trivially protected with small kernel patches that have been around for 17 years, and of course most of these vulns would become trivial with proper mandatory access control. But for reasons that completely escape me, nobody has adopted these basic techniques to prevent small bugs from becoming big holes.

Now balance the common holes in C against all the other bugs in higher level languages with otherwise suitable memory protection, and consider that at least with C there are basic steps that prevent many of these from becoming problems, whereas with other languages you need a hodge-podge of different, more complicated countermeasures. C is actually easier to secure because its bugs are common and not difficult to catch by the kernel.

Honestly, if people spent as much time developing new industry best practices for use of the language as they do complaining about it, this would be a non-issue. But C isn't trendy, so let's all crap on it and pretend it's the only issue so we can have fun reinventing classical bugs with new languages.
you could sort them in alphabetical order. ASC & DESC ;)
Did y'all fix GTX 10x series compatibility with this release? Mathematica is some wonderful software, I admit -- but it was disappointing to try the NN examples and suddenly see nothing worked properly on my new GTX 1080 and I had to CPU train everything. :( I guess stuff like that's inevitable though so I'm not too upset.

Guess the only way is to upgrade to 11.1 and find out, but since you're apparently involved -- might as well ask...
I'm surprised that this discussion of tipping doesn't include the fact that it implements price discrimination.
It's possible that the reason tipping is so often the end point of systems is that price discrimination is much more profitable than having a fixed price for everyone. So trying to design a pricing system that replaces a tipping-based service needs to deal with this problem. How is your service going to implement price discrimination without tipping? Otherwise how is it going to be as profitable as a system that has price discrimination?

I'm not saying I prefer these systems as a consumer; I would much rather pay a fixed price. I'm saying that it seems like they create the most profit and thus competitive edge for the businesses using them.
That's very much possible, but I'll admit that I never really looked very closely at the x86 instruction encoding, mainly because I value my sanity. Good thing I mostly work with ARM environments these days...
This is really interesting and a great idea; however, I'd almost trust charities more if they listed how they had failed each year and where delivery and services went wrong and what mitigation has been put in place.

It would be good to have a system where charities were allowed to fail like bad companies as well, but it's difficult to be this honest.
Every time one of these archaeology articles comes up, I'm reminded about what thin reeds most of these theories are based upon. It's the blind men and the elephant, except the pieces available for inspection are even smaller, and the conclusions more sweeping.
FYI - you can still find the Gros Michel banana. You can buy your own plant off Amazon if you like (https://www.amazon.com/Gros-Michel-Banana-Plant-Variety/dp/B...). I grew up regular eating the still-available lady finger banana, which really does taste much much better than the Cavendish. I also love eating apple bananas when I'm in Hawaii.

My point being saying it will be "gone" is likely hyperbole. It may end up being less cheaply and readily available, but there are efforts in place now to find its successor which has similar qualities, but is resistant to the numerous problems facing the Cavendish. At this point it looks most likely to be the Goldfinger banana - https://en.wikipedia.org/wiki/Goldfinger_banana.
You are right, of course. Yet it is important to understand that ALL news media is biased and they are all distorting reality to one degree or another. I can't think of a single news show on any TV network that isn't biased, sometimes to a grotesque degree. And I consume news from a wide variety of sources.

In the case of Fox News, the three people I highlighted are, today, not in the "clowning for ratings" category to such an extent that listening to what they have to say isn't a total waste of time. I would not compare them, even for a second, to, say, Hannity (on Fox) or Maddow(MSNBC) or Blitzer (CNN). There's a huge difference between these last three, who are there to stimulate their respective echo chambers and the others.

Yes, you are right, people will actively ignore facts. Yet, the problem is deeper than that because of how the masses are being "managed" by experts. And it is a losing game...for the masses. In many ways it is no different from the expertise and techniques being used to get people to click on ads online.

Given the degree of manipulation we are exposed to today it is important to listen to everyone while avoiding obvious clowns. This should be met with the skepticism necessary to avoid being manipulated, the patience to allow evidence to surface and the research to ensure we don't form conclusions based on manipulation and lies rather than verifiable facts. That, for the masses, is almost impossible. And that's the problem. Because it works, which means the various players will continue to behave as they do and continue to optimize the techniques that produce the desired results: Viewers and Votes.
> Cold weather increases odds of catching a cold because it makes us more likely to stay indoors with other people, some of which may be sick and contagious.

I'm not convinced that's the case these days. The average city-dweller stays indoors with other people for most of the day, year round.
>Is this really that different from police asking for security camera footage from a convenience store after a robbery?

This is closer to police asking for all security camera footage from all stores in town which sell a product that may or may not have been used in a particular crime. How do police know the image was procured firsthand from google? How do police know the google search was executed from within town? How do police know the image was procured in the given date range?

You propose that the obviously innocent users will quickly be removed from the suspect pool after police investigate them. This may be true. I posit that it is unacceptable for the list to exist under these circumstances, because a warrant for information that users have a reasonable expectation of privacy should be specific enough that no innocent people should be affected.

I say "reasonable expectation of privacy" here to mean that laypeople expect no tracking, and educated users expect information to be contained entirely in advertising businesses and their partners (google et al.). At no point does a user reasonably expect that, as a matter of course, their search history will be tied to them and presented to law enforcement.

I strongly disagree that providing total transparency to law enforcement and trusting them to look only into the matter at hand, and dismiss and destroy all information relevant to the matter at hand, is the best course from a government perspective. Privacy advocates cry shrilly about big brother, but the end result of this policy is too close to call it anything else. Abrogation of a citizen's reasonable expectation of privacy should be undertaken only when absolutely necessary, and if the procured information leads nowhere pertinent to the investigation at hand, it should be destroyed.

With the information I have, this particular case does not meet the constraints necessary for such a broad warrant to have merit (or be issued).

>Unfortunately, I think obvious invasions of privacy (e.g., PRISM) have made folks very jumpy about any electronic evidence collection, which I don't think is warranted.
This opinion makes sense from your point of view, but it may not hold up when you consider the matter from a "what is the role of government in this situation?" standpoint. The government was created, fundamentally, to uphold and guarantee the rights of citizens.

I would be much more comfortable with your statement if it read more along the lines of "...electronic evidence collection, which I don't think is warranted, but I understand that other people can reasonably care more about privacy than I do."
This was unclear from the article...but from what I understand the police want info on anyone who searched a specific term on google for a specific image from geo-location/IP in that city a week before the crime took place ?

1. What if the criminal didn't use Google?

2. What if the criminal did use Google but used a VPN or Tor or a Proxy?
> Because bad information that people passionately believe has a way of rising to the top.

Great single line summation of the whole problem.
Disclaimer: I'm a co-founder of Apifier [1].

It's not an open source, but free up to 10k pages per month. And it can handle modern JS web applications (your code runs in a context of crawled page). You can for example scrape API key at first and then use internal AJAX calls.

There's also a community page [2] where you can find and use crawlers made by other users.

[1] https://www.apifier.com
[2] https://www.apifier.com/community/crawlers
The definitive guide imo: http://www.seriouseats.com/recipes/2012/08/quick-caramelized...
Add Featured Class to the First Post in the WordPress Loop Using the Post Count
I guess the theory is you can't be too poor to gamble?
CUDA is always fun to install but NVIDIA does a reasonably good job as long as you remember to remove the system installed nvidia stuff beforehand (otherwise you'll be in a world of pain with a computer that will likely either hang somewhere during the boot process or that will have two conflicting sets of NVIDIA code on it).

For CuDNN I've found a good solution, see below.

Tensorflow itself worked ok once I figured out what all the dependencies were, even so I have not been able to get it to use CUDA yet (it only works with the CPU), which is strange because other CUDA stuff works fine.
Top Best Online Bingo Bonuses UK
Yes, -1% for NASA in the proposal. The EPA is what gets hit hard - listed as -31%.

Also worth noting:
"Discretionary spending limits, addressed by this proposal, are set by congressional budget resolutions. Congress typically makes changes to the president’s proposal — last year, lawmakers disregarded Obama’s budget altogether. "

https://www.washingtonpost.com/graphics/politics/trump-presi...
Problem is, we're not exactly sure when disaster will strike. Someday a disease is going to wipe that banana off the map, we just don't know when.
Consistent Vegetarianism and the Suffering of Wild Animals
I'm not following. Why is that number familiar? Can you explain this in layman's terms?
Onions have layers and so does the truth apparently. Determining actual truth from a lot of vaguely related information is quite difficult. I've always found that there are things you can enter a search string for but you can't describe it sufficiently to find the actual result, just things that appear related somehow.
I'm not much of a banana guy, so I don't know if it's always been the case, but at my local supermarket there are usually up to four varieties of bananas to choose from, and always more than just one.

The usual big yellows take up the most display, of course, but they also have red bananas, a small yellow variety, and the baking banana (for some reason the name is escaping me at the moment, but these are well known).
Given that APIs can't be copyrighted, why shouldn't they have that particular cake for free?

(Actually, the current court ruling is that APIs can be copyrighted, but re-implementing them is fair use. My personal IANAL opinion is that that won't stand - it will either turn into "APIs can't be copyrighted" or else into "APIs can be copyrighted, and the copyrights are not worthless - you can't copy it and have it be fair use". We shall see. Nevertheless, at the time Google copied the API, the assumption in the whole industry was that an API could not be copyrighted. Your statement that Google "wanting their cake for free" carries a tone of moral criticism that is unwarranted by the circumstances.)
Announcing Rust 1.16
This sounds like a very targeted request for information. Sure, police attention is not something anyone should seek out but I don't see how this is different than any other established investigative technique.

You have constructed an entirely fictional example to make your point but you have not cited an actual example of the police overstepping their bounds with this type of search. Sorry, that's not compelling to me.

I don't completely disagree with you but this doesn't make a convincing case against this type of request to me.
I would say it takes about 15-20 years to recover from a depression like we had in had in 2008.
As an unintended side-effect (maybe), the mere existence of HHVM acted as a spur to PHP generally, things have improved radically in PHP-land over the last few years.
The syntax is mininal, here it is: (functionOrMacroOrSpecialForm arg1 arg2 ...)

That's the whole syntax. So now you know how to program in LISP.

There's no statements in lisp, only the above expression repeated, which you can nest one in another, or sequence them one after another. They're called S-expressions.

For me, that simplicity is the first advantage. It's just very consistent and quick to learn. It also allows to embed everything together, like assign a value in an if condition.

The second big advantage, is that this syntax is very easily parsed into a list and can be easily changed programatically. Lisp lets you do that by defining macros.

A) It works by defining a function which takes the parsed code as an AST, and returns a modified AST. To transform the AST you have the full power of LISP availaible and some convenient operators that make it easier.

B) There's many benefits. Conceptually, it lets you change the evaluation order of code. Normally a function evaluates its arguments from left to right and then passes the resulting values to be evaluated by the function. 99% of the time this is what you want. But what if you want to short-circuit the evaluation of the arguments when one of them evaluates to say false. This would come in handy if writing the AND function. A macro allows you to do it. In other languages, you're given special operators for this kind of thing, but they're limited and you can not add new ones.

Another practical case is aspect oriented programming. Imagine you want to print the argument to all functions and all their return values. With a macro you can do this:

(print-steps (+ (- 100 23 price) (* 12 34 56 people))).

Print steps is able to inject a print statement at multiple code points, around each arguments and around every functions. Without a macro, you would have had to re-write all this manually, and then delete it again once you're done debugging. Some languages like Java give you a complicated framework which can do this to a certain extent, but aspect-J is a pre-processor, just like macros, it's just that the Java syntax makes this really complicated to implement, so you need a framework to do most of the work, or it's not practical.

C) That's up to you to decide. You don't ever have to write a single macro, and should only use them when they are needed and make sense. Now reading code with macros is trickier, because every macro could be a custom operator you have never seen before, or an aspect that does things you're not sure about. To me, this just becomes a thing of don't write crappy unreadable code. Which is true in all languages. I'd suggest teams standardize their macros, and document them well, so new members can quickly get familiar with your team's macros. Once familiar with a set of macros though, they make you a lot more productive and do make code more concise and even easier the read sometimes.
It's human nature to seek ultimate explanations. We just aren't satisfied with working theories that don't answer the deepest questions. One way or the other, the effort will bear fruit I think, even if it's by nothing else than to show us that there is no ultimate law out there.
If the police had a tap in place at that time and they caught the data in flight (good luck with that btw) then good for them. If there was no suspect this is just another fishing operation and those should be very strongly discouraged.

Note that they do not even know for sure that the suspect googled the name of the victim, they are assuming that.

And that in a case where the fraud failed, so this is not even a crime that succeeded. I think this lowers the bar for dragnet style after-the-fact fishing expeditions to the point where you might as well hand over your search history in real time just in case you commit a crime at some point in the future.

I'm sure some LE would see that as the holy grail, but me, I prefer they actually do their digging with someone specific in mind rather than to declare us all suspects to a crime simply because we happen to live in a certain city and google a certain name.
The Orange Pi Community Gets an Ubuntu Snap Store
Cubspot finds camps and classes for your wee ones
Think about the evidence in Bayesian terms. What does knowing that someone searched an unusual name (or crossed a particular bridge) do to the odds that that person committed the crime? Probably a lot!

So why does the intent of the investigator, to confirm versus discover, matter? If evidence is highly probative, and doesn't infringe on anyone's property rights, what's wrong with it? There's no right not to have the government find out you did something wrong...
> All they can do is pile on layers and layers of abstraction to make it painful. They can't make the private API truly private if it requires something shipped with the client.

This is totally true, but the original premise was to do it just with a MITM. I was being generous and assuming most apps do dynamic generation of their keys. I'm probably wrong now that I think about it.
And here the problem: somebody did search for that name and ended up in that report. That person did not commit wire fraud but some other minor crime. And that person will get in trouble too - the evidence will be allowed in the court but the detectives will get on him and find something else. Typical fishing expedition.
Putting a service's status indicator on the service.
I'm not too outraged over this one. They're asking who in a specific city googled a specific name during a specific timeframe. This is how you find out who your suspects are. I understand it's a razor thin line between "normal police work" and "dragnet surveillance" but this time I think it's the former.
There is a "clock wall" for these Ryzen CPUs. Most of R7 CPUs won't go past 4.0 GHz with air cooling. And disabling cores won't help in that front.
There are ways to detect cheating on chess websites, though these methods are not perfect. The two main signatures are:

1) Playing moves that the engine recommends consistently. This looks for people who are inhumanly good, even the top chess players in the world regularly deviate from engine suggestions.

2) Time between moves always takes a minimum threshold, the time needed to relay the position to the engine. Humans vary wildly in the time thought based on the position, in a way that cheaters do not.

Neither of these detection methods are perfect, especially for small numbers of games. I don't think we will see large prizes for on-line chess tournaments because of possible cheating.
Yeah, basically, if it doesn't involve killing people or the police state, it's getting a cut. Unfortunately, the language I would use to describe my feelings about this is probably not considered appropriate for HN.
I guess I was being generous in my assumption that the apps will generate keys dynamically, making that not useful for a repeat attack as it were. I'm probably wrong though, most apps probably use a single baked in key.
I remember seeing something like this online. I think it was murderpedia.org ?

Details are a bit fuzzy and might be wrong. In the 90's someone murdered a person or two. Somehow the cops asked the local ISP for anyone making constant searches of the case. They traced it back to the murderer.
It doesn't fit with the overwhelming patterns of nature to have a different set of rules for when you're dealing with really big stuff vs. really small stuff.

And that doesn't even get into the fundamental issues with time and gravity. The quantum world depends on a steadily ticking clock, but general relativity tells us that when an astronaut carries a clock to the ISS and then brings it home, it has fallen behind a surface clock.
We're excited to announce Visdom, a new tool for interactive data visualization in Torch, PyTorch, and NumPy. We've been using Visdom internally for quite some time now, and I have found it to be extremely helpful in doing research.
> I am glad that they have removed the "We do not guarantee the accuracy of the English translation of the original Japanese version of the exam" clause.

What languages do they run the exam in? Do they accept a lot of foreign students / students for which Japanese proficiency is a barrier for writing the test?
For the everyday coins (which I never use), my phone. For the savings (which I don't have), hardware wallet. The Ledger Nano S is great, I have one, but the HW1 is also very good and very very cheap.
Google Drive client updated and is now broken on Windows 10 machines
When I went to SFMOMA a number of months back, they showed Bruce Conner's Crossroads (https://en.wikipedia.org/wiki/Crossroads_(1976_film)).

It was truly mesmerizing, even in black and white. Granted, the purpose was to cinematize the event, but even in a small room it felt humbling.
The first-class status of linked lists in Haskell really bothers me. In Idris there's no special syntax for lists; lists of `a` are denoted `List a` and `[]` is simply syntactic sugar for the `null` function of that module. This means `List` and other structures like vectors are on the same level.
This is a bit unfortunate, in a real sense. I mean, I already build enough software, so I'm not sad on missing out. But here's the thing: TensorFlow actually installed great on Windows and it took less than 10 minutes to get running, once I had Python3 installed, even with GPU support. Even worked awesome in VS Code, out of the box, with autocomplete in the python mode. Even a baby like me got started easily.

But it's a bit disappointing to hear that the build system is something of a nightmare, if I ever wanted to contribute myself. There's always plenty of things to help with, I don't care about the cutting edge of machine learning (I'm happy to submit docs, examples, etc)... Then again, the TF people can't just nerd around on their build system, for dorks like me to maybe write some patches every once in a while. Always great to make it easier, though.
Since Bannon is preparing for a nuclear winter, anything other than defense and military spending is non-essential.
How an Uber account can become lost forever [Audio]
I'm not sure Google knows a ton about the quality and uniqueness of the actual content, you'll need other sites to start referring to yours.
Yup, it works. Sorry... GTX 10x required CUDA Toolkit 8.0 which was RC at the time we shipped 11.0.
I'm pretty sure HN promotes these stories as a group exercise in critical thinking and analysis.
So, unconstitutional decision by the judge, and cops are surely happy to run with it.
Serverless on kubernetes
Google Home is playing audio ads for Beauty and the Beast