skysight-inc/HackerNews huggingface dataset:
For Transmission, the infected binary was signed as well: https://www.welivesecurity.com/2016/08/30/osxkeydnap-spreads...

Signing doesn't help unless you know which public key to trust.
>If a crowd of people were that crazy about getting me to not speak at their college, I would happily leave and find another place, and write a Medium post about my views, not crying that people don't like me and don't want to hear them.

That is not really a fair characterization of the situation. Some people at the university wanted to hear what the speaker had to say. That is why the speaker was invited to the campus. Other people didn't want the speaker to speak at the university. So they created a civic disturbance, including some amount of violence, to prevent the speaker from being able to speak.

It is not accurate to say that the students at the university didn't want the speaker there. Some students at the university didn't want the speaker there. Other students did want the speaker there. Many didn't care, probably.

So what happens if you think through your argument with the idea that different people at the university have different opinions?
If web sites started serving an HTTP header saying "browsers with ad blockers are not welcome to view this content", I would allow my browser to honor that request. That's more convenient than solving the AI problem of identifying and filtering out all the garbage content that exists for the sole purpose of drawing eyeballs to ads. Just tell me up front that it's garbage.
I think this is for signing arbitrary EXEs. I'd always been curious how that worked, TIL it's that expensive though :(
Mailmate for me. It was good when it had that dumb brown icon, it's even better now
Thanks for sharing your experience! EMACs is another masterpiece on its own merits and I'm all for diversity. Also, hijacking the top comment on my own post to say the obvious: people, this is just my opinion! I'm not saying you shouldn't use and love your IDEs because I like VIM! Love you all. Peace!
> There are very real injustices happening in the world - in Syria and in Chechnya for instance - but they're routinely ignored unless you really go looking for them.

How can you say they're ignored while admitting that you can find reporting on them if you look?

I find it ironic that people complain about the quality of mass media while simultaneously swallowing mass media's definition of what is and isn't important.

If you hate mass media, then you are a person who doesn't need to be spoon-fed news, right?

Of course this notion flies in the face of our dear leader, who hates CNN but watches it religiously. He seems to have convinced every far right person to do the same.
"Scriptare" too if this[1] to be believed, though not in classical times though. And yes, I mixed up pen and pencil there.

[1] http://latin-dictionary.net/definition/34351/scripto-scripta...
C60 Fullerene being an exception to the rule.
You failed to make any rational case. So, you resulted to insults.

> extend that to the capacity for rational or logical thought is ridiculous and unfounded

I explained (A) the astounding ability for "rational thought" but also (B) how emotions can overwhelm that ability. So, your comment shows you have poor reading comprehension, and some junior college may be able to help you.

On length, what I wrote was not long enough with enough details, examples, and explanations for you to understand it. So, at least for you, what I wrote was not long enough.

For your obsession with excretory matters, neither HN nor I can help you.
Those wars are actually quite healthy and productive for the whole, because they make people defend their sides and thus develop their best arguments. They're a great source of information. You just have to be careful not to get emotional and/or degrade to name-calling.
Oh right, a sperm bank would explain both factors neatly. Certainly loop-worthy though!
I don't use Facebook. I still feel miserable for the same reason I feel miserable when I see war. FB is designed to encourage the absolute worst of all our human nature, dressed up as a "tool to reconnect with people". To make the war analogy even more true, now people are actually 'dying on Facebook'.
I downloaded it 3-4 days ago and I don't appear to be infected as far as I can tell but this gives me serious concerns about if I might be in some other way. Sigh.
This problem isn't limited to web applications. Think about how many security problems happen on the server.

All sufficiently complex ecosystems are a giant, flawed mess.
I don't get it, where is the misery? Are people really so fragile that they get upset seeing some old classmate in a luxury car?

I put off creating a Facebook account for a long time but eventually gave in. And I was pleasantly surprised to find how well it works for sharing photo albums with my friends and family.
> And how's that been working out for them (and their users)?

It likely worked out fine for anyone who checked the SHA256 before installing it. Which, unfortunately, is likely a small minority of users.
That's funny. Microsoft took the main guy from Pony.

They're really invested in languages like C# and F#.

I guess you gotta be a big established company to afford to maintain programming language. Google have Go. Ericsson got Erlang.
That's pretty much exactly what happened at UT Austin, in the Central IT Services department.
What resolution are you looking for? All models fail to be the thing they're modelling.

The first and obvious answer is that "this is software running on hardware, as apposed to being biologically-based".

It might sound like I'm being facetious but your question is really that broad.
It's $180 from Instant SSL.
There's a quick analysis of it here: https://objective-see.com/blog/blog_0x1D.html

Along with the fact that Apple updated the built-in sorta-antivirus in MacOS to detect it. But it only detects an SHA1 hash on the original DMG. If someone rebuilds the DMG or puts the malware with another app and builds a DMG, it'll bypass the MacOS sorta-antivirus.
I haven't actually deleted my Facebook account, but haven't used it in years.

I never made a conscious decision to stop using it. I got really annoyed by Facebook emails and phone notifications, so I created a filter for Facebook email, and turned off notifications. Once it stopped constantly bugging me to look at it, I kind of just lost interest. At some point, I just realized I hadn't logged in in a long time, and noticed that I didn't miss it at all.
The Military Is Using Human Brain Waves to Teach Robots How to Shoot
The stripped image will be slightly smaller and that makes it marginally easier to deploy to resource-limited devices. But adding that feature increased the overall complexity of the Java SE platform.
I'm going to take the contrarian position, just so people understand why this is so.

For the uninitiated, read up the history of Tibet. They haven't always been peaceful monks. Most notably, the Tibetans sacked the capital of the Tang dynasty — one of China's most brilliant in terms of cultural accomplishments — in that dynasty's twilight years.

For the Chinese, unity is a matter of culture and national security. Surely you Americans would understand this. And for this reason, control of the Tibetan buffer region is paramount because it would otherwise be the ideal place to coerce or invade China.

And for that reason, and because Westerners so choose to ignore their own hypocracies, I too support the denunciation of the Dalai Lama.
But aren't you saying this is an already existing attack vector then?? Why try to find a similar one if you knew you could just get an older browser version and use this one? Is that not a good enough reason to be prepared for it?
> HiringSolved, a technology company that leverages artificial intelligence and machine learning to solve problems for talent acquisition practitioners...

I almost stopped reading at this opening sentence. We've got "leverage", the double base covering with "artificial intelligence and machines learning", and the coup de grâce, "talent aquisition practitioners."

Slow clap for the buzzword compliance hat trick.
Here's my problem.

I breezed through your explanation with great interest and became more curious than ever to try Nix out at some point - I've heard tidbits about it over the past few months and found it to be a fascinating project.

Then I read some of the other comments in this subthread, about Nix being Haskell and Guix being Scheme, and how the internals don't conform to the principle of least surprise within their development domains - and became sad.

On the one hand, there are going to be teething problems, that's fine.

On the other hand, if I'm learning a new package manager, I ONLY want to learn package management. My brain gets really confused if I don't stay highly domain-specific when learning new things. So if you present me with "you need to learn B to grasp and work with A" you'll just get a duck trying repeatedly to jump up over the curb and failing. Looks hilarious, maybe, but very impractical.

I don't know Haskell or Scheme yet, which puts a great dampener on me using Nix for a bit.

As another practical example, emacs and vi do greatly interest me (particularly emacs' flexibility), but I'm not interested in having to learn Lisp or memorize a Nethack labyrinth of single-character keyboard commands (and the scopes for what works with what and where).

I suspect I might pick up emacs at some point after I've played with Lisp/Scheme/et al for a while, but that's not right now.

TL;DR: It's a strain for me to learn new things (basically do anything that requires focus and can't be done with passive autonomy) if my mental stack already has anything in it. AKA, I have a monumentally stupid variant of ADHD that gives me learning difficulties.
Vim mode in VS Code kinda sucks though. Not nearly as good as the ones found in IntelliJ IDEA or Visual Studio. Once it gets better I'll probably switch to VS Code for my standard text editor though.
When the riots and shouting over top of conservative speakers so they can't be heard stops, then I will concede that I was wrong, until then, I consider you wrong.

Freedom of speech used to be inalienable as a matter of principle, now the majority of college students vehemently oppose it. That is a fact.
I read an app that updates once a day with 6 short news items. Takes less than 5 minutes to read when I'm on the pot and I'm done with news for the rest of the day. Works pretty well, I don't think I'm less informed than other people I interact with.
OK, it's explained in https://arstechnica.com/security/2017/05/the-hijacking-flaw-...

The code compares the correct "hash and the hash response received from the browser, with N set to the length of the response received from the browser". So if the browser returns "", that's compared with the first zero characters in the correct hash, which is also "". Funny.
I don't get it, where is the misery? Are people really so fragile that they get upset seeing some old classmate in a luxury car?

I don't think it's any particular, discrete thing like that in itself, but rather the accumulated impact of the social media heuristic described over a period of years.

For a more extreme example, look at LinkedIn. Judging by the posts, one can easily be led to believe that all of one's connections are super-successful but utterly brainwashed corporate droids. It's a warped and misleading portrayal of human reality (for most of them, anyway—there are always those few that really do drink the Kool Aid that much). But it's naturally going to lead a lot of people to the anxiety: should I be as invested in my work as these amped-up salespeople? Am I working hard enough to promote my professional brand?
As usual, FastMail is a hero of the people. It's sad to see the big clouds swallowing more sites. Much happier with you guys.
> Our legal system allows you to challenge that. If a campus prevented your conservative group's speaker from speaking, you can sue and win.

Sure, might as well sue mother nature for the temperature rise. What we're seeing is a force of nature, the legal profession cannot stop it, overall society has to choose to stop it, which means they have to choose to allow conservative voices.
Thanks for correcting me. There were actually two comments by two different users (the links above appear identical since they have been shortened, but the full URLs are unique). I should have looked more deeply into the matter before posting the assertion and links - my apologies.
Well you would be wrong.
Super Basic Rails5 New Project Template with Sakura
Practically speaking, it's a two-way street. Speakers also redefine the speech that society accepts.

But I disagree that it's not society's job to have all speech be acceptable. All speech should be allowed, and all counter-speech should be allowed. Only violence is not tolerated (and speech is not violence).

We also shouldn't treat all other cultures as equally valid sources of immigration because some cultures hold values that directly oppose our own.

Ideally, any individual that accepts certain fundamental western liberal values like freedom of speech should have the chance to immigrate. Practically, it's extremely difficult to screen individuals for this.

We have to be able to talk about the effects of mass immigration from places like the Middle East and North Africa. In Europe, many people who arrive from those areas create no-go zones, and their children don't assimilate but instead foster a resentment for the dominant culture. That is not ok and if we can't even talk about the one solution being to stop immigration from those areas then we are done as a culture.
While users could help financially, a project should not delegate the responsibility of security down to users until they explicitly donate for that especially for a project of this amount of user base.
Maths Formula Offers Key to Sperm Fertility
I fundamentally believe my email service is worth more to me than a Netflix subscription. It's the most important service I use, why wouldn't I pay for a good one?
http://i.imgur.com/JGYaa7J.jpg
I see a wide variety. E.g. anything that can generate bursts of mails, such as alerting tends to regularly end up in the spam folder and that's particularly problematic. And it keeps happening even though the sending addresses is in my contact list and I've repeatedly pressed "not spam". Newsletters I've signed up to and where they keep ending up in the spam folder despite me repeatly pressing "not spam". Personal, individual e-mail messages sent from Gmail by freinds. I've even had messages generated by Google get caught by the spam filters, including idiotically enough moderation reports from Google groups.

The overall rate relative to my total e-mail volume is quite low, but it's enough that I have to check far more often than I'd like.

It wouldn't be a problem if I had a reliable way of whitelisting addresses, but none of the methods seems to be consistently reliable.
Facebooks your current fixation for your procrastination, but if it wasn't facebook, I'd venture to guess it would most likely be something else that is an addicting timewaster with minimal utility because that's the exactly the kind of thing we seek out when we want to get away from things we think are more important.

For you, facebook. For me -- videogames, particularly online competitive style. For someone else? Bingewatching brainless television on Netflix.
Next time you use Facebook, pay attention to how much time you spend scrolling past videos or images (including images for link previews). That time is partially Facebook's fault because (instead of just showing every post to every friend) they preferentially show images and videos. They also render short text posts with a larger font, optionally with a big gradient background. The actual information density of a Facebook feed is surprisingly low.
I do tech support for seniors, and constant rearrangement of the UI is a massive pain point. A lot of these people were good with the unchanging state of AOL for the last ten years.

Honestly, blind users might have a better time because they don't have Google's UI nightmare in the way. I'm willing to bet their accessibility features are way more stable.
1) nautil.us

2) Yes.

I was not implying one should do otherwise. I was just pointing out that servers that respond to GET will not always respond to HEAD as expected. Some sites treat it the same as GET. Others may not allow it. For example, Amazon responds with 405 MethodNotAllowed.
This has actually happened to me. Can confirm.
The people who designed DKIM didn't care about how mailing lists worked, they just did it anyway. But Mailman has adapted over the years, and Mailman3 is greatly improved. IMO, it's the best mailing list package out there, especially with regards to DKIM and DMARC compliance, but only if it is configured correctly.

However, even that can only carry you so far. Gmail is screwed up in how they handle reputation, especially with regard to IPv6. The exact same message delivered to Gmail via IPv6 will get refused versus sending it via IPv4 will work fine.

This problem has existed for years. There are even standard hacks for postfix to cause all mail addressed to Gmail to be sent via IPv4 only, just to avoid this problem.

And any domain hosted with GAFYD is likewise screwed.

You can't know what your false positive stats are, because you don't have access to all the remote SMTP spools or logs on the 'net. All you can know for sure is the false positives that you find out about. But you literally have no way to tell how big the iceberg is under the water.
Which makes the article even more perplexing.
Like the majority of the people here, I use Facebook sparingly, but I constantly need to go back there because of numerous groups that I follow. Is there any way to sideline the infamous "news feed" and instead curate a manual feed containing only group posts?
I recently moved to California and was born after all this started but I'm pretty interested in the early days. Was it honestly believed that this was the best way as a way for grandma to keep her house in days of high inflation and people didn't realize the potential consequences or was it simply sold to the masses under this guise but really it was to benefit existing landowners, creating basically a landowning aristocracy.

There just seem to be so many better ways for fixed income people to keep their homes, like a tax rebate for seniors below a certain income... Although I disagree it is strictly necessary for grandma to keep her home, retires who can't afford their taxes could reasonably be expected to downsize once kids leave home or even god forbid cohabitate with their children as is very common in the rest of the world.
Multiculturalism only works if the contained cultures respect each other, share enough common ground and obey the same laws.

Please consider my reply to another comment:

https://news.ycombinator.com/item?id=14283767
I'm the same. I've cut the news out of my life and I feel much better. Ignorance is bliss.

Humans aren't designed to cope with the whole world's problems.
"Are people really so fragile"

Yes, people are generally fragile.
Unfortunately with Nix, documentation is a total mess.

I have been using NixOS for a couple of months now, and still don't really understand how to write nix expressions.
This was on Windows with VC++, but same deal. The code that some cow-orkers had written was copying strings like "LAX" and "ORD" into `char airport[3]` using strcpy(). In debug builds, VC was allocating a whole 32-bit word, but in release builds it was packing everything on the stack. Write to it, and the terminating null ends up overwriting a byte of the next variable on the stack. Urgh. Of course, these were several hundred line functions, so the strcpy and the subsequent use of the trashed variable were a long ways away.
A developer should feel a little responsible about the product if it has a large amount of users... It's simply gaining bad reputation for the developer with such news because of saving $100 a year.

If the developers are all students or something and can't pay for that, please let me know if there's a page asking for it and I'll pay or any of the other 1000 users who can.
Love ngrok. The ngrok npm package makes it easy to put into a local dev startup, too.
RISC-V is atleast 10 years away from competing with x86 and ARM. It is just now getting to a point where it can power arduino class hardware. Long way to go... but looks promising.
Well said and funny but it won't stop me piling on :-) ....

> Even the peafowl has a longer tail than she needs.

Surely he means peahen, the female peafowl (of which the male peacock has the extraordinarily long tail.)
For me, the killing feature is search. I'm used to being able to pull, say, the details of some order that I've made two years ago, based on a couple keywords that I vaguely remember.
In my years of pretty much working only in Visual Studio/C#, I've occasionally poked around in vim for a few things and always immediately turned back. It was just weird. I didn't see the benefit of giving up all of the features and familiarity.

Recently, I've found occasion to work in other languages, and after dabbling in vim for a little while, I switched to VS Code. After gaining a little bit of enlightenment about what a comfortable developer workflow looks and feels like outside of the C# ecosystem, I've had three key insights:

- I actually appreciate the transparency and flexibility of delegating so many tasks to command line tools that can be run via scripts and task runners. Thing still aren't quite as discoverable as they are in VS, but I have enough general dev experience that I know what to Google for.

- I still don't care for vim. Maybe someday, when I want to invest time in becoming a keyboard Jedi.

- Most importantly: it turns out the only feature I really, really missed leaving Visual Studio was IntelliSense. Not just semi-intelligent word completion, but real IntelliSense, with inline documentation, snippets and parameter info. I don't know why anyone who has ever taken advantage of it would go without it if given the option - it is a bicycle for the programmer's mind at every skill level, from early discovery of a language's syntax and standard libraries to extreme proficiency.
You should raise the price. Under twenty bucks sends the signal that the product is more of a toy.
Time to scrap all our Ruby on Rails apps and rewrite in Perl, folks.
The main thing that probably turns people off to Guix is that GuixSD specifically rejects any non-free software. While a noble goal, it leaves most people's hardware unusable.

The main allure to Nix/Guix is to be used for the internals of an OS. For example, NixOS is the most stable and maintainable system I have ever used, even though the documentation is absolute shit.
Yes but they'll be pwned by the FCC (and friends). Don't count on it.
It's fashionable to declare Perl dead, but the truth of the matter is Perl is still everywhere.

Often in places like automation, or gluing disparate systems together.

While I know the TIOBE index has its flaws, Perl is consistently in the top 10 and has maintained that level of popularity for 20+ years.

With a history like that many critical systems are going to have a Perl dependency somewhere which means companies are going to need Perl developers.
India plans massive shift to electric cars, taking cue from China
I'm considering taking a look at GuixSD, and making a fork that accepts non-free packages.

The reason I haven't is that NixOS is just so damn comfortable that I don't want to leave.
Show HN: A Simple Chip 8 Emulator in C++
Generally, yes. Nix has great support for haskell libraries, AFAIK. Guix uses guile scheme, so that certainly attracts scheme users.