skysight-inc/HackerNews huggingface dataset:
This happened to Lance Armstrong. As one investigator put it, his 1999 urine was meant to pass the drugs tests available in 1999. But when subjected to tests developed 5 years later, it failed.

https://en.wikipedia.org/wiki/Lance_Armstrong#Tour_de_France...
How many apps are there really that run on the win32 API of Windows XP, but not on the one of Windows 7/8.1/10?

Not saying there aren't any, but nearly everything I've seen fail has been coupled to hardware drivers, where other platforms are just as bad, or other outdated APIs, e.g. ancient versions/insecure configurations of Java. This is a big problem in IT, but I don't think it's fair to blame Microsoft more than others for it. Maybe for making as much a mess of Vista as they did, but 7 was still available more than early enough for slow migration.

(And at least the NHS had an extended support contract for Windows XP, but ended that at some point, despite (as far as I know) it still being available from MS for other big customers)
> Would the security researcher be held in any way accountable for activating the ransomware?

I think that would be the equivalent of an arsonist also leaving a water activated chemical at the scene of the fire, and then blaming the firemen for using water to put out the fire when it made the situation worse.
Thats corporate PR fluff. All the freedom in the world is worth very little on near starvation wages and total disposability of workers. The goal of "gig economy" is not independent free-thinking freelancers, its large pool of easily replaceable drones working for fraction of real wages.
You can't support a family with being bound to such a labor scheme, nor you can't afford to be sick, less productive or unavailable/deficient in some productivity metric - as any change in productivity immediately reduces your income.
If all economy was based on such cheap, disposable labor there would be fierce competition for basically slave wages.
Corporate propaganda attempts like this shitty book hide its basically robbing the workers of their fair wages and benefits. In 10 years these "incredible things" uber drivers "did"(realistically a fraction of them) will not amount to nothing significant, while real jobs allow one to accumulate enough savings to be financially stable: gig economy hyper-exploitative nature means you are paid the minimum possible, that you have no financial stability, no fixed income, no insurance and zero employer responsibility(you really can't even try fight it legally on below-minimum wage).
Gig economy replacing real jobs will lead to drastic drop in lower and middle class income, it will destroy whats left of outsourcing/offshoring and whatever union jobs remaining.
How you can't understand "Sure, Uber Eats may be a raw deal" will become the norm very fast, with competition driving down wages and ethical race to the bottom. Gig economy subverts ethics and laws with clear economic benefit to corporations: they don't give a rats ass about flexibility, employer "freedom" and "independence".
Thats all PR fiction, they just want their cheap labor that could be replaced at will and paid as little as possible.
> Why not spend the next 50 years just maintaining Windows 10, just the way it is?

The best developers (the ones with the most choices) will leave because nobody wants to maintain a project.
Unlike Risk this game NEVER ends. It will be played millennia to come
Heh. I often use an analogy to different kinds of woodworking, it implies a wide variety of both skill sets and skill levels.
I recommend pi-hole if you have a Raspberry Pi laying around: https://github.com/pi-hole/pi-hole
Most Wanted Illustration Artists for Product Designing
Given that they apparently pay so terribly, I guess the answer is "anyone working for UberEats"?
I'm not from the United States, so I have to ask: is amoxicillin available without prescription?
NULL – The Ultimate Computer Language
Ask HN: Getting started with reverse engineering
What are some good resources for delving into reverse engineering? (apart from subreddit and Stack exchange forum)
The correct comparison for the Boeing 787 is not the A380 super-jumbo but the A350XWB. It's mostly a successor to the earlier A330, but with a more extensive use of composites, updated everything, and a slightly wider fuselage; it's about the same size as and designed for the same operational model as the 787, but because Airbus were wrong-footed by the market turn and over-focussed on the A380 it only flew relatively recently, giving the Boeing product time to build up a big market lead.
FaceClicker.com  Ask a question and find popular opinion .. *please try
I recently heard Charles Hess from InferFocus talk about the changes coming from China. The United States is about to be passed up in a big way due to Xi's "China Dream"

https://twitter.com/cervinventures/status/860307819030958080
India is not playing ball, big mystery there.
More like Axes & Allies?
It sounds like you already have a good understanding of fuzzing.

You might want to take a look at libfuzzer (http://llvm.org/docs/LibFuzzer.html), which you can use to test library functions. What you do is implement a function called LLVMFuzzerTestOneInput that should call whatever library function you want to test. One of the parameters is a uint8_t array that can be transformed into whatever kind of parameter types the library function expects. Then libfuzzer provides the main function that will generate the data and call the LLVMFuzzerTestOneInput function, repeating the process until there is a crash.

The one downside is that you need to recompile the code (the library) you are trying to fuzz.
What exactly do you miss for it to be exciting?
The key word is "prescribed". That means that in order to get this $4 drug to save your life, you have to go to a medical provider for a prescription. If you're poor, you likely will not have a normal doctor or dentist, and going to an ER could leave you with crippling debt. If you don't realize your problem is serious enough to kill you, the rational choice is to suffer until it clears up on its own.

I'm not advocating that people be able to purchase antibiotics without a prescription -- that would lead to more drug resistance. However, I do think that states should consider allowing pharmacists to do more, such as allowing them to prescribe medications in "simple" cases like this. Pharmacists are the most underutilized medical professionals that we have, and using them more effectively could have a big impact.
Provide cheap, stable laptops that do not have any bias to any corporation, no integration with Google services, or anything, and this would be true.

But this way? Sorry, but after the past years you can’t honestly believe this is pure altruism.
This is usually called "fault injection". Check out https://blitiri.com.ar/p/libfiu/
> "One thing that is very important to note is our sinkholing only stops this sample and there is nothing stopping them removing the domain check and trying again, so it’s incredibly importiant that any unpatched systems are patched as quickly as possible."

(A very important point at the bottom of the article)
Isn't this what the failed TPP trade deal was supposed to serve as a counter to?
He is talking about tooth alignment (braces) not decay as in cavities. Incorrect tooth alignment can have many health risks regardless of it being a class/beauty standard.

The bacteria/decay thing is a whole other mostly preventable thing.
Um. You do know that a lot of folks manage to graduate with a degree and basically have only ever programmed in one language like Java and wouldn't recognize a unit test, build system, or a version control system if it bit them, right?

Not to mention starting every task with implementing a linked-list or sorting algorithm from scratch.
windows defender exploit though or a preexisting nsa implant
JQuery Mobile 1.5.0-alpha.1 is now released
Right! That’s why Google has never retroactively changed their privacy policies and decided to datamine anyway...

Oh, wait, they did exactly that with Gmail.
Extensive previous discussion: https://news.ycombinator.com/item?id=14330707
Bravo China. Instead of overspending on military conquer the world thru trade and investment.
What should the US do than? Spend our tax dollars on foreign handouts?

If US companies want to invest in SE Asia there is nothing stopping them.
No. Well, maybe in pet stores.

I'm not sure what exactly an ER would do. I guess they would write a prescription without worrying about whether the patient would pay for the visit.

(There are requirements for certain types of facilities to provide stabilizing treatment without requiring payment; I simply don't know whether the prescription would be part of that.)
Yeah, looks like the site's not keeping up with demand. I might have to try it out in a couple of days.
duplicate of https://news.ycombinator.com/item?id=14330707
Neither does the NHS
SO many fake passports... I bet she was an East German spy. People in such a line of work usually don't have labels in clothes, because the labels might not match the rest of the story.
It's not necessarily simple though.

For instance, lots of doctors would want to check for an abscess.
I also applaud that idea.

But I do wonder if it's possible to protect/expand trade without military activity. Historically it seems military expansion is the tip of the spear for trade expansion.
That's so sad :(

I can heavily empathize. In the last 4 years I've had at least 4 life-threatening infections. 2 of them related to dental health, 2 of them unrelated and both leading to temporary paralysis. I couldn't afford insurance and you know how expensive antibiotics are (and dental treatment, of course).

Each time I had to either resort to finding and buying antibiotics on the street or dying within a day or two. I feel so blessed to even be alive today that it brings me to tears.

And then I think about how CorpGov tried everything they could to prevent people like me from having access to healthcare, how I came within hours of death 4 different times and was not provided aid once, and how often this must happen to people who are not as committed and resourceful as I was.

I vividly remember being paralyzed on my bed, only being able to really move my left arm, literally watching an infection travel through my bloodstream as my veins turned red and inflamed, my lungs beginning to feel hard, crying to myself, and falling asleep not knowing if the antibiotics I had found only hours before would kick in and if I would ever wake up again.

That is the healthcare system in America :)

Yes, it may not be as bad as most of Africa's healthcare system, but our government repeatedly makes the claim that we are the best and greatest nation on earth, with unparalleled opportunity for its citizens. If we are going to make that claim, the claim that we are a 1st world country and not a 3rd world country, we have to be able to back it up.
I'm getting this as well.

I'm on Chrome version 59.0.3071.47 (Official Build) beta (64-bit)
Running it through a FFT, the noise looks similar to blue noise, but with a lowpass at 1000 Hz
>It's not Microsoft's fault that people depend on Windows XP.

When XP was released, Microsoft was unarguably a monopoly. Monopolistic businesses have responsibilities that other, non-monopolistic businesses don't. The law is vague, but the FTC could reasonably force Microsoft to continue to patch security problems in windows XP forever. After all, the defects to which the support period refers existed within that support period, regardless of when they were proven to exist.
Could it be organisations sharing data by SMB infecting each other?
OSS-Fuzz – continuous fuzzing of open source software
My exact point was that this was closer to diffusing a bomb you happen across than a good Samaritan law because of the collateral damage potential, which we normally assess the tradeoffs of through collective means such as government, and because it's a non-emergency situation.

Good Samaritan laws only apply to emergency care rendered to people in need of it (and only if they don't refuse). You wouldn't even be covered if you grabbed someone's broken arm and tried to set it without permission. (That would actually be assault, for which you'd be liable.) You definitely wouldn't be covered if you unilaterally released a protein in to the atmosphere because you suspected it would stop the flu. You'd probably get charged with using a WMD if it backfired and people got sick.

I think people who are arguing that it's a good Samaritan situation are simply being selfish, because they don't want to have to consider how their actions might impact others or act with restraint and professionalism.

There are plenty of ways to proceed with getting help from security consultants even if there is liability -- eg, confining their actions to a single network and being indemnified by the owner.

Globally poking a widespread infection without a care in what the infected prefer is emphatically not what Good Samaritan laws are meant to protect and should carry global liability.

Ed: To address the question under me, since I'm "posting too fast" --

My problem is that many of these FBI programs exist in a legal limbo -- the researchers are working with the government, but I'm not sure they have the kinds of immunization agreements that government contractors usually get (eg, that you have to sue the government not the contractor since the actions are taken under government authority because you're working for the government) nor that they have to observe the restrictions placed on government actions. Too much of cyber security exists in these (intentionally) gray areas.

I dislike this Wild West state of affairs and want the matter of liability and restrictions/accountability to be directly addressed, even if it's just making de jure the de facto situation. I think cybersecurity, as currently practiced, is probably ripe for some nasty lawsuits if a researcher screws up a situation like this.

Does anyone believe that if the registering the DNS address had bricked the NHS systems, the NCSC would've taken the fall?
Show HN: Chrome headless support without selenium for Mink and Behat
I wrote a mink driver which communicates directly with chrome over the devtools protocol, allowing you to control chrome without selenium.

With chrome 59+ you can also eliminate the need for xvfb by running it headless.

Our behat suite of 1800 scenarios and 19000 steps takes just over 60 minutes to run in Chrome 58 with selenium and xfvb.
With chrome 60 headless it takes less than 18 minutes.

https://gitlab.com/DMore/chrome-mink-driver

Any feedback and contributions would be greatly appreciated.
Yep, down at the moment. In the meantime, we can enjoy this classic algorithm dance. :)

https://www.youtube.com/watch?v=lyZQPjUT5B4
I found this talk with Niall Ferguson and Samantha Power pretty fascinating about the US - China power balance changing. https://m.youtube.com/watch?v=8yghOc-lMIM

Just one mindblowing fact from the talk - China has poured more concrete in the last two years than the US in the last hundred.
I followed the same flow for learning Spanish as you, and your site looks excellent. I too have a bunch of infinitives memorized via Anki, but would like to practice all forms of conjugation, and manually creating more flashcards is simply too labor-intensive.

One thing I'd like to see is the flashcard interface translated to Spanish. I learned Spanish in Spanish, for the most part, and I get confused when I see "imperfect" and I have to remember that it's really what I learned as "pasado/preterito imperfecto." Built-in pronunciation via TTS would also rock! One could probably write a userscript to do this, but it's always nicer to be built in.
As the land is not something that you created your 'ownership' of it is simply a grant from the commons. Unless I am misinformed this is explicitly the case in the US as far as many tracts of land in the mid-west are concerned, the federal government granted parcels of land to those who would settle there.

The point is that because it is a grant from the commons there is no natural law that says that that grant cannot be handled in a different way than it is now.

If society as a whole decides that this grant is no longer to be regarded as absolute then there is no barrier to taxing the occupier of the land.
I like to think that they know anything they implement will eventually get blocked, so they have a big collection of unexploited evasion tricks and just introduce them one by one.
I'm wondering why they didn't choose Hannover as it is somewhat in the middle of Germany, has an international airport, is accustomed to heavy spikes in tourism and has the world largest fairground due to the Expo in 2000. Hannover also is a major crossing point of railway lines and highways (Autobahn).
> It is categorically NOT Microsoft's fault that software vendors are bought or go out of business. It's on the software customer to ensure that they don't get stuck with vendor lock-in.

It is Microsoft's fault that the programs only run on Windows XP. If they had used standard open APIs it would have been much easier to port the applications to other platforms to begin with, and more of the original developers would have done so before going out of business.

If you want to argue that customers should not buy Windows-specific software you'll get no argument from me, but that is certainly not Microsoft's position.

> Reverse the situation: A bunch of critical systems which run Linux 2.4 are being compromised by cyber criminals via a kernel exploit. You're going to argue that it's Linus' fault for providing such a great kernel and not supporting it forever?

Linus absolved himself by providing source code. If you really want to keep using Linux 2.4 and patch it yourself, you can, and some companies actually do.

> You cannot take a MacOS binary and run it on Linux.

https://www.darlinghq.org/

And that project is in a weak state not for difficulty but for lack of demand, because so many programs that run on one OS already run natively on both since it's so much easier to port between them than between Windows and anything else.

> You could argue that with Linux, the only thing preventing it from running Win32 or MachO binaries is that those operating systems are closed source, but this is the world we live in. If you want a "universal" binary, write it in something like Java.

https://en.wikipedia.org/wiki/Microsoft_Java_Virtual_Machine

> Yes, and I feel that I addressed this when I said "because banks are too spendthrift to rewrite their software"

> It's a business decision.

That's the point. How is it not also a business decision with Windows XP, which Microsoft has forced everyone to make in a way that many would otherwise not?
Online, you can purchase fish or cow antibiotics with purportedly the same stuff, but these are not medical grade and I have heard stories (not sure if it is big pharma propaganda or not) of dangerous impurities.

It is probably best for species survival that we keep antibiotics behind a wall. But only if that wall comes down when people need it, not only when they pay the toll.
NEW INVESTIGATION: Europe’s Dire Dependency on Microsoft
I've advised a few companies to register (if feasible) a company in the EU or use Atlas to try and complicate being legally compelled in issues like these. These ideas are dangerous and backward.

I can't see overseas companies trusting UK start ups with confidential trade and commercial secrets. There is already enough cooperate paranoia after the NSA was accused of spying on European corps and there seems to be evidence to suggest such a thing actually happened.

Atleast I'm not the only person who thinks these policies are making the UK a unpopular place to open shop as long as there are countries with not so oppressive laws.
We have a job every morning that clones the current production db instance and then deploys it onto a staging instance. All PRs with schema changes will be applied to this instance when merged. If something goes wrong, we just redeploy the saved image.
The "China vs America" narrative is unnecessary.

If China wants to spend a trillion dollars on infrastructure to develop their region that's a great thing for America too.

Counterintuitively, it could even be better for the US than China. Eventually the demand for low-margin, subsidized, Chinese steel will flatten, while the demand for high-margin American technology and cultural products will grow.
> This means the designers of the airplane, purposefully removed control from pilots and gave them no recourse or alternatives.

While I prefer Boeing's approach to Airbus's, the above statement isn't true. Airbus aircraft do have an Alternate Control Law (less flight envelope protection) and Direct Control Law (no flight envelope protection). These are in addition to the Normal Law (full protection), which is similar to what you describe, as well as a mechanical backup.

The aircraft is designed to automatically revert to more-manual control when sensors return unexpected values--and that's what happened to AF447. In that case, the computer recognized strange AoA readings, so it reverted from Normal Law to Alternate Law. The pilots, being insufficiently trained in the use of Alternate Law, stalled the plane into the ocean because they expected the plane to override them in the case of a stall.

Pilots also have to option to manually revert to Alternate, Direct, or mechanical control by pulling the appropriate circuit breakers in the cockpit.
Relevant discussion:

Europe is living under Microsoft’s digital killswitch (thenextweb.com)

https://news.ycombinator.com/item?id=14314713
> You are conflating a university study with all women

Are they? Yes, that figure comes up in campus studies, but there's not-too-dissimilar numbers for the general population. For instance, RAINN cites a 1998 NIJ/CDC survey as saying that about 1 in 6 American women had “been the victim of an attempted or completed rape” in their lifetimes. https://www.rainn.org/statistics/victims-sexual-violence

> the 1 in 5 number comes from a study

There's more than one campus sexual assault study which gives a figure in that range. Which one are you referring to?
Relevant Terry Pratchett quote regarding revolutions:

> People on the side of The People always ended up disappointed, in any case. They found that The People tended not to be grateful or appreciative or forward-thinking or obedient. The People tended to be small-minded and conservative and not very clever and were even distrustful of cleverness.

> And so the children of the revolution were faced with the age-old problem: it wasn't that you had the wrong kind of government, which was obvious, but that you had the wrong kind of people.

-- Night Watch
> It's not Microsoft's fault that people depend on Windows XP.

It absolutely is. Not releasing the Windows XP successor in 2004 as it was promised to customers and shareholders is their fault. Microsoft only released a successor 6 years after XP release, 3 years later than promised. And it doesn't help Windows Vista was a disaster on its release.
By "cost-free" I mean that they use precise traces so that memory is always freed at the exact moment it is no longer used. So they underestimate (greatly IMHO) the memory used by malloc/free versus the garbage collector. It would be a superhuman programmer who always called free() on the line exactly following the last use of every piece of allocated memory.

The second problem I have with the paper is that it underestimates the kinds of structures which GC makes possible -- eg sets of trees sharing nodes. And the corollary to that is that to implement those structures with malloc/free, programmers tend to reach for ref-counting, which adds to memory usage and is generally a terrible form of garbage collection for many other reasons.

Nevertheless it's an interesting paper which does add to the debate (I studied it about 10 years ago). It is worth reading, even though I have concerns about the methodology and hence the results.