skysight-inc/HackerNews huggingface dataset:
It's almost certainly simply a widely-targeted email that was "intended" to hit individuals via mass spam that happened to hit the wrong individual (who is probably having a Very Bad Day now) and took down the NHS. And my "almost certainly" is really just my inner engineer hedging; the fact that they're asking hundreds of euros worth of ransom for so much is basically proof of what I said.

Unfortunately, the state of security right now is such that these wide-band transmissions can still pick up a lot of hits.
Accountability after an event does little to prevent future events.

There's a lot of focus on human factors in the NHS, and that tends to avoid things like blame.
Ask HN: What's the worst possible outcome for Uber in the Waymo vs. Uber case?
Can someone break down what's the worst possible consequence for Uber if the judge found them guilty criminally?
Works for me on Chrome 58 and Firefox 53 on Windows 7. When it displays correctly, the way the animations tie to the text as you scroll is pretty nice.
It looks like it was MS17-10/EternalBlue, or at least that's what twitter is saying.

https://twitter.com/AdamTheAnalyst/status/863040924783345665
The timestamps used in OTP tokens are usually quite coarse (30 - 60 second resolution is common), also it's common to use window of few accepted timestamps around the valid one. (IIRC SecurID has this window in default configuration surprisingly large, on the order of tens of minutes)

RTC with common 32768Hz xtal is probably accuratte enough for this application given reasonably stable temperature (ie. key stored in room temperature or near human body) with few minute acceptance window.

The problem with battery life for such keyfob is that it also has relatively high powered RF transmitter and combining low permanent current consumption with high current bursts is not something that cheap primary lithium cells are optimized for (you have to pick one or the other)

Edit: also given the fact that there is only one receiver and that it usually also has second bidirectional channel (immobilizer/keyless start) you can compensate for some limited clock drift in software or even periodically resynchronize the clock.

Manual for Fabia III even describes procedure to "resynchronize" the keyless fob by using it as if it were ignition key, which probably does exactly this. But who knows, almost all post 2000 VWs have similar procedure for central locking remote which probably simply overwrites the counter in car with whatever next value from the keyfob as there cannot be any bidirectional communication (the old procedure involves lock in driver's door, no NFC antennas there and the imobilizer NFC chip in keyfob is completely separate from the RF part)
Excellent question.. yes, we actually remove the account and pkill any existing sessions owned by the user. The OS might reuse UID's if it wishes. This will cleanly work over NFS as well. (On the server side as well, as long as the NFS server respects POSIX file locking semantics.) The agent (shim) is only a few hundred lines of readable Python that just scripts standard Linux commands, so it plays nicely with other tools -- even other logging or user management tools, PAM modules, etc. Also, the shim won't touch any user accounts that it didn't create (tagged in the comment field), so existing system or backup accounts are safe and won't ever be touched.

Here's the source code:
https://github.com/userify/shim/blob/master/shim.py#L161
Spanish biggest telecom and others had been hit too: http://www.elmundo.es/tecnologia/2017/05/12/59158a8ce5fdea19...

WannaCry ramsoware is the culprit.
That observation about KASLR is pretty orthodox in the systems security world: KASLR might have some utility against remote attackers, but is hopeless against local attackers.
Ransomware is a bug bounty program you didn't know you were part of.
An Estimated 25M Steam Users Now Have VR Ready GPUs
That's a blanket-statement and ends up being incorrect/inaccurate. The top Vega card is HBM2, not even in the same ballpark as the 1080.

Also, recent Linux patches hint that there will be dual-chip water-cooled Vega boards too which is likely not even 1080 Ti regime:
https://www.techpowerup.com/233208/linux-drivers-point-to-up...
We are living on a planet which was produced by a nuclear explosion of cataclysmic proportions, a few billion years ago.

Where else do elements heavier then hydrogen (Or, if you want to split hairs, iron) come from?

https://en.wikipedia.org/wiki/Supernova_nucleosynthesis
stock management, and expedition. I couldn't find the special steel distribution in less than 50 metric tons rolls from China. Need a few thickness and a few "qualities" in store.
Ransomware infections reported worldwide
I definitely think this is cool tech, and it's going to be amazing to see this whole setup work once completed.

I do have to wonder, this seems like it a largely over-engineered solution to the problem of moving people -- wouldn't it be more practical to put a train down there? This still requires individuals own cars, so it does nothing to reduce costs, promote equality and seems to just move the traffic problem from the downtown core to the outlets of the tunnel. Am I missing something?

It feels like LA really needs public transit.
/tmp generally has more open permissions than the rest of the file system, and if you're using a known file name, you're open to that file being abused by an attacker.

I know of no good reason to not use mktemp.
Classic. GCHQ and NSA are joined at the hip. If telefonica are right and it's spreading through the NSA hacks revealed by the Shadow Brokers then GCHQ/5-eyes has some responsibility for what's been happening.
Identifying “At-Risk” Customers with Python and Pandas
This wouldn't be possible unless we generated or held the private keys. You cannot tell if the key is password protected from the public key alone.
allow me to vouch for Bangladesh. there are some good talents and opportunities for grassroots oriented development & innovation!

BKash is a good example. its a mobile payments company with equity interest from Gates Foundation & IFC/WorldBank.
https://www.bkash.com/about/company-profile

then there is NewsCred, the leading enterprise content marketing platform. Based in NYC, it is founded by Bangladeshis, & have a dev centre in Dhaka.
http://www.newscred.com

GrameenPhone was one of the pioneers in Mobile for Dev
+ Economic empowerment. Iqbal Quadir, founder of GP also founded The Legatum Center for Development and Entrepreneurship at MIT. (0)
(1) (2)

anyone intetested for more info + discussions re: the field of ICT4D i.e. Tech for Development, I find the TIER group at Berkeley & their mail-list quite useful.(3) (4)

thete are other groups & countries that are also interesting. hope to get back with some more data once I locate them.

(0) https://www.grameenphone.com

(1) http://legatum.mit.edu

(2) http://knowledge.wharton.upenn.edu/article/how-iqbal-quadir-...

(3) http://tier.cs.berkeley.edu/drupal/about

(4) https://www.millennium.berkeley.edu/mailman/listinfo/tier
set -euo pipefail
should NEVER be used in a bash script. If you feel tempted to do so, then you are trying to make the shell scripting language be something that it is not.

This is the time for a full scale programming language such as Python or perhaps Groovy on the JVM or Go language. When you need to write robust code, use the tools that were created for writing robust code.

Bash just has too many quirks.

Note that this is related to the most common way that people build a Big Ball of Mud. You have a simple app and you need a couple of features so you add them on. Rinse and repeat. Before too long you have an app that does too much and was never designed/architected to do that much stuff. You are probably ignoring a number of techniques for integrating functionality in large apps such as message queueing, microservices, separate libraries or packages, multiple languages.

Shell scripts suffer the same trajectory towards too much complexity. When you see it happening, and before the task gets too complex, replace the script with an app and apply all the normal software engineering techniques to make it robust.
The transaction occurred today.
Make your ads stand out
Technically speaking productivity is amount of output per unit of time worked, working less time typically reduces both the numerator and the denominator so it doesn't necessarily affect productivity.
When is AutoPi going to add the option to go keyless through facial, voice, optical, or fingerprint recognition?

I guess Ford already patented something like this but it would be nice to have it open source too.

http://www.biometricupdate.com/201502/ford-granted-patent-fo...
Getting Gnarly: It’s time to stop asking for permission
Or more people are just moving on from Rails. I used to religiously follow every release. That ended shortly have the first few 3.x releases
It has negative externalities? Don't make it illegal. Tax it to hell. $50k minimum plus 700% of the ransom paid ought to cover it. Dodging those taxes and trying to pay secretly, now that's illegal.

The taxes paid by the desperate and careless can be used for the expensive international cases against the scammers.
There was a snippet in the video of a purpose built passenger transport vehicle that could fill in the role of public transit: https://youtu.be/u5V_VzRrSBI?t=47
Every time I see this thing I can only think about earthquakes. I am absolutely certain they've planned and thought about this and engineered the heck out of it, that being said... I can not imagine that being in one of these things during a big earthquake is going to be very nice.
What makes you so sure your model of reality is more predictive than hers?
It's been interesting to watch currency libertarians rediscover from first principles the reason so many of the financial systems of the world work the way they do.

I find myself sometimes wishing they'd discover it by doing their research instead of orechestrating a sequence of events that lead to a catastrophic value crash, but (a) as long as it's not my money being burned, I don't generally deeply criticize how people spend their time and resources and (b) I bet it's a lot more fun to be in the middle of a scandal than to read dry economics history. ;)
Does it not make sense to have a "sub-layer" a local network of files rather than files being accessible by outside. I guess once "something" is in, like that Iran Stuxnet PLC attack, then it's inside and can execute from within.

Unless it's like a local attack whether by a worker or something like found a thumb drive outside, plugged it into my work computer.

not my field
How the U.S. New Economy Business Model has devalued science and engineering PhDs
"want to buy" is a pretty nebulous and person thing. It doesn't seem meaningful to talk about without fully qualifying much less say "it's not possible". We can move the goalposts all we want but those sorts of cars are imminent for at least early adopters. If you want to say you won't feel comfortable for another 10 years, great, but that doesn't mean the event hasn't happened. It's a tremendous accomplishment. I've seen the fully autonomous cars making lefts on El Camino that I just would not do, ever, and they do it perfectly.
The only data I could find right now: devices used while searching for flights. Google translate with minor fixes:

"The savings continues to matter more than comfort, as indicated in the survey published in 2015. Economy class concentrates 96% of searches for flights performed on all platforms, while the executive account for 3%. (...) Regarding business class flights, the iPhone is the most used device, with 5.1%, followed by 2.7% via Desktop and 1.4% via Android."
I think "probably off-topic" is different from strictly "off-topic". I do remember that from the guidelines, though also from the guidelines:

> Anything that good hackers would find interesting. That includes more than hacking and startups. If you had to reduce it to a sentence, the answer might be: anything that gratifies one's intellectual curiosity.

I think seeing historically uncommon/rare events unfold also falls under gratifying one's intellectual curiosity (though I admit this might be a stretch in this particular story). Additionally, there are multiple stories that pop up (once or twice per day, from my anecdotal experience) that are also stories that'd be covered on TV news.
I’m a full-time developer since 2000. Over those 17 years, I only briefly did web development, Java or relational databases. Mostly I’ve been doing system programming, game development, embedded development, robotics. When I did networking, it was usually lower level than REST. I have minimal experience with proxies and linux, I’m mostly a Windows developer. Lately I’m working on Windows desktop software, the area is CAD/CAM.

As you see, almost nothing common with your background.

For the kind of software I work on, if the code is 10x more complex than necessary, the software might fail the performance targets. Complex code is also prohibitively harder to maintain and debug. And esp.in embedded, quality requirements are just higher: web requests come and go, but embedded software needs to reliably work for days without restarts.

I think the reason why I’m generally OK with other people’s OOP-style code I see in the projects I work on, is that code is just better then what’s in an average web.app. Especially if the web app ain’t Google or Facebook, AFAIK for these guys, software quality translates to substantial saving on electric bills.
"There is no evidence patient data has been compromised, NHS Digital has said."

Um, doesn't "encrypted beyond your reach" fall somewhere under "compromised?"
And hopefully they have well-designed and regularly audited firewalling and access control paradigms. There are good reliability reasons behind not just sucking down every patch, but it needs to be coupled with smart security work.

And in any case that doesn't seem to be the issue here, per reporting. It's not NHS's reliability-critical systems that are owned, it's all their PCs.
That definitely is not true. If a company has to pay $1m for ransomware, they would likely need to disclose it publicly, and at least privately to auditors. Making it illegal as in jail time would prevent any corporate employee from agreeing to do it so it would effectively stop it.
General Tips for Web Scraping with Python
Look, I sincerely appreciate that you took the time to reply, but this advice is a prime example of how some people just don't understand mental health.

This sounds an awful lot like the "happiness is a choice" speech. If self improvement and changing deep seated thought patterns were as easy as just choosing and deciding to act and think a certain way, the world would be a much better place.

The truth is it is a lot more complicated than that - it takes effort, practice, and guidance over a long period of time to actually enact these choices and decisions.

I do choose to fix this, I do decide to be easier on myself, this is why I've been seeing a therapist weekly for almost a year.
That's a fair point. I've only ever worked for responsible companies.

If the checklists are actual implementations at the other companies, then yes, maybe there is some value there. But then the law could still be improved to allow a little more leeway for companies that are responsible. I don't know how that would work though.
Ransomware is doing a good job of partitioning sensitive data from those that should not be (mis)managing it.
Is there any documentation regarding how this allocates / deallocates GPU Memory. While developing Deep Video Analytics [1] one of the biggest issue I have faced is TensorFlow refusing to deallocate GPU memory [2] (freeing up for other processes to use) unless the process is killed/exits. This in combination with allow-growth allocation strategy used by TF makes it unpredictable to run mixed loads. E.g. I would prefer to run a Detector, Indexer along with some computation in a GPU data frame etc. at same time on a single GPU.

[1] https://github.com/AKSHAYUBHAT/DeepVideoAnalytics/

[2] https://github.com/tensorflow/tensorflow/issues/1578
I was thinking largely the same thing. Moving cars seems like the least interesting application of the boring tech if it really works.
Most amphibians (frogs, toads, newts, salamanders, etc.) are getting wiped out by a skin infection that has spread around the world. The toads in your area might be resistant. The less-aquatic behavior might help.
Exactly. I'd hope something good would come out of this, i.e. no exploit hoarding by the NSA/CESG, but instead they'll double down and use it as a reason to remove even more of our rights online.
Google’s neural network-generated custom face stickers
I somewhat agree with your cynical interpretation, but I might tweak it a little bit to be more forgiving: It's a matter of expectations. SWE work, for the most part over the last 20-30 years, (until very recently, at least to my eyes) has been perceived as "creative", almost "artistic" work, whereas the day to day is much much more in line with some weird combination of banking (often high stress, shifting goals, high impact of externalities, one small cog in a giant machine) and blue collar production work. This not even counting the drastic shifts I've seen in the last 5-10 years to commoditize SWE work. (not a value judgement, just an observation)

Most of my friends and family who went into finance did so knowing what they were getting into, some even _wanting_ that. It definitely cultivates a different culture and set of expectations. (There are definitely some CSers I knew who love the grind, but I don't think I'm making a stretch to assert they were the minority, and often were within a specific slice of CS that requires that more similar culture)
Monorail. Monorail. Monorail.
Or to put it another way: if you are contributing to a Free Software project and the copyright is held by some other entity to who you have duly assigned rights, then you may find that they decided to sell the right to use some of your contributions. So, be careful who you turn your copyright assignment over to.
you're implying that coercing major companies is easier than few hours researching vulnerabilities?
This has been around for years. I was thankful for them when I was building my now failed company. I didn't end up licensing anything, but had I got to revenue, I certainly would have. Thank you to your team.
The study concerns a 220-acre area.

To extrapolate from that to the world is a mistake. From what I believe is the original paper (copy at http://www.bouldercountybeekeepers.org/wp-content/uploads/20... ):

"The results show that, in the same two areas, sampled in the years 1989 and 2013, there was a dramatic fall in
the number of flying insects.

Using the same traps, in the same areas, significant reductions of insect populations, of more than 75%, were
found.

Our data confirms, that in the areas studied, less than 25% of the original number of flying insects collected in
1989, were still present in 2013.

Orboicher Bruch Area

The Orboicher Bruch, to the Northwest of Krefeld, is a designated Nature Reserve of around 100 hectares (220
acres). Due to the reserve’s relatively remote location and its rugged landscape, intensive farming came to the
area only recently."
I'd hope so, too, but in what i've seen it generally isn't the case.
What do you mean by "goals"?

I've met too many people hopelessly throwing themselves against a wall trying to "achieve their dreams"... they see themselves as a Hollywood-esque main character, either aiming unrealistically high or shooting for mundane gimmes. Without a broader vision, those that pick reasonably scoped goals may still end up depressed by their small wins that add up to nothing. Modern mss media and image culture certainly hasn't helped manage realistic expectations or self-perception.

I think it's more important to have a strong life stance - a broader collective vision that adds context to the individual - and a stoic understanding of limitations. That metaheuristic provides deeper meaning while facilitating rational evaluation of our achievements/goals.

Drawing an analogy to software projects, the life stance defines a person's mission and tenets while goals act as milestones or stories. Executing without the broader vision simply doesn't work for humans... our limited and unknown budget of time is constantly burning away.
I've been through this as well, and it sucks. Sadly, even organizations doing societally important work can be incapable of policing their internal politics and professionalism in even a basic way.

I'm still working on accepting this.
random unconnected thought

I'm working on a "may eventually make me money" thing and I do pretty much 100% of the work as far as technical aspect goes (coding) and I'm set to have 30% of this "thing"... 13 hours of coding today, I feel like I achieved nothing. And it's like there is no return, I didn't get paid "someday you'll make money maybe" and I'm not sure I like the idea itself. I don't know I keep asking myself why am I doing this. It may happen.

edit: the thing I did today was un-jQuery the entire "codebase", oh my god so much broke. Also to make the scripts load async, bumped the dom loading from 6 sec to 1.5-2. Developing a site to deploy in a place where network speed on average is around 500Kbps

Also it's funny when people don't know coding, I'm not an expert, I'm pretty sub-par but people are like "Why don't you just do this..." "Do that..." if Facebook can do it why can't you? hahaha, I don't know, pathetic

edit: nothing really against jQuery just that a 1KB file takes almost 1 second to download, requiring jQuery (even min) big file. It's so easy to work with though especially multiple-selectors like selecting by class. the cross browser support... man. something I depended on and take for granted... sorry rambling pointless comment on my part.
Stealthy gaming company Wonder is ready to tease its new mystery hardware
> It's correct to rely on x86 memory model in x86 software.

If you have complete control over the whole stack, sure. But we are taking windows user space applications. You continue to ignore my point originally that the edge cases you are describing may cause problems, but are just that, edge cases which can be solved with slow path code (put a DSB following every store if you like), and are likely depending on behaviors higher in the stack which aren't guaranteed and are therefor "broken". If your code is in assembly, and never makes library calls, etc then you might consider it "correctly written" otherwise your probably fooling yourself for the couple percent you gain over simply calling EnterCriticalSection().
I may not use it anymore, but I will never stop loving jQuery.
But here http://www.shellcheck.net/ gives

Line 4:
export x=$(false)
^-- SC2155: Declare and assign separately to avoid masking return values.
I'm sure this would work just as well as outlawing ransomware itself has worked.
UK virtual reality firm Improbable raises $500m
Part of the expected cost reduction is in reduced cross sectional area, so a train won't fit into the 12 ft tunnels they're planning to make.
10 bucks for every few hundred thousand or even every few hundred is totally feasible. This information is very valuable.
And continue to accumulate. The half life on that hot mess is very long. If it settles into a waterway, all water may be accumulating radiation.
Ok, so the center of LA to Culver City is 16 km via Google Maps. A snail goes at 1 cm/s. So 18 days of boring assuming everything works out. That's actually super fast.
Metro's subway tunnels survived the Northridge earthquake without suffering even a scratch.
Did you ever see an article about someone paying a ransom and not getting their data back?
I'll be cynical: some call it "having an axe to grind". Why do research if you can just post something that seems to align with your cause and makes you happy?

In all that we do at Quartz, we embrace openness: open source code, an open newsroom, and open access to the data behind our journalism.