skysight-inc/HackerNews huggingface dataset:
How much an Amazon SDE 2 make including base, bonus and stocks
Another interpretation is: Someone can be "a stand-up guy" and still fuck up this badly.

More generally, at some point you might find yourself thinking: that would be an obviously unethical and stupid thing to do, and this person is a stand-up guy, so he won't do it. What this case suggests is that that's not enough.

(AdamSC1, I'm curious. Suppose it was a couple months ago, or before you heard that this was happening. If you'd been asked then, whether Mohland would ever do the thing that he has since done, what do you think you would have said?)
You misunderstood. The article claimed

300$ dollers per machine ≈ 300 Bitcoins ≈ 510,000€
The parent article does not use the word "Microsoft".
IMO, it should be illegal to pay ransomware. Bad actors only deploy ransomware because enough people pay the ransom for it to be worthwhile. Raise the minimum risk-adjusted price (chance of getting caught paying * fine) by enough, and people will make the rational decision to not pay it.

Combine with an advertising campaign to make it common knowledge that paying ransomware gets you fined, and that you should have good backup-and-restore ability instead, and the problem should become much less intense.

(side note: paying ransomware has negative externalities, since it funds ransomware operations that hurt others. If criminalizing it offends your libertarian aesthetic, think of it as a Pigouvian tax instead.)
Then again (https://news.ycombinator.com/item?id=14312239) if you didn't patch your system immediately someone could email you an attachment that you never even looked at and have it compromise your system.

That was the nastyness of the earlier announced zero day. All the attacker needed was to have the file on your system when Microsoft's malware scanner ran.
We already know multiple addresses have been used.

Apart from that, I agree: I suspect it has a hardcoded list of addresses and it picks one at random.
The big gains now are taking these pre-processing tools in speech, vision, NLP etc and using that as input to a NN for some problem domain. Every one of these is a startup.
I love Rails :)
Hi antoaravinth, thanks for the question!

Totally! You could fork the library and modify the charts if that's what you need.
The source code is based on the reusable API (https://www.eventbrite.com/engineering/leveling-up-d3-the-re...), and it should be easy for D3 developers to understand the code and extend it.
Our development environment also provides with the demo pages that can be used as a sandboxed context, and you can make use of our current tests to keep the code well tested!

Regarding the drill down charts, in theory, is possible!
300 Bitcoin equals
524982.00 US Dollar

Edit: Oh, it's indeed USD$300 in Bitcoin that is asked. Cheap!
Awkward Emails and Unusual IPOs
Complaining about warfare that is asymmetrical solely due to the incompetence of one side does not elict any sympathy from me.

Consumers do try to aggregate data for the equivalent of "massive data collection and mining". Most just don't care to pay for something that is not wholly controlled by a storefront. Generally, producers are more likely to understand the ROI.
You're right! It's rarely about who creates the backdoor/update channel/law but about who can leverage and abuse it (hacker, next president, etc).

We are slowly starting to realize how big these issues are. I hope.
Seems strange to not mention the ransomers as having culpability.

I'm 100% in favor of better systems/processes/technology to prevent exploits, but I'm also 100% in favor of blaming the perpetrators of the ransom also.

In the real world we don't accept the argument that the victim is primarily at fault.

* leaving your car unlocked doesn't mean that is OK for someone to steal it and demand a ransom for its return

* leaving your house/apartment unlocked doesn't mean that it is OK for someone to swap out the locks and demand ransom for the new keys

And it really isn't about being locked/unlocked. Doors and locks can generally be easily broken or bypassed, doesn't mean that everyone should have to purchase industrial strength doors and locking systems (and windows, and...).
Former CSO of AT&T Discusses Significant Advances in Continuous App Security
Also see recent Economist leader and article:

http://www.economist.com/news/leaders/21721371-death-inevita...

http://www.economist.com/news/international/21721375-how-med...
This struck pretty close to home. I quit my job because of burnout, and I'm currently on month five of what I expected to be a two or three month break before finding another job. I still don't feel ready to go back into the real world.

Like the author, work overload was not the problem - I almost never worked more than 40 hours per week. Finding support from family/friends has been difficult; I've been desperately trying to avoid the stigma attached to the word ｄｅｐｒｅｓｓｉｏｎ, and as a result I don't think many people realise what I've been going through, and assume I've just decided to bum around for a bit.
It would certainly be harder, since they don't have the political option of compelling Microsoft to add a backdoor.
I have a bad habit of staying up too late at night. What has been helping me is instead of from thinking about the last time I did so and was tired the next day I try to imagine tomorrow's me, and think of how much better I will feel if I make sure to get a good night's rest. So this is somewhat of the reverse of what you describe. It's explicitly trying to develop empathy for my future self so that I behave in ways that are beneficial today.
> answering the phone, getting put through to a human being, and wasting their time

Not sure if that is the best strategy. I started doing that a while back only to find I started getting even more calls from a lot of different companies. In my case, they were all credit, loan, and debt related offers. I even had one person tell me in a snarky tone that they will "keep me in the system".

Now I just hang up if its a robocall (opt out if possible) or if its a live person, bluntly tell them I am not interested and why. I now get less calls overall.
"If what the paintiff says is not true, then it is not the case that certainly a contract probably exists".

Apparently parent is an intuitionist ;)
Alexafsm: finite-state machine Python library for building complex Alexa skills
And I thought the tories were tech illiterates... they sure have improved!
techempower web framework benchmark:

https://www.techempower.com/benchmarks/#section=data-r14&hw=...
The biggest problems now, aren't technical, they're more political. For the biggest problems (housing, healthcare and transportation), the biggest barriers to entry are legal/political in nature. I think we'll need venture funds that reflect that, otherwise consumer product innovation will become increasingly meaningless.
Hey would love to chat with you about replicating this model in other developing countries. What's the best way to reach out?
These efforts are mostly going to aid further market segmentation and boosting profits; e.g. even for development you'll now need a Tesla/Quadro that costs a ton of money, the days of GTX cards that have the same GK2xx or GM2xx chip as Teslas is over.

While the "tensor" units may land in consumer stuff (though I don't think it'll happen this year) I expect there to be little "trickle-down" planned or wanted at this stage.
If only intelligence agencies spent as much money and effort on securing its critical systems as they invest in sabotaging other countries' infrastructure. Maybe putting defense first would be helpful, especially considering how easy the proliferation of offensive tools is.
Assume you're getting downvoted instead of commented on because, as above poster pointed out, the weak point is the counter in any one-way scheme. Specifically when the car doesn't see a fob press but the fob is pressed (e.g. out of range / blocked).

Thus, you have a broken keyfob if you ever press it outside the car's range (or require a "re-pairing" handshake to resynchronize the counters). Infeasible due to terrible usability.

Or you widen the window of accepted counters to avoid the above issus. Which is what this attack is preying on.
There's GNU Radio which can work with the same RTL-SDR dongles as at least as I know it.
The statement is very amusing though since vast sections of our country use pesticides for their intended purpose. It is not hard to find pesticide traces in every part of our country. Especially near cities where almost every landscape and pond is sprayed.

On the coast it is very common to see "foggers" driving around spraying pesticides in the air hoping to flood the area with enough chemicals to kill all the mosquitoes.
>The industry is moving to high-band and small cells for 5G, so Sprint will be well-positioned there. But building that is going to be insanely capital-intensive, and the question is whether Sprint has the money.

They don't, but Softbank could pony it up. T-Mobile is also well densified with Verizon also being comparable in this area.

AT&T is the one that sucks with densification right now and would most benefit the most by a Sprint acquisition. Nobody wants the trash fire though, so it comes down to what Sprint/Softbank might be able to afford. US Cellular would be an awesome target as well but anyone in the industry knows that that would have to be pried from the Carlson family's dead fingers.
You can get it back, for 1 Bitcoin.
Blasphemy laws are an offense against free speech, and they're spreading
>lawful and ethical are two totally different things.

Mind explaining where you think I implied otherwise? Or why you keep repeating this despite the fact that I haven't?

>Ethical has weight and you can lose your job, and even go to jail for [what your boss thinks is] unethical.

For example, doctors who get fired for performing abortions, something that most of hn doesn't find unethical.

>https://www.scu.edu/ethics/ethics-resources/ethical-decision...

That is itself, merely what Manuel Velasquez, Claire Andre, Thomas Shanks, S.J., and Michael J. Meyer find ethical.
An NSA Cyber Weapon Might Be Behind a Massive Global Ransomware Outbreak
Venezuela Tries Protesters in Military Court ‘Like We Are in a War’
Old/new ideas reimplemented in a way that provides more value are, indeed, innovation. You're confusing with "invention". You might think: "oh well, vocabulary". But that's precisely this difference that matters.
Money doesn't always win, look at the most recent.
It looks like "System Test" is what they call end-to-end testing using tools like Selenium with a browser. Scripts that e.g. send POST requests to the server process and check the result seem to also be included.

The new form_with looks convenient. It was always annoying occasionally having to switch all the methods out when a form gets more complex.

I don't really use frontend Javascript stuff, but mostly because it was a pain getting it to work with Rails and doesn't provide much benefit. Maybe in another year the Webpack changes will have made it worth using.
Seeing this prompted me to revisit http://thecan.org/, "a pet cemetery for dead games."
Isn't there a joke that a data scientist is a statistician who knows SQL?

It's also weird when we say collate big data and data science.

Any statistician worth their salt can do inference in limited/noisy data sets.
Windows is home for developers with Windows 10 Fall Creators Update
So I mean, if you're trying to take a stand against pesticides, you should _be in favor_ of the Bt-toxin GMOs. The GMOs that produce their own pesticide are great, because there ends up being _less_ pesticide in the field in general. (The alternative to having a plant producing their own GMOs is that, obviously, they'll just dump the field with pesticides.) Bt-toxin is also fairly specific to which insects it effects: https://gmoanswers.com/ask/how-can-adding-lot-toxic-poison-p... (this is a pro-gmo site, but the guy answering is still an Associate Professor, which has to count for something.)

Please note that organic foods still use pesticides, even though the pesticides come from "natural sources". Keep in mind that "natural sources" doesn't mean anything-- arsenic is naturally occurring. :) https://blogs.scientificamerican.com/science-sushi/httpblogs...
I had the same reaction. The only part of this that I could read was a little surprising:

pop :: CallstackIO ()
pop =
modify popFrame
where popFrame (_:xs) =
xs
popFrame xs =
xs

Not that it's very onerous to implement, but I would expect these "pop" semantics to be imported from some more general type (or trait, or whatever Haskell uses for type composition). That said, I don't know what `modify` means.
A combination of good, accurate clocks (remember that a $10 digital Casio drifts less than a second per day) and some functionality on the server side to detect and correct for drift. When the key window is 30 seconds, the key won't drift more than 10 keys per year, which should be easy to correct for without compromising security (and if in doubt, it's easy to "ask" for a second code - just fail the attempt, the user will try again).
They also burn out from work load. In my city, county social workers have a case load of ~60 youth they are supposed to be meeting with and providing services to every week. They are clearly being set up to fail.

Consequently, the yearly turnover rate is approximately 30 percent.
Which ISP and where is the latency though? It could be that your ISP has congestion on NBN but not on ADSL2+? Not necessarily the NBN's fault.
Leaving your car or house unlocked means that you're negligent, not that the attack is your fault.
Do we have actual, hard data backing this up ? I see this touted each time ransomware is involved, sometimes backed with the 'logical' argument that the business model would crumble if that wasn't the case. But I have yet to see any research into whether those ransomware really do unlock those files.
BP sues oil analyst for allegedly stealing secrets
You might even say it's the opposite.
Kun je een dieet met weinig koolhydraten lang volhouden?
Ahem, the next president?
Swinging things back to startups, apparently that's the problem with a lot of SV business models as well.

"You're losing money on every order?!"

"Sure but we make it up in volume!"
> Raise the minimum risk-adjusted price (chance of getting caught paying * fine) by enough, and people will make the rational decision to not pay it.

You don't need to make it illegal to pay ransomware to use this type of logic to stop ransomware. Here's an alternative version:

It should be illegal to deploy ransomware. Raise the minimum risk-adjusted price (chance of getting caught deploying * fine) by enough, and people will make the rational decision not to deploy it.

But it doesn't work. The chance of getting caught is (currently) so infinitesimal that it is ignored, and ransomware is rampant.

In your system, the chance of getting caught paying would be equally infinitesimal, with the added problem that anybody involved with prosecuting or convicting would fully understand that they are harming the victim rather than the perpetrator.
I think if the problem is figuring out an ML solution to an already existing large dataset (as in the case of Kaggle and big companies), you do not need an advanced education. However, if you are doing a start-up one needs to answer questions like when should I stop collecting data, when should I give up trying this algorithm, when should I conclude this problem is impossible in its current form etc. These questions require crazy amount of experience of solving novel problems. During your PhD, you try to solve many novel problems and it makes you an expert to answer these questions. I also think you need an advisor/mentor to develop these skills. This is the real knowledge you can learn in PhD and that's why they are valuable and hard to replace
It's not 300 bitcoin
> ... and they cannot afford to be delayed by any amount of time that is measured in years.

And maybe not by a matter of time measured in months. But how long do court cases take? Years, not months (especially if Google decided to try to make it take longer).
In exactly the sense you just stated.
You're right, but curiously every post announcing Rails 5.1 at the time got nowhere on HN: https://hn.algolia.com/?query=rails%205.1&sort=byPopularity&...

I think there's now too much going on and too few people reading /newest for the HN front page to be a resaonably accurate representation of the big stories if a key Rails release didn't even make it at the time :) Seen quite a few similar instances as well. (The real issue IMHO is not enough exposure of or encouragement to visit /newest, so it's pot luck if links get seen.)
The View from the Trenches (or, Some Deadly Sins of CRPG Design)
Previously, for ref:

[1] https://news.ycombinator.com/item?id=2843728
[2] https://news.ycombinator.com/item?id=3498929
Interesting, I wrote in AWT a lifetime ago, and swing was billed as the hot new thing then.
Booze and Chuck, for the uninitiated.
That was just bad execution. The Academy Awards only requires that a film be screened for at least 2 weeks in LA and that it not be available for streaming prior to the screening window, however concurrent streaming is acceptable. (Straight from the horse's mouth: http://www.oscars.org/sites/oscars/files/89th-general_entry_...) For example, Netflix' Beasts of No Nation was available for streaming the same day as its premiere in LA and was eligible for Oscars, though it was not nominated for any.
Are they still using Herrenknecht TBMs?
Hard to get? For better or worse TTBOMK there are more Intel Xeon Phi machines on the TOP500 than GPU accelerated systems.
This article seems to do a much better job of explaining the trade offs of a direct listing:

http://fortune.com/2017/04/07/spotify-ipo-direct-listing/

Apparently the traditional underwritten approach is engineered fairly specifically to aim for that first day "pop" to build excitement about the new stock, and also seems with a lot of publicity which the banks can provide.

According to the article, direct listing does seem to be better for employees though:

* Spotify would likely issue no new shares (less dilution).

* No expensive underwriter necessary.

* Existing shareholders won’t have pre-sell any of their shares to new investors, which could mean that they capture more of the upside given that the stock has been purposely underpriced for the pop (and so the new investors capture more).

* No lock-up periods for shareholders.
'That’s because real innovation is very expensive to produce: it involves pouring extravagant sums of money into research projects that may fail, or at the very least may never yield a commercially viable product.'
This is a very inaccurate statement.
What you're describing sounds like the Apple, Google, or Facebook ecosystem. How is it different from any of those?
It's a large scale attack impacting many companies. We are under attack and are shutting down everything here: France, Spain, Italy, UK, Sweden, ...
#howto: installing Antergos
I guess it's only a matter of time until patient records are available.
Thanks! :D

Still working on it hard. My plan is to have a stable v0.0.1 by end of next week
I feel like writing a LISP in a gc'ed language is taking away most of the fun of it. I wrote one in C (without a conservative garbage collector) and the most interesting aspect was what had to be done to allow garbage collection.

Garbage collection can run inside nearly all subroutines. So any temporary references stored outside of the heap need to be kept track of at all times. If gc occurs you have to able to walk the entire heap and the entire callstack to mark live data. This is obvious but I enjoyed finding it out (and subsequently rewriting everything).
> Suing for damages on the basis of a breach of copyright law clearly does not require any contract.

I came here to say basically this. To make this really explicit - this result is completely and utterly unsurprising and does not set any new meaningful precedent. Nothing specific to the GPL was implicated.

Using someone else's source code without permission has always been, and continues to be a violation of copyright law.
Burnout is a physical problem first and foremost, albeit caused by prolonged stress.

(very interesting link: http://www.arltma.com/Articles/BurnoutDoc.htm)
Umm, the title was meant to be, like, a joke?
'Succumbs' makes it sound like they payed the ransom, which they haven't
Where in the world are you? There's deer all over the damn place here, despite that it's a city where you wouldn't really expect off the top of your head to find them. And the last time I went wandering deer trails - which was last week, actually - I saw plenty of grasshoppers, including a couple the size of my thumb, along with a half dozen or so deer, one rather suspicious fox, a Cooper's hawk soaring overhead, several small furry things which might've made the hawk a good supper, and more midges, gnats, noseeums, and general tiny flies-up-your-nose things than I could guess within two orders of magnitude. Oh, and one large bush that I'm pretty sure contained a beehive, although I wasn't about to approach any closer once I noticed it was humming!
wouldn't they be popping corks at Labour HQ? I mean, this isn't really "strong and stable"...
The FTC Do Not Call List exists ( donotcall.gov ), and threatens fines against violators. Problems with it (beyond the janky lowest bid government website), is that you have to report the violators phone number, and anymore these are spoofed.

Also, it feels like the FTC doesn't do anything. You never hear about enforcement actions.

For a while after the DNCL came out, calls stopped, but they've been ticking up recently. I keep getting calls selling me solar panels. When I asked how they got the number, they said, "we're calling every homeowner in California." Well, that's a violation.
The author of the blog post commented here, but it appears to have been made dead. Was it possibly killed by a spam filter because it is their first post in 3 years of having a hacker news account?
It has everything to do with cryptocurrencies. The whole point of which is to avoid and theoretically not need regulations. Spoilers, that theory is overly optimistic.
Same attack happened in China. Most of the affected are college students.
In a publically funded healthcare system, most employees are unionized, therefore no one will get fired for opening the attachment. And why should they? Unless it was a penis pill email, which I doubt, the employee probably wasn't intentionally trying to bring down the IT systems.
If people buy things on your site, you don't want them to get locked out because they forgot their email or use a shared email address.
Something like this also happened at Carleton University, but they did not pay the ransom. I assume they just used backups. They have really good (and super nice) IT people.
Moore's law can predict the future, but just predicting the future is probably better as you point out. If only you were right in the same way Moore's law is right.
How long until paying ransom for a cyber attack becomes a crime ?
Well said.

+2 for that ;)
Poor jQuery. You truly made the web a better place, but we have moved on. My feelings towards jQuery are almost exactly how I view my childhood dog. It was good while it lasted, but I really had no idea what I was doing back then.
I don't have any data, but a professor who taught me said that this is how it works. He's an expert on botnets and is in close contact with major AV vendors.
What ASP.NET Core May Bring to the .NET Framework’s String Handling
Maybe, but a patch for this issue being exploited has been out for quite some time. What's happened is that unpatched versions are being exploited.
Thank you for the offer but at this point, I already have strong interest from a local VC and at this point I'm shopping to see if there are any VC's from the south of the border.

Best of luck in your venture.

Cheers.
I'm amazed that they can say "your data always with you", and mean " your data trapped behind our proprietary apps"