skysight-inc/HackerNews huggingface dataset:
You can download/store your email to a medium that you control, like a portable hard drive. Storing email online invites theft and can provide hackers with personal information that can be mined for personal info.
In the article, it mentioned that patient records servers and patient inprocessing workstations were affected. No mention was made about medical devices.

Workstations absolutely should be patched with security updates. Running an intranet-wide update server is non-trivial, but is well within the reach of a competent sysadmin. And failing to do it is negligent.
It's even stronger than that; it's tribal. It affects political affiliations as well; once you've identified yourself as part of a group, you're more inclined to take on group's opinions, and you start to feel knee-jerk disgust at the rationales of the opposing side.

Keep the temperature up, and it eventually leads to civil war, just like amped up patriotism / nationalism leads to wars between states.
https://news.ycombinator.com/item?id=14326439
Apple does not let carriers have any say over software updates for the iPhone.
Checkout the Maptionary library, I'd like to have feedback (and any use other than myself). The existing stuff for JSON (particularly) is good if you're serializing into and out of data structures, but if you just want data? Not so nice.
More: You should recognize that it's a hypothesis that many (most?) historians do not find convincing. (Which does not mean that CriticalSection's hypothesis is any more convincing; they both sound like revisionist history to me, just written by apologists for different monsters.)
My UX teacher at university consulted with our province on the design of new highway signs (I think it was for the icons that tell you what's at the next off-ramp/service centre). So, it certainly is possible to consider the use case (user-centred design is what she specializes in) and design the signs accordingly.
The issue is non-technical people don't understand what those are and care even less what some IT nerd is complaining about. The more intelligent ones with more sociable IT staff might even be brought to agree in principle, but talk about taking the network offline for serious upgrades (and the money to buy equipment/software/extra staff for said upgrades) and the door slams shut.

On a micro-scale, I got my sister (a political science major now working for the UN) an SSD for her aging HD-based MacBook two years ago and offered to install it for her, do a complete system transfer. She was all gung-ho until I said I'd need to take her laptop offline for a few hours to do the transfer. She'd rather deal with firefox taking 30 seconds to load, and waiting minutes to switch tabs, instead of taking a few hours on a weekend for an upgrade. She simply thinks she can't be out of contact with her coworkers for that period of time.

Sadly I think she's more representative of the general population than anyone here is.
Currently we are re-writing an AR/VR test
suite ...

The Unity Test Tools[0] asset may be something which could assist in the test suite(s) your team is re-writing. One tip in using it is that the TestComponent's in an integration test scene are run in lexicographical order. So I enforce sequencing when needed by prefixing with "1 - ", "2 - ", etc.

HTH

0 - https://www.assetstore.unity3d.com/en/#!/content/13802
One of my favorite stories involving patching and security vulnerabilities comes from Jonathan Garrett at Insomniac Games:

"Ratchet and Clank: Up Your Arsenal was an online title that shipped without the ability to patch either code or data. Which was unfortunate.

The game downloads and displays an End User License Agreement each time it's launched. This is an ascii string stored in a static buffer. This buffer is filled from the server without checking that the size is within the buffer's capacity.

We exploited this fact to cause the EULA download to overflow the static buffer far enough to also overwrite a known global variable. This variable happened to be the function callback handler for a specific network packet. Once this handler was installed, we could send the network packet to cause a jump to the address in the overwritten global. The address was a pointer to some payload code that was stored earlier in the EULA data.

Valuable data existed between the real end of the EULA buffer and the overwritten global, so the first job of the payload code was to restore this trashed data. Once that was done things were back to normal and the actual patching work could be done.

One complication is that the EULA text is copied with strcpy. And strcpy ends when it finds a 0 byte (which is usually the end of the string). Our string contained code which often contains 0 bytes. So we mutated the compiled code such that it contained no zero bytes and had a carefully crafted piece of bootstrap asm to un-mutate it.

By the end, the hack looked like this:

1. Send oversized EULA

2. Overflow EULA buffer, miscellaneous data, callback handler pointer

3. Send packet to trigger handler

4. Game jumps to bootstrap code pointed to by handler

5. Bootstrap decodes payload data

6. Payload downloads and restores stomped miscellaneous data

7. Patch executes

Takeaways: Include patching code in your shipped game, and don't use unbounded strcpy."

source: http://www.gamasutra.com/view/feature/194772/dirty_game_deve...
> I'm actually surprised that the ransomware isn't taking Monero directly yet as some exchanges have direct Monero/USD markets already.

Buying Bitcoin is much easier
Can you expand on some of the details of your regimen? I'm having trouble getting myself to go to bed at a reasonable hour and I think it is strongly contributing to a growing sense of fatigue at work. Would be particularly interested in how you got started with it.
DHS Statement on Ongoing Ransomware Attacks: https://www.dhs.gov/news/2017/05/12/dhs-statement-ongoing-ra...
In other news, crank-to-start mode is broken on the Tesla Model S.
Fire every one who got a settlement
Oh, I'm not saying that I live under a nihilist viewpoint. Even if free will is little more than an illusion masked by seemingly infinite complexity, I happily buy into the illusion and (for the most part) operate as if I have unlimited agency / free will. My comment was more to say that you have to stop asking "why" at some point and just go with the flow otherwise you descend into meaningless.
Anticiaption for an attack tied to an all time high bitcoin?
Depending on the nature of the update, iPhone updates are generally 3–5 generations back. Just on the iPhone side, iOS 10 has some level of support on the iPhone 7 (current generation); iPhone 6s (-1 year); iPhone 6 (-2 years); iPhone SE (slightly updated iPhone 5s); iPhone 5s and iPhone 5c (-3 years); and iPhone 5 (-4 years). That’s five generations of support for iPhone.

They are a little more aggressive with iPad and iPod touch deprecation, but I think that’s because some of those devices were built underpowered anyway.
That's basically what emoji are. Of course, I have a hard time telling what they're supposed to mean most of the time.
For the record, no.
This is pretty cool. I always find it interesting when cool mathematics ideas are used to help computer science.

I remember a while back I tried implementing something like this in a hobby operating system I was making, with constants similar to the one in the post. I found them on some random paper that included constants for a bunch of different trig functions. I don't think it ended up working and I ended up using a table of values that it estimated between.
There is also, if you're lucky, an increased sense of agency ie, direct feedback between your work and the value your customer places on it. Large corp can put you many layers away from that feedback loop and that can increase your sense of powerlessness.
Um, dang is one of the moderators here. Trying to shut town off-topic rants that lead to flamewars is part of his job. He's engaging because he's trying to educate you on how people are expected to behave on HN. (And it's good that he tries, rather than just banning you. And it's good that he keeps calling out and shutting down garbage; HN is trying to hold on as a place where you can have an intelligent conversation rather than drowning in insanity.)
Downloading Microsoft security updates is simple and safe.

You just download the monthly rollup: http://www.catalog.update.microsoft.com/search.aspx?q=401221...

Any competent sysadmin will have these available on their internal update server and push updates+restart during off-peak hours.

Receptionist computers that can open websites with untrusted JavaScript can't reasonably be held to this certification. Certification isn't what kept the NHS from applying patches.
loads of conversion losses at all stages, but if you are willing to accept those - it will work
Was the update a Microsoft Security Update?
It did that to me on Safari on MacOS. But I just scrolled to the top and was able to read everything (albeit with a lot of ads).
I gave up reading halfway through because I can't get it to scroll smoothly.
Do you know this assertively?
sin( ) is typically implemented with (more sophisticated versions of) exactly the same "tricks"; most library implementations trade off a little speed for more accuracy (and obviously support inputs from the whole number line, not just (-pi,pi)), but honestly they're pretty fast already.

There are also some libraries that provide vectorized implementations, often with a few options for different accuracy/performance tradeoffs.
Off of Morgan Ave stop on the L
Here is a link to the malware sample and technical implementation details.

https://gist.github.com/rain-1/989428fa5504f378b993ee6efbc0b...
Well, how do you think your CPU calculates the sine function?
Are you South African, perchance? (As far as I know, South Africa is the only country that exclusively called 3.5" floppies "stiffy disks").
You can't do it anymore on Windows 7, because they switched to the consolidated patch model of 10. Now, the possibility you have are mainly a linear security only channel, and a linear security+stability(+eventually features) channel.
I am curious. How is this tracked? What signature or what component are they looking for to be able to say "Yeah, here is another one"?

I'm just curious and would like someone with more experience to weigh in.

EDIT: To add on further to my question, I wonder why it does not use a terrain / city / province overlay instead of all black? It seems it would be much more useful to us network and sysadmins out there just in case we realized "Oh, hey that dot is right on top of where we work out of. I should probably fire up WireShark or something and test for infected systems."
Yes, it is a simple regimen:
At least a half hour before bed, turn down all lights and light-emitting objects. This means no computers or television. Do not do anything in your bed other than sleeping or sex. If you want to read until bedtime, move yourself to a different location, like a comfortable couch. If you are having trouble sleeping at a given time, you may try melatonin.
I don't have to follow all of these rules now that I've developed the habit, but I find my sleep is significantly improved when I do.
Oh, and don't go to sleep drunk, either.
Fine, but I disagree that this is "religious flamewar". This is a critically important issue in the context of current events.

If you don't want discussion related to this topic on HN, articles related to it should not make the front page. I see that this one was pushed off shortly after I made the comment, so perhaps you're making efforts to avoid this so I will respect it.
kids without parents have certainly a reduced success-expectancy in life

It's interesting, that poor people have "so many children", normal people "just 2" and the rich again many... seems like everyone has their reasons/strategy:

Rich people can just have as many kids as they like. Normal people as they can sustain and​ poor people are just pounding them out with good hope that some/any will make it
Worked just fine for me in Safari, but Ghostery blocked 13 trackers, so maybe one (or multiple) of those is the culprit.
The New Wonder Woman SUCKS
>Companies in English education, tourism, trade or other globally focused industries typically have English nickname policies. They want to accommodate foreign business partners who can’t decipher between Lee Ji-yeong and Lee Ji-yeon. “They’re thoughtful people,” Hong said. “It’s to be kind to foreign people.”

I lived in Korea for about a year and a half and Korean names were near impossible for me to remember en mass. That's because all Koreans have 3 syllable names, and they all use the same few syllables. To make it worse, many of these syllables sound alike!!!

When you have to remember the names of 20 or more people and they're like

"Kim-Yeon Lee"
"Kim-Yeung Ye"
"Kim-Hyun Ji"

I don't know how a non-Korean can keep up with that for any length of time when it involves a large number of Koreans. Many Koreans who speak English have English names they choose for interacting with foreigners and none of them seem to mind. It is very considerate of them because having to remember their Korean names can be painful for non-Koreans. I imagine it's also because my difficulty with Korean names was not something unique. It's probably something they noticed among many foreigners and compensated for.
Is something messed up for me, or does nothing much happen until the 1:30 mark?
The IV drip machine is not plugged into the CoW (Computer on Wheels). That workstation is running a version of enterprise Windows primarily to allow the medical professional to view and update patient records.

The IV drip machine is plugged into the wall, and is operated by buttons on the front.
In the context of a large government agency that wants support and ongoing updates, yeah. Nobody bootlegs Windows.
Can anyone give an example of a real world application that uses this technique? Why would you do it?
It's quite hard to find a good pitch for patriotism. I like my country, by like any relationship, it is conditional on not being a sociopath. Furthermore, everything i like about my country i country i can like directly: free speech is laudable in itself. Without free speech, what is the us? Nothing i care for.
Yet this is one of the central business models of Silicon Valley: build a software apparatus, hire "interchangeable" women to take care of the human side of it, pay them "market rates" which for women's work means "the lowest acceptable wage for at least one woman in the social class your customers expect" (they're interchangeable, any woman could follow the script. The hard part is building The Apparatus that tells them what to do. So we pay men big bucks to build The Apparatus).

It's all built on the fundamental belief that the work these ladies are doing is interchangeable while the men's work is not.

Is that really true though?

And of course sometimes you find a pool of men who will let you treat them interchangeably too...
I'm middle class and I can go 24 hours or even many days without interacting with anyone. The future is already here. Can't say I'm all that impressed with it.
> What has bothered me lately, very much so, is how in-the-minority I feel about this "social crisis" that I feel is occurring: hurting people/ourselves in pursuit of money that we won't personally even see. (In-the-minority from the people that surround me in my work and personal life.)

A key point I think. I'm not sure it is a minority feeling, but more a case of active propoganda/cultural influence that keeps 80-90% of people complacent ("We're the good guys! This doesn't feel right, but they just told us we're the good guys! Keep working!").
Patriotism seems to be a euphemism for nationalism.
The point is that an entire genome (not just 50bp segments) is destroyed in 1 million years.
Ask HN: What is the best mobile HN app?
Your hypothetical situation distracts from the actual issue. The ransomware infected NHS patient records servers and receptionist workstations, according to the article.
Quick, migrate to TempleOS!
Right, I forgot. Well, at least with Windows 7, you can choose to install only security rollups, whereas with 10, AFAIK, you have to take it all or nothing.
I'm talking specifically about AFGAM:

Apple owns consumer

Facebook owns Social

Google owns Search

Amazon owns E-commerce

Microsoft owns enterprise

Nobody is coming even close to taking them out in their categories and they are collectively dominant in pretty much everything else except hard infrastructure - even then they are gaining ground.

Snapchat could have had a close chance against FB before FB targeted them hard, so you can forget about that. But even then, google capital is an Investor and on top of that is getting $2BN in revenue from snapchat using google cloud!

Name any potential serious startup competitor to any of these. Doesn't exist.
Marginally.

And the malware controllers can just as easily add instruction to users to shapeshift bitcoin to their Monero address
The parent is clearly saying that this is a plausible route for Uber engineers using the biological proof-of-concept, which I have rebutted. They are not just saying it would be an improvement.
I think we're showing our evolutionary background, in particular greed. Having our monetary system essentially controlled by powerful private interests is a disaster too.
Exactly. Much like Texan people possibly have forefathers that liberated the lebensraum from its previous occupants, and wouldn't want their work to be undone, with land returned to some tribes now banished to the poor quality land, the Russians and Prussians weren't seeing that 1772 map like you do. Different times.
That job wreaks havoc on your emotions.
Ransomware That Hit Europe's Computers Did Not Come from NSA Leak
Neat thread but this is bs: (as that's a licensed typeface, so you can't use it without paying a fair amount).

Typefaces are exempt from copyright in most countries AFAIK. Only the actual font file ("computer program") and name (trademark) are restricted.
> Itanium did not aim at the x86 market.

Maybe not. But x86 certainly took over the market Itanium was aiming for.
Surgeries are scheduled in advance except for the most urgent procedures; most surgeons and surgical nurses don't work on weekends.

Surgeon workstations can absolutely be restarted once per month to install the monthly roll-up.

The article mentions patient records servers and receptionist computers being affected by the ransomware. Not life support equipment.
> not just (-pi,pi)

If you can do [0,pi], a few operations give you the entire domain, no?
Nextel was very much competing on price though.

Nextel's selling point was that it allowed Nextel subscribers to call other Nextel subscribers(via "push to talk") without incurring per minute charges(this was in the days before unlimited plans.)

It was the phone of construction and maintenance crews since it was basically a "walkie talkie." It wasn't a premium brand at all.

>"I'd love to see a citation for this, because it doesnt jive with my own memory."

I think you mean "jibe with your memory":

http://the-penultimate-word.com/2012/06/23/jibe-or-jive-comm...
GuitarPang pushes back the boundaries of guitar-related weirdness
Ask HN: Websites that allow Python to run in browser for learning?
This is missing the point I think. Google does not want to push updates because that requires them to do the massive job of verification and validation necessary to push new features to so many hardware variants.
There is at least one cryptolocker variant that supports Linux.
Migrations costs and lock-in are orthogonal concepts.

Migration costs are just the costs of switching from one solution/product to another.

Lock-in is when you are in some form dependent on a monopoly.

Insofar as lock-in causes high migration costs, that is mostly because it forces you to migrate in the first place, unless you want to stay dependent on the monopoly. If you are using some software, say, and it's lacking a feature that you need, in a lock-in situation, you have to either buy that feature at the price the copyright owner of that software asks, or you have to switch to different software (which in turn is expensive because your data is, presumably, stored in some proprietary format and the company that knows how to read it is not keen to help you with migrating it to a different software). If you were using free software instead, or proprietary software that you yourself hold the copyright to, the migration would be cheaper because you would have the code to help you with migrating away from it--but more importantly, you probably won't have to migrate at all, because you can just hire any competent software development company from the market to implement your features, and if one company is overcharging you, chances are, you'll find one that is not.
I don't disagree with this, but Meijer left Microsoft a few years ago, I think he's at Facebook now.
Yea, that's a fantastic way to show maturity and that the company doesn't retaliate against employees... Sounds like something you'd expect from a place like Uber.

Treating employees poorly by not allowing simple breaks and then retaliating against them isn't made up by having a cool goal. If SpaceX in fact does that, I hope the rest of their employees leave.
Oh Snap
The contrast is too low.
Notice that your program could use a fold [1]. Not sure it would be much more efficient, but that would give it a more functional-programming style, which is arguably more elegant.

I wrote it in Perl 6 for instance:

sub wallace-sin($x) {
constant pi_major = 3.1415927e0;
constant pi_minor = -0.00000008742278e0;
my $x2 = $x²;
($x - pi_major - pi_minor) *
($x + pi_major + pi_minor) * $x *
reduce * * $x2 + *,
0.00000000013291342e0,
-0.000000023317787e0,
0.0000025222919e0,
-0.00017350505e0,
0.0066208798e0,
-0.10132118e0;
}

1. https://en.wikipedia.org/wiki/Fold_%28higher-order_function%...
Not every. Actually it's kind of a trend now to give your kids "pure Korean" names with no Chinese character backing. Both of my children are half Korean and live in Korea and their first names bear no Chinese origin. Similarly there's a trend of giving your children a single syllable given name rather than two syllables.

To clarify, the mother of my children and her family are staunchly Korean with one half from 경상도 and the other 전라남도...not particularly raised with extraordinary exposure to foreigners so I was quite surprised when she agreed with the names.
You are right but I'm not pleased that your comment has hijacked all discussion on this article.

(Not that it's your fault, it's somewhat germane to the overall issue of government, I'm just whining)
How to create a reusable Yoast SEO template
I don't think there really is one. It's just an interesting puzzle that can be enjoyable.
Malware tech need recongnition! By being the first to register the hard coded domain in the malware they have slowed the spread significantly ...

https://twitter.com/josephfcox/status/863171107217563648
I wish LSD were medically available and studied. It's a powerful, important drug.

But I don't think it's safe in arbitrary settings at a high dose, so I am reluctant to say it's safe in arbitrary setting at a low dose. It can open you to traumatic realities as much as kind ones.

Probably most people with depression are over perceiving the harsh, but some are actually in serious harsh harsh and LSD might make that worse. Don't know. Talk to your shaman.
Please look up Judson Brewer and Gary Weber (sorry for brevity, I'm on the go).

EDIT: actually this is an excellent resource for the HN crowd, 100% BS free. It explains DMN and much more:
https://www.coursera.org/learn/science-of-meditation
Is the typical implementation you're referring to CORDIC[1]?

[1] https://en.wikipedia.org/wiki/CORDIC