skysight-inc/HackerNews huggingface dataset:
> First, we store the Pointer of s string in a variable (p).

> Then we use std::mem::forget to release it from the responsibility of Rust.

CString::into_raw does that whole song and dance for you.

For Vectors you probably want to convert them to boxed slices first, at which point you can use Box::into_raw (to get the slice's head pointer).
Psst, downvoters - https://en.wikipedia.org/wiki/Reamde
If they attach this to a new exploit, instead of an old one that targets Windows XP, there's going to be a real problem.
Interesting, I've visited this website multiple times before and didn't know about this problem until today. Ad blocker browser add-on seems to be doing its job really well.
Aside from heatsink limitations (which can be modded to achieve better cooling), people are pushing their gaming laptops to 80W and beyond, with overclocked GPUs as well.

Some are resorting to dual PSU's to handle the power requirements, so the system boards are capable of handling some insane load.

I myself squeezed another year out of a Core 2 Quad laptop by overclocking everything as much as possible. Temperatures were averaging 90-95 under load, but I didn't care at that point, as I was going to upgrade. It still works :D
Apple is pretty much in the right on royalty based on device cost is crazy.

Even more extreme example. Imagine you're Rolls Royce and want to make your next car have a permanent cell connection. Does 2% of the cost of a car at say 500k sound "reasonable" any longer?

It should be the component or at best overall component in a larger design, not the design itself. As it stands final device cost just seems like a liver punch for no real reason than "because".

But thats just my view of things, I'm curious if anyone can argue for a fixed % of final device cost for things that start to get costly as being "fair and reasonable". I'm having a really hard time coming up with one outside of its good for qualcomm's bottom line.
I bought an item from Amazon recently and I actually did receive an empty box. Was nervous about reporting it as I was highly aware that it could easily look like I was running a scam and I had no way to prove otherwise. Fortunately Amazon gave me a refund. It seems that whatever policy you put in place for this situation, some people are going to get screwed at least some of the time.
In virtual reality, women run the world
its not your job to prove you were raped. its the prosecutions job to do that.

the majority of people has a problem with rape going unpunished. but criminal justice is a bit fickle, because you cant just make it easier to convict people without having the false conviction rate shoot through the roof. and in a free society, youd rather err a bit on the side of letting some people who did commit crimes go.
It's hard to evaluate whether that's a good or bad thing. It'd be good if the victims got their files back. So you want to keep the server up. But this kind of scam must be stopped. So you want to kill the server quickly so scammers understand the scheme is unlikely to be profitable.

Unfortunately the economics probably work out the same way spam does, meaning it won't go away. All it takes is a couple people to pay up to make it profitable, because the criminal doesn't bear the cost of distribution.
Documenting it shouldn't alter its effectiveness. I can tell you how AES works and that doesn't compromise anything.
> The initial attack vector is via an email attachment.

So far it seems an hypothesis and nobody has shown such an email attachment, which is strange considering all the systems out there which save and archive attachments. Especially hospitals and gov't sites saves it all.
Show HN: TTS for your blog
Ah, yes, just found that this already exists in firefox. Is it new?
How do you mean?
Is the malware detecting its in a VM?
Could I purchase the movie rights to that? Could seriously make a good mini-series if done seriously. Ala John Le Carré.
The "lower tier of the high end" is still the high end. More simply, that's expensive.
That's my point though. Four years ought to be time enough for them to sort this out after implementing that new view on ads. What's worse, that initiative was about blocking sites altogether if they had this crap on them, despite still allowing their own partners to use these practices.
It's very likely the attackers themselves are surprised by the magnitude of this.

The sweet spot for an attack is welll below the level where you wake up national LE, especially in such a public way.

Remember when LulzSec was hacking everything in sight with daily press coverage. If I remember correctly all but one were arrested in under 1 year.
I find https://todo.microsoft.com/ to be an excellent alternative.
Maybe not the time for semantics, but curious where people's line in the sand is with regards to calling logging in with the correct admin credentials as 'hacking'.
A lot of people in the US have no problem meeting with strangers when they first move to a new city.

How to meet girls at a 50-100 mile radius? It depends on your hobbies. Music, sports, etc. Nothing stops you from joining a club, a band, a team 50 miles away from your house. You need an entry point and you'll easily make new friends. It's a logical thing, it's easier to make progress when you start from scratch than when you're already up there. Plus, they know you don't know anyone around so they'll take initiatives and invite you to join their parties. You don't have to do anything basically just accept or refuse their invites. It's a natural thing to bring in someone new instead of watching a friend of a friend trying to stick in a party. And again, girls already know all the dudes around, you'll be the center of attention... girls will turn towards you not the same exact dudes they see every day.
You use inheritance when a library provides an interface that you want to use. Other than that, you're probably better off not using it. Certainly not in the idiot Programming 101 "lets design a restaurant" OOP way.
> lithium iron phosphate

Far as I can tell, lithium iron phosphate battery technology is sustainable over geologic time scales. Unlike other things that require minerals that are rapidly being depleted and will be low supply and expensive in 50 years.
Slip-triggered wearable robot twists elderly people’s hips to prevent falls
> Someone has to work to produce the goods and services we need

I agree, but they don't have to work for someone else who extracts surplus. They can organise themselves and work themselves, voluntarily. They then own the products they make and decide how and if to distribute them.

>In free market the employer is paying the wages which could potentially lift the employee out of poverty

In slavery, the slave owner is providing the housing and food which could potentially lift the slave out of being in a state without food or shelter.

The owner and employer both perpetuate the system of oppression, this much is a fact. If there were no capitalists, there would be capitalism. If there were no slave owners, there would be no slavery. If there were no lords, there would be no feudalism.

You cannot escape the fact that the capitalist is taking advantage of the lack of choice and lack of capital by virtue of accident of birth and the property system which the capitalist defends and supports.
In the most recent episode of econtalk (http://www.econtalk.org/archives/2017/05/tyler_cowen_on_1.ht...) Tyler Cowen had the very interesting thesis that less formal dress codes make it harder for outsiders to fit in and makes it harder to climb there ladder. Instead of just wearing what's prescribed for your role you now have to decide yourself what might be seen as appropriate and maybe even decide how to stick out or what clothing match your desired perception and ambitions. He pointed out that as a immigrant from a foreign culture you'd be relieved to just get a simple answer like "white shirt and black tie".

I wonder if the same principle might be true for language. Having formal rules how to address someone might make it easier to do the right thing and not having to waste brain power on something like that.
MixIn is just multiple inheritance rebranded.
> not entirely clear on how crypto works

Sometimes they accidentally weaken the algorithm (like by chopping it's key bits in half through a weak RNG). Crypto is hard, even when the scammer probably has a good grasp. Which is useful in this case.
Maybe! The justice system allows for damages beyond just compensation. Sometimes, it's about sending a message.
I am running Windows 10 1607 with build 14393.1198. My system update history says the latest update was "2017-05 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4019472)".

How to I verify if I have MS17-010 update installed? Do I need to upgrade my windows 10 1703(Creator's update) to get this patch automatically?
Good catch! It turns out that all of the links in my post are broken. I copied some of the content from a previous post (https://news.ycombinator.com/item?id=14127727) and the links were mangled as a result.

The correct links are below.

[0] https://books.google.com/books?id=qTkEAAAAMBAJ&lpg=PA52&ots=...

[1] https://books.google.com/books?id=OFCXnqlSFKwC&lpg=PA709&dq=...

[2] https://www.ftc.gov/news-events/press-releases/2008/01/ftc-c...
Would+we+see+a+new+10.5-inch+iPad+and+a+smart+speaker+in+WWDC+2017?
I make DuckDuckGo my principal search engine, then use !bang syntax in the url/awesome bar.
The exploit hit everything pre Windows 10, but yes if they find a completely unknown exploit this could be worse?
Yes this is more comparable to level, rocks or at a higher level Cassandra, ScyllaDB, DynamoDB etc.
Men don't need compassion. They have the Patriarchy
Can they bring the cost down where Indians can afford it? Even in the US it seems like a luxury.
I'm always iffy about articles like this because so much of the ground has been utterly salted by online "men's rights" activists that are more motivated by misogyny and antifeminism than actually righting wrongs.

It seems like a good read, but I would loved more data to crunch. The numerics of working long hours was a great example of how the mathematics of the situation make this stuff happen.

Anyhow, my wife and I actually do the fully-equal thing - she makes a bit more than me (teaching in Ontario is paid well and I'm not working in one of the Big Tech Market cities) so we have get to split things 50/50.

This actually presented a great opportunity: She wanted to go back to work early from her parental leave after the birth of our 3rd kid. So I did something new: I took the other half of the leave. 7 months off with my kids.

If you have the opportunity, do this. It actually made more money for us, in terms of strict income. Both of our employers provided a several weeks of top-up parental leave in which the government unemployment-insurance benefit is supplemented up to your full weekly paycheck. So by both of us taking time off, we got to double-dip on this.

And the experience with the kids was fantastic. I got to play boardgames with my son and teach him to ride his bike, and took my two daughters jogging in a double-stroller every other day. I practically lived in a ring-sling, even getting the stink-eye from greasy guys on a family trip to Manhattan. I got to properly get to know the parents of all my son's best friends and we're all still close. I was in the best shape of my life and had a great time, and my wife likes her job so she was happy to be at work.

I'd considered doing it on our 2nd kid, but friends and family had talked me out of it because of worries about my career. I don't even work in the same place I did when my 2nd was born. I quit that job later on anyways, so I missed out on that time for nothing.

To me, the biggest tragedy is the every-upwards climb of working hours for the household. There was a time when a family would live on a single 40 hour workweek. And what have we gained? I mean, for people who work retail, does the fact that they work on Sundays and every night to 10PM mean they actually sell more goods? Or does it just mean that retailers need to pay staff less per-hour because they're selling for more hours?
Infinity doesn't exist
I think that it's probably "good enough", I don't think it's a given that this NN is worse, and it's possible that it could feasibly be translated to machine code which runs faster than TeX's handbuilt algorithm, and also possible that it produces better results in most cases.
Why would they have an opinion at all, unless they were educators, students, or parents at the time?
A bunch of articles, even Snowden, argued that it's very likely that the NSA tools were stolen by the Russians.

https://twitter.com/Snowden/status/765514891813945344
MTN to Invest $295M in Iranian Net
Yup, that means it's not a real standard.

That's why it's "just" a de facto standard, since it's still pretty much the only thing used in its product category.
> FWIW, I did read a bunch of book like the ones I mentioned above when I was writing a paper on a EULA-related topic during my law degree, and as a result I don't make any blanket statements about the topic any more.

Thanks, that's a completely satisfactory answer. (It's the Feynman-style "it's complicated, and any analogizing just makes it incorrect, thus making the analogy (or simile) useless" answer.)

And okay, they're are not separate things, but this sort of problem seems like what SCOTUS spends long minutes discussing in oral arguments. Because they are indeed separate things, one is a (physical or digital) copy and one is a grant of IP rights. At least't that's how I use the word. At least that's the piece of abstract thing that's necessary to make the copy non-infringing, right?

But, then, it comes down to good or bad faith of the seller. If the seller/vendor does not disclose the exact terms, but gives you the impression that after paying you you can use said copy for such and such purpose, that's seems to be 'false advertising'.
Can Prairie Dogs Talk? (2017)
It seems like while the developed mature economies (Europe, NAmerica, NEast Asia) will fare okay if they can "retrain" their workforces, lesser developed economies will suffer because: developed economies will not need to export labor to cheap labor locales and two the demographics of developing nations mean they won't have jobs for those people. So either they put a lid on their pop growth or they will suffer from lack of jobs for all those people since developed nations will not be vacuuming cheap labor up and instead will automate those jobs in their economies.
Hindsight is 20-20 but does not swivel forward.

One strategy is to make a habit of staking odd, unusual or long-sighted ideas. You would lose 9 out of 10 stakes, but hopefully the tenth would cover the losses.

I found out about bitcoin around 2010, back when they were still almost CPU-mineable and cost a dime a dozen, and mined a few "just in case they would become galactic credits or something". It sounded like a bizarre idea, but i couldn't think of any solid reason why it can't just became money one day. Later, i got a bunch of Ether because i had a habit of collecting altcoins, and it seemed like something unusual compared to the meaningless forks abound back then.

Sometimes you need to understand the tech. I groked the idea of cryptocurrencies quite early, because it's just math and code. But i wasn't aware of Facebook's existence until around 2014, because social networks were some bizarre, unsearchable chat-forum mutants with zero information content or conceivable uses. Even though i am as old as Zuckerberg and had all the knowledge to make one, an idea of social network would never have occurred to me.

So, there is some degree of personal alignment and aptitude - if you are not in a certain field, it's hard to get what can have traction and what can not, but if you are familiar with a field, you can detect unusual ideas with potential more often than not.

TL;DR: Kinda sorta something like that, no real answer, didn't meaningfully succeed at it either.
Sam Altman for governor?
Just from my limited experience of "being alive in the USA for 30-something odd years".. I don't think anyone is hard at work trying to get anyone. If you actually ever get the attention of the NSA/CIA - you don't get "caught" or ever make it to the news(except in gaffe's like snowden/assange, we weren't supposed to find out about them). They want us to forget about you, while you either rot in a dungeon(forever) or are already buried in a shallow unmarked grave.

The reason is there is no good press to be gotten by announcing they caught these people...all that does is draw attention to the fact they were breached/bamboozled/whatever in the first place. In their eyes, this story and any public interest cannot die quickly enough.
Great perspective! thanks for that.

It's a fact, though, that operational security is /really/ difficult to do well all of the time. And your overall security is driven by your weakest link (like Ross Ulbricht found out).

The original article points out some ways informaiton leaked in the 70s; my guess is that there are similar leaks in the present day.
the patch is from march, way older than the creators update. If you want to make sure, go to https://technet.microsoft.com/en-us/library/security/ms17-01..., look up the patch numbers (KB4013...) and check if you have one of them in your update history.
Apple acquires dark data specialist AI company Lattice Data for $200 mn
I think that in a couple, there is always some form of resentment towards the partner which does not work (is not pulling their weight) but I think that the level of resentment is many times higher if the non-working partner happens to be a man.
I think a lot of the reason Google has been allowed to get away with this is because of ad blockers... the people in a position to most loudly condemn the practice and push for change... aren't using the same Internet as the rest of us, they don't see the problem.
I'm am very much in favor of open source always but let's not pretend that embedded systems don't end up with out of date software just because it's open source.

In the case of WannaCrypt0r, the vulnerability had already been fixed by Microsoft but those who were hit hadn't patched because as discussed elsewhere applying patches may break things so some postpone or ignore it. Same thing could have happened to a system running Linux.
Hi,

I asssumed that the script would not be restarted, but you're totally right.

Thanks for the comment :)
Don't open dodgy files (like in emails), or if you must, do it in a VM.

Run adblock and no-script on your web browser, only visit trusted sites. If you must, use a VM.

Don't download and install software you don't trust. Either it should be a big company in the news regularly, have good reviews from people you trust, or it should be open source. If you must use a VM.

Backup your files regularly (and have offline backups, the data is the most important thing), reinstall your OS regularly (this gets rid of old and outdated software you don't remember; because I doubt you install all updates, have you updated Java recently? How about adobe flash or reader? How about the chipset drivers that likely came with your machine?).
In this context criminals are a person or persons who have created ransomware which, in less than three days has infecting more than 230,000 computers in 150 countries, demanding ransom payments in bitcoin in 28 languages.

The meth dealer two houses down who serves people out his front window probably isn't thinking straight. What we're dealing with here is a different category of thinking.
Not particularly, I can't remember it not being there.
This isn't fingerprinting specific SDN controllers, it's really just detecting if the network is setup in a 'reactive' SDN configuration.

This means that certain network packets will be sent to a controller for a decision before a rule is installed in the switch describing what to do with future packets related to the same flow.

ODL, ONOS, or any other openflow controller can setup packet pipelines in both reactive and proactive modes. The latter would be completely unidentifiable from the data plane. Correlating the former to a specific SDN platform isn't really possible because the behavior is entirely dependent on the application running on top of the controller.
Will We Ever Run Out of Music
Show HN: Build your own weather monitoring app with IoTIFY, Bluemix and Cordova
Firefox already (ab)uses GTK+. Tabs in the titlebar will be optional.
Remember the guy which created Silk Road. People talked about him in mythical terms, that he probably has the op-sec of God, but afterwards facts pointed to major mistakes, like connecting identities to his real name, and suddenly everybody was like "how can he be so stupid, doing this while being the owner of a $100 mil criminal empire"
> Because men – and especially white, professional men – occupy a uniquely privileged place in society,

I don't know any white, professional men who got where they are because of privilege. It was all effort over many years together with sensible decision-making like finishing school, getting a job, not having kids out of wedlock, turning up to work on time, working hard, being honest and so on.

> Feminists have long argued that men see little need to help out more at home because they already enjoy all the benefits of marriage and fatherhood without having to put in the extra work.

What would feminists know about a non-feminist man's perspective on marriage and fatherhood? Non-feminist men also note that women aren't pushing for equality in physically demanding jobs on oil rigs, welding, construction and coal mining - because equality in the workplace is only for office jobs I guess.

> Their status as men is at once so valuable and so precarious that it must be won over and over again.

This is not a bad thing. The man guarding his village's perimeter from bandits can't fuck up or it costs people their lives.

> “Many professional workplaces involve a constant negotiation among men to establish a pecking order,” says Joan Williams, a feminist legal scholar

Yet another feminist quote. Why not ask some non-feminists for their opinions? This pecking order thing is entirely natural among men. Always has been, always will be.
The script seems to ship with a rundimentary webserver by default, so I don't see a reason to wrap gunicorn et al. around it?

However, you're right that overwriting the source is a possible attack vector.
Sounds like a personal problem to me...

This is a little shady, but all the units are clearly labeled as ads. I have a hard time getting as worked up over this as the author does. Paint.NET is a free product, what do you expect?
And why would they not then use randomly generated domain names, instead of hardcoding domains that could be registered?
Can you say what exactly is an "embedded workload"? I have seen this a few times now and tried googling but only ever come up with references to embedded systems and I'm guessing that this is not the same context.

I know rocksdb is LSM-based and was built by FB to address write amplification on SSDs.
Can you please elaborate on what you mean by "contentless"? I just checked out the wiki page on New Math and it seemed to have covered (with the exception of inequalities) a few topics that usually get covered in the first couple of chapters of an intro to abstract algebra book.
What if you need that job to make ends meet?
Except that using an alternative technology (gsm/tdma) would make their phone laughable. A windows phone with LTE would outsell an iPhone without :).

Qualcomm is correct to argue that their patents are critical to the device functionality, so they should get a chunk of the profits.

Apples market cap went up by 5 Qualcomms since they started selling the iPhone, so they clearly get the lions share of profits. It's hard to argue that the pricing is unfair.