skysight-inc/HackerNews huggingface dataset:
The point here is that Windows Mobile has already solved this problem: All Windows 10 devices receive OS updates directly from Microsoft servers, as a requirement of using the platform. (Even in 8.1, if you were on Developer Preview, you got updates straight from Microsoft, apart from carrier/OEM channels.) Drivers/firmware are pushed separately.

This appears to be where Google is perhaps finally heading. Once Treble is out there, Google will change their contract terms to mandate control over OS updates for all devices which license the Play Store.
Show HN: Mountain Jumper
How has free speech in Europe fallen exactly? Things like college non-platforming are happening in the U.S too. It's true that there are some laws regarding things like Nazi propaganda, but there's still very much free speech in most European countries.
The Importance of scaling infrastructure the right way
> But they need not be functional or even intelligible as anything other than as part of instructions, e.g., short strings of octal values representing characters, with wildcard characters interspersed.

I think you're misunderstanding how copyright law views works. A "work" in the sense of copyright law isn't a pattern of bits: it's a creative expression of an idea (a binding between a pattern of bits and some concept in a human brain) that has a context for how it came to exist.

The classic article "What Colour are your bits" is a good overview of this: http://ansuz.sooke.bc.ca/entry/23

It's worth reading, to understand exactly what copyright law covers / how it works. But suffice it to say that the ability to create a set of bits that does not include any inherent reference to the GPL'd work does not make the bits no longer a derivative work, any more than Monolith (the example from that article) causes bits to stop being copyrighted.

Which answers your question of why programmers do not distribute instructions on how to modify GPL source code without distributing the source itself: there's no point. The legal requirements on them are exactly the same.

My comment about BSD licensing is that if people who own GPL'd works sometimes accept payment to give you the work without the requirements of the GPL, nothing is stopping people who own BSD-licensed works to accept payment to give you the work without the requirements of the BSD license. If it's a bad thing that you can in theory pay money to avoid the GPL, it's equally a bad thing that you can in theory pay money to avoid the BSD license.
I read the other comments and reasoned that it would be fun to mock them.
That's awesome and I've added it to my toolchain. But I can't help but think that this is more a sign of how wart-filled Bash really is.

Perhaps it's time for a new shell language that is less arcane, with fewer gotchas and simply less bug potential?
If you are starting with a JavaScript framework in 2017
From everything I read last year... as long as someone has write access to a shared network resource, your network is vulnerable.

I read about ways to detect it early with FSRM, but never tried it:

https://chrisreinking.com/stop-cryptolocker-from-hitting-win...

Experts, chime in? What is out there in 2017 (paid or not paid) as a way to protect network drives from ransomware?
Seems like the FDA should certify on software tests and not software versions.
CircleCI uses ClojureScript and Om for their front-end (and I think Clojure on the back-end too, though I don't have details).
Why did you ever need a Mac for Python and what's so different now? macOS comes with Python built-in but in terms of IDE's there's PyCharm for macOS and PyCharm for Windows and they're both just as effective. You just install them. Code.
There's no such thing as "stock Android" from an update distribution view. Each Android release, currently, has to be custom-fitted to each given hardware model. That is the problem being solved here, and it's not the OEM's fault, it's the architectural design of Android itself, which is changing.
I do not believe that attacks of this scale or coordination are undertaken by private actors. This is warfare; it just isn't kinetic yet.
My points are: 1. To go completely off grid, compared to 80% off, takes many more batteries, and is therefore inefficient.

2. Using those batteries a lot every night wears them out more.

3. There are many alternatives to fossil fuels at night, wind, tidal, solar salt heating, nuclear, biofuels. Whether it's better to share or store would depend on many factors.

a) What power sources are used on your grid
b) What the demand is at each point in the day
c) The transmission efficiency vs the battery conversion efficiency
d) The resource cost of the batteries
> We can move the goalposts all we want

I wasn't aware I did that.

> but those sorts of cars are imminent for at least early adopters

without steering wheels? Dear God I hope not.

I use driving assistants in my car, but I'm painfully aware of their limitations. These days we absolutely still need a steering wheel. In my car for mundane situations, in Elon's miracle machines maybe only to park in an utterly unmarked field at a festival or whatever.
Edit: Botnet stats and spread (switch to 24H to see full picture): https://intel.malwaretech.com/botnet/wcrypt

Live map: https://intel.malwaretech.com/WannaCrypt.html

Relevant MS security bulletin: https://technet.microsoft.com/en-us/library/security/ms17-01...

Edit: Analysis from Kaspersky Lab: https://securelist.com/blog/incidents/78351/wannacry-ransomw...
Moderate here. I'm confused about how conservatives are the ones "bringing violence into the mix", given how keen Progressives are of the template, "[your speech] is LITERALLY VIOLENCE!".

Further, I hope you can understand the difference between supporting Milo's right to free speech and supporting the content of Milo's speech.

> Ann Coulter is the same way, and the sheer craziness of saying a woman on the New York Times best seller list, on talk shows everyday, somehow is having her right to free speech stopped by not being able to give a lecture on campus at the most crazy liberal college in the nation.

I don't know anything about this, but based on your description, I'm inclined to agree with Ann Coulter. I can imagine the tantrum that social progressives would throw if the political roles were reversed (though I don't think conservatives would be unwavering in their support for free speech in such a reversal).

> You believe in free speech, so long as it's your free speech and don't pretend otherwise.

This is probably true of most people. 5 years ago, liberals were championing free speech, throwing blasphemy days with the deliberate purpose of provoking religious groups just so they could flex their free speech muscles. The important thing, I think, is that the balance of power is relatively preserved, so each group has a fighting chance at its own free speech.
It justifies security updates for all operating systems. It does not justify the installation of spyware or changes to the user interface.
But the hospital management shouldn't be plugging them onto the same network where end-users have access, no?
Seems like if you find yourself spending a lot of time developing a "betting system," you may as well become a bookmaker. The bookies are the only gamblers making consistent money, since they get to set the odds, not just pick which ones are "good" for them. And after all, if you can't beat 'em....
The Next Hot Housing Market: Starter Homes
Incitement to violence, specifically saying stuff like "kill all X, tomorrow, and at this location" should and IS already illegal.

We don't need hate speech to cover that. That's just called incitement to violence.
Yeah, repeat and new customers buying your products because you support them and having existing customers recommended them to their friends and family.
Ffffound – A few words for the nearly departed
Yep. Especially after they added WSL to win 10. I've primarily used a 3 year old macbook for development at home. But my employer hands out win10 laptops for day to day work. Now with WSL, I don't really miss the mac much. Most likely will hold off on buying a new macbook and just go with something like XPS 13 with win10 in the next year or two.
There's a Massive Ransomware Attack Spreading Globally Right Now
I've read this twice. The writing isn't spectacular, but it's fun to see a future like this fleshed out.
Nope, they're a real publisher with editors and everything. At one point they did vanity press runs, years ago, but I think they've stopped.
> I will also be shadowbanned for violating the SV orthodoxy

I'm sure you didn't mean it this way, but consider what morons we'd be if that were true. We don't ban people for such a thing, or know (or care) what it is.

I've restored your vouching privileges, but you probably overdid it at some point. Also, please try to keep the meta-commentary to a minimum? The reason we don't like people saying "@throwaway993 you are shadowbanned" is because of what it does to signal/noise ratio—that's one reason we created vouching in the first place. Meta is like styrofoam packing nuggets, if they grew like the Ghostbusters marshmallow.
Embarrassingly weak article. How many bets were played for the 200%? The models are just ad hoc. I was hoping for some kind of bayesian or markov model with tons of priors and a network of GPU's crunching the numbers. I learned nothing form the article except that you should listen to your wife -- my wife already tells me that.
It's usually a bad idea, and often you have no choice because of library design.
I think you are grossly understating the difficulty of penetrating actual defenses.

Once a vulnerability is used it is likely to be patched. A group that cannot be coerced to do something for you will close vulnerabilities as it learns of them because they are liabilities.

Also, moving away from microsoft will likely lead to the end of software monoculture. You need to research those vulnerabilities for each target. Oh, and it it would be much more than a fewer hours of research.
It has an ethernet port, someone will plug an ethernet cable into it. The problem is not so much that the users are idiots, the problem is that people get distracted some of the time and make mistakes some of the time.

And yes, surely they should have super limited network features. The important word is "should."
Malware, described in leaked NSA documents, cripples computers worldwide
The Story of the 3DO Console
Interesting to see that GUI essentials have not changed that much.
I have a trip to Spain coming up soon, thanks!
Like I said in my original comment, even if the people are great, they are usually doing a very boring repetitive job. And even if they aren't a "bump on a log," many employers these days honestly want them to be. (liability, efficiency) They really want a robot that is cheaper, not a person. There are so many rules about what an employee can and should do now, especially for lower level jobs. What they can say, how they can say it, what abilities they have to resolve customer problems, if they should interact with the customers at all, etc.

I honestly think the whole demise of customer service is the result of this. People feel in a double bind because they aren't allowed and aren't supposed to help customers. Or if they can, they aren't rewarded for it and take a greater risk by doing it. People can do much greater things, be more helpful, be more friendly, and generally add value - if their employer would allow and reward it. But most are just looking at profit, and speed from entry to exit, and a lot of customers are too.
How to Make Money with Infographics
I'm a former Big Four auditor, on the financial side, but I worked pretty closely with our tech folks and I'm now in the tech industry. SOx really does have very strict internal control requirements on financial data and how and where it can pass between systems and people, whether technological systems or physical ones. I've worked with clients who used strict password rotation to fit the law, as well as with clients who didn't do this. As long as the policies are clearly spelled out, do not allow those who are no longer supposed to have access to have access, and are consistent across the organization, it's all good. For example, one company I worked with changed passwords to one system only when someone rolled off the team working on it. That happened infrequently, but more than once a year. The policy was clear, written, and consistent, so it fit the internal control criteria.

Really, we'd need to find what are called 'material weaknesses' or 'significant deficiencies' to make us really stop and consider writing up a finding that would be published. 'Material weaknesses' are considered worse, and would likely lead to the possibility of a material misstatement in the financial statements of the firm. Deficiencies are a step below that. If the firm corrects them, we're okay for the most part, unless the weakness was terrible.
This is a fantastic refutation of the idea that text is best. You have to read the whole thing to figure out where to tap. Nicely done!
Clicks are for phishing and trojans, i.e. human vulnerabilities. This is due to an operating system bug, which is a technical vulnerability.

If you can get the right network packets to an unpatched machine, you can infect that machine.
I don't think most iPhone users DO know what version they have. But they update pretty fast.

Apple pushes users to update with notifications on the device. They add things people really want (there was an article last year or so that the releases with new Emoji get adopted much faster, iOS stickers caused a big push). Plus you get the network effect of someone telling their friends there is a new version. If none of that works, apps requiring new versions of the OS push some people.

Android manufactures may not make new versions for old phones, may not push the notifications about them, and there are lots more kinds of Android phones so just because Jim got the new version doesn't mean Barb can because she has a different OEM. Plus because so many Android devices ship with old software apps are often designed to run on very old releases so they wouldn't push people to update nearly as much (and that's if they can update, you can't be sure a new version is even available for your customers).

This problem is a LOT harder the way the Android ecosystem is setup.
I remember seeing this kite-like concept in a magazine a long time ago: http://www.skysails.info/english/
Isn't one of the premises of modern engineering that you work within a regulatory framework to ensure safety for the public?

It seems to me that most software development is not engineering in this sense and I assume that we will get to that stage at some point, but right now things like public institutions being hacked, because their software security was not up to par, will happen.
It's kinda ironic that my comment gets down voted, isn't it?
Either you agree with the Liberal views on HN or you're a troll.
It's also incredible that you still don't comprehend that Google cannot update an OS created by another OEM. When you allow an OEM to create their own OS only they can update it. Your Windows comparison is also flawed because OEM's do not build the OS - they're given the binaries from Microsoft and cannot change them.
If we were to take a more charitable interpretation of them then mine, then I would say that the American experiment failed utterly.

"A number of citizens, whether amounting to a minority or majority of the whole, who are united and actuated by some common impulse of passion, or of interest, adverse to the rights of other citizens, or to the permanent and aggregate interests of the community" is a picture-perfect description of the American political landscape, despite all the hubbub about states rights, direct democracy, and how your representatives know best.
Drinking more water associated with numerous dietary benefits, study finds
Yes. The idea is to vouch for good comments that shouldn't be dead. If people vouch for bad comments that should be dead (i.e. that violate the HN guidelines), eventually their vouches won't count. We err on the side of being generous about this, since obviously it's a matter of interpretation. But lines do need to be drawn.

In practice the community is surprisingly good at it. Of all the experiments we've tried, this one exceeded expectations the most, and we believe it has affected HN for the better in both obvious and subtle ways.
Not really, you just have to work for completely inept management that stymies or stonewalls your every effort to improve the situation.
I can see how the value of an IDE is much smaller in a dynamic language than a statically typed one. In the statically typed language compiler output, test output source symbols etc are links to other things in the project. That's hard to accomplish in an editor + shell setup (or requires a huge config effort that effectively makes the editor an IDE). I would use vscode or similar if I did JS or Python, but for C# or Java you'd have to pry the IDE from my cold dead hands :)
I disabled SMBv1 on the server. Good enough to protect our network share? Or is there some reason/benefit to disabling SMBv1 on client machines too?

(I ran the simple powershell command on server: https://support.microsoft.com/en-us/help/2696547/how-to-enab...)
But it has already been proven to work, in Tokyo and Hong Kong and Shanghai and London and Paris and countless other cities, countless other times.
All good things come to an end:

"February 2017 - Politicians discuss proposals to replace the Linux-based OS used across the council with a Windows 10-based client.[42]"
> 99% of movies today are crap, so there's not much to talk about

So it's true now, then.

> If you've lost sight of the value of basic human interaction with anyone not baked into your caste, I pity you, even if you are in the majority.

This seems a bit extreme. I assume you don't use ATMs, auto-bill pay, or automatic check deposit then either? Because you clearly value human interaction at all possible avenues?

Perhaps people's "need" for interaction as they go about their day is somewhere in the middle.
The bookies in aggregate get paid, but not all of them have the same customer base and so some lose. I knew a bookie who lost nearly $100,000 on the world series - everybody knew that the White Socks would win that year and they did (2005 against the Astros). Thus every one of his customers bet on the white socks. Now someplace in the world was a different bookie (probably one living in Huston) who made big money because his customers bet on the Astros who lost. In Vegas they set the odds based on the overall nationwide averages and bookies on average won but not all.

If you are a bookie you have to have enough saved up for a few of these events. Overall you will win, but sometimes your balance of customers is such that you cannot beat the spread. He knew going in that he would lose money, but you cannot refuse when someone wants to make a bet as that person will find a different bookie for the next time and not come back to you. (I suspect he was taking illegal bets so the fact that he paid up added to his reputation of someone you can trust in the underground economy)
When you say "blood", do you mean a red substance? I'm asking because insects don't have blood- they have haemolymph which doesn't contain hemoglobin and is not coloured red (it's actually bluish). If the colour of the substance on your car was red, it was probably human blood from mosquitoes.

Those little flying bastards are plentiful in southern Europe and they can get real fat on human blood and make a surprisingly bloody mess when splatted. They would definitely leave a mark on a white car if it hit them.
Magic Leap Could Be Looking at an $8B Valuation
Yes, the last part of my comment was a nod to that old chestnut.
Hi, looking forward to joining the event!

2017 IMPORTANT DATES
REGISTRATION.......APR 17

I believe this date has changed since it's open at the moment. What's the actual limit for registrations?
The key (reproducing_organ) only has 2 (or 3) values. If you want a composite key (reproducing_organ, sexual_preference, sexual_identification), you would get (at most) 3 * 3 * 2 (?) possible values. If you want to expand that key to include X because PC reasons, I'm not listening anymore.
50 days down, how much are you using your Medium membership?
It's been ~50 days since Medium membership was launched and several users signed up to become "Founding Members". If you signed up, how much are you utilizing / reading the Medium exclusives now?
I think we should have armed police, along with anyone else that's sane. All for the second amendment. Just in the cyber world, it just feels irresponsible because of the unlimited nature the internet has. Also probably the fact, I read posts that get popular on HN from time to time where the researcher does a responsible disclosure is probably influencing that feeling too.

I guess what's standard in the "tech world", is probably totally different in the intelligence community.

Like companies can't protect themselves, if there's no updates. There's basically no defense. Same reason I'm not a fan of nuclear power. Once you make the waste, it's hard to get rid of.
I wasn't under the impression we were separating bootcamp from self-taught.

I took them both to mean "no formal schooling" and "self-taught". In my brief experience with I.T. training; some knowledge already had to be assumed.
All the development we do ourselves is on .Net core, Java or Python so as far as development goes we're pretty much all open source. We even share a few systems with other municipalities through our official github.

When we buy systems open source isn't as important to us as ownership, but it's still relatively important.

Operations is a different story though. As mentioned we use Jboss, and we run it on CentOS. We tried hiring a sysadmin to run our Linux farm, but we've yet to find someone qualified.

So all our Linux servers are supported remotely by a consultant company.

You're correct of course. If the political will is there we could change it. It would be a nearly impossible task, requiring us to rebuild our entire infrastructure from scratch, retraining or replacing 50 staff members and rescooling 7000 as well as rebuilding around 200 systems, of which 50 are major and would have a replacement cost exceeding our entire yearly budget each.

If the government decided to take the country down that road, it would be a different and much more manageable story, and they kind of have. Open source is a priority in the official strategy of digitization, at least in Denmark.

But it'll take a looong time to implement, and we won't be starting with Microsoft because no one really wants to replace Microsoft with uncertainty.
I think this is an excellent example that we can all reference the next time someone says that governments should be allowed to have backdoors to encryption etc.

This shows that no agency is immune from leaks and when these tools fall into the wrong hands the results are truly catastrophic.
He has backups of his data.

I personally use linux and my github repo is here[1] where i have a bunch of encryption related projects(zuluCrypt,SiriKali and lxqt_wallet). The last windows computer i used was windows xp.

I dont want to move him to linux because i am not always around and he can ask other people for help when he is on windows.

[1] https://github.com/mhogomchungu
Set the income tax rate to 100 %, give an equal share of that money to every citizen. That should check all three boxes, shouldn't it?
All OnePlus Devices Are Vulnerable to Downgrade Attacks