skysight-inc/HackerNews huggingface dataset:
It's amazing that HN (as a system) and its community actively discourage those kinds of comments. The ratio of thoughtful, insightful, and useful articles and comments (signal) to junk, spam, and trolling (noise) is outstanding. I keep coming back because of it.
>I might be a bit biased working in offensive security, but 90% of the PowerShell I see in use is malicious.

Yes you are, any competent Windows admin that needs to do things will probably be using PowerShell to do said things.
"There's a lot of jobs that add little to no value."

Creating wealth vs transferring wealth.

I've tried to choose jobs that have some value add, some win/win angle. Alas, it hasn't been that easy.
There are 4+N keys involved.

- The attacker's RSA private key (UNKNOWN)
- The attacker's RSA public key (KNOWN)
- The local device's RSA private key (KNOWN, but then poorly wiped)
- This is encrypted with the attacker's RSA public key
- The local device's RSA public key (KNOWN)
- A separate AES key for each file
- These are encrypted with the local device's RSA public key

How decryption should work: Get the local device's RSA private key from the attacker (EDIT: this is not the attacker's RSA private key, it's the local one), then you can decrypt the AES key for each file.
Do you need "experience" for EVERYTHING? Does that mean you can't say a dime about the sun rising tomorrow because you have no experience of the sun rising tomorrow?
Off-topic: maybe it's time to abandon ship? A company relying on programmers / devops cheaping out on good workstations is a serious red flag.
It seems pretty simple. I do not check work email when I'm not at work.
While we're on the topic: https://github.com/mholt/caddy/issues/1680
The premise that NGOs need tech more than they need money is shaky at best.
Because long experience tells me that it is inherently hard to see and measure the disasters you prevented. This makes it incredibly hard to feel like you are accomplishing anything and harder still to convince other people you are actually adding value.

Y2K was supposed to be a global meltdown. There were people who prepped for that like a coming apocalypse. It was prevented and many people remember it as "Ha! Can you believe those fools ever believed we were in real danger?!"

No one gets up today and goes "Oh, thank god they fixed that and I am not living in the Y2K post apocalypse! My ATM still works and life goes on!"

I was molested for 2.5 years as a child in part because my mother stopped being a homemaker and began doing paid work outside the house. The direct cause and effect connection is extremely clear to me not only due to first hand experience but because of extensive reading on the topic. This is part of why I was a full time homemaker until my sons were 19 and 16. No one ever molested them. There was damn little opportunity for anyone to get them alone. I made sure of it.

I get straight up told I just got lucky and do not actually know shit all about preventing bad things from happening. When I try to share such information to help other people I basically get told "Shit happens. You can't stop it. Quit blaming the victims."
At some point we have to decide whether the purpose of society is to promote the general welfare of all citizens or just to give capitalists the opportunity to make as much money as they can. I don't see anything wrong with worker protections. The capitalists have plenty of protections like patents and copyrights.
Very good point, and considering China is basically the manufacturing arm of almost every western country, any list "ranking" countries is useless propaganda.

Well, not useless I guess, considering it is propaganda.
I think it's more common among the very wealthy. When part of the appeal is flaunting your wealth, renting is probably not the way to go.

I think a 1000k 1 bed condo is comparable to a 200k car in that it isn't just a place to stay or a way to get from A to B.
Burying our jobs, that's obvious.

Culture change can happen by various means. Government laws that create unemployment and reduce wages are the worst.
> Unfortunately Microsoft has let the genie out of the bottle

PowerShell has no more rights or power than the user it runs as. Anything you can do in PowerShell you could also do via WMI, Win32 API calls, etc.
Thank you for the comments, couldn't find any newer papers in the subject that advanced the methods.

Yes, it was VL1.
Considering that we're talking about work outside of a shared office in this context, I don't think this is relevant or a good-faith response to the point at hand. We're not defining "remote" as "more than one location", we're defining it as, "people who don't work in one of the locations."
Yeah, the sandboxing helps a lot. I mean look at iOS - super popular, huge target for malware, but it hardly ever gets hacked.
Serverless Webshop – Built with GraphQL, Stripe, Mailgun, and Serverless
How my research in AI put my dad out of a job
Of course. We're all complicit. There is no ethical consumption under capitalism. You've got blood on your hands. Deal with it.
That makes sense and all, but the definition of accredited investor is tied to net worth and not knowledge. Which means that maybe you can't scam poor people, but there are plenty of gullible rich people with net worth over the $2 million in liquid assets or whatever it is these days.

Maybe treat being an accredited investor like a driver license and not tie it to your net worth?
HN and Slashdot for industry news

NY times for regular news (worth paying for IMHO)

Board Game Geek for a hobby

Crunchy Roll for entertainment

NO so called "social" media sites

(edited for formatting)
Not a huge surprise. A fairly ubiquitous, already installed interpreter that has routines to do system level stuff. Same reason PHP scripts are popularly uploaded by similar groups on Unix machines.
I'm sure Levandowski would gladly lie under that bus in order to keep his proceeds from the sale. If he tried to get revenge those proceeds might very well be in jeopardy.
This article is both wrong on many points and awfully biased.

>Will this law help maintain work-life balance or is it an assault on freedom?

...The actual assault on freedom is employers sending mails after work hours and expecting you to read them on your free time, considering the uneven relationship between employer and employee. If anything, it levels the playing field.

It then goes on as if a definition of working hours was enshrined in the law, and how it can prevent flexible working hours. No. If your working hours are 3AM to 12AM, then mails are okay at this time. If you have spotty days with an hour here and an hour there, those will be your working hours If you're a "cadre", then your working hours are basically anything that is not your rest time (a consecutive 11 hours after you left work).
And, like said, there are no penalties defined. Do you know why? Because a) companies were already being condemned for sanctioning their employees for not checking mails outside of working hours and b) It doesn't forbid the employees to check their mail after work, it allows them not to. You want to check those messages at 3AM ? Is it of your own volition? Are you not being pressured by your employer because <x> is needed quickly? Sure, go ahead, you're free to do it. Even if you are being pressured, you are free to do it. However, if you sue, your employer will be found guilty of breaking this law.

>For them to switch off at a particular time of the day may not be practically feasible.

No defined hours in the law aside from your own.

>what about the ambitious workers among us who seek to climb the corporate ladder as quickly as possible?

A) You're a bit of an idiot if you think this will ever be good for you

B) Good thing, you're still free to do it.

>For them, perhaps, overtime hours could be an opportunity to learn faster.

Overtime hours means that you're still working. And being paid to. Why would you not be able to check those _work_ mails when you're _working_ ?

>But despite these examples, most remain skeptical of such a law being passed in other countries, especially the U.S., where long workweeks and foregone vacation time are the norm

On the other hand, american working hours have been a running gag for every european country so... Maybe eventually the problem does not lay in Europe.

Ultimately, the text of this "law" is a mere few lines (https://www.legifrance.gouv.fr/affichTexteArticle.do;jsessio...), and is only part of a massive change. There's much more in the full text that destroys things that people fought and died for.
You can see my entire thinking outlined in my reddit thread.
https://www.reddit.com/r/PowerShell/comments/5f4r10/web_scra...

I miss-remembered the number of sited scraped but it's all the same.
There is no parallelism (I really really am a complete non-techie) but actually in this case I didn't want to hammer away as the sites were all under the same domain and I imagine there might be trouble (which I why I also played it very safe and added the pause).

I know there are better and smarter ways of doing things and I did further modifications and experiments after my thread, but in any case, I had a task and was able to quickly complete it in PowerShell starting from absolute 0.
ChatOps with PowerShell and Errbot (PSConfEU 2017)
PM on PowerShell here: if you have any of those small C# apps handy, I'd love to take a look at them to see what you're doing that's difficult in PowerShell.

Similarly, we're trying to make some improvements to debugging right now with PowerShell 6.0 [1] (the one that's cross-plat and built on .NET Core), and I'm very interested in hearing your feedback on how we can do a better job there.

Even if it's "fix your docs" or "too hard to learn", that's great info, especially coming from a C# guru.

[1]: https://github.com/powershell/powershell/issues?utf8=%E2%9C%...
I wish I could say "I'll definitely try that!", but (prepare for a slight off-tangent) I suffered through enough stress and burnout cycles in my life -- several times! -- that I can't even justify a double rate for my newly delivered suffering in fresh new customer office. Or so I think. Funny things happen to human morals and sentiments when a lot of money is involved. Maybe I should try it once and see how it goes, actually.

I am looking forward to start working with N customers on contract / consulting base but the transition is really hard. People keep treating me like a coding monkey whom they have to swindle for the lowest possible salary. Guess I have to change my LinkedIn profile dramatically, and make my own website as a start.

Bottom-line / on-topic: if you're willing to share lessons learned from your transition then you should know that you'd have a passionate and intentive listener (me).
I'm probably going to show my ignorance of RNGs here, but if we know the machine, the algorithm used, and the time the key was generated, doesnt that limit the number of possible choices? Could we check when the file was encrypted and brute force the possible keys?
I think this is just a observation that correlates with an increase in the usability of powershell. I have been very impressed with recent releases, they have a lot of functionality built in and the ecosystem is _finally_ starting to mature with NuGet and Chocolatey.
Right, but this is because SPARK is (intentionally) limited. For example, AFAIK, you can't dynamically allocate memory in SPARK. If you write Java code that is as simple as SPARK code, it would also be automatically verified (after all, the solvers are the same). Java also has automated verification that does separation logic, and works well with dynamic memory (Facebook's Infer).

Languages that truly admit full automatic verification (and are also limited) -- including rich global correctness properties -- are synchronous languages for safety-critical realtime, like SCADE. BTW, SPARK contracts are not so rich. There are many useful properties that you can't express.
Exactly, same as me. It's a very effective way of setting boundaries, and if my employer has a problem with it I know the place is not for me.
And whilst PE might be ostensibly lower risk than VC, PE firms' ability to not lose money depends entirely on their ability to actively restructure companies and find a buyer, two things retail investors have no chance whatsoever to do
Can you please be in my base teaching me how to refactor my code?
Sure. It doesn't have to be overseas though. A SV startup switching to work from home could save money by hiring remote developers from cheaper places in the US.
Anyone who has read the injunction document from Judge Alsop already knows this was going to happen. Judge Alsop practically held Uber's hand through how it would go. He stated that Uber must use its full authority to compel him to turn over the files, to include threat of termination.
PowerShell is a little bit more difficult then something like Python or a well equipped Bash shell, but the fact that you can do it shows how much progress it has made
I think the problem is that lots of companies/managers hire filler. People to run inference or take on the most tedious work. Or just show some semblance of progress. These people need hand holding or constant direction. The worst managers are the ones that don't see this dynamic so everyone gets treated like they need to be micro-managed. I don't think anyone but the unicorns can afford to have a standard where everyone is a rockstar. So companies/managers that can't hire to that standard feel like they can't allow things like WFH because they don't know how or don't want to provide different perks for different people. They know that the ones that do need hand holding will be upset. We already provide disparate compensation in the form of salary but I think the hidden/taboo nature of that makes it more tolerable (at least until it leaks).
WISE FOLDER HIDER PRO 4.17 DOWNLOAD FREE WITH FULL VERSION 2017
The main problem for investors is the principal-agent problem - simply that the managers of the company will use the funds invested into it for their own advantage instead of advancing the company. There are degrees of this - from blatant fraud to slightly overpaying themselves or making deals with their friends instead of best offerers. It is impossible to entirely stop this - but there are ways to diminish the impact.

1. Become involved in the company - this can work only if you have a big stake in the company (with dispersed ownership you get collective action problems) and the company is a big stake of your activities (you cannot get involved much in many companies).

2. Lend not buy equity (and require collateral etc).

3. The laws for public offerings - with all that red tape involved: the strict accounting, governance rules, information disclosure rules, etc.

4. Investing in startups. This is a small special case where investing can be something between becoming fully involved in the company operations and being a small shareholder of a public company. This relies on the theory that startups goal is to grow a 100 times or die - so small continues extractions by the executives are ruled out.

The crowdfunding initiatives, try to reduce the red tape involved in a public offering of equity - but they don't even try to address the problem that the bureaucracy addresses in the first place.
Not exactly for a five year old, but see the Wikipedia article: https://en.wikipedia.org/wiki/Topological_quantum_computer#T...
Thank you for pointing out the typo. Unlike Facebook, it is not possible to grant individual permission to Twitter App in application console. There are very few options available to manage Twitter App permissions. But we don't post or follow anyone on behalf of users without their prior consent. Many other websites like Product Hunt have the similar Twitter permissions list (https://www.producthunt.com/auth/twitter).

If you still do not feel comfortable with Twitter login, you can login via Facebook which has minimal permissions.

At the moment, it is not possible to accept startup submissions via email or a form. It would make things quite hard to manage for us. We want to create an active community and not just merely a startup directory where you list your startup for a backlink and then forget about it. Startup listing is just a part of our future goals at StartupBase. There will be many more things.
There are no federal or criminal charges at all. This is all civil.
I mean... maybe. Assuming that he actually has damning evidence against Kalanick, and that, even presuming that Uber did know about the theft, they weren't circumspect about admitting it.

That seems like a pretty narrow scenario. You have to believe that:

a. Levandowski feels betrayed by Uber (I don't think he has cause to)

b. Uber did in fact know about the theft when they hired Levandowski.

c. Kalanick straightforwardly said something about the theft that was so damning that it makes for a good case a year later, or provided some kind of documentary evidence to Levandowski, rather than wink-wink nudge-nudging.

d. A US Attorney is interested in offering this kind of deal (that is, giving one white-collar criminal a good deal in order to go after... a somewhat richer and more famous white-collar criminal).
Unfortunately, when a manager is pressuring you to do so, not all of us have the fortitude to straight up say no.

EDIT: to be clear, I do not count myself amongst those unable to say no. But for those who can't, thankfully we have society behind to help.
It's amazing to me not that it started that way, but has mostly remained that way.

You do see some political agendas revealed here from time to time, and there are certainly a few celebrity posters who get upvoted just based on who they are not always what they are saying. But by and large it's a very flame/troll-free experience.

Kudos to dang and other mods who step in when the usual downvote/flag mechanisms aren't working.
9 Free Photoshop Coffee Stain Brushes
Lucky you. My work requires I check my work email every single day. Even if I'm on vacation.
This doesn't appear to be how WannaCry works: as ridiculous as it sounds, it looks like WannaCry actually generates a private key on the infected machine. If you look in search_primes.cpp (from line 251) in the linked repo, you'll see that the tool is literally searching the memory for prime numbers that divide the public modulus.

EDIT: CiPHPerCoder appears to have figured how the key management works.
Agree - I find the thing incomprehensible without some sort of intellisense running (which I abhor I tell you abhor!) seems arcane and weird to me and much prefer c# but "WHY ARE ATTACKERS USING POWERSHELL?" - simply because its already there probably? And cmdlets are a bit like nmap scripts - if you can read lua you can probably spitball them together. I'm not sure that ps is amazingly more powerful - just all we before was .bat from hell and debug sadly gone now...
Malware via pypi
Did you actually read the article? They are already thinking about applying it to humans. This kind of thing is almost always first tried in mice or other animals.

Also, the dwindling of our population is mostly due to societal changes like people wanting fewer children on average, or not finding a partner. Infertility is not the major problem, if you even want to call it a problem at society level (personally, it can very well be, of course).
I wonder how long before some left leaning NGOs build their own zero-rated Basics-clone which then the GOP will collectively clutch pearls in horror. It'll be amusing to see them try to make a law that's patently dumb that even conservative judges will strike it down.
If someone were to pay up and receive the attacker's private key, what's to stop them from distributing it to others?
I have written Scala code and kotlin code, and it is much more legible the kotlin code. When I tried also there were problems calling Scala code from Java (I think there were problems with the type inference system that was giving me non-sense errors). Scala adds like 500kb to an Android app, kotlin only few kb. The compilation times are much faster with kotlin, the tooling support is also better. It is easier to become more productive with kotlin than with Scala.

> Scala already dropped like procedure syntax

Do you mean this?:
https://groups.google.com/forum/#!topic/scala-internals/q1YX...

Kotlin does not do that.

> some features like null handling or coroutines in Kotlin are implemented as language features

null handling yes, and it is very well done. Coroutines so so, they added a couple of keywords to the language and most of the implementation is in the library. You can create your own coroutines: https://kotlinlang.org/docs/reference/coroutines.html

Go do coroutines quite good and they have also implemented in the language, why is it bad they use a couple of keywords for those special cases?
It's illegal, at least in the United States. Why? Because venture capital is considered too risky to be marketed as a public security. There are VC ETFs sold on the Hong Kong market.
Disagree strongly.

By killing Netscape he set back the computer industry by a decade or more. If Gates hadn't used anti-competitive tactics, and he had just accepted, say, a 60% share for Windows, we would have reached where we are much quicker.

We benefit immensely from the presence today of multiple strong operating systems, Windows, Android, iOS, MacOS, Linux, and Chrome are all great offerings that force the other players to be better.

Windows languished during its monopoly decade, and we were all stuck with it. Why did it even take until iPhone 3G for there to be a widespread online software store? Because Microsoft profited from Office being the biggest, most profitable box on a shelf with a bunch of other boxes, and having that boxed software be the only place you could direct your attention on a PC. Steve Jobs could start an online software store because Apple was barely selling any software. They had nothing to lose. Gates had the world to lose.

Look at where peoples' attention goes today. That's what Netscape was promising. Now imagine if Gates had let that happen in 1995.

And Word and Excel were clones of existing software. Microsoft had about as much positive impact on the tech industry as Baidu is having now. Baidu probably has more users than Gates ever had.
Huh. That's an interesting definition of "vacation".
This is the main repo: https://github.com/scalacenter/scastie. It's not at silly question at all.
The vault’s managers are now waiting to see if the extreme heat of this winter was a one-off or will be repeated or even exceeded as climate change heats the planet.

I really want to believe that this is an example of poor communication by the journalist as opposed to clueless passivity by administrators. Unfortunately, I suspect it's accurate.