skysight-inc/HackerNews huggingface dataset:
> Just because systems exist today that are bringing to your attention every single problem known to man doesn't mean you need to be involved in the solutions that are above your paygrade.

Ironically, these are the same systems that are causing the problem in the first place. You would put the last nail in the coffin of civic engagement?

At which paygrade am I allowed to cast my ballot? Voice my concerns? Is my own privacy "above my paygrade"?
Jest is pretty neat: https://facebook.github.io/jest/
> Imagine a world where people don't have property rights. In this world, you cannot own a house, and all your belongings are kept in a storage facility owned by a few corporations. And in this world, walking into any store or theater implies that you disclose all your personal information, places you've been, other things you've bought to the business owners. You are tracked 24/7, your belongings are stolen from storage facilities, and you can't do anything about it.

Since it's done to curb terrorism and protect children from predators, isn't this what most people want? I mean, I personally would rather shoot myself than live like that, but I'm not most people. I seem to recall that the UK's internet censorship bill (or whatever exactly it was, someone correct me please) has majority voter support.
History of UtiLisp Hacking (1990) [pdf]
It's itself yet another statistics!
It is a pre-configured fiddle which exploits a vulnerability in Wordpress. The readme contains some instructions how it works but it is plug and play.
The update will be deployed today or tomorrow in the updaters.
Nowadays all people can use social media sites like facebook, twitter, etc. Manny hacking tricks are used purpose of hacking Facebook accounts. With the help of Kali Linux you can easily hack any facebook account, so in this article, you can see some steps of it.
I remember an older guy that started wearing his shirt outside the pants just like us two young employees. His fellow employees used to snicker at him and calling him young again and such. Well, he must be laughing now, noone uses shirts any more :-)
It's really interesting to see how many oaverseas companies own land in London and end up being in British Virgin Islands, Isle of Man, Gibraltar and other tax havens.
A Procedural Landscape Experiment
Discussing what 0.999999 should be [pdf]
Are the interviews for software engineering jobs tough?
Clearly VLC should be rewritten in Rust.
My first thought was: why only 70%?

This may be a case where the savings (i.e. money from selling data in return for a big pile of cash) are actually passed on to the customer - e.g. transaction costs are lower for Visa/Mastercard for merchants, which is why they sometimes don't accept Amex and Discover.

It would be interesting to see if Visa and Mastercard have some clause which prevents Google from buying data from AMEX and Discover (competitive advantage for them because then Amex and Discover's transaction costs aren't subsidized) in return for agreeing to part with their data. Said another way, what's preventing Google from also getting data from Amex or Discover? Its not as if Google is going to say no.
"Land is a monopoly". What?
Why is the world suffering from a penicillin shortage?
This was absolutely the most worrying part for me. How in the hell did Google get access to that much?
I don't think your point really applies here since as you can see on Github[1], the project has numerous releases, averaging at a release about every five months. Whether that's often or rarely is up for interpretation, but I'd hardly say the project is standing still.

[1] https://github.com/FascinatedBox/lily/releases
Do people living in slums who are literally shitting in the street really have the political clout to participate in NIMBYism?
Holy crap, that code doesn't look good. I predict we will see more exploits for this project.

Maybe we should stop random people from contributing to complex C projects?
The endless loop of terror victims: Lazy journalism lets ISIS run the newsroom
You have to be a little bit more specific.
You can for example prevent "runtime" bugs due to combining layers/vectors/matrixes of the wrong dimensions.
Put money toward an organization that will hire full-time UX designers and engineers who can make open-source encryption usable by the masses.

Why Johnny
Why Johnny Still, Still can't encypt [2015] https://arxiv.org/abs/1510.08555
I don't believe AlphaGo's MCTS, policy NN, or value NN support your last paragraph. Could you please explain what it is about Somehow construction that supports strategic categories with associated probabilities or why only tactical decisions are being made? I'm a bit confused by your last statement actually. Are you saying AlphaGo decides how much to emphasize certain strategic goals or that it doesn't (only makes tactical decisions)?
The Amazing Disruption in Business Intelligence
A random Midwest non-software company with a line of business legacy app that they want to keep limping along is unlikely to even know how to answer "do you do remote?"

They have a business problem they need solved, and that almost surely means "come in, walk around, talk to people, and figure it out".
Here in Scandinavia, it's very rare to wear shoes inside. That's probably because most of the year the weather requires shoes that aren't practical inside and you want to leave your filthy wet shoes at the door and not bring the mess inside. Some people wear some kind of slippers at the office but mostly it's just socks.

I find wearing shoes for the whole day extremely uncomfortable.

But it's unlikely that you could sue anyone if you step on a tack either.
Corruption creates problems, but whining about it doesn't solve any. This open defecation habit hasn't been born out of corruption. It's been there for ages. Corruption does come in the way of solving the problem, if at all there are any such initiatives.
not necessarily

"HM Land Registry holds records about most property or land sold in England or Wales since 1993"
Economists See Little Magic in Tax Cuts to Promote Growth
While I think Rust would be s good choice, the project could benefit from a rewrite even in the same language.
As usual, the common set of friends we already know since the 80's:

> Fix potential heap buffer overflow

> Fix potential out of bound read

> Fix invalid double increment.
> So you see this today with Mormons, at Mormon businesses

As a Mormon, I thought it might be interesting to point out that to some degree that's actually part of our theology. Basically a dress code that's strict enough that everyone is equal, this de-emphasizing dress and clothing.

In a Mormon temple you're required to wear very simple all white clothing (plain white shirt, tie and pants for
men, plain white dress for women, plain white socks and plain white shoes) - both as a sign of an attempt to be "pure" but also it's noted that everyone dresses exactly the same, causing for less focus on dress and external things.
Really glad you liked it. Hope people will enjoy it.
Not dramatic at all, it is stalking, it is unethical but defining illegal is very complicated and up to the elected bodies.

Powerful entities should not be above the law but in practice they are, no point denying that. I'm sure everyone has an explanation according to taste how come double standards can be the normal.
I'm sure they exist but by far that's the exception and not the norm.
That was my hope when C was just gaining market share outside UNIX, and here we stand now.
You're proving the point: IT guys in suits are from 50 years ago. Of course, if you meat a real old-timer, you respect him, but if you see a 20-something who tries to emulate this style, it just looks ridiculous and out of place.
>I don't know about GNU Emacs, but the original Emacs (in TECO) had a "slow terminal" mode that did minimal updating

Sounds like this is baked into emacs pretty deep: https://www.facebook.com/notes/daniel-colascione/buttery-smo...
Either the author doesn't know England is not Britain or the domain wasn't available. Scotland and Wales are a different country to England
reading the last line with my AC/DC tshirt made me think a bit, and yes, I am a "boss" (well just lead, maybe doesn't count), but at least I have shoes.
IoT Hub to Connect Sensor Devices
If I were advising a close friend or family member on the left side of the curve (but not on the extreme left edge), I'd think along with them to ask what jobs will never be offshored in their lifetime.

Food service, personal services, and trades are my answer. No one in India is going to cut your hair, unclog your sink, rewire your kitchen, paint your walls, re-roof your house, or serve your dinner.
5 Proven Methods to Get and Keep New Customers
Hell exactly. A little taste of it here and there so you know better not to end up there.
Looking at the bug fixes done in VLC, Ada or Modula-2 would be enough, although there are plenty of options actually.

Rust isn't the only alternative to write native code safer than C will ever allow.
I'm sorry to be the party pooper here, but...

Signal was intercepted:

http://heavy.com/tech/2017/03/wikileaks-vault-7-cia-bypasses...

My favorite most depressing take on this by Peter Gutmann - "Crypto won't save you either"

http://regmedia.co.uk/2014/05/16/0955_peter_gutmann.pdf
4 Python libraries for building great command-line user interfaces
> ... turned off github issues on one of his smaller projects. ...
Kkrieger – A 96KB first person shooter
I'm wondering how you think this process works. When you say:

> There are lots of very experienced people and resources allocated to this problem across the world

It sounds like a curing-cancer-style problem where what's needed is some scientific breakthrough for a specific problem... So... Who are these "very experienced people", and what "resources" are allocated, where? Or how far exactly is this "above my paygrade"?

Because this appears to me, fundamentally, a difference of opinion, or maybe just even priorities. If you get enough people to care, just watch how fast policies can change. And while I may have wasted my "career and life experience" on skills that disqualify me from this super-elite circle of "people allowed to care", my sorry excuse for a brain can't think of something more important than public advocacy of these issues, nor can it find fault with what John Oliver is doing.

But, you know.. whatever.
Media may like it for ratings. Sick, I know.
"Iva the Bonerless"
Slightly related to this: where can I find data sanitizers for common file formats (PDF, MP3 and so on)?
https://www.quora.com/Elon-Musk/What-is-it-like-to-work-with...
Sounds good. I actually have one friend who owns a company and I like talking with him about his company and try to advice him.
Everybody's talking about social norms and signalling, but there's still one objective thing about clothing - climate and health. How could a person in a suit survive in 30+ degrees Celsius? I just can't imagining wearing anything else than shorts and T-shirts in the summer that wouldn't give me a heat stroke or some other heat and sweat-related nastiness.
Then I think that reflects badly on our profession if the idea of us dressing like professionals is hard for us to take seriously.

We can take lawyers, accountants and business people in suits seriously. But we're not on their level?

I guess I'd rather look ridiculous and out of place than look the opposite. If this field is so un-respected, maybe I should make an exit plan anyway.
I never prepare and I received offers in maybe 13 out of 16 interviews.
ساحل کارون پوکت با منظره بکر و زیبایش
Glad you liked it! do you have any ideas to make it even better?
They didn't pay their employees for long stretches of time, the last such ending in their almost-bankruptcy.
"random people"? You mean there's some select group we know of that doesn't ever write bugs? (DJB doesn't make a group)
Good idea. Is there such an organization?
Baywatch 2017 Starring Zac Efron and Dwayne Johnson: Critics’ Reviews
Author is right about the gold comparison. Only 10% of the gold produced worldwide is actually used only for its intrinsic value (physical properties in industrial uses). 90% is used "just because it has value" (ie. stored in a vault or used as jewelry[1]). So its intrinsic value is completely insufficient to justify and support its market price which is in fact driven by speculation, not by industrial demand.

[1] Many other shiny, corrosion-resistant, and cheaper materials exist and would make more sense to use for jewelry. But when gold is used over these other materials, it is almost always for the only reason that it is more valuable.
I agree totally. It is only recently that I've taken measures to protect my privacy.
This kinda is the unbuilt documentation, so kinda normal relative links get broken... Please see the documentation here : https://aic-project.github.io/documentation/
The planet will be fine.
Captain401 (YC S15) is hiring a Product Manager to build the modern 401(k)
It's interesting, isn't it? I myself dress business casual even though my workplace is a casual place (jeans, tshirts, shorts, sandals, whatever). It's just more _me_. I don't like how sloppy I look in t-shirts. I don't think t-shirts are sloppy, just on me. So for me it's usually a button-down and some khakis or nice jeans.

My colleague (the other development manager, same age as me - mid 30s) basically has a casual "uniform" - some band t-shirt and jeans. Every day. He even admits that he has 5 shirts and five pairs of jeans that are his work clothes. It works for him.
Google Caffeine Update, Blogging Και Πως Να Ανεβείτε Στη Google
If only running three companies afforded me the ability to be without a computer, phone, or tablet for 24-48h while they are shipped/replaced.

That's called a vacation.

What you describe is simply impractical for a person in my line of work.
Ha, the famous sandboxing remark. I wish it was that simple!

So, let me share some light on the sandboxing for multimedia (I work on VLC).

If you sandbox an application like VLC, in the current way of doing sandboxing, which we've done for macOS, WinRT/UWP, and snaps, you still need a lot of permissions.

Namely:

- you need to be able to open files without user interactions (no file picker), in order to open playlist, MXF or MKV files;

- you need the same if ever you have a database of files (media center oriented);

- you need raw access to /dev/* to play DVD, CD and other optical disk (and the equivalent on Windows);

- you need ioctl on such devices, to pass the MMC for DVD/Bluray;

- you need raw access to /dev/v4l* for your webcams and be able to control them;

- you need access to the GPU stack, which is running in kernel-mode, btw, to output video and get hw acceleration;

- you need access to the audio stack, also in low-level mode;

- you need access to the DSP acceleration (not always the GPU);

- on linux, you have access to x11 for the 3 above features, which is almost root;

- you need access to /etc/ (registry) for proxy informations, fonts configuration and accessibility;

- many OpenGL client libraries need access to the /etc too;

- you need access to the network, as input and output (think remote control);

- you need access to the system settings to disable screensavers, and adjust brightness;

- you need access to mounts to be able to see the insertion of DVD/Bluray/USB/SD cards and such;

- you need to expose an IPC (think MPRIS on Linux);

- you need to unzip, untar, decrypt, decipher and so on;

- you need access to the fonts and the fonts configuration (see fontconfig).

and I probably forgot one or another case.

The point is, all those features have good reasons to exist and very good use cases; but the issue is that for a media player, it will request almost all permissions except GPS and address book.

And quite a few of them are very close to kernel mode.

So, what is the solution?

Probably do a multi-process media player, like Chrome is doing, with parsers and demuxers in a different process, and different ones for decoders and renderers. Knowing that you probably need to IPC several Gb/s between them.

I've been working on such a prototype, but it's a lot of work... I accept donations :)
> Thus, I don't see why shred should be less effective in data=journal mode compared to the other journaling modes.

Because with data=journal, content that was previously written to a file (and made its way through the journal) might still be in there if the journal has not been replayed or garbage-collected in a while.
Was annoying to find the details.

Looks like PopcornTime was rendering subtitle text as HTML, inside their app (html/js-based), creating an XSS vector (looking at https://github.com/popcorn-official/popcorn-desktop/commit/a..., https://github.com/butterproject/butter-desktop/pull/602). Likely the javascript runtime they're using allows file access and execution of arbitrary executables, enabling the metasploit shell shown in the demo.

For VLC there are a bunch of out of bound reads and heap buffer overflows.

f2b1f9e subtitle: Fix potential heap buffer overflow
611398f subtitle: Fix potential heap buffer overflow
ecd3173 subsdec: Fix potential out of bound read
62be394 subsdec: Fix potential out of bound read
775de71 subtitle: Fix invalid double increment.

The article implies that VLC and the others are affected by the same issue (leading to code execution), but according to available information it seems to be completely different issues.

The Kodi issue was a zip archive path traversal (i.e. no protection against zip files extracting files to parent directories).
(((Buzzfeed)))
I was surprised by how well dressed the Japanese are every single day in Tokyo. It has inspired me to put more effort into what I wear.
Don't know about Modula, but have you tried Ada? The usability of it is nowhere near modern languages IMO. We learned a lot about nice code since then :-)
Android does have a sandbox, so impact should be pretty limited if ever exploitable.
So your stance is that as a competent, technically savvy person, you are able to maintain your secrecy and/or privacy on Facebook? Are you aware of the vast amount of implicit data they receive just by you logging in and viewing your friend's posts? The amount of resources FB has dedicated to tech like fingerprinting (both browser based and behavioral) is enough to harvest vast amounts of data from even the most technically savvy people such as yourself.
I get equally confused anytime Microsoft Office gives the "Files from the internet may contain viruses." warning. How do you mess up a document editor so badly that the document can affect the computer? I know that the answer is Visual Basic, and I know that there are legacy reasons why it will never be removed, but holy cow, it is ridiculous.
Arms race in post-Snowdown era.

I would never imagine world in 2017 to look like this.

"Black Mirror"
Birdview.js: get a glance at a whole webpage with an aerial view
VibePlayer: Feel the music in vibrations on your smart device
Why switching jobs is almost always a good idea
> The minimum wage is there to prevent abuse of workers.

It does part of that, but creates a precarious position for most of the workers. If the minimum wage is higher than the market-clearing wage (as might be evidenced by 100s of applicants for every opening at a fast food restaurant), then the employer knows there is little repercussion for firing (or force-quitting) an employee.

"Plenty more where they came from" and the employee knows that they just passed the 100:1 gauntlet to get this job, so they're a bit more inclined to put up with BS.
Chinese Billionaire Adds Proton, Lotus to Expanding Auto Empire
The main VLC developer is an amazing programmer. But if he uses his time to shave cycles off some SIMD decoding algorithm then boring things like file processing is done by random jr. developer.

The problem is that boring stuff can also be very security sensitive.
They know:

"The map also displays some data for Wales and Scotland, where landowners' data includes this; our project is focused on England."
Disrupt terrorism, or disrupt the media?

I'd like BuzzFeed to lead the fight with a good example - by shutting itself down.
Show HN: Choosing font combinations with deep learning
AFAICT every plugin to Kodi has full machine access. Subtitles of course you don't expect to install malware but I wish plugins ran in a sandbox
((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
((((((((((((((((((((((((((((((((((((((YourMom)))))))))))))))))
))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
)))))))))))))))))))))
It is often used when you have an abundance of measured variables that you are using for input that you suspect might be highly correlated. For example in a study of self-reported lifestyle behaviors you might have questions about frequency of participation in: jogging, walking, running, weight lifting, cycling, aerobics classes, yoga, Crossfit, martial arts, climbing, tennis, softball, volleyball, golf, Ultimate Frisbee, and many more.

In your effort to predict whether a person will follow dietary guidelines for healthy eating you could just assign each activity as its own input to the model. Or, you could apply PCA (and something like varimax factor rotation) and what you might find is that these activities seem to reflect three somewhat separable latent variables that is: physical fitness, competitive athletics and friendship/team based social activity dimension. You now potentially have reduced 50 individual activity measures into 3 dimensions.

Next you would think more deeply about the specific items and combine them in into 3 scales and use the scales as a reduced dimensional input into the predictive model.
The difference is: with physical access, "they" are in control (during import). Importing over the internet, the user is in control (by using proper encryption).

If they beat encryption, everything is over anyway.
I, too, dress more formally than my peers. I'm in that weird Generation Y (mid 30s-early 40s) that started working in the late 90s/early 00s where business casual was expected but before casual became the norm.
I like how you're disgusted at actual people for a hypothetical that you came up with not empirically, but because it appears to make sense to you.

But to ease your pain: "media" isn't a person, and therefore doesn't like or dislike or fancy or abhor anything.

As to journalists: From nytimes.com getting 10% more visitors on some day because of some terror attack to anyone's actual pay check or job security takes so many steps it's basically meaningless as a conditioning signal.
Millenials: The Landless Generation
> The article implies that VLC and the others are affected by the same issue (leading to code execution), but according to available information it seems to be completely different issues.

Yes, those are very different issues.

From what I understood, one is an XSS (popcorn-time), one is a heap-based buffer overflow (VLC), and one is a zip-transveral (Kodi).

And tbh, I don't see how you can exploit the bug for VLC (with ASLR and HEASLR).
I think the simplest answer is that it's often essentially the same thing but approached from a different direction by different people with different marketing terms.

One area which might be a more interesting difference to talk about might be flexibility/stability. A lot of the classic big iron work involved doing the same thing on a large scale for long periods of time whereas it seems like the modern big data crowd might be doing more ad hoc analysis, but I'm not sure that's really enough different to warrant a new term.
What did he have against bananaman?
can you please write more about this and especially about your personal experiences? or provide some links so that we can do our own research. but i wouldnt even know where to start....
Your friend is likely projecting. People simply don't care that much about what others in the office wear.
Goddess: Primal Chaos sex can sell a mobile game
Little Things I Like to Do with Git
6 INDISPUTABLE Reasons Why Teams Shouldn't Use Excel for Project Management