skysight-inc/HackerNews huggingface dataset:
Of note: The Shadow Brokers hinted at the same thing a few weeks back.

"In May, No dumps, theshadowbrokers is eating popcorn and watching "Your Fired" and WannaCry. Is being very strange behavior for crimeware? Killswitch? Crimeware is caring about target country? The oracle is telling theshadowbrokers North Korea is being responsible for the global cyber attack Wanna Cry. Nukes and cyber attacks, America has to go to war, no other choices! (Sarcasm) No new ZeroDays."
I mean, at least find another whipping boy... this DPRK attribution is getting old hat
Is it weird that the complexity gets me excited? The thorough needs of this kind of nature of computation is a thrill to dream about.

Thanks for the notes and the links. I've recently started to work my way through Feynman's lectures a I'm considering a return to school for physics particularly because of the excitement it brings me to be able to even just peek beneath the covers. I want to be able to rip them off the whole damned bed and leave the sleepers exposed! But I digress...
This guy turned his Clipper card into a wearable wristband
Look for clients (Transmit works, but there are others) that speak S3; Glacier support is hard to come by here. Then apply a lifecycle policy to that bucket that automatically ages things over X days old into Glacier.
This is how you protect yourself during an ICE Raid:
No, I heard this is a common misunderstanding. You can bounce light off particles going through ONE SLIT and still destroy the interference patten. Partivles going through the other slit shouldn't have been deflected - yet the interference pattern is totally broken!

What you are suggesting is there is a hidden variable theory.
MobileNets: Open Source Models for Efficient On-Device Vision
I'd classify you as lucky, but maybe that's just from my position. I make significantly less working in the downtown core as well. I'm not a senior staff member, but I'm not entry-level either. Either way, I guess it leaves me with some hope.
When both e's in e2e are the parties of the conversation, and the TLS connection is too a third party, then yes it is a violation of their claim.
> The NSA is not credible.

- Somewhat technical internet user
Well, if you want to do full imperative programming with warts and all, you'll probably want to stick to the IO monad for your entire program anyway. You just have to be aware that you're actively handicapping your compiler by choosing to do full imperative programming. (In most other languages, the compilers come handicapped out of the box...)

I think the first example in that post is a bit unfair. The Haskell code is unusually complicated because it avoids a complicated problem that exists in the C code. (Which is that 16-bit encodings can't cover all of UCS-4 with fixed character widths.)

Besides, I don't understand why they are making such a complicated solution. In this comparison [1], the first example in that post is the "target". The best performing solution is... you guessed it:

foldZip a b =
List.foldl' (\r (cha, chb) -> if cha /= chb then r+1 else r) 0 (Text.zip a b)

And a pet peeve: the way you say "only in the ST monad" is a funny rhetoric device. You make it sound like everyone agrees it's a bad thing to isolate mutation to local regions. Here's the thing: it's not. And the way you can integrate local mutation in your application with the ST monad is fantastic.

By just typing "ST" a few extra times you get local mutation exactly where you want to, and nowhere you don't want it!

[1]: http://i.xkqr.org/scrot_20170615032548.png
You're not getting the point.

In a large codebase, I want to be able to skim code. I don't want to parse idiomatic code. I literally want to be able to read it like a novel and get down to the lines that I'm interested in.

Granted Java is not the best. But Python-like languages (with no static typing and "tricky idiomatisms") make it so hard to parse a 10,000 lines100,000files.
Pink planes and painted cows: The weird side of World War II
Though the hackers raised $140,000 in bitcoin, a form of digital currency, so far they have not cashed it in, the analysts said. That is likely because an operational error has made the transactions easy to track, including by law enforcement.

As a result, no online currency exchange will touch it, said Jake Williams, founder of Rendition Infosec, a cybersecurity firm. “This is like knowingly taking tainted bills from a bank robbery,” he said.

Could anyone give some more details about this?

Does a trustworthy bitcoin mixer exist? Would the attackers be able to use it to launder the coins?

EDIT: Does anyone know anything about the operational error mentioned in the article?

The coins are easy to track, but that's the default for bitcoin. Mixing the coins should restore anonymity in most cases, right? And at that point it would be possible to move the coins back to an exchange, or sell them on localbitcoins.

On the other hand, have the exchanges blacklisted most of the large mixers? It seems like it should be theoretically possible to track whether coins have been mixed. Then exchanges could simply close any account that receives significant sums of tumbled coins.
Not that suprising, remember that they also hacked Sony. The Lazarus group (one of the names for the DPRK APT group) is pretty sophisticated.
The major concern for the US military when attacking North Korea was not nukes, but military hackers inside a bunker disrupting everything. There probably is a lot of know-how there. The Sony hack was also attributed to North Korea.
Almost all new grad offers vest 25% of equity in one year, then it is typically monthly, quarterly at most.
> there's no way to access the traceback for an exception once you've left the `except:` block

Also in 2.4 if you assign a variable to a local inside a traceback it might leak memory.
On a Blockchained World
That's only because as a human being you deal with closed form solutions.

Who is to say that the "universe simulator" is only doing 21st century math?
You could do even more interesting things than that trustlessly. For example say, you own a valuable domain. You could borrow money and use the domain as collateral. If you do pay back, or stop making monthly payments the domain is automatically and trustlessly transferred to the lender. Or it can be put up for a trustless public auction with the proceeds going to lender to repay the loan and the rest to you, the ex-owner of the domain who failed to pay back his loan.

The cool thing is that it's possible to build all of this today and people are working on it right now.
Thanks! I'll take yet another look at Terraform, then. Fourth time the charm, or something.

My lasting fear is that even if it has 90% of the support, there will always be one thing, or one edge case or bug, that will become an annoying blocker. Using a tool like TF means becoming dependent on it to a large extent.
And this is based on what, exactly ?

If you're going to make hyperbolic statements maybe some clarifications would be useful.
For reference, the site CoFundOS.org (which is now something TOTALLY unrelated) used to be a bounty service just like this where people all added their pledge to fund the start of some new project if someone came along and accepted the task. Not sure if there's any reference available anymore. They focused on Open Source, whereas DemandRush seems to focus on services, many of which could qualify as SaaSS even, see https://www.gnu.org/philosophy/who-does-that-server-really-s...

Anyway, the big issues here are those all bounty-type sites face (which seems, for some reason, to be the thing everyone keeps trying over and over and keeps thinking is a new idea). See for reference, https://wiki.snowdrift.coop/market-research/history/software...
I'm partial to Chomsky's analysis of the news media as an institution of propaganda. this video is a good summary of his position

https://www.youtube.com/watch?v=KYlyb1Bx9Ic
Thank you. Since that is the case I upgraded. Seems to work fine. The new GUI is much less of a train wreck then the Coral one. It seem responsive. I will play with it for awhile and see...
The typical investor cannot get above average results - the market as a whole is the sum total of everyone trying to beat the market.

People aren't as special as they think they are. Investment strategies are littered with the ruined portfolios of folks trying to "beat the market".
Just curious why your interested in consolidating to a single vps? In other words, what are the determing factors? Price, peformance, complexity?

Now opinion; it really makes me sad that the world has moved this way, that developers are now expected to be sys admins. I do it myself. I'm a pretty good developer, but I'm no sys admin. I feel like sys admin as a profession has been devalued to an astonishing degree in recent years. I blame the easy and cheap availability of cloud services like linode and digital ocean and developer moving in mass to procuring and provisioning their own servers.

I'm to blame as well, but a good sys admin brings A LOT to the table. Keeping configuration sane and secure, keeping things patched. I've worked with a few who are really good, I miss having good sys admins when the job doesn't have them.
> There's no general purpose idiom you can use to replace all loops, only tons of special purpose HOFs you must memorize.

Well, yes, there is: general recursion. You can recreate any loop with plain old recursion.

But stating that as a problem is a little like coming to Java and saying that "there's no general purpose idiom you can use to replace goto, only tons of special semantic branching constructs you must memorize." Sure, a valid complaint if you've been forced to only use goto in your life, but not a reflection on good programming practise.
Basing your malware on a tool leaked from the NSA probably makes it easier.

https://en.m.wikipedia.org/wiki/EternalBlue
I don't understand. Isn't the point of bitcoin that it doesn't need a central authority?

If Bitcoin has evolved to the point where you need to have currency exchanges that act just like banks... what's the point?
If you are staff engineer or above, you are almost certainly making > 400k in total comp if you are in a high cost of living area.

Big part of that is due to the fact that if you are staff engineer or above, you've been at google for awhile, and google stock has done very well.
I think that's what would inform an interesting algorithm... but maybe I'm just conflating ideas. I think I'd be more smitten with a machine learning model that at first presented designs, then took as feedback sales data that informed its design progression.

In the end, sure the patterns are catchy. I guess that's all people really care for in a Nutella label. :P
OK, so I know this is going to come up in the comments, but this is not remotely a baseless allegation. The Lazarus group (one of the names for the DPRK-associated APT group) is somewhat well known and is quite sophisticated. This is the same group that hacked Sony a few years back. And to preempt people who are going to chime in with "Sony was just some insider leaking data" there is extensive evidence showing it was the work of a previously unidentified APT group. See here: https://www.operationblockbuster.com/wp-content/uploads/2016...

I can't comment about specifics linking WannaCry to the Lazarus group, but that seems to be the consensus in the security community.

DISCLAIMER: I worked with the people who wrote that report
The closest case seems to be a Mattel court case involving their CyberPatrol software and a program by Eddy Jahnsson and Matthew Skala called cphack. It raised the issue of whether a GPL license could be withdrawn. However, the case was such that no definitive legal conclusion came about. (I was shocked to find that Googling directed me to something I wrote 10 years ago :-) https://www.cnet.com/news/revoking-open-source/)

However, the widespread assumption is certainly that it doesn't require a contributor license agreement to keep this whole open source thing from crashing down. Which it would if an arbitrary developer could threaten pulling out their code from some project N years later. In today's climate, it's pretty reasonable to assume that if no one has pulled that sort of blackmail, no one thinks it has legs.
I love how the society we currently live in places so much confidence in the statement that "corporations = efficient, rational market actors"...

and yet here we are, slaves to whims of a few thousand people globally who control 35 trillion dollars in assets.

This virtually guarantees that if you want to make a liveable income, you either need to work for or sell to a truly psychotic group of individuals who control an arbitrarly large portion of wealth thanks to a host of monetary and legal policies.
It shouldn't take much demonstration to see that they are basically competent, and there shouldn't really be a difference between asking them to loosely state the commands they would issue and the process they would take and watching them do it.

People normally perform better by verbalizing the process than they would by sitting at their computer and performing it, since a lot of the concern in an interview can be whether you're getting your code/commands syntax-perfect or not.

The only way I can really see this going badly would be if the interviewer was only asking generalized questions that someone like a non-coder HN reader would be able to pick up from the zeitgeist without actually having ever implemented. Instead of asking about trends or fads, it's probably better to ask detailed questions about implementation processes.

If they really have internalized all the applicable concepts but can't express them in computer language, well, it shouldn't be hard for them to get up to speed on the syntactical fineries. Make sure you're testing for grokkiness of the core concepts needed, not how well they're following the trends or the news.

Personally I use a very small code test and put the rest of the energy into a detailed conversation.
Maybe they contracted it out.
I do mean unrestricted. That includes unlimited immigration of unskilled/lower skilled labour as well.
Who's blacklisting these bitcoins? Is that public or is Rendition speculating?
Yup, there can be many mixed results from powder/crystal MDMA sold as "molly" that I can see why people go for pill presses much more since they are a bit more standardized in terms of reviews and experiences (e.g. pillreports).

Much easier to have a consistent result when your presses come from a popular and widely-known batch.

Unless you have a reagent test kit and want to do all that, it's best to have a trusted source or go for the presses IMO.

That being said, my first experience was with MDMA in crystal form, and it was the greatest thing ever.
I really wish I could agree.

On a core i7 with 16GB and a completely fresh Windows 10 install that has never had Firefox on it (so we can't blame an old profile on the machine), Firefox with a single plugin (Keefox) is noticeably slower than Chrome. Just logging into my Google account I saw surprising amounts of basic UI stuttering. Something like Inbox (which is admittedly a pig) loads slowly and scrolls sluggishly.

Chrome, by comparison, is responsive and snappy.

I wish it were different. I really want to like Firefox, but on this machine, with some very basic tests it's clear that, for me, it simply does not compare...
Take a year off and go and study Chinese in China.

When you come back, you'll still have 6+ months runway and a completely different perspective on things.
Unfortunately interviews are brief, the point of this isn't to add pressure its to relieve it. Silence for too long in such a short period introduces pressure. Letting them use me as a sounding board we can create a connection that opens dialogue and allows ideas to flow.

The whole point is to make them comfortable and that takes the highest priority. Being able to read the individual and react to them is key, not everyone is the same, hence why there are a multitude of responses, and the ones given are just a starting point.
They should decrease memory usage first for desktop app. I hope you can disable this highlights.
How to incorporate the Internet of Things into your business strategy
I wasn't aware of North Korea generally being blamed for cyberattacks.

It sure does fit with them needing foreign currency in the wake of the collapse of the Kaesong project and a freezing of relations with ASEAN countries.
After you follow some bureaucracy you get your answer. It's almost always "no", but the government can decide to prune (but not cut) them by themselves.

My city has many trees, and tree related deaths got within an order of magnitude of the big killers (transit, violence) a few years ago. The local government got a special case permission to cut the most dangerous trees, but some stupid greens made some vocal protests, so it lasted only for about two months. Anyway that was enough to improve things for a while.
Re: Sony Hack

I heard that the DPRK was definitely involved, but that they involved themselves at a later point in the publicity over the attack, and that it the original attack was initiated by disparate individuals only loosely cooperating.

Not to disparage your points on the Lazarus group. I've heard the same about their sophistication. I know next to nothing about the WannaCry attack besides the tragedy of the NHS succumbing to it.
There's that little part where they claim to be dedicated to helping keep our information systems secure, while they simultaneously stockpile zero day exploits and work behind the scenes to subvert and weaken encryption practices.
It’s awful, especially since you can’t omit the space at the end. But the replacement,

print(“Text”, end=“”)

is verbose. Not too verbose, but considering how often I write prints as temporary throwaway code, every little bit hurts…
uBlock Origin has anti-anti-adblocker code which results in a perfectly readable forbes.com (and many other sites on which other adblockers drop the ball)
lol...at some point there will have to be some type of specifc discussion on null-routing that shit-hole of a country...
You know, the real problem with R for production work is dealing with munged package dependencies. Writing a makefile with hand curated package deps is something I really wish I never had to do again.
lol yeah, the whole "It's the <russians|iranians|chinese|koreans|syrians|insert nation we desperately want to destroy because they don't subscribe to our bellicist agenda>" is getting very boring very quickly.
I wonder why it's always North Korea. Is there no other private or governmental hacker group on the world?
The point is to not to need to convert back to fiat.
The idea that the US needs to actively spread propaganda about North Korea is pretty ridiculous. You are aware that they have been sending missiles on a regular basis and inviting criticism from pretty much everyone.

Who exactly is pro-North Korea that the US is trying to sway ?
There are dealers and exchanges who abide by regulation in one or more countries, and some that don't.

It's also public record where transactions travel on the blockchain, so if it was ever noted what address the funds entered, I imagine it could prove difficult to dilute the transactions enough that the ledger wouldn't be accepted as proof. But I'm just speculating on that last bit.
It is quite easy to launder those bitcoins for someone committed to it.
> On Unix systems the environment variables SSL_CERT_FILE and SSL_CERT_DIR can now be used to override the system default locations for the SSL certificate file and SSL certificate files directory, respectively.

This will fix so much pain that my team is having right now. I am glad that it finally is available.
only to transfer it into another currency

you can trade bitcoin to bitcoin just fine
I'm not sure if type aliasing is for that use case. I think you're more thinking about things like

type Celsius int

that in theory prevent you from passing a bare int and mixing up Celsius/Fahrenheit.

In go this almost works. If you define

type Celsius int

func isBoiling(t Celsius) bool {
return t >= 100
}

then You need to call it by doing something like

t := Celsius(100)
isBoiling(t)

and just

t := 212
isBoiling(t)

will not compile with

cannot use t (type int) as type Celsius in argument to isBoiling

But unfortunately you can get away with

isBoiling(212)

However, If you just used a type alias then you'd be able to do either.
> In the article where Federico Musto is reported to have faked his background, it says at the bottom that Philip Terrone is the source of the tip about Musto's educational background

That's not evidence of a "back room" smear campaign. It's the opposite of that, an on-the-record and truthful accusation.
You usually can't say that without an avalanche of agent provocateurs derailing your thread, though.
First: ignore the people who say this is a successful start up. By your account it wasn't.

If your company had enough publicity, you might want to say it was a success publicly and join FaceGoogSoft. Otherwise, take another three months off (outside of SF/Silicon Valley) and look for options to try again.
Yeah, that's why interviews are nerve-wracking. At their core, they're very subjective. The interviewee doesn't know if the question is supposed to be a trick to see if they say "Well, of course I couldn't optimize it, because I haven't seen the performance data yet!" or if they're supposed to suspend disbelief for purposes of the exercise and say "Well, of course it'd be best to profile, but we could change the way it does X...".

The chance that the interviewer expects some weird thing like that is random, so there's no way to know whether you're getting it "right" or not. Select the wrong answer and you get viewed as an ignoramus or a smartass. Just have to take the gamble you like the most and see if it aligns with the interviewer's preferences.

Once I was asked what kind of software publications I like to read. As a habitual HN user, this should've been the easiest question ever. However, when asked, I guess I was feeling strict that day and said "Well, I don't really read a lot of software-specific stuff, it tends to the more businessey side of things rather than being strictly software related", thinking of highly technical blogs like Lambda the Ultimate. The interviewer said "What about things like Joel on Software?" and I said "Yeah, I've read most of Joel's stuff, but I don't really consider it very 'softwarey'".

I could tell that cost me the interview, but what can you do? Someone else in a strict mood that day may've been delighted by such an answer, happy that I didn't hold delusions and could tell the difference between comedic rants about the business of managing projects and hiring developers and serious, borderline-academic publications that include equations and ponder theoretical dilemmas.

The best thing is just to take the whole process casually without getting over-committed or holding a grudge. False negatives cost companies much less than false positives and they're evaluating you in the context of their other applicants, who are also essentially random, so there's no way to really know anything. It's just about whomever seems least risky and most useful, and as an interviewee, there's no real way to know what that means from the POV of the interviewer, so it's hard to optimize your responses.

The real way to win interviews is to recognize them not as technical processes, but social processes. Admitting this makes engineers nervous, but it's important they understand that humans, not compilers, will be performing the evaluation, and they must learn to speak human to get satisfactory results.
And what has the US been doing for the last 50 years exactly ? If not dropping missiles and bombs on civilian populations abroad under the pretence of "spreading democracy" and "stopping terrorism"
It's not been fully confirmed/established that Lazarus group == DPRK: see "false flag" from Kaspersky researchers https://www.wired.com/2017/05/wannacry-ransomware-link-suspe...