skysight-inc/HackerNews huggingface dataset:
Python is huge on the backend, from startups to large companies.

While I've used Node, and I think it has its place in certain kinds of application, I would never pick it for the main backend language. Adding a chat service to an existing larger codebase, maybe, but JS isn't particularly well suited to larger applications (yet, it's improving) and the frameworks are still less mature than things like Django and Rails.
WannaCry caused the price to drop, rather sharply. If anything, the purpose would be to buy cheap Bitcoins and hope the price later corrects back upwards after the news has blown over.

I suspect the price drop is due to some trading algorithms using sentiment analysis. They see all the negative press around these ransomware, see the included word Bitcoin, assume the negative article is about Bitcoin, and automatically sell.

But that's just my theory, since I have a hard time imagining human traders seeing news like this and selling because of it.
I think you missed the key thing in design of a dashboard: the user. The information presented and the purpose of the dashboard would be heavily influenced by who the user is or what role they play and their technical background.

Is it for engineers? engineering management? sales? CxO? That should factor into what is well thought out and doesn't overwhelm the user. If it is a CxO level person viewing a dashboard about the systems, they probably don't care about IT stats (RAM, CPU, I/O, etc.) but is it up or down, what is overall health, etc.
One of my clients got some strange emails around 12:00 GMT with links to probably infected websites. Is this related to ransomware?
We Can Use Existing Telecom Infrastructure for Quantum Communications
Wow, the screenshot in the post is like a parody. (And that's the "new Google Shopping experience").

https://2.bp.blogspot.com/-nw0uS-CN17o/T8cd822KTBI/AAAAAAAAA...
This is absurd nonsense, but my viewpoint is a lonely one on HackerNews.
That's exactly what the EITC is. The main benefit is that it's a direct subsidy by the government instead of burdening businesses with paying people above what a free market demands.

From a political standpoint. It's also a lot easier for people to support. You have to work to receive it and it's been popular in both Republican and Democratic administrations. I can't speak for the current one. I don't think Trump has any core set of beliefs.
It's like Frank Gehry designed a reactor.
A new ransomware attack is infecting airlines, banks across Europe
AV is such as losing battle. Whitelisting, developer vetting, and code signing (the IOS store...I know you guys hate it) are the only things that have shown to be a reasonable defense.
The Lost Dream Journal of the Man Who Discovered Neurons
Ha, funny -- clicking that link leads to a page w/ this message: "This page is unavailable when linked to from news.ycombinator.com. Please find a less toxic place to spend your time." :-)

The link works when copy/pasted. Let me read.
I wonder how stuff like this gets to the front page of HN? Any idea? From the examples, it does not seem to be "physics based" like e.g. box2d.
Does Chess Instruction Improve Math Ability?
By all means stick to that attitude; the Japanese-speakers will keep making money with Japanese companies.

Note that this is valid for more countries than not: learn the language, and the locals will look on you more favourably. It is still a must to work well in places like France and Italy, for example (albeit less so than 10 years ago).

English is a fallback language, but the preferred option is still the native lingo.
> this result scares me [...] I never questioned that they had a right to do that. It is their website

Are you serious? By this logic Microsoft could do whatever they wanted with Windows. Yes, when you're big enough to absolutely dominate a market you can't just use that to make rules that kick out everyone else.
Your laptop/phone/tablet/monitor screen is floating to the side of your view at all times without you having to hold it or carry it around, leaving you free to engage in the real world and use both your hands to do other things.

Oh and instead of being limited to a small, 2d image your screen can change to be any size, can warp into any shape, isn't flat anymore but instead 3d, and you can directly see anything in the world that can be described and existing in 3d space. Your screen isn't a screen anymore, it's a person, and the next moment it's some piece of information, and the next moment it's instructions showing you the proper hand gesture you need to follow to handtoss pizza dough, and the next moment it's a map pointing you in the right direction to get to a bar you're meeting your friends at. And it follows you around.

...

Does that not seem like a large improvement over all existing visualization devices we have currently?
I performed brain surgery on my CPU to lower its temperature 15 degrees
I'm not sure what you mean, but I was referencing Sony's illegal and unethical usage of a rootkit on every CD they manufactured to hack user's computers so that they could implement DRM (in)effectively[1].

[1]: https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootk...
Beware of interviewing at Karat
Grandma, hell. These folks are five or ten years older than I am, and I'm not young.
Well..you can wait for the whole world to learn English--which may eventually happen, but don't hold your breath--or you can be proactive and learn the languages you want to communicate in!
You seem to make three points:

a) Western municipalities have deployed similar systems, albeit with massively significant differences in use case

b) Western political structures aren't perfect

c) the professional ethical obligations of technologists have yet to be codified

I'm certainly in agreement with you on all of these points, but I'm unclear on your argument. Is it just that many talented people will happily contribute to building a nightmarishly repressive socio-technical apparatus if the money is good enough? Again, no disagreement there, the article itself, and the many other stories on HN related to the shenanigans of Western security agencies, is ample proof of that.
does anyone really believe that companies, their boards and their institutional shareholders in general apply a higher moral standard than maximizing returns? or that they could be shamed into doing so?

regulation
Yes, and the topic of discussion is most assuredly not: which will make you drop dead while using it.

Rather, it's "which will give you cancer through long-term exposure".
There are indications that this new version uses a number of ways to spread.

Where attacker == the ransomware executable:

First is the EternalBlue exploit developed by and leaked from the NSA. EternalBlue exploits a flaw in Windows systems on port 445 TCP that can be used to take complete control of an unpatched system. So if an attacker can connect to a vulnerable Windows machine on port 445 tcp they can take control of that machine.

There are also indications that this ransomware sample spreads using legitimate administrative tools in Windows systems such as WMI (execute commands on a remote system if you an administrator account on that PC), and PSEXEC (mount shares on the remote system if you have an administrator account, execute command if ''). These are legitimate (but legacy) Windows components that normally facilitate the management of client PC's when they're connected to a domain at a company or school. So if an attacker can connect to a Windows machine on port 445 tcp (PSEXEC) or 135 (WMI) AND have administrative credentials for that PC they can take complete control of that machine.

These two are probably part of how the ransomware spreads once it gets inside your network. The wcry outbreak a few weeks ago gained access to networks by infecting one or several people via a phishing e-mail with malicious files/links-to-files inside. AFAIK it's currently still unknown/unconfirmed how this outbreak spreads precisely but I'd guess it's either actively being spread by phishing OR it's been present but dormant in these networks for a while after having been installed by phishing over a longer period of time.

If an attacker possesses a 0-day then all bets are probably off, and even step A would not necessarily require any human interaction.

This outbreak is particularly nasty because after it's done encrypting files it supposedly triggers a crash that forces the system to restart. (handy for servers where a user is not normally able to restart the system). Because the system restarts any, artefacts from the encryption process that might be used to decrypt files without paying or restoring backups are gone.
But you can comment, and posts with many comments are penalized.
What are the new approaches being ignored or staved off by the old guard?
Dexter, the Automatic Indexer for Postgres
In Java, private/protected functions/fields are mostly only a compile time check. Your code will not compile with if they shouldn't be able to see the function/field. But java also has a runtime inspection framework that allows you to view and call these scope hidden functions/fields in contexts that should not be allowed. You do have to ask nicely though with an extra call to request access. This is heavily used in things like Json/XML parsers and ORM tools. Really anyplace you need to blindly reconstruct an object programmatically.
Anecdotal, but we use it at TheLounge[0] and it hasn't seen much use. I'm curious as to how many people actually use/check it.

[0] https://github.com/thelounge/lounge/labels/up%20for%20grabs
What's odd to me, is that lots of professors have blogs in which they write quite a bit in plain language that doesn't require an instruction manual in order to be read
There is no proof of means or motivation to use 0-days at scale. In fact, using EternalBlue "at-scale" would have caused it to not stay a 0-day for very long.
In your scenario, the question makes sense.

Personally, the question reads like "have you ever pieced-together a computer?" and one could argue that the question could weed out better candidates for certain positions. A growing number of younger engineers have only used machines that come glued-together, and never had to compare performance vs. price as they chose a CPU.`
Microsoft announces PTOs to take care of sick family members
was perhaps a good idea that was horribly executed.

This describes some rather large fraction of laws, period.
Yes, the cookie notices are a bad implementation of a good policy, (informing users that they're being tracked.)
How I raised equity-free funding of $15,000 on idea stage of my startup
The hypothetical system that makes most sense to me for this: a process that runs 24/7 on a server, watching your feeds on those services. Grabbing and saving everything via APIs or screen-scraping.
Corbet does a great video on the Weaponization of Science:

https://www.youtube.com/watch?v=yecefLsE44U
Agreed. My experience is that recruiters are pretty flakey people(and I'm being charitable in that) - they regularly fail to keep scheduled calls, fail to follow up after asking you for some times to chat, take weeks or even months to respond resume submissions for jobs they are posting etc.

I have no problem with competency testing provided I have already spoken to someone on the team and established contact and registered interest with someone besides a recruiter.
It looks like this was not caused by a 0-day, it is apparently using EternalBlue as execution vector plus another (already fixed) vulnerability for lateral movement.

More of a "100-day" at this point.
For a moment I was confused why Trello was being mentioned and this and the other reply are the only mentions of it on the page. Easy typo to make or autocomplete false-positive, I suppose.

I'm excited for Treble, personally. I'd like to slightly modify your statement to say that it's available for any device that supports it. Google Pixel and Pixel XL shipped with Nougat but they are using it to test the transition from a non-Treble system layer to a Treble-ized (?) one with Android O's release. So other OEMs could choose to support Treble on older devices, given that they meet the requirements and also have support from the BSP vendors like Qualcomm.

That said, I agree with you that it probably will still take some time before we see a huge impact, and it's a shame it's taken this long; better late than never, I suppose?
> I love my state; but this place is objectively crazy in a lot of ways.

> Maybe that's one of the core ingredients to the many other awesome things here.

California cognitive dissonance. (Nice job setting up the symmetry!)
Yeah, it really seems like a better application of a 'micro-grid' would be to provide alternative green electricity to your neighbors.

Like okay, you have a bunch of solar panels and a battery bank. Why not let people plug in at a kiosk near the bank? At a micro scale, your neighbors could hook up a heavy-duty appliance cable or two to their houses. You could use RFID cards, magstrip cards, username/password, a web frontend, an app, etc for identification, metering, and billing.

Sure you could accept cryptocurrency for account credits, but you could also accept cash or credit/debit. It's just another payment processor.
I can spot when reps try that one on me. In my field I know the devil is in the details, so I need to always push back for a detailed technical answer. I give context, but it is annoying how many reps act like I'm inconveniencing them by actually doing my due diligence and knowing what I need in a solution.
Tilt Brush AiR: Isaac Cohen
Here is a physics based animation framework:

https://github.com/kripken/box2d.js/
That's not all, the man was assaulted as well:

"One man grabbed the girl and the other man, who is the child’s father, punched the man five or six times... The investigating officer noted the victim’s face had several cuts and was swollen."

I am more perturbed by the aftermath than the incident, to be honest. The father is unrepentant for his mistake! Faces no consequences for either child neglect or assault! And the man isn't even pressing charges, probably because he's had enough of this whole thing and just wants it to go away.

This attitude will hurt children in the long run. We are killing the last vestiges of a sense of collective community responsibility for children. Remember Wang Yue, the Chinese toddler who bled out in the street as adults simply stepped around her? Is that what we want America to turn into?
Wharton MBA student looking for Bay Area internship Jul-Aug
Hi crew,

I am a former 'make believe' tour guide for the Edinburgh Castle and current MBA Student at Wharton, living in SF this summer.

I was a management consultant for 5 years, and have broad skills on forecasting, marketing analytics, financial modeling for business development, commercialization and go-to-market strategy, among others. I'd love to work with a young and dynamic team, disrupting their space. (particularly interested in clean energy, healthcare, emerging tech)

Flexible on pay/willing to do an unpaid internship for an impactful experience. I am super motivated and can hustle. Let me know if we might be a good fit, and I'll share my resume/jump on a quick call.

Cheers,

Ankit

agarw@wharton.upenn.edu

https://www.linkedin.com/in/1ankitagarwal/
> The blog isn't about tearing down wealthy people, it's about tearing down shitty architecture. She showcases really great architecture as well that obviously isn't affordable.

It's about tearing down shitty architecture, in a way that directly criticizes the owner's purchase and taste while making endless derogatory assumptions and claims about them, and that's only ok because that owner has money.

She, for example, thinks it's sexist for a bathroom to have two sinks, and a bathroom having two sinks is an appeal to the owner's sexism. You can take this person seriously if you want to, but to act like there's no malice here is a little absurd, and it's clear (at least to me) that that malice is only accepted because it's directed at the wealthy.

And it's totally unwarranted, she doesn't know these people and she doesn't know their political affiliations or their positions on social issues. They're just people who like a house you don't like. I don't see how that's a justification to draw insults on pictures of their house and post it on the internet.
Just so I interpret this correctly, are you saying that you purchase things you don't want?
It already exist something along that line.

If the classes that Spring, Jackson, etc want to access are in the classpath, it works by default in 9 (will not in 10, you will have to use the --add-opens on the command line).
If the classes are enclosed inside a module, it's simpler, either you declare the package as open or the whole module as open.
(when you declare a package open you also can specify the module for which it will be 'open', by example, open com.foo.mylib to org.jackson.core)
Well, Google is a dominant market force, even if it is dominant because it is simply that useful so that everybody has to use it.

Because of that dominance, it deserves, no, requires scrutiny much, much more than not being deterred innovation. The latter is a "nice thing", the former is a necessity. Sorry but if you're that big, that dominant, of course we're going to scrutinize your responsibilities. If that's going to mean less fancy features, sad but so be it, the alternative is letting Google abuse all that power unchecked!

edit: I think coldtea said it better (in this same subthread) https://news.ycombinator.com/item?id=14645033
I was surprised to see the author describe Rust-in-the-browser as "low level". I always took that term to mean "closer to the metal", and not statically typed with manual memory management. Rust in this context doesn't seem any more low level than Javascript, to me.
I would be interested in reading Cornell's study, because it seem to contradict a World Health Organization study that marks glyphosate as probably carcinogenic to humans (meaning that there is "sufficient evidence of carcinogenicity in experimental animals").
Starting a post by saying "I'm going to get downvoted for this but..." is against the guidelines. It annoys me to no end.

Do you have anything at all to back up that claim? It seems to me the EU applies these fines fairly equitably between US and EU companies.
I'm not sure how trust or relationships let you make a solid economic business case...
Coming from a physics background I once upon a time learned the basics of neural nets from Hertz' book
https://books.google.com/books?hl=en&lr=&id=9a_SyUG-A24C

It is obviously outdated with respect to modern applications of NNs, but I still think he explains the basics of layered and recurrent networks in a clear fashion.
a) No intervention required although many start that way because people click on everything. The general idea is: get into a computer using any means possible and then spread using any means possible

b) They encrypt your files and make you pay usually with a time limit before they just delete the files
A) It's got to find a victim (IP range scans or whatever), then try to infect it. WannaCry used a vulnerability in SMB (CIFS/Windows file sharing) to get the virus payload onto a new machine and get it to run.

B) Once a piece of ransomware is running on your computer, it can generate an encryption key and send that back to its controller machine, then start encrypting files on the computer.

"A" shouldn't be able to happen on its own on a properly firewalled network, I think. So the start of the spread might be someone clicking an e-mail link that they shouldn't, and the infection works to spread on its own once inside a network.
You raise a good point - I wonder where are people who changed province are shown on the map? That is, are they indicated by their current province or that of their upbringing (ie. their parents province)?
Linode Network Backbone
This pronoun makes your headlines attention getting, with one weird trick!
Maybe because they are in a competitive industry and they like having market share?
ncfd = open("/dev/nyancat", O_RDONLY);
while (...) {
sendfile(sockfd, ncfd, ...);
}
They are at Starbucks. I really don't know how to interpret these things because they have no details. They don't say which item is known to cause cancer, so I'm standing there adding sweetener and thinking "should I not add sugar? Or cinnamon?". It is doing more harm than good at this point.
TrueFace.AI: facial recognition API with picture attack detection
Informative article as always from you. Thanks!
this doesn't feel like it is any more than an advertisement.
All self-driving cars are going to be security nightmares. But yeah, it's better for it not to have a built-in backdoor in addition to the normal set of security flaws.
Just what I learned in elementary school (1st grade in the US). Vowels are the five letters of the english alphabet that are special, because the pronunciations of all other letters contain a vowel. That's why the others are called consonants (with-sounders).

I know that is highly unscientific, and probably doesn't reflect current linguistics, but it still makes sense to me :-)
all scientist were non-scientists first though, correct?

Look, I get that there's some natural professional context and lingo that goes into these things, but for all the angst that goes into what esteem that population at large holds up the science community

making their work more accessible to both novices and interested outsiders would be a nice step in the right direction
Snips and Home Assistant: on-device voice commands at home
A little further down the same article is "economic effects" where they cite some studies relating to this data. Results & interpretations fall on both sides of the equation. Whatever the effect of minimum wage is, we don't know from empirical research.
> Usually if it says "0-Day" assume that it can be exploited without human intervention a-la stuxnet

That's not at all what a 0-day means, it just means a previously unknown vulnerability. We've never seen a ransomware attack anywhere close to as sophisticated at Stuxnet. This latest attack is nothing new and is only affecting people who haven't kept their systems up to date.
its a colloquialism

computer = desktop\laptop
You can easily control transformations with it (out of the box), but it's easily extensible to animate/smooth anything that you can control with a number (think sound, brush strokes in a painting app)
When you come down from the cloud-land of capitalist heaven you will find this is not even remotely what happens.

Capitalism is inherently anti-competitive. Larger established companies have more power than the idealized "entrepreneur" that libertarians like to posit. If a competitor appears they can simply force them to shutdown, via dumping, via legal harassment, or simply by virtue of being much larger and being able to do everything more efficiently and with larger margins. Government regulation is needed to prevent monopolies. This is self-evident.
I once setup something similar but with solar panels in Mojave desert to water a peach tree. Needless to say that didn't work oht as planned.
But because the risk is so low (it doesn't happen that frequently) many people are completely unaware of the phenomenon.

Also, people can't apply what they were supposed to learn in high school physics. It's not only Brazil that has this problem:

http://v.cx/2010/04/feynman-brazil-education
This is dumb. People lie to get what they want. That's both men and women. You can carve it up in to specifics of lies to avoid bad reactions, but when you start carving it up the carving never ends. The basics is "to get what I want".

There is core that is selfishness instead of altruism which I don't wish to take the time to expand on now. Ultimately you sound like you need counseling yourself as this smacks of the childish insight of someone who had their first breakup.