skysight-inc/HackerNews huggingface dataset:
I understand that this is not what it means. But generally speaking when an article says "0-day malware" it usually ends up meaning that no human involvement is needed.

Please don't assume I don't know what 0-day actually means. I chose my words carefully as not not imply that I was saying the definition of the term.
Microsoft never had a "web browser business" they wanted to boost. They had an OS monopoly they preserved illegally like the mob. Not the same.
That is not a similar analogy at all.
>a Microsoft-signed malicious update would be worldwide news

https://twitter.com/craiu/status/879690795946827776

>only "this could possibly happen" theories

Pre-Snowden a lot of things had been considered "could possibly happen" tinfoil hat theories, turned out a lot of them had not been mere theories.
Linked Lists in Python (Tutorial)
DC is the city with 'most unused vacation' time, survey says
> Ironically, by avoiding "GMO foods", your friends are probably increasing their exposure to herbicides that have a much clearer connection to human health risks.

I am responding to that comment from you. I'd love to read about how avoiding "GMO foods" increases exposure to herbicides, do you have any information on that?
But to be fair, France is quite a lot stricter about this sort of thing than the EU in general.

Also, I didn't know DailyMotion was French :) Thanks for that bit of knowledge :)
> that the tinder had KMnO4 in it, and the arrow popped a hidden balloon with some glycerol

For those that don't know, KMnO4 is also known as potassium permanganate:

https://en.wikipedia.org/wiki/Potassium_permanganate

As noted in that wikipedia article, when combined with glycerol or other glycerin containing products (like automotive antifreeze) it can also be used as a fire starter. It can be easily found online or at home improvement stores, as it is sold for water softening and filtration purposes.

Grant Thompson ("King of Random") documents how to make a survival fire starter kit using this knowledge:

https://www.youtube.com/watch?v=ja_6Yin9JuM

In short, keeping a bit of potassium permanganate in your car with you, should you get lost and don't have another source of fire making with you, might be a wise thing (then again, if you know anything about automobiles, there are tons of ways to use parts in them for starting a fire).
> Citation needed.

I assume, like me, OP was there. We tried to talk sense into voters, but this was the biggest concern for most of them. Here in the US, we have been stuck in a two party system for decades simply because of this (flawed) logic.

Most Americans won't change their behavior to effect a greater change unless they are sure that greater change will be happen because of their relatively insignificant effort. This is why we struggle so much with climate change, the two party system, monopolies, etc.
1) Google has a monopoly on "searching" the internet.

2) Their search algorithm ranks google products at the top of the results.

3) They cannot prove that their products are being held to the same standards as everyone else, because the algorithm they use to rank results is not public.

I think Google could have any two of these, without being in anti-trust domain.
Which this place is becoming. Where should I migrate to?
>Because that is what they claim, and to call somebody a liar requires evidence, not unfounded accusations.

First, you've got it backwards: the burden on proof is to them for putting up such a claim (generally, to those putting up any claim), not to those who dispute it.

Besides, we have a long history of documented foul behavior by Google in search results. In fact this very story is based on a fine ordered because of this kind of behavior.
Writes also require the lease, so no data can be written until the lease expires.

Writes becoming unavailable during a partition is a reasonable solution for a CP system.
I understand that. Which is why I said "usually".

Typically when we see news using the term 0-day it's because there was no human element needed in the infection of machines. Thinking back in recent memory (17~ years) I can't remember a time when 0-day was used when it didn't mean autonomous infection.

Although. I fully understand that the term means that it's a previously unknown issue. Which is why I chose my words as carefully as I did.
I think this means contacting them via email on their mobile phones.
> EDIT: I wonder why this is being downvoted.

Please don't do this. It breaks the HN guidelines (https://news.ycombinator.com/newsguidelines.html) and mars your otherwise fine comment.
Wasm operates using the same VM as JavaScript in the browsers currently supporting it. At this time it is nothing more than a compute optimized subset of JavaScript
Contact Form Sanitized Inputs
Hey Mario, OP here. Indeed, DIY guides are badly lacking in this domain. We are preparing a thorough benchmark of existing microphone array solutions. It will feature the ReSpeaker, Conexant, Matrix Creator, MicroSemi and MiniDSP which are all built for 360-degrees far-field audio capture. The goal is to have an excellent, affordable, and replicable hardware setup on par with Alexa and Google. Stay tuned!
Well, i would love to see some applications of delimited continuations other than those mentioned here: http://matt.might.net/articles/programming-with-continuation... .
Most languages have support for these applications.

The only thing other than that i have seen work is continuation based web servers.
Luckily for us and the environment, that's more a talking point than a policy point.
They don't need to deploy 0days if the vendor (willingly or unwillingly) cooperates. Also Microsoft began to heavily spy onto Windows users as part of normal operation making it difficult to impossible to fully opt out.
At this point, are they immigrants anymore? Generation 2, and even more so 3, are native born Americans (and culturally too).
you can take this position about literally any power that has ever existed. it doesn't change the fact that during the period of US leadership the world has had objectively fewer wars and the greatest degree of economic growth in history, thanks in no small part due to that very leadership eg in establishing the UN. that doesn't mean it's perfect or hasn't done carried out many actions that may seem reprehensible from the political norms of our contemporary moment, but thinking of it as simply an 'oppressor' lacks nuance to such a degree that it's essentially adolescent.

you make the mistake of assuming that because your political opponents think america is good, it must be bad. hideously common sentiment these days, though.
Nope. 555 has drive capability of over 100mA. More than enough to drive a small relay directly. Just make sure you have a spike suppression diode in circuit.
The comment you replied to answered your question completely: No.

The signature doesn't validate, and was simply copied from a published Microsoft application (something from sysinternals). You can do this at home right now by visiting Microsoft.com, downloading any signed application, and copying the signature verbatim onto your application.
Writes can only get issued from the partition holder, in addition to reads. I had to dig into the documentation links to find the design doc on github, which detailed this behavior.
Yeah I know, I've seen these dozens of time on youtube[1], but there's not a lot of these TV around anymore; or I need to find a real landfill.

A large fresnel lens is my most wished prize right now, I consider looking into manufacturing one.

[1] to recycle glass, metals etc, maybe produce some cute things or just to ease trashing (bins won't contains large empty bottles, but nice pellets)
Well they just launched a week ago. I have used it and it works. Happy to put you in touch with the founder if you like, or you could go ahead and risk €9
I have yet to buy it, but I've recommended it to five or six people who said they wanted to understand TLS, because I've never heard of someone being disappointed by it!

I think I'll buy my own copy today. :-)
> I need to use my spam hotmail account to log into Windows 10, I tried using a local account but it broke everywhere that launched a Sign Up page which crashed after 1s of an empty screen, which I needed in order to get the latest version of WSL with the bug fix I needed.

You're lying. You don't need a hotmail account to do any of that.
google "petya boot sector"

the first link is:

https://blog.malwarebytes.com/threat-analysis/2016/04/petya-...
How to Start Living Out of This World
Haven't read the other one, but the Yates is great. Another indispensable book for historical context about the Classical transition from oral to literate culture (and its implications for memory, education, and Greek thought) is:

- Preface to Plato, by Eric Havelock
Founder here. We don't deal with fired. We connect people from SF startups affected by layoffs with local startups that can hire quickly. Getting laid off != getting fired. Recruiters want our candidates, but don't otherwise know how to snag them.
A new massive attack hits organizations in several states
Serverless Architectures and Continuous Delivery
JavaScript also has somewhat arcane rules around when Number it's actually treated like an i32
Cool, from what I recall Flatt said there were issues in his process so I'm curious about what's new.
same - except my DND is set for midnight until 4pm. i still check the phone at lunch or when i get to work but i otherwise wont notice it unless it actually rings.
A raspberry pi is the wrong choice for this project from my perspective, complexity is far too high for a simple project. I looked at building the same thing (minus watering) because it seemed commercial products were way too expensive (Parrot Flower Power is $60!).

The cheapest DIY solution I could think of was ESP8266 ($2), Vreg ($.5), moisture sensor ($.5) and LiPo battery (i have many of these..) but I decided I didn't have time or inclination to write the software.

I continued looking for commercial products, and ordered one of these: https://www.aliexpress.com/item/Chinese-Version-Original-Xia...

Pros- Cheap ($15). Has temperature, light and 'fertility' (capacitance?) sensor.
Cons- Logs to phone app (in chinese) via BTLE instead of WiFi.

After a few weeks it seems to be working satisfactorily and I will probably order a few more units.
I think this is nearing pure impossibility. How could you even begin to enforce it?
You say we need to figure a few basic things out, how do we do if a person has basic confidence if not by asking them questions.

Please keep in mind that resumes nor any other data from the candidate can be trusted, because a huge amount of candidates lie or are mistaken about their own skill. I once interviewed a candidate who claimed to have 10 years of SQL experience but couldn't write a query on the order of "select * from table_name". Fully half of all people I have interviewed failed to convince me they could write anything more complex than "Hello World".

I am not advocating hours and hours of needless hoops, but a candidate for just a about any programming job should be able to Write a working fizzbuzz implementation. Questions on the order of fizzbuzz can and do eliminate a huge number of possible candidates.
So far this year, Windows leads the scorecard regarding mass infections and business downtime due to them.

So while indeed, open source is not a guarantee for better security, the results are in its favor. It might also be because it's not such an attractive target to hackers due to its low share in the desktop market. But still there millions of linux servers online 24h/24h and I assume they have a bigger potential for monetisation.
The astroturfing comment is broad about nearly any controversial information online, it's why people must be skeptical, critical, and discerning.

It's just an annoying reality of the internet, I suppose.
This is an excellent article not just because it explains this new concurrency library for Guile, but also because it demonstrates the fundamental concepts which underlie all concurrency. Processes in a Unix kernel, for example, deeply and directly parallel this implementation of fibers on a Guile VM.
Can you expand on this a little bit? What does it buy you?

Is this setup (the linux APU in bridge mode) so that the NTU could get hacked but your internal network would still be secure behind the APU?

What protects the APU from getting hacked like a traditional router would? Just easier to secure yourself?

Did you just purchase wireless access points separately? Did you buy a seperate switch?

I've wanted to do something like this for awhile but I wasn't sure what all was involved, or if it was that much more secure.
Seems like a lot of non-lawyers are learning how competition law works and very upset that it also applies to tech. This thread, unfortunately, contains a very low-level discussion regarding what's going on because it is premised upon whether or not competition law has merit in the first place, rather than whether or not it should apply in this specific instance. This is understandable, because most people here don't actually understand the competition framework or how its various moving parts work, either in principle or in practice.

Google has enough lawyers to know that its internal policy was at risk of triggering competition oversight. If it didn't, it has a horrendously inept legal and regulatory risk compliance structure in place.

As a point, in competition cases, companies will generally try to bite off more than they know the regulators will allow, then use that action to shift the goalposts to negotiate better boundaries for their practices or acquisitions than they would have otherwise obtained.[1]

This is what Google has done. Only most people don't see it because their main competitive advantage hasn't' been in easily analysed assets like high-margin factories or efficient logistics operations. Our language of business is not well structured for discussing the competitive advantage Google has acquired by repeatedly leveraging their search engine into other markets. So we ignore it.

Contrary to what people are saying, it is very clear where the 'line' was crossed from the competition perspective. Google has crossed that line multiple times in the past and gotten away free. It is more shocking, from a competition perspective, that they haven't been hit in the past.

___

[1] To explain the footnoted paragraph further: companies will offer to buy competitors that would bring it well past the market dominance high-water mark (different countries' legislation use different terminology to denote this point, but as a rule of thumb when you hit 40-50% of a given market, competition concerns arise). Companies then apply for regulator blessing for the entire acquisition knowing they won't get it. The hope is that the regulator will allow them to try to and keep all of the high-margin, high-value 'crown jewels' and make a show of disposing of underperforming assets. Doing this allows regulators the ability to say they exercised effective oversight, while the company is able to point to their balance sheet's performance over their competitors. Obtaining this advantage then allows them to raise at lower rates and fund activities to buy market share then rely on organic growth (which regulators don't take action against) to crush their opponents. This is a very standard market consolidation playbook for a player in the market.
> https://twitter.com/craiu/status/879690795946827776

1. That screenshot clearly shows the certificate is being treated as not valid. I assume it is being shared for IOC purposes.

2. I am referring to a software update, in the context of revmoo's "forced updates + NSL" comment.

> Pre-Snowden a lot of things had been considered "could possibly happen" tinfoil hat theories, turned out a lot of them had not been mere theories.

I could believe that is the case for those outside of the information security community, but nothing novel/tinfoil-hat-worthy was in the leaks, just confirmations of predictable sources/methods used for intelligence gathering and CNE work. Forcing a company to issue a blessed update containing malicious code is very different, and again, I am very interested to hear of any proof of such a thing occurring without detection (It doesn't seem possible for that to happen without it being detected and being discussed very loudly).
Here's the English version: https://posteo.de/en/blog/info-on-the-petrwrappetya-ransomwa...
I dig the writing style! I find that putting in a joke or two every now and then makes it far easier for me keep up my attention.

Also, this makes me think. I have two Raspberry Pis lying around. One is a glorified video player, the other one is just catching dust right now. I have wanted to do some kind of hardware project with it for a while, but I am kind of lazy and have pretty much no knowledge of electronics.

I have wanted to build a weather station, though, that keeps a long term record of its measurement in some kind of database. A Pi would be well suited for that, so I might get around to it one day after all.
Thank you for that. I was really beginning to give up hope for the site :-)
Well there are several hundred abstracts referenced in those links, some of which may surprise you.

There's a lot of interesting information out there.
Looks like people are paying the ransom:

https://blockchain.info/charts/balance?address=1Mz7153HMuxXT...
As someone who's help create a certificate authority and helps people get certificates from it every day, I'm kind of amazed at how few people who are getting certificates know what they're for or could explain what they do, even at the level of "certificates protect site visitors against man-in-the-middle attacks". (Or even know that they possess private keys, which they've promised in their subscriber agreements to safeguard.)
> Americans vote for the [Republican or Democratic] candidate they fear and despise the least.

That's exactly the flawed logic that is keeping us in this two party system. If we just vote for the candidate we support, neither Trump not Hillary would stand a chance.

The trouble with convincing people to actually do that is that most Americans feel the need to be on the winning side. "My vote is worthless unless it's for someone who can actually win."
It enables secure, private, exchange of data.

That is reason enough.
AMP. This is entirely what the AMP argument has been all about.
It's kind of amazing how we have to have this discussion again every time somebody designs a CP system with excellent availability.

I'll just come out and say it: the 'A' in CAP is boring. It does not mean what you think it means. Lynch et al. probably chose the definition because it's one for which the 'theorem' is both true and easy to prove. This is not the impossibility result with which designers of distributed systems should be most concerned.

My heuristic these days is that worrying about the CAP theorem is a weak negative signal. (EDIT: This is not a statement about CockroachDB's post, which doubtless is designed to reassure customers who are misinformed on the topic. I'm familiar with that situation, and it makes me feel a deep sympathy for them.)

(Disclosure: I work on a CockroachDB competitor. Also none of this is Google's official position, etc., etc. For that, here's the whitepaper by Eric Brewer that we released along with the Cloud Spanner beta launch https://static.googleusercontent.com/media/research.google.c...).
Exactly.

Many opinions here are the "market will solve everything" american way. But what many people fail to mention is how american corps avoid taxes. In my country fb and google are main online services with milions customers yet they pay no taxes.

Its amazing what you can do when you are 2big2fail
The idea that dynamic languages are OK for small projects but static languages are needed for big ones isn't valid.

Static languages don't solve the kinds of problems large projects have over small projects.

Static code analysis has its place, but it makes awfully weak guarantees itself. Can you ship a product because you got it to compile?

Larger projects of any stripe will want unit tests and other automated tests to ensure it does what it is intended to do. They're also usually going to want linters and other tools to enforce policies.

I think when you compare where you are with:

1. static language + linters + decent automated test coverage

2. dynamic language + linters + decent automated test coverage

you are in the same place.
Electric Objects acquired by GIPHY
Electric Objects Shutting Down
Maersk is down. Their main site says:

Maersk IT systems are down

We can confirm that Maersk IT systems are down across multiple sites
and business units due to a cyber attack. We continue to assess the
situation. The safety of our employees, our operations and customer's
business is our top priority. We will update when we have more information.[1]

Maersk is the largest shipping company in the world. 600 ships, with ship space for 3.8 million TEU of containers. (The usual 40-foot container counts as two TEUs.) If this outage lasts more than a few hours, port operations worldwide will be disrupted.

[1] http://www.maersk.com/en
How long does salt last in soil?

In the formulas I've read, there's very little salt. It's about a gallon of vinegar, a single squirt of dish soap, and a pour or two of salt.
This is well worth your time. The photographs are other worldly.

I never knew seawater could be so clear. At first I assumed the must have been using photoshop to make some of these landscapes.
> I still maintain that it is much more difficult to start a fire with a lens or mirror than people seem to think.

I'd have to agree with you. When I go hiking, I carry around 3 or 4 different kinds of "fire making" things, just in case I need them for any reason. I also practice with them on occasion to know what to do when I really need them.

It isn't easy to start a fire from scratch. It takes a bit of work, a bit of knowledge, and a ton of patience and perseverance. If you don't have any of that, you'll have a hard road ahead of you.

Even using good tinder plus magnesium bar shavings and a flint striker isn't as easy as you'd hope. In fact, it can be very frustrating. But once you get it going, it's very satisfying.

This is why I also carry a Bic lighter, strike-anywhere matches (in a waterproof container), esbit tablets, and a fresnel lens - all as backup fire sources.
The article didn't really go into detail on how LO3 uses the blockchain as part of their technology, so this may be unrelated, but this podcast [1] better articulates some insight into on how the blockchain could be used to affect the energy sector, specifically the grid.

[1] https://www.greentechmedia.com/articles/read/beyond-bitcoin-...
The question may be to asses tech-savvy-ness of the candidate (i.e. if he/she knows the SI prefixes, what the range of the modern CPU frequencies is and how do those values reflect on computing performance). There is one kind of programmers that learned their trade just to make a buck and don't care much about their working tools, and there is another kind that finds interest in computers in general. Interviewers may prefer the second kind.
If you speak German, this podcast is fantastic: https://alternativlos.org/36/. The sheer number of technological challenges in a fusion reactor is just crazy. Besides plasma physics you have to invent welding techniques, materials and a lot of other stuff. Everything is on or over the limit of what we can do now.
I have four kids and watched all the births. I can assure you that in most cases, the nurses manipulate the timing, even with natural births, so that they allow the doctor to come at around 7h30. Of course there are many exceptions.
@willlstrafach,
Nothing you have said convinces me the commentator you are replying to is wrong. Especially since an NSL would prevent ANYONE who detected anything from speaking about it. Updates that tweak code to introduce vulnerabilities, is not something thats science fiction.