skysight-inc/HackerNews huggingface dataset:
Actually WASM as it is right now will not help significantly with any of that. The main issue with javascript is that it is a script, so it has to be compiled before it can be run. Therefore, for decent sized scripts, it can take up to 1-3 seconds to actually parse the damn thing. With WASM, you can send up compiled code which will reduce that initial load time.

If you tried to implement OpenGL in WASM, it would be incredibly slow and take a long time to load. You will always be constrained by the browser painting the DOM, or changing canvas, whatever. You can't display info to the user from javascript without modifying the DOM.
Subseven was just a trojan, tho a really fancy one I had lots of fun with as a kid.
Hoping for interesting comments from readers
Konkourse – an open source communication tool
Something to keep in mind. They were running:

Apache version 1.3.36 and PHP version 5.1.4

It's not like a brand new Ubuntu installation connected to the open Internet will suddenly be pwned. The owners of this company were beyond inept.
This is their reasoning for abstaining.

"On 2017-06-23 Red Hat voted Abstain with the following comment:
Red Hat is voting Abstain at this time because although we think there has been positive progress within the EG to reach consensus since the last vote, we believe that there are a number of items within the current proposal which will impact wider community adoption that could have been addressed within the 30 day extension period for this release. However, we do not want to delay the Java 9 release and are happy with the more aggressive schedule proposed by the Specification Lead and EG for subsequent versions of Java because getting real world feedback on the modularity system will be key to understanding whether and where further changes need to occur. We hope that the Project Lead and EG will continue to be as open to input from the wider Java community as they have been in the last 30 days and look forward to the evolution of Java being driven by data from users and communities beyond OpenJDK.

We would also like to take the opportunity to thank the EG, the Oracle Specification Lead and others who assisted in the numerous meetings which have taken place in the last 30 days. This increased collaboration and positive approaches to discussing and resolving issues has been welcomed by ourselves and the wider Java community."
Can this be combined with webrecorder? Does anyone know someone who's done this? I only use about 30GB of traffic a month so a 2TB $70 hard drive would last me almost six years.
I wasn't referring to corrupting the backup directly -- but corrupting the data as it is written to the backup server. This can be done by compromising the backup client, through a rootkit, etc. If this is undetected for a year before the attacker pulls the final trigger, you have a year's worth of bad backups.
understood, I was responding to your "astroturfing" comment. The shill card gets played pretty frequently in these discussions.
That would never happen. A network tap would be able to detect a malicious update even if the main PC was implanted very well, and a Microsoft-signed malicious update would be worldwide news.

Please correct me if I am wrong, but I don't think there has ever been a single instance of this actually occurring, only "this could possibly happen" theories. I am definitely interested to hear more if this is not the case.
I think you might be taking this a tad too seriously ;)
In large corporations yes (For emergency procedures etc). Definitely, if most staff have a work phone (for email).
I think the empirical footing is simply seeing how companies change their businesses to adjust to consumer demands. All of the major players have shown time and time again that they adjust their products based on user behavior. The entire Lean method and deploy-measure-iterate-deploy cycle, is predicated on a feedback loop between users and products.
I think that they often do when it's appropriate, but the way they make them more accessible isn't by changing their papers but by giving talks or presentations that are less technical (like TED talks for example).

This seems like a good approach in my humble opinion.
Radio Shack Auction
Code.org Gears Up to Get 30,000 Students Psyched Up About Computer Science
I don't know why this got downvoted. Maryland is infamously gerrymandered to the detriment of Republicans. Both parties abuse redistricting.
Agreed, but it's a bit frustrating when a doctor actively ignores someone who obviously has some valuable knowledge the doctor could benefit from. If they are incapable of that, I question how they are capable of competently diagnosing illnesses, which is a far more complicated task.

Granted, I'm writing from Canada, and while having free health care is lovely, what's usually overlooked is that it is very often second or third rate care, if you can even get it (free doesn't help much when there are multi-year waiting lists).
(You may or may not be joking; let's assume you're not for this response.)

This is a dangerous argument.

I'm a free software activist, and I firmly believe that security without free software is a facade, but that doesn't mean that free software is more always more secure; it's an open source argument that's been fairly easily refuted lately with high-profile bugs in software like OpenSSL.

It's easier to hide secrets in proprietary software, but most security vulnerabilities are bugs, not explicit backdoors. So even bit-for-bit reproducibility won't defend you against that.

I'm not saying you shouldn't use GNU/Linux---I think that every user deserves an operating system that is fully free, and hope that people will use it (or another free/libre OS). But my argument is on the basis of freedom, which still stands _regardless_ of security. It just so happens that I believe that strong confidence in the security of a system is not possible with proprietary software.
> I don't think Go works with WASM, because it uses a GC.

So? To WASM, how is the GC different from manual allocation, since it's just explicit manual allocation/deallocation in the underlying runtime that gets compiled to WASM.
Learn to Bootstrap Your Business with this simple guide
How Putin keeps the internet under state control UK
Jessica Kylie
Seeing Apache 1 in the wild makes me a bit nostalgic.

What kind of utter lunatic would use that for their company today?
You are interpreting my statement as "there are literally no other questions on the ESTA form other than citizenship and that's the only thing it looks at". That is not what I said, and you need to stop assuming that's what I said.

ESTA exists to check eligibility for the visa waiver program. The primary criterion of the visa waiver program is... your citizenship. Everything else is secondary. All that stuff in your big quote? It's stuff that the US wants to check on everybody. The fact that ESTA checks it does not mean that ESTA is suddenly not a gatekeeper for the visa waiver program, or that ESTA is doing special extra checks above and beyond anything else, or that ESTA is somehow secretly doing something other than visa-waiver eligibility. The fact that ESTA checks it simply means that everybody, including people eligible for visa waiver, will get checked on those things. The difference between visa waiver and non-visa-waiver is not whether those checks are done; it's what country you're a citizen of. ESTA checks those other things because they have to be checked no matter what, and doing them in the same form makes things more efficient. Period.
It's clear that nothing bad can happen on a machine where you can't do anything.
teardrop?
>" I started to sniff out which companies were serious about hiring and which perpetually advertise for talent"

Would you be able to share how you sniffed them out or what techniques worked for you?

In my opinion this is one of the largest time sinks. Companies that aren't really hiring.

I see this repeatedly on the HN "Who's Hiring" thread. Companies just perpetually advertise the same roles and very often these are the same companies who seem to have no problem wasting other's people time with flakey recruiters or ghosting or just never responding to candidates. I would love to know if there is a commonality you found?

I also wish there were a better way to share experiences regarding these perpetual time wasters, something akin to hosts respond percentage on AirBnB. And I personally don't consider Glassdoor to be a very good experience or trustworthy outlet.

We often hear about the shortage of talent. And while I don't doubt there is an amount of shortage, I am often left wondering what percentage of this are companies completely broken hiring process. I also wonder whether these companies are even aware of how broken their process and their recruiters are.
Ask HN: How does developer on boarding work in your organisation?
We don't have a consistent on boarding process yet and this is leading to inefficient use of developer time in the first month at least. I'm working on preparing one.

Do you have an on boarding process ? How does it look like ?
Thanks for the links. It seems to me that the animal studies made by the EPA returned different results than the one done by the IARC. Citing the article from Reuters:

> "IARC reviews published studies to identify potential cancer hazards," the WHO said. "It does not estimate the level of risk to the population associated with exposure to the hazard."

I honestly don't know what conclusion, if any, should I have from this.
Please respond to what my comment actually said, not what you wish it said.
How to Measure ASO Organic Installs in iTunes Connect and Google Play Console
The article doesn't say much, besides replaying many common thoughts. Actually, as an article, it's pretty much useless.

U have been reading "The AWK programming language" and actually kinda fell in love with awk.

Awk does many simple things, it's fairly nice to combine such simple things, and it's generally a nice and handy tool to know.
> That is not a valid argument by any possible mean.

Now try convincing someone. That is what I tried to do throughout the entire election, but the propaganda machine is treated as fact by many here.

These people get hung up on the idea that we can never leave the two party system, meaning no third party candidate will ever get elected.

Here in Utah, we did manage to give McMullin 20% of the vote, but that was still marginally less than Hillary (after salt lake county) or Trump.
Trump Unpopular Worldwide, American Image Suffers
I think he is looking at it from the point of view that you want to build a company that has value.

Focus on a problem that has value in an industry that has money. Collect as much data as possible to prototype and use the tool itself to collect additional data as it is used.

I don't see that as hype, I see that as a useful roadmap.
how do you think you got infected?
"0-day" does not mean without human intervention. That just means "previously undisclosed".
How sperm whales sleep
It's always seemed like the best way to end ransomware is to launch hundreds of variants that demand money but don't actually decrypt anything. Unethical, to be sure, but eventually people would learn not to give them money.

All the competent ransomware authors are probably quite unhappy whenever a defective ransomware strain pops up.
Does the C (or is it C++?) core of pytorch come directly from torch or do they add more functionality? Is there a way to interface with this core using C?
US vs Microsoft was completely different.
If you read his past comments, he's either 15, Indian, or both.
That's true, but React doesn't directly deal with those problems (and certainly not the parts specific to Facebook).
they already exist even though in a limited form: async/await, coroutines, generators etc. I doubt whether first-class support is that important.
People thought that the pace of the world couldn't get faster when everyone had horses. They had no distinct concept of energy and now we know nuclear energy is possible.

You see what exists and presume it is all that can exist. You are limited and whether or not it is rational human ingenuity is not limited. Only those civilizations that slowed down as you advocate "failed", and even then they still innovated just in different ways.

You are wrong because you make the same argument as people of yesteryear and they were wrong for reasons unknowable to them but obvious to us now. The future is unknowable to us but it should be obvious that some group of people will do better with some technology or process that seems obvious to them.
I can't seem to edit my post anymore, but the machine in question was a tiny little VM used as an SSH jump host. The specs were minimal. It was the only machine that wasn't firewalled to hell and back, which is why I did the Nyancat there.

I'm working on deploying an enterprise grade NaaS solution across a large cluster of servers, stay tuned!
Google is closer than ever to a quantum computing breakthrough
A smartphone is not a computer any more than your electric toothbrush, which happens to have a CPU and Bluetooth for whatever reason, is a computer.

In this context "computer" means "desktop computer" or "laptop computer".
Just to save the links and comments of good articles.
> The OP isn't talking about Google linking to 'search results pages'

Really? It certainly sounds like that's what he was talking about:

> wouldn't need to search again, but would be on the search results of that other site

In any case, linking directly to the actual product is _already_ what Google does. So if that's the goal, then what's the issue?

> An advertising company says "Our users think our ads are awesome"

That's another thing about this ruling that I don't get. Google's "Product Search" results are essentially paid ads, and they're explicitly marked as such. (Example: https://imgur.com/m5rGqLa)

With this ruling, isn't the EU pretty much saying that Google isn't allowed to display ads on their search results pages, because those ads are displayed at the top of the page, thus "giving prominent placement to Google's own service"? That's ridiculous, right?
Considering how much tax dodging the US companies engage in, I'm not sure that would be unfair if it was true.
The worst thing you realistically can do to stall your CPU is miss cache every time you read data from RAM. If you do this for every instruction (which would be quite a feat in itself), you divide your instruction throughput by about 200. But even then, and even on the shittiest modern CPU you'll be retiring millions of instructions per second.
The man who really invented the cash machine
Learn a language in 60 hours, with Hungarian as example
10-20% discount. Mostly from the daily deals section. I mostly buy Lowes gcs, some restaurants gcs along with Dominos.
I have the horrible feeling that the main applications of WebAssembly will be hostile code. Ads, malware, spyware, paywalls, and other junk. Look at the history of Java in the browser, and Flash in the browser. 2% great, 98% terrible.

Consider WebGL, which is very impressive yet seldom used. There are some very nice demos, most of them several years old, and some half-finished indy games. Other than that, not much. Kind of like VRML.

Browsers need a "disable WebAssembly" option. It should require user interaction to turn it on.
I upvote comments readily, even if on mobile where the UX makes this tricky as I fear accidentally down-voting.

I am not in the habit of upvoting articles, this is mostly habit. On Stack Overflow I don't hesitate to upvote useful questions and useful answers, comments too.

On a separate note, how many people on Stack Overflow know what a 'stack' is, nevermind the overflow condition... I am not sure my colleagues would have a clue.
Ok, we inserted 'shipping' above.
Basically, in the future, we're all stone-faced automatons, helplessly clawing at the walls of a social cage that demands our thoughts must be at least neutral and aloof, if not explicitly happy and positive.
How to Optimize Your Google Play Store App Details Page for ASO
Any use of a zero-day risks burning it, and this was one of NSA's most potent zero-days. I imagine they used it rarely and wisely; probably trying other exploits first.
... and next year the year of Linux Ransomware.
You keep referring to animal studies conducted by IARC. What studies are you talking about? The one that got all the press, published in The Lancet, was a meta-study, covering many herbicides, and the conclusion it true about glyphosate's human cancer risk was based on other studies that also covered many herbicides and showed comparatively weak correlations for glyphosate.

The lymphoma study the IARC report actually footnotes covers something like 30 different chemicals, and equivocates on glyphosate.
Important correction its not the court its the commission. It seems similar to prosecutor handing down the sentence and burden of proof hence falls upon the accused
Nice. How are you planning to pay the servers? Your service seems quite storage-intensive.
The Usefulness of Useless Knowledge
> I highly doubt Google/Baidu will get into business of recognizing manufacturing defects in fidget spinners or analyzing sensory data

They will build platforms for:

- IoT - single robotic KIT/SDK, which allows you to easily install sensors and integrate data into rest of the platform

- Cloud ML - image recognition/models optimization - will allow to train model and detect defects from previous step by two mouse clicks

and take a lot of added value from small companies.
You can absolutely get a B-1 or B-2 visa. Only VWP-eligible country citizens are even eligible to get an ESTA in the first place.

https://travel.state.gov/content/visas/en/visit/visitor.html

You fill out a DS-160 and go through the process, but you don't have to get an ESTA. You are always allowed to apply for a full visa instead.

More succinctly, click the "May I apply for a visa instead of using the VWP?" question on this page: https://travel.state.gov/content/visas/en/visit/visa-waiver-...
A more relevant comparison might be with their APM product.

https://www.datadoghq.com/apm/
"First class functions exist in a limited form: Function pointers, etc. I doubt whether first-class support is that important".
Seattle's Painful Lesson on the Road to a $15 Minimum Wage
Super exciting project. I'm currently renovating a flat I bought, and looked into speech-language home automation. Snips is exactly fitting my criteria of being able to control what gets send out. My only concern is the microphone setup. Alexa and Google Home seem to have quite robust solutions that work even if you aren't close to the microphone. Do you have any DIY guides to achieve something similar?
Some people still do it. I've seen it this year in Akasaka.
Author here. It is my cursory understanding that the Emscripten SDK handles converting types to and from Javascript values and C-like data in the module's virtual memory. I'm not totally sure how that conversion is happening yet. I can tell you that when I pass a string when it expects an i32, it treats it as 0, so `add("foo", "bar") -> 0`
Try Dynatrace.
Disclaimer: I used to work for them.
Seems really interesting! Any preview lectures possible?
I'd argue its relevant because you can't CTRL+C CTRL+V a nuke.
I'm always amazed at the level of specific knowledge people have on random topics on hackernews, it's why this is one of the best discussion communities online.

(nevermind)

(nevermind)

(nevermind)
English version: https://posteo.de/en/blog/info-on-the-petrwrappetya-ransomwa...
Yeah, that outcome seems pretty straightforward...

It's probably not hard to require that writes (which require a majority) also require the lease-holder to ack the write, which seems like it'd solve this. It's a bit odd that they don't mention anything like this, but it is a fairly short blog post.

A bit of lazy browsing didn't lead me to any more detailed descriptions of how it handles partitions. Anyone else know?
What are the dark corners of Vim your mom never told you about?
Really? We're going to blame NSA for the companies leaving SMBv1 open to the public?
That's besides the point. It's simply that the fact that you got de-facto power over people by doing legal or even fair things does not necessarily entitle you to use that power however you like.

And at least the EU commission seems to have come to the conclusion that Google has used its power that it got due to its successful search engine to promote their price comparison site more than it did competing sites, and that not solely based on merits of the site itself.

Whether people could potentially evade the manipulation if they cared enough is irrelevant, just as it is irrelevant whether a fraud victim could have figured out they were being defrauded if they had cared enough.
That's awfully cynical. The answer they got is more indicative of the fact that they're talking to a representative rather than one of the engineers who would have actually been responsible for fuzzing it, so all the representative can really do is say what the policy is rather than answer the specific question of "was this particular component fuzzed"?
AppDynamics perhaps?
Really cool. If you have popular projects it's great to see what the community is doing with them. http://forked.yannick.io/andreis/interview
Many people confuse herbicides with pesticides as you have probably noticed.

Both can be harmful or beneficial, depending on usage obviously.
This is awesome. I did something similar at reddit.com/r/takecareofmyplant

I was running through moisture sensors on a weekly basis until I hooked it up to the GPIO on only flipped the power on when I was taking a reading. Now I get readings every 10seconds and haven't had to replace the sensor in over 6 months.
The only functionality WebAssembly provides now is more efficient program representation. There are no additional APIs provided.
To clarify, I am not talking about attribution. When I say "not stay a 0-day for very long" I am referring to the fact that 0-day use by any threat actor is generally going to be very targeted, because the chance of a PSP and/or network tap logging artifacts or alerting the user is extremely risky in regards to potential exposure of the intrusion, causing the 0-day to likely get burned (Since discovery allows for detection signatures and patches to be quickly created, as well as remediations applied to affected systems).
The reads, per the design doc, can't get stale, because the values can't be updated until the lease ends.
Competitive?

In social media (e.g. against FB, maybe), but what competition does Google have for search?

Neither Bing nor anything like DDG matter.
See here for confirmation: http://reason.com/archives/2017/06/27/stalin-edges-out-putin...

I don't think it's only nostalgia.
WTF is a 3d touch swipe. How is this feature hidden behind a gesture? I'm irrationally angry this is so hard to find.
The sensors corrode due to oxidation caused by the DC current. It's a pretty simple design change to alternate the current flow through the sensor and prevent that oxidation by toggling the pins.
The main problem with deprecating internals is the slow cycle of Java. They first released every year, then every two years, and now every three years, and the pace seems to be slowing down further. If they still made a new release every year, they could mark something deprecated in one release and then refactor it the next. But given that they spend years between releases they don't have that luxury. This is the age-old problem of going long between releases because it's hard to release, because you go long between releases, because...

I say this in all seriousness: java should emulate PHP. The current development model of PHP produces a stable product that optimizes for the needs of the user community, ships a major release once a year and welcomes outside contribution.