skysight-inc/HackerNews huggingface dataset:
No, the attacker can't sign anything using either client's or server's private keys. The process assumes these keys haven't been compromised. But, as a client, you do need to be able to reliably verify that the private key used for the signing genuinely belongs to the server. That's where certificates come in. In the certificate there is a public key. The server has a matching private key. As part of the handshake, the client verifies that the two match. That's why the MITM can't interfere.

But that's only where the chain of trust begins. As the next step, the client must now verify that the certificate had been issued by a CA they trust, and they do that by recursively verifying the signature of each issuer in the certificate chain (along a few other things) until they reach a CA that's trusted by default (because it's in the client's root store).

Just to complicate things further: TLS 1.2 and earlier support many key exchange options, which implement key agreement and authentication in potentially different ways. For example, some key exchanges don't use certificates but rely on pre-shared keys. Another example, in the RSA key exchange the server proves ownership of the private key by being able to successfully handshake, and so on. TLS 1.3 made some improvements in this area and the key exchange process has been streamlined. My point here is that there are many other details to take into account, but I am trying to keep my explanations at a higher level.
The California Prop 65 signs are the brick and mortar equivalent to "this site uses cookies" notices online. As soon as every store/site has them, it is the same as no store/site having them.
Nope, you are right. I just missed that there wasn't a protocol on the src I was looking at.
I thought about that when I wrote that comment and my conclusion is, no: distributed systems protocols are notoriously hard, but they don't have adversaries. Crypto protocol flaws are marginally more complicated than distributed systems flaws, but also, a distributed system with a byzantine fault can be survivable, and a cryptosystem with a subtle flaw won't be.
Seedlings need _light_ when they pop out or they get all spindly. The sun does something like 1 kW/m3, so if you're using artificial light, you will need plenty of (preferably LED/CFL) lighting.
Source: the generations of spindly tomato plants who went before the thick-stalked purple-green-leaved ones.
International Internet Company NAVER to Acquire Xerox Research Centre Europe
This is one of those topics that really shows economics being the "dismal science."

The "economics 101" ideas applied to price floors (which ie what a minimum wage is) predicts lower volume (fewer jobs/hours). It doesn't predict how much, so it still might be worth having a minimum depending on the demand curve (which is never really known). OTOH, even the biggest proponents of minimum wage would admit that at some level minimum wage makes things worse. Most would agree that a $1,000 minimum wage would cause unemployment. Still, there's no real way of determining the "correct" amount, and even proponents seldom come up with a figure.

Anyway, being the dismal science economists just don't have any good way of settling this. This isn't the first study on the topic. If you look at it from a meta-research perspective, it looks like a null result with findings on both sides.
yarn is a great alternative to npm
remove the cords and await further notice by global-wide mailing.

How would that work, disconnect from the network, and await email...
That is correct, no need to check on this. I've done this for years :)
I wouldn't ordinarily pimp my own (poorly made) video, it's not even monetized, but I have the only TI-99/4 demonstration on YouTube if you're interested:

https://www.youtube.com/watch?v=oBgxOaUU7lQ
Fuzz testing makes you a better programmer
Is offline playback still relevant in the age of ubiquitous always connected Internet?
Sure, this is possible, but I'm not basing my concerns on headlines so much, but rather what I'm seeing out there when I try to educate myself on what is going on in the frontend world. Once you get past basic JS and JQuery, everything seems to just take for granted you are using a toolchain that doesn't leave much room for Python.
>We have confirmed U.S. cases of Petya ransomware outbreak

https://twitter.com/Bing_Chris/status/879713682242117634
What a clickbait headline. A paltry $3k and yet the article calls this a "MASSIVE ransomware outbreak". I would be curious to see what a "minor" outbreak is.
how can they infect an external drive that backed up the data before the infection?
Maybe Google is run by people far above idiotic nationalistic revenge fantasies such as this.
Better article imo https://www.bloomberg.com/view/articles/2017-06-26/seattle-s...
A Path Less Taken to the Peak of the Math World
That's not good analogy (living in hotels), better would be to compare how many people own their flat/house and how many rent it. Which would imply that a lot of people will still own their car ...
Pesticide residue is absolutely not a concern. If you're still terrified of it, just rinse your fruit and vegetables off first, and that will eliminate it.

Glyphosate itself really isn't a problem unless you're dealing with 55-gallon drums of it on a regular basis (and even then, the evidence is less than compelling). But such is chemophobia that we can't treat repercussions in an industrial settings with solely OSHA-style rules but must freak out about it even in situations where it's clearly not an issue.
Are the course lectures online?
One thing that seems promising is built-in support for binary neural networks, which makes sense given its focus on embedded devices. No reason this couldn't have been implemented, in say, pytorch - but I'm guessing this library was started a few years back, when there were less alternatives available.
Oh. I thought the statement was "for the same job".
I am sure the camera would detect a person with an unreadable face and alert the cops or something
Thanks, we've included it in the Unified Batch processing because of its ability to have large window sizes that enable batch processing.
I think that the most important missing feature is number of commits of the fork
A major clickbait technique is to set up an "information gap". The headline almost tells you something interesting, but leaves out the most critical bit. This makes you feel uncomfortable because you almost had something but ended up deprived and are just one click away from closure.

So, the difference between "An IKEA bowl" and "This IKEA bowl" is that "a bowl" is a complete idea. "This bowl" stresses that it's talking about a specific bowl, but leaves out which bowl it is stressing.
That's a true statement, but there's no logic here or reasoning as to why that makes it okay.
I don't see these things as equal, but I see where you are going with the comparison. Both require an understanding of a specific domain and problem(s) that need to be solved in that domain.

I really think striving to find specific problems where AI can add value is critical to making money in the space, and I agree with this article strongly.
This is why so many Republicans are ready to buck public opinion on health care
By applying that knowledge and by teaching it to others.

There's truth in the saying that if you want to become an expert at something you should teach it to someone else. As an experienced software developer there are lots of ways to do this:

- Coach your clients / colleagues.

- Offer professional training and workshops. Training developers in new technologies, techniques and frameworks is a lucrative business.

- Offer non-profit programming classes for children / students.
That would burn the vulnerabilities/exploits you use in this malware (e.g. stuxnet used 4 zero-days that weren't discovered for years after it had been first deployed), causing them to be detected, the particular holes fixed, and the signature of that particular malware added to detection lists.

No, you most likely want a targeted attack - manufacture such USB keys, distribute them only where you want them to be, and implement various triggers for the malware to delete itself (expiry date, IP ranges, regional settings) so that it doesn't spread worldwide beyond where you want it. Infecting millions of non-target systems is undesirable, that's how Stuxnet got discovered.
Ask HN: Secure delete files at Linux kernel level
I have a RaspberryPi. I use to save images of the SD-Card. It sometimes dd the SD, in order to overwrite "dirty" sectors and reduce compressed image size.
Is there a way to set Linux kernel so that every "delete file" operation zeroes the file before deleting it?
Aliasing rm to srm because -for example- `apt-get clean` does not invokes rm command -just to name one case.
If your intention is to have a local archive of an online site, yes.
If you are going to drink a teaspoon of pure (not diluted) acetic acid each day, and salt, i'll definitely take the glyphosphate.

The acetic acid is going to eat your internal organs.
Relay has a considerably lower drive impedance than a MOSFET for switching so you end up having to drive the relay with something anyway because the 555 will probably die. Might as well skip the middle man and use a MOSFET which has a crazy high source impedance.

(you need to stick a transistor between the 555 and the relay anyway so you might as well just use a MOSFET)
Your strange theory, that the economical damage is unavoidable to improve security will break down hard if those 0days are used by terrorists for the first time.
i only use the soap + vinegar + salt on the driveway, and just the soap + vinegar on the "drought friendly" gravel backyard
This. Google's data just shows their interests happen to align with "what people usually prefer" this time, but we know that is not what motivates google. Not at all.

They have acted against "what people usually prefer" many, many times before when it was beneficial to their own interests.

Additionally, "what people usually prefer" is completely orthogonal to the EU antitrust ruling, which is about holding companies responsible for the power that comes with market dominance.

Companies don't really have ethics or humanity (the way people do), unless we force them to. "We" in this case refers to the whole of society, including the people making up the company. In particular as companies grow very large, even if the people making up the company are ethical, humane and good, THEY are still tasked to wrangle a wild beast that is mostly just hungry for profits, and try to steer it to do Good and not Bad because it doesn't see there is a difference. But even then, they can use help from the rest of society, and regulations can be part of this help.
It's not "AT&T" doing this. It's their executives and shareholders - people with names and addresses. Don't pressure AT&T to change, you will never succeed - pressure it's key people. Do not let them hide behind their corporation.
Breaking Lorentz reciprocity, overcome time-bandwidth limit in physics and eng
1984 is happening in China. Sounds horrible. Happy I am not there. (Big Brother is watching you)
Can we make people value IT security?
Why not go all the way, then?

Armies train people by having them run obstacle courses with guns being fired all around them. Do a "realistic" interview, then, to really test how someone does "under pressure". Have them sitting alone in the room, and a screaming angry manager runs in yelling obscenities at them about how the production system is down, it's costing the company millions of dollars, and if they want to have a job they'd better get it fixed ASAP!

And have that same manager stand over their shoulder the whole time, yelling yet more obscenities. If the candidate doesn't get it fixed in, say, five minutes, then obviously they lack even the most basic qualifications to work as a programmer and you can reject them. Heck, save money and don't even do it on-site -- get their phone number and do it 3AM on a weekend, just like a real on-call situation!

Or... maybe the whole "under pressure" thing is just an excuse people use to cover for the fact that they like making people squirm, enjoy the feeling of power they have from knowing someone else's future is in their hands and that person knows it, and want to savor by making the trained monkey stand up and dance on command... or else.

Unfortunately, people who like the "under pressure" idea of interviewing seldom realize that sooner or later they're going to be the monkey and someone else will be the organ grinder.
If you can deliver 'a totally new opportunity through rich domain modelling' (ie. You have a solution to a problem that hasn't been solved before), and your solution:

- Is fundamentally tied to data that is proprietary and difficult to gather.

- Is intrinsically extremely complex to build and maintain.

- Can only be built by a diverse team which is difficult to gather.

Then... well, yes, I guess you could say that those of good metric for determining if a product can easily be replicated.

...but that's not the same thing as it being useful or profitable.

It just means that the team has a bit more time to try to figure out those other two important things before someone else comes along and copies what they've done.

> My claim is that Vertical AI startups are inherently defensible.

Putting 'vertical' in front of 'AI' doesn't magically make things better than just 'AI'.

The problem with these products is you can't take a trivial 'proof of concept' or MVP, pitch it and then roll it out 'into production'.

This isn't some 'smoke and mirrors' jazzy demo of a website & app combo you can go away and implement properly later... the proof of concept you build may not scale. Like... it may actually not be possible to scale. Maybe it takes too much compute to train; maybe it takes data you don't have; maybe it turns out your data isn't suitable.

You think building a business and getting users and sorting your workers and so on isn't hard enough?

Try adding a product that may or may not actually ever work into the mix. Sound scary yet? It should sound scary. That's the sound of money draining out of a hole in the floor.

...and sure, you argue, these models do work and they are good; but there's the catch right there... :)

...if you use a model that does work and isn't risky and does use available data... then you lose all the points at the top that made it an interesting business to invest in.
I know the article is about XP but a lot of the commenters here were more about the choice of Windows in general.
Soil moisture measurements can be scientific if you have enough money. Look up Time Domain Reflectometry and Soil Moisture Tension.

I don't understand TDR well enough to explain it, so I will let you search for your own info. The cheapest usable TDR sensor is about $350.

Tension has a simple analogy; a Slurpee (is that trademarked?) is easy to drink through a straw in the beginning, but it gets harder to pull the liquid up the straw as you drink more of it. That's tension and plants also struggle to pull the water from the soil depending on lots of factors including the composition of the soil, the amount of water present, drainage, etc.

There are several sensors that can be used to measure tension but none are accurate in all conditions, so people who want to measure tension tend to use multiple sensors of different types and triangulate on a useful number.

Large scale farming (in dirt across thousands of acres) is where the complex sensors are needed because the soil attributes are not uniform.

When you're gardening in a pot indoors or in a greenhouse with the same soil everywhere (because you bought bags of it), you can use those $0.43 resistance probes and just calibrate your watering amounts and intervals over time. Pump on for X units of time, ignore for Y units to let the water move through the soil, then sample every Z units until it needs more.
it seems like a trivially avoidable mistake to use a single wallet for all collections, but maybe i shouldn't be giving them ideas...
This is most likely due to the Office bug: https://www.digitaltrends.com/computing/here-is-a-fix-for-mi...
There's an article on it in NYT which provides a short list of the reaons: https://www.nytimes.com/2017/05/22/technology/north-korea-ra...

It basically comes to it looking like Lazarus Group

The WannaCry attacks used the same command-and-control server used in the North Korean hack of Sony Pictures Entertainment in 2014, which wiped out nearly half of the company’s personal computers and servers.

...

Other digital crumbs linking the North Korean group to WannaCry include a tool that deletes data that had been used in other Lazarus attacks. The hackers behind WannaCry also used a rare encryption method and an equally unusual technique to cover their tracks.
Those who live in Europe. Or anywhere with decent infrastructure.
Back in 2003, XP would have been a sane choice. For a newly deployed warship, it IS crazy.
> Neither SML nor Haskell are optimized for expressing deeply nested records with many string literals, for example.

Purescript's extensible row types handle this process elegantly and if Nix takes a cue from that, it will work great.
“Women in the Room”
Just curious, could the fake sig have been begotten/created from the supposed "32 TB of source/internal MS code that was 'leaked'" recently?
This looks like it could be really useful for those rare occasions when I need to quickly modify some serialized data. It can be pretty annoying to have to count the characters in a string :)
>Using Internet Explorer is 100% voloutary and there are alternatives. The US government should not interfere, its unnecessary and I think its an abuse of power from their side.

I've already forgotten the IE case so I might be missing some details but what you wrote is 100% true even if it was probably intended in a ironic fashion.

I really, really don't see a reason why a government should interefe in a voloutery exchange. I kinda like my internet unregulated. Crazy actually how many people will "(+1)" sentences like "the internet should be decentralized, free of government and corporate censorship and open to everyone" but will cheer for the EU when they attempt to force a website to change its content.
What's the best way to automatically archive all of the data I produce on websites? Facebook, Twitter, Instagram, blogs, and so on. At some point these services will disappear, and I want to preserve them.

I know a lot of these sites have archiving features, but want something centralised and automatic.
I did see those console windows here on Windows 10 but I am not (yet?) affected. So might also be related to something else (Windows Defender updates?).
I don't see acetic acid on your list, and as someone mentioned above, i'll take vinegar (salad dressing mainly) and take salt everyday, you can go drink the roundup.
The original assertion referred to neighbourhoods, which do tend to grow inversely to the population density. In my experience, a resident of Toronto might consider their neighbourhood to be just a block or two. While rural residents think of their neighbourhood as a many kilometre wide radius. Census/electoral divisions are a decent proxy for what we are trying to measure here, I feel. Certainly for the medium-sized rural divisions that are most relevant to the discussion.

I believe I understand what you and the parent are getting at, but it appears to be of a different discussion.
Deploying Containerized Applications Tech Overview
Yes, I'm aware of that. I can't tell you why that difference exists, but it does.
Indeed. This was on the kitchen window sill with sunlight 50% of the day. We got there in the end unaided by technology but it was so much fun trying with it.

Ones that worked eventually: http://imgur.com/a/EDdwR - note cable ties :)
Robot Car Tech Startup Drive.ai Raises $50M, Adds Stanford's Ng to Board
You are thinking "trojans," not viruses. Viruses spread without any user interaction by exploiting vulnerabilities in clean, but accessible machines.

Ransomeware used to be purely trojans, but newer iterations now come with a viral component based (at least partially) on that leaked NSA toolkit.
> The haystack needle Mehta presented Monday now connects Lazarus to WCry, although the tie connecting the two isn't precisely clear just yet. WCry's creators may have deliberately added code found in Cantopee in an attempt to trick researchers into mistakenly believing Lazarus Group is behind the ransomware. Researchers at antivirus provider Kaspersky Lab said such a "false flag" is plausible but improbable. The Cantopee code snippet, the researchers explained, was removed from later versions of WCry, making it hard to spot and hence ill-suited to act as a decoy.

> [...]

> Grooten went on to say, "BTW, 'North Korea' may well be a foreign hacker group paid by them."

https://arstechnica.com/security/2017/05/virulent-wcry-ranso...
In Startup School, we were pushed to "do things that don't scale". (This was particularly hammered into us into the office hours video I linked to in my original comment). So, we abandoned coding development in favor of using Zapier, email, and spreadsheets. Now that we have a better idea of what works (and what doesn't), we're getting back to application development. We hope to have a web-app online later this month.

If you want to update anything - please email us! (team at moonlightwork.com).
One thing I was missing from comments is that the ruling is not passed by courts but by the commission investigated the crime. Is it same as prosecutor sentencing the accused and there by the burden of proof is upon the accused ? Would it be the same if the accused is a person and not a corporation in EU ?
I'd imagine you're correct, but I'd also imagine critical military agreements include a "Microsoft will fix it, and fast" level of maintenance.
How can Silicon Valley finally become an inclusive place for women?
Momentary blackouts happen - rarely.

Funny thing -- these folks have, y'know, actual data on this stuff:

http://blog.interviewing.io/you-cant-fix-diversity-in-tech-w...

Choice quote:

As you can see, roughly 25% of interviewees are consistent in their performance, but the rest are all over the place. And over a third of people with a high mean (>=3) technical performance bombed at least one interview.
I'd put it more on the level of setting up a chat bot to talk to another chatbot.
Everyone in the universe is.
This so much! Furthermore any application of reasonable size will make use of database-specific functionality.
The combined one works, it's just devoid of features I want, hence the separate modem and router. As for the router the Google one is the only one that seems to work at my startup's place. The other routers I tried only work on my home Comcast line.
Hi Folks -- Stephen Cass here, one of the editors at IEEE Spectrum. Rather than replying to a bunch of comments individually, let me say here that the folks pointing out it wasn't the first ever 16-bit computer are absolutely correct. As the article quickly makes clear, it was the first 16-bit HOME computer: we should have been more precise in the headline, and that's our bad.

Speaking personally, I really loved having this article in Spectrum and reading everyone's comments, as I too was a 99/4A O.G. from the 1980s, (the machine was my first computer before I moved onto the BBC Micro). And word, yes, the system was squirrely, but I did at least learn to count in hex in my head trying to turn user-defined characters into poor-man's sprites in TI-BASIC
That feels like a job for getters/setters, no?
It isn't to difficult to integrate Webpack with Django. I can't speak for other JS frontend tools but I can't imagine that it's very hard to do so.

I have no experience with server side rendering though but I can't imagine any problems with that either.
> time domain reflectometry

Can you point us in the right direction on this? The wiki doesn't make it clear how it would be used for measuring soil moisture.