skysight-inc/HackerNews huggingface dataset:
The Cooja simulator runs nicely on a regular laptop and could then run up to some 50 nodes at real time speed. For larger networks, a larger computer is needed. Alternatively, the simulation speed can be reduced. The simulation detail level also affects the speed. With a highly detailed simulation, with device microprocessor and radio transceiver emulation, a normal laptop can handle some 10 nodes before it starts to slow down.
From the F-Droid (https://f-droid.org/) store:

Call Recorder: https://f-droid.org/packages/com.github.axet.callrecorder/
It basically says she very likely doesn't know a damn thing about how computers work, let alone how to make large, critical systems secure.
Maybe? I've said that elsewhere on the thread. But I'm not sure. Every big company tends to hold all sorts of hugely sensitive information.
Oh, neat! I guess I shouldn't be surprised that advanced Lisp systems from that era did this kind thing as well. The Lisp and Smalltalk systems of that era really are something, even compared to modern development environments. Which is especially impressive when you consider the limitations they were working within.
You are forgetting another important factor: not all laws are just or make sense in the current year. Less than a generation ago we had laws that oppressed black and gay people. I doubt you or anyone would defend these laws now just because they happened to have been ratified laws.

Non government entities oppose or try to influence existing laws in many ways and for many reasons. Some examples are BLM, congressional lobbying, and what Uber has done. Uber's fight is, of course, strictly for their bottom line, but the general principle of non government entities making change through non legislative channels applies.

Finally, you have to consider public opinion. Uber has had plenty of opposition, but I would say that, by and large, the public supports them because they provide a useful service. Your proposed "murder for hire platform" is both already illegal and would meet staunch public opposition.

If SESTA passes we will not only potentially criminalize many software projects, but also make some markets impossible to enter without a sizable amount of cash (ex: web hosting).
Influencer Marketing Primer
I've spent about half my professional career finding vulnerabilities in the software of developers who are convinced they're "qualified to design with least privilege".
Why? He is right. What that dude did was disrespectful to the American national anthem.
Semaphores are perfect for controlling the amount of concurrency. I use then for this all the time.

Sure I could use a mutex and a counter plus comparison and busy wait... but why? As far as I'm concerned, a semaphore is just a more extendable mutex.
1. chicago tribune's website is horrible. not sure what it is but it keeps freezing.

2. oh man, people didn't believe him about football dying, and even called him a liberal!

3. the article is titled to talk about how the middle class is abandoning the game and within the first couple paragraphs talks about how stars have been pampered for most of their lives... i guess you can make an argument that you're pretty pampered if you're middle class?

edit:
football's decline is

1. roger goodell essentially having the powers of judge dredd

2. ignoring the concussion issue for so long

3. badly handling any kind of domestic violence issue

4. essentially blackballing a competent quarterback for expressing his opinions.
You've lost me. I think you may have misunderstood my point about pentests. I mean "success" from the perspective of the testers: you asked me to own your network up, and I succeeded.

My point is: the most savvy companies contract annual sitewide pentests, in addition to all the other stuff they do to secure their networks, and virtually all of those pentests "succeed" (from the perspective of the testers).

Further: not only have I never personally been on an internal network pentest (the kind where you start with an IP "behind the firewall" and nothing else) that failed, but I'm not sure I've even ever heard of one that failed. I'm certain there are some networks that are so resilient that they've stymied a competent internal pentest --- but again, I wouldn't know which one, because I've never heard of that happening.
If you have a 1 in 60*24 chance of guessing correctly then after 1000 guesses (potentially against different people) you have a 50 chance of being correct on one.
That's funny. I've never been in Credit Card debt and I have a 700+ score.
he disrespected the national anthem?
Oh look, the 21st century looting of Africa for its resources. Just to think so many materials extracted from the continent and now sand.

This poor continent keeps getting jacked.
IE was a totally different situation. With IE you started with no forward motion plus a flawed product with lots of deficiencies, and then evolved to a product with no coherent direction (i.e. IE 7-10).

Apple is very consistent with their products: upgrade or else. The only exception really is iTunes, and that's only because not supporting older versions would lead them afoul of merchantability laws for devices.

The Apple approach is not great, but at least it's comprehensible. Try certifying any product or configuration with Microsoft -- you have a minimum of 6 versions of Windows 10 alone, not to mention the various Windows 7, 8, 8.1 and Windows server browsers.
AMA request: the developer who made this decision.

1. How does it feel to be literally the dumbest engineer on the planet?
You cannot indent yaml with spaces instead of tabs. This has been a source of confusion for years for many bukkit end-users.
That and the speck of dust is not really doing much work.
So? The US isn't a fascist dictatorship. There's nothing wrong with disrespecting the national anthem, it's just propaganda. Free speech is a more important American value than blind patriotism.
How a Nigerian Makes Over $3k Monthly Through Writing
A common talking point from the right during the withdrawal from the Paris accord is that "It's just talk, China isn't actually going to do anything". I wonder what the new talking point going to be after this news? Something something developing country, coal power plants?

This seems like pretty good news in general though, combined with other smaller bans (like the UK+France ban on Diesel cars). But I'm not sure how I feel about China itself leading this green push.
Ever seen greyhound racing?
As a maverick not a lawyer, it's worth noting that what this means in practice is that evidence of a crime obtained by illegally recording a telephone conversation may not be admissible in court. I say may not be because a judge could decide to allow the evidence if the alleged crime is sufficiently serious.

It's extraordinarily unlikely a criminal or civil case will be brought against you because you revealed to a company that you recorded a support call to them, especially if the content of those calls reveals impropriety on their behalf.

What probably would be a problem is if you recorded a telephone conversation with the intent to, or actually causing, harm.

At least, that's my lay understanding of how things might go.
It sounds like OTHERWISE is vaguely analogous to a catch on Java's ClassCastException (assuming it would be thrown for any nonsensical comparison). Traditonal if/else maps IF to true and ELSE to false|undefined; OTHERWISE simply extracts the undefined case to a separate clause.

Interesting way of expressing the result of an ill-defined operation. Or am I off base?
How Social Security numbers became our insecure national ID (2012)
If I ask it a question and then ask it the same question 5 minutes later will I get the same answer? If I tell it something about myself and then ask about it later, will it remember? Even the 'smartest' chat bots I have ever 'spoken' with function like someone with no functioning short-term memory or a totally ephemeral identity that alters with every statement.
We've dealt with this for hundreds of years.

Your car kills people? Your biscuits are mouldy, or full of lead? We have strict rules, and companies that don't follow then end up in serious trouble.
It's not python dependent and it's named something more easily memorable.
Card numbers.
You are making some mental gymnastics to ignore the historical oppression and continuing fight for legal rights.

By your flawed logic, someone who inherits a building also have put no monetary investment on what they are renting. You might as well also say that holocaust survivors won the lottery, by that logic.

Indian tribes, and every minority that managed to gain any stop-gap benefit, have to invest a lot of effort and time in maintaining their immunity/rights/etc. And this obviously greedy move, make that work harder in the medium/long term for them and every other tribe. So in a way they are putting in a investment.
I honestly couldn't care less what she majored in a quarter century ago. Do you honestly believe a CS bachelors degree from a couple of decades ago would have any relevance to information security today?
Tesla Unlocks Battey Packs to Aid Evacuation
This is an announcement of a desire to set a target, not an achievement. Automobiles are not the core of China's emissions problems, they are still installing a large number of new coal reactors, to my knowledge.
In my humble opinion, when a remote code execution vulnerability appears in an application written in a memory safe language, you know you’ve chosen the wrong way to model a problem.

The art of writing code is defining the problem space, which is avoided completely when you allow the consumer of your interface to execute arbitrary code. The whole point of interfaces is to restrict the possible actions of a consumer of it — i.e. the inverse of arbitrary remote code execution — which is the hard part of software design.
It is quite scary that it works, even on people I'd normally expect to be more discerning.

The flip side of that is they can't really hide when they fuck up.
I don't know which "anyone" you're referring to, but the argument I made about analysis pressure isn't implementation-specific, and neither are the concrete issues raised in both the TC39 notes I linked and elsewhere (they affect Chakra primarily, and *Monkey/V8 secondarily). The parts of a JS implementation (or really, any JIT) that decides to inline portions of code, attempt to detect loops and unroll them,... are already central to those implementations. I hope it's not difficult to see why a change that directly impacts that might have negative consequences elsewhere. Indeed, _because_ this is implicit and part of the spec, implementations can't take the simple multi-staged path they did before: they _have to_ do the PTC dance. I've heard no argument why the PTC mode should be intrinsically faster than the non-PTC mode (yes; you elide a stack frame at the cost of a whole-function analysis pass -- heuristically, "stack frame" isn't the expensive one of the two). This is why STC was proposed: it allows an impl to decide at _one_ location how to handle a function, in an obvious-to-the-parser way. No other code paths are affected. To contrast with PTC: even a compiler that knows with epistemological certainty that a particular call will happen only once or even never, _still has to do the PTC dance_.

However, you're asking me to prove a negative. I've given arguments, which apparently you find unconvincing. The people you are disagreeing with (not I) are responsible about 85% of the JavaScript engines on the Internet, an incredibly competitive space with billions in funding. I submit that they are probably neither incompetent nor lazy. (Evidence for "not lazy": the V8 team implemented it and turned it off.) If you are convinced that it's a (presumably fixable) implementation problem, I'm sure they'd love a patch or at least something more actionable than your insistence that they're doing it wrong.
It’s not every day that one hears about garlic-induced vasodilation! Did you arrive at 70–120 cloves as your minimum effective dose? Any side effects, digestion-wise for example, from consuming that many at once?
So they keep going till they fail?
If everybody switches to electric do we have enough raw materials for batteries like lithium to supply the whole world?
Exactly.

And you are envious of the useful idiots instead of the corporation. That is thinking small...
Is the world really ready to push battery power this quickly? We need to install millions of charging ports.

What worries me is charge time. Say it takes 2 hours to charge my car I pull over and all the charging ports are taken.

I could be waiting 2 hours to get a port and then another 2 to charge.
I agree absolutely, any framework that does things magically is difficult to reason about. Things that are difficult to reason about are inherently insecure in my opinion.
To be fair, iOS 11 is only a couple of weeks from being adopted from hundreds millions of people. Our community isn't as proactive in testing against unreleased software as the native iOS community. :disappointed_face:
Serious question... if there are 3-5 attempt lock out, would this be any less secure than randomly generated number?
Football will be fine. They just need to stop leaning left, it's against their core consumer group.

Money ruins things, sometimes.
Because Mozilla is not an ad company and actually cares about users' privacy. I do not trust Google and do not want to enable them to vacuum up more of my data.
If you would be able to block them from buying your SSN under the current system, you would not be able to get any loans.
There's no realistic danger of a Common Lisp implementation abandoning support for the text serialization of Lisp source code, because the reader is part of the language spec. That being the case, you can always count on support for Lisp text files, and therefore for comments stored in them.

On the other hand, nothing in the standard forbids an implementation from keeping comments around in the image. Off the top of my head I don't know of an implementation that does it, but it might be a handy feature to have.
I'm so happy not all games are like this, I abhor hidden or unfair mechanics. Even if you sometimes get one-shotted "out of the blue" in, say, Path of Exile, you can be sure game didn't "help" you, there is a crystal clear explanation of every mechanic in Wiki and your 90 lvl hardcore char IS your and your skill achievement.
> an announcement of a desire to set a target

Isn't it an announcement of a future target? Seems more that "we will set a target" than "we want to but these lobbyists are making it really hard"
How do you record the consent itself? Or is it going to be a case of he said/she said? I'd assume you'd need proof that you had asked for consent prior.
> The US isn't a fascist dictatorship.

Which is why he didn't go to jail.

> There's nothing wrong with dis respecting the national anthem

Sure, it isn't illegal, but that doesn't mean individuals can't be offended by it. To many, the national anthem carries significant meaning.
>Injecting a JSON blob to the Struts REST deserializer that effectively results in executing payload code would indicate high investment in the attack.

Why does it indicate high investment? IMO it's similar to SQL injection attack. People, just take a look at points where complicated data can be deserialized and check whether adequate checks can be overcome.

As I see from their report here: https://cwiki.apache.org/confluence/display/WW/S2-052 they use XStream to deserialize REST data. XStream is basically Java serialization/deserialization to XML instead of binary. As far as I remember from my experience of working with XStream, XStream can deserialize almost any object, even the ones which aren't serializable by default. It's quite trivial to go from here to execution of arbitrary code.
> I just think that using the semicolon to make the function return unit instead is problematic.

Agree. The idea to attach additional semantics to ; is completely nuts, especially as ; is mandatory in Rust (usually, there are odd corner cases where it is not allowed).

Just get rid of mandatory ; completely and let the type system handle the rest.
...corn and mayonnaise on pizza.

That sounds amazing, and very vaguely like Mexican food.

There's no reason to believe that we in America have the final word on what pizza ought to be.
There's enough lithium. With present battery chemistries, the most bottlenecked material for lithium ion batteries is actually cobalt. There are cobalt-free chemistries, but the trade-off is lower energy density.
It's probably even less that 1 in 60 * 24, because usually a freezes is requested during business hours? So 1 in 60 * 8?
Equifax Breach a Reminder That Cybersecurity Whistleblowers Have Protections
I am reminded of the scene from "Lost In Translation" where both main characters are comparing two menu-pictured dishes. It's remarked "they look exactly the same, what's the difference?". Comedy aside, similar might happen.

I do still find this a good idea.
maybe there was no way to save and transfer the pin from one place of the system to another, and the only way to do it is to guess on the other side by timestamp.

pretty hacky implementation but oh well
Depending on your target platform, you might not have as much control over your releases. On the web, it's easy, but on e.g. iOS, it gets a bit harder.

I agree: like error reporting, it's not a hard, unsolvable problem, but it's a problem I had a few times and decided, why reimplement the wheel I could create a helpful open source solution?
There's no busy waiting involved with condition variables. The while loop is there to guard against spurious wakeups, and it is not a "busy" loop. A semaphore can be implemented using a mutex and a condition at pretty much the same cost as a "raw" semaphore. It is theoretically 2x faster (1 vs 2 atomics needed) but that isn't worth the handicap from being constrained to a single integer state. If you need two or more semaphores, it's already much worse. And even many textbook examples do (to guarantee clean exit).

A semaphore is just a crippled condition variable that had only a single integer as a state. It sort-of works but isn't very practical in real world applications.
Their paper "Self-organizing tuple reconstruction in column-stores" [0] provides more details on this.

[0] https://pdfs.semanticscholar.org/1d5c/bc071f918143dbedf67a51...
I think this is the kind of problem that gets solved by market forces. If the lines are too long, someone opens up a new station and has lots of customers right away.
Fortunately, all calls to/from the bank (or at least my bank) begin with the message "We inform you that this call may be recorded."
Occasionally I have this thought but then I remember how difficult it is to recruit great engineers. Perhaps we should be paid even more money.
What a credit agency retains on you and what a bank asks from you in a loan application are two different things.
True thing: until recently you could remove hard inquiries from your credit report merely by pulling your own credit so often in one month using an array of daily monitoring services that you would overflow the field and bump off legit inquiries.

I did this in 2009-10, it had been going on for a while, and lasted for a while but sadly I hear they've solved it seemingly by nightly batch job to remove your own credit pulls.

These companies are just barely functional for their purpose.

Experian seemed to have their act together a bit more.
Could you explain your math here? Is there something you learn about the other digits when you make a wrong guess?
I love this and you.
Another thing to add is the use of cobalt in alnico magnets that cheaper EV motors use
If they can, why don't they?

Insufficient incentives, either caused by inadequate regulation or a belief the regulation won't be enforced.

Think of the standards of network security and software validation used by, say, a Certificate Authority to keep their root certificates safe. Or by Google to secure GMail. Equifax just hasn't made reaching that standard their highest priority.
Mud is just soil in water, and drying and sieving soil is easy.
If we are using "anecdata" then I can say you'll never get your value out of your house - I personally know people who have sold their house for $5K, $20K, $30K, and $50K less than they bought them for. Hell, the entire city of Detroit, Flint, etc. has seen prices plummet so hard they are practically giving away houses and there is a huge arson problem - people are burning their houses for insurance money en mass.

In your "example", if you're very lucky and both buy and sell at the right time during a housing bubble then relocate to an area not experiencing a bubble, then maybe. (I believe you are severely underestimating the carrying costs of a typical house though, it's not just the big stuff.)

However, that's not even remotely close to the typical case. House prices rising fast enough to cover all those costs is indication of an unsustainable bubble.

https://inflationdata.com/articles/inflation-adjusted-prices...

>We can see that if you had bought a house at the peak in 1980 you would have lost purchasing power if you had sold in 1985 (not to mention transaction costs). And then for a little while around 1990 you would have been slightly ahead, but then through most of the 1990’s you would actually be losing money once again. So you’ve paid off half of your 30 year mortgage, you’ve paid taxes, insurance, maintenance, etc. and your house has not kept up with inflation!

You also have to keep in mind the economy of most towns and some cities is very, very volatile and depends heavily on 1-2 employers or industries. Those go away and there's economic collapse. When there's large economic collapse then buy buy home value.

(It's personal preference but I disagree with the idea of leaving family [besides spouse] any significant amount of money/assets when you die - most of my estate is going to charity upon my death)
I'm curious how payment processors and banks could ever hope to not be deemed to benefit from any enterprise busted under this law. It seems clear they would be involved in every single one, and would materially benefit. Since the law specifically removes the whole 'you have to be aware of what you are benefitting from' part, it seems like they would be sitting ducks.
Not sure I'd count on them having lock out, and even if they do, a shitload of the PINs will be easy to guess since they'll be clustered around now, when many people are rushing to lock their credit.
>I think the three examples seem reasonable when viewed in the right way

These kinds of statements is why I think webdev is completely and thoroughly fucked. When obviously bad software or language design is widely accepted on the basis of convoluted technicalities you know that thing will not get better, only worse.

>This type of issue isn't unique to JavaScript. In Java, if you have boxed Integers

Boxed types in Java were a clusterfuck of their own. They shouldn't be used as justification of bad design in other languages. A cautionary tale, more like.
Log Book with Computer Bug (Sep 9, 1947)
Yes -- if lot of people freeze their accounts on a day and the attacker has a way to try same pin on lot of accounts. (No -- if random number generator is only 2 digits long)
Thanks for writing :)

I suppose the issue here is that the "wait and save" approach does not always have success, especially in the Bay Area.

The reason for that is because there is a finite number of houses, and an excessive number of bidders. These bidders use loans and leverage (other people's money) to pay a higher price than they normally would be able to afford.

Thus, waiting and saving is tougher.

Of course this begs the question, why not just avoid the Bay Area?

Unfortunately, most of the tech jobs are there. Other cities don't have the job capacity, despite having plenty of houses.

So, finally, there really only are 33m people on this Earth who can afford to pay cash for a home in the Bay Area.

The rest have to leverage, and thus, are affected by identity theft and credit scores.