skysight-inc/HackerNews huggingface dataset:
Yup and Facebook would like you to believe it's hard. Cigarette companies encouraged the "I can't quit..." Idea too. If you fail once, twice, eleven times. Try again, keep trying, quitting cigs is really worth the effort. Each failed attempt to quit cigs you learn something you can use to succeed in the future.

I don't care for Facebook, I doubt they cause you heart disease etc. Not sure how empathetic it is to those who've watched people they love die in a cancer ward to suggest a website is equivalent. But hey, make the case if you want to...

After all a couple of thousand bucks of Russian advertising on Facebook decided the election. Facebook admit it with no ulterior motive at all.

Think of it a small thing and it probably is. Maybe it will be as big as MySpace one day...
There's no way these adaptors aren't vulnerable, given the nature of them. In my opinion. Extracting the signal from the mains and feeding it into GNU Radio for demodulation, then subsequent attack, would be an interesting exercise.
There is a few similar cases

Bahia Bakari https://en.wikipedia.org/wiki/Bahia_Bakari https://en.wikipedia.org/wiki/Yemenia_Flight_626

Juliane Koepcke https://en.wikipedia.org/wiki/Juliane_Koepcke https://en.wikipedia.org/wiki/LANSA_Flight_508
That’s like saying that prior to introducing seatbelts, we should have allowed for a period of time to glue people to their seats because it is preferable to have a mitigation they can apply themselves than a fix the manufacturer has to put in.

If you don’t limit mitigation to "a config setting" (and why would you?!), a patch/new version is the best mitigation you can get.
​Windows Subsystem for Linux Graduates in Windows 10 Fall Creators Update
A lot of acronyms and slang in this comment, makes it hard to follow.

dissos = dissociatives
https://www.reddit.com/r/Drugs/comments/5lijsi/why_dissos/
Ketamine is being researched but no, a psychiatrist isn't going to prescribe it at this time.

https://en.wikipedia.org/wiki/Generalized_anxiety_disorder

https://en.wikipedia.org/wiki/Dissociative_identity_disorder
What happens if a vendor or researcher is in bed with the NSA and they use the exploit while embargoed?

The whole thing is a shit show and really I'm rather more behind OpenBSD's approach.

Edit just to expand on this as someone deleted a post ....

----

It's slightly more complicated than the prisoner's dilemma. The prisoner's dilemma doesn't account for a large facet of the problem which is being discussed here. If all the good parties participate and coordinate then we're better off. The problem is there are outlying circumstances which means that not everyone will be included:

1. If someone kicks someone out (OpenBSD) on political whim playing CYA, they no longer benefit.

2. If a party is not let in, they no longer benefit.

3. If someone is unaware of it, they don't benefit.

This turns it into a security monopoly where the big vendors get exclusive rights to embargo and exclude smaller vendors and control the disclosure process on their own schedule.

The first thing the people outside of the club find is they wake up on Monday morning and have to clear up a shitstorm of monumental proportions with less resources than the monopolised vendors who've had time to deal with it.

Then there's the assumption that the monopolised vendors are trustworthy which is 100% impossible to validate and therefore invalid.
I see a lot of misunderstandings here.

First off, a dollar/franc/krone/baht is a quantity of money, that is gold - previously silver (pre-19th c. Gold rushes).

This means that a bank whose banknotes trade below their face value is considered insolvent by the markets. So why do all those currencies still circulate!? Because of fiat - said otherwise declaration (by ie a state) of a monopoly on emitting fiduciary media (banknotes).

Now some may say "But sometimes those banknotes rise in value vis-a-vis gold!" ... Sure! But they never rise beyond their face value!

Please, for the love of rationality, read some real lessons on economics. (L.W.Mises, H.H.Hoppe, M.Rothbard).
> DBAs must know how replication works, as RDBMSs are not toys. It's naive to think that replication in other RDBMs itjustworks! - see, for example, the replication bug that caused slave corruption to the famous transportation company.

I assume you mean Uber, and the replication bug they ran into on 9.2. Isn't it a bit strange comparing a bug (that got fixed promptly after it was reported) to implementing inherently unsafe replication mode?
I agree with parent, it is foolish to take your pregnant wife on a trip through a warzone. The children suffered for a decision they were not old enough to make.
> You can already see this in Bitcoin[1], where relative volatility is dropping every year.

Curious - Is that really due to bitcoin stabilizing or is it because of the deflationary nature of bitcoin? I mean if bitcoin does have some promise, then holding is better than trying to trade in and out of it.

I also went through the quoted link on volatility:
http://woobull.com/bitcoin-volatility-will-match-major-fiat-...

One of the things holding cryptocurrencies back is that there is lot of misinformation. Specially in form of articles written without understanding financial fundamentals. It excites the crowd but the takeaways are mostly nonsense. This article is also along the same lines.

There is no concept called "peak volatility" as highlighted in the conclusion. There is only volatility.

Volatility is a statistical measure of the dispersion of returns for a given security or market index. Volatility can either be measured by using the standard deviation or variance between returns from that same security or market index. Commonly, the higher the volatility, the riskier the security. (from: http://www.investopedia.com/terms/v/volatility.asp)

There is average volatility which is a measure of volatility across a >particular period<. In most cases, if I have a data point for say July 2016, the data point will actually be "average volatility" of all July price movements.

And that makes the 2nd graph even more confusing. What is the average volatility is being talked about here? Is it the rolling average of the average of data points or something else?
This is so confusing.
This is why embargoes have deadlines. To make the necessary trade-off between "patch as soon as you can, potentially jeopardising the safety of users -- even users of non-proprietary projects" and "wait for everyone to be ready before you patch -- which also jeopardises users". The embargo system deals with this by forcing everyone to agree on a date, and if someone patches after that date then too bad. You may disagree that the deadline was so long, and that could be a fair criticism.

But pretending as though co-ordination of any kind is somehow bad (and then resorting to emotional arguments and so on) is pretty reckless.
I was thinking the same thing. If they don't it might be time to replace my Airport Extreme. I love it and it works flawlessly, but if they don't provide updates it's worse than not having WiFi at all.
2 billion monthly users, as of mid-2017 and according to Google. Maybe there's something to the idea that it is losing popularity? That doesn't seem like a vast majority and I seem to recall higher reported numbers in the past. I haven't paid too much attention, however.
Dutch privacy regulator says Windows 10 breaks the law
Cryptorubble – Russia announced its own Cryptocurrency
Combine it with WebRTC and implement T.30. Find a WebRTC/SIP/PSTN gateway. Send a Fax from the browser!!

You might laugh, but we do have an API for sending DTMF tones in WebRTC..
Thanks for the thorough description, I couldn't agree more with agile working better with senior engineers. After about 12 years in the industry I can definitely see how much I lacked on my skillset for the first 5 years to be able to understand and apply agile efficiently...

On the topic about the growth of IT and training, I haven't seen much talk about a team structure closer to what NASA does with each engineer having a mentor. No company I've worked so far had that as a process, it happened organically sometimes but I think what hinders a lot of young professionals is finding someone who will make them learn faster. Personally I only had that feeling once and it was definitely the best 2 years of development in my career, would love to work more at companies which have something like this in place for engineers.
I'm a big advocate of cryptocurrency but am unconvinced that stable value coins can work. The Sai was recently released:

https://blog.makerdao.com/2017/06/05/introducing-sai/

and BitUSD has been out for years:

https://bitshares.org/technology/price-stable-cryptocurrenci...

but neither have a significant amount of value riding on them and I personally wouldn't trust them with significant value.

The problem with any stable value coin is that its stability depends on the underlying cryptocurrency collateral. As long as the value of cryptocurrencies is significantly more volatile than that of fiat, I wouldn't trust a stable value coin's ability to remain solvent and maintain its peg.

I would rather bear the greater volatility of holding the underlying cryptocurrency, and get to enjoy the upside potential, than hold a stable value coin that has no potential to appreciate and a greater than zero probability of going to zero.

When cryptocurrencies get stable enough to make good collateral for stable value coins, they will be stable enough to use directly as a low-risk store of value.

The one wildcard in my estimation is decentralized options and futures markets. By creating a market for volatility hedging, it might make it possible for parties to 'buy' the requisite stability for a price.
Steve has missed the main point.

The value of a currency is determined by the effort required to obtain it.
I do this without needing any extra tool[0].

I basically define a custom meta-package with all the packages I want as dependencies and install it with `nix-env -iA`.

[0]: https://github.com/asymmetric/dotfiles/blob/master/config.ni...
One Day Left to Register for Dust Hackers Hackathon
The helium-powered ones aren't nearly as impressive to me as their mechanical bird: https://www.festo.com/group/en/cms/10238.htm
Also Waterloo for that matter. No CGI in 1970.

From Wikipedia [1]:

"To recreate the battlefield authentically, the Soviets bulldozed away two hills, laid five miles of roads, transplanted 5,000 trees, sowed fields of rye, barley and wildflowers and reconstructed four historic buildings. To create the mud, more than six miles of underground irrigation piping was specially laid. [...]

The battle sequences of the film include about 15,000 Soviet foot soldiers and 2,000 cavalrymen as extras and 50 circus stunt riders were used to perform the dangerous horse falls. It has been joked that Sergei Bondarchuk was in command of the seventh-largest army in the world. [...] A selected 2,000 additional men were also taught to load and fire muskets."

[1] https://en.wikipedia.org/wiki/Waterloo_(1970_film)
I did something similar in Nice. Standing a little inshore, the top of the water hitting my torso was moving faster than the water around my legs. I ended up being flipped backwards, and dumped on the floor with my back bent right back. I was lucky the tide wasn't stronger, it was hard enough swimming back to shore with my back hurt as it was.
Zimbabwe had little to do with supply of currency, and more to do with supply of stuff.

They forgot that our economies rely upon the magic of the pin factory. Unsurprisingly if you take land from a specialist farmer and give it to a load of people who have no such specialism, then you get a collapse in production.

The result of that is obvious unless you ramp up taxes to colossal levels to kill the excess money circulation.
What about the vulnerabilities that OpenBSD notice? Works both ways. And they have an active interest in such things and have discovered as much as any famous-for-five-minutes security researcher.
Steam uses DRM, does it not? So it could be that, and in that case, perhaps the GOG version gives better results, since they claim to be DRM free.

https://www.gog.com/game/rollercoaster_tycoon_deluxe
That's not its value, just an upper bound on its value.

If you disagree, boy do I have some currency to sell you. I worked very hard on it, I swear! :)
Show HN: Virtual coworking space
Plus, it seems like he deactivated it instead of deleting it. Which basically is the equivalent of logging out, from the user's perspective. So all the pomp and circumstance and the quoting of Trump and Snowden seems even more ridiculous to me. Like, have the balls to fucking do it properly.
> Fiat currencies are not “backed by nothing”. They are backed
by the labor and assets of all the humans who have obligations
to pay in fiat

So when we "print" more money, we print more labour?
> > by not using Facebook you're going to miss out on things

> This is the beginning and the end of all the thought that should be put into this matter. Missing things is not the end of the world, since there is so much to do in life anyway.

Missing out on things isn't the end of the world but what's the big deal of keeping up with what's going on? It's minimal effort to be signed up to Facebook so you can receive messages and event invites.

> More importantly, I think the benefits of fb are greatly exaggerated. In Europe at least, it seems the de facto standard are whatsapp groups of close friends, and that's where things get arranged. Even wedding invites are generally sent out over emails nowadays.

So if Facebook was the de facto standard for communication where you live you'd be OK with it? My point is just use what your friends are using to keep in touch and don't make a big deal about it. If Facebook, WhatsApp or whatever is having a large unhealthy influence on your life that's something you should fix about yourself.
I've been using japaric's awesome work on Xargo (for cross compiling the std lib) to target a variety of ARM Cortex'es. Sometimes doing all work in Rust, sometimes just for linking against Rust crates in a C program. It's a breeze and super fun.

This is, in my opinion, where Rust really shines: using one codebase - without installing any new tools - I can target pretty much all platforms from embedded to browser to mobile.
I panicked just by reading the story. Can't even imagine what I'd do if something like that happened to me.
How many BT and Virgin home routers will be patched? Somewhere around 0?
How to Manage Your Off-Shore Development Team
Off-shore development projects are becoming increasingly popular as they enable businesses to work with a dedicated team of highly-skilled developers while cutting costs and saving time to focus on core business processes. However, if you are working with an off-shore development team, you need to know how to manage it so that everything stays on track.

Communication is the main part of managing and working with an offshore team. This post highlights the main points on how to manage and communicate effectively with your offshore team.

With proper management of your offshore team, you can ensure that the project stays on track and you get a product that meets your requirements. But you will be faced with a number of challenges, such as:

1. Time-zone differences
2. Cultural differences
3. Language barriers
4. Communication issues
5. Adhering to deadlines
6. What You Need to Do?

Read full article here ==> http://www.thepsi.com/how-to-manage-your-off-shore-development-team/
Some Functional Programming Interview Questions
CBC radio had an interesting interview with Franklin Foer this past weekend. He makes that argument during the interview and presumably in his book World Without Mind.

http://www.cbc.ca/radio/thesundayedition/the-sunday-edition-...
dupe: https://news.ycombinator.com/item?id=15448827

(and the horrible rules criticized there are still in place)
Out of topic
Adding Java interop, as the authors aim to do, would make this extremely interesting for some of my use cases.
Not involved in discussion but here is my take on it.

Most SAT instances are surprisingly easy to solve, hence the "unreasonable" effectiveness of SAT solvers.

The construction of known-hard SAT instances is really building a new kind of crypto primitive out of SAT, and TBH using this kind of primitive versus more well known PoWs has little value to the network, is harder to analyse and is a lot more work for developers.

I mean its useful from a research pov, you'd be building a money-based CTF for solving certain theoretically hard types of SAT instances, but you are basically sacrificing the stability (such as there is...) of the currency to do so.

A really basic security analysis is "here is this thing which is pretty simple to implement and we are very confident it works" versus "here is this new thing that provides no extra intrinsic value, is more complicated, and we're not sure about". I am not sure there was ever a "security proof" that it was a bad idea because none was really required.
I have not used it yet, but maybe: https://github.com/hashmismatch/freertos.rs ?
Can somebody explain why replay attack protection of WPA2 is not working in this case? Aren't any out of order packets thrown away?
All About the Economy of Bitcoin
I think it is clear, the future is mostly wireless. Why would we need a Wired Connection?

The only reason we need wired is either Power or High Speed Connection.

Power: It is highly unlikely in the next 5 years time we wont have a true wireless power transfer,( i.e not sitting on a Power Mat ), enough energy to power a Laptop, Monitor or Desktop.

High Speed: That is anything from Monitor Cable, Massive SSD external storage, External GPU, and.... I cant think of anything else. ( Suggestions Welcome. ) Basically, what Thunderbolt was designed for; External PCI-E and DisplayPort.

Sometimes this year or next we are going to finalize what I hope will be the Wireless Standards for decades to come,
802.11ax and 802.11ay.

802.11 ax is the successor of 802.11ac, basically what the industry learned from LTE and LTE-A, and moves the best of those tech across to WiFI, works in both 2.4hGhz and 5Ghz.
We could expect real world, uncontended speed of 1Gbps in 2x2, and 2Gbps in 4x4, and both are very conservative numbers.

802.11 ay is successor of the failed 60Ghz 802.11ad. Real world speed 10Gbps+.

Bluetooth 5 which and Improves version of 4.1. And Bluetooth 4.1 is the arguable first Bluetooth which really makes it acceptable in general usage, and if 5 improves the better.

Assuming no Patents non-sense, we could expect to have WiFi chips in what we are connecting now via cables. You will only need cable for Power and High Speed Connection. And coincidentally Thunderbolt is going to be an Open Standard Next year.

What we need to fix / improve is power delivery on USB 3.1 branding. May be Future revision of USB will do that. For now, sitting in a transition period between Wired and Wireless will always be a little painful in the short term.
How you duplicate or clone your Shopify store
Active discussion: https://news.ycombinator.com/item?id=15481819
Which Companies Are Best for Hiring Node.js Developers?
> For example, an attacker might be able to inject ransomware or other malware into websites.

A reason to use https even for the most basic websites, including the ones embedded in IoT devices on local networks.
Ask HN: How can I find breached databases after they got hacked?
As you know, Recently many database breaches occurred. Is there any way to find email database of that?
> researchers at MIT have decided to tackle this challenge with full force by developing a brand new language for HPC called Julia

This and the linked news piece [1] from MIT News sound pretty weird to me. The OP article probably takes the bit about "researchers at MIT" developing Julia from the MIT News page, so that's the real source of the issue - the MIT News pages seems to have been written with weird biases, making it sound like a primarily MIT project that other people have just tacked a few things on to. And then there's:

> A few years ago, when an HPC startup Edelman was involved in [...] was acquired by Microsoft, he launched a new project with three others.

That to me sounds like an implication that Edelman was the one to initiate the project and take in the others. They seem to be writing from the usual academic bias of "the senior faculty gets the credit even if the actual work is done by the PhD/graduate students". Edelman was Bezanson's thesis advisor and a crucial part of Julia's history, but this article seems to be downplaying the role of the other core contributors and the open source community.

I had assumed university news, at least in such technical topics, would be more reliable and less inherently biased, learned something new today.

[1] http://news.mit.edu/2014/high-performance-computing-programm...
I dunno, I'm fairly sure that the 3 letter agencies do understand security fairly well :)
> WPA2 is toast.
No it is not. It is "just" one part of the 4 way handshake.

Source: https://www.krackattacks.com/
Man quits social media site and brags about it on social media.

Too bad he couldn't find a way to post his medium page on Facebook. He would have gotten more attention that way.
If a cartel controls more than 50% of the mining power, it's not difficult : they make authority on the ledger. (IIRC you don't even need 50% of the mining power to control the ledger in practice but it's not as straightforward).
I don't say harmony is good! Basically all music relies on at least some tensions of disharmony, and of course you can make music that is completely unharmonical or antiharmonical, just like you can make arrhythmic music or music with intentionally distorted rhythms to make listeners feel weirdly disoriented if that's what they like.

But letting go of the principles of harmony in favor of "subjective absolutism" seems kind of strange and I would even say harmful. It's like asking about architecture "Well, why should a building be comfortable and durable? If I prefer a dangerous and awful structure, isn't that just another valid subjective preference?" Well, okay, but so then what? Abandon teaching structural integrity?

It's pretty interesting to discuss the differences between arts, crafts, trades, and sciences... but these discussions are also often kind of stupidly polarized between objectivist and subjectivist views.

I had a friend who staunchly refused to learn any music theory, or any patterns of musical tradition, because they were attached to a subjectivist position on music. Actually I think it's a deep position that has to do with the individual's place in civilization! This person's music was outsider music, much of it really cool, but in some way fundamentally alienated.

One of my favorite books ever is Alistair MacIntyre's After Virtue, which (with a somewhat conservative flavor) argues that contemporary subjectivism is because enlightenment rationalism just fails as a basis for ethics, and that this is the reason for "the interminable character of contemporary debates." It makes the case for virtue within traditions and societal roles as the antidote for subjectivism, basically.

So typography is a tradition of virtue in our society, kind of, right? It's like, wow, there's this whole guild of craftspeople stretching back hundreds of years, who have developed a body of practice and theory that forms a coherent framework for font shapes and text layout; that's pretty cool!

Of course there are deep questions like "How are the traditions, skills, and theories of typography modified by the encounter with digital media?"

You could even ask "Is typography (or whatever other creative trade) a gated community of elite tastemakers who just prescribe their own aesthetics as if they were natural laws?"

But at the end of the day you have to look at the alphabet itself. That's not subjective. It's not really "objective" either. It's a cultural heritage and a common standard. If you mess around with it arbitrarily, people will think you're a weirdo, and they might not understand you at all.