skysight-inc/HackerNews huggingface dataset:
I'd buy this, but also point out that all nations do this to their rivals. We did it to Russia with the break-up of the Soviet Union (quite overtly; I remember news stories about how we were helping the Ukraine and Belarus achieve independence, and admitting the Baltic Republics to NATO), and it would very much surprise me if we aren't still doing this to all major geopolitical rivals (including, but certainly not limited to, Russia).

I'll go out on a limb and say that the endgame here is the destruction of nationhood as a concept. After the dust settles, all major global powers are going to break up: it's not going to be a matter of eliminating your rivals so you can be the only major nation left standing, it'll be a matter of mutually assured destruction where all nations are disbanded. Instead, the future will look more like a Neal Stephenson novel, with geographically-dispersed micronations contracting out for physical protection to automated kill-bots.
Government mandated cameras? Plusgood idea, citizen.
My father worked for Boeing during (or shortly after) the time the 747 was designed. It was all done with pencil and paper. Thousands of draftsmen drawing every little component.

I can't imagine the scale of such a process.

My favorite bit about that. If you were take all the drawings produced during the design phase, and put them on a 747, it would't get off the ground. Not sure if apocryphal or not, but I buy it.

EDIT: I see in another comment you worked there as well. Maybe you can verify the "heavy documents" anecdote :)
Well, I'ma white guy in Scandinavia, doesn't get whiter than that and the police here are not giving an inch. I have a much worse opinion of the police here than in the UK where I am from.
To hack, don't people need access to the world at large, or at least the internet part of the world at large?

Would if not be possible to subvert North Korean hacking activities by using propaganda?
Sebastian Kurz set to become world's youngest leader
LIMIT is great, and a necessity on MySQL. It's OFFSET that causes problems. If I were king of databases I'd make OFFSET > 1000 cause an error directing the user to the doc page explaining why what they're doing is a bad idea and how to increase the limit anyway.
I've never worked at that scale - I doubt many have. I am sure that all manner of incorrect decisions are required to make that level of scale work.

What is the reddit thread that almost broke them? This one I think: https://www.reddit.com/r/pics/comments/92dd8/test_post_pleas...

From memory, they do something different for just that thread, like loading it from a different cache. I am sure that is all sorts of "wrong", but being "right" and not scaling seems worse!
Well, I guess one moral of the story is that doing image manipulation is easier in Python than Fortran, so it's again using the right tool for the job. And I think the push for Physicists to use Python if possible is good, as the learning curve is less steep. And once you have that tool at your disposal, you might use it more often (instead of Excel).

I can see many projects being improved by providing a Python pre-processor that writes out e.g. a binary config file, the hard-code Fortran/C simulation code reads that, and spits out the simulation results, and then having a Python post-processor that does the pretty stuff at the end.

Academically, it seems that pairing CS undergrads with Physics undergrads to do e.g. a molecular dynamics (MD) course would be cool. The Physics behind MD isn't too hard, and given the right parameters the programming part would be manageable. Then again, CS undergrads aren't necessarily great programmers either...

Clean code and tests are overrated. Version control and a big eco-system is underrated. It's like maths, physicists don't understand maths, they just use it like a carpenter uses a nail without understanding metallurgy, or a programmer uses a CPU without understanding solid-state physics. And that's okay.
LuaTex which is displacing Latex is doing just that, increasingly using unicode directly. I’ve never used a plain editor on my Mac which DIDN’T handle unicode. In fact I use a plain text editor to write julia code whith unicode symbols. Anyway it is a tiny portion of the code and the Julia public API never force you to use unocode. You can always chose a non-unicode variant of the API.

Not using UTF8 in this day and age is just begging for problems.

At least on my mac you got OS wide tools for working with unicode.
Has anyone gone the rent free route of urban tent living? With an REI membership and looking at some resident sidewalk occupants, it does seem viable to have a tent and save $3,000/month while keeping a normal job.

Realizing that the people that have abandoned their dignity are a tiny part of the homeless population, nobody would actually know, great way to save.
The increase in shares was due to secondary offering https://www.fool.com/investing/2016/05/26/tesla-motors-maxed...

Tesla’s stock behavior is due to the ongoing game of “who blinks first” between TSLA shorts and TSLA short-squeezers. With $10 billion short position the company’s fundamentals are reduced to a side show.
The link you shared is only for year 2006. Here

https://scholar.google.com/citations?view_op=list_classic_ar...

But if I modify the above URL to change the year and see result, I get error. How to avoid that?
Show HN: Node.js port of WhisperSystem's libsignal
This is simply false
Yes for the paper authors, but what about the committee member who allocates reviewers to papers? Are they converted into "Reviewer 1", etc.? I wouldn't know, I have never been on a conference/journal committee.
I suspect a lot of important personnel in NK (including some programmers and some university students; that set probably overlaps a lot) have access to the internet, or at least most of it, even if monitored. So don't assume that they're not learning in isolation. But even if so, there are common principles you could study from books and test systems. (They'd be smart to apply their people to securing their own systems as well with red/blue teams...) Plus if you know your target, you can dedicate your time to finding ways to attack that target, you don't need to keep up to date with the latest from e.g. tech talks.
Iranian hackers compromised 9,000 UK Gov email accounts
Men in Black – CASE BENDER – The Enigma of an Existence
I did it for 5.7 years (for health reasons, not to save a few bucks), though I did not camp on a sidewalk and I did freelance work instead of having a job.

I don't recommend it. I also doubt that you would save as much as you think.
It’ll be interesting to see what the mitigation options will be like given the massive install base of routers which are barely supported and WiFi gadgets which aren’t supported at all. There are some interesting wormable scenarios (e.g. apartment building with an attack combining this & things like those recent Broadcom exploits) which could be avoided if ISPs can push patches to a large percentage of their customers.
Ability to adapt to languages should not be assumed in my opinion.
WPA2 in general. The 4-way handshake is vulnerable. Might be patchable, but there is a ton of embedded stuff out there that will never get updated...
There is no historical evidence that agricultural societies were patriarchal, nor that females were viewed as property of the male head of the household. If we look at survived native cultures, the key observation is culture and traditional gave women and men separated roles and responsibilities with the elders of each as guides and authority. The elder women decided, taught and guide the other women and girls in the group, while the elder men did the same for the men and boys. Men were not allowed to interfere with the domain of the elder women, and women were not allowed to interfere within the domain of the elder men.

In order for it to be a fiercely patriarchal where females were viewed as property of the male head of the household, it would mean that men had the power to decide what women should and should not do. This fly in contrast to when culture and tradition fully dictate how people should live their life.
My home network is a fiction, all of the clients on it are either wired to the VPN host (except the smartphone, which just doesn't have access to most of my network), or connect through VPN even when I'm home. This only really became efficient enough to be viable for me with WireGuard.
show HN: ngx-gauge is a highly customizable Gauge Component for Angular 4+
CrowdFlower Founder: I'm Forever Grateful to Travis Kalanick
Preload Has_many Associations in Graphql-Ruby Using Graphql-Preload
I guess the question is whether only the AP needs to be patched or the client as well.
If you don't have extensions that force HTTPS on all content, you could, for example, get served a malicious image file.

from the article:

> they won’t be able to pretend to be a secure site like your bank on the wifi, but they can definitely pretend to be non-secure resources
It’s not like choosing a fridge, where there are 500 models available.

There are two autopilot systems commercially available today - Tesla Autopilot and Honda Sensing Driver Assistance. Two more are slated to be released - Cadillac SuperCruise and Audi Traffic Jam Pilot. The rest is an all-you-can-read buffet of press releases about some great tech this one company tested in this one lab (I hear Waymo is great, and Volvo’s is even better).

Pending Cadillac’s and Audi’s road tests in 2018, Tesla Autopilot v1 is the best driver assistance suite available commercially in 2017, even with all of the executive departures.
It has already been patched by some vendors, but you're right, if the IoT has given us anything, it's tonnes of unpatchable consumer gear.
Big SMTP won't tell because they don't want a client to scan for valid accounts.
The other way to look at it is that the traffic laws, taken to the letter, are too conservative in some circumstances, and there are perfectly safe, more efficient limitations that can be employed (The 100% complete stop for example, frivolous waste of potential energy!) Maybe instead of teaching self-driving cars to break the laws like everyone else does, we should change the laws to reflect more how people drive.
Is there anything at all we can do to protect ourselves until our router gets patched?

From the earlier thread [1] I gleamed that maybe a MAC filter could help, but it sounds like that's not going to help much because MAC addresses can be easily spoofed.

The article here recommends sticking to sites with HTTPS, which isn't really something we always have control over, and isn't something we can realistically expect our non-technical WiFi users to be able to strictly adhere to.

VPNs were also suggested, but again, mandating that everybody on our WiFi must connect through a VPN is rather impractical, and I'm personally not sure which VPN providers are supposed to be trustworthy to begin with.

If people here have other suggestions, I'd love to hear them.

[1] https://news.ycombinator.com/item?id=15478750
> Also they've disabled autopilot for the time being.

Can you elaborate?
This is known as "quantum immortality" [0]

[0] https://simple.wikipedia.org/wiki/Quantum_immortality
you have to restart every so often

I've never had that happen. Maybe things that don't have to do with Nix... really just don't have to do with Nix ;-)
It's funnier when you read every 'cyber' as 'spider'.
> Well AOT even in OpenJDK is not necessarily about resource savings, just startup time.

No quite, the long term idea is to bootstrap OpenJDK as much as possible, making it a meta-circular VM.

Check Project Metropolis and SubstrateVM projects.

Also the commercial JDKs with AOT support, do it for deployment scenarios where JIT isn't desired, e.g. embedded devices.
Oh, you're that Scott Grand? Allow me to thank you for the work you did on pmemd.cuda, my old research group wouldn't be where they are now without you.
Extend the value of your Qlik investment
I'm seeing $5300 at Mouser and Digikey, but none in stock yet.

http://www.mouser.com/ProductDetail/Microsemi/090-02984-001/...
The radio might not be exposed to the OS.
If it's a Fullmac device, you usually don't have access to the radio stuff. Even with Softmac, there's not a guarantee.
For the deep dive, there are always the numerous references at the end of each chapter. Some of these link to software project documentation, but must to recent papers or conference presentations.
I had hoped that this article will illustrate the scientific/technical reasons for PostgreSQL's superiority over MySQL. Alas, it just mentions that there was a bug that got fixed after 14+ years in MySQL. The author doesn't even mentions the severity of the bug and the negative effects it had. Overall, for me this article is nothing but the author just "blowing his/her own horn".
Infineon RSA Key Generation Issue
I was thinking also that ingenuity requires freedom (or, is greatly facilitated by it).

(Those examples happen to be people with more latitute than most.)
One important additional piece of information: "As Hudson notes, the attacker would have to be on the same base station as the victim, which restricts any attack's impact somewhat."

https://www.theregister.co.uk/2017/10/16/wpa2_inscure_kracka...
> This isn't bad if you're the only one who can ship self-driving cars with acceptable quality and volume as you'd be disrupting the rest of the industry to fuel massive growth.

Fixing it:

This isn't too bad if you're the only one who can ship self-driving cars with acceptable quality and volume as you'd be disrupting the rest of the industry to fuel massive growth.

But you won't be the only one for long. And then the entire industry will downsize.

And Tesla is (1) the most susceptible to it, since most of the enterprise value comes from expectation of future growth and (2) it lags behind other makers in self-driving tech.
So most Americans live in the suburbs and commute but in a semi-big cities if you are not a middle class you cannot even afford to rent (not even think about buying) an apartment ?
Why is this a big problem ? I thought in the US you guys are more liberal when it comes to building highrises. Or is it because no matter the demand it's just too unaffordable for your avg joe ?
It appears that the blog post was removed shortly after publication. Here's what the text has been:

> Infineon Technologies, one of Yubico’s secure element vendors, has informed us of a security issue in their cryptographic firmware library. The issue weakens the strength of on-chip RSA key generation, and affects some use cases for the PIV smart card and OpenPGP functionality of the YubiKey 4 platform.

> FIDO U2F, OTP, and OATH functions of the YubiKey 4 platform are not affected. The YubiKey NEO, FIDO U2F Security Key and YubiHSM are not impacted, nor are the deprecated products YubiKey standard and YubiKey Edge. Externally generated RSA keys are not affected.

> Yubico estimates that approximately 2% of YubiKey customers utilize the functionality affected by this issue. We have addressed this issue in all shipments of YubiKey 4, YubiKey 4 Nano, and YubiKey 4C, since June 6, 2017.

> At this time, we are not aware of any security breaches due to this issue. We are committed to always improving how we protect our customers and continuously invest in making our products even more secure.

> We offer customers who are affected mitigation recommendations and optional YubiKey replacement. For more information please refer to our dedicated customer portal [1].

> The post Infineon RSA Key Generation Issue [2] appeared first on Yubico [3].

> [1] https://www.yubico.com/keycheck/

> [2] https://www.yubico.com/2017/10/infineon-rsa-key-generation-i...

> [3] https://www.yubico.com/
Looks like a dupe of https://news.ycombinator.com/item?id=15478750
Somewhat true. Setting up a Freeradius is not hard. Problem is that you need another device that is running 24/7.
It’s not an off-the-shelf sensor one can buy, integrate, and congratulate oneself on the job well done.

The learning systems need to be fed data to improve their models, so that they can understand bad lane markup, merging lanes, diverging lanes, lane splits and highway off-ramps, construction cones and barriers, motorcycles and trucks being obstacles and flying plastic bags and garbage not being an obstacle.

Unless they’re buying this data some place else, it needs to come from millions of miles driven by the current owners.
You only read the stories written by pilots who are good story tellers; nobody shares the rest.
Hmm, well, what kind of constraints would make this actually viable?

You'd have to be single and have relatively few possessions (because it would all have to fit in a tent, and you'd have to carry it all with you). You'd have to have some way to shower (gym membership, most likely). You probably wouldn't have a car (because otherwise, why live in a tent?), meaning you either live and work near public transportation or you camp close enough to work to walk. It would also help to be healthy.

In the Bay Area, you can accomplish all of this while living in a $1700/month East Bay studio, if you work in SF near BART, getting half the financial benefit with almost none of the down sides. The only major disadvantage over a more normal apartment lifestyle would be you have less personal space, but if you're willing to live in a tent, you probably don't care about that.

All in all, I would say it's probably not worth it. I'd consider van living before I camped in a tent.
Am I understanding this correctly that you still need to authenticate with the router before using the exploit? If so, I thought it was already prudent to assume that unencrypted traffic (by the client) was effectively visible to everyone else connected over the same Wi-Fi base station?

Or is this a way to break the Wi-Fi password and connect without it?
"Ghost Fleet" touches on OP's original idea of laws in space, not so much this idea.

It's a good pulp world war 3 techno novel.
"They drive funny" claims human, regarding high level of reporting of accidents where computer drivers are required to report encounters but humans are not.

If humans were required to report every bump and scrape, what would we find out? I suspect we would find that humans are just poor drivers overall, and "they don't drive like I do" is the number one cause of minor incidents worldwide.

My main submission to this argument is the ubiquitous rear-ending in the turning lane where the first car's driver starts to roll and then stops, while the second driver is turned to watch approaching traffic and thus oblivious to the behaviour of the car in front.
Show HN: Simple API to look up Apple device names (iPhone10,6 → iPhone X)
Hi all, trying to fulfill requests for the kitties! We got over 100 while we were on the plane back from Waterloo.
There are a few people living out of camper vans at Google and Yahoo HQs. I think that is easier to pull off if your office has plentiful parking and showers on campus.
Hopefully their Amplifi line also gets these patches soon.
Show HN: Simple Recommendation Engine with Apache Mahout and Postgres
Phillipe Charles Phd thesis[0] describes a method for generating good error messages with an LALR parser generator. lpg[1] implements these techniques.

[0] http://jikes.sourceforge.net/documents/thesis.pdf

[1] https://sourceforge.net/projects/lpg/
Dope Artsy Music Video
So only as bad as Firesheep. Great.
Disabled Autopilot? I am not aware of the Autopilot being disabled by Tesla on cars that have been sold and are on the road. Unless it is Model 3 cars, which there hasn't been much written about.
only if you know the column size ahead of time.
and it's still slower than other streaming solutions and at some point it buffers to disk.
Makes some good points except for the competition, I think its weak.
Always wondered why Nissan intentionally made such an ugly car, I think the Leaf is no longer sold in Australia due to poor numbers.
Isn't the Bolt a hybrid?
All of the above +HN, for me
You can complain about Tesla missing a deadline by a year but you need to also consider them pulling the rest of the industry forward by 10 years when they do it
How to rent a po box?
Chipper.
May I ask how far is your work from home and what's the monthly total cost?
If you like to read about stories like this check out this wikipedia page:

en.wikipedia.org/wiki/List_of_sole_survivors_of_airline_accidents_or_incidents

I think it's even more amazing when it's a commercial flight and everyone dies except one person. I can't imagine what sort of psychological toll that would have.
Beginners Guide to Triberr: Increase Your Social Media Engagement with Triberr
I'm not familiar with the USA as much, but the number holds true for Australia.

A quick google found me this: http://www.vtpi.org/tca/tca0504.pdf

Table 5.4.3 - 4 Parking Structure Construction Costs might be what you're after.
Guix is built on top of the nix daemon, so while it's not strictly a fork, derived seems fair.
Would I be able to ask some questions? What health reasons would cause you to sleep in a tent that doesn't involve saving money?

And where did you sleep? And why not sleep in a vehicle? And why did you not save as much as you thought?

By the way, if you want to live in a vehicle, tent or something like that while freelancing, you could always just move to Eastern Europe, India or someplace else and live well for what you'd spend living in a tent in The Bay Area. Personally, that's what I would do. Alternatively I've read online about being "net cafe homeless" in East Asia for 10-30$ a day. Or, I've wondered about buying a van in Europe and hopping between countries for a couple years, but I've never heard of a non-eu citizen doing this, has anyone?

All of that is almost definitely more effort than it is worth if your only objective is to save money, but they might be good ideas if you want to experience them as part of travelling abroad while on a budget, or just get away on a Steve Jobs-type of adventure like he did to India.
> I thought in the US you guys are more liberal when it comes to building highrises.

That's probably not true, although it depends where you are comparing it to.
The RAT actually worked. It was what made the radio come back online.
Different types of technical interview and how to handle them
Yes, pg_tune
What is the gain?
From what I understand Uber is much more affordable than cabs on average which can make a big difference to people. In the city I live near, there used to be such a shortage of cabs, waiting for an hour as they drove by you or after you called was not uncommon.
Samsung Connect Tag is a smart IoT tracker using narrowband technology
LUAJIT is often on par with C. How would that make it slower than Pypy?
"Cybering" for those exposed in the early 2000's slang in AIM public chat rooms was the equivalent of "sexting". Gives a whole new meaning to these words!
I'm looking forward to learning the details of these weaknesses. I'm sure they will be with us for many years. That said, I'm not hugely concerned for myself because I already already assume whatever LAN I use might be malicious. We're living in a world where many name brand ISPs are openly hostile to subscribers.
True, and it's anecdotal, but I've seen quite a few good stories from various fighter pilots and I honestly can't think of something similar from other lines of work.

I mean, I've obviously seen good storytelling from journalists and writers, but they've often spent lifetimes honing their craft.

I wonder if it's the focus and awareness that gives pilots such a potential.