skysight-inc/HackerNews huggingface dataset:
The problem isn't a "fool me once shame on...fool me you don't get fooled again", because the problem is one unscrupulous party is unscrupulous to different parties and the different parties at different times are unaware of it.
I think one problem with Fortran is that it has no standard library. To a Fortran beginner, it isn't obvious where to look for high quality third-party libraries.
No, but if there is an increase in productivity and you don’t print money there will be deflation.
Right, it's crazy how water can bend your body that much. I guess every part in the wave carry enough force to keep bending you in every angle. I also had pain in my spine for a while. I'm everything but supple.
For certificates, we have a fully standardized automated system to renew them.

I literally don’t have to do anything, and my certificates will continue to work as long as Let’s Encrypt exists.

If I have to manually to any maintenance, the system is broken. Which, in this case, it is.

The problem isn’t "one link to click per year", but if everyone does this, suddenly I have to click dozens of links per day.
Nice demo. Could you change the background photo when things are toggled?
Disclosure of Infineon RSA Vulnerability (ROCA). Tester for Vuln. Keys. TPM
How are fullmac devices patched? Don't they require firmware flashing or some sort?
The research talks a lot about how it somewhat depends on the implementation of the wireless client, but only in regards to Linux and OpenBSD, anybody know what the status on the Windows implementation is?
Show HN: CTCHME – app for anonymous jokes
Also enjoying https://github.com/japaric/svd2rust - Generates simple uniform register mappings for various cortex-m and msp430 micros.
Except for this article, he keeps quiet.
Android: DoubleLocker ransomware encrypts data and changes PINs
Seem to be "Inspired by Steve Wozniak" and it belongs to Southern Careers Institute.
The mystery of money (1924) [pdf]
Awesome Esolangs: Curated list of awesome Esoteric languages and resources
Bitcoin is now at the peak of the hype cycle. A lot of the 23 year old traders don't know anything but a bull market. When it inevitably goes through a bear market, like every other asset, when there is $50 billion of sellers higher ready to sell on every uptick, what brings bitcoin back? Stocks very rarely come back from 70-80% declines, unless the stock is Amazon or similar. All the hodlers are going to turn into baghodlers if they don't sell pretty soon.
All trams in Berlin have ticket vending machines that give change. And Berlin definitely doesn't fit the "lower ridership" category.
Stephanie Marlo: Virtual Reality Artists Are the Bridge Between Life and Vision
Compulsory viewing on the topic:
https://www.youtube.com/watch?v=uqH_Y1TupoQ
Not necessarily. Again with fullmac devices you don't control the complete hardware.
More ads than article
> OpenBSD won't get notified about vulnerabilities until well after everyone else

Which doesn't make a difference if OpenBSD still gets their patch out at the same time as everyone else. Unlike other vendors, it doesn't take OpenBSD four months to go from vulnerability notification to patch release, if you look at previous disclosure timelines they typically have a patch out in days.
I remember reading that they made it engine-agnostic a while ago.
Is deflation an awful situation ?
19 states file lawsuit against Trump over decision to halt Obamacare subsidies
You do you take that for granted?

Anyway, it's irrelevant.
"Meaningful", by itself, doesn't mean anything, because meaning is entirely subjective.

You will first have to identify what really makes you tick, grinds your gears, revs your engine, and whatever other mechanical analogies seem appropriate. This requires a lot of introspection.

Look around you. What upsets you? What do you consider among the most pressing issues of our time? Once you've done that (think a timescale of weeks, not hours), start hunting for groups at home and abroad who are trying to rectify those things, and who are doing so in ways that you feel are effective.

You can have a diverse set of concerns, which means that finding a relevant project is easier.
Network Monitoring Explained
Android app review
The change from software-only to hardware can have a great impact. That's a very interesting observation of yours.
> the problem is one unscrupulous party is unscrupulous to different parties and the different parties at different times are unaware of it

Sure, but eventually you get called out on it in a public forum, like this one, and people stop giving you goodies going forward. I would consider it acceptable practice to, when considering dealing with OpenBSD (or people who are close to them), (a) withhold vulnerabilities until after the embargo date or (b) refuse to give any information unless they sign a binding non-disclosure agreement committing them to the deadline under pain of penalty. (The latter is an option because it appears, in this case, they broke the spirit if not letter of the agreement. The solution to that problem is legalese.)
Importance of “working out” math in school for a programmer
I have lately notices my interest in algorithmic computing and a solved a couple of Project Euler problems but, this brought down my interest in actually working out math in school. My question always is when a computer can do it so fast why are you making me do it ? This is demotivating me and I want to know how far am I correct. Bringing up the logic s fine but add, subtract huge - ass floating digits ? Is it worth it ?
If you build it yourself, you can use whatever browser you want.
Volitilty will be inherent with bitcoin, and any blockchain database where the supply has been distributed for low computational/energy/capital input to the small pool of users who aquire majority stake in the total supply, thus devaluing any long term inherent store of value.

additionally, bitcoin and the exchanges can rapidly plummit to zero if and when there's a run to get out as the value requires demand from another just buyer. no buyers, and the price freefalls.
Ryzen Threadripper 1950X vs Core i9-7960X
And how do I verify that the money printed is not more than the increase in productivity ? Effectively stealing from my productivity through price inflation ?
When (commercial or central) banks "print" money, they extend a loan which the debtor is obliged to repay in future, meaning they will have to sell labour (or earn returns on others' sold labour) to do so.

When cryptoenthusiasts "print" money, they burn electricity in exchange for digital tokens which they hope more people will want in future, but nobody is under any obligation to need any of the newly minted tokens at any point in future.
(there probably is a niche cryptocurrency out there which only issues coins as repayable debt, and there definitely should be, but it's not the prevailing economic model)
For bigmac it's not a big deal, but for investment it is. Imagine your company have 10 millions in cash, you could invest on a new machine to produce more (or better quality, or cheaper). But if you knew that the machine was going to cost you only 9 millions in 3 months. Will you buy it now even though you know it's only going to make you earn 300k in 3 months ? Of course not, you'll wait those 3 months. This is the problem with deflation, nobody wants to invest and people delay or reduce consumption. this really harms the economy.
What's the practical impact here? What do I do with a normal house with routers, laptops, smartphones etc?

Are manufacturers like linksys, d-link issuing patches now or will it be enough to have windows/os x/iOS/android updates enabled? Or do I need both?
We're not mind readers. If he says it's ok, we think it's ok. If other vendors have fucked up months long patch cycles, that's their deal, not ours.
> keep bitcoin for your grandchildern instead of dolar that looses 95% value over century

Whereas bitcoin has a proven track record of almost a decade of... existence?

Anyway, why would anybody preserve value in cash over those time scales? The alternative isn't bitcoin or US$ or gold, it's stocks or bonds or real estate or fuck them let's spend it on blow.
+1 See it in 70mm if you can. :>
Me neither - I resisted joining Facebook from day one. I never felt the need nor do I feel like I'm missing anything! At the end of the day its just a personal choice and I also don't feel the need to tell everyone about it (current post excepted of course! but this is literally the first time I have ever mentioned it in any kind of forum/post)
Well, if you're adding these biased unprovable speculative distance consequences to the account, maybe we can also add the entire corruption of the State transport-related agencies, costs related to second, third and forth-level bureaucracy, the corruption of the vote system, election costs, loss of freedom in all the domains of life, brainwashed minds of citizens, wars.
That it took me a whole weekend (not really but it felt like it) or the fact that I did it? Homework :)
44% is a big difference. Given the damage his body sustained, I think he would have certainly died if the kinetic energy hadn't been reduced by that magnitude. Every other story I've heard of someone surviving a fall from these kinds of heights involved a parachute not opening but remaining attached.
Vacuum Pumps in Packing and Production Line
You can't: On slide 43 you can also see that keyset pagination has some limitations: most notably that you cannot directly navigate to arbitrary pages. However, this is not a problem when using infinite scrolling. Showing page number to click on is a poor navigation interface anyway—IMHO.

As someone who often skips a few pages when navigating such interfaces, I say "thanks, but no thanks".
> [OpenBSD] have discovered as much as any famous-for-five-minutes security researcher

TL; DR OpenBSD acted rationally if they'd prefer to go it alone, which seems to be their culture. To their credit, it's worked pretty well so far. But you can't have your cake and eat it too. If they prefer a mad scramble after public disclosure, they'll get it. But they shouldn't get early notice from responsible researchers.
Elon musk
Good article,, but easy on the Trump stuff, it sounds like you believe too many lies. That aside, fake news can be found anywhere: Facebook, Twitter, CNN, NYT, Fox News, ... Why? Controversy = Money.

I agree with the part about social media having negative effects on our behaviour. I can recognize some of these effects in my self. I hope we can see studies about this in the future and maybe schools teaching the pros & cons of the internet in general.
OpenBSD wifi maintainer here.

I was informed on July 15.

The first embargo period was already quite long, until end of August. Then CERT got involved, and the embargo was extended until today.

You can connect the dots.

I doubt that I knew something the NSA/CIA weren't aware of.
I am generally ok with that. Embargoes are retarded.
I would have thought a more natural candidate for scientists would be languages like Java or C# rather than python: you get both a language that is relatively easy to write, with no memory to manage, no hornet nest of pointers on pointers, nice debuggers, lots of 3rd party libraries, while a the same time getting the performance of static typing / running compiled code once the program has been JIT (which for long running code is a negligible cost). It's never going to be as fast as a C++ or Fortran, but you get a compromise between performance and ease of use, while I understand python is going the other extreme, i.e. all ease of use at the expense of performance. Doesn't matter for a simple simulation, but for some large data analysis projects, I assume it could make a big difference.

But that doesn't seem the case. The choice seems to be between python and c++/fortran. Does anyone know why?
This is brilliant...
It took me some time to understand how it worked as it starts up with a demo...

The idea of writing music in JavaScript is phenomenal

well done
I was aware, but thank you for the link.

The fact that it can be used in an important use case is a necessary but not sufficient condition that it can replace the incumbents. Same goes for end user computing.

Now, it gives me great confidence that, without the apparent short term focus of the core devs in this field, there has been such progress as Celeste. This is a good sign that the fundamentals are right.

But I'm probably more encouraged that the community are focused on user experience and delivering an environment that scientists want to use. This is essential, IMO, and appears to be working well.
Me too, I go to Berlin about once or twice a month, there are homeless and deranged people around but NEVER anything like what I saw in SF.

One day when going to the Van Ness' Muni station I saw a couple of homeless people, they had syringes hanging from their arms, right before I reached the turnstiles.

I never saw so many deranged people on the streets, screaming as loud as one possibly can as I've seen in San Francisco.

So yes, Berlin has the same problems but I think they are on very different scales.
YLD – Software Engineer – Fullstack JavaScript
> plus some Chinese home-grown architectures

I've heard tidbits of info about the existence of these. What are some relevant search keywords I could start with?
Yeah, the hysterical part is how people think distros is leak proof. It just doesn't leak in nice public ways to allow "responsible white hats" to wag their fingers. Raise your hand if you can say you confidently know the full back channel distribution of a notification to distros.
Did not mean it as an insult
1- Bitcoin is not stock so comparing with stock has no weight in your argument

2- It has already been on a very long bear market (2013-2015) where everyone said pretty much the same thing (fad, tulip, the experiment failed .... ). So yeah the new holders will go through rough times but your argument that it reached the peak of the hype cycle has no logical facts to support it since you could have said the same in the peak of 2013.

If anyone knew when the peak is(was or will) would not be here commenting on HN or talking about it but rather selling this knowledge ... and this holds true for any investment.
Grill Drill- Best Open Air Barbecue Restaurant in Lucknow
Grill Drill is a beautifully set up Open Air Restaurant famous for its Kebabs and Barbecue in Lucknow. Be a part of sizzling & mouth filling veg and non-veg kebabs today! http://www.metropolitanclubs.com/grill-drill-open-air-restaurant-in-lucknow/
Quick googling found out that at least one guy did come very close to realizing that 4-way handshake should have hard replay protection: http://slideplayer.com/slide/5762070/

On page 30 of the presentation: "Authenticator may (or may not) re-use ANonce"
This is scary because it points to a potential future where they're treating cars like software. Weekly/monthly visits to the garage to get the car equivalent of "Weekly bug fixes and performance improvements" would be absolutely off-putting.
That allegation is completely unproven. An with that set of facts ("some people know more than others", "the stock price changes") you can literally find "insider trading" for any given stock, in any given week.
Preload lists are not a realistic solution (you can't preload the whole internet) and a sufficiently complicated site will be subverted due to 3rd party dependencies. And does uninstalling a browser not clear the hsts cache?
The Black Swans I'm talking about are about failed attempts to control the exchange rate by central bank. Fiat currencies are stable until they aren't.

https://en.wikipedia.org/wiki/Black_Wednesday

https://en.wikipedia.org/wiki/Swiss_franc#End_of_capping
> As far as I understood, this attack has no client-side mitigation that could be employed other than treating every wifi as an open network.

I've been doing that for years and recommend others do so as well.

The rise of HTTPS nearly everywhere helps mitigate things a bit. This same type of exploit 5 years ago would wreak havoc exploited at the local Starbucks WiFI.
Deserialization of data using an interface
Show HN: Visual Time Zone Comparison from Your Mac's Status Bar
For reference, the OpenBSD patch in question released on August 30: https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/027_n...
Exactly that!

No bullshit please - you guys do a wonderful job of avoiding it and stamping on it when it does turn up. Keep up the good work :)
Meaningful work has less to do with the company or job than the person doing it and his/her set of values—“real values” and “good purposes” describe an infinite set of potential jobs/companies. If you cannot find meaningful work, perhaps the problem is that your values are poorly defined. I’d suggest focusing on that part of the equation first.
Quadrillions in infrastructure? China moved half it's population to cities in the past few decades and built the infrastructure to support them. They're still doing fine despite that huge cost. 100 years is a long time for a building.
To add to this:

- Even if you throw the coin to your friend at the speed of light, you can still know what your friend's coin will land on before it happens. (Picture your friend a million light-years away, and you tossing your coin a few feet up. You look at yours to see 'heads', and look into the distance knowingly.)

- Even though you know this information, you can't tell your friend ahead of time what their coin will land on, because that information can't travel faster than the speed of light (which the coin is also traveling at).

- This holds even if you throw a coin at a super-slow speed to your friend and then transmit to them what their coin will land on: they'll know before it happens technically, but the information itself still travels at the speed of light.
Millions of high-security crypto keys crippled by newly discovered flaw
I was hoping you would say that. Do you not realize the circular logic you're using to define "money"?

Q. What is money?

A. It's a unit of human work.

Q. What is a unit of human work?

A. Money.

If you cannot provide a concrete definition of either 'money' or 'a unit of human work', I have no idea how valuable 1 of your 'moneys' are.

Let's call your money 'CRYPTOS'. One may assume 'a unit of human work' is like a person doing some defined task for 1 hour; and the value of 1 CRYPTO is established as number of CRYPTOS (1) you would be willing to give someone for doing that task for 1 hour. Naturally, for this to work, there would also need to be someone willing to perform this task for exactly 1 CRYPTO per hour; and nobody willing to do it for less. Is that basically what you are talking about when you say 'money' is 'a unit of human work'?

Above you scoff at the idea of money representing a unit of 'value', and say that value is subjective. So let me again point out the obvious - people paid different amounts of money for the same work. If you pay people different amounts for the same 1 hour of human work, then a unit of human work isn't always worth same number of CRYPTOS. So explain to me precisely how you are defining 'a unit of human work' and how it equals X amount of 'money', without introducing some subjective concept of value or worth.
It is. Always when we are not talking about Tesla, Apple or self driving vehicles.
Here's an archive link:

http://archive.is/OHjC4#selection-3513.273-3525.334
Does it really help? One comment on reddit suggests that switching to RADIUS is not enough to be protected against this kind of attack. https://www.reddit.com/r/sysadmin/comments/76lj5q/this_is_a_...
See my comment here. It sort of replies to this anyway: https://news.ycombinator.com/item?id=15482285

I don't believe that embargo is healthy or responsible! If anything its a monopolising factor.
It is more the CLIENTS (unless your router is acting as a range extender, it is not a client) that needs to be patched / updated.

Source: https://www.krackattacks.com/
Perhaps "defect" is the wrong word given the circumstances, but the result is the same. There's a good reason for the embargo: this all takes cooperation, as it's not a Nash equilibrium. I still agree with their decision not to include OpenBSD so early in further disclosures, given Theo's short-sighted statement.
I usually use query similar to this one (in PHP/MySQL), it's much faster than traditional offset query. You can compare it for yourself using EXPLAIN. Sure not for 100M records, but for 1M or so :)

$items = db("SELECT a,b,c FROM item
JOIN (SELECT id
FROM item
WHERE
<your-where-conditions>
ORDER BY id DESC
LIMIT <offset>, <limit>)
AS x ON
x.id = item.id");
Suit the Content to the Platform and the Platform to the Content
It's missing the Veusz multiplatform GUI plotting package and associated Python plotting library: https://veusz.github.io/ (I am the main author)

The saved files in Veusz are basically Python scripts which reproduce the plot. Plots are built by putting together different types of plotting widgets. These widgets can have their appearance and properties changed in the GUI. The program can also do various types of basic data analysis within the GUI. Plugins can be added for supporting different data formats, manipulating data or automating tasks.
Await your client to be patched. Routers are not so much the problem (unless in Range Externder modus).
North Korea: Where can its missiles reach?
It has to be depressing to persuade people that it's important by scaring them and removing all hints of possible ways out other than reducing fossil fuel use. Reality won't be as bad as the impression the news and climate change battlers give.

Eg the IPCC predicts a 1 foot sea level rise in 100 years. Watching the news, you'd think it was 6 ft. Those are both extreme values due to uncertainty.
Correct for 98%. Clients are the weakest point in the scenario.
I absolutely second your sentiment - 100%. Of course, this is not going to resonate well in a forum where the majority is invested one way or another in startups producing what I would also refer to as bullshit.

Defining the term bullshit is a bit difficult though in this context. But one definitely can categorize a product or a project into "attempting to improve society and environment" and into "creating incentives to consume more".

I think ML and data science driven political and legal investigations is an interesting field. The only downside is that companies or organisations in those areas usually pay less.

But I would love to do work for Greenpeace or Human Rights Watch or similar projects as opposed to my IT position in ad industry. But it feels odd to voluntarily accept a low wage for that. I guess I will give it a try sooner or later - at least for a couple of months.
Yeah but if you are Cisco, Netgear or DLink, and tell your supplier that you want a function to access noise in the signal, or you want to get a true random number based on that noise, I am sure they could accommodate in future generations of their chip at an insignificant cost.
Reinvent Online Shopping Experience with Augmented Reality
Amazon Has Banned 90% of Its Services to Iranians
I limit mitigation to a config setting because that’s what affected clients can do in this case. Everyone patching wpa_supplicant on their android handset is just not going to happen and it takes time for vendors to roll out patches.