skysight-inc/HackerNews huggingface dataset:
> The client is forcibly disconnected from the WiFi network and reconnects to the attackers network instead.

The client is tricked into moving to what it thinks is the same WiFI network running on a different channel, but is actually the attackers network instead.

> The attacker doesn't need to know the WPA2 password but it accepts the connection setting the encryption to zeros.

The attacked doesn't need to know the WPA2 password and (for Android and Linux clients) the client then defaults to an encryption key of all zero bytes.

> The client thinks it is connected to the original wifi network and continues as normal.

Yes.

> Wifi traffic is intercepted and unencrypted.

Wifi traffic is intercepted and can be decrypted (since the encryption key - all zero bytes - is now known).
My feeling is Haskell is a bad teaching language for the same reason C++ is -- there is too much "this is some crazy stuff you have to learn about the language" early on.

One reason I have learned to love teaching Java over C++ is that the language-based bugs tend to be "shallow", at least in the first few weeks. The error messages tend to be easy to interpret, and when programs crash it is easy to understand why (how to fix it might be hard of course!)

For later year students, it's fine to expect them to learn the weirdnesses of Haskell and C++, but not for a student on day one.
Hey, maybe tomorrow you won't have one :)
> Who cares you just ate a plate of casserole at home?

Ok, you don't care but you are not the world. In my experience, people ask what was in it, what recipe you used, how you cooked it.

> What value is in griping over Mondays?

Again, in my experience, it leads to a sharing of experiences.
Indeed, prior to 2015 it had double digit inflation, thought this has declined to just under 3% per year and will continue to fall.

Morever, some estimates suggest up to 1/3 of all BTC are unspendable (lost keys, malformed txns, minute dust UTXOs, etc) so the deflationary spiral could have already been under way.
How would a dictatorship allow stores to accept Bitcoin? If you order from abroad, how would a dictatorship not open and track parcels?

You can use Bitcoins on a black market for illegal goods in a dictatorship, as you can use Bitcoins for illegal goods in a democracy.
Inappropriate yielding should be penalised just like lack of appropriate yielding.

At sea the COLREGS require ships with right of way to maintain their course and speed (unless of course they have to give way to another ship, or make evasive maneuvers). Of course fishermen tend to ignore this rule, changing their course and speed whenever convenient to them.
> Don't get me started on the arbitrarily shifting release dates that correlate with buggy releases that we developers get angry emails about.

I'm willing to bet that it likely causation in a majority of cases. I've been there. Business comes back with a list of wishes for the quarter. We're asked about the features as a whole, and I'm already on the fence about whether it can actually get done.

We start getting granular with the stories. By the end of the first sprint's estimations, we've definitively said, "There is no way we can finish all of these by the end of the quarter." That's taken back to upper management, and the whip is cracked. Too bad.

Sprint has started, and instead of a quarterly wish list, we now have hard, immobile release dates for different feature sets that don't give enough time. Some people are working long hours, and some of use are sticking to our 40 and done. The features are released as wished. The production defect count increases, and the production team grumbles.

I assume we'll repeat this until the clients get sick of shoddy workmanship and outages.
These days, most of us use an exceedingly long 25 word mnemonic key; also, look into actually fungible currencies like Monero, where transactions are private by default, with the option to decrypt them for a regulatory body.
Would you accept "humans violate the rules in a safe and principled way, plus lots of other ways"?

I mean, you're obviously correct, human drivers do idiotic and deadly things all the time. But I think we can distinguish that from the behavior in the article.

Gently rolling a stop sign at a high-visibility intersection sounds like a safe and principled violation. Driving around a car waiting to turn left is a bit less safe, but still a principled or predictable violation. The Pittsburgh left is a (fairly) safe and principled violation.

None of those things are comparable to texting and driving, or ignoring a red light. They're informal adjustments to the traffic code that other drivers really do anticipate, and which aren't nearly as dangerous as general "bad driving".
Yes and no.
It’s written in a “Rick” style of talking, while linking to lots of philosophical principles. An unfamiliar reader would have to read between the lines a bit.
This article has pictures:

https://www.washingtonpost.com/news/speaking-of-science/wp/2...
Tesla know this. Don't forget that every car they make records telemetry and tests new algorithms. It would be great to see Elon stomping around stage like Ballmer: "data, data, data, data, data, data, data!"
The hype around BitTorrent was a lot more hypey than that, and the revolution you're describing was already well underway by then by means of Napster and LimeWire and what not.

I think the "let-down" is akin to what it would feel like if the end-result of the blockchain in a decade would amount to little more than cheap, low-friction international payments (and those not even powered by a blockchain, but simply by the banks getting their shit together). That's great and all, but the blockchain hype is way up there with enabling anarchist utopia.
You should check out https://github.com/IGITUGraz/live-plotter (I am the author of the package)

It is designed exactly for this use-case -- visualizing results of an ongoing simulation. It does best effort plotting, but doesn't block computation for plotting. I would be happy to receive feedback on the package.
Not quite: The attacker watches for the initial client->AP encryption negotiation (or forces it by forcing a disassociate), records one step of that negotiation and replays it to the client. That has the side-effect of causing the client->AP traffic to re-use encryption keys. Since WPA2 encryption is a stream cipher, re-using keys opens it up to a known-traffic analysis attack, which allows a listener to decrypt the traffic. So, the user is still connected to their existing AP, but since they're re-using keys, attackers can decrypt the client->AP communication.

There's no need for a second AP in all this, just someone in range of the client who can replay packets to the clients.

(Good TLDR here: https://blog.cryptographyengineering.com/2017/10/16/falling-... )
> I mean, Rick's a dick, no doubt.

Who, when being worked 12x7, and when given the pressure of being a blocker of everybody else, isn't going to respond poorly? I've seen some of the nicest and even tempered people get short with others when the pressure cooker is really turned up. Rick sounds like he was a good guy to begin with - someone who regularly helped his coworkers, someone his coworkers trusted - until he was overloaded with work.

Fight or flight. When exposed to extreme stressers, people tend to take one of those two paths. Rick took the first. Someone else would have broken down balling, or spiraled into deep depression, or isolated themselves. Don't blame them for being human - blame the company for creating such a terrible environment.
Oddly, good storytellers also don't have a spleen. Weird.
But you are asking a sovereign authority, with few restrictions in terms of monetary policy, to voluntarily restrict itself for no benefit.
A team from UC Santa Cruz used the data from the Swope telescope in Chile to locate the source of the gravitation waves and observe the light from the event. The data provides evidence of how gold and other heavy elements formed in the universe.

http://reports.news.ucsc.edu/neutron-star-merger/

https://www.youtube.com/watch?v=R5EkI5qbYYc

Full disclosure: I work at UC Santa Cruz and built the site linked above. :-)
What part of this commit description is "not revealing details"? https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/027_n...
>> is going to be confused and likely pissed if you show up to closing expecting to do all your research then.

To be clear, the seller in this case also happened to be the developer in charge of the quasi-government entity responsible for these documents. The county referred me to them because State law gives them responsibility for those documents. They had violated time frames in the contract multiple times before this, I only proceeded because I wanted the house at that location and wasn't willing to walk away despite their violations.

I gave the title insurance company and the seller written notice of several weeks that I was still waiting on documents, and that if I didn't have them until we closed, I was going to make them sit there while I looked it all over. So I really don't care if they were confused or pissed, and I really don't care if you think so, either. I asked for them early in the process, didn't get them, so I was going to look them over and make a final decision when I got them - which was at closing, because they chose it to be at closing. I had money already on the table, and it was a calculated risk that I would eventually be okay with the documents, but I wasn't prepared to proceed with the rest of the mortgage without them.

My point is that it was obvious to me that in most of the mortgages they handled and in most of the contracts this developer / builder (one of the biggest in my area) handles, most people were not looking at these things EVER.
Nor are they easy to redesign. Pittsburgh, Boston, Paris, etc. are generally designed in ways that everyone knows are suboptimal, but the alternative is a catastrophic shutdown in the heart of the city.
Semi-Automatic Rail Gun Is a Laptop Killer – Hackaday
Yes, it's relatively simple things like this that can actually improve car safety right now, no self-driving capabilities necessary. Automatic braking, lane departure warning, dead-spot detection, driver attention detection, missed signal warnings, etc.

I don't understand why we are not investing all of the efforts and resources that are now spent to develop full self-driving capibilities, into making existing viable safety technology cheaper, and eventually mandatory. I'm 100% convinced it would have a much bigger impact on traffic safety, in a much shorter timeframe, to the point we don't even need self-driving cars anymore. At least not for safety purposes.

Come to think of it, maybe the whole self-driving car hype is not actually because companies want to improve car safety, but because they see new business models based around them, and we, the public, need to be convinced self-driving cars will be safer than alternative technologies or modes of transportation.
Nice article,thanks for the update
As a huge fan of 8-bit titles from the golden age of the 80's, I can't help but feeling like these pieces are a kind of pixel art. The intricate detail and consideration for colour placement, while also reducing the load to a minimum (those amazing glyph bitmaps!) is very much aligned between these works, worlds apart..
> The popups will be blocked by all major browsers most of the time

That's incorrect. They default to blocking site instigated pop-ups, not user instigated pop-ups. Some versions of the Facebook & Twitter login systems for example rely on user instigated pop-ups.

PayPal wouldn't use this approach if you were right. They'd have a 0% use result. They have billions of dollars in transaction volume at stake, they're not going with an approach that guarantees a 0% outcome.
This link here always pointed to the link you have given, you probably confused this post and another on the first page:

https://news.ycombinator.com/item?id=15483186

That one is only an announcement of the press event, posted cca 7 minutes before the start of the event, not what was discovered, which was officially published exactly at the start of the hour, as the news conferences started.

Anyway, at the moment there are still live streams, like

https://www.youtube.com/watch?v=mtLPKYl4AHs

10:00 am EDT - Press Conference (Part 1)

11:00 am EDT - YouTube Q&A (ask us in the chat, we will answer on camera)

11:15 am EDT - Press Conference (Part 2)

12:30 am EDT - YouTube Q&A (Part 2)

Also, in Europe (the European Southern Observatory), (edit: finished, now you can watch the recorded conference at the same link)

https://www.youtube.com/watch?v=9ISr4juIkDg )

There's a nice 1 minute animation:

https://www.youtube.com/watch?v=nziW8fywwmg

There's also Reddit "AskScience AMA Series: European Southern Observatory announcement concerning groundbreaking observations" unlocked now, starting at 18:30 CEST / 12:30 ET:

https://www.reddit.com/r/askscience/comments/76ne3p/askscien...
Human-Level AI Are Probably a Lot Closer Than You Think
> has a non-unified memory architecture (NUMA)

Small, pedantic, point of fact, NUMA stands for Non-Uniform Memory Access. You could say Non-Uniform Memory Architecture in this context, obviously, as well.
If you read my other comments, you’ll see that I agree with you completely.

That doesn’t mean the dog shouldn’t be put down. It just means there are also other parties at fault.
> Even planning a crime is not harmful in itself

...

> the involvement in the planning of crime which is a crime.

Since we're talking about what should be a crime, then your two statements here seem to contradict one another. For an argument to be consistent you can choose either framework, but can't switch between the two.

If you want to say the difference between speech and a gun is that speech is not a weapon (in the context of encryption), then you've got to also accept that buyers in an assassination market are merely speaking, and it is whomever goes out and commits the physical act that bears the full blame.

Conversely, if you want to say that all participants in an assassination market are conspiring to commit a crime, then you've got to admit there are times where it would serve the public good to be able to prosecute that crime. This brings the distinction between encryption and guns down to the amount of expected harm versus benefits - but still the same tension where some amount of individual autonomy is given up for some amount of societal protection.

But maybe I'm missing something.
It's difficult to evaluate whether crypto would have mitigated your situation without knowing the details. Why were you charged legal fees by Wells Fargo?

Do you think the state comptroller could not seize your cryptocoin assets if you refuse to pay your taxes?

I'm with you, reasonable Bitcoin supporters should not want to get rid of USD. I personally think of Bitcoin like having a Paypal account, except less businesses accept it, and after dinner when we get the check none of my friends have ever said "hey do you have the bitcoin app on your phone". Maybe that will change soon.
if someone is going to rear-end you, there's not much you can do (even if you can see it coming), other than brace yourself
Yes, but that is avoided by years of experience and pattern learning, something AI should be able to figure out quickly.
This is awesome! We should be able to find more gravitational wave sources and it will give us a better picture of the cosmos. Also, that we have more sources with better correlation and more information.
Distributed Large Scale Systems in Go: The Good, the Bad, and the Otherwise
There's https://github.com/rycee/home-manager I haven't used it yet, but intent to try soon.
If only there were some certification body that ran an App Store with rules against unencrypted traffic...
Vendor version contains blobs (binary objects) for drivers which are most often than not a problem to deal with for OSS and cause various bugs. It's usually workable depending on vendor and hardware but not exactly a perfect solution either.
Answering my own question: looks like someone is tracking it over here: https://char.gd/blog/2017/wifi-has-been-broken-heres-the-com...

Microsoft's status is unclear at the time of writing.
Not the OP, but I just lost access to FlightTrack which was an awesome flight search and status monitoring app that could even pull your itinerary from TripIt.
Downpayment Myths Debunked (NAR Infographic)
Hrmmm. I've avoided two by knowing the stop was coming and watching the rear view -> move to shoulder.
Falling through the KRACKs
What if they fork it? I agree with your main point though.
Intel FPGAs Power Acceleration-As-a-Service for Alibaba Cloud
can't the average Joe do the same with stock?
There are before and after comparison photos here:

http://reports.news.ucsc.edu/neutron-star-merger/media/
DevNetOps: How Microservices Could Bring DevOps Speed to Networking Management
> I mean it should work for every `Data.Map k a`, where `k => Ord`, just like all the other Data.Map functions.

This is where we're got a difference of opinion. My statement is that assoc-in doesn't do anything close to working over "every `Data.Map k a`". Data.Map is a compile-time idea classifying names in the language and the Data.Map functions are designed to respect that both dynamically (manipulate some memory properly) and statically (create updated contexts with new and different information).

On the other hand, assoc-in works only dynamically/at runtime over all kinds of (Clojure and Java) data. In particular, it has meaningful semantics for every possible input value although it only has "interesting" semantics for certain runtime shapes.

That's easy to write in Haskell.

https://gist.github.com/tel/bb84fcc3f1b7488b53349156284b509a
Electric car is simpler, has less moving parts, needs less service and will be more reliable than gasoline - they claim.

All of this will be lessened by enormous amounts of software Tesla puts and a barrier to fix.
The sacrifice starts after 5pm
I have been waiting for support for ESP8266/ESP32, but it doesn't look like it is there yet. I'd really like to use rust to program my ESP devices. C/Arduino works just fine, but it would give a great excuse to learn rust.

Do you have a Github link for this project? I'd like to star it and help out where I can.
> Particularly in humans, can get a highly accurate reading of your variation across your entire genome, including insertions and deletions which are even easier to spot.

Insertions and deletions are usually harder to spot with the short reads that make up the data that you'll get back from your typical "sub-1000 dollar whole genome". The reason is simple. There are vastly more possible insertions and deletions that SNPs, and these all must be considered by algorithms in order to detect them. Worse, as the length of the insertion or deletion increases to a reasonable fraction of the length of your reads, it becomes impossible to hope to resolve the event without considering an untenable space of possible indels and opening yourself to spurious matching.

Those cheap genomes have a serious blind spot--- they don't easily yield information about the large scale variation in structure (indels, copy number, inversions, translocations) that are apparently very important to evolution. I believe the field has blinded itself to the importance of large variation simply because it is hard to observe. Recent papers based on long read data have started to respond to this assumption in a serious way (https://www.biorxiv.org/content/early/2016/09/24/076562).

> Yes there are minute aspects which lack perfect resolution

In the context of humans there is ample evidence that the things we are missing with short reads are not minute, but are rather an enormous elephant in the room, see https://biosci-batzerlab.biology.lsu.edu/Publications/Sudman... and http://science.sciencemag.org/content/349/6253/aab3761. They report that some genomic regions are expanding by up to 50-fold between individuals. Some whole human populations feature quarter-megabase duplications not present in other groups. The scope of the studies are actually very narrow, with hundreds of individuals being considered. I would be surprised if this is anything less than the tip of the iceberg, and incredibly surprised if this turns out to be a minute detail.
CRI-O 1.0 is here
yep. example: https://github.com/nodejs/node-chakracore
LayAuto – A smart window manager for mac user
The cross-stitch/counted-thread samplers look exactly like old-style pixel art, aside from the "fonts" and the subject matter. Plus ça change.
> I have been coding for almost 40 years and always been big on documenting code, but the problem is that code changes and documentation doesn’t always keep up.

This has always been a sign for me to tread very, very carefully. People who change code without changing the comments probably didn't read the comments, didn't read the code or didn't understand it - either way, if comment and code disagree both are probably wrong.
There are pubic housing programs. Whether these housing programs work for mentally ill homeless people is another question.
Microsoft shows off its Fluent Design changes to Windows 10 – The Verge
Tether was allegedly created by Bitfinex to raise capital after the latter was hacked last year and had to find money to reimburse the customers.

In April, Bitfinex was cut off from the US banking system and to this day it had no means to send and receive USD. The supply of tether has expanded 12x under suspicious circumstances* to ensure Bitfinex will have some form of liquidity, without which they would have ended up like MtGox already.

*: There is zero evidence to suggest the tokens are backed by fiat. Nor have I come across anybody who came forward with evidence that they have managed to redeem tethers for fiat.
Apparently they didn't fire their top talent. They fired the worst talent since the team brought it together after the tyrant was vacated and the quality of the work was questionable at best when reviewed.
yes...
I've looked for such a service in the past.
I thought they were called jobhunters (search for the right job for me) VS headhunters (search for the right person for the job).

But I couldn't find anything, apart from recruiters (ie headhunters).
Even that raises interesting questions, though. That only works as long as people choose or are de-facto forced into using the state currency.

What if enough people would rather have their money increase in value than allow others in power to deflate it for "necessary socio-political reasons?"
> Recalling a conversation with Boris

Good to know Boris is still there! Was Chuck still heading up the team when you left?

> a plan for a complete rewrite in C++

Oh, no! That's a real shame. I'd be all for a rewrite, especially considering their insane test coverage, but that decision worries me.

> That being said, as someone who has integrated CSPICE into several C++ and python projects, the modernization would be a very welcome change.

As someone who worked mostly with CSPICE in C but also with some other non-Fortran toolkits, I agree.
Same deal as
https://www.theverge.com/2016/4/8/11391840/us-navy-autonomou...

"One consideration in implementing the ship's autonomous functions was making its movements seem human-like. Any maneuvers it makes to avoid collisions have to be detectable by crew on other boats, so changes in direction (which are more easily spotted) are preferable to changes in speed that might be just as effective but are less obvious signals."

Obeying rules is nice but you need to account for behaviour of human actors as well.
How to Learn Web Development Pt.3 – 8 Popular Questions Answered