skysight-inc/HackerNews huggingface dataset:
Having worked on a machine learning-based AV for several years, I'd like to point out that the dataset choice here is extremely important and they seem to have a pretty small one considering the number of possible variations and the choice of model.

What happens in the wild is that one malware author releases a lot of very similar polymorphic or differently-compiled malware so it ends up being trivial to identify it. For example, they could have picked up a small icon that is common to half of the malware or some internal library that is used in a large portion of them. Then a week later the nature of the malware changes and you would identify a lot less.

Another thing to consider is that in many cases, a tiny modification to a known good program can make it malicious. This includes such things as changing the update URI. I don't see how they could catch such malware using this method so the 98% detection seems like a very unrealistic number.

Just to present an example:

One can train a simple logistic regression on some metadata features where the malware comes from one source and easily identify almost all of them correctly, while failing to identify malware from most other sources.

Having said that, it's a pretty cool novel approach and I'd love to try it.
"Lisp is worth learning for the profound enlightenment experience you will have when you finally get it; that experience will make you a better programmer for the rest of your days, even if you never actually use Lisp itself a lot."

- Eric Raymond, "How to Become a Hacker"
Anti Web design manifesto
> The Mikrotik's AP is pretty terrible. Doesn't even span a small 1BR in Seattle.

Which AP do you have? They sell many, which vary greatly in transmit power. Some (like the RB951G-2HnD) support up to the legal maximum of 30 dBm, but most (like the cAP lite) run at 20 dBm. The notorious RB951-2n (my first) ran at only 15 dBm, which is underpowered.

The 20 dBm models are designed to be used in a multiple-AP scenario, e.g. one AP per room. They definitely won't span multiple rooms, by design. (This is for several reasons, both to properly segregate client devices onto separate APs, and to ensure TX power parity between the AP and devices, which often operate in the 17 dBm range.)

I've run exclusively MT for years and never had one lock up under load. What model do you have and what sort of bandwidth are you talking about? I regularly run 200+ Mbps transfers to/from my NAS (across a wAP ac) and never have trouble. (I did once own a hAP ac that would – after an electrical event that destroyed some other equipment of mine – reboot occasionally.)
As many other things in the corporate world, the easiest path is firstly get that at your current company, where you hopefully have some leverage. You typically need to wait for 1 yr before asking to go remote.

After that, it becomes much easier to get another remote job: you are already working remotely, which means you have a strong position from a negotiation standpoint when you ask for a remote job to future employers, and you have references showing that you can effectively work remotely.

I know several people who work remotely and they all followed this path.
We're using Haskell to create the world's first VR Linux Distro: https://github.com/SimulaVR/Simula

The long-term goal is to run Linux on standalone VR headsets. Right now we have something working with the HTC Vive.

The Window Manager is being written in Haskell (with lots of C/C++ FFI). It's a very serious project, attempting to do something with Haskell that isn't merely useful for more programming.
Couldn't find a good source quickly, but it should be fairly evident that there is a pretty strong feedback loop between a nation's military and its economy, especially in the all of human history up to the colonial times at least. Maybe the link is more obfuscated today, but the US exerts a huge amount of political power (and therefore economic) with its massive military. And since military relies on the USD for funding, you could probably assume that the USD is going nowhere as long the US military is powerful (with some hand waving), which looks like a good bet.
The point that the article makes is that Apple aren’t doing much to give users control over third-party access to their “faceprint”, or what it is ultimately used for.
> Can you provide guidance on where I should focus?

Should be the call to action/last sentence instead of "Lemme know" (I read that as passive-aggressively asking for a follow up?

> because we have a dependency on Vendor ABC completing a change to their web service. This is impacting the commitment to my team on Feature 123 because we are near the end of our sprint.

Too many words. Saying that vendor ABC is completing a web service won't affect your CTA. Also, that last sentence is implied.

Here is how I would send it:

SUBJECT: Bug XYZ blocking sprint. Help?

BODY:

Hey, Jane. I'm assigned to bug XYZ. We're held up waiting for something from Vendor ABC; this might make us blow our sprint. Can you help me re-prioritize this?

Now, if Jane is one that prefers having everything upfront and is diligent about getting to her emails, then a longer, more detailed message makes sense. However, I usually send my emails with the intent of illiciting a follow-up response; too much information == TL;DR
Sorry, I didn't mean to imply that Rust did. For me, it's primarily a problem with some JVM-related tools.
The FaceID camera is infrared and can see in the dark [1].

According to the Post "Once you give it permission, an active app keeps on having access to your face until you delete it or dig into advanced settings. There’s no option that says, “Just for the next five minutes.”"

So a random developer can (kind of) look at us when we turn the light off. Not only that, those cameras work also in the sunlight. You can go on YouTube and search "clothes transparent to infrared". Not much, especially considering that the app is not getting a real image, but still somebody will be uncomfortable with that.

However there also legit and interesting applications for infrared cameras and they've been on sale for a long time. What's changing is the number of those cameras that are getting around.

[1] https://www.macrumors.com/2017/09/13/how-iphone-x-face-id-wo...
When a millennial does something I hate, I tend to not want to blame them directly, so instead I attribute their behavior to a sort of group behavior. When they do something I like, it's easier to attribute their behavior to them as an individual.

I've noticed this tendency for people these days to just refuse to do work they don't like. They expect to be doing the interesting work that is reserved for people who have earned it. I tend to attribute this to millennial and their sense of entitlement. I've also seen some really driven millennials who get a lot of work done on their own initiative. I don't view them as typical millennials, but rather, as individuals who have rejected the entitled behavior of the standard millennial.

I don't know how true any of that is. I was born in '80, and my generation is entitled as shit. It just feels like, as we were realizing the lie of how entitled we were told to be, that the subsequent generation fell for even worse bullshit than we did.
Yes I'm aware. It's a side-consequence that I just happened to single out. GC is opt-in, not mandatory.

As for the bigger download, I'm hoping we'll be able to load libraries dynamically through WASM so you can cache things like the C runtime separately
Looks like they shut down in late '16: https://techcrunch.com/2016/10/31/cloud-development-platform...
In isolation Go is probably easier to write than Rust. However in terms of embedding/interop Rust is certainly much easier.

Last I looked there wasn't a way to pin a pointer in Go and they explicitly forbid passing around opaque handles so you're already constrained in how you can interop.

Secondly you now have a whole nother runtime to hoist up instead of a simple C FFI. It hit this just recently with Python+Rust. Needed to optimize an inner loop. I could just drop down to a single Rust fn, write it and be on my way. No need to spin up a whole runtime just for that inner function.

The parent also hit it on the head. If you're going to be writing C you already need to understand lifetimes deeply, Rust just codifies that in a way that lets you catch it at compile time.
Clicking a Facebook link logs me into another person's account
The German Space Program That Never Was
Universe’s Baby Picture Wins $3M
The exact same thing can be said about many other subjects, even not related to IT at all. As an example, inspiration for simulated annealing, an ML technique, comes from welding.
Yes, I agree that many ICOs are being illegally marketed. Not all, however.

1) Filecoin and other ICOs are using Cooley's SAFT instrument in order to comply with US securities laws, and as a result, have limited marketing to accredited investors.

2) Lots of ICOs are banning US investors.
It's a very common trope by FPGA enthusiasts.
Like any job, the best way is to have an established relationship with someone in a position to pay. After that it is being able to do the thing a stranger is willing to pay someone to do. With remote work, that's probably harder because remote work is not for everyone and there is a significant chance that someone who tries it out won't like it.

It's worth considering that remote work is likely to make it harder to find future jobs because remote work usually means less interaction with coworkers and outside vendors and customers. So it tends to curtail the growth of a person's professional social graph.
For junk reading I often read over 100,000+ words after work. At a casual 400ish wpm that's only ~4h. 8 hour workday and 15 minute commute means I have around 6 hours most evenings.
Contributing to an open source projects is a great way of learning too. It forces you to read and understand the project’s code and concepts behind it. Then you practice coding by implementing your new feature. You also need to test it thoroughly. Finally, you will get a code review for your code.
I'm not a security expert but this seems like are giving out a coarse approximation of my username (that has no password protection). I would think it is significantly easier to break into FaceID starting with the coarse depth map than no depth map at all. But again, I could just be out of my depth on this topic and the difference isn't that big of a deal?
Agree, I think code review also helps yank out that laziness in that code that we thought we didn't have time to make more readable. Send the code back and make them push their code to a better level before putting it live. I've noticed UX problems in code reviews from people who should know better, we just get lazy and think "working" is good enough.
While I believe other coins will inevitably be better suited for handling transactions than bitcoin, bitcoin may end up being the best store of value due to the amount of liquidity it has. Because of this bitcoin tends to act as the gateway to alternative currencies/tokens. It seems like a weird self-fulfilling prophecy.

I predict even when a better chain comes along than bitcoin, bitcoin will still enjoy the benefit of being the gateway to and from traditional funds. Demand for alts will create demand for bitcoin which I think we already see.
ya. sad times. mirrored here: https://medium.com/@colinbendell/evolution-of-img-gif-withou...
I get even better by coding with others. As I look at their code, as they comment on mine, I learn more than I would simply by working by myself.
If there's too many people in my designated area, yes, but not otherwise.
I really appreciate the fact that he continues to put out reading lists. I believe that people are more motivated to read after finding out out Bill Gates reads a lot bc people want to emulate him (and his success).

More people reading is obviously only a good thing if you believe that reading is a good habit for people to have bc it exposes you to different arguments, opinions and ideas. I do think that reading is a net good. If you don't I'm interested to hear why.
@braddwyer is me :)

It gives you about 15 fps of depth data
B2B Customer Acquisition Strategies for Startups
If a high quality watch is made from the same materials, in the same conditions, with the same brand logo, what does the term fake even mean?

From the article:

"Historically, less than 5 percent of the watches that we authenticate are fake,” said Powell. “At one point this number was as high as 10 percent.” However, the numbers are growing."

Is it possible that the number of "fake" watches was always going up but that even experts can't tell the difference any more?

And lastly, is it legal for watch sellers re-sell fake watches themselves? If they do, what incentive does a watch seller have for telling you the watch you want to sell to them is authentic?
Do you have source for that? I can't find any reports of widespread problems.

The speed wasn't the part I was impressed with, it was the ability to do in place upgrade of a filesystem on millions of devices without any massive amounts of problems.

I find that to be a tour de force.

While I'd prefer new filesystems to be faster than older ones, I understand that improvements don't always come in the speed dimension: it can also come in the integrity/data loss one.

You can run your filesystem without write ordering, cache enabled, and no-op for SYNC/FLUSH, and it will be very fast, but you will risk data loss.

It seems reasonable to me to trade speed for integrity.
SEC with order to freeze 'PlexCoin' founders' assets
But in this instance, that's the incentive. You want that money back, rather than going to someone else.
Yocto and Buildroot support the BeagleBones out of the box. If you can use menuconfig, you can use Buildroot to get going in half an hour or so. Yocto takes a bit more work, but you have far more flexibility.
> And if it is a black-box rewrite, then all that tacit knowledge will be lost,

This is a thought experiment on how to avoid that tacit knowledge, not how to deal with it. Consider approaching every edit in the same way you'd approach new code: is the function adequately tested, does the function have a single responsibility, is the intent clear, etc.? The idea is that if you do this, then you won't reach the point where you have a 200-line method with tons of hidden business rules.

I agree there's probably a better way of framing this. Still, as a thought experiment, it's worth thinking about when you can and/or should do this.
This had been done for generations to kids and we are all fine :)
> purpose-built ABM systems use infrared imagers for terminal guidance

What kind of optical window for the IR imager gets used for this application?
Ask HN: Notable books you read this year
Bill Gates top 5 of 2017 is out[1][2], and I'd really like to know what you read this year that stuck with you.

For me, in no particular order:

* Tim Wainwright - "Narco-nomics: How To Run A Drug Cartel"

* Alan Watts - "The Way of Zen"

* Richard Carlson - "Stop Thinking, Start Living"

* Andrew Whitley - "Bread Matters: How and Why to Make Your Own"

* Amanda Palmer - "The Art of Asking"

I'm not a fast reader, and I do have a high hit rate for HN recommendations, so thanks very much if you've mentioned something this year and I've read it. It's appreciated.

[1] https://www.gatesnotes.com/About-Bill-Gates/Best-Books-2017

[2] https://news.ycombinator.com/item?id=15844904
I think I'm missing something. It has been a while since I've used Sandboxie, but it seems like this is a behavioral oversight on it's part.
This is a proposal not a plan. Right now it’s 100% vaporware.
Came here to say this. It's great if you're the boss, but did you notice that in the article he says "I just assumed I understood what Mark Cuban meant in the one word reply"

If that assumption is wrong and involves millions of dollars or hundreds of person-hours, what happens to your company? This is only good if the response CAN be brief and still be adequate.
Ah thanks! Missed that one.
Reimgix: Get All the Benefits of Imgix Using React. Supports LQIP
> People forget bitcoin's only value is its decentralised nature, yet the price increases don't reflect any significant growth

You seem to ignore the simple fact that as demand grows for a limited resource, the price grows. So even if the "value" of bitcoin viz a viz decentralization has remained constant, its market cap goes up because demand has exploded.
It's worth noting that half of American Hispanics identify as "white" to the census, since it asks for race and ethnicity seperately (i.e. you can be black and hispanic too) The census actually counts 90% of Hispanics as white, because their answers (mostly "other race") don't fit better in any other category.

Taking that into account, the USA is either 70% or 78% white. (And presumably that bumps Canada up to 78.7% or so too.)
What languages do you work in? I'm not trying to belittle you, but at the same time, I'm trying to understand how you've received such small offers. Your experience is EXTREMELY atypical for Houston/Texas.
It asks for a supervisor's email. I'm not aware of how these smart contracts work. What else needs to be done?
Regardless of whether it's legally binding, what we see here is an anecdote where there was a delay in treatment. Why should he expect that it would be ignored? People get serious tattoos all the time: https://www.google.com/search?q=medic+alert+bracelet+tattoo
I have to hand it to them for buying and believing into it so much. That's a big gamble.
Majority of what? The FUD? In another post I've given a series of links showing some of the crap that was flung around by the remain campaign, of which there was plenty. Bob Geldof on the Thames hurling abuse at Nigel Garage? That was a pretty sight. Eddie Izzard slagging off leave on Question Time didn't look too good either.

And if we are on the topic of lies and deceit let's consider the ongoing campaign to undermine the democratic decision of the British people, quisling puppet Gina Miller, war mongerer Blair et al. Lovely bunch of people. It wouldn't surprise me if the £350m was deliberately planted to give remoaners a weapon to undermine the result.
In order to exploit this you need to be able to write to the directory where the binary is.

"Security" is trotted out as an arbitrary concern quite often because a lot of security people don't have any concept of risk analysis or cost/benefit. If it was up to them no one would ever do anything because that way they can't make a mistake.
I've done some experimenting with it in my own apps.

I was really surprised how well it does even when covering up the IR sensor prior to opening the app.

I don't doubt that they are using the IR data to improve things. But it does "good enough" without.
I greatly enjoy AvE's videos:

https://www.youtube.com/channel/UChWv6Pn_zP0rI6lgGt3MyfA

I absolutely love his tool teardown videos, and it's very clear he has a huge amount of domain knowledge.
Ask HN: How does an EU resident and a US resident form a company?
What's the easiest way for somebody from the EU to go into business with somebody from the US? Assuming that both are working legally in their respective countries as either freelancers or limited companies themselves?

- Form a separate US company (can a EU resident do this)?
- Form a separate EU company (can a US resident do this)?
- Use something like Stripe Atlas?

With so many independant contractors on HN, I thought that this might be a situation that somebody has encountered before.
Yeah. I was interested but ended up closing it in under 5 seconds thanks to the ads.
https://codeanywhere.com/ is similar and has served me well.
We treat stories as dupes if they've had significant attention in the last year or so. If not, reposts are ok. This is in the FAQ: https://news.ycombinator.com/newsfaq.html.

Some such practice follows from the core value of the site, because intellectual curiosity withers under repetition. On the internet, most attention tends to converge, power-law style, on the same small number of hot topics. On HN we actively try to break that by welcoming the long tail. Because there are so few slots on the front page we tend to be diligent about marking dupes, even though they're often excellent stories that much of the community hasn't seen.

We don't, though, mark a story as a dupe if it was posted before but didn't get much attention. It's important to let good stories have multiple cracks at the bat, in order to mitigate the randomness of what gets noticed here.

And there you have pretty much the whole of our thinking about dupes.
> I setup the AP to have a guest network running on a separate vlan, and wanted that to have no access to my network, after trying for a few hours (and usually locking myself and having to factory reset the router each time) I gave up.

It probably took me weeks to get a working guest network setup on my MT. That is one thing I wish they'd automate. I don't regret it, as I'm partly into MT so I can learn more about networking, but it makes it hard to recommend to others who want a basic home router.

(CAPsMAN helps a little, in that you can direct it to isolate all clients on a given SSID from each other, even across APs, but that still leaves you with configuring routing. It also has a packet fragmentation problem in that mode…)

I had my own VLAN fun when I tried to configure VLANs through the switch menu. Turns out that doing so overrides port master/slave configuration with no warning. I ended up bridging my WAN and LAN ports for a few days… (Now MT is thankfully starting to move away from direct configuration of the switch chip and instead using it to transparently accelerate bridges.)
> And sometimes add a smiley so they know you're not made of circuits yourself too.

That's where I always forget to do :) :( :)
Last I read, any C calls have to be spun off into their own OS thread since the runtime is unable to inject soft context-switches into foreign code.

With heavy FFI usage, that could become costly...
If you really don't want to be resuscitated in the US, you should instead tattoo a notice that you will not assume financial responsibility for any medical procedure performed under the aegis of implied consent.

Make sure to inform your friends and family, so they can record any interactions between hospital administration and the physicians and nurses, in order to post the fruit of your epic trolling to the public network.
Principle of Singular Variability
A great book regarding Unified Process is:

http://www.craiglarman.com/wiki/index.php?title=Book_Applyin...

I found its practical blending of UP with concepts traditionally associated with other processes quite illuminating.

For example, here is a snippet from section 1.1:

Iterative Development, Agile Modeling, and an Agile UP

Given many possible activities from requirements through to implementation, how should a developer or team proceed? Requirements analysis and OOA/D needs to be presented and practiced in the context of some development process. In this case, an agile (light, flexible) approach to the well-known Unified Process (UP) is used as the sample iterative development process within which these topics are introduced. However, the analysis and design topics that are covered are common to many approaches, and learning them in the context of an agile UP does not invalidate their applicability to other methods, such as Scrum, Feature-Driven Development, Lean Development, Crystal Methods, and so on.
Rust is quite a lot harder than Go. While lots of practice makes it easier, it's still not trivial to reason about lifetimes/borrowing/moving, unlike a GC language (which isn't to say that GCs are strictly superior to other memory management schemes, mind you). There are lots of good reasons to choose Rust over Go (you have extreme performance or correctness requirements, for example), but "Rust is comparably easy to Go" is untrue (or as untrue as any user-friendliness assertions can be).

EDIT: I don't mean to convey that GCs are still trivial in a mixed-runtime context; only that Rust is generally harder than Go.