skysight-inc/HackerNews huggingface dataset:
Cyber pro here - 5 years doing IV&V testing, 15 years as Fed, State and Local contractor, now a firewall admin at a major U.S. uni. I got an NSA accredited (https://www.nsa.gov/resources/educators/centers-academic-exc...) Master's in IT with a specialization in security. While the degree got my foot in the door (I have a BA in Arts - but have been messing around with computers since the early 80's - plus a lot of self taught stuff) - I've found that a ton of side reading (anything related to the subject - I spent a lot of time on the RFCs - that stuff I use every day)), looking at PCAPs to understand the protocols and reading case studies are the best way to hone the craft.

For a while I was doing Governance, Risk and Compliance (GRC) work, but have always loved being a network security engineer, so I went back to that.

Also - I have a CISSP, which opens a lot of doors. I know that it is being knocked a bit nowadays, and there are certainly a some who are test knowledgeable but no hands-on, common sense experience. I still find it valuable enough to maintain.

Set up a lab - 2-4 computers and a switch should do (you could virtualize some/all of it) and work on all aspects of the TCP/IP stack if you're interested in netsec.

If appsec is your thing, spend a lot of time looking at good and bad code, plus reading on-line of good and bad appsec.

IF GRC is up your alley - read NIST 800-53, HIPPA, PCI-DSS, SANS Top 20 and GDPR - to understand the full breadth of controls and risk mitigation.

As far as data science python and pandas are all over the industry, R not so much. There is a big push for ML/AI work, but it might be snake-oil, time will tell. I use a lot of python and pandas for log and flow analysis.

Also - learn Linux CLI; grep, sed and awk can save your butt in most situations. Gray beard stuff will come later.

Good luck!

<edit - word choice>
You can use the in-kernel open source amdgpu driver with the proprietary opencl userspace by grabbing the tar and installing just the opencl .debs.

Check out
https://math.dartmouth.edu/~sarunas/amdgpu.html

If you're on Debian instead of Ubuntu you can manually install the debs.
Nothing is safe. A fact, that validity period of HTP's special legal status will be extended until Jan 2049, give us some level of confidence. It won't be that easy to turn around.
Just FYI, Belarusians often refer to Donald Trump as the american Lukashenka. They share quite a few traits.
Yeah, was a good point for selling. I suggest the price will continue to drop.
I'm in the same as you. I've been dumping a few hundred a month into BTC, ETC and LTC for a few months and at the time of writing (BTC is currently hovering around 14k) my investment is worth 3x what I've put in.

While I'd love to see crypto disrupt the current financial system, it's just fun to be a part of the ride. I see this as play money. It's fun to track the price up and down.

It will have to do a repeat of the 2012-today run up for me to make huge money - something I'm not expecting - and unless it does this, I'll not be cashing out. If it happens then awesome, if it crashes tomorrow then I've spent a bit of money for a bit of added excitement in my day.
Elektra 0.8.21 and Book released
Unfortunately with governments it's no longer about what makes sense but about what they can get away with. Much like you can expect a giant for-profit business to do anything to maximize its profit, one can expect a government to do what it can to maximise its control. That's just an observation.

Regulating cryptocurrencies can have the same effectiveness that regulating information exchange through the internet had. Yeah sure it can be a bit impractical or scary for most to go around artificial limitations imposed by their state but it is practically impossible to keep the really motivated from doing what they want.
Not a fan really, what if you are interrupted while writing and have to look back?
The solution is for the world to adapt to the blockchain, not the blockchain adapt to the world.
... Until it is recovered by space pirates and sold as a historic artifact....
This is problem I have with Driver EULA's. If I buy Hardware today under terms X, should the manufacturer of the hardware be allowed to unilaterally change the terms in order for me to continue to use that hardware securely and effectively, which would require updates to fix bugs and vulnerabilities created by the manufacturer.

Basically if I buy a GPU, discover a bug in the product, can nvidia hold that bug fix hostage and refuse to fix the product I bought under 1 set of terms until I agree to a new set of terms

At a minimum I believe the manufacturer should be required to refund, full original purchase price, of any product which they change the terms to anyone that objects to the new terms even if the new terms come out YEARS after the product was sold and well outside any warranty period
Correct. The UI message would always be the same, some variant of "email sent." Even if the account already existed and it wasn't actually a successful sign up of a new account.
Jupyter-radare2 – A simple Radare2 Jupyter kernel for tutorials or taking notes
The blockchain hype seems to have some parallels to the Second Life[1] one. The technology isn't quite there, the valuations are immense, and it all seems like a real life implementation of a Neal Stephenson novel. Second Life doesn't seem to have gone anywhere but it doesn't mean cryptocurrencies won't as well. From the outside they do look just as niche and generally lacking in use cases.

[1] https://en.wikipedia.org/wiki/Second_Life
Bitcoin Plunges Again
Belarus is finishing its first nuclear power station and wants to use the surplus capacity. Initially, they planned to sell it to Baltic countries, but these are in the EU, so it is not yet sure they will cut a deal. EU has a huge anti-nuclear, pro-carbon lobby.
You mean you log onto John with password 12345 and the website says "Some other user uses this password, but not John"?

Seems wrong, somehow.
Thanks brudget for helping a newcomer.
Why? I don't see why it's important to hide existence of a user unless you're allowing people to try multiple logins per second on your site. (I'm not an expert so I am sincerely asking to help me understand.)
I can't tell if you're agreeing or disagreeing with me :) my point is exactly that: what AWS et all are offering now is not like what we used to have, so we should use the term "serverless" for stuff we already had, like fully-managed static sites.
It's fundamentally the same thing, yes - showing bid and offer prices at which you will get into risk on your own account. But the term "market maker", in my limited experience, usually means on an exchange, whereas it's "dealer" over the counter. For example, you have swap dealers, but futures market makers.
We don't have oligarchs in Belarus :) Victor Prokopenia (https://www.facebook.com/viktor.prokopenya), one of the most famous investors and businessman from Belarus is the one who actually influenced these changes.
https://news.ycombinator.com/item?id=15986302
I knew this was somehow his fault. Thanks, trump. Looks like their crypto currency plans are going to be similar too...
"I am the last dictator in Europe" Belarussian President Alexander Lukashenko
I'm pretty sure it will be launched as an inert hunk of metal and plastic. Batteries will be removed, fluids drained, etc.
Exploiting Vector Instructions with Generalized Stream Fusion [pdf]
I really don’t understand what you’re trying to say, except a sort of generalized hate of journalists?

Because Levine very clearly expressed his expectation that Musk would, in fact, put a Tesla on a Falcon.

I also doubt anyone ever thought Uber was a joke. They may have critizised it for a litany of reasons, mostly being vindicated by now. But nobody considered it a literal joke, not at least because it’s missing the funny.
This is a better argument, but rarely given. The issue is the accepted argument made for 'username or password is incorrect' is it's a best practice protecting the existence of accounts on sign ins, yet sign ups are ignored.
ETH is crashing too.
No, they're not[0]. Correlation is not causation, and this article makes many such correlations. It also appeals heavily to fairness. Business is not about fairness, it is about profit. I don't see the potential profits in racism - if it is possible to provide services to people profitably, it will be done.

Arbitrary clusterings such as zip codes, while certainly statistically significant, do not translate to intent by algorithms or algorithm makers.

Fairness is somewhat subjective, and I think it's fair for companies to pursue profits such as "same day shipping", even if that cannot be simultaneously rolled out to all markets. If it is profitable, eventually, it will be.

[0] Invoking Betteridge's Law of Headlines ( https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline... )
It's very definitely a joke in exactly this way. Or a kind of piece of postmodern art "event", like https://en.wikipedia.org/wiki/K_Foundation_Burn_a_Million_Qu...
It's worth noting that this newcomer friendliness is no accident: building and maintaining a welcoming FOSS community, and doing so at scale, can only be achieved with deliberate efforts.

The video [Rust's Community Automation](https://www.youtube.com/watch?v=407nwX6__70) offers an excellent summary of the strategies used in the Rust community to handle the social dynamics so that both contributors and maintainers are able to engage positively and productively, and continue doing so over extended periods of time.

It's definitely something other projects should look at and replicate :)
But it would be better the government be driven by long-term and wider improvements like overall business law stabilization. This case is narrow short-term opportunity.
Anyway I wish you guys good luck!
Everybody does things like this.
Ask HN: How to keep on top of CS and maths?
I work as an iOS developer at my day job, but have become concerned that my general CS skills / maths are getting worse due to the lack of day to day applications. I mostly work on UI and networking.

Are there any good books, problem sets, or fundamental habits that I could use?
> A couple of unit tests and docs are always helpful but do not give enough credit compare to the effort of building such projects.

You might want to take a look at https://github.com/kentcdodds/all-contributors :)
Not ’30s heirlooms, they’re being crafted to sound like $100k Martins
so he's the oligarch...
A cursory search hints me that the XPS 13 battery is not removable, and, according to some reviews, downright soldered, while the Alienware one is a literal brick. To me that makes the case, even today.

I don't care about popping a lid off every three years; swappable batteries, to me, is nonsense. What makes me irate though is a) the fact that they're downright glued when they could be held in place by other, readily serviceable means†, and b) in 2013-2015 I could code/compile stuff and still have a sizable portion of the best-case battery life, while today the battery size is dwindling, compensated by enhanced power management to maintain the "10 hour" figure, but it falls apart under any load that does not involve browsing or watching some hardware-decoded video. We should be shooting for 20, 30, 40 hours of use on battery, not the current "good enough" status quo.

† Clips, double sided tape, whatever. If it's a problem to not use glue then it's a worthy engineering challenge to use some goo that comes off easily. The current glue situation is a lazy copout, it's Steve Jobs's "plywood on the back".
Snowden's new app uses a smartphone to physically guard your laptop
You're just in the middle of being disrupted with whats called a black and white swan event.
Why Apple says it's slowing down older iPhones
Free Download “Justice League” (2017) Full HD
Curious if anyone finds the boxes and colors in the output of CLI tools such as this one useful. If so, why?
The Liam case wasn’t just proven false it indicated a much bigger problem.

I really hope that that case wasn’t that the police was too scared of the political fallout of submitting exonerating evidence in a sexual assault case, i much rather it be just sheer stupidity or plain old corruption for personal political gain.

The UK has had a lot of problems with law enforcement and local authorities not willing to investigate or sweeping under the rug possibly charged political cases such as the sexual assault gangs and pedophile rings in certain communities.

I’ve also known a few people in hiring positione that won’t hire women in today’s climate simply because they are too scared to manage them.

I’ve also seen some cases of false accusations, a big one happened at my first job where a woman working there filed an accusation against a colleague of mine because she got hurt as he didn’t react to her advances, when she submitted it to HR they basically told her “you know he’s gay rught?” It didn’t stop her from going to the external company that handled sexual assault claims nor filing a police report.

I’ve also had a collegue who’s kickboxing instructor of a wife pretty much tried to bait him to beat her during the divorce by punching him. The guy who’s built like a tank and would make you want to switch to the other side of the road came to work with a black eye one day and basically it was from his wife.

There are a lot of cases which are much more nuanced than they seem and in many cases it’s almost a taboo to talk about it in any way that isn’t completely onesided.
Many of the bold claims in this document are completely unsubstantiated.

Question 7: How does the Law regulate Blockchain and cryptocurrencies?
It can't. The principle argument that deals will be safe because the HTP residents are 'trusted and respectable companies' is naive and invalidates the fundamentally trustless model of blockchains.

Question 8: How is the mining activity of individuals regulated? Won't they launder funds through Belarus?
Money laundering happens every day with fiat currency, and with cryptocurrencies this is even easier. Exchanging currencies across both blockchains and boarders introduces innumerable difficulties for detection of money laundering.
If your users want to disclose that information, provide them a way to make a public profile if they want to, and if it makes sense. Don't assume their intentions. They might have good reasons you didn't think of.
Makes more sense than the current HN title.
I want to show an alternative approach to managing your documents:

Store them in your IMAP/Mails. Either on an own account or in a dedicated sub-folder.

I wrote some small python scripts [1] which allow you to:
- Add an email with the PDF attached to your document collection. The script supports adding a subject and adding tags to it
- Go over all the emails and run an OCR (tesseract) on them: Attach the OCR result together with the pdf to the email.

Big advantage:
- Search on IMAP is a solved problem
- Clients for every operating system in the world, including web, mobile
- Super simple backup and restore

Over course, very geeky, nothing for your parents, but maybe something for you?

[1]: https://github.com/theomega/IMAP_DMS
https://www.youtube.com/watch?v=_h6ab9nbByY
Imagine a human like alien civilisation discovering the car. They would be like we found the chariot of God.
My exodus wallet's adress is

0x078Ea6bf3648AB03B464AcAc0d333901089c6B3E
Have you seen jocko? https://github.com/travisjeffery/jocko
For some websites, people might not want others to be able to find out whether they have registered if they only know their email address (e.g. same kind of websites for which the incognito/private mode exists in browsers).
How can the pass be correct if the username isn't? A password is only correct in the context of a specific account.
Victor Prokopenia was jailed in 2015 and detained for many months. Once he was released, he started consulting president's inner circles. This policy of carrot and stick is what prevents the appearance of oligarchs in Belarus. They are intimidated before they become too powerful to ignore. Very little information leaks about the reasons of such detentions and liberations.
Nuclear powered ASICs and GPUs without intermediaries, that would be a thing!
Given how much smaller is the F# community and how much more you can crank in less lines of codes in F# I can believe it.
Between C# and F# there is about an order of magnitude of difference in the LOCs for big projects and C# and Python are comparable from this metric.
Interesting information. I just think that the benefits of a trustless system are such that will warrant working around any downsides -even though we're not there yet.
“On Storytelling” by Evan Czaplicki
"At the center of Northpointe’s argument was an essentialist fallacy: Because persons that police classified as Afro-Americans were re-arrested more often in the training dataset, they claimed, COMPAS is justified in predicting that other persons classified as Afro-Americans by police—even in a different city, state, and time period—are more likely to be re-arrested. The cycling of classification into data then back into classification echoes W.E.B. Dubois’ 1923 definition, “the black man is the man who has to ride Jim Crow in Georgia.”"

Sounds like the answer is yes.
You are leaking the information. Maybe you want to check if your buddy is a registered on some controversial site, or maybe you want to target someone for hacking…
I agree, but they're making quite good steps now. This document also declares: `Investment according to English Law will be allowed.`
The process takes time but Belarus slowly removes borders and getting better. From 2017, residents of 80+ countries (including entire EU and US) were allowed to enter Belarus without a visa for 5 days (subject to be extended even further)
"No you're not." Recep Tayyip Erdoğan
Not quite on topic, but it would be nice if more websites would offer the option of using client side TLS certificate "login" with or without an additional prompt for a username and password.

It would be next to impossible for an attacker to bypass that. For example, even if the attacker provided the correct credentials, they most likely would not have the associated client-side TLS certificate private key. Then the server could just reject the log on attempt outright (since the certificate wasn't provided or verified).
Scientists really aren’t the best champions of climate science
You should definitively set the password after clicking the link. That said, what would an attacker do with that account?
It's a fake.
That's nice but why is the example with zip files?
Then I would not say they are building new infrastructure of racism. They are getting garbage input and returning garbage output.
How does that answer the question as an exclusive yes without any room for no?
Probably money and time. If they are common shareholders they likely had to pay out of their own pocket to exercise their options and also had to pay taxes on it. Not great news at all.
Is there a way to combine this with sudo, to edit root's files remotely? Apparently tramp is supposed to support this, but I prefer vim.
That's the joke, yes.
Geographically, Turkey is not Europe, right?
Because the government should be trusted with that infrastructure/information and they won't become a bloated, red-tape laden mess?

I think the majority of people agrees there needs to be changes in things... but putting "government" in charge of the backbone of the internet? Would definitely not a change for the better.

Personally... I think there should be one of two rules: Companies can't own content AND infrastructure (IE: Comcast)... or a higher cost (taxes? fees?) for companies that do and/or don't have reasonable competition.
Whee, the fifth crash this year. That was a rather short one.
Video: Alleged Russian Spy Walks into Downing Street with Theresa May
That would explain why Google's products often have very obvious flaws. The developers who know that the issues are fixable are being ignored.
I have a commonish firstlast@gmail account and frequently receive what is the obvious result of people in various parts of the country incorrectly providing my email to apply for jobs, order pizzas, and use other services.

It is absolutely common for users to supply the incorrect username/email.
Long Island Iced Tea Shifts to Blockchain and Stock Soars
> I've resorted to doing platform checks in my .bashrc

This is what I do, too. Most of mine is portable, but I have a block in bashrc that branches on uname.
> Correlation is not causation

That's particularly ironic, since a lot of ML can treat it that way.
I've used cryptomator in the past but it still feels like it needs a bit more testing and polish before I'd be confident in using it for personal file security.

Boxcryptor has the feel of an incredibly brittle app. I'd hate to be the one who had to maintain that thing.

Tresorit is wonderful if you're rich.

I've settled on pcloud. Adding end to end encryption is an add on service but inexpensive and dependable. They also offer background backups of your social media accounts, downloading and storing all of the photos you've uploaded to fb, Instagram, Google photos, and even doing full Google drive backups.
Thanks, I'll give it a go as well if you don't mind. :)

xrb_1mrb18cstrjrectodi6qjnm3jnjq79tbtuzhcbxix4oait6ity4gzxdhy9s8
Charter promises Internet service to family–then says it’ll cost $16,000
"... do not translate to intent ..."

intention is orthogonal to structural bias

from the last section of the article: "infrastructure beats intent"
Ask HN: Why does Amazon allow multiple accounts with the same email address? (2014) | https://news.ycombinator.com/item?id=7075372
If you, as a developer, are technically able to check that the password is used by another user, you have failed pretty big at best practices.
Victory on “The Price Is Right” Made Them Change Their System
My CS Degree at EPITA Was Worth It
What a tired, lazy cliché...

Why don’t you engage with the content of the article: But when COMPAS’ prediction was inaccurate (either predicting re-arrest when none happened, or not predicting an actual re-arrest) it routinely underestimated the probability of white recidivism and over-estimated the probability of black recidivism. In other words, it contained a bias hidden from the perspective of one set of statistics, but plainly visible in another..

Edit, because you noticed how unhelpful “ha ha, Betteridge” by itself is: intent may not be necessary for discrimination, nor can you deny intent when you continue to use methods shown to produce discriminatory outcomes.

A profit motive is similarly useless as a defense of discrimination. Maybe young, white, heterosexual female employees are better for sales, because you operate in a xeno-, homo-, gymno-, gerontophobic neigbourhood. But it’s no excuse to limit your job ads to that demographic.

One reason is that such logic perpetuates its own causes: if the police is more likely to stop&frisk non-whites, you will have fewer whites in your arrest statistics, even if they commit the same number of crimes. To then turn around and use those statistics to justify your racist police procedures is both morally and scientifically bankrupt.
I agree. The vibroacoustics and shock environments in a fairing are intense. He would likely have to rebuild the car from scratch to pass testing. Last thing you want is a wheel vibrating off and bouncing around in the fairing during flight. That could cause big problems with loads and/or controls.
What WHATWG says does not matter either.
The only thing that matters is what is implemented in browsers.