skysight-inc/HackerNews huggingface dataset:
Several years ago the VA announced a public contest to update their MUMPS-based system, with a couple million dollars in prize money for good proofs of concept. The system is open source so I downloaded it for a look. Half an hour later I closed my text windows with a sigh and gave up on that idea.

But I can't say for sure that it's entirely the fault of MUMPS rather than the amateurs who wrote the code. It literally was amateurs; they were doctors and interns, not professional programmers. They made a system that fit their needs quite well at the time, so they deserve quite a bit of credit, even though their source code is a nightmare by modern standards. Their story is recounted in the book Best Care Anywhere.

https://www.amazon.com/dp/B0073HW03I/
(if you check an old comment)

Do you have any sources for this? I find "sentiment at the time" especially hard to find, historically speaking.

And I'd be fascinated to read something about this.
Cogint   launches   new   blockchain   solutions   division
Day 1 of the Uber and Alphabet trial
Researchers demonstrate graphene as a source of high-speed light pulses
Talk with ops guys and have a security guy (that typically is on that team) assign you things to fix.

It’s a bull shit job, as far as software development goes. Sure, you’ll learn a bunch of hacks and ways to fix them and maybe pass cissp cert if you really don’t want to code anymore.
Even if OP is a Registered Investment Adviser registered with the Securities and Exchange Commission, it sounds like
Kasian Franks could be in violation of The Investment Advisers Act of 1940, 15 U.S.C. § 80b-1 through 15 U.S.C. § 80b-21.
Well, they are taught to hustle, to do it first and ask for forgiveness later. Soon or later someone is going to cross the line. I'm glad they are caught and punished this time.
While it might be true that the temperatures of rocket fuel burning are enough to create plasma and some reactions that lead to mass turning into energy, I think Jabavu is right in that the energy comes from the chemical reaction, not from E=mc2.
Actually, Choi (최) and Chae (채) are two different surnames, although they do sound similar (and would probably sound almost the same to English speakers).

On the other hand, transliteration of Korean personal names is always in a state of total chaos, so using Chae instead of Choi (or vice versa) is not technically wrong... although definitely unconventional.
A related read (1):

A big trend in American business is the collapse in the number of listed companies. There were 7,322 in 1996; today there are 3,671.

The number of companies doing initial public offerings (IPOs), meanwhile, has fallen from 300 a year on average in the two decades to 2000 to about 100 a year since.

(1) - https://www.economist.com/news/business/21721153-company-fou...
There's no such thing as common carrier status for CDNs, but, when you're in court trying not to take a site down you'll have to make arguments about why you took others down but don't want to take this one down, part of that is how consistently you applied your own standards.

"We don't take sites down if the content is not illegal" is a pretty clear consistent position to fall back on.

"We don't take sites down if the content is not illegal except that one time the CEO decided we would" is not, so you need a different reason, and they don't have one anymore.
OSCP has a good reputation and should definitely get you a position combined with your engineering experience.

If you're in a big city, try to find a security meetup that runs CTFs or events for new folks. Doubly so you can talk and get a more definite direction.

Anything OSCP tests you on can be done yourself by virtualization on your own machine or home lab.
One other problem this creates, which the article doesn't touch on, is that many employees in the R&D economy are offered stock options in lieu of 401(k)s or a more liquid equivalent compensation. And an IPO is the most straightforward way to cash out. Yes, it's possible to cash out during an acquisition, but anecdotally, it seems as if more people holding stock options have gotten screwed during an acquisition than during an IPO.
That seems crazy to me. It should be illegal for a website to track what you do on that site? We’re not talking about tracking activity across many sites, and you don’t need a third-party tool to do this at all. If it were illegal, a huge number of sites wouldn’t even function without fundamentally changing the way they work. You know that the HN database has records of all your votes, comments, etc, right?

I get the outrage at being tracked by third parties across the web, but that’s different from making it illegal for any website to track any of your activity on their site.
Your own personal benefit or the company's benefit? Because if the latter, I have a queue of tech start-ups ready to be prosecuted.
There are still organizations that care a great deal about cybersecurity. I think it is going up, but at a very slow rate because very few people really know anything about it, and it is those people that care the most (or so they tell us.)
> Is "making misleading statements about various topics" a crime?

On its own, no. OTOH, making material false statements to people with the intent of getting them to give you something of value is the core of the offense of fraud, which is both a crime and a tort.
Here's another radical progressive idea, offer consumer grants to pay for childcare. Then maybe child care will "professionalize" and appropriately "commercialize". This it to not denigrating current child care arrangements or facilities but to provide long term stability to the market. We already know that early intervention and childhood education is a benefit (note education does not mean formal schooling but rather play based learning).
Is that a realistic guess for what the sentence will be, or the theoretical maximum?
Not every crime, even those that are known to prosecutors, is deemed worthy of prosecution.
Because the appearance of security is better than actual security. - Every PCI Document Ever.
I think they would make a lot more sense with foot pedals.
Maybe a combo of that and Anko (https://github.com/Kotlin/anko)?
You cannot argue for Common Carrier status in front of a judge if you're not classified as a common carrier by the FCC.
I sold everything in 2008 at the lowest price, had I not done that they all come back eventually. I think it just took a few years to come back as it has been all the time, which is why the saying goes, "don't use the money you will need for the next 5 years to invest", otherwise it should be fine.
You can also just buy puts. Puts on SPY increase in value as SP500 declines.
Proof of Work algorithms are not hard to calculate, it's simply designed to increase capital costs to access writing to the database (adding the next 'block' set of transactions to the blockchain).

The actual math amounts to a best effort guess in a lottery for write access to a database.

The network would function just as fast with 3-10 computers as it does with 3 billion times the amount of "computing" power.

In summary, Proof of Work is designed to waste as much energy and capital input as possible.
6 Ways to Keep Your Readers Reading Throughout Your Whole Blog Post
Ahh, PCI, the thing that tells you (told you?) you need to use AES and nothing more, so people use ECB. Great security theatre indeed.
Just on general principle, I wouldn't hesitate to jab the frowny face at a gas station with blaring "Gas Station TV" crap on the pump screens.
Ugh. Another site that hijacks scrolling. Why?
From a quick look at the source[1], it seems the compiler will always generate an executable with the text from the paper (which is read from the "paper/" directory, and some bits hard-coded in the compiler source). Or something. I don't really know SML.

From what I can tell, the .exe file generated by the compiler must be really big anyway (since the relevant sizes in the header can't be small because they have to be printable). So there must be some text, it might as well be the paper.

[1] https://sourceforge.net/p/tom7misc/svn/HEAD/tree/trunk/abc/e...
My favorite one... Anti-Virus on Linux...
Which makes it baffling why they still have spinning disks in their Mac lineup.
> The burden of proof is on her.

The burden of proof is normally on the person making the accusation. All you’ve offered is your opinion: “there’s no way she could have written it” and some hearsay.

If I accuse you of being a fraud should you have to prove that you’re not?
Couldn’t agree more. Sure, it’s great to know about a lot of these hacks and ways to prevent them (and be on top of patching) - but unfortunately most of these full time sec jobs are just bull shit, made up for compliance purposes.
> In the same way, I doubt you'd have the problem having many unseen photos if you selected, and shared, the ones that were worth sharing. I doubt all of the thousands should be shared; instead you're forcing the filtering process on every individual you pass the collection to.

That's kinda the point, isn't it? Hardly anybody actually spends their time curating their possessions for future generations, yet nobody is super sad about this missing inheritance. If we thought we'd value it more, there'd be more of a market for products to manage it - instead, things like Lightroom are a small nice. "On this day..." type reminders from Facebook and the like seem to be enough.

I don't think I have a problem: I have a bunch of pictures I look at, for me. It's just nothing more than that.
It should be illegal for a site to store your personal data without your consent, which is what the GDPR dictates for EU residents. What is considered personal data is for governments, regulators, and courts to decide; not website owners.

The days of the Internet being the Wild West are coming to a close, and not a moment too soon.

Side note: it’s disturbing it took Mixpanel nine months to notice they were ingesting sensitive data. Turn on All The Ad Blocking.
I still hate Google for killing Reader. I imagine its death was only a minor inconvenience in the US, but it was a sad day for internet freedom in Iran.

At the time, Iran had for a couple of years implemented an internet censorship platform, blocking access to much of the internet. Nearly all international news agencies (CNN, BBC, NPR, etc.) were inaccessible; so were most of "web 2.0".

Despite the widespread censorship, there was a large active community of independent blogs, non-sanctioned news sites, and small e-publications. The reason this structure could thrive was that even though these websites and weblogs were blocked, they were accessible through Google Reader.

Because of the way Google services were implemented, the government could not block Reader without also blocking GMail and Google Search, which was not an option. As long as authors had a way (like a not-yet-blocked VPN or a friend outside the country they could email to) to post articles, people could read them, like them, comment on them, etc. Iran's censorship was to significant degree neutralized by this setup. The community was large, strong, and thriving. They even had their own jargon: the community was referred to as blogestan [1]; Google Reader was called Gooder, etc.

And then, Google, for some (now obviously incorrect, but ultimately irrelevant to my point) financial calculation, decided to kill Reader. Just like that, overnight, the breadth of the web accessible to an average Iranian decreased by orders of magnitude. The entire community of freethinking authors and their followers disappeared. The only news websites remaining accessible were those sanctioned by the government, pushing the official narrative.

Google put a large nail in the coffin of internet freedom in Iran. For that, I will never forgive them.

[1] with the -stan suffix, https://en.wikipedia.org/wiki/-stan
Had experience with it.

I'll give my goods and bads after about 3 years.

Good:
1. Its behavior is very predictable, both in performance and for conditional behavior.
2. Error handling is not leaky, which helps with predictability.
3. Memory sharing is pretty isolated when it comes to processes / threads, much like erlang

Bads:
1. If you want to do any sort of polymorphism or code reuse, consider yourself screwed.
2. It feels like assembly, everything ends up being tacked together and tangled for code reuse
3. What you write, and what you edit, and what you depend on will be long lived; version control blame will show code still running in production from before you even finished elementary school. Refactoring is impractical.
4. Event driven designs are nearly impossible to do in this environment.
5. Local environments are not a thing. You code in the same mainframe everyone else does. Good luck.
This is a weak argument. Practically all languages
compound symbols made from multiple characters, such as
>=; there is no shortage of symbols. Also, nearly all
programming languages have a function-call notation, but
only Lisp-based languages choose s-expressions to notate
it, so saying “we need function call notation” do not
excuse s-expressions.

I'm ironically going to complain that this is a weak rebuttal.

For one thing, I find it hilarious to see how well this predicted the explosion of silly operators in some of the current languages. (Haskel and Scala, I'm looking in your general directions...)

Second, the point is that all function calls now look the same. Both in serialized form and in parsed form. That is, the homoiconic nature is the point, no? To treat that as a somewhat byproduct is somewhat odd.

They then go on to posit the use of meaningful whitespace. Something that is quite disgusting to me. It is dreadfully easy to mistakenly read whitespace. To the point that I do think programs are textual art, and care should be used to structure them in a pleasant and easy to read way. However, I cannot bring myself to like meaningful whitespace. YAML has given me enough headaches in life in a scant year, that I am pretty firmly on the opposite side of that fence now.
IT has a shortage of metasploit/burpscanner/nexpose/nessus jockeys and XYZ security appliance administrators at low salaries. The positions you're talking about are an incredibly difficult sell to companies. Top 10 companies have a few positions on hire at decent wages doing unique work but that's it. Some companies cyber defense strategy just involves buying a bunch of insurance.

Plenty of pen testing mega-mart consultancy jobs making 60-90K a year working 70 hours a week in Boston and other ungodly expensive cities though. Guessing all this news about the "shortage" in cyber is just more propaganda to further open up the H1B floodgates and drive salaries down.
There are actually a lot of examples where this is not true

1987 stock crash? No recession.

1980-82 recession? No stock crash.

1992 recession? Also no stock crash.
Can Computers Learn Like Humans?
> and is very limited

You might be thinking of the `simd` crate, in which case, you're right. But we are getting closer and closer to exposing a large set of vendor intrinsics: https://github.com/rust-lang-nursery/stdsimd --- You can use it today on Rust nightly. This includes runtime CPU feature detection!

ripgrep is an example of a program that is written in Rust, is CPU bound and uses explicit SIMD in various places to speed up text search. (It hasn't moved to stdsimd yet and is still using the `simd` crate and the old platform intrinsics system exposed by rustc. But ripgrep will move to stdsimd soonish.)
[Some] Workers can individually win by forcing themselves to spend less than they earn and investing the surplus.

In other words, another way that workers can win is by becoming investors/owners.
> Spotify actually does have a "Never recommend this song or this artist again" feature. If you click on the "No" symbol next to the heart in your daily mix or Discover weekly.

Ooh, thanks.

The iPad app seems to be missing this... No heart, either.

Now to google to figure out the heart vs the + button, too, hah.
> Most of these "cybersecurity" jobs are download Metasploit and run autopwn

This is, unfortunately, selling the security industry short. In reality, and especially in cities like DC, the security industry is pretty competitive and the barrier to entry for even entry-level jobs is pretty high. Companies are looking for not just metasploit experience, but a more-than-surface-level understanding of things like networking, OS internals, programming, systems administration, critical thinking, and more. Then on top of that, one needs to be able to look at everything with "vulnerabilities" and "exploitation" in mind. It's not easy. Quite frankly, there is a lot of information that one needs to know, and know well, to be competitive in this field.

With that said, I 100% agree that the certifications are complete bullshit (including SANS). And sure, there are certainly fields that are definitely bullshit-y and mostly for compliance purposes (cough pentesting cough). But there is merit in the security field and it's not all bullshit.
Looks like Mixpanel is handling this well: they deleted the data, notified affected customers, and then are making sure it can't happen again. +1 for admitting responsibility instead of deflecting or minimizing.
Many non-English-derived names (predominantly but not exclusively those from Asian cultures--Hebrew comes to mind) transliterate in different ways into English. If he'd had different translators at some point in his life, there may be documents with different variants. Ditto "Isaac", which is close-enough in terms of pronunciation that he may have adopted it later.

Or, in other words: there are two names there.
"Common Carrier" status is granted by the FCC to certain communication companies. It is not something acquired by (not) acting in a certain way. Example: You can't just run the mafia's books and "I'm a common-carrier accountant; I don't get involved in my customers' business".
Eh, I guess. Seems quite common even among high profile people though. I also remember a dean from the MIT being caught for the same thing, after something like 20 years. She too just resigned, and that was that.
In 2136, Asteroid to Pass Closer to Earth Than the Moon
Interesting! I hadn’t seen this article, but now I’m curious how many of these were “fake” internet companies. Given it being 1996, it probably shouldn’t be too heavily dominated by fly by night internet companies (yet). I’d be curious how these numbers compare to say 1986 as another data point.
Because most people don't have tcc installed, and the convenience is ruined if you have to install things for this to work. I really like that tcc has a flag for this; GCC and Clang really should copy it.
"Let us realize the arc of the moral universe is long, but it bends toward justice." - MLK
I have NEVER heard a useful description by a cybersecurity analyst (i.e. detecting intrusions and exfiltration) on how they do their work, despite being in a position where they should have been able to do so. Usually I just get shrugged shoulders.
The Best UI/UX Design Books and Resources for Designers (Updated)
The lede is the juicer story, but I suspect (having not read the indictment), that the basis for the wire fraud charge is:

> He further admitted that in August 2016, while at WrkRiot’s office in Santa Clara, he emailed several of his employees fake wire transfer confirmation documents purporting to reflect their salary payments for the purpose of convincing his employees to continue working for his privately failing company.
We use Segment's chamber[1] as a frontend to AWS System Manager Parameter Store[2].

I've found it pretty easy to set up, use, and not think about it. It's great for integrating with AWS IAM and whatnot.

[1]: https://github.com/segmentio/chamber

[2]: https://aws.amazon.com/blogs/mt/the-right-way-to-store-secre...
> I won a free certification course as an EC-Council Certified Security Analyst, and it's the biggest joke I've ever seen. It's such a massive fucking joke that I decided to not even renew my certification for free because it would just have been a waste of time.

I've been in the field for a couple of years. I work for a global corporation with 10k+ employees and most of our team members in the security department are judge on their skills and various other factors and we filter potential candidates with a small CTF. Certs have very little importance for us, but we're the exception. Most big compagnies require certifications and oddly they are the ones getting hacked.

In the field, we all know that EC-Council certs are bullshit. They are, at best, the laughing stock in infosec because their "Ethical Hacker" certification is a multiple choice answer and requires little technical knowledge and no hands-on.

However, there are a few certs out there that need a lot of work and technical knowledge to be learn for passing it, such as OSCP. It might be easy to get for someone with 10+ years but for relatively new comers, it's a really good challenge to tackle. I started with their lab, thinking it was going to be a piece of cake for me but it's more difficult than I expected, which is a good thing.

But I see your point and I mostly agree.

Care to explain why you think intrusion detection is bullshit?
>> No-one is saying Google Translate is on par or anywhere near human translation.

Well, they kind of do. Like I say elsewhere, the common measure of machine
translation performance is a family of metrics like BLEU or ROUGE that basically
compare machine translation to human translation. So when a research team
claims strong performance in machine translation, they're really saying that
their systems can do the kind of translation that humans can do, in a very
literal sense (of similarity between tokens or n-grams). Besides, like
Hofstadter says, Google has often claimed its NLP systems (for example, its NL
Parser, Parser Mc Parseface) approach or outdo human performance.

Google is quite unrealistic in the way it promotes its technology and claiming
it does better than humans is its bread and butter in this regard.

>> Frankly, it sounds to me as if you feel threatened by this development.

I don't have any reason to feel threatened :) I'm a machine learning PhD
researcher with some hands-on experience of NLP (though not machine
translation specifically- I've only theoretical knowledge of it). I have a
background in foreign languages and translation, but not professionally.

If I can summarise my concerns, it's not that I'm worried that machine
translation will become so good it will take the jobs of human translators.
I'm worried that we will keep replacing human workers with bad AI and end up
making our lives a lot worse in the process.
Have they considered paying more?
I've worked as a store clerk. You don't get positive reinforcement for doing a good job. You just get yelled at if you screw up. Or somebody else screws up. Or nobody screwed up but the manager expects you to be superhuman.
Personally, I think that having children is immoral. Yes, it can provide you with little workers to help you on the farm, and provide care and love for you in old age, but what if the child is born with a severe disability and is guaranteed to live a life of suffering? Not only will you experience some pain through their suffering, but you are literally wholly responsible for their life, which they had no consent in giving for their own birth. A happiness that is never experienced by an unborn child is neutral, while the suffering of a born child is negative. What is your opinion for how much a child can suffer before they should not have been born? How much happiness? For most lives there is a tradeoff between the two, so what is the tipping point where they should not have been born? Is it the point of suicide where not only do they not consent to being born, but the no longer consent to being alive?
Weex and Ui – Weex Conf 2018