skysight-inc/HackerNews huggingface dataset:
> To accommodate for this limitation, stage 1 relies on a sophisticated mechanism to locate servers where stage 2 and stage 3 payloads were available. The primary method involved downloading images stored on Photobucket.com and extracting an IP address from six integer values used for GPS latitude and longitude stored in the EXIF field of the image. When Photobucket removed those images, VPNFilter used a backup method that relied on a server located at ToKnowAll.com.

That sounds as sophisticated as a drug dealer calling their pills “beans” or “almonds”. Like, it’s intelligent, but it’s just 1 step removed from just coding in the IP directly.
Note that this projection is a function of the initial state - but a probabilistic function, so therefore not reversible.

I understand what you want to say, but I think it is not correct to call it a function. The term »probabilistic function« does appear in Google results but it seems not to be a common one. I also spent a few minutes looking for a mathematical formalization of a random number generator as a function with no inputs returning a random number adhering to a given probability distribution but could not find anything. Mathematicians seem to be pretty good at avoiding problematic definitions and according to Wikipedia some do this deliberately. The best formalization I could find would be a function from the initial state to a random variable but I was unable to figure out in a couple of minutes how I would mathematically formalize the step from a random variable to a concrete result of a single trail.

Decoherence explains how the system evolves to a mixture of eigenstates but not the collapse into a single one [...]

I never managed to really wrap my head around decoherence, I always only had a quite fuzzy picture of it. But now it is starting to click, it's about the transition from superposition states to probabilistic mixtures, the transition from uncertainty due to superposition to uncertainty due to ignorance.
Check out German software-related companies. Small ones are usually flexible to be persuaded to hire you, if you can get through to them, that is. A good application should work, and as usual, don't give up too soon.
They don't even know they can handle it. Maybe do some research as to how they'd have to do payroll, to reduce the scariness of someone overseas.
I read this as "You don't constantly have to announce that you are working", maybe some copy editing would make the intent clearer.
AFAIK the compiler already uses a builder for you. At least on Android, but I believe this optim is in javac, not in the dexer.
The details on this are very vague. No one knows or is sharing the initial attack vector. It could be a browser spear phishing attack that then attempts to use known default passwords for these routers and uploads a custom firmware image or backdoor script. The only thing that I don't get is why rebooting resolves the issue. This can't be accurate, if the compromise was via a user, its only a temporary resolution, and if the backdoor is as sophisticated as they say, it should definitely have persistence that last beyond reboot.
A switch wouldn't work on a serial EEPROM or serial Flash chip, you'd need a microcontroller-in-the-middle that proxies or virtualizes the EEPROM and ignores writes. This sort of thing would also break partitioned storage, where persistent state and the system image are located on different partitions within the same Flash chip.
This assumes that the only place a remote worker can work from is their home. There is nothing more detrimental to a person's psyche. Cafes and coworking spaces are the most obvious and effective solution to this problem.

I made countless friends while working remotely and a good 90% of them I met in a coworking space (and the so called "digital nomad" community is made of some really awesome people). Plus you have the option to change coworking space if you don't like the people, the coffee, the wallpapers or whatever. You can't do that with a traditional office (or it would be reaaally hard to justify).
The first 18 months of starting a company. Here's what I learned.
As in another post, I’d suggest buying any router, taking it apart, identifying the flash chip, find the write-enable line in the data-sheet and MITM that line with a flip switch to block updates at all times.
Exactly what meddle means. If the developer community jumps ship as soon as MS acquires a developer tool, then MS will stop buying (and later ruining) developer tools.
If you're writing Java, brevity is already out of the window, just on the grounds of how namespaces work and the library/framework naming conventions.
I recently found myself in this role as the mentor and I really appreciate the pragmatism of the approach. It wasn't deliberate, rather the new hire lacks professional experience and no one else knew what to do with them. So, I made myself available from day 1 and have been pairing with them extensively over the last few weeks. It's working out well. They are able to take their own tasks on now and don't require a lot of assistance. This thread gave me the idea that, now that I am at the end of this immediate on-boarding phase, I should take some notes and make them available for the rest of the team / department.
ARM/MIPS are Tier 2 platforms for Rust:
https://forge.rust-lang.org/platform-support.html
The list of disadvantages is missing perhaps the biggest one from a founder's perspective: The conventional wisdom is that remote companies don't get acquired.

If a founder is even considering a big exit due to acquisition then a remote-only workforce is a non-starter. Same goes for investors with the same ambitions.
Please just make Half Life 3 :(
> [Google themselves] takes care of the problems for you for a fee...

GKE's services are, as far as I can tell from their pricing page[0], free. The compute running on top of GKE is charged at the GCE rate, the master node spun up by GKE is free.

Disclaimer: I work at Google Cloud, but nowhere near these offerings.

[0] https://cloud.google.com/kubernetes-engine/pricing
Would you also argue that min(foo(), bar()) should evaluate one of the functions twice? When you explain the definition as "(a < b) ? a : b" it's only natural, even though such a macro is an infamously wrong way to implement min.
Show HN: Poplar Street, 20 percent of your rent back when you buy a home
I remember reading about how rice is bad because it is arsenic. Well. Stay the hexx away from my rice and kimchi.
The Reality of Modern Slavery
Yeah, I actually only remembered the bit about 'package.json' and not the other quotes as well lol
I don’t think it’s very detrimental if you have a separate room or area of your home that is only used for your remote work.
Another disadvantage of global employees is the overhead of understanding employment law, taxes, etc for each of your employees' countries and/or provinces.

Having clusters of remote workers, perhaps there is a sweet spot.
> No person shall, without the authority of the copyright owner

If the copyright holder is explicitly telling the user to remove all trace of them, that seems like they are granting the authority to do so, no?
>Extracting a secret key from an supposedly PIN protected device looks in scope to me.

Prevented by not letting anyone casually hook up an oscilloscope to your TREZOR.
I don't know about other debs, but I have a decently large directory of python scripts that are kinda 'single-use', such as scripts to reformat a json that is screwed up in some oddball way. I used git for version control, and save them on the off chance they'll be useful someday for cut n paste, but there is no need for storing something I may never use again remotely. In fact, the only reason they aren't deleted is the space saved wouldn't be worth it when archive disks are so cheap. If my house burns down or the NAT is stolen, that code is the last thing that will be on my mind.
Electric Scooter Wars Heat Up in San Francisco and Beyond
Ask HN: Your Worst Hiring Experience
1. Worst hiring experience (or best hiring experience)

2. What made it so?

3. If you could have designed your ideal hiring experience what would it have looked like?
Working remote is not for everyone. I was in a 100% remote position for 3 - 4 months and really missed the human contact. We had numerous calls, great tools for sharing, but for me personally I need to be around people.

Perhaps it would be better to remove "remote" from the title completely. You may have several locations where people can come together, don't call them headquarters and those not there remote, but instead everyone is team member who sits in various sites. Some of those sites have 1 person, others have 4 or 5 or 10. And those with more than an individual
Its hard to have remote junior developers in my experience. Certain things are much easier explained in person than over conferencing software.
Recently I had a bad experience at a fully remote company that decided to fix its remote communication issues with, wait for it...meetings! I went from short daily in person meetings with a longer retro to hour long (or longer) video calls every day during my lunch break hours, since they were on Pacific Time. The last standup I joined was two hours long and involved yelling.

Needless to say, I became a lot more fond of Amazon's pre-meeting written notes after that.
This is a bit ridiculous. It's not hegemony or racism. It's how markets work. People in those markets have fewer opportunities for highly paid employment. As a result, employers have more leverage in negotiations. It's as simple as that.
Half of US health care expenditures come from the government. Medicaid is funded by general tax revenues (based on highly progressive income taxes). Medicare is funded by a flat tax with no income cap.

In Germany by contrast, health care is paid for with a regressive mandatory insurance premium of 15.5% on income up to about $60,000.
Logic, to be of any use in the real world, must in some important ways match the reality of the world. So any system of logic assumes a metaphysics. And going the other way, reality must be such as to be able to have creatures who can think logically.

This is one instance of a larger principle, namely the inherent mutual interconnectedness of the various areas of philosophy. So for instance, epistemology depends on reality being such that it can be known, and we can know about that reality only the sorts of things that a valid epistemology can determine. Similar mutual relations exist between every two main areas of philosophy.

This mutual interconnectedness is a key reason for Neurath's insight that in philosophy you can't tear it all down and change it radically, but only modify it.
My rule is really simple to explain to a junior - "don't use any inline side effects."

How do you explain your rule to a junior? You're going to have to tell them that inline side effects are fine, as long as you follow another set of rules about sequencing - a set of rules you admit most people don't know at all and fewer people understand correctly!
You really have to look at the details, when I was in a union, the union actually administered some benefits which accounted for a lot of the cost.
Actually, effects of climate change are not that bad even when looked st the extreme 100yr scale.
Excatly. I know one which only does free-cooling (they only have big fans; that's it).

Failure rate is a bit higher, but they are confident that their architecture is HA/redundant and of what they told me, it's cheaper to replace hardware (they got some DELLs "fresh-air" servers) than to cool the DC.
I mostly found them to be a political tool.

In that role, they can work very well. (My role being one of observation, not use of / manipulation.) Of course, they aren't really even trying to objectively measure and improve performance.

I mean, they work well for furthering the politics and furthering the ambitions of those in control of the review process.

I didn't find this very productive, in terms of the organizational performance nor, long-term, well-being. Existing powers become entrenched, and turf becomes more important than progress.

Eventually, "outsiders" are brought in, one way or another, to break this up. And most of them know very well and make a career of putting themselves first.

The review process tends to be or become separated from day-to-day work and communication. It exists "out-of-band", and it can end up -- including deliberately -- uninformed by and mis-informed about that actual day-to-day and project results.

I.e. It's very easy to manipulate. And there are always people more than willing to take advantage of this.
I actually do agree 100%, both issues that I've posted are personal issues, however, remote work is also meant to solve personal issues in the first place, so I don't think it's disconnected.

I do have made my company fully remote so I do believe remote work is way of the future, but we can't be disingenuous about its downsides.
We Built a Powerful Amazon Facial Recognition Tool for Under $10
Amazon, Auto Companies Stoke Logistics Boom in Eastern Europe
Rebooting removes later stages, the first stage is persistent but one of the AV companies took down the domain that the later stages are retrieved from, effectively cutting it off from those stages.
I'm not sure any more. I've once stumbled on a paper that claimed to solve the problem of balancing chemical reactions, where they tried to figure out in which proportion the compounds react. This is as simple as finding the null space of the corresponding matrix, and indeed the paper did more or less that, but it referenced a whole ream of other papers that all seemed to be trying to rediscover the same solution to a simple linear algebra problem. To this day I don't know if it was some kind elaborate joke or not.
How to Record Skype Audio on Linux: Open Broadcaster Software (obs-studio)
You might want to try using a writing style less similar to coding. I don't know if I'm noticing a trend between an influx of new users from reddit after their BS UI redesign, but your text can get quite dense (it's not lacking in information that makes sense). Did upvote you because I feel you made some very experienced and work-aware points.
Emphasis on keeping folks productive. A director or C level shouldn't need to worry about an individual's progress completing tasks on a regular basis. But it's a core duty for most managers.
That sounds like a work-around/mitigation, not a solution.
Units is a wonderful program; don't be afraid to use their definitions (/usr/share/units/definitions.units):

$ units -t '24816400 GWh / (1347000000 km^3) / waterdensity / water_specificheat'
1.5851925e-05 K

There's even definitions like `oceanarea`, etc ;-)
> But the parent's comment is missing the point

That was my point. I wanted to point out that while some people have only/first heard about failover in the context of kubernetes, it is not something that is specific to kubernetes or even the problem that kubernetes was build to solve.

Of course it is not designed to be a failover solution specifically and using it (exclusively) as such would be ill-advised; I was just trying to be diplomatic while pointing that out.
Per the last thread: https://news.ycombinator.com/item?id=17162245
This is the intuitively right answer, and has always been my favorite.

It's so puzzling that this is a data structure I can't recall ever seeing in the wild.
Buy a small cheap computer with two ethernet ports and run debian.
I do recall 24 series 8-pin serial EEPROMs having a write enable line as well that could be locked via a switch.

Looking quickly on a random manuacturer’s 93 series, I don’t see such a line, BUT, programming operations are blocked when the voltage is below a certain level. A couple diodes on the Voltage line could be put in séries (via switch) to prevent writes unless desired.

Of course, if writes are required at some level for normal operation, your chip firewall strategy works much better.

The paytv providers actually implemented a flash writeability check (without trIggerinf a write) upon bootup. One of my ideas was to emulate the 24-series eeprom entirely. For the bigger “TSOP” chips, someone devised a high-speed logic gate that was fast enough to allow the check to pass, but still prevent actual writes.
Ask HN: Tagging HN articles
Is there any corpus that provides manually tagged HN articles? Or has anyone considered this? For example, this one: https://news.ycombinator.com/item?id=17250697 can be tagged with security. It would be fantastic if we can organize the valuable information in HN.
I agree, the pictures you've seen on the internet definitely trump my personal experience. Thanks for setting me straight.
> neither having a ++ operator

The bug happens with a function call on the LHS too.

> nor by allowing assignment operators (including augmented assignment ops) to evaluate to the value of their RHS

I'm confused. The assignment is happening last, and whatever it evaluates to is being discarded. How would changing what it evaluates to do anything?

But more importantly, the comment was about implementing Java itself in Rust, not the broken function, and that is why it wouldn't change anything.
That surely helps but at the end of the day it depends on your personality. Some people can go a lot longer working completely alone (e.g. if you have a family), others prefer working in a more social environment (e.g. solo travellers), at least occasionally. I definitely prefer the latter.
Kimchi? You can find it at any Asian market that is located pretty much everywhere there are Asian immigrant communities.
You should check out the article "The Case Against Civilization: Did our hunter-gatherer ancestors have it better?"

https://www.newyorker.com/magazine/2017/09/18/the-case-again...

And the book it cites "Against the Grain: A Deep History of the Earliest States".

Few quotes to whet your appetite:

> The first is that, for thousands of years, the agricultural revolution was, for most of the people living through it, a disaster. The fossil record shows that life for agriculturalists was harder than it had been for hunter-gatherers.

> there is a crucial, direct link between the cultivation of cereal crops and the birth of the first states. It’s not that cereal grains were humankind’s only staples; it’s just that they were the only ones that encouraged the formation of states... Only grains are, in Scott’s words, “visible, divisible, assessable, storable, transportable, and ‘rationable.’ ” Other crops have some of these advantages, but only cereal grains have them all, and so grain became “the main food starch, the unit of taxation in kind, and the basis for a hegemonic agrarian calendar.”

> War, slavery, rule by élites—all were made easier by another new technology of control: writing... writing was used exclusively for bookkeeping: “the massive effort through a system of notation to make a society, its manpower, and its production legible to its rulers and temple officials, and to extract grain and labor from it.”
Hang on, are you talking about Tommy Robinson?

He interfered with an ongoing criminal trial (putting that trial at risk of collapse) by threatening witnesses and calling the accused, before they had been convicted "muslim paedophiles". He was filming inside the courtroom and intimidating witnesses. He was asked to stop. He didn't stop, and he told police he was going to go to the homes of witnesses.

He was arrested and sentenced for that contempt of court. He was given a suspended sentence and clear instruction not to do it again.

He did it again.

Notice that Yaxley-Lennon has said nothing at all about his EDL colleague who was convicted of sexual offences against children. https://www.independent.co.uk/news/uk/crime/edl-english-defe...

You seem to think that Yaxley-Lennon would be free to speak in the US, but he's been forbidden to travel to the US by the US -- that's why in 2013 he tried to used a false passport to travel. https://news.sky.com/story/edl-leader-lennon-jailed-for-pass...

Here's a barrister's views: https://thesecretbarrister.com/2018/05/25/what-has-happened-...

Here's the sentencing remarks for the first convction (please read all of it. It's short and clear):

https://www.judiciary.uk/publications/committal-for-contempt...

Here's the warning the judge gave to him:

---begin

Would you stand up, please. I take, as I hope
has been made very clear by the comments that I have
made, a very dim view indeed of your conduct which was
in the face of repeated warnings that you should not
do that which you did do. I accept what Mr.
Kovalevsky tells me about the dangers that you might
face were you to be sent into immediate custody. I
have to say it is on a knife edge so far as I am
concerned because a very large part of me thinks so
what? you could be put into protective custody. But,
my concern is to make sure that this trial keeps on
track, and my concern is also to make sure that other
courts with other trials in similar situations are
kept on track without any danger of repetition of the
kind of conduct that we have had visited upon us here.
The sentence, therefore, that I pass upon you, taking
into account all of those matters that have been
placed before me and your admissions entered via Mr.
Kovalevsky, is one of three months' imprisonment which
will be suspended for a period of 18 months. That
will be suspended. There will be no conditions that
need to be attached to that suspended sentence, but
you should be under no illusions that if you commit
any further offence of any kind, and that would
include, I would have thought a further contempt of
court by similar actions, then that sentence of three
months would be activated, and that would be on top of
anything else that you were given by any other court.
In short, Mr. Yaxley-Lennon, turn up at another court,
refer to people as "Muslim paedophiles, Muslim
rapists" and so on and so forth while trials are
ongoing and before there has been a finding by a jury
that that is what they are, and you will find yourself
inside. Do you understand? Thank you very much.
That's actually a really good idea! I would love to see this built-in to future router models after something widespread like this. It's fairly reasonable to force users to be physically present to update. Plus, you could force them to flip the switch back by not working until the write-enable line is disconnected again.
The difference in simplicity is not in the interface that is presented to you as a user. The difference is that your shell script will have a couple hundred lines of code, while the docker and kubectl commands from above will pull in literally hundreds of thousands of lines of additional code (and therefore complexity) into your system.

I'm not saying that is a bad thing by itself, but there definitely is huge amount of added complexity behind the scenes.
It would be an interesting experiment to see what would happen if the cut the US military budget dramatically. I am of the opinion that it would decrease the world stability and millions of people would die. But YMMV.
Here in France, we are not eligible to get state financial aid unless our programmers are in offices and have a college degree in CS.
And oh ya, a JTAG interface could provide interesting real-time analysis of what’s going on.
Awesome! I am going to share this w/ my friends.
We actually do want that especially for the internet of things, so that your lights and garage door keep functioning during an AWS outage that takes out the relay servers (used to work around NAT) or if the manufacturer goes out of business.
If you mean announcing every time you walk the dog, or run a quick errand, then sure, of course.

I work remotely and keep regular hours. I communicate any major deviation from those hours.

I’ve worked with people that keep super random hours. That is fine too, but they have to communicate some kind of expectations to the team. It’s super frustrating when they don’t. It becomes hard to manage if you’re directly depending on them for any reason.