skysight-inc/HackerNews huggingface dataset:
Most network level firewalls don't block/inspect outbound packets at this level, and even if they did they could just tunnel (e.g. ssh) through an open port. I think I also read that there was no actual sign of data exfiltration - they were just sending "keep alives" to the C&C hosts.
World War I Fighter Aircraft
> There's not really an Undo Button like normal jobs.

There's impeachment, but the only case of that I'm aware of for a supreme court justice is from the 19th century.
Rotating plots to form diamonds could prevent correlation-causation confusion
A lot of folks seem to think this kind of technology needs to be marketed or launched the way a hip Silicon Valley startup should be. I understand how the argument that critical mass is the necessary ingredient for success would appeal to people, but it’s not like the Internet succeeded that way. In fact, it’s probably better if foundational technology like this is developed and grown more slowly and deliberately. I have no idea if solid will take off the way the web has, but it stands a fighting chance. More than being a “viable competitor” to the web, it needs to be a platform that people want to develop for. As with the web, cloud and mobile ecosystems, the platform that developers want to support is the one that wins. If you want to see something like solid take off, play around with it for a bit. Try making it go and share your experience.
The old key was hosted inside a proprietary appliance and can't be extracted.

https://labs.ripe.net/Members/anandb/the-future-of-dnssec-at...

https://labs.ripe.net/Members/anandb/dnssec-signer-migration """Our old Secure64 signers do not export their private keys. This means that in order to migrate to the new signers, we will have to perform a KSK roll-over."""
Personal attacks will get you banned here, regardless of how wrong someone is or you feel they are. Please review https://news.ycombinator.com/newsguidelines.html and don't do this again. We've had to warn you about this before.

Your comment would have been fine with just the middle paragraph.
Honestly as I kid I thought that she would be clad in slime -- but I still would eagerly have grabbed the cutlery.
Where this shows up a lot is the types of business problems which functional programming finds itself in. The least surprising thing in the world is that Haskell and functional Scala work pretty okay for Hadoop ETL work, for example.
To me, the interesting period is the end of the Roman Republic. I see parallels between the Gracchi and FDR (ignoring the rules about how long to stay in office) and the Kennedys (two brothers, both holding high office, both on the side of helping the common people, both assassinated). I see similarities between the current day and the civil war between Marius and Sulla. (And the wonderful difference - neither side is killing hundreds of the other side's people in the streets - at least, not yet.)

But from the civil war to Julius Caesar was only 30 years...
Was the GOOL code interpreted or compiled?

Edit: mostly interpreted, according to [0] which I found below.

Edit2: wait, the article later says that the GOOL code was compiled into [MIPS] R3000 machine code...

0. https://all-things-andy-gavin.com/2011/03/12/making-crash-ba...
It depends on if he's a casual drunk or not.
First paragraph of the top comment on Ars:

> I worked at Insomniac on Spyro while Naughty Dog was working on the Crash series. We had a friendly competition squeezing out the maximum possible performance from the PlayStation, and that turned into an even friendlier coopetition on our respective PS2 engines when we actually started sharing some code. Based on what I saw of both code bases, Naughty Dog did them a huge favor by sharing so little. It would have been more work to rehab than recreate.

Highly recommend reading the rest of the comment, too!
Most often I've seen it in the form of jokes. You're in the final stretches of negotiating a deal with someone you consider a friend and they make some joke about how now they're going to stop showing up to work. Red flag. You might think "why would someone say something like that?" I was negotiating a deal where the other party was guaranteed 7.5MM over the next 5 years. They made the joke because they thought they already had me wrapped up in the deal. I walked away based on that joke alone. The logic is that at some level they're trying to prepare you for what you're in for. Everyone's armor has chinks. As the deal gets closer to being done you see the real person on the other side of the table.

Another red flag is if you put something in email and they call you to respond on the phone. I treat email almost entirely defensively now. It's simply a record of things I'm comfortable being read aloud in court and a memorialization of what was agreed to in conversation. If I'm not comfortable with it being read in court it's discussed on the phone or in person.
CMOS especially, which consumes energy in direct proportion to the square of the frequency because a level crossing is a virtual, instantaneous short-circuit across the chip's power rails.

As such, future chip will likely be driven to reversible / adiabatic tech because cryptocurrencies, AI and more are guzzling energy ($$$ and running more circuits) and dissipating more heat that can be sensibly handled in a given unit volume (per-socket thermal characteristics; chilled water plant capacity; forced per-cabinet cooling or submersed in mineral oil).
It's a model, it doesn't matter how it looks.
Diving into that MACLISP file, I found this variable and explanatory comment:

> SYNSTAX ... A STACK OF SYNTAX PROPERTIES

If there were a "stupid-clever variable names" hall of fame, that one would certainly make the cut.
Yes. To add to this, in order for an attacker in this situation to maintain their access, they would have to perform a very visible active attack. If not for this they would be able to maintain their access passively.
Yes, it was a major story which got a lot of attention and is still mentioned as a source by other journalists.
This guy reverse engineered Pokemon Red. with Minecraft command blocks
Apple's Proprietary Software Locks Kill Independent Repair on New MacBook Pros
DNSSEC Downtime: List of Outages and Validation Failures
Honestly, I can't tell if you're being serious or sarcastic... Both cases sound reasonable to a degree.
They rebuilt a game in Unreal 4.
So yeah from the ps1 era almost everything had to be redone from scratch. I fail to see the problem here. Did player expected them to package the optimized lisp virtual machine they had back then in UE4?
> Would you really want to work for an organization that plays those sort of mind games?

With each other, on a regular basis, for little more than shits, giggles and office-politics? Probably not.

Which is why it's more likely that this mind game isn't just some office antic, but instead means to mimic some class of situations that some kinds of three-letter-agency personnel could be required to overcome.
Aulerion Introduces High Bandwidth Cloud Servers
Losing static compilation, Go-style, holds me back from Rust. The sheer number of platforms I can target with Go without doing anything special is amazing, whereas Rust forces me down the libc merry go round again.

A reliable recipe for 0 dependency Rust binaries so long as I stayed in the Rust ecosystem would be a good motivator to use it.
Unless we use Supermicro kit, presumably?
s/silmite/samite

Per Wikipedia[0]:

Samite was a luxurious and heavy silk fabric worn in the Middle Ages, of a twill-type weave, often including gold or silver thread.

[0] https://en.wikipedia.org/wiki/Samite
Yes, I've encountered this as well!
So, suppose you're Supermicro. When some CPC official comes around to tell you to make your technology a little easier for the intelligence department to access, you're going to do it.

Companies in China (especially those in the tech sector) have to keep close ties to the government, and most of their leaders are members are of the party. You don't GET to be a multi-billion dollar tech company* in China without toeing the party line [1] [2] [3]

The issues around regulating food safety and vaccines that you mentioned are irrelevant.

* Foreign companies must operate Chinese subsidiaries to run their operations in China.

[1] https://www.wsj.com/articles/beijing-pushes-for-a-direct-han...

[2] https://qz.com/1102948/chinas-communist-party-is-all-in-on-t...

[3] http://chinamediaproject.org/2018/05/02/tech-firms-tilt-towa...
Could add breaks where key information is given that's slightly different for each participant.

Mole-Hunter-As-A-Service™
It's not about avoiding marketing. It's about ownership and control.

If I want my stuff to be analysed- I let that happen- it finds business or social matches- awesome. I just need the option to turn that off for things I don't want greped- like banking.

I too am in favor of paid for services. Because that is what happens eventually. You pay for it. I'd rather make a decision and choose who I pay, as opposed to having my choices and VIEW-OF-THE-WORLD limited because everything is "free" but funded by marketing.
That's the point. Why do science like physics if you are in a simulation?
I'm also a paramedic and thought this was an excellent write up. I'm not worried at all about false alarms from the Apple Watch. I think the claims about false calls are completely exaggerated. We get plenty of false alarms from Life Alert as it is, and the Apple Watch technology is way beyond your typical Life Alert pendent.

My opinion: Apple Watch is going to save lives. I'd have no problem going on a call triggered by someone's Apple Watch.
Right. The big lie about it is that there's any possibility of the "test" proving a person's statements honest. That's what gets people to agree to them. In reality, once you step into that room, the best you can hope for is to come out without incriminating yourself, just like any other interrogation.
I actually implemented something like this a few years ago on top of Postgres for the CKAN Data Portal Software. Check out the docs at https://docs.ckan.org/en/2.8/maintaining/datastore.html#ckan....

CKAN is used by data.gov, data.gov.uk and many other governments to publish open data.
I am going to start suing everyone for negligence - or whatever applicable term my lawyers can think of - if they force me to use SMS authentication with no other OTP alternative.
Judge Assigns Elon Musk Essay on SEC Settlement
Chinese Spying Chips Found Hidden on US Companies’ Servers
All of that would likely be true of a regular employer. Probably even would be good enough for the military.

But the people you were dealing with, as a rule, don't believe in happenstance, or coincidence. And they absolutely live by attention to detail. I don't know much about your situation, but based on what you've shared, you tripped a lot of alarms.
Tech has a tendency to become monopolistic. Well funded open source competitors seem like a solution as it would allow anyone to compete.

Fund the development of software and not the distribution. It would realign incentives to the consumers.
"Mr Musk has excellent attorneys. He should listen to them"

Somebody give this guy a donut.

For real though, how does Musk have any public goodwill any more? He blatantly committed a crime, scoffed at the charges, quickly caved when the stakes were raised, and continues to mock the authorities.
>> Hypothetically speaking, because you can get a better support contract with a closed (or semi-closed) source software vendor.

I knew a guy who worked at a medium size company (few thousand people). They tried to drag him back into an old product he worked on years ago to help because.... They still had one customer paying support on it, but someone realized they couldn't find the source code. This guy couldn't help and fortunately the customer hadn't asked for any changes to the software in several years. So no, paying for software doesn't necessarily mean it's supported in any meaningful way.
Black Holes Ruled Out as Universe’s Missing Dark Matter
Ok; so if you confirm my experience, I don't understand how you can at the same time claim Go is "backwards to C++" w.r.t. concurrency & race conditions. Did you mistype "superior" as "backwards"? Btw, we also had extremely talented C++ programmers. Some of them sent ISO C++ proposals from time to time, and I think were even accepted.
As long as you’re on Linux, it’s quite easy to use MUSL. Other platforms don’t offer something comparable, so we’re kinda stuck.
So we pivot from "he's just a private citizen supporting his friend on his own time, nothing to do with Facebook!" back to "he's representing Facebook in his professional capacity as a senior management figure"? You can't have it both ways.

Being honest here, there is no direct connection to Facebook's interests. This is not a court case in which Facebook has some stake, at best they would just be there to "show the colors".

Either way you take it, someone is supporting Kav here. It's either Kaplan personally, or Facebook professionally.

(and again, I am also not commenting here about whether he should be confirmed or not, but let's not pretend that everybody just showed up for a free 8oz bottle of water. Whether Kaplan's interest is personal or official, there is an interest.)
MC Ceja – Poca Mecha (feat. Various Artists)
Bloomberg Reports China Infiltrated the Supermicro Supply Chain We Investigate
When I played with logo in the eighties, all the commands where translated to Spanish, so it would be something like (and I'm going by memory) :

repite 4:
avanza 50
giraderecha 90
How would you compare this with home assistant?
That is amazing. Different manufacturers' dialects of basic were barely the same language. I think the only things generally held in common were basic logic and control flow, very basic string manipulation, printing characters line-by-line, and prompting the user to enter a string. It sounds like these guys essentially created a shared function library (libraries and functions were completely alien to BASIC!) and successful ported that library to a couple of dozen different computers, some of them with only 16KB of RAM.

(Technically functions were supported in some dialects at least, but they had to fit on one line and could only do mathematical operations, so they would be useless here.)
Interviewing is a game of numbers and luck. I know it is slim consolation. But I did 15 onsites, before landing on my dream job. Was rejected from all these onsites, even though I thought I did fairly well in most of them. It was depressing and I lost a lot of confidence during the process. But eventually it worked out. So, I guess, my advice would be to keep going at it. Keep improving incrementally with each interview, but I think you are doing all the right things and will eventually get an offer.
Yes, that is indeed the joke.
I would love to 'own' all my data. But companies offering services will win out because they do not have to play nice with you or your data store. Take Gmail, Facebook or Google docs as examples. In principle that's your data. But Gmail has successfully convinced people that Google is able to run its mail service better than you or your corporation ever could. In return for 'reading your mail', and vast amounts of corporations and individuals seem to believe them.

Ditto for Facebook and yet another encore for Google docs.

Once established economies of scale and network effects will do the rest. A new system would have to fix a lot more than just the security angle because it is well known that security is always going to be secondary to convenience, a factor that large entities will find much easier to control than many small ones.

So, I really hope they will manage but I'm not going to hold my breath until they do. Note this comes from a guy that does not have a Facebook account, no smartphone, runs his own web and mail server.
Yeah, it probably more realistic (and possibly even ideal in its own way) to assume that obtaining the desired equilibrium will always be an adversarial process. Having proven ways to measure the dominance of each actor or having canaries / alerts is important, but not enough: there has to be ways to measures detect if anyone has subverted, gamed, or compromised the measures themselves.
I remember "programming" (copying from graph paper) in LOGO on Unisys/Burroughs ICON computers back in school in Ontario, Canada.
We're super excited to get this out after nearly 3 years of work by our team - we've put together some further thoughts here: https://medium.com/@idanbeck/announcing-dream-754c0f374da0

Dream is now available in early access on the Oculus store, so we'd really appreciate any feedback and thoughts people have. We truly believe that immersive technologies like virtual reality can make remote work and collaboration better than existing 2D form factors - especially as the new standalone VR headsets like Quest come to fruition in the coming year.

Dream has been built entirely from scratch, so we got to rethink a lot of the stack. We prioritized certain things, like networking and UI, and we're really proud of the outcome. Doing so also meant it took us a lot longer to bring a product to release, since there was a lot more to do - but it allowed us to integrate WebRTC at the native level as well as chromium (by way of CEF) so we can do things like bring up our keyboard when a user hits a text field.

Hope people like it, and want to say thanks to everyone that made it possible!
My C64 shipped with a fastloader disk. You had to load and run the fastloader every time you restarted the computer, mind, but at least it was smaller than most of the programs you wanted to fastload.
It seems the author is missing the point in advocating big government solutions and government regulation to somehow fix the privacy problem.

Imagine if you owned and controlled all your email vs. gmail reading it all? For companies, owning their proprietary data is an enormous market. I'm planning to launch a Solid service on top of Allegrograph in the next month or two to service my business customers.
> We consider our differentiating features our reliability, focus on privacy, and configurability.

Just curious: What data are you basing this on?

> We are cloud hosted service…

And that doesn't strike you as incompatible with your nods toward privacy and reliability?
> “I'll probably just go buy more AAPL”

If you really think there is an overreaction and that the stock price is too low, you should buy a short dated, ATM call on AAPL.

This is not investment advice. Do not buy or sell options without knowing what you are doing.
Ah, yes, I see where you're coming from.

My take on it is that it just fails occam's razor. As in, it turns the theory "The universe is a simulation", into "The universe is a simulation, and the simulation is imperfect and lazy-loaded". It's adding even more requirements to an unprovable theory.

Essentially, it turns "God exists" into "God exists, and he has a beard".
Wow they had a lot of positions open before they closed, was always tempted to apply. Sad for the Boston robotics scene and the larger commercial robotics industry.
Hardware Implants
If the candidate was verifiably a NASA engineer the person half assed it probably just didn't care. I'm surprised that person just didnt respond with a very intricate set of functions that resulted in a middle finger. That's honestly insulting to use that as a test for a senior. Clearly there was no vetting process prior to a coding evaluation and the hiring process needs a lot of work.
The Leo editor is pretty good.
The title is a bit vague and the article doesn’t really clarify. The point of the article is that open-source implementations of designs involving cryptography are no better than closed source implementations. The purported reason is that cryptography is difficult and therefore reviewers are unlikely to spot issues.

I presume that much open-source software is written by hobbyists while a closed source software development company may hire a crypto expert for the sensitive code.
Even now, supply chain hardware modification attacks remind people of fiction. However, the number of people known to be affected by buggy BMC firmware is orders of magnitude larger, as described two comments upthread:

> The system is basically designed to be as insecure as possible by default, and allow for the maximum possible persistent threats with BIOS flashing, IPMI flashing, and other completely un-authenticated avenues exposed.
> actors, futures/promises and async/await style co-routines which are all extremely available in all of the major languages

Language features are indeed available. Runtime features backing them are only available in Go, erlang and .NET.

If you only need concurrency for CPU bound calculations, even C++ has decent options, e.g. OpenMP works great for my tasks. However, OpenMP offers nothing for IO. The point of go’s co-routines or .NET’s async-await, they allow to run a mix of CPU bound and IO bound code, and do so in parallel utilizing all available hardware threads.
You have a great point. If an agent of the Trump administration wanted to "plant" anonymous-sourced stories to justify a trade war with China, this is exactly the type of story they would plant.

And if we don't believe it could happen, all we have to do is remember back to 2003 when the entire Bush administration used fabricated evidence (yellow-cake uranium anyone?) to justify a pre-emptive strike against Iraq, who never attacked us.
These disciplines aren't built on the edifice that you imagine they are. What you're doing, in examining the edification of certain disciplines, is quite postmodern. I encourage you to extend that examination to all fields.
I'm not trying to have it both ways, I'm remarking that there may be a very simple and good reason for Kaplan to appear while recognizing there could be very interesting outcomes if-as you put it-he or anyone else were to lose their job for it.

This isn't a remarkably difficult exercise of mental plurality. Nor is it one of partisan critique.

If someone attends a government function as a private citizen and is fired for it, I think that would make for an interesting set of legal questions with regards to employment law.

If someone were fired for doing the same even in an official capacity, that-to me-would be even more interesting. Since you brought up strict standards for certain levels of employees, I responded to that. You can't very logically say my response to this is trying to have it both ways if all I've done is respond to your talking points.

That's all there is to that, imo. Don't read between the lines here because there's really nothing there to read; I am positing that one really doesn't need to connect many dots for Kaplan's attendance at these hearings, but I can entertain the idea you presented: that being fired for attending a government function would make for interesting legal theater as an impartial and dispassionate onlooker.
Ummm... ok? I don't know about you, but I like building things that solve problems. Tools are important, but they're not a goal unto themselves. If your 'better' language is beautiful, but lacks the ecosystem people solving real problems actually need to get work done, it's not actually better.
Lots of technology doesn't work, but we're still going to use it. Sometimes because it's better than nothing. Sometimes because no one gets fired for using <insert standard technology here>. And sometimes just because the politicians owe favors to their corporate handlers.

Lie detectors, Sea Wolf submarines, facial recognition software, etc etc etc. Many security technologies lie on the spectrum from "impractical" to out and out "doesn't work". But we just have to get comfortable with them, because they aren't going away.
Not the chip itself but there's an investigation which I've already submitted:

https://news.ycombinator.com/item?id=18144519
graphMetrix.com - Solid service to support business customer data launching in the next 2 months.