skysight-inc/HackerNews huggingface dataset:
I am going to sound pessimistic here, but isn't there a real danger of having this technology available to bad actors and is there any value to keeping such things confidential if it plays a role in national security?

If someone was releasing malicious software to hijack the power grid as an example, wouldn't they be first able to use this to try to improve the robustness and invisibility of their attack ?

Or is the functionality here common place enough that it doesn't tilt the axis of power in an unfavorable way?
The title should include the words MASS TRANSIT, or SUBWAY
Great book. The author should strongly consider to sell the PDF version of it.
> The only reason it isn't is regulatory spinelessness.

The reason it isn't widely used is because it is an absolutely terrible idea. The value of home solar fed to the grid is almost everywhere negative to the utility. (They need to maintain fixed capacity to meet worst case demand, constant power sources are cheaper than adjustable ones, and it costs money to bleed off excess power when there is not enough demand for it.)

If you force them to pay you for your useless solar excess, they just have to raise the prices on everyone. This makes home solar more attractive, resulting in even larger useless peak production, and higher electricity prices. It gets even worse if the power transmission isn't decoupled from production.

A form that would make sense is instead to allow customers to sell electricity back to the utility at the current short term spot price. As excess production would drive that price to be negative, it would limit installation to the level that is healthy to the grid.
And Xeno's arrow never hits its target, either...

This is a purely a priori argument, and ignores the manifest reality of the distribution of fantastically wealthy individuals in some of the highest-tax jurisdictions in the world.
I meant “bill,” but thanks for both answers!
Annndddd, it's ugly as fuck. Well, I'm not going to install something made by the NSA on my machine but I'd be interested in feedback.
It feels like phone companies have basically destroyed their business model by turning a blind eye to robocalls and telemarketers. The other day I was filling out a form and it had like 3 different phone number fields, and I was thinking "we're shockingly close to those getting filled with N/A" as I was putting the same number in them. And I'm not even particularly young.
Bad actors have been using IDA this entire time. So no, not really.
Can you explain in further detail (or share a link to) what you mean by "non-local" here?
I wonder if/how it would interfere with normal vision. Could you mistake IR for normal green and vice versa, or would IR have some other characteristic that would distinguish it?

Are there situations where you'd run into lights that are intrusively (or even blindingly) bright in IR but not visible wavelengths?
Then use cotton canvas bags?
Well, I’m not that good but when I see our raw data I can pick out the fields and read the values easily enough. You really do just get used to a system and how to read it. There’re patterns to it.
Yes, good catch. "Reactive instead of proactive" might have been better phrasing.
Nim is certainly not a language I would qualify as having a "restricted feature set". Jai is mostly under wraps but from what I've heard from the author, while it very strongly opposes some common language features that C doesn't have, it will also bring quite a few unusual features.

Thanks for pointing out v, which I didn't know about!
The fact that someone might not keep the comments up to date in the future is no excuse for not writing the comments now, otherwise we'd never write comments.

For hairy code, I'd rather have an out of date comment than none at all. I can recall a lot more times wishing code was commented than having encountered a stale comment. And especially today, when code is usually in a VCS where you can blame the lines, it's not that hard to double-check if a comment seems off.

So, I think the absence of comments is far worse.
I don't think they would burn some 0-days for this, one container should be enough.
Microsoft's Chromium-Based Edge Browser Looks Just Like Chrome
This is just another reverse engineering tool, similar to IDA. Bad actors have had access to stuff like this for a while.
I'm not an expert wrt. the clocking of these boards, how does it achieve the 72MHz? In that datasheet it looks like the onboard crystal is just 8MHz.

Does it use some kind of internal clock multiplier to achieve 72MHz? Would such a magnified 8MHz to 72MHz provide a good stable clock?
Does it work for non windows binaries?
As it happens the girl needed her arm amputated as well because of a blood clot.
You mean there is nothing new here? Then why is this news?

I am not wondering about the concept of reverse engineering but the specific (and hopefully novel) feature set that this may enable.
It's not as if IDA is a work of art. Arguably, this is a cleaner, more usable interface.
Very true. I find myself gently explaining laser safety way too often for comfort, even in lab environments. We don't have an intuitive understanding of the dangers. I my case, I knew the divergence and had calculated my expected wattage before taking a peek back downrange... but ya.
Maybe made of chocolate?
When you’re waterfall and try to act agile.
It's a competitor to IDA's monopoly, basically. It might be better in certain aspects.
What can stop a bad guy with a toolkit? A good guy with a toolkit!
Conceptually there's nothing new, but it doesn't hurt to have more options available, especially considering how pricey IDA is.
Redis labs has crdt support on top of redis
Not at all,this helps analyze malware not create it. There is no security obtained by preventing reverse engineering of a binary. If anything this makes adversaries ability to hide their methodoligies harder,a strategic advantage for someone like the US government.
This would be too heavily influenced by confounding factors.

For instance:

* Are the teams that use certain languages comprised of more experienced people?

* How mature is the company and project? I.e., a faster moving startup cutting more corners, where time was decided to be of the essence (rightly or wrongly) will likely produce more on call incidents than a slower, more established company that can takes its time
There are more options in the universe of reactions than "Eek! They're going to get us all killed!" and "Eh?"
They weren’t that much more. In the $5 - $10 range for most, but I don’t recall specifics. We did so many FT28 CR39 lenses at that time that’s why I recalled those easily.

There were some progressives that cost us over a hundred but that included lab work as they wouldn’t let us process them.

Edit: I wanna re emphasize that all this was prior to LC (US Shoe bought us then Lux bought US Shoe actually) buying us. I don’t know what prices did after that.
The general philosophy in computer security is that bad actors will be using the tools they need to use anyway, and the world is actually more secure if the best tools to use are widely available, since the security professionals in charge of defending systems are trained on their use, and can better anticipate an attacker's methods. Even better if they're open source, so that they're easily analyzable, and the barrier for training is lowered.
Exactly. How can you have tech when these unethical people aren't stoning people for wearing mixed fabrics?
Bad actors have had access to this tool too... it was leaked previously.

This is cool because:

- It's legal and free
- It's open source
But even worse is not being able to release because the system complexity has shot through the roof. Plan (and test!) for 10x scale at a time, then optimize to squeeze another 5-10x while you build the 1000x system.
That's exactly the path to hell.

You start using `shared_ptr` because you are too confused about the code to know which of the two "contexts" is supposed to own the thing. So shared_ptr (might) fix your memory freeing problem, but it maintains (and sometimes worsens) the problems caused by having two different contexts that might or might not be alive at any given time.

With two different threads however, such problems are often unremoveable, which is why shared_ptr is the right solution mitigation.
IDA has a bunch of competitors --- Hopper, Binja, and all the Capstone interfaces.
This is a great example of a "launch" post:

1. Provide huge value based on data that only Segment has, which makes the post worth reading and - more importantly - shareable (though it would be nice to see the names for every company in each chart, not just one or two)

2. Segue nicely to calling out their new Developer Center[1], which streamlines the process of building on Segment.

Very nicely done.

FWIW I explored building on Segment in 2014, and just completed our integration on their new Dev Center. The latter experience was a lot more streamlined than the former appeared it would be. Also nicely done!

1- https://app.segment.com/developer/request-access
That's coming from someone else (https://github.com/withzombies?tab=following)
"Both monism and many worlds can be avoided, but only when one either changes the formalism of quantum mechanics—typically in ways that are in conflict with Einstein’s theory of special relativity—or if one understands quantum mechanics not as a theory about nature but as a theory about knowledge: a humanities concept rather than science."

Tut-tut. There's nothing "humanities rather than science" about the understanding that QM is 'just' probability theory

https://arxiv.org/abs/quant-ph/0601158 https://terrytao.wordpress.com/tag/noncommutative-probabilit...
https://arxiv.org/abs/math-ph/0002049
https://ncatlab.org/nlab/show/quantum+probability

applied to mechanics (and interpreted sensibly, as it is in any 'neo-Copenhagen' or 'pragmatist' interpretation). Grandiose and/or bizarre 'psiontology' is easily avoided.
AFAICT all the source is there, beside every `.jar` there is a `.zip` with the corresponding source. The source in a more usable form should be posted here soon: https://github.com/NationalSecurityAgency/ghidra/

(And if not I'm sure the community will reconstitute it)
So apparently AI needs to make category mistakes?
Approach like yours causes companies not to submit to Jepsen testing and try to hide shortcomings. They did submit, they found problems (it is rare for the Jepsen suite not to find any), and they fixed them. This is a fantastic result and definitely one to be proud of.

Additionally, I am not sure if you fully appreciate the complexity of Jepsen and distributed databases in general.

As for me, I've actually been waiting for this result to recommend the use of FaunaDB in a commercial setting.
I just had a talk last week with my coworker about how many tech projects seem to be called Kraken and BAM, here's another.
Here's one almost 30 stories high apartment building in a place where the location and land don't have too much value as such (Atlantic City). 1,000 sq.ft. 2br condos seem to be priced from $160,000 to $250,000.

https://www.zillow.com/b/bella-atlantic-city-nj-5Xjxz9/
Moral Outrage Is Self-Serving
A quick search shows that the problem has been shifted to tackle the so called C10M problem, with C1M/second. That was couple years ago. Not sure what the current state is.

http://highscalability.com/blog/2013/5/13/the-secret-to-10-m...

https://mrotaru.wordpress.com/2015/05/20/how-migratorydata-s...
Osmotic pressure is still a thing and semipermiable membranes already exist. Will be intersting to see what the actual benefits are compared to what already exists.
You aren't writing comments for yourself today. You may not even be writing them for your colleagues today. You're writing the comments for someone looking at the code in the future, probably without whatever context is in your head now.

Also, the most important than you can document is the why because given enough time, a good enough programmer will be able to figure out the what, regardless of how complex it is. But if you made an unusual decision based on something going on in your head at the time, maybe based on some data or testing you had done, no one will know that unless you write it down. This goes part and parcel with a good commit message, which is another place to write down the why.

If you haven't had the experience at looking at your own code a year down the line and scratching your head at some piece of it, well you just haven't been coding long enough. Good comments and commit messages are like gold at those times.
Show HN: Datarow.io – an easy to use data integration platform
One of the examples in the paper has some code that you can't actually write in Rust, it's close to this:

let msg: &'msg str = "Hello World";

You can write something similar and allow the compiler to infer the lifetime:

let msg: &'_ str = "Hello World";

I often find myself declaring the type when I get into confusing type issues in Rust, but you can't do that as easily with lifetimes. With non-lexical lifetimes this has been less of an issue, but still there are times when I would like to be able to declare the lifetime like the first example.

This error example shows the valid uses of lifetimes: https://doc.rust-lang.org/nightly/error-index.html#E0261
Check out Spectacle[0] if you are coming from a Windows world and actually like the window management in Windows 7.

[0] https://www.spectacleapp.com/
Saying a physical phenomena is 'humanities rather than science' is such a stupid statement. Reality is just a complex computer.
The RSA conference is currently ongoing and the NSA talk was today. Actually, it should be over just about now.
> In a peer-to-peer model, anybody can publish anything.

That doesn't have to be the case. You can certainly have private peer-to-peer networks that are authenticated and/or restricted to your internal network.

Facebook did this back in 2010: https://torrentfreak.com/facebook-uses-bittorrent-and-they-l...
DataRow.io is a fully managed, pay as you go data integration platform. With an intuitive drag and drop web interface, it helps you to build big data pipeline in minutes: move and transform data from A to B, handle stream processing, schedule data pipeline jobs and more.

You can try the free version by signing up at https://aws.datarow.io, no credit card required. If you want to sign up the full version, contact us at pilot@datarow.io. You will get the entire platform with full features and support all free for 9 months.

Try it here: https://aws.datarow.io

Our website: https://www.datarow.io

Documentation: https://doc.datarow.io/overview.html

Cheers,

DataRow.io Team
Why this is important (for those uninitiated):

- Ghidra is basically the first real competitor to IDA Pro, the extremely expensive and often pirated state-of-the-art software for reverse engineering. Nothing else has come close to IDA Pro.

- Ghidra is open-source, IDA Pro is not.

- Ghidra has a lot of really cool features that IDA Pro doesn't, such as decompiling binaries to pseudo-C code.

- It's also collaborative, which is interesting because multiple people can reverse engineer the same binary at the same time -- something IDA only got VERY recently.
Do you have a source for them selling that information?
War has enabled his "useless" creations.
China’s “democracy” includes mandatory apps, mass chat surveillance
Totally, that's why I was hopping for something better looking. Looks like Binary Ninja is the only one that cares about that.
In my case, my distance vision is bad, but a meter away is sharp without correction. In fact, I’ve never had a prescription that doesn’t f-up my near vision, so I had to do the measurement without glasses on.
Love seeing some good PL research from Northeastern in the news! I was part of the capstone class they ran back in 2015 where we used/learned the alpha version of Rust that had just been released. Great experience.
Seems to work on a Mach-O and ELF files as well; at least, it loaded those two just fine.
I am not sure I completely agree. If I know how my adversary detects and studies stealth code, I may be able to design better stealth code that is better at evading their methods of detection.

I mean the evolution of stealth tech in military has followed a similar path. As radar systems improve over decades, they keep on working on new ways to evade detection for aviation/missile tech.

I understand the high level point of good tools being more widely available to the white hat crowd, but I am trying to understand the argument that this is 100% better in all cases and there are no downsides.
> Ghidra has a lot of really cool features that IDA Pro doesn't, such as decompiling binaries to pseudo-C code.

To be fair, IDA Pro has a decompiler plugin to do this.
Have We Found the First Parrot Breeders in North America?
One of the key questions for desalination is how good can it get. It turns out that many desalination plants are probably close to the thermodynamic limit [1, 2], which means that even with new technologies it's likely energy costs aren't going to go down by an enormous amount. The Ars review suggests the best we can do is a factor of 3-4x, which is nice, but if we're expecting this to solve all our water needs we may have another thing coming. For reference, the cost of water is as low as $25 per acre-foot [3] in CA, and the most recent desalination plant in San Diego is on the order of $2000 per acre-foot [4]. Even some of the other estimates in [3] suggest that the average cost of water is something like $7-800 per acre-foot, which would put us right around where the thermodynamic limit suggests the floor of desalinated water would be.

Obviously this is great new tech and more water purification technologies are always needed, but given the physical boundaries it's unlikely we'll be able to use desalination as the only solution to water crises. We should still be figuring out ways to be more efficient about water use.

[1] https://arstechnica.com/science/2011/08/desalinization-is-th...

[2] http://science.sciencemag.org/content/333/6043/712

[3] http://www.cpuc.ca.gov/uploadedFiles/CPUC_Public_Website/Con...

[4] https://www.mercurynews.com/2014/05/29/nations-largest-ocean...
premature optimization is super fun. I did it a lot and I would advise to engineers to do it if they can.

But when I look at companies like Airbnb and Uber for example, I cannot really understand why they require that type of tools. Yes they are big, even very big, but nowhere the size of a Facebook or a Google. Most of those projects seem to be engineers having fun at work, and marketing themselves by publishing cool blog posts.
Ask HN: Do you think a pay private group is make sense?
Pay maybe a monthly subscription
Yes and yes. Standard NIR illuminators are everywhere. You would need context to distinguish that it's not green except I suspect it's a very specific green so your brain may be able to do interesting things with that knowledge.

Edit: looking at the emission charts, it's a wider bandwidth than I expected, not sure how well the brain would be able to use the specificity of the green.

Things that are normally just cool enough to not emit significant visible would suddenly be visible. It's far far from the standard 7-14um thermal IR, but would be... well.. downright awesome.

It might be possible to design a mixture of these to generate "impossible colors".
Along similar lines are Earthship homes[1], which use old car tires filled with rammed earth (a plus, since people often can't get rid of tires).

1: https://en.wikipedia.org/wiki/Earthship
It does, but it costs an extra $1.5k on top of the main software, per architecture.
Old people aren't necessarily the ones in a position to change the system. And the old people with power don't use the public system.
Population? Fair? That's a conversation.

(Personally I think wealth should be taxed somehow too. What's fair? Another conversation. I too think capital gains should be taxed at the same rate or higher than income.)
Delphi 10.3, which is paid I know, and I know you know too, nevertheless has the possibility just like in C/C++ to declare the variables on the fly. Delphi before that didn't, it is a language feature just introduced.
Yup, well aware of them (I think Hopper uses Capstone, FWIW). I'm sure you agree that they're not quite at the level of IDA, though ;)
The original source is now available under the name Micropolis
https://en.m.wikipedia.org/wiki/SimCity_(1989_video_game)#Mi...
It can be an incredible waste of time to code based on an outdated comment, especially since changes made after a method is created are likely both subtle and required by a new design version.

That said, I wonder why ie. JavaDoc doesn't raise at least an informational message when a code block has changed, but its comment has not.

Are there IDE features that support this?
Curacubby is searching for a technical architect/VP engineering type
Actually we are fine if you want to run our engineering team or just be the technical guru -- but regardless we need a hands on coder who knows how to make things scale. We want you to own this and not just the process.

Someone that will grab the bull by the horns and take up the challenge of re-platforming our monolithic app into proper microservices so we can scale to 1000's of customers.

For the right person, we will remove money from the equation of whether this is the job for you.

Please get in touch! We are based in Berkeley, CA. We are a growing seed company and have great traction.

Please see our description here:
https://hire.withgoogle.com/public/jobs/curacubbycom/view/P_AAAAAAFAAIZKsEyFlfuRUW

and feel feel to ask me any questions directly:
brian [ at ] curacubby [ dot ] com
Agreed. They do a lot more than just churn out refractions.
For which they charge a per-CPU fortune https://www.hex-rays.com/cgi-bin/quote.cgi
> For those stuck in the United States, the FDA will let you get Ocrelizumab, which is basically Rituximab tweaked enough so that Genentech could get patent protection for it.

So Rituximab was never approved by the FDA? I assume it too had once been under patent, and its manufacturer would have tried to get it approved.
It's negative accessibility, if you zoom the text gets smaller.
It means that the items could not be found on the remote server(s).
Types on the left are a parsing disaster. At the very least, a C-style definition demands too much parsing power for questionable benefits. It blurs the boundary between types and expressions and thus complicates essentially everything that has to deal with source codes. This has nothing to do with type inference.

If type expressions were readily recognizable from other expressions (for example, you can force types to be CamelCased and assigned different lexical classes like ML) then it'd be probably a pure personal taste. But a C-style definition? Big no-no.
Think BinaryNinja has been acting pretty effectively as a competitor to IDA Pro. Its much cheaper than IDA, has a good API and I have been a very happy customer.
X is designed such that the WM is a user replaceable component with a stable, public interface to the rest of the system. Those other systems not so much.
ASN.1 has multiple ways to serialize the same message which opens it up to bugs in rarely-used code paths. And every ASN.1 implementation was rife with security holes.

But mostly ASN.1 comes from the same "bad neighborhood" as CORBA, X.400, X.509, OSI protocols, etc.
And Hopper!
I'm not especially a fan of IDA, but I don't do much of this work anymore and haven't had a reason to catch up. IDA definitely wouldn't be the first tool I'd reach for in 2019.
Meh. Not a huge deal, like I said, didn't even notice it. If I zoom to 110% or more, the spacing is fine.
Aaaaaand: https://twitter.com/hackerfantastic/status/11030878690637045...
The statement you quoted is such bs. Locals are the ones keeping love hotels in business after all.

Like you pointed out, when it comes to a lot of things Japanese (east Asians?) will either change the subject or tell you what they think you want to hear, unless you are very close (or they are drunk).