skysight-inc/HackerNews huggingface dataset:
I may be cynical but:

>Our discovery of the driver vulnerabilities also highlights the strength of Microsoft Defender ATP’s sensors. These sensors expose anomalous behavior and give SecOps personnel the intelligence and tools to investigate threats, as we did.

>Anomalous behaviors typically point to attack techniques perpetrated by adversaries with only malicious intent. In this case, they pointed to a flawed design that can be abused. Nevertheless, Microsoft Defender ATP exposed a security flaw and protected customers before it can even be used in actual attacks.

Seems to me a lot like "the ATP sensors and the SecOps did what they are supposed to do" followed by some self-patting/self-applauding on how good the MS technology and guys are good at it.
Naive question, but is the plane actually possible to fly in "manual"?
there is a manual override but once you are fully trimmed down manually trimming up takes time and time is something you don't have much of with the plane pitching down near the ground.
Safety incidents in air travel are thankfully low. Therefore, it is impossible to find meaningful differences in that primary data alone. You have to find some proxies, and certification schemes seem at least defensible in that regard.

In any case, not being a „budget“ airline that has to cut such costs would seem to fit rather well with my argument that Ethopian is not some gravel-airstrip bush operation flying leftover Sowiet machinery.
Better for a troll to see their post casually ignored than to receive exactly what they want.
It's a bad mechanical design, Boeing didn't want to spend money on retraining pilots, they asked software to fix it, software fixed it so that it remained the same, software had a bug, training didn't incorporate new system, because that was the point of the software, to not require a new type rating.

I think this is process failure from start to finish. Any sufficiently complex system will have bugs in it, whether it's software or not. I think the other failures are much worse. You have to account for your system maybe failing and your pilots have to be trained to deal with this failure.

And yes, software kills people, but no software kills even more people. Just look at how airplanes, cars etc. have improved safety through assistance systems.
Has anyone checked if there is MCAS on the 787?
You’re right. Africa is clearly a haven of technological innovation and progress.
Consider limiting HTTP access to Cloudflare's IP range. Looking up DNS history reveals the real IP address for direct attacks.

curl -k https://134.209.46.107/products/ -H "Host: api.getmakerlog.com"
That happens all the time as it's relatively normal to do so in this type of disclosure . With the political focus on Huawei these days it's likely just people noticing this message more than others, it's not like other big manufacturers show better security practices. With Huawei in particular, MS as a US company really couldn't have omitted the name from the disclosure without being put in a weird spot later down the road.

While I agree with other posters that the wording of this disclosure is unnecessarily mixed with a PR piece, naming companies for me is crucial as it allows end users to assess their own impact o f a vulnerability and also puts a public track record on these vendors.
I’m a social capitalist. IMO, it seldom happens that the free market does not punish companies who make serious errors. For those times, logic, common sense & societal regulation should step in, punish the company with fines ratcheting up until free market clearly loses confidence.
IBM AI can predict with 95% accuracy which workers are about to quit
No there isn't
You could also ensure you turn off the MBP before you enter customs, as it requires a password on startup
so many spies... Why are they afraid of saying that China is trying to spy and steal your intellectual property. It's an established fact by now.
I wonder if part of the problem is the attitude that games are there to be "beaten". That the aim is to beat it, and then you're done.

If games were seen as something to be played and explored rather than beaten, perhaps people would approach them differently and get a lot more out of them, even if they'd already completed a playthrough.
This Person Does Not Exist
I was just thinking that it was supremely ironic that the creators of the PlaysForSure brand are serial deprecators of DRM systems.
It is bad hardware design with a software bandaid rushed in to maximize profits.

I agree with you though; I have said for many years that the way we write software (move fast, break things and shittier languages and infra like js and node) will eventually kill more people than most other man made disasters. Simply because the push for cheaper juniors in places where they do not belong.

Less bad but still potentially life altering I see every day in healthcare, insurance and payments: software is so horribly patched together that money just gets lost or misdirected.

I am biased as I was raised by a pupil of Dijkstra and studied under 2 of them as well, but for me there are solutions; tla+, Coq and languages with static typing. Not because these are silver bullets in their own right, but more because you cannot ‘move fast, break things’ in them; you have to think and plan a lot more as refactoring is very hard. Companies like Amazon uses tla+ a lot so I wonder why it is not standard practice in any place where lives are affected (aviation but also money and healthcare).
Yes, the point was that not everything needs to be a restaurant.
> It was shameful to see Boeing actively encouraging that narrative behind the scenes.

Is it shameful because we suspect that it was an intentional lie on their behalf, or is it shameful even if it was honest opinion of these Boeing representatives at the time?
its a rush. its why some people with money still shoplift.

I guess humans are closer to monkeys than we like to believe and still like throwing poop at each other.
Ah yes ofcourse. Just hit pause to stop time, mute the people screaming in the rear, get a cup of coffee, sit back and think out of the box.
"capturing", not "stealing"
With this kind of publicity I don't see how can Boeing can possibly not punished by the market itself. Even before 737 Max fleet was grounded, I already started hearing, from a lot of different people, that they wouldn't fly on that plane.
It is bad mechanical design and the planes need to be renamed and rerated imho. That is now it should be fixed. It will cost Boeing 100s of millions but they deserve that by now.
Programmers Are Too Lazy to Implement Password Encryption: Study
Debian had mandatory use of OpenPGP by developers for twenty years, although I don't think it's linked to strict package signing.

Of course, this adds a big deliberate barrier to participation - newcomers have to get their key signed by an existing Debian developers. There are real security/usability tradeoffs, and at the moment people seem to have default-chosen "anyone can add packages really easily", resulting in a Cambrian explosion of packages.
I've never heard of Kay Coles James before but going from what is in the article, she is expressing a concern that legally recognising the gender of trans women (but not trans men?) risks disenfranchising non-trans women further.

This is an existing concern of many, that must be discussed. I disagree strongly that recognition of trans women takes away something from other womens' rights (if nothing else because there are so few trans women), but the opinion seems to be widespread enough that it must be confronted, and by that I don't mean with knee-jerk reactions and twitter flamewars. Like, really debated. So that it can be put to rest and we can all move on to more productive debates.

But, calling someone who expresses that view a transphobe and a racist is not debating them.
I can also see them to be less safe for cost reasons. Getting the certification would have helped to alleviate this concern.
Batteries are key to clean energy – and they just got much cheaper
The first version of the DSM listed homosexuality as a mental disorder. The second version listed "sexual orientation disturbance" and encouraged conversion therapy. The third version initially included "ego-dystonic homosexuality".

That said, the fifth version of the DSM does include gender dysphoria and list diagnostic criteria, but those criteria are the best proof available of the nascent state of research related to this topic. They are simply things transgender people desire or believe:

A strong desire to be of a gender other than one's assigned gender

A strong desire to be treated as a gender other than one's assigned gender

A significant incongruence between one's experienced or expressed gender and one's sexual characteristics

A strong desire for the sexual characteristics of a gender other than one's assigned gender

A strong desire to be rid of one's sexual characteristics due to incongruence with one's experienced or expressed gender

A strong conviction that one has the typical reactions and feelings of a gender other than one's assigned gender

That last one deserves to be repeated: "the typical reactions and feelings of a gender". What's that supposed to mean?

> Can you cite...

I could cite several, if they weren't suppressed by political opposition.

https://www.wbur.org/edify/2018/08/31/brown-university-trans...

https://www.abc.net.au/news/2018-08-17/uwa-cancels-talk-by-c...

http://www.jpands.org/vol21no2/cretella.pdf

The fact that a few people are still willing to speak out in the face of such organized opposition is extraordinary. And no doubt I've missed many; that's just my limited knowledge of the field as an outsider with no particular interest in the topic except to ensure evidence-based scientific discussion isn't forbidden by political interest groups.
Chris Manning is responsible for so much work in this field. I can't wait to go through this video series. Thanks for all your hard work and I want you to know how much it's appreciated.
that's nice of you to talk nicely to people who break the rules — it's something rare these days for mods and I think we need more people like you.
For a start, you could detect redflags like a new "eval" call in a minor update and force manual verification...
I am pretty sure the software here did exactly what it was supposed to do. There was no buffer overrun, no NullPointerException, not any other kind of bug. There was just software that reacted exactly as specified.

The problem is: those specifications were bad. It's a bad idea to just rely on one single sensor when you actually have two, it's a bad idea to write software that disengages on manual input counteracting its decisions, then resume overriding pilot decisions out of the blue with a delay of a few seconds again. And it's an absurdly bad idea to do all of this while not telling the humans that will have to operate the machinery in the end ANYTHING about how all of this works.

I totally get why Boeing thought all of those obviously bad ideas were "good" - because they helped their bottom line. It wouldn't be possible to completely hide the existence of the MCAS if there was a potential for a sensor disagreement that has to be solved manually by pilots, and if it hadn't been possible to completely hide the existence of MCAS, it wouldn't have been possible to get the new plane out on the market without requiring expensive re-training. And that would have made a very convenient marketing claim of Boeing impossible to make: "this new plane can be flown by all those pilots familiar with the old plane, no re-training necessary, just read these few pages on an iPad and you're good!".

But this clearly makes this disaster not a "programmers killing people" incident. If any "xxx killing people" classification is to be made here, it's "managers killing people".
I smiled the other day when I saw an iPhone 3G and remembered I keep a 2G in some box for collection purposes
Either. Deeply seated racist beliefs are often honestly held, but that doesn't make them less shameful.
Every time I read about these plane accidents, I wonder why planes don't have any emergency features to save these people. Couldn't you build a plane that would eject the cabin as a parachute module or something. Yes, I'm sure this is naive, but why?

Edit: My point is that almost anything is better than crashing down with the plane.
We Deployed Envoy Proxy to Make Monzo Faster
That's how Homebrew[1] works as well. Any external file pulled during installation requires a matching hash in the main homebrew repo to prevent tampering after publishing.

[1] https://brew.sh/
TLDR? Link seems to time out.
Too much confirmation bias in the article. Of course if you like networking you want to justify spending time on it. Realistically, though, it's better to be known of by many people, than to meet just a few people in person on the off chance this could help you. Given a choice people would rather choose who they know of, than someone they don't. This is how marketing, advertising works. Hence why the author himself is spending time writing articles and tries to reach many people, not meeting them in person.
> There you have it, folks, programmers killing people

In fact it is more like "unscrupulous capitalists killing people", though. The more we know about the incident the clearer it becomes.
I remember this book + I own it. It is a very good book but way over my head. (Additionally, it serves well as a doorstop).

Still I admire the amount of diligence and energy that went into this. Wolfram spent several years _obsessed_ with this stuff. See his 2012 blogpost about his "quantified self" recordings: https://blog.stephenwolfram.com/2012/03/the-personal-analyti...

Maybe A New Kind of Science will create a surge sometime (just like Neural Networks were declared dead for several years, then Deep Learning came along and they took off)
The 737 is still mostly 1960s technology, despite all the tweaks over the years. With autopilot off, autothrottle off, and electric trim disabled, which is the situation the Ethopian pilots would have ended up in from following the checklists, all the main flight controls are entirely manual. Only the engine FADECs can't be turned off, and you wouldn't want to because modern engines rely on computised controls.
You are supposed to read the whole RFC (and then some more) when implementing it.
The UN's population projections have historically been very accurate. They have also consistently shown that the better educated and developed a country is, the quicker its population stabilises.
I think the "when we were young" nostalgia might be an important part of the appeal - I rarely drink it now but when I do, it immediately brings back memories of those times when I was 12 and my grandmother managed to buy me smuggled "digitálky" on the black market - people from Western world can hardly imagine how cool that was, being a proud owner of a digital watch with 7 alarm melodies.
China's legendary knockoff market could soon be gone
Rhinos are being farmed already. You can regularly trim the horns of you rhino herd in edition to selling the rhinos themselves.
If that were true, wouldn’t the weather get progressively more energetic over time? Wouldn’t we now be living with constant planetoids storms?
Back in the day telcos used to collaborate on laying cables and in fact owned ships.

Working for BT I found that there was a a whole other set of contracts and company procedures just for those employees who worked on the cable laying ships.
TSMC manufacture circuits based on customer design, this could be CPU, 5G modems, SoC, GPU etcetera. TSMC is like circuits printing company. Therefore it is more difficult to compare progress of TSMC versus Intel. But also, because they print so much (and so diverse) nowadays, they get priority at all the semiconductor machine companies.
Agreed, it's clear that a proxy is needed. Also that Ethiopian is not a sub-par operation.

My issue is that a 'safety rating' based on an optional certification is being used to compare airlines as more/less safe.

Why not stick to what I believe to be the universal measures of EU allowed, FAA endorsed and ICAO country audit.
Perhaps not, but business practices fall out of style and get rediscovered over time.

This practice of leaving with or without your forecasted cargo reminds me of the software “release train” concept.
As an aside, this is a superbly professional e-mail, with clear references to the applicable standards, and the disapproval of the broken service stated firmly, but using clean language.
Does anybody really think that Linus' (hopefully) past practice of starting with a foul mouthed rant, and only drilling down into the technical detail three pages in was a more effective way of communicating?
About .5c for both fibre and copper - from my memories on doing a CCNA a few years back.
Types of Customer Service and what's the right fit for your business
Excuse me, no.

This incident was decidedly not their fault.

The blame lies 100% with Boing.

This event doesn’t not count toward their safety rating.
How can you say “no training” caused this second crash after reading the article? Did you read the article?
You are giving the stated purpose of this panel too much credit. It’s not there to make “progress”. It’s not going to publish public critiques of Google’s work or change management’s mind about strategic decisions. The panel is a PR artifact Google can point to and say “see, we have an ethics panel with these recognizable names on it!”
How can we be sure that this is programmers killing people, and not merely a busted angle of attack sensor, or an inadequate specification for how the plane should be designed (number of sensors or sensor robustness) or how the software should behave? This conclusion feels premature.
Not in the US and not for the type of company that can afford me.
Show HN: One-Click” CLI to Install OpenFaaS Cloud on Kubernetes
I'm a huge proponent of typed languages, but there's no way that a statically typed language could be as productive as Python (with current type systems technology). For example, just the Pandas library offers incredible flexibility (often dynamically based on the arguments that different functions get) that I've yet to see replicated in a static language.
Finland’s Basic Income Experiment Shows Recipients Are Happier and More Secure
Equipment sales were actually going down for close to 3 years now. We are up for long winter in the industry.

7nm is here to stay. 5nm is possible it is just an optimisation of 7nm SAQP and can be done without radical increase of maskset costs.

After that, we are going down the rabbit hole of EUV litho.

A poorly held secret in the industry is that fabs want to use EUV to not to make <7nm, but to make economical <40nm litho with single exposure.

The biggest increase in cost after 40nm were due to increased numbers of exposures and more non-device and metal layers.

Cheap 20nm, single exposure planar litho will be a very commercially attractive process for a lot of things.
Install OpenFaaS on OpenShift with Weave Footloose
That's the key difference between a DOS and a DDOS, yes. Since I can't load the OP article on this machine for some reason, I can't review the symptoms described. The title of the article does say DDOS, however, which is focused more on saturating bandwidth, not CPU.
Geek Social Fallacies (2003)
I recall some hacks to force a call via cable to get improved quality decades ago.
Can you imagine the scale of parachute that would be needed to safely bring an airliner cabin to earth? Could a parachute on that scale actually be made sufficiently strong (and light), and successfully deployed? I doubt it.
I thought we were reaching some physical limit at 5nm, (Only one electron could pass through the gate?)
Not sure about that particular plane, but it should be. Contrary to jet fighters they are made to be aerodynamically stable.

You can fly (glide) them and even land with most systems switched off, including engines and main power.

https://www.boldmethod.com/learn-to-fly/aerodynamics/3-types...

https://en.wikipedia.org/wiki/Gimli_Glider

https://en.wikipedia.org/wiki/British_Airways_Flight_9
New York’s Fashion Startup Scene Is Having a Red Carpet Moment
costs and motivation I suppose

some air vehicles have whole frame parachutes but not the scale of 737.

I was wondering if a plane could not be made out of separate cabins coupled together (I can hear engineers die of laughter) so that they could be break loose with their own parachute.
Presumably Prolog's unification being one of the most powerful 'pattern matching' mechanisms?

http://www.dai.ed.ac.uk/groups/ssp/bookpages/quickprolog/nod...

[Amused to see that the page I linked to there is over 20 years old!]
That sounds, well novel.

I would encourage you to review:
(Free tier) https://auth0.com/

(Free tier) https://firebase.google.com/docs/auth/

Review any other proven and secure user auth solution ie. http://www.passportjs.org/

Questions to asks yourself:
How it will scale ? Is it compatible with PAM/LDAP ?
Let say you want at least two servers for scale or high availability.

How about social login ?
How about forgotten password?

How you can delegate the work on it ? (in case, you want more people work on it in future)

For personal projects, get some paying clients first, worry later.
I just sounds like nobody really thought about the consequences of MCAS triggering due to faulty AOA sensor input. There should be a dedicated switch to disable MCAS without completely disabling the electric trim motors.
This at first glance actually looks similar to
http://liu.diva-portal.org/smash/get/diva2:20899/FULLTEXT01....

And this style of static analysis has been taken even further by Luc Blaeser:
http://concurrency.ch/Content/publications/Blaeser_Component...

The cycle checker I'll have to have a look at - I'd like to crib parts of it for an OS I'm trying to cobble together. Your project looks very interesting, thanks!
Pretty cool.

How does it compare to Dyon?

https://github.com/PistonDevelopers/dyon
Conventional Fertility Treatment [pdf]
The software did what it was supposed to

I'm pretty sure that it's a reasonable assumption that an implies requirement of any type of aircraft control software is "don't fly the aircraft into the ground"
Hard engineering problem - where do you open up the fuselage to get the people out? It's a tube so you can't weaken it.

You also can't open a hole at the back and let them slide out backwards, you'd need a cylindrical tube in a tube which can then slide out. That's a HUGE amount of extra weight and complexity.

Planes are so so much safer than cars. Before we parachute people out of passenger planes we should be ejecting people out of the roofs of cars if an imminent collision is detected :)
Not that video, but at least it shows the automatic trim system in action - and is rather educational:

https://youtu.be/l62NvkRWa5E .

Even better: https://youtu.be/xixM_cwSLcQ
I'm pretty sure that's one of the reasons the UN human rights council is considered a useless organization
You could try:
http://liu.diva-portal.org/smash/get/diva2:20899/FULLTEXT01....
The chinese Companies that implement 996 are blocking the site in their browsers: http://www.abacusnews.com/digital-life/chinese-browsers-bloc...
Not really, see https://news.ycombinator.com/item?id=19570691 for a good analysis
See my other comment, rust already has a decent system (unofficial)
You say "machine", makes me think of The Machine Stops by E. M. Forster:
https://www.ele.uri.edu/faculty/vetter/Other-stuff/The-Machi...
Parents desperate to get their kids into college are sabotaging other students
Changed "Brussels" to "City of Brussels".
http://concurrency.ch/Content/publications/Blaeser_Component...

This seems to scale out very well - it's kind of static GC analysis with RAII and erlang-style messaging.
Learning how to do ICO cryptocurrency investment