skysight-inc/HackerNews huggingface dataset:
And the good news here is that many libraries have accelerated their ARM port / investigations.
Would you want the insurance policy to pay out though?

At some level of recklessness, insurance becomes void. I think a lack of infrastructure to restore a hacked server — with data valued at over $1M — is negligent enough to not be covered.

But maybe UCSF are on MegaCo’s YOLO tier of server insurance, which is so expensive and isolated it has no impact on my MegaCo pet insurance premiums?
Cat-5 can definitely do it if you're unlucky about cable orientation and length. Years ago I worked in an office one story underground and the whole thing had a cable run along a single wall with drops. One day we got a nearby strike and every single ethernet card fried, but the rest of our hardware was fine.
The little chengdu xiaochis I went to in Beijing often had my food up before I was done paying, I would hear the propane stove hose on just shortly after I said my order....
Maybe there should be a law that if you pay a ransom, you are required to pay the same amount as a fine. Because paying these ransoms is funding the criminals.... how about you have to also fund law enforcement to combat those criminals?

(also, this should reduce the amount that actually goes to the bad guys, since the amount of ransom would have greater downward pressure, i.e. if they'd probably not be able to collect more than $0.57M because that would cost UCSF $1.14M)
It hangs on "reading stories".

Web app authors can be very creative, but one thing I don't like about web apps is that often their error handling is nonexistent. It's not about individual authors; behemots like Microsoft also do this in an irritating way: "Something did not work. Reload the page please" -- Is this really the best a billion dollar company can do? Well, I suppose this is still better than no error at all, which is a default error handling method for big chunk of web apps.

I think (but can be wrong) that by using such a dynamic environment like JS is the culprit for lack of good error checking mechanism.

Also one thought of mine for the reason why even big companies are unwilling to provide good error messages is that it's impossible to get the real reason. There may be so many moving parts that even the developer isn't able to handle it all. Which sparks a doubt in my mind if this environment is really fit enough to provide high quality software. Since it's so popular it's obvious that it has some aspects that it does right, but it seems that the web app environment could benefit from some fundamental changes.
There's a difference between IE and Chrome, the one was completely closed source whereas chrome's engine is open source and there already many distributions including one backed by another major company. If Google takes blink into a direction users no longer want a blink fork and open source distro can be made in the same sense as Firefox. I'd be more worried about the prevalence of safari engine on ios where there are no alternatives.
Yup. The only reason I am starting to write about it now is that I am no longer running the system. You could argue that it's not useful to write about systems that worked in the past, but I would disagree. New systems can work 99% the same way, but get an additional edge from somewhere else, like new data or better models. Most of the engineering will always be the same.
> - use of weak symbols to detect whether a process has some library loaded

RTLD_NOLOAD

> Dynamically-linked programs will load faster when their dependencies are already loaded in memory, and slower otherwise. The biggest win here is the C library.

RTLD_LAZY, though it's one less attack vector to have RTLD_NOW and mprotect your GOT and PLT as readonly.
What kind of monster of an employer makes their employees train the replacements they're getting fired for?

If that were me, I'd organize and have everyone quit; let them figure things out. Screw the pittance of a severance.
Police spending is inadequately large because the threat of a police walk-out scares city governments than the threat of any other department striking.
If we initialize the contents of both pointers to 0

Is this a "Rust-ism"? I had a double-take while reading that, because in C that would mean a null pointer, and in the terminology I'm used to, the intent is to set the pointee to 0.

Note that x86 does allow some memory reordering:

https://preshing.com/20120515/memory-reordering-caught-in-th...

(I have experience debugging and fixing an extremely rare bug caused by the above subtle reordering, which occurred approximately once every 3-4 months.)
Several years ago there was an extremely popular app that was an RSS newsfeed aggregator for iPads with an unfortunately very generic name called "the magazine" that did this exact same thing, it embedded the articles in a newspaper aesthetic. Great stuff.

I used it extensively on an iPad first generation but unfortunately it's no longer available on the App Store.
It looks like using an approach like Modernizr relies on downloading the detection code, running it, and then potentially kicking off additional downloads for polyfills. Or it would mean eagerly downloading polyfills on browsers that don't need them. In the former case, you pay the cost of a second network request, especially in older browsers that don't support HTTP/2, and in the latter case, you send a potentially large number of bytes of polyfill code to clients that don't use them. What makes using a browser's agent string an anti-pattern?
It’s in the best interest of the people who make these types of malware to provide the decryption tools once the ransom is paid.

If news gets out that even if you pay the ransom you won’t get the decryption tools then no one would pay the ransom and the hackers get no money at all.
Well that's a nice try but I don't have to create anything to see through the BS. I just have to use some products this guy of yours created.

HTML5 was nowhere near the capability for interactive apps for a long time. And flash was, just look at those flash game websites, 1000s of them there. His attempt to make the whole argument about videos and not about preserving his walled garden that is app store is as dishonest as the rest of their typical marketing bullshit.

> He built the greatest products in our digital era.

Well maybe that's the problem right there. They were great from a business standpoint (aka getting fat asses fatter), never from user standpoint. Those products enslaved their users because they are closed down annoying i-know-what-you-need-and-dont-need-better-than-you pieces of trash.

It's also ironic that you use this quote:

> Do you create anything

Did he? Or someone else did for him to sell with his holier-than-thou marketing?
How would that work? Would the bad guys just ask for 10 times as much, since the insurance company is obligated to pay whatever it costs?
To be fair, there is a lot of information available at our fingertips nowadays, much more than anything we could get in the 90s.

Information back then was scattered, the tools to look for it (Altavista, Yahoo, Archie, Veronica, etc.) were rather weak in retrospect. Wikipedia didn't exist in the 90s, nor did GitHub, Thingiverse, and so on. A lot of things like online banking, stock brokerages, bill pay, video chatting, online gaming, and so on weren't as good as we have it now. None of that was accessible without being tethered to a phone or Ethernet jack.

What has changed is the arrival of platforms that started optimizing for engagement, impressions, views, clicks, targeting, and eyeballs, because all of that can be monetized.

The people who would be glued to the boob tube now are glued to social media, and instead of getting content fed from Rupert Murdoch and other media barons, it comes from whomever does a better job of paying for ad impressions, gaming social media, and creating clickbait content to get their viewpoint heard.
What is your development environment like?
Depends, those kinds of outfits tend to poke around and lurk a while before striking. In that time they can exfiltrate and you cannot prove that the baddies didn't exfiltrate data (if you had that sophistication, they wouldn't have been in the mess they got into).
I have not read the sequel.

His son wrote a book called The Owl that was not sci-fi at all, but I came across the news of the Dragon's Egg sequel when I went looking for The Owl.
I thought my phone camera was broken. It looks like the middle right side photo here, imagine in white/black overlaid on top of your photo with 50% transparency.

https://www.getpaint.net/doc/latest/images/tools/fill/Gradie...
Their severance pay was probably on the line...too sad
Apparently crypto-ransom people are actually pretty trustworthy about unlocking the machines. It doesn't really cost them anything (0% chance you were gonna send a 2nd payment if they didn't unlock), and their reputation as 'fair' is very important for securing future ransoms.
The EU did introduce a label with information about cleaning power and noise, in addition to energy use.

However, these were removed following a court ruling in favour of Dyson, which complained that the cleaning power tests were not realistic, as they were always conducted with an empty bag.

https://www.which.co.uk/news/2018/11/dyson-wins-eu-vacuum-ap...
C programmers use "contents" to refer to the address of the pointer? As a non-C programmer, asking what is "contained" in the pointer would certainly refer to the pointee.
But patients suffering for administrative negligence? I don’t agree with that but there does need to be some kind of incentive there.
But they are saying that they now want to bring 3000 more companies to demo day, which dilutes its value.
CISO: https://cio.ucop.edu/spotlight-patrick-phelan-once-a-ucla-br...

I can't think of any reason not to use a cloud hosted service for backup today. OneDrive, Dropbox, and Google Drive all sign BAAs and give you versioning amongst a million other security features. AWS even has offerings that let you take periodic snapshots of on-premise volumes.

Point in time recoveries for the entire account would be nice add too but not having to fork over a million dollars in exchange for a few clicks sounds like a bargain. Hell we were setting up write-only S3 buckets for critical data stores 5+ years ago.

Gross incompetence, I'd fire everyone. A district-wide outage for a week, fine. A 1.4 million dollar check to get data that should have been archived somewhere GTFO.
I agree microtrenching isn’t ideal. Neither is a plethora of service providers tearing up streets to install proper conduit and lines, however.

Texas has shared transmission lines and a choice of electrical suppliers. It’s high past time we applied the same model to data.
I'm assuming that Amazon is offering retention packages to the employees, otherwise, why would they bother acquiring the company?

Early employees who were dreaming of a windfall aren't going to get one I guess, and anyone who left the company or was fired and exercised is totally screwed.
I know how much IT personnel at UCSF make -- you get what you pay for. If you want expertise, it's not hard to find.
Nor does it work with Brave's built-in ad/tracker blocker.
> but oil itself is "natural".

Burning it in mass quantities, is not so "natural", unless you go down the rabbit hole of calling all human activities "natural".
You can have two amazon accounts and associate one spotify account with each.
They used to be quite keen on ARM in the datacentre - the last slide here [1] is interesting! Seems like the strategy changed.

[1] https://www.extremetech.com/computing/175583-amd-unveils-its...
... then what?

I think you're implying you would not have used the internet, but that seems unlikely. Since you are still here, you must have decided that the benefits outweigh the death threats?
Plastic isn't burning it.
Sure. Here's a direct photo of an LED blinking at ~1Khz
https://imgur.com/a/Kmx9Qhe and here's one at 10Khz (you need to zoom in a bit) https://imgur.com/a/Q7oqs9J

When the light is passive (looking at the wall instead of the LED itself) the pattern is less obvious to the naked eye. Possibly invisible if there's enough ambient light. Around 20Khz the separation between bars is 1 pixel (on my camera) so you need to zoom all the way in to see it.

BTW check you phone camera settings. Most phones intentionally correct for the bars around 50/60 Hz because that is the frequency of AC power so florescent lamps will cause the artifact. The effect is usually unwanted.
This seems much more likely than the scenario where they simply didn’t have any backups of the data.
"We were one country. One voice".
No you weren't.
I was just thinking that running this on our code base will probably break the tool. Have code from 2006.
I've heard people who are struck by lightning once are way more likely to get struck again. Mostly it's probably due to the patterns and behaviors they have, but some stories it really seems like there's a sort of hidden effect of being struck by lightning. Probably just happenstance but part of me thinks it'd be interesting if being struck by lightning did cause some odd change. We could call it the lightning touch.
This is a great novel, and very interesting and entertaining. I have also heard it described as a physics textbook masquerading as fiction, because it teaches you a lot!
As in a town square market, as seen in human culture for the last few thousand years.

For non-native speakers, market has a specific meaning in US English. In the US a “market” typically means a small shop selling the most common fruits, vegetables, snacks, and household items.

In Europe a market is a larger and more general area for autonomous small traders, usually also trading food and household goods.

The autonomy and low barrier to entry make them a good analogy to a stock market.

(They also suffer from availability and quality issues. A large business can arrange to purchase and retail all of these goods on behalf of consumers under one roof — a supermarket.)
Disney did this same thing: https://www.orlandosentinel.com/business/tourism/os-bz-disne...
Fun fact, the Shuttle Training Aircraft actually used reverse thrust in the air to simulate the (probably terrifying) rate of descent of the real thing: https://en.wikipedia.org/wiki/Shuttle_Training_Aircraft
What you’re missing is that violence itself is an enforcement of state power. There is a reason why people carry weapons in CHAZ. In a power vacuum, the group that has the most weapons will be the de facto ruler of the area. For instance, Somalia does have a formal government, but without violence such a state does not exist in reality. Another way to phrase it is, in the words of Bret Weinstein, police brutality is a feature, not a bug.
As weird as it sounds its pretty much in their best interest to send the unlock key because if they don't then people are going to stop paying them.
The GP mentioned Cafe de Coral, which has a menu size similar to any other fast food restaurant [1]. The thing is, this is a trend of a geographical region, not just a specific fast food restaurant. McDonald's in HK are always able to serve you your order way, way faster than any American or European McDonald's I've been to. Quite literally, most of the time once you've finished paying, the food is ready. In America, it's common to wait on average of 5 minutes for your order, standing around the order pick-up area.

https://static.hkej.com/eji/images/2017/11/21/1707152_eb3877...
I have no idea how you could construe what I wrote as disagreeing with you.
You're right about full screen modals, I've seen those done right and "never use x" is rarely right all of the time. And modals can be done well, but 90+% of the time I encounter them, they're not. They're not related to the workflow I'm currently engaged in, they don't save me any time, they don't serve me.

Again, I'm not saying (and I wouldn't characterize TFA as saying) modals per se are bad. But the priors are such that absent any other information, modals are suspect.
Cute game.

You can get into a state where there are no valid moves though: https://imgur.com/1WLufcx
Someone, somewhere, is calculating whether the ransomware line item was worth the offshoring and laying off local employees line item.
During development of a large system static linking is hell. The final link just takes too long if you are only working on one object file. Also during debugging you have to load all symbols in gdb, which does not scale. With dynamic linking you only load the debug info for the library you are working on.
It's clear that there were increasing numbers of sub-industries, and players in those sub-industries, over time.

SEO in 2011 certainly wasn't nascent, but it was a bit of a black art, and not an especially large sector.

I don't think there were (m)any that were offering exclusively SEO products -- from memory it was more of a bundled / add-on offering for other services.
This would make the payers far less likely to report it, and ultimately make it much harder to track
How the heck did they qualify for H1Bs when they were replacing already employed Americans? Not only did the H1Bs unemploy citizens, we didn't even get the long term benefits of trained workers living and paying taxes in the States.
I think you misinterpreted my comment, friend. I never said or impled that cops don't pull people over for speeding. I said they don't target a single individual and follow them around waiting for them to speed. This was the part of the parent comment I was responding to:

>Putting someone under watch

That does not mean following a single individual a cop may encounter on the road that looks sketchy and wait for them to speed. It means staking out outside "Joe Blow who lives as 12345 Address St."'s house because Joe Blow is part of a demographic that is predicted to be more likely to be involved with gang activity, and waiting for him to get in his car and speed. The difference is an "unknown" or "random" individual vs. a "known" or "pre-planned" individual, because that is what the parent comment was discussing. I apologize if my original comment was unclear! I say this respectfully, it may be beneficial to more carefully examine the context of comments so that discussions may be more productive in the future.
It actually does handle errors properly -- the reddit api is probably blocked for you, which is why it hangs and can't do anything. I suppose I could have added a "it seems we can't reach Reddit" kind of message, but that would still have been an error state, and in rushing this out in an afternoon it wasn't much of a priority.

Didn't realize until posting here that apparently Firefox blocks the reddit api from the browser in certain common configurations. So maybe that would have been useful.
What would it mean if it was?
C and Asm at least... and "address of the pointer" is something entirely different. For example (assuming a 16-bit system and radix 16 for brevity),

Name: Address: Value:
p 0100 02 01
v 0102 12 59

p is the pointer. The address of p is 0100. The contents of p are the two bytes which form the address of v, 0102. The contents of v are the two bytes which form the value 5912.

I wonder if this confusion of the pointee with the pointer is what makes this concept seem so difficult to those who didn't start with Asm (especially multiple indirections) --- I certainly saw a lot of that when I used to teach CS courses.
This is obviously a huge overestimate. But go actually weigh out 10 grams of flour on your kitchen scale. Do you really think you have more diesel exhaust in your lungs than that?
That’s a good point, I hadn’t thought of that.

Perhaps the health of some businesses is so important that they should be protected by, ahem, state-backed insurance paid for by the taxpayer?
> You could just e-mail the landlord 'sorry, I'm broke and don't have any money right now, feel free to waste time in court if you'd like'.

You'd be better off offering to pay some very small amount, pretending as though you were acting in good faith. Regardless of the merits of the contract, judges tend not to like 'I dare you to enforce the law' taunts.
Crack edit? Is this a term I should be familiar with? To be clear: I know ‘crack’ is a drug, I am asking if ‘crack’ in combination with ‘edit’ is something funny.
My school district has insurance for this, and we paid a ransom (via insurance) a few years ago.
True

At the same time, as you mention, excluding contributions is cheap and that's what initial contributors feel worse about: that they can't contribute effectively

I like how the article starts with:

> An activist in the Middle East can provide a different perspective on an article about politics in their own country than a collaborator in northern Europe. And they deserve to add their voices to the conversation safely.

When they will most likely get a "original research" deletion of their contribution
Someone's gotta be thinking about doing a ransomware operation that doesn't unlock the data in order to poison the well.
I've never bothered to research it, but I've always wondered if there were groups that saw the printing press as evil.

In the same way that some thought about radio, TV and now the internet.

In any case any issues with digital media giants aren't the result of the internet, but rather late stage capitalism.
I've never thought about that aspect of the my writing, but I use the terms "value of the pointer" to mean the address, and "contents of the pointer" to mean whats stored at the address.
I think most people don't have enough money for a "proper" wardrobe.
GDB handles binaries in the hundreds of megabytes fairly well.
Coca-Cola just threatened online platforms to “rid ... inappropriate content”
On a cursory glance it'd be interesting to know if this record mega-lightning event could be related to the magnetosphere type event mentioned in another HN story: https://news.ycombinator.com/item?id=23658114

They're on different dates but perhaps recording shifts in E&M balances based on global weather conditions, or perhaps affected by solar storms.
I wanted to share this Verge article from a different angle than its main theme of standing against racism, which I totally agree with.

I often fall prey to my own 'bad timing' in pointing things out in front of 'comment mobs' - I fail to 'read the room' - and I get eaten alive. But HN seems to be more open-minded, analytical, and caring of many issues at all times, no matter the moment, compared to other comment communities. So here I am.

The alarming words I want to bring to HN readers' attention is what appears to be now deleted text from the Coca-Cola media statement page, but the Verge still quotes it as the original words:

> “We will take this time to reassess our advertising standards and policies to determine whether revisions are needed internally, and what more we should expect of our social media partners to rid the platforms of hate, violence and inappropriate content. We will let them know we expect greater accountability, action and transparency from them.”

What alarms me, as an advocate for free speech in the age of digital tribalism and censorship, is their original words, "rid the platforms of ... inappropriate content", strong-arming Facebook from a money point of view.

To use such sweeping, broad words from the house of the world's largest brand is a gross attempt to abuse capitalism to stifle free speech and diversity of expression, which IMO needs to be spoken out against.

It may have just been badly worded (far too broad), but it was irresponsible to say such words and it's no wonder that version is not on the website now. Too late - the words are out.

Moments like this of reacting against genuine bad things can result in throwing babies out with the bathwater. Privacy, free speech, freedom of diversity.

We must always be watching.
Did you ever work for an organization?