skysight-inc/HackerNews huggingface dataset:
I'm sure that if a bunch of criminals found a way to make a perfectly secure mobile phone they wouldn't be too bothered with a law that says they're not allowed to do that.
I think they ran their own SSH server on the router for the SSH connect-back from Telia's server. SSH password auth sends the password to the server [router here]. This is encrypted over the network, but the server [router] decrypts it, so then you have that password, shared between all the routers. I'm not sure if libssh being vulnerable was relevant to their attack or not, perhaps that's just an aside, given they physically own the router anyway.

SSH pubkey auth would have avoided the problem I guess. Not sure if it would have helped their attitude though.
For me it was educational software for my first successful projects ; beginning on 8-bit micros but soon for MS-DOS, win3.1 and then win95 and onward. The 'business logic' code (written in Pascal by me) lived for decades inside the 40-something software packages being sold to most schools in my country.
Second this recommendation. Fascinating read.
Then you have either the pleasure to win the lottery and be part of the 70% statistic, or do tricks with 1GB memory allocations to force the GC to work, choices.
What is Left to do After your Open Source Project is Done
It was a rhetoric question; I just wanted to point out that people blame these inaccuracies on "binary representations" when in reality it's just this one binary representation that's broken.
You’re saying this on a thread whose ancestor comment (not yours, I know) was:

> the same EU that rewrote its coronavirus report several times in fear of CCP repercussions?

And you’re saying it to people who are coming up with reasons why the post-Brexit EU doesn’t share your concerns.

This does not require a “cold war type situation”. It just requires every other EU member state to have more important things from their own perspective.

It’s not hatred you’re seeing from the EU, it is apathy.

The false dichotomy is your own.
This reaction looks like he's more guilty in this situation and his infant-like behaviour is shown here.

While it's MIT and allows him to modify, improve, etc he didn't read this last sentence in the archriss/react-native-image-gallery library:

...provided that the above copyright notice and this permission notice appear in all copies.

No credit was given despite having a 98% derived copy of the source.

After (3), the 'argument' descends into personal attacks. He definitely knows he's in the wrong and is smoke-screening the discussion by locking, archiving and hiding the PR, like a 'professional lead senior developer'.
Creative Problem Solving – Wallace Model from 1926
Compartmentalize into small groups aka cells. It is centralizing around EncroChat which was the mistake here. All the eggs in one basket will always carry this type of risk.

There is also another difference. Drug dealers usually wants to get rich, and have no real interest in any larger cause than their own profit.

Dissidents are sometimes willing to sacrifice themselves for the larger cause. What is important for such a dissident is not that nobody gets caught, but that the events are beneficial for the cause and that certain key individuals are protected. Even martyrdom is useful for a dissident, but rarely to a drug dealer.

Dissidents should keep working in cells to minimize the risk of discovery. The drop hollows the stone is the working principle for dissidents. The most influential dissident may have a very small network of contacts but with a large fan-out a few layers down. This tactic is for example how Bin Ladin was able to stay in hiding, he was meeting very few people and it was hard to find him because of that even when he was the top target.
Show HN: WahWah – Audio metadata reader Ruby gem
A touch over 65,000.

[1] https://www.wolframalpha.com/input/?i=10+furlongs+in+attopar...
The article makes mention of using their network to deliver an exploit. It could have been software, firmware, or hardware related. I'm guessing one of the existing zero-days that they hadn't patched yet. Once the end device is compromised the encryption used doesn't really matter as keys and plain text can be intercepted by the kernel. How they got access to the network for delivery is likely via the company itself. A knowingly or unknowingly compromised employee as mentioned seems the most likely.
indeed, but that wasn't the bit I was talking about.

I was replying to the comments about use of force.
Yeah, the security implications are obvious, R+W+X should not be used with untrusted inputs.

Not that I'd recommend this, but alternatively you could also map exact same memory twice, one with R+X and the other with R+W. The attacker would need to figure out the writable address. Unfortunately there are probably a lot of ways to accidentally leak this information to the attacker...

There are still plenty of use cases where inputs can be trusted.
Show HN: Ukpd – a Node.js module to provide access to UK Police Data
The table is out of date. Nim is post 1.0[1] now and stable, and has few breaking changes.

[1] https://nim-lang.org/blog/2019/09/23/version-100-released.ht...
Perhaps, but at 10 beverages a day caffeine is only part of the problem since they were no longer drinking black coffee. Even plain cow's milk on its own has some sugar.
Yeah, maybe it should've been something like 'it gets better/bearable' after a couple of weeks, I don't think it ever really goes away.
That's nowhere in the common definition of capitalism.
I thought I had insisted enough on popular.
Your computer might also be struck by a meteor, but it's pretty unlikely.

People are poor at evaluating risk, especially outside their areas of expertise. Getting software only from reputable sources is an EXCELLENT way to avoid malware. I'm not sure what your comment adds here.
Oh weird, are you on windows? I'm on mac and I see all the diacritics squished down into a small pile in firefox
Confused: OP says the service was taken down. That seems the most significant part of this action, even beyond the criminal arrests. Is an encrypted communications company liable/responsible if criminals use their product? Surely there were many, many legitimate users e.g. lawyers, business negotiators, lovers. Can the 'bad apples' be laid on the communication company's doorstep? If so, why not Facebook, Zoom or even Apple?

Why is HN not addressing this point? Instead of speculating about criminal activities etc.
My guess is that DDG is being held to a higher standard because it's the liferaft competitor in a world of Google data harvesting, targeted manipulation and selling customer data.

Most complaining or being heavily critical about DDG are probably already upset to the point of abandonment with other services and they don't want the same trend to happen to this competitor (DDG). This sort of reaction is, IMHO, due to poor diversity of viable competitors.

In our societal structure, competitive options are the only things that keep power in check. I'm personally not entirely convinced you can have a reasonable amount of diverse competition in our economic system and there are some inherent equilibria that we tend to converge on over and over again in a market space (without corresponding massive social equalibria shifts).

If you do have any sort of faith left in our economic system, then you certainly want competitors like DDG to be different and be successful. Even if you don't have much faith, outside of say stringent regulation, supporting these sort of competitors is really the only practical option we have in the current state of affairs.
Has anyone had any luck reproducing the benchmark figures given for the smallpt program? When I try, gcc handily beats nim in the multi-threaded scenario and they are neck and neck in the single-threaded one. For 10 samples per pixel:

g++ multi-threaded : 33.52
nim multi-threaded : 36.90
g++ single-threaded: 75.78
nim single-threaded: 75.95

nim 1.2.0, g++ 10.1.0. I used the flags -O3 -march=native -mtune=native -Wall -Werror for gcc and the default flags for nim.
Bikemap | https://www.bikemap.net | Fullstack, Frontend, Backend, Android Developer | Vienna, Austria | ONSITE / possibility for remote work | Fulltime

Located in Vienna, we are the crowdsourced cycling map & navigation of the world with a great community of more than 3M users across the globe who have shared more than 5.5M cycling routes in all corners of the world. More detailed information (including our tech stack) can be found here: https://blog.bikemap.net/jobs/

Feel free to apply on our website or reach out to us at join@bikemap.net.

Looking forward to hearing from you. Happy cycling
I always thought the point was to keep people home during the pandemic instead of working odd jobs to compensate. Incentivizing people to not work by paying them more to stay at home was a public health policy choice. Of course, the bills were passed really rapidly and maybe weren’t that thought out.
BTC was not always worth that much...385k btc can also be around 80 pizzas. https://www.cbsnews.com/news/meet-the-man-who-spent-millions...
I work on some ecommerce sites. I've had to cancel orders because the order exports can't handle emoji in the fields. I can't wait until baby names have actual emoji in them. I bet some idiot has already tried it.
SEEKING WORK | Central Europe | Remote web development

My partner and I have extensive experience in architecting, building, and managing large custom-made web applications.

Recent projects: https://codetree.co/case-studies

Throughout the last decade we built Airbnb-like platforms, music streaming apps, healthcare/finance/construction apps, real-time GPS vehicle tracking suites, worked on core systems of big data platforms (millions of daily transactions) and more.

We mostly collaborate with companies, but also have a lot of positive experiences assuming CTO-for-hire roles to work with non-technical founders.

We specialize in back-end, DevOps, system administration (Ruby on Rails, PostgreSQL, AWS, Docker, Elastic, etc.), and also do light React/Front-end work when necessary.

Read more: https://codetree.co/

Get in touch: vedran@codetree.co
I agree. That seems more likely. I doubt we'll be told, but I'd be interested in the specifics. It seems like it might have ethical implications to take over it without the blessing of the owner(s) of the company. After all, I doubt they will be able to get many more customers now that it's widely known that it was compromised by law enforcement. Arguably law enforcement destroyed this company, which the owners might normally not be happy about.

It may be as simple as: the business wasn't making money and the owners wanted out, so law enforcement bought it or paid them off. Then law enforcement isn't really "compromising" the company--they're in control of it (whether the employees know or not). At that point they can have the existing devs modify it however they want, or just hire a few new devs.
"Criminal drug trade" This is a fake problem created by governments as an excuse to brutalize and oppress particular members of society. Its stunting human evolution and should be considered treasonous to facilitate such policies
A Survey of China’s AI Solutions in Response to the Covid-19 Pandemic
Research database explores racial bias in police shootings (2019)
tl;dr Gradle is better, according to Gradle.
They still hold some clout as long as they are in office.

And don't forget that the administration has installed a lot of affiliated poeople into agencies. (Ratcliffe for instance.)

I'm not saying the dutch and the french did some kind of cooperation with the US here, I'm just saying I would not gasp of surprise if it turned out to be so.
Your computer might be struck by a meteor, but Apple has removed malicious apps from the Mac app store, and thousands from the iOS app store, despite registering the developers and reviewing the apps.

https://www.hackread.com/apple-removes-anti-malware-apps-for...
Every tea is different. Black teas have more caffeine than green, for example.
Does nim support SIMD intrinsics? Without those you aren't getting "C performance."
Shaw's Principle: Build a system that even a fool can use, and only a fool will want to use it.

https://www.angelo.edu/faculty/kboudrea/cheap/cheap3_murphy....
> When she got her unemployment benefits, she realized something unheard of: She was making more money not working.

The temporary COVID unemployment bill was so rushed that they didn’t index the unemployment to the person’s earnings. If you lost your job or had your hours reduced, you get an extra $600/week on top of state unemployment. About half of people receiving this are receiving more from the combined unemployment measures than they did from their jobs.

This is was a necessary compromise to get the relief enacted as quickly as possible. We didn’t have an easy way to implement a more complex unemployment system at a national level, so we compromised with a flat rate for everyone. Unfortunately, many people are misinterpreting this and assuming that unemployment is always this lucrative (it’s not, and the $600/week ends after July) or assuming that our government has enough money lying around to pay everyone this much all of the time (we don’t, this is actually very expensive for the taxpayers).
I had a large pink mouse cursor on one of the pages. So romantic. But, yea, no MIDI music.
At my first job out of college in 2008 we wrote JS for a desktop app on top of Mozilla's xulrunner platform. At the time I hadn't heard of using JS outside the browser and Node was still a few years off. It was a great experience but Xulrunner got killed by Mozilla and the company had to rewrite in C#.

Just an example of (sort of) non-proprietary, non-browser JS.
> And if the developer is malicious Apple has their payment methods and verified address / identification proofs on file and will inform law enforcement.

A malicious developer is unlikely to provide valid credentials.
> I wish I could experience that even for a little bit.

You can, you just have to reset your tolerance for it.
We are a two-person web development team with extensive experience in architecting, building, and managing large custom-made applications.

Recent projects: https://codetree.co/case-studies

Throughout the last decade we built Airbnb-like platforms, music streaming apps, healthcare/finance/construction apps, real-time GPS vehicle tracking suites, worked on core systems of big data platforms (millions of daily transactions) and more.

We mostly collaborate with companies, but also have a lot of positive experiences assuming CTO-for-hire roles to work with non-technical founders.

---

Location: Central Europe

Remote: Yes, since the beginning of our careers

Willing to relocate: No

Email: vedran@codetree.co

---

We specialize in in back-end, DevOps, system administration (Ruby on Rails, PostgreSQL, Elastic, Docker, AWS, etc.), and also do light React/Front-end work when necessary.

Read more on https://codetree.co/
> state-owned monopoly on violence

There's an interesting 2012 Ted Talks presentation by Peter van Uhm the then chief of defense for the Netherlands. He discusses the state monopoly on violence as a central point of how and why the military exists.

"Peter van Uhm: Why I chose a gun"

Ted: https://www.ted.com/talks/peter_van_uhm_why_i_chose_a_gun?la...

Youtube: https://www.youtube.com/watch?v=LjAsM1vAhW0
Yes, but from my perspective (back then as a child, but it didn't change much) it's absolutely the same, I am being studied and I don't like people studying me, especially without even asking. My perception does not care about professions of humans that look at my body.
> You got your first software development job. The idea of being interviewed made you feel very anxious, but you studied hard and aced the whole thing. Finally, you arrive at the office on your first day and...

> And it's terrifying. Suddenly, you feel like a Jon Snow who knows nothing, and self-doubt starts to creep in.

I was very fortunate in my first position to not have any imposter syndrome, and I think it is partly because I did not ace the interview. I was honest when I didn't know an answer and showed I was willing to learn.
The incentives are so terrible that it might have been done on purpose to encourage people to stay home.
> It's because DDG has been shilling on HN for quite a while.

We’re they caught shilling or something, or are you just upset about just normal promotion?
Tried to set the SSID of an Android Phone Wi-Fi thetering, it said it exceeds the maximum character limit and does not let it set. Bummer
If you claim to fight for privacy and rise to popularity by shaming your competitors' evil anti-privacy (or shady) practices and do something exactly what the rest do, you deserve every bit of criticism. Why should you receive a free pass and the competitors shouldn't? Simply because of your marketing stance??

And for the record, collecting your browser history just to display a stupid favicon is the most ridiculous excuse I've heard in a long while. And I am not going to blindly believe them because they said that's what they use it for.
> By definition trade in capitalism is done willing.

Not by the definition used by the people who named and defined capitalism.

It's true that after that, the conceit that capitalism involved only voluntary, uncoerced trade was adopted by it's defenders as a rationalization of the system, but that was not true of either the specific real world systems for which the name “capitalism” was coined to refer or subsequent real world examples, and certainly has nothing to do with the definition of capitalism.

If you want to distinguish the proposed scenario from capitalism, it would be in that it does not involve private property rights in the means of production, but instead on their forcible seizure and defense, but that's a slippery distinction because commonly such systems evolve into a degree of legitimization and trade with recognized rights between the parties, and the roots of capitalist property also start in forcible seizure which is later legitimized.
Sure, it surprising as an outsider. But nor is this brand new.

Recentish versions of .NET (Core) have introduced ValueTuple and ValueTasks. These types avoid the heap allocations with Tuple and Task.

Hopefully Microsoft think this makes enough real world difference to justify the pain of two sets of types.
iPhone Apps for Couples
Walmart's tech chief extends remote work
That's not what I meant, I meant 385k BTC. At that time BTC peaked at around $1k.
That's a good summary.
Well they look like a lot of fun for dark ages. If anything that was the spring of the web, nowadays things have moved to mobile and web is neglected.

And i dont get the hate for tables, they are really handy to center stuff vertically/horizontally, and to scale an interface gracefully (e.g. image column takes up 15% of width), in a way that 12-grid systems fail. HN is tables.

One thing that responsive design does is it makes the zoom out/in gesture useless, while tables can preserve that.
From what I'm reading, I fail to see how Go is faster than other languages. It actually seems pretty bad.

In the article, it is said to match Java. In the Benchmark Game, it is certainly not among the fastest.
At that time BTC peaked at $1k. So that would've been $380 million max. Also, this was apparently revenue, not profit.
I'm not understanding the legal argument for funding private secular schools but not private religious schools. That seems like clear discrimination on the basis of religion, which is a protected class. It seems like in response though, the state could cease funding for all private schools which would not discriminate on the basis of religion.
Okay, but unless you implement the encryption yourself, PGP can push an update and use weak RNG input so that your message is decryptable, and you'd never know.

"Don't rely on others" makes no sense for encryption, you have to rely on others because it's too hard otherwise. You just have to pick trustworthy others.
Raku grammar hints about creating a templating system – Mark Carter
Turing and the Uncomputable – On Logic Come to Life
I think you are giving politicians way too much credit.
Enums, immutables, and generics aren't good because they're exciting. They're good because they give us expressive tools to write descriptive, type safe systems that manage state better.

I don't like "modern" systems because I have a fetish for novelty. There's nothing novel about these concepts, they've been around since the 60s and 70s. I like these tools because they improve my ability to reason about the code, but more importantly they let the compiler and other static analysis tools reason about my code.

I am getting old and lazy. I want the compiler to do more for me, not less.

What I see is a situation where Go is gaining traction from two communities:

a) people who attempted to build large systems at scale in dynamic late bound languages like Python and Ruby and NodeJS etc, and hit the wall from a performance and maintainability POV. I could have warned you...

b) people who came from the Java world and got frustrated
with the language and tooling there

People coming from a) especially but also b) to some degree will be perfectly comfortable with Go missing the nicer aspects of modern static typed languages because they never had them in the first place.

As for...

"Go doesn’t have a virtual machine or an LLVM-based compiler."

How is this any kind of pro or con? It's just an implementation detail.
Yes. This has been the case from the very beginning of their platform, as far as I'm aware.
Breakdown: The unwinding of law and order in our cities has happened quickly
> The messages "have given insight in an unprecedented large number of serious crimes, including [...] murders, thrashing robberies, extortions, robberies [...]" Dutch law enforcement said.

What are "thrashing robberies"? Is this an odd translation of some Dutch term?
IP addresses are considered PII
That is quite nice. These advertisers are basically advocated removing certain people outside the zeitgeist they want to cater to.

BMW is an example. Pretty weak, just like their cars.

I get that there are messages that are beyond the comfort zone of nearly everyone, but if you argue for diversity and inclusion while basically wanting certain users removed, they themselves should just leave and take the stuff they try to peddle with them.
2020 Space Calendar
You accept that, unless you're the NSA, GRU or whatever the Chinese counterpart is called, you will have to.

Do you really have the talent in your organisation to develop a better cipher than AES or ChaCha? If not, go with something that exists. According to Snowden, even the NSA can't just break PGP if you use it properly.

Do you have better coders than OpenWhisperSystems? You're going to have to trade off relying on someone else's software versus the chance your own coders make a mistake. I'd say the latter risk is usually the bigger one - even the Sony PS developers messed up on the "don't reuse nonces" bit.

Do you have your own chip fab? If not, you're going to have to hope whatever you're using doesn't have too many backdoors.
> Perhaps their high-level thought process is like this?

Yes, I think you're right and it was difficult to understand. The thinking is that, as you can trigger Telia servers to connect to you, using software which appears past its expiration date, you may be able to exploit that software to root their command and control server. Do that and you own Telias whole botnet of customers.
> Note that I’m not engaging the ideas of MMT on their own merit! They could be correct for all I know.

For all I know, there could be articles that do debunk MMT but this one doesn't.
Customer Retention: How to Keep Them Around