skysight-inc/HackerNews huggingface dataset:
More details: https://www.fireeye.com/blog/threat-research/2020/12/evasive...

“SolarWinds.Orion.Core.BusinessLayer.dll is a SolarWinds digitally-signed component of the Orion software framework that contains a backdoor that communicates via HTTP to third party servers. We are tracking the trojanized version of this SolarWinds Orion plug-in as SUNBURST.”

“ Multiple trojanzied updates were digitally signed from March - May 2020 and posted to the SolarWinds updates website. The trojanized update file is a standard Windows Installer Patch file that includes compressed resources associated with the update, including the trojanized SolarWinds.Orion.Core.BusinessLayer.dll component. Once the update is installed, the malicious DLL will be loaded by the legitimate SolarWinds.BusinessLayerHost.exe or SolarWinds.BusinessLayerHostx64.exe. After a dormant period of up to two weeks, the malware will attempt to resolve a subdomain of avsvmcloud[.]com.”

“This actor prefers to maintain a light malware footprint, instead preferring legitimate credentials and remote access for access into a victim’s environment.”

“In observed [trojan] traffic these HTTP response bodies attempt to appear like benign XML related to .NET assemblies” “Command data is spread across multiple strings that are disguised as GUID and HEX strings.”

Edit: Silly me, that was the first article on hn, see thread: https://news.ycombinator.com/item?id=25413053
Once we achieve quantum supremacy, is it still impossibly hard to break the private keys?

Could a state actor or motivated rich person burn $10M or $100M to steal the biggest wallet?

A thief might not even profit directly from the theft, but rather shorting crypto.
> Finally, in April 2019, Tether admitted it was only 74% backed. And that’s before it went off and printed another 17.5 billion tethers. So what’s backing all those?

So 7/8 of tethers have been printed in the last ~20 months? Is there any reason to think they've increased their cash holdings by anything like $17.5b in that time? They claim to have increased it from $1.85b to something close to $20b since April 2019?
Before kids, we kept our thermostat at 55F(13C). We dressed in layers, we used heavy blankets on the bed and the couch, and used a small space heater in the room we were in.

It was ok, but kind of uncomfortable.

Then we had kids and that all went out the window. Kids in many layers of clothing is hard for diaper changing, is a pain to clean when they spill, and once they start to walk, keeping them in one place is impossible.

So now we keep the thermostat at 70F(21C). The energy usage is a lot higher of course, but at least it's all green energy!
Mmmmnah, not buying this list. I've had some first hand experience with some of the groups/organizations on that list and they are something to stay the hell away from.
I would assume (without much research) that this artsy due to government support for EADS/Airbus in competition with Boeing.

Also interesting: Lufthansa is the company which probably good biggest single Corona-support, yet, in Germany.
Lower cost-per-click and cost per impression for lower income countries does not mean that companies are avoiding advertising to those populations. It just means people buying ads aren't as willing to spend money to reach those populations. The cost of advertising to populations with lower disposable income has always been lower. This isn't something new to web ads, it's a phenomenon that has existed long before the internet. I'm really not sure where you're going with this line of thinking.
Amazon already makes their own chips on the Graviton line. I wonder how long before you can get a graviton pc? maybe never?
> Amazon, Google, Microsoft start building their own chips for their own clouds.

At least Amazon (Graviton) and Google (TPUs) already are. Google is also reportedly looking into its own ARM CPUs for its own mobile devices (Pixel line); if it does, I can’t imagine Cloud would be far behind.

> At least Microsoft is likely to sell their chips to third parties (they used to sell their software).

I would expect MS would keep its chips for its hardware, rather than selling them. But, sure, either they or Google might sell to partners, to help out the ecosystem for their OS's.

> If you want to develop for AWS you’ll be safer to have a laptop with an Amazon chip, if you want to develop for Google Cloud a Google Chip, for Azure a Microsoft chip.

In either case, cloud-as-dev environment is being actively pushed by all players, and negates that issue. It doesn’t matter what chip (or OS, or much of anything else) I have on my laptop if my dev environment is in the same cloud that I’m deploying to.
aurebesh.js – Translate JavaScript to Other Writing Systems
I live in South Africa which can get pretty chilly in the winters, but people generally don't understand insulation, so they just tend to put more clothes on, or just wear a kortbroek in the summer. Even if they did, a lot of people can't afford it.

It's catching on slowly though, for example things like double glazed windows. Also, building regulations have improved and insulation is now a mandatory for normal residential houses.

I'm in the process of changing all the windows in my house to double glazed, and installing better insulation above the ceiling. It makes a massive difference, and at least in my area (Cape Town) you don't need an air conditioner in summer, except perhaps a few extreme days in February :)
The Future of Lead Generation Has Arrived
They have Tencent money now.
I came here to dispute this, but when I looked it up, it appears to be true, at least in the US, where irrigated farms produce only 39% of farm products (in $). That being said, its still a nontrivial percentage, and irrigation for agriculture accounts for 80% of the nations water consumption.

https://www.ers.usda.gov/amber-waves/2017/june/understanding...
Its been years since I needed it...
but my favorite was always the DDD front-end (Data Display Debugger). Really nice X based front-end to GDB. The red hat TUI one wasn't bad either.
I guess the question one would have would be the reason or relevance of posting.
We can try sanctions, but we've pretty much maxed out that route after the Crimea annexation.

If we do nothing, we're sending the message that these actions are okay.
>It's essentially exceptions for C. This is frankly horrifying and I can't believe the C standards committee is entertaining this.

I can because C already includes setjmp/longjmp as an exception mechanism that gets used in plenty of real code. The problem here is that those don't unwind the stack so they would break and cause memory leaks when using defer statements.
Is this true? I didn't see this detail anywhere I looked. If you have a source that would be interesting.
wow this is awsome !!!
It's really about the intersection between two lines:

* As a company gets bigger, it becomes complacent and slower to respond to changes in the market.

* As a company gets bigger, it gains economies of scale and powerful anti-competitive tools like regulatory capture, price dumping, etc. It also is able to capture more and more resources because the less competition there is, the more it can drive up prices or cut costs (and quality) without loss of customers.

The question is which of those has the greater slope. Given that the number of publicly traded companies is trending downwards at least here in the US, my strong suspicion is that the latter wins.
This seems really strange to me. The C committee recently seemed pretty opposed [1] to adding fat pointers [edit: originally wrote bounds checking but that was a thinko] as eg WalterBright has called for. [2] Addressing that seems like it'd have a lot more benefit for a much smaller change to the language. I don't really agree with you on "the only thing C needs to do is keep on working" but if they're not willing to entertain that proposal, why on earth would they be talking about throwing in exceptions?

[1] https://news.ycombinator.com/item?id=22866288

[2] https://news.ycombinator.com/item?id=24454369
This is why they should be regulated as utilities. The bailouts of 2008/9 ended any argument that the banking system is a fully private sector entity.
It seems somewhat arbitrary where the line is drawn between "growth hack" and "clearly undermining copyrighted content"

Thinking specifically about Napster and MegaUpload. Is it because there was no value beyond simply sharing files? If there was a presentation layer + user accounts on top, would they have been spared?
It’s possible... but I think someone will just use a 50 dollar handgun to achieve the same.
You claimed: ... around 370 were PCR positive ...

Then you quoted from the paper: ... small proportion of participants were seropositive ...

Which is in direct conflict. The latter is saying they had positive antibody tests. Not PCR tests. In fact a lot of those were most likely just false positives, from a antibody test that "only" had a 99% specificity. Which is most of them.
I'm hesitant to buy a first gen product, but I really want to hop on top this bandwagon especially, since I needed a new computer last month.
I'm not sure yet. I think I would like to increase my passive income by publishing a children's book or inventing something (I have a few ideas).

I'm sure I'll fail.
Hey I’m a non American too, and Musk himself is South African, which is kind of my point.
Zoox goes live – class 3 autonomous vehicle
I don't know what the rules are in London, but in Chicago landlords are responsible for paying for heating. An interesting side effect is that even crappy old buildings have triple paned windows and super efficient heaters.
Aside from anything else, your second point is exactly spot-on. That's not just your impression.
Especially night trains - if you are able to sleep in that somewhat noisy and shaky environment. You travel overnight, where you can't do anything anyways and come up in the other place in the morning and have the full day available. When flying you typically need a hotel night more and have to get to city center first.
The Ars Technica ultimate holiday gift guide 2020
I bought an older house built in the era of coal heating. Popped open an exterior wall to fix some water damage and discover it was completely un-insulated.

Better than finding the walls stuffed full of asbestos, I guess, but man, how was I the first person in a century to think of insulating?
I am not an astronomer but these seem to be a different thing.
Current gen X1 Carbon is 2.4 lbs: https://www.lenovo.com/us/en/laptops/thinkpad/thinkpad-x1/X1...
> that was exactly Youtube's recipe for success

Disagree. ContentID was a proprietary tech for content recognition that made YouTube not get inundated with copyrighted material. YT is successful because they handled the issue, not because they didn't.
Looks awesome <3
What determines the value of anything?

We do it the same way we do with everything else:

> The economy of the United States is that of a highly developed country with a mixed economy

> A mixed economy is variously defined as an economic system blending elements of a market economy with elements of a planned economy, free markets with state interventionism, or private enterprise with public enterprise.

Getting back to your question:

We establish a market for this, guided/corrected by state intervention if and when needed.
Hopefully not a single org, or any org. But like I said, it's not easy to solve socially. The main point is to somehow get paid without advertising (Which already exists, it's just that people won't pay individually for every service on the internet. At least that's my assumption).
If one was to set this up to short bitcoin and/or destroy trust, stealing is not the point.

The point is to prove you can do it to even the most secure wallets remotely without ever interacting with another human.

If it happened, nobody with bitcoin holdings valued over the opportunity cost of breaking the crypto would be safe.
I concur. My account is just as anecdotal and also limited to a specific region. That said, I recently moved to North America and have lived in Pakistan my entire life. A combination of poorly insulated building materials, old houses, an energy crisis, and a low GDP per capita leads most individuals to people conserving body-heat in the winter. It isn't fun, and you're never warm enough.

It was bizarre for me to lounge around in a T-shirt and jeans while it was snowing outside this month. The average coldest in winter for Lahore is 5.9 °C (42.6 °F). When the weather turns, you pack your summer clothes and unpack your trunk of winter clothes. You're wearing many layers and a heavy jacket indoors with your gas-heater burning a flame for extra measure. Oh, and your blankets are much heavier in the winter.

The record coldest it's ever gotten in Lahore was an unfathomable –2.2 °C on January 17, 1935. It's never been that cold in my lifetime.

And yet, winter feels infinitely colder in Pakistan than it does in Canada.
> the Russian government

You sure about that? "They" have been claiming Russia is the boogie man for years, but it's never been proven. In this case, it does appear like a complex hack. Wouldn't be surprised if it's China, Iran, North Korea, Russia, U.S. Government (yes, hacking itself), etc.
Hey sull, appreciate the thoughts- I think that's a pretty good take and I believe/hope you're right that we'll have things ironed out soon
I’m not pretending those are the only options - I’m saying that in a nominally anti-capitalist country, they wrought massive ecological destruction.
Go hiking for a week without showering. You can smell the soap and shampoo on the day hikers from many yards away. You acclimate to just about anything.
What I think is funny about this is that some people worry that AI will control us. But if AI were really controlling our lives would we even know? In the example of the paper, machines have taught us how it would prefer we talk about equities.

Wouldn't a great intelligence just find subtle ways to incentivize us to do what it wanted without announcing itself or it's motives? Maybe the machines already took over.
Ediscovery software, and I used a bespoke solution in that job, takes a job that can take weeks or months the and makes it possible to do it in days. Or y'know, you could use a filing system and do it in minutes?
It's not up to me to break you out of your bubble. Your comments are deeply out of touch with reality and I know that nothing I say will convince you.
I never tried a night train. Are there any good ones in Europe?
>If we do nothing, we're sending the message that these actions are okay.

I think it sends the message that these actions won’t trigger nuclear war. How would you even get public support for war with Russia?
> Two more likely possibilities: (1) Pornhub wasn't really checking

The article mentions it was not Pornhub doing the checking.
Personally, I can't start a day without a proper bathroom to shower and groom myself. An overnight train doesn't even come close to a hotel replacement in my book.
But there seems to be a pattern where many people just really regret the hours poured into gaming but don't regret hours poured into learning cooking or traveling or volunteering at a college student group (say taking photos of events) etc.

There are activities that produce long term satisfaction, while other produce long term regret. I don't regret having gone on a canoe trip but I do regret many hours of playing RTS games.

Maybe it's just me and my brain is prone to addiction to games, but it's a loop that's hard to escape. At first it's pleasurable, then I find myself playing through the night, just one more game again and again, I start to gain weight, sleep in, resent the whole thing but crave the fake-accomplishment and dream with the game. I might be an outlier. It hasn't ruined my life though because I always snapped out of it due to some external event that forced me to stop and then I normalize after some days or a week or two of not playing. But when living alone and nobody stopping me, I have definitely wasted months of my life on such things and have holes in my CV due to it.

Nowadays I just refuse to play games altogether. I miss out on some cultural references, but so be it. Same with TV series and binge watching. I miss out on them and become a more boring person but I just cannot do a little bit of these. If I start I'm useless for days or weeks.

It's easier to have willpower to just not start.
America is an incredibly diverse country, painting all of us with broad brushes is almost always doomed to be incorrect.

For what it's worth, I for one absolutely support the inalienable right to keep and bear arms while also supporting the right to create and watch pornography or drink alcohol, even though I understand none of these might be considered "harmless".
That only came after quite a while, after Google acquired them.
I think that's a flaw [if you want to call it that] in the presentation of the search results, not the underlying dataset.

If you click through to the OpenLibrary dataset, you can see that the data model understands that the variations are editions of the same underlying text.
The only thing more severe than a life sentence is execution... so... execute bad drivers?
Many of the popular conclusions drawn from the NASA study are not actually supported by the study:

https://www.gardenmyths.com/garden-myth-born-plants-dont-pur...
Yeah, I was referring to the hyperloop and the boring company as separate things.

I feel like the Boring company is what he settled on once it was made clear to him how monumentally stupid hundreds or thousands of miles of near vacuum tube would be in practice. Even if you could actually build a working prototype, it's hyper fragile and will just never be economically viable compared to other solutions.
>There will be N somewhat compatible ARM chips, that is to say they are somewhat incompatible.

This isn't how ARM's architecture license works. All ARM implementations are required to pass the same standard test suite.

>Architectural licensees get a set of specs and a testing suite that they have to pass, the rest is up to them. If they want to make a processor that is faster, slower, more efficient, smaller, or anything else than the one ARM supplies, this is what they have to do.

https://semiaccurate.com/2013/08/07/a-long-look-at-how-arm-l...
Edit: Surprised it took almost twenty minutes for the downvotes to start. It also proves my point perfectly. For what it's worth I'm not saying bicycle licenses are good or should be implemented. But it's the most well-understood example of this phenomenon.

This is the argument about why "bicycle licenses" aren't a thing. The number of drivers who aren't cyclists dwarfs the number of cyclists by many orders of magnitude in most US states. In many municipalities, some cyclists regularly break traffic laws and cause (at best) frustration or (at worst) deadly accidents. This leads to drivers-who-aren't-cyclists making the seems-reasonable comment that you should need a license to drive a bike the same way you do for a vehicle.

So let's say a politician supports bicycle license. This isn't enough to get anyone who supports a bike license to vote for them, because it's not a Top Ten issue for anyone on that side. But not only will every cyclist in their district vote against them, they'll campaign and donate to any opponent of that bill. If they even think you support the legislation they're writing checks to your opponent.

I'm not making an argument on bike licenses in particular but I can see a similar effect where a minority percentage of HN feels strongly enough about a given topic that they upvote the articles based on title alone. When an issue is particularly divisive, the odds increase that people feel strongly on both sides so you end up with the #1 posts on two different days expressing diametrically opposed positions, but both very heavily upvoted.
I lived in Cyprus one winter. It would only go down to about 5-7C at night. I was freezing. Actually, I got sores on my toes because the tile floors were so cold in the apartment and I needed to start wearing my sandals in the house.

It was a small one bedroom apartment. During the day it was fine, I had the windows open. At night, I'd run the two wall heaters, I'd wear a hoodie, and I'd be cold unless I was under the heater. To warm up the bedroom before going to bed I'd close the bedroom door, turn the heater on high, and leave it for at least 30 minutes. If I then went in the room and turned the heater off, within 20 minutes it would be cold again.

In Canada it can be -10C outside and I've always been perfectly cozy indoors. In my Canadian apartment now, I don't even run the heat at night and it's fine, and I only partly cover myself with the duvet. In Cyprus I was using multiple blankets and was uncomfortably cold in bed, even with the heat running.

I can only imagine people in Cyprus and other countries with poorly insulated homes hearing about the weather and Canada and fearing for their life. Meanwhile, it's December in Canada and I'm literally wearing shorts in my house now.
Content can also be only for 'friends' of the user.
Mill Computing
I don't think you'd need to target specific wallets, you'd probably just generate a ton of keys and match them against any known wallets.
We can reach Mars in a couple months. Beyond that, the only further places I could imagine humans wanting to go is Europa or Titan, maybe Ceres.
I never worked for Google. They wanted to hire me after the first set of interviews, but I took a different opportunity at the time. Interview process was an intense, and the interviewers were sharp. I came out even more impressed with Google. This was way back in the day -- early '00s. I would totally be excited to work for that Google. It's just that, well, there are lots of awesome things to do, and I had (what seemed like at the time) a more interesting option. I sometimes had regrets and sometimes not.

Second process was maybe 2-3 years ago. It didn't get to a full onsite, since after a few conversations with the team, it was clear there wasn't a fit. The old arrogance was still there, but without the same sharpness or cleverness. I spoke to a team working on a new product (under NDA) in a field I had a lot of experience in, and:

1) There were computer scientists without a clear understanding of the target market domain.

2) They believed they were the best-and-brightest, and didn't need to consult experts in the field.

3) There was a lot of hype and salesmanship.

I like to be surrounded by smart people, and it felt like I'd be the sharpest guy in that room. I was a better computer scientist, AND better domain expert in the field the product was in than anyone on that team. That's not a position I want to find myself in.

And I have a job which pays a lot less than Google, but I'm surrounded by smart people I learn a heck of a lot from, where I'm working on meaningful things, and having fun. I'm also continuing to build my personal brand.

Now a few years later, the product they were working on never shipped, so if I worked for Google, I would have likely been on a failed project. On the other hand, my mortgage would likely be paid off.
That all depends what you compare it to. 40% of the US population has obesity. I doubt 40% have a drinking problem. Yet any discussion of banning junk food is verboten, and no one seems to care that the US drinking age is way higher than most similar countries...
i think it would be best to optimize roughly for emitted VOCs as opposed to absorbed VOCs, if the thought is that the plants are putting good things into the air!
If the government changed the law rather than stepping up enforcement, that means that public support was not behind the law. This is essentially civil disobedience, and I say that is a completely legitimate strategy.
Maybe we should "send the message" that we won't install insecure shit on our networks?
Telegram is surprisingly good. My entry point to the Telegram rabbit hole was the Android development community, and I've found quite a few people who are willing to discuss stuff. We also have a lot of fun.