skysight-inc/HackerNews huggingface dataset:
Bit of a misleading title by Reuters.

They accessed the business networks of the NNSA, the agency responsible for maintaining the nuclear stockpile, but did not access the networks managing the actual nuclear weapons, as the title half-implies.

There was no threat of random nuclear weapon exploits, those networks have not been compromised as far as we know.
It's a multi-hundred-thousand line project (current count, excluding tests, is about 210,000). Like any project of a similar size, it has a history of security vulnerabilities. OpenBSD removed it because it was too much code to audit. OpenBSD dodged several issues like this RCE (https://research.checkpoint.com/2019/select-code_execution-f...) as a result.

See https://www.cvedetails.com/vulnerability-list/vendor_id-9237...

Hundreds of thousands of lines of code are simply going to have vulnerabilities and bugs. It's unavoidable with that level of complexity. I'm skeptical anything that complicated is a wise choice for a general file format -- especially when smaller, simpler, and more easily debuggable and independently implementable formats exist.
>Everything we accept as science started off as "kooky".

An excellent example of this from modern times:

>An Israeli scientist who suffered years of ridicule and even lost a research post for claiming to have found an entirely new class of solid material was awarded the Nobel Prize for chemistry on Wednesday for his discovery of quasicrystals.

“People just laughed at me,” Shechtman recalled in an interview this year with Israeli newspaper Haaretz, noting how Linus Pauling, a colossus of science and double Nobel laureate, mounted a frightening “crusade” against him, saying: “There is no such thing as quasicrystals, only quasi-scientists.”

After telling Shechtman to go back and read the textbook, the head of his research group asked him to leave for “bringing disgrace” on the team. “I felt rejected,” Shachtman remembered.

https://www.reuters.com/article/nobel-chemistry/corrected-up...
Hopefully the networks that have launch and scheduling are fully airgapped.
> Fat acceptance is bullshit, being fat is unhealthy.

Fat acceptance is about ending the disrespect leveled at fat people by society as a whole. Like many other groups, the obese are "acceptable targets" for all sorts of mockery and hate. Changing that is a good thing.

Unfortunately, a lot of fat people seem to have somehow deluded themselves into thinking being obese is healthy. This is of course absolutely false but these people keep posting baseless statements in an effort to remove the negativity associated with obesity. They turned fat acceptance into active promotion of obesity...
Because teachers are not operating in a free market. Teacher salaries come from local governments, who may have to cut budgets.
Hopefully consumers catch on and expect that all reviews are fake or manipulated.
Honest reviews are hard to come by.
Nobody worry: There's a security company named SolarWinds that has a lot of experience when it comes to getting hacked, and they've already got contracts with the Federal government. Working together, I'm sure the Feds & SolarWinds can leverage those existing relationships to help get to the bottom of this situation and make sure it never happens again.
What is a nuclear family to you? The normal definition is parents and children. Even if their schedules are too full.
Bitcoin: Decentralization Deserves a Chance
Why California?
> For anything I use with any kind of regularity I’d hate it. I already have this problem with services that decide they really need to send me some code by email because they don’t recognize my device (because it’s been more than 30 days and Safari killed their cookies). And then every once in a while the email doesn’t show up for 45 minutes for some reason, leaving me with no recourse.

It's incredible to me how impatient we've become as a society.

As everything is given to us faster and faster, with less and less financial cost, the more we demand this of everything going forward. Anything that comes shy of this demand by mere minutes is shunned as unacceptable.
If the battery of the detector is not too big, there should be no problem. I did bring an oscilloscope (with probes and all) and lot of other electronics with no issues. The only piece of electronics TSA checked longly was a half broken laptop with no battery. This really intrigued them (so it got re xrayed and the full strip test plus hands and clothes).
Seems like they are intentionally asking for regulation, saying they have absolutely no consensus mechanism to do what is necessary until Congress forces them to
Yes, the social factor is...obese people eat more and exercise less. If you are assuming that every other developed country has this problem, they do not. In those countries, people eat less and/or exercise more.
Does this mean the nuclear systems are less secure than the voting machines?
It seems that the U.S. approach to “cyber” defense is a complete shit show... I can’t imagine the level of incompetence and bureaucracy that led to this Solarwinds oversight - this is amateur hour stuff.
this isn't about tracking users, it's about cookies. no cookies doesn't mean no tracking. it's just a workaround to improve UX. "visiting our website does not send any information to third-party analytics services" - but presumably third parties are still able to access this data on request. their privacy policy probably reflects this. if you visit a website and don't want to be tracked, make it as hard as possible for the host to do so, don't rely on what the host says. they can do anything they like with visitors' data. anyone who hosts websites will confirm this
To take you literally, all of life lives in a vacuum. Your argument is nonsensical in the worst of times. In the best of times, yes we make do and we ignore the plight of man. But I would hope that in war or in pandemics maybe we would in fact help each other out as these times remind of us our humanity where we all suffer for the common good. And when we get back to the the best of times, I would urge you to read up on Keynesian economics; if you want to float all the boats.
It used to be extremely common to allow users to select features at install time, mostly in order to save disk space. It’s not particularly common any more, and I don’t think any app stores support the concept.

Deactivating features based on battery life? That’s absolutely still a thing on native apps. If you throw Windows into battery saver mode, for example, the acrylic material becomes opaque; if you put Android into power saver mode, native controls will shut off their gratuitous animations, things like that. Nothing major, but a bunch of small things.
There is reason for optimism. Less than a decade ago you could barely find something in the middle aisles of a grocery store that didn’t have trans fats and now it is relatively rare. These things can be overcome in relatively short order if the will exists.
Thing is, we're going to get the robots and not UBI, so that's going to be a problem.
In other news, Trump’s twitter password until a few days ago was “maga2020”. I’m not joking.
It's not a claim; it's a statement of opinion, as I clearly indicated.
That would be horribly costly at scale so i doubt they would envision that.
They also remove reviews if you point out fake SD cards. It might be up for a few days but the seller will have it removed under the reason “you didn’t purchase this item”.

I’m really close to buying, and leaving reviews all while doing a return.

Sad part is amazon knows about this. They just don’t care because they’re making money and most people won’t blame the card for being fake they’ll just assume their camera or whatever corrupted the clips.
Show HN: Phrenemies A social(distanced)deduction browser game thats free 2 play
Streamer Banned over New Twitch ToS
There just isn't the population density in about 90% of the US.
As you know it's hard to get long refreshing sleep when you have DPSD need to be up by 8.
They said "business network" so MS is a likely suspect. Then again the full extent of SolarWind's contracts with the government, and the impact of their own hack, aren't completely clear and it would be a decent sized coincidence if multiple nation-state hacks around the same time we're unrelated.
Has anyone tracked if these guys donated to the GOP and Trump?
At every turn, Boeing is making it very hard to not commit to flying AirBus.
Too bad Biden is a China lap dog...
No one is operating in a free market. Free markets don't exist in the real world - all markets have externalities and influences other than those created by the markets themselves, if only due to those markets existing within states under frameworks of law and regulation. Arguments from simple supply and demand never describe reality accurately enough to be useful.
If you want to trade, use a derivatives powerhouse like binance. Trading crypto spot is mostly just a waste of time. Until Coinbase and Gemini add futures and swaps, no trading firm or individual is going to trade with them. Full stop.
Dang, the link should be replaced with this one.
The reuters article is a single sentences simply referencing this original article
I think this is true however there is a tendency to think that not using Python can only mean using C++, Something on the JVM, etc. C++ is an awful language, you can do better (albeit it's potentially not for the faint of heart)

Static Typing is important, but the thing with Python is really the lack of a compiler - compilers (ignoring efficiency) catch bugs now rather than half way through a job (Obviously Linters do exist but a sufficiently advanced Linter is not only repeating work a compiler would've done, but also probably requires some kind of help e.g. annotation)

An example of something that demonstrates Static Typing working and not working at the same time: Compare the code of GCC and LLVM, they're both in C++ (now) but one is hugely better structured and easier to read - GCC grew organically which is part of the problem, but LLVM was specifically designed around a certain architecture (And still grew quickly).

To paraphrase Batman, "It's not what type-system I use underneath, but what I do that defines me" definitely applies but drawing equivalence between all code regardless of language isn't right either - the language you use affects the way you code and how you structure your programs.
You’d think so from reading [1]. [2] though paints a very different picture.

> The attacker can submit a maliciously crafted database file to the application that the application will then open and query.

I think it’s not impossible to secure SQLite better but it takes some work (like how Chrome sandboxes it in a separate process).

[1] https://www.sqlite.org/security.html
[2] https://www.sqlite.org/cves.html
Trazodone actually increases deep sleep and is associated with reduced risk of dementia.
Yeah. Video games are literally designed to be addictive these days. Many mobile games are essentially gambling...

http://www.gamasutra.com/view/feature/131494/behavioral_game...

Anyone who's ever played some gacha money sink will understand the danger they pose. It seems harmless until you're waking up at 4 AM to do daily tasks that boil down to nothing but resetting a couple timers.

The worst part is the traditional games industry is watching. They really like the way these mobile games generate revenue. This sort of design is starting to show up on the more traditional platforms too...
SolarWinds doesn't have a Chief Information Security Officer
"Most secure <whatever> in history!"

/s
Hey Advait! Glad to see your work here man :) Will be watching the project closely over the next year. Having recently re-built authn + authz using Cognito (we evaluated Auth0 and building it ourselves as well) I can confidently agree that doing auth right is hard and complex. Especially once you get into social providers, keeping identities synced, MFA, etc. Excited to see where the project lands!
A home appliance was getting 1 star reviews in Amazon because they didn’t include customary “starter” kit of baking dishes. Nothing against the product . The reviews are also worthless. Think from the perspective of sellers. If a number generated by an algorithm that is influenced by bitter people who were pissed off by someone that day is deciding your product placement and fate. You will do whatever is required to make it right.
you don't need to know the IP address , you can just dump the ARP cache and look for the MAC address you need.

on Linux:

$ arp -n | grep "MAC_ADDRESS_HERE"
192.168.86.23 ether MAC_ADDRESS_HERE C wlp4s0

if it's in the ARP cache it's "home" (or rather was, within the last 60 seconds, or gc_stale_time)
I wonder if we have dead man switches.. In a MAD world you would want to launch without human intervention from isolated systems.... I wonder how that would work... maybe it's not possible.
A lot of countries aren't number one.
Though it's not what they've done so far, it's what they learned, and what they may have left behind that is more problematic.
Why should the US claim moral authority? It’s the least moral country on Earth - stolen, racist, solely designed to funnel wealth to white men.

China deserves it more than us.
Yep and it seems rtings is finding that out too. It’s very expensive to buy retail products so you end up funneling people into amazon links, and of course there’s some bias to push the more expensive yet “reasonable” option.

That said rtings at least standardizes their tests so you can ignore the editorialized part of the review.
> Zoomers on TikTok hate capitalism and the military, and it seems like they're being indoctrinated by an "algorithm".

I don't see how that connects to your larger point. Can you please explain?
I think we are all legally required to spy if asked.
JetBlue and Delta (soon) are all Airbus fleets if that helps.
Don't give them ideas.

If Amazon could staff their warehouses with homeless people, let them sleep on-site and only pay them in expired goods, they probably would.
WhatsApp Pay goes live in India
How would you compare this with something like openam or spring security?
They do. It’s always a catch all “violation of our policies” and very rarely a real reason.
Is CRDB that much better to justify all of this.

Getting your boss to buy into a new tech is hard enough
Oddly, after all their research, they get the meaning of his name wrong.

It’s actually Black Ploughman (or Plowman if you prefer) [0]

[0] - https://www.youtube.com/watch?v=4zYCCR0kVvs
https://threatpost.com/air-gap-attack-turns-memory-wifi/1623...
OBOGS is terrible. We fly OBOGS and non OBOGS aircraft of the same type. Everytime I fly OBOGS I cough all day. Liquid Oxygen - it's great.
> I have. It depends where you work.

Is the company that you worked for, are they still in business? I'd be surprised if they were. If they are, I'm curious how large this business is. B/c I suspect they are able to charge it (the losses) to the owners.
Yes, they can do anything with the user's data, if the user has consented, or if they are willing to break the law.

The tracking request you see above requires informed consent under GDPR, and GitHub does not ask for consent before collecting browsing and device data that is tied to GitHub usernames.
The CIA "remote viewing experiments" were part of a PSY-OPS against the American public, and, incidentally, anybody spying. If he was involved there, that ties it all together.

I.e., there were not ever, actually, any such experiments, or any of the other obvious BS. There was, instead, an operation to convince people that there had been such experiments. The operation was a success: people do believe it, to this day.

"Men Who Stare at Goats" is a terrifying book by Jon Ronson exploring the program. You have to read between the lines to pick up the full consequence.

This stuff has all the hallmarks of such an operation. It is hard to imagine what point it could have. What we know that we don't know is what they are up to, or why. The patent language is spume blown off the top of the wave. The wave itself we have no information about.

Talking about "intergalactic flight" is fundamentally the kookiest bit. What galaxy would you fly to, and why? There are a trillion solar systems a thousand times closer, in our own galaxy. Surely one or two of those would be of some interest? Or a planet, a trillion times closer than that?
For anyone curious what the fuss is about their previous game Detention is widely available.
Part of the problem is thinking in "all or nothing" terms. Don't be a Sith.
Yes, I too took Econ 101.
A modern library of public domain movies – GitHub
I like the concept, and I like having that the webpage is loaded in a frame so you can keep your controls on top. One thing that might make it easier/faster is if you could use the keyboard controls to go right, up, etc.
> Another angle still, is why does Amazon get to have the benefit of workers who eat and have homes when they do not pay enough to enable their workers to eat and have homes?

Because the workers do not have any better option, and working for amazon while making 80% of your required expenses, is better than making 0%. It's the same reason why workers in developing countries work in sweatshops. The working conditions might be terrible, but starving in your village is worse.

>If we could set aside the suffering of the individual (which we cannot) one solution would be to let these companies devolve until they are entirely staffed by starving homeless people and see how that effects the productivity of their workforce.

This doesn't make any sense. Just because someone's homeless doesn't mean they're unproductive workers. eg. if they were living paycheck to paycheck and they were laid off. Besides, if the applicant pool is big enough and there are more job seekers than positions available they can have their pick of workers. For your scenario to work you'd need need enough people willing to boycott amazon as an employer, and given the history of consumer boycotts I doubt it will work. I'm sure amazon raising their wages a few dollars will convince enough workers to break rank.
Capitalism is fuels our wealth machine. The military helps project power and protect our interests.

If younger generations grow up hating these structures, they might vote against them.
The Full Text Search extension (FTS) (FTS4?) has been a repeated source of issues.

If you stick with the core, and disable some of the shiny features, the track record is better. Though still not spotless, iirc.
And yet half the reviews seem to be about shipping or something
Adding Composite Video to a Famicom
This is misinformation presented very confidently. Unless you give a date for your resignation and the company honors that date, it is a termination. She alluded to one in the future but didn't even give a specific one, as I understand it.
A Close-Up of Covid-19 in Lung Cells
We make the biggest blockbuster movies. Have you even seen End Game? What about Frozen? (Not the sequel) The snowman Olaf transcends national borders. We'll be fine.
Sure, but the lower income strata are also the ones who are more disproportionally fat as well, so they benefit. Something I've always found amazingly annoying is the tendency to throw pragmaticism out the window for "virtue points".

Also, chefs at high ends restaurants is a non-sequitur. People, even of wealth, do not eat those every day. And those with the capability to do so are a tiny subset of the population. Furthermore, there's a negative correlation between wealth and obesity in developed countries.
China has massive internal problems, and all data out of china's government are falsified and outright lies. China is a paper tiger in more ways than one. In 10 years, the power struggle between west and east will be a stalemate, and eventually both super powers will be overtaken by a growing power from India. India will be the powerhouse of the 21st century IMHO
I wouldn't say the trend on HN is necessarily partisan, but more from the kind of people who voted for Trump because they (for some absolutely bizarre reason, but that's besides the point) believe in the "Donald the dove" thing. You see the talking points amongst the hard-left, bizarrely, i.e. I have no illusions that the CIA gets up to much better, but drawing moral equivalency between the KGB (in a new suit) and the US Government is a common theme on some HN threads and it's absolutely bizarre (One gains new perspective when Novichok is used within a few miles of your house)

This is partly why I find the "no politics" rule on hackernews absolutely hilarious sometimes because it's such an insight into the American psyche where everything is political but also in denial that politics is anything other than a catch-all term for anything involving people, power and any end result other than sex or violence.
It isn't. And how often have you lost weight eating junk food yourself? I have done it...no effect. Satiety doesn't matter...thinking that it does is why people don't lose weight. You will be hungry, it will be unpleasant, but continue. Again, this is the fat person with the diet soda effect...most diets that exist don't work, that is why there are so many fat people. Reduce it to something simple, measurable, and it works. The idea of Good/Bad food is destructive for weight loss because it introduces guilt and complexity.

Also, your basal metabolic rate means you can lose weight eating two medium pizzas a day...again, it is very hard to gain weight the way many people do, it is competitive eating amounts of greed done daily, and very few people have a strong idea of the calories in food...just vague moralising about Good and Bad.
I love that it's impossible to tell if you're mildly upset at the current state of this post or asking a mod to change it.
The irony is that Boeing are currently the only ones who produce an airliner with bleedless air (the 787); all Airbus jets still use bleed air.
Nobody wants to talk about the easy, basic stuff. And that fact makes finding the easy, basic stuff really really hard.
I guess this means that M$ is no longer a valid criticism.
If your point was to be purposefully obtuse and present a strawman, why bother?

Either way if we didn't have whistleblowers for very bad things that weren't illegal, we would never make laws to make them as such.
Is it really the improvements, though, or is just that Git has less resistance now in 2020 than it did in 2008?

DragonFly BSD has a smaller src, but it's been using Git since November 2008, converting away from CVS directly into Git, only a few months after FreeBSD moved from CVS into SVN in May 2008.
don't SUV's fulfil that niche now? Basically station wagons with a slightly higher driving position?
source: Drive a Kia Sorrento with 7 seats - two in the back row that flip up.
It’s weird they do that. It’s one of the largest red flags that indicate it actually is a problem.
I agree static typing is no silver bullet.But when there is a choice between looking at python code written some time ago and wondering (and at times speculating) what type the function args are v/s inferring from function args (say in Go) is a smoother experience, especially when debugging a thorny heisenbug causing an outage.
Most languages have something like:

for (ElemType x : collection) {
# use x here
}

or:

for (elem : collection) {
// use here
}

for dynamic languages or statically typed ones with lots of inference

Not sure what you can do with this that:

collections.each(x -> {
// use here
})

can't.
> We changed how our sessions work to get around it

In other words, you fixed the bugs in how your original implementation relied on bad assumptions that it shouldn't have tried to rely on to begin with.

The only real quibble here might be that duplicate requests cost you unnecessary transit.
no reason the United States has to be an empire
Thailand is very much LINE and a close second is Messenger