skysight-inc/HackerNews huggingface dataset:
>"IEEE Spectrum: So you can detect an attack just by looking at what’s being looked at?

Todd Austin: Yeah. Let me give you a classic example—the return stack. [When a program “calls” a subroutine into action, it stores the address the program should return to when the subroutine is over in the return stack.] This is a real popular place for attackers to manipulate to do what’s called a buffer overflow or a code injection. There’s only one part of the program that writes and reads from the return address, and that’s the beginning of a function and the end of a function. That’s really the semantics of the return address. But when you see a program attacking the return address to do code injection, for example, you’ll see writes from many different places in the program. So, these sort of unexpected, undefined accesses, normal programs never do. That’s a tell-tale sign that there is an attack going on. Now, some systems might try to detect that. And when they detect that, then they can kill the program."

PDS: Observation: An x86 emulator, such as Bochs, could be programmed such that it "knew" about where any given program/processes' stack is -- and explicitly looked for/flagged/logged/warned/alerted and possibly stopped (and dumped for further analysis) -- programs/processes whose stacks were accessed/changed in questionable ways...

Also, this leads to my next thought...

Why couldn't all processes' stacks -- have some form of hardware/CPU protection?

I mean, we have Ring 0 for OS code, and Ring 3 for user program code -- this leaves Rings 1 and 2 free for other purposes... well, why not put program/process stacks there, and guard access to them via the OS?

(Now, a better idea would be a custom CPU designed to know about and explicitly protect each process's stack memory -- but short of that, x86 has those extra rings...)

Yes, it would make programs slower.

Possibly much slower, depending on what's being done. And of course, the program wouldn't have immediate access to its stack variables, without OS intervention...

Maybe part of the solution would be in what Forth did a long time ago -- separate the call/return (control) stack from the local variables stack...

Like, maybe if the call/return stack -- is placed in a Ring that the OS controls (requiring an OS syscall -- which could also log/alert in the case of an anomaly), but the data (local variable) stack is still kept in a common area...

Yes, compilers would have to be modified to support that scheme, and yes, it would be slower... but could it work?

I don't think it would prevent all kinds of attacks (I don't think anything could) -- but it might help mitigate some of the more common stack-based attacks...

Also, the idea of encrypted pointers -- both on the stack and not -- is a good idea.

It would be slow if not implemented in hardware, unless the encryption was a simple XOR with some known-only-at-runtime value (which would be a bit slower than without it) -- but that would be the fastest thing that could implement an approximation of that scheme in software...

Anyway, a lot of interesting ideas in this paper...
If I pay you $1 trillion to write a song and you pay me $1 trillion to draw a picture, we have just increased the GDP by $2 trillion yet nobody is better off.
you new here bruh
The donate button on the front page takes you here: https://framasoft.org/en/#soutenir
This is true. So long as the government is run by capable people who are looking out for the greater good. This was Rome under someone like Caesar. But you can also end up with a Nero or Commodus running things.
It is really called out:

"Scenario #2 (Highly Likely) Madoff Securities is the world's largest Ponzi scheme"
Probably depends on how many prisons are private vs public.

I could definitely see a class system forming in private prisons (it is sort of there already). For public prisons, that's harder. They have to convince law makers to pass laws to enable them to get special treatment. That'd be pretty unpopular.

But, then again, MJ legalization is very popular and it still hasn't happened yet so who knows if policy popularity even sways politicians at this point.
You must have read a different book than I did, then. Because the book you read seems to completely ignore the battles Cleve Jones and others fought within the gay community. Keep in mind, the very title of the book was meant to apply to everyone involved in this crisis. Everyone. To miss that point is, frankly, dangerous.
Effective communication is a measurable indicator for career progress. There are mechanisms I can suggest to make what you say sound confident. Avoid umms, speak with good diction, be succinct when necessary. However, what it sounds like you are asking is: "How can I build influence that allows my decisions to hold merit when executing with a team?"

Conveying ideas for influence requires practice TBH. Sometimes it hovers into the sales world. You are going to get a no. That's ok. That means your pitch needs work. Your scenario I say your pitch approach might need more thought. As shared below, ideas simply need more capital. Can you share examples that work. Can you address concerns. Can you express the idea using different language. Sometimes the best way to grow here is to get feedback right away. How was my last idea received? Do you know what was missing to make it more effective?

That's all I have for now. You will do great!
No, in reverse, once one violates, the licence is terminated.

That has nothing to do with copyright per sē, and is simply a provision of the GPL, and thus has nothing to do with the Superbowl.

The GPLv2 rightsholder can independent of that elect to sue and seek damages for the duration of the copyright violation, but once one come into compliance again, one can re-use it, and the GPLv2 rightsholder cannot stop that.
Yeah he totally misses the point of Free/Libre Software, instead makes it about the big bad boogeyman RMS as the catalyst to dump the Four Freedoms.

Counter-example to his notion that GPL hasn't been successful: Linux.

Software Liberty is about protecting users, not developers. Recommending people switch to MIT totally misses the point, so being charitable the author is ignorant about the subject.
> Apple literally was caught using software upgrades to make older devices perform worse

You've literally just proved the point the parent comment was making.

The same outcome is not always equal to the same behaviour. The devices throttled themselves because worn batteries could not handle the sudden power spike needed by the CPU. You can very easily verify this by turning off the software fix on an affected phone—start pushing it and it literally just shuts off.

Apple still behaved deplorably here: as soon as this software kludge was triggered, it should have popped up a warning saying "hey your battery is no good, go get it replaced. Your phone will perform way slower in the meantime".

They undoubtedly sold more iPhones by not doing so. But they didn't slow down perfectly functional old phones, they slowed down phones which were effectively faulty.
Watch a few Jim Browning vids on YT or some of the other scammbaiter calls and you will understand better. People are mailing these guys 20k in cash in fedex boxes. Then mules here in the US pick it up at an airbnb/hotel/whatever (they hang around and wait for the truck to show up and claim it), take it home take a small cut and wire the rest along up the chain. You get a couple of those and it pays the whole call center for a few months... They estimate the straight out scams are around 20 billion a year. The quasi 'legal' 'cold call' stuff is probably much higher.

They are targeting older people who maybe let their spouse take everything and that spouse is dead.
>Don't excessive speeding tickets lead to a loss of license?

Usually.

>Perhaps a more sophisticated society will one day know our fears and punish us accordingly (cue film script).

That was a plot line in 1984 and IMO flies in the face of equality under law.
It's very similar to the Python/C distinction. Python will often drop into C for the use-cases you're describing. However, unlike WASM, Python/C is the wild west:

- The whole CPython interpreter is the "C-extension interface" which means that the CPython interpreter can hardly change or be optimized or else it will break something in the ecosystem (and for the same compatibility reason it's virtually impossible for alternative optimized interpreters to make headway), and because the interpreter is so poorly optimized the ecosystem depends on C extensions for performance. WASM presumably won't have this distinction.

- Without the abysmal build ecosystem that C and C++ projects tend to bring with them, building and deploying WASM applications will likely be pleasant and easy after a few years. Of course, if your WASM is generated from C/C++ then that's a real bummer, but fortunately this should be a much smaller fraction of the ecosystem than it is with C/Python.
Ask HN: I want to start legally hacking, help?
I'm a seasoned "developer" (been coding professionally since 2000, opened a dev studio, got bought out, now I'm solo consultant).

I'm getting more and more interested in breaching, and have done a bit locally and love it.

Is it possible to go from where I'm at, getting a good income, to InfoSec (hopefully not as a junior)?
Nit pick: so income zero means no fines?
This is a technique I largely stumbled into. My phone number is from when I lived in a different area, close to family. I've since moved to a new area code. Anyone that I know from that area code is already in my contacts. But a large portion of the spoofed spam numbers use my area code, and while I don't block them wholesale, it's easy to ignore any numbers from that area code.
Thats amazing! And the CRT with full size keyboard made me lol. They quote £1500 which isn't too bad considering.
> I mean sure it maybe adds less space junk than launching things into higher orbits, but it doesn't really reduce it, right?

Sure, but that's not really the point. Using biodegradable plastic is much better than traditional plastic that stays in landfills forever. "Just don't generate trash" isn't an option.
SpaceX is planning to launch up to 42 000 satellites (there are about 3000 now). Cheaper $/kg leads to more space junk and higher risk of Kessler syndrome, that doesn't need any qualifications, I think. If something goes wrong the fact that the cloud of debris will be there for 10 years and not 100 years is not a huge consolation
pure speculation on my part, but I also suspect the people at valve have simply never liked counterstrike. they didn't come up with the core gameplay (nor did they design the most popular maps), and compared against the rest of the valve portfolio, it really isn't their style to begin with.

I'm sure it's a major main to maintain and occasionally add features to such an old codebase, but imo the apathy runs deeper than that.
That is interesting and certainly has all of the pieces I am looking for. This project isn't anywhere near what I want for a final result, but would make the pieces easy to find as I am putting it together.
When you buy bitcoin, you get a share of the whole of bitcoin. You buy this at the current market value. You may hope it goes up, but it may not. You buy 1 bitcoin at market price, you have 1 bitcoin at market price.

In a ponzi scheme, you buy in at a fictional price and are paid interest derived from the investments of future investors. Bitcoin purchasers don't receive anything from future investments unless they actually sell, again at market price.

The word here is speculation, not ponzi. It's no different than buying/selling land that people may or may not want.
I think it is the Computational thinking course (MIT 18.S191 Fall 2020)
https://www.youtube.com/playlist?list=PLP8iPy9hna6Q2Kr16aWPO...

He is one of the professors (Grant Sanderson).
If there was only one person orchestrating and solely benefitting from the subprime crisis it would be easy to put them in jail but there are too many to be put in jail, it’s the equivalent of ‘too big to fail’ but for people, ‘too many to pinpoint blame’ type of thinking. All these people knew it was going nowhere but they kept imflating the bubble because all their peers were doing it also and that despite numerous people raising res flags at the same time.

Maddoff was a dumb thief, and very cunning indeed but he operated in silence. That’s not to say the same thing about the others who ‘gamged up’ knowing that in case of failure many fingers would be pointed out in too many directions.
Worth considering is that if a phone can be kept available but isolated then the holders have time to wait for new exploits to be discovered.

It doesn't matter if an exploit has been patched if the phone in question has been maintained offline for a year or two.
Why not? It's not like he's writing prescriptions on HN.
it does have an ED209 feel to it https://www.zonecollectibles.com/wp-content/uploads/2013/05/...
Any ideas how this compares with [go-kit](https://github.com/go-kit/kit)?

I like how go-kit's transport not just JSON and HTTP (e.g. gRPC and protobufs are supported).
> How many dead people would that "normal" have been worth to you?

A lot
Still if you are a corrupt mid-level CCP official you can just say send a bitcoin to account xyz and there's no way of knowing who owns that unless the money is transferred out to something identifiable. It's like Satoshi's bitcoins. There they are on the chain but you can't tell who controls them from that.
So they're incentivized to inflate their graduation rates to sell off the ISAs to investors who don't know better, since they need the cash now. Investors are left with a bill of goods: ISAs that will never pay out. Add in some securitization and tranches and baby, you've got a 2008 financial crisis goin'!
I actually feel like Disney would be willing to pay people to spend 2 days in jail in order to keep their fireworks show. You’ve just moved the cost from a fine to a salary.
Toastmasters. I did it for a few years and it helped a lot for work, job interviews and wedding speeches. It can be a bit over the top at times but it's great practice and will help with all the problems you describe.
Digital colorisation versus actual color photos from between 1909 and 1915
What is your setup for distributed tracing?
Nigeria’s naira weakens as CBN sells $20 mln to offshore investors
Like a lot of you, I don't answer my phone ever unless the number is in my contacts or I am expecting a call.

Today I got my first ever porn spam via SMS. So glad to have that to look forward to over the coming months/years. eyeroll
I just checked. I can get it rather cheaply from overseas pharmacies, and since these are not "Scheduled" drugs, I could do so legally.

You can get the kidney function tests yourself if you like on demand, as well, privately.
Doesn't that just cost society more? In actual dollars a 150 year sentence would cost taxpayers something like $10M (apparently prison costs like $81k/year in the US)
I think the much more likely method would be a laser that heats one side of an object, causing a net propulsive effect leading to eventual deorbit.

https://en.wikipedia.org/wiki/Laser_broom
Ouch. What's wrong with APNG?

https://caniuse.com/apng
I recommend reading this book: https://www.amazon.com/Quiet-Power-Introverts-World-Talking/...

I also recommend writing down your ideas. When you lose your train of thought you can refer back to what is written down.

Ask for help - tell the group you've lost your train of thought and ask what was the last thing you said. People do not want to see you fail, they will help you.

Acknowledge it is okay if you don't sound confident. It's only important to communicate what you aimed to communicate. Focus on that rather than what you sound like.

If you organized the meeting or presentation, send an agenda or materials in advance. Look for feedback in advance. Send followups to your information sharing. Summaries and further info. All this can be done in chat/email.

I guarantee that if you do these few things you will feel better within a month.
AI-Based = git repo that does simple image matching. How hard is find a weeds on dirt background? AI-Based is probably worth another 20 million when raising funds.

But on a serious note, this is great! Reducing chemicals and fertilizers is great for the environment and improving the quality of the food chain.

I'm sure that Monsanto isn't happy about this.
Antibiotics, and bacteriophage viruses, kinda are nanotechnology (albeit in the same limited sense that steel dates back a thousand years).

You might like bacteriophages — viruses which eat bacteria: https://en.wikipedia.org/wiki/Bacteriophage
How about all the other people who did not get covid but also stayed home? Shouldn't they all be complaining about fatigue and brain fog? Come on.
Same. My previous solution --- LUKS container mounted from a file with just directories and plaintext files in it --- was pretty secure too but pass is really convenient in comparison.

I'm currently playing with integrating bitwarden self hosted into my flow, eyeing a switch, but it's way more complicated to understand than pass...it does not make it easier to trust it.
Were the cameras off, like in Epstein's jail strangulation?
If your argument is it would be reasonable for you tube to automatically ban anything that could be a mention of crack cocaine we’re not going to find a lot of common ground on what is accidental moderation vs intentional censorship.
Wow, that sucks. Wouldn't a source-to-source compiler into Pascal be a good option in that case? Writing a simple compilers might also be a good learning opportunity for the more experienced. Compilers are a way simpler concept than they might seem and really easy to write too.
Show HN: Centralized Coin – A Centralized Coin
Hi everyone,

My main project is an online digital goods marketplace called flurly.com, and I’ve learned how hard it is to pay people globally. If Stripe/Paypal doesn’t exist in your country you’re basically out of luck.

Coinbase is a great first step, but the platform has high instead of low fees, and people save coins instead of spending coins.

I wanted to build a globally accessible, low cost way of facilitating payments online. Centralized Coin is my first attempt. A few highlights of the coin

1) Anyone with an email can participate

2) Each transaction is an efficient atomic database write (no proof of work)

3) Every transaction is publicly accessible and verifiable via an API

4) Two variables in the system - transaction fees & community compound rate. Read the whitepaper to learn more

5) Coins are minted by a central authority (me)

Shoot me an email at hi@flurly.com and say hi and I’ll send you 250 coins to play around with.

Thanks!

- JR
You think white collar criminals go to bad prisons?
I think Python is a good name because although it's arbitrary, there's very little domain overlap that could cause confusion: context can pretty much always tell you whether people are referring to the language or the animal.

Latino, on the other hand, seems to have a little more overlap: it's very close to Latin, an actual language, and also refers to the latinoamericano cultural identity, which is largely defined in relation to language. Thus the possibilities for confusion seem a bit greater (I think OP's suggestion of "hispanohablantes" would also cause a lot of confusion).
I bought one for $90 a few years ago. It's truly wild how many video games I could buy if I sold it today. I'm not sure if I'll ever buy that many video games again in my life.
I said nothing about genealogy. I really don't care for your comparison.

You inherit more than genes from your parents. You get a home, a country, an upbringing, varying amounts of security and nutrition and education... And many for many people in here, money.

This all translates into deep inequalities from birth that we do too little too recognise, let alone rectify.
It says it has local-by-default scoping, which would be a Python influence. But now I'm not sure. When I tested the program the variables set inside the function seem to still be present after the function returns?
the flagged comment said something along the lines of "because meat eaters don't want to feel guilty," which seems like a reasonable take to me. it's at least part of the answer.
As always, when someone presents a solution with "just," it's hastily-conceived and leaves out a lot.

You have only two STDs in your list. Many more exist. You've got your herpes, your clap, multiple strains of HPV. Then you've got nasty old Hep C lurking around, making A and B look like chumps. There's oodles of them and treatment isn't just a wave of the script pad for some.
I think part of the problem is the funnel. They don't charge students until a month in. They start off with a large number of student who they anticipate will drop before the ISA kicks in, then they prorate the ISA, although not evenly. The count should probably start once the ISA kicks in, even if the student doesn't get through the entire program. Fair enough right? Otherwise do not charge students unless they graduate. I think they aren't transparent about how the count/ outcomes are measured.

My biggest concern with the program, however, is the instruction and the lack of one on one feedback with qualified people.

The other concern is will their desire to fill diversity quotas. Perhaps this is coming from the market, demanding certain races in hiring, but in my personal experience, highly qualified people who can easily pass the entry exam were denied the female scholarship and given to racially diverse woman who couldn't pass the entry exam.
Also, the founder tweeted out that over 50% of their students surveyed were LGBTQ like that was a goal of some kind.

I think Lambda is more concerned with racial quotas than training software engineers. So if you want a token hire look towards Lambda.
I would like to see this type of thing become more popular with general law enforcement.

It is very frustrating to have essentially no recourse available to stop the constant vulnerability scans targeting my house.

If random people constantly walk up to every house on the street looking for pick-able locks, the police are (Setting, for a moment, aside over/under policing and other issues) available to help stop them.

But, for the digital equivalent, our collective response (especially among technical people) is typically "[shrug] Make sure your locks are unpickable and your windows unbreakable. And if you cant handle that, then just move in to the Facebook highrise"
And if you do end up stealing, make sure to steal from the less-off. Afaik nobody has yet gone to prison for liquidating an employees' pension fund, for example.
I think the scenario that immediately comes to mind with OPs concerns is when a speaker speaks too long.

In my experience, there's a series of beats that work in group settings, and the most effective speakers, in terms of making contributions and influencing the discussion, tend to interject with shorter contributions. There are times to craft expansive, descriptive stories, but often, a good contribution is a short, clear one.
Good comparison to Western restrictions on slander or libel because Singapore is one few countries to actually have a an "anti-fake news law" which many in the West desire and it absolutely proves the fear that it can very easily be abused
Science Has a Word for People Who Just Annoy Everyone for No Reason(2019)
Looking at how my nation state is moving to tax even more despite having world highest tax rates, I'd say evading taxes and capital controls is going to be a feature for me as well in the not so distant future. Citizens evading getting taxed to financial death is a pretty legit - surely not legal - use of technology.
Except as privacy coins are delisted from exchanges more and more.

The ownership of the monero itself may be granted the presumption of innocence however if you have a bunch of El Chapo Bux they'll just start digging for other things.