skysight-inc/HackerNews huggingface dataset:
> I never seen such a 'rootkit', meaning a rk complete at every level that disguises EVERYTHING

Isn't that the same as saying you'd only notice an incompetent attack?

I've seen this twice (public web server running a student's exploitable PHP followed by a kernel 0-day) – once it was possible to see it due to a bug in the hiding logic (IIRC it compromised ps but not /proc) but the other was unnoticeable on the box itself. This was a decade ago and it was neither uncommon nor particularly sophisticated back then – the actual kernel exploit used to install it was novel but the rootkit code was widely available.

I caught both of these attacks quickly because they were foolish enough to use IRC as a control channel and our IDS immediately caught the traffic – want to bet against someone realizing there are stealthier ways to report home?
That's what Google has been doing with Android for years.
Ask HN: How to go from a Lead to Senior/Architect
Hello,

I am working as a Lead developer working in the java enterprise space. My current role requires me to have workable knowledge of SQL, ORM (Hibernate), Spring, Java, HTML, CSS, LESS, JavaScript etc... I am capable in these technologies, but not an expert in any one. What I want for myself is to continue to grow and gain the skills that are typically ascribed to software Architects (I am not clear on the definition of software Architect). How do I do that? The unfortunate thing is that the team I work on is fairly small and I am the most technically capable person. Thus, there is no one who I can learn from. So, how do I gain Senior/Architect level skills on my own? Read books? If so which ones? Work on open source enterprise Java projects?

Thanks
… and make sure that those servers run different kernels, syslog implementations, etc. so they don't all get hit by the same exploit.

Probably a good idea to make sure that at least one of them is on a read-only network port, too.
I know a lot of programs that would have issues with Ctrl-C - I understand why the OP didn't want to do this.
this is exceptional advice.
Something is being covered up and the explanation for such huge mistake doesn't add up.
1. Why was such a large amount of a potent virus stored in one container or multiple container?
2. Why all of it was available to a single/group of persons ?
3. If it's a group of person, then it must be a planned act.
4. How can Pharmaceutical companies pour something directly into the water channels without going through some kind of filteration and detection system ?
5. Why there is not more internet/media coverage on a such a big incident ?
Assuming this isn't a joke, get out now.
Aksaray Kombi Servisi, Kombi Servisleri, Kombi Tamiri, Kombi Tamircisi
90% of startups fail. These are well funded startups.

There has to be an actual need for a product in the market and need is not easy to predict.

Even the successful startups are succesful because of a little luck and being in the right place at the right time.

Luck is not the best financial planning strategy for feeding your children.
Can you do all the hard work and I use whatever it is to make money or get credit? Because this is what happens when you allow plagerism.

the interesting thing is hat if we were talking about gnu license violations, the offender would be called a thief (which has happened numerous times here on HN)
Samsung paid Microsoft 1B under the patent agreement last year
Bring the NC Widget Apple Removed in iOS 7 back with this app
I don't get it, either - instead of suing the man, they should have just hired him and extended their business.
Samsung Paid Microsoft $1B Last Year for Android Royalty, Filing Says
There are now several 'known' ways in which this can happen, all of them seem to involve a US court at some point in time so if you're running a legitimate business on a .com and you acquired the domain as first registrant from a registrar.

If you acquired that domain through the 'aftermarket', especially if it had lapsed we now know that if that entity should ever go bankrupt there is a potential problem.

And even in that case I assume you could object against this in some way (though the story does not detail any of that so far, we'll have to wait to see how it all plays out).

I'll be following this quite closely, to say that I'm surprised here is an understatement.

There is even potential for a chain of bankruptcies causing repeated clawback of the same domain!
I don't see how this should embarrass anyone who thought sending him to prison for so long was a bad move. If anything, it supports their argument. It sounds like he picked up his racist habits in prison, which is kind of notorious for that kind of thing, so this just goes to show how putting people in there does more harm than good.
Hi! You get one round of point-sniping. After this, make a coherent point if you want a reply.

It wouldn't preclude using a different protocol. It means that there's no point. If every HTTP/2 server is also an HTTP/1.1 server offering the same content then there is no practical need to distinguish the protocols.

As to URL-hiding, you know that's controversial, and for good reason. Their theory is that a lot of people don't normally look, and that could even be true. Many always will, though.

More importantly, that's not the only place that people use links. Every time they share one via email, for example. Every time they type one in from a magazine or the side of a bus or a flyer. Every time they cite one in a paper.

Forcing those people suddenly include a protocol distinction that is meaningless to them and unimportant to the server involved would be a pointless waste. HTTP/2 is purely an under-the-hood improvement. They didn't have to change the URL for SPDY, and they don't have to change it for this.
stop licking apple azz, its just a company that sells stuff, not your brother that will hear or care bout your opinion.

Do you write open letters to a car producers that they make more plastic cars every year?

The only way you can force them to improve their products is by buying products of other brands. When they notice lower numbers in their spreasheets, they gonna do something. Either improve quality/increase innovation or drop the price. You benefit from both.
Oh man, you reminded me of LDIR tricks, with loaders (tape loaders!) decoding stuff in tight manually written decoding loops... and with the final decode, overwriting the decoding loop itself.

Bam, you're in the game.
I don't think you've addressed the sort of nearly completely manufactured experience that really qualifies as mass tourism.

You know, all the little destinations that are really well known for their fudge, or Disney whatever.

Or in the story, where the experience differs from eating lobster only in that an unusually large number of people are also eating lobster in the vicinity.
Hardware development platform.
Yeah good point. Others have also made good arguments that it's silly to base your price on cost-of-living. :)
If you have at least a year of experience, I would put yourself back out on the market. That's junior-level pay (which is what I make!)
People here who are into cold water do it every day. It is supposed to be healthy. Cold water swimming on itself is not usually goal for people in here, it is more of a next steps when cold showers do not feel satisfying for them anymore. Most of them keep cold showering every day, but stop going into lake for some months. I do not know when exactly they resume activity, I never cared enough about it.
US military can learn from game marketing, says ex-Call of Duty director
Mario doesn't show up on Firefox; so the whole thing was pretty confusing to me.

It makes slightly more sense when I try it in Chrome, and see Mario and can see the slides everyone else is talking about.
To piggyback off your comment, I'm a backend developer (primarily Python/Django) with 1.5 yrs experience making 60k/yr in NYC.I feel that I might be underpaid and plan on asking for a raise but I'm not sure what salary range I should price myself in. Any NYC devs here able to give me some feedback?
There's one good reason - sometimes feature detection lies. Or the feature you are looking for is implemented nonstandardly (brokenly).
I'm not sure it is 45 liters of polio virus. The expression used is "concentrated polio virus solution". I guess that includes whatever they use to produce the virus, or maybe it is a concentrated version of the end product that is taken orally and contains ??? percent of non-virus stuff.

One could even parse that phrase as "a concentrated solution of the stuff we use to create polio vaccin; wasn't used yet, so it should not contain polio virus, but it was in our security zone, so we take this seriously."

Other sources speak of 45 liters of liquid contaminated by live polio virus, which is something different yet.

In summary: I do not know how to interpret that number.
There are also no indefinite exponential curves in nature. The right way to think about it is trying to figure out what the bounding resource (its eventual limit) might be.
Royal Rumble – John Cena, Dean Ambrose VS Randy Orton, Corporate Kane
Nginx, 10 years since initial release
Java Annotations
It's not about licking nobody's ass. It's about a consumer that feels bad because he's clearly seeing a company in decadence.
A neat thing about those seems that you shouldn't even need persistent GPS to keep them synched. \for most applications an once-in-a-lifetime sync should be enough.
Yeah, the OP[1]. A lot of the returned results are Java code, alternatively there's also [2].

[1] https://searchcode.com/?q=if%28version%2Cstartswith%28%22win...

[2] http://docs.oracle.com/javase/tutorial/essential/environment...
Enabling 1920x1200 HiDPI Resolution on 13“ Macbook Pro
Thanks @elisatwtt.
On the contrary, the whole point of software is its effects. They are only side effects if you're not able to encode the effects in the type of the function. Haskell doesn't treat effects as less important, it treats them as more important by allowing (and, as a consequence, forcing) you to reason about them explicitly in compiler-checked ways. This lets you do great things like have STM transactions with a guarantee that retrying them won't screw anything up. It also lets you define your own kinds of effects that you want to track and plumb them through your system in a coherent way. And it lets you write code that doesn't care what kind of effects it's working with, and yet which can still be used in contexts like STM that need to apply restrictions.
You should probably be making around 100k
The number you're looking for exists in some theoretical sense, but I don't think knowing it will do you any good.

The price appropriate for you is the one that when you charge it to the market you can reach, you'll sell the number of hours you want to sell.

This depends on your skills both as a programmer and as a marketer. Your skills, the market you can reach, and the broader market are all changing. Indeed, it's your job to expand the first two.

Treat this as a set of experiments. Try setting your price at $15/hour. Can you sell all the hours you want? Great, then tell the next client who asks that your price is $25/hr. Eventually you will discover a level that keeps you as busy as you want.

At that point you may, if you like, start asking how you can bill even more. New skills? Better marketing? Different clients? Building a team? Alternatively, you can just keep plugging away.
To be fair, the EU has more ports and a shorter distance from ports to the final destination, and ships are more fuel efficient than rail, so there's less need for long distance rail transport in the EU.

In researching that, I came across http://www.trforum.org/journal/downloads/2013v52n2_04_Freigh... , which argues that (in 2000) 83% of the differences in ton-miles can be explained by increased use of sea/non-surface mode transport, reduced distances, and a commodity mix, specifically coal transport. (Something like 40% of US rail tonnage-miles from coal, while it's about 15% of the EU's.)
I heard this a decade ago, and maybe this time it will actually happen, but the third-world has yet to suck down the wages of domestic software developers.
I generally agree, but I'd amend that to "there are few good reasons". When an API is present but buggy, sometimes there's no good way around a version check. It can still be regarded as a last resort.
With enough ingenuity the tricks in assembler can be automatically translated.
I work for a company that converts legacy languages like COBOL and mainframe assembly language to Java or .net. The founder has a bunch of programs which analyze the code. In the case of mainframe assembly there are many weird tricks. Self modifying code or jumping into the middle of an instruction are common. There is even one program where the code jumps into a constant to cause an abend.
The translation process works like a charm.
My job is to get the translated output working in java and compare it to the original to make sure the translation works. A few things need to be tweaked by hand, but every once in a while we'll get a series of programs where the original coder uses the same tricks over and over again and a new rule has to be added to the translation tools.
Some programmers used all kinds of odd tricks. I can tell when a program was written by the same person, just by the style of coding.
It's a fun job.
I liked your post.

The issue is that with modern technology,tech is not just replacing ONE job like fish catching.

Tech is replacing ALL jobs..... fish catching, clothes making, accounting, medicine, programming, etc.

Sufficiently advanced tech can replace just about ANY job.
And do it better than a person can.

So the issue is where does everyone go?

And I don't think 7 billion people can all be inventors.
So, when they get to Windows 19 do they need to skip to 21 to avoid all the 2000 checks?
'I Couldn't Smell, and Then I Died'
Show HN: Evolution from Code Snippets to Markdown Pages
That's not even half of "junior-level pay" in a top-20 city, let alone NYC.
Price is relative to how available, responsive and bug-free your work is, and how good your attention to detail is before you ever write a line of code.

A key thing you can do is maintain a public github account and show the quality of your problem solving skills and work. The people who pay more find these types of insights useful.
If we use the term drupe, it sounds slightly less crazy. Drupe enabled reactors seems like a phrase I could get behind. Fruity Reactors, or the Coconut Reactors do not inspire confidence. Though a bag of fruity reactors does sound tasty.
I thought they split because the original owner died and left the two halves to his two sons.
Ask HN: I'm looking for a plugin posted here some time ago
There was a little plugin posted here a little while ago, probably not longer ago than at most 2 months.

It was a plugin that enabled you to edit web pages, and other people who also had the plugin enabled would see all edits made by anyone using that plugin.

I believe it was called something like "destroy the web", and its icon was a little tornado if I recall correctly
For example, company decides to change a license, and I need a new developer. What should I do in this case especially if I work for a startup and its only product is created with this technology?
The 2600 had a 1D display buffer. You would rewrite the contents of that buffer at the end of every scanline to actually get a 2D image. Game logic would usually only run during flyback.

(Yes, that's why atari chess did not show the board while thinking, and why if there was a bug you'd get a 1D horizontal image all over the screen)
Apple will change. I honestly believe in them. There's been enough problems with this iOS release to make them reflect and change directions.
I think a very basic reason it shouldn't be possible is that for really accurate sync each device has an unkown bias (innacuracy) besides just high std dev (imprecision) with relation to it's network/processing behavior. If you average out a lot of samples you can get rid of all imprecision (albeit very slowly), but you essentially need a very accurate clock to find the bias, so it makes the whole network approach useless. I would guess you couldn't even solve for bias with a clock once and then keep using the network, because the bias should be time-varying.
7 Popular Content Marketing Myths You Need to Stop Following
[F]or vast majority of people, consumption power is THE most important indicator of quality of life, NOT healthcare, NOT social welfare system and NOT even democratic political system.

The mark-up is the cost of healthcare and other social programs, not gouging. TANSTAAFL.

http://en.wikipedia.org/wiki/There_ain%27t_no_such_thing_as_...
You do that, and then double the result.
what are the standard tools for working with databases with f# and websharper?
They are parasites. They add nothing to the system.

In some cases, speculators provide actual value. E.g., they prove or maintain the assets that they speculate on. In others, as with financial speculators, they provide liquidity to the market.

Neither is true for domain speculators. They get paid for making the world worse.
It is indeed cool, but the single best lesson to come of it might be to start the work in a script in the first place. Still, cool beans. :)
"This is because the true order of execution diverges greatly from what the program specifies in the do-notation. This has nothing to do with purity; it's a consequence of laziness."

Of course, that's not what the do notation specifies, but I agree that's somewhat subtle. As you say, it's a consequence of laziness. Replacing "return" with "evaluate" fixes this particular example.

In general, if you care about when some particular thing is evaluated - and for non-IO you usually don't - an IO action that you're sequencing needs to depend upon it. That can either be because looking at the thing determines which IO action is used, or it can be added artificially by means of seq (or conceivably deepSeq, if you don't just need WHNF).
No, the mall bought the land and made the parking spaces. They are merely squatting on parking spaces that other people created. And the reason those parking spaces were created was to enable actual, productive business to take place, not to feed parasites.
Introducing TwitterAPI for Python
Me too. I want it back.
Software DEV. 4k+/Month 100€/Hour Germany
I'm curious, what is it that you like about the Oslo-Stockholm trip?
I am not clear on the definition of software Architect

Junior Developer: what method should we use?

Programmer: what design pattern should we use?

Software Engineer: what framework should we use?

Senior Software Engineer: what language should we use?

Software Architect: what platform should we use?

Management: how much will all this cost and when will it be done?
That isn't pedantry, that's a fantastic description. Thanks for posting it.
What's to say that would have happened?

The sealed bit is weird, but bankruptcy judges are awfully sensitive to economic value. I'd be surprised if they would do something like that.

Of course, if the domain were seized in that case, due process would still be available. The startup's lawyer would immediately file with the judge in question asking for control to be temporarily restored to the startup while the legal stuff plays out.
People have very short memories.

Apple has almost always shipped with a ton of bugs. The original iPhone is quite possibly the buggiest product I've ever used. I honestly can't remember another device that crashed as much. Was it an incredible product? Yes! Was it extremely buggy? Yes!

For a long time every rev of OSX seemed to break half of my apps. I haven't used Yosemite, so I can't comment on that specific release, but otherwise OSX quality now seems better than its ever been.

And no one was more obsessed with competition than Steve Jobs. Steve Jobs was hyper aware of competition and goaded them as well.

This is still Apple -- good and bad.
My best experience with a manager so far has been one that generally delegated all technical tasks but was available to solve them should the need arise. It's 9am and no one else is around to help a blocked QA fix a broken build? It can be 'fixed' or at least reverted in a sane way. Or (esp. with a large company) some other team's service/lib is behaving unpredictably, get the right people in the chat/room/phone to make sure an engineer can get things working.

Managers should empower teams to do their best work, not get in the way or do their work for them.
Is that contracting or working full time as an employee? I have a data point for the latter:

Front-End Dev, Canada (AB), $30/hour pre tax

Considering that NYC has a lot more opportunity I would say you could make more. Robert Half* has some useful IT salary guides for US & Canada.

* http://www.roberthalf.com/technology/it-salary-center
The Field Guide to Data Science by Booz Allen Hamilton
Maybe it's just me, but this seems very disingenuous.
This article does demonstrate the principle that virtually every area of active research in material science, no matter how obscure, will one day have a Very Important Application in Quantum Computers. sigh
Just curious where you got that number if you don't know OP's experience or skillset.
It's cool but... why?
Consider welding. It is a blue collar job that can pay pretty well, if you are fast on piecework or have in demand skills like tig welding titanium. I employ two guys welding manually, and I also have a 7 axis Panasonic PA 102S welding cell.

I have one high volume product that we sell, that I calculated the labor cost per part to be about 6 cents if we ran the robot at normal speed for 40 hours per week. When that part was manually welded the labor cost per part was about 50 cents per part. Incidentally, the guys were happy when that part went automated, since doing a high volume part is boring, mind numbing work. (1)

In the case of this little part, because the labor cost went down, and as a factory owner I know the part is more precise and can be made in an easily calculable window (it yields 8 parts per minute now), then I was able to cut the retail price by 50% and sales tripled. We can now bid on jobs that would have overwhelmed our capacity before.

So who won? I made more money, the workers job got better because some drudgery was removed, the workers income went up because we have a profit sharing program, the consumer pays less, and because the price was lower more consumers get to enjoy the product.

I am no economist, and I have no well researched and linked rebuttal to the article. In my little microcosm of the world everybody wanted the automation. Me, the guys, the customer. Everybody has won. Nobody involved would prefer to go back to the old way.

1. personally I find it annoying when academics talk about labor vs automation. Some jobs suck to do (dull, dirty, dangerous), and often the worker is the happiest when it no longer has to be done by a human. The worker is usually pretty happy to have extra time to do that other thing they have been wanting to do for long time. Who on this forum misses setting up a blog the way you had to before Fantastico came along?