skysight-inc/HackerNews huggingface dataset:
Questions to challenge this assertion (because come on, my grandmother is more competent at digital forensics than the FBI):

Technical analysis of the data deletion malware used in this attack revealed
links to other malware that the FBI knows North Korean actors previously developed.
For example, there were similarities in specific lines of code,

Did the original NK's malware use lines of code from somewhere else, and could this 'shared line of code' just be a very common line of code?

encryption algorithms,

Encryption algorithms in common?! Oh, heavens! I use AES too! Maybe i'm a North Korean hacker and I never knew it!

data deletion methods,

Because there are North Korean ways of deleting things that nobody else uses to delete things?

and compromised networks.

If a network has been compromised by one person, it's probably been compromised by several.

The FBI also observed significant overlap between the infrastructure used
in this attack and other malicious cyber activity the U.S. government has
previously linked directly to North Korea.

Using the same questionable ways of 'linking' like the above, I presume.

For example, the FBI discovered that several Internet protocol (IP) addresses
associated with known North Korean infrastructure communicated with IP
addresses that were hardcoded into the data deletion malware used in
this attack.

THE SMOKING GUN! An IP address! And we all know those can't be spoofed! But just to clarify: An IP of some NK hardware communicated with an IP that was hardcoded in the malware. That 'hardcoded IP' could be a Google web server for all we know.

Separately, the tools used in the SPE attack have similarities to a
cyber attack in March of last year against South Korean banks and media outlets,
which was carried out by North Korea.

The tools used are similar? They might have used Metasploit to hack a SK bank, but that doesn't mean everyone who uses Metasploit is a NK hacker. And off-handedly asserting NK did the SK bank hack is a bit of a hand-wavey move.

--

It's clear that the FBI has no actual direct links or hard evidence. It has amassed a set of random unrelated suspicious notes and decided this is enough to be sure NK was the perpetrator.

And that's how law enforcement works in this country, folks. Some obscure hokey details get paraded around as hard evidence so they can look like they've done their job.
Java is a safer language?

Just having a Java interpretor installed on your system opens you up to untold security threats.

Honestly, it sounds a lot more like the majority of the software people on this project simply liked/knew Java, rather than made a informed choice of Java based on security considerations.

Not Java-bashing, it just the whole "C has pointers, pointers are not-safe, thus C is not safe, while Java has not pointers, and thus is safe."

Has somebody actually compiled statistics of the relative frequency of security threats in respect to language in which they were written.
1. Don't see the point of economic class vs first class pods when the whole point is to get you to your destination so fast you won't be in the pod for very long. Mid-class pods for all makes more sense.

2. Please don't emulate the airport model and build over priced malls within a "security zone". A Hyperloop is supposed to get you from point A to point B quickly. Following the airport model will add two hours to every trip.
StyleIt: An App That Uses AI to Pick Outfits for You
I also seem to remember that, and I believe Musk attributed so much savings to it because there was very little right of way that needed to be worked out, he was going to put it in the median of I-80. That reduces the theoretical cost quite a bit.

I think that's the goal of the company doing this, to test the feasibility of the design in more detail. It's also why I'm inclined to give them some weight in their assessment of the costs. But not too much. If I was an investor in some of this testing, I would want to go over their cost assessments with a fine toothed comb. It does seem this is one of the biggest unknowns in the proposal, and it's also one of the things that could change the most depending on where it's implemented, making it hard to make definite statements about.
Why would you just barely move the "D"?

If you want to encourage adoption, why would you move a commonly used letter less than an inch from it's original position?
It's like asking Linus for his opinion of the App Store.
IsoHunt now lets anyone launch their own version of the Pirate Bay
Forecast: Workplace Trends, Choices and Technologies for 2015
That's what you get for italicizing words!
Facebook Launches Separate “Stickered” for Messenger App
Sure. But hence my point about opening weekend (trial) vs. what happens after opening weekend (ongoing business, lifetime earnings). You can drive trial of a bad product, but it's extremely hard to get people to keep coming back, or to tell others it's worth seeing. So your bad product + ultra-hype is basically a recipe for a big opening with extreme decay every day thereafter. This usually isn't enough to recoup the production, print & advertising costs of a major movie, especially when you factor in profit-sharing and other cuts to top-line revenue (Rogen and Goldberg are almost assuredly getting points on the movie's gross, and it's possible that Franco is, too.)

A general rule of thumb is that a movie studio spends at least as much on prints and advertising ("P&A") as it does on production costs for the movie itself. That is to say, if the movie cost $35M to make, Sony sunk another $35M or more into P&A. So it would need to earn more than $70M to break even (more than that, because everyone's taking points off the top-line gross, plus profit-sharing with theaters and distributors, etc.). Is it possible that Sony could earn that much on this sort of movie, given its notoriety? Maybe, maybe not. Notoriety alone can rarely get you to $70M. (It's possible, but unlikely.) To stand a better chance, your movie also needs to be halfway decent.

Once again, I have no idea if this movie is good or bad. Just saying this for the sake of explanation.
That's a chicken and the egg sort of question. We've developed pretty separate east and west coast economies and cultures since the travel times preclude much else. If they didn't I think we would see a lot of demand come from it that we don't see the need for yet.
1. The purpose of higher priced classes is to give people who are willing to pay more the opportunity to do so.
I actually like hjkl in Dvorak: my left pointer and middle finger handle up/down, and my right pointer and ring finger handle left/right.
The need to follow the airport model is one of the unaccounted-for costs of the Hyperloop, particularly on travel time. Because of the inevitable catastrophe implicated in any passenger attack on an 800MPH elevated train, it will absolutely have TSA-style security.
Are they any less guaranteed than the name brands?
Command-Shift-G does support tab completion and "~".
Yoga - What's wrong with liking yoga?

Nothing is wrong with yoga the activity. Just like nothing is wrong with owning a gun, flying the flag, or living in Georgia. But tell me with a strait face that "gun toting, flag waving, Georgia boy" doesn't conjure the image of a person that is more than the sum of those parts.
It's tough to seem to remember something about a source that is contradicted in the source itself. I think you should start by reading the link, and then opine on it.
Really? Because I can't.

I can't imagine an IRB-approved research study that requires a software solution (developed under an NDA) to a hardware problem that couldn't be solved with a one-inch square of black electrical tape.

For the price of a contracted software developer, you could simply buy a model of laptop (or smart phone), in which the bezel can be pried open without substantial damage, and behind the LED's transparent aperture (but obscuring the LED), you fix a tidbit of black tape or whichever opaque material you may prefer.

Or, better yet, for pretty much every situation that doesn't involve eye-movement tracking, simply install a hidden security camera at an opportunistic vantage point.
> You know you have no special requirements. They don't know you have no special requirements.

I presume "The company and the customer have different ideas of 'special requirements'" can also be a factor?
Is it even possible to get true free range eggs anywhere? I know plenty say cage free, but that could just be opening the cage for an hour or so in a day just to make the marketing claim.
The "some effort" included a 3-stage FEA that I accomplished in less than one semester of study. And I'm a computer engineer, I don't even have a real mechanical or civil-engineering experience and I could tell that the FEA proposal in the paper was a complete joke.

You say there wasn't real world testing. I go further, there wasn't even a serious theoretical analysis of the proposed Hyperloop system.
I did say healthy adults. Not that most adults are healthy.
This is interesting timing, I was just in the freenode #linux channel yesterday asking about security issues with NTP. I got told it was a non-issue and that I was "tilting at windmills". I have been using chronyd in Alpine linux to good effect so far, but have really been wondering how bad it would be if I just turned it all off.
Remote learning and remote working could drastically cut down on pandemic spreads.
This is, perhaps, the most obvious Jetsons-suburb style future we can attain. It's so alluring and outlandish. I tend to work in plants, but I end up commuting just to stay away from the soul crushing industry. (Or soul-crushing industry, depending...) To be able to live in a nice garden village and then take a 40 minute ride out of state to my plant would be an utter joy.
A remote attacker can send a carefully crafted packet that can overflow a stack buffer and potentially allow malicious code to be executed with the privilege level of the ntpd process.

Geez, in a time sync program? Nothing is safe anymore.
> Higher education has become increasingly accessible to the economically disadvantaged, not less.

The FAFSA is not a college-led program. Colleges have had to adapt to it and other grants and loans, but the accessibility is not at all what college has been optimizing for.

Indeed, the question of optimization you posed was not about accessibility, either. It was about outcome. Read up on the Occupy protests if you haven't heard about them; the one in Hong Kong only just dispersed.
In all likelihood the attack didn't originate from N Korea.

Based upon....what?

Warships don't escort private ships traveling in hostile waters.

http://en.wikipedia.org/wiki/Operation_Earnest_Will
How to Avoid the Naughty App Developer List in 2015
The cost differentiation is probably to help subsidize economy class fares, or even if it's not for that I think it would do that in practice.
Cold symptoms are mostly an immune overreaction. The way the body responds is very much suboptimal. Just because we (usually) recover on our own doesn't mean medicine is bad.
I haven't found a an alternative to Jenkins yet that isn't even worse - but I'm open to suggestions :-).

Also, I think android at least sort of qualifies.
It helps me to have a sensory key over which set of habits to use. I usually use Dvorak, and don't look at the keyboard. If I look at the keyboard, I get QWERTY.
The most pernicious recent development is the widespread use of phenylephrine to replace pseudoephedrine. Neither personal nor clinical evidence support the effectiveness of phenylephrine, but it is very clear that phenylephrine causes a dramatic increase in blood pressure in many people.

There are some pseudoephedrine products on the market which are supposed to be diversion-resistant for methamphetamine production but it seems if you stop people from making meth they will just order up some other sympathicomimetic amine from China.
Java tried green thread since day one in 1995, and it never worked out well and was dropped long time ago (around 2000). Go did a good job with its gorountine at certain cost, for example embed Go library is much harder than C library, so Go application is typically a standalone static binary.

It is really great to see Rust drops the mixture of green and native threads, and reduce the runtime to minimum. It will make Rust stand out in many environment that no other languages would work well (besides C).
One can’t name a single Asian-American whose name you can take to the bank and get a project financed.

I would imagine Ryan Potter could be bankable, given his recent success with Disney's Big Hero 6, or Steven Yeun, with his following from The Walking Dead.
ICANN Hacked - IANA Systems Not Compromised – ICANN
I'm not sure. Computer experts? Yes, hard to get lucky there. Business experts? Luck seems much more significant.
Actually, the FDA recommends against using any cold treatments in kids, as they cause more harm than good:

http://globalnews.ca/news/1723414/are-your-young-kids-fighti...

In general all these cold and flu medications do is suppress your immune response, which is obviously not the smartest thing to do. You might get rid of some symptoms, but you're also hindering your body from actually getting rid of the infection.

The article above does say that in adults decongestants might be helpful. I think you need to know when it's a good idea to "help" your body treat the infection, and when you're just treating the symptoms and just hindering it. Most people just want rid of the symptoms.
> I also seem to remember that, and I believe Musk attributed so much savings to it because there was very little right of way that needed to be worked out, he was going to put it in the median of I-80.

A casual glance at a map of where I-80 runs might suggest that that wasn't quite right.
Obama says Sony made a mistake to pull the Interview
ntpd is a, uh, rather large time sync program.
I have always thought that most people commenting on the economy probably do not even know what the GDP of their nation is.
having a host clock that is out of sync can be incredibly troublesome, especially if you have more than one system.
Battery Swap Pilot Program
Puffin - A Python awk replacement
I wasn't trying to discredit the project. I think the project is neat and I wanted to see what other people on HN would say about GvR's comment.
Do you have a reference for that? The FDA says not to use cold medications in children as they cause more harm than good (see my other comment).
> but when your a teenager or adult you grow out of it

And you keep the emotional scars.
At this point Systemd is looking like RHs response to Docker.
NASA Just Emailed a Wrench into Space
It might not have been the Mississippi tax dollars being spent here:

https://www.techdirt.com/articles/20141212/12142629419/leake...

It's looking like the MPAA was funneling money to the state AGs to assist in their fight against Google. This is what Google wants uncovered during the lawsuit.
This is the greatest disappointment of the new crop of Cherry-based keyboards: you can't physically rearrange the keycaps because they're shaped differently for the different rows.

The good, old IBM Model M keyboards made switching the keycaps to your preferred layout trivial.
>My doctor would not prescribe me an extremely safe anti-parasitic that is in no way DEA controlled, and I had to do the research myself and had buy it from an "online pharmacy" to have my issue resolved

Sounds like you have a terrible doctor, and should find a new one.
A Python program that prints itself
My query deals with the social implications you mentioned at the end of your talk.
Are we, as a society, equipped to deal with the changes the surge in computational efficiency deep learning is about to bring when a large portion, including the policy-makers, aren't even able to properly acknowledge them? Can you expand on your last slide's point where you mention that "better education" won't help in dealing with the upcoming upheaval?
It's all about having enough variables in the system so you can point to something else as the cause when there is failure, and yourself as the cause when there is success. With willful ignorance of reality, idiots can have a success rate much higher than 10%. :)
I did a lot of work once to learn Colemak and I got pretty good. It is not a bad way to type at all, but it fails pretty hard once you switch betweeen machines.

A better optimization is getting a great ergonomic keyboard, like the the Microsoft Sculpt Ergonomic Desktop keyboard. It's really fantastic and can be had for like $70 if you shop around.
Easier said then done. I don't need a doctor. I need authority over my own health. Put whatever waiver you want in front of me.
Not to make any particular point, but mainly just because I fancied a bit of procrastination this afternoon, here's a CoffeeScript version (heavily leaning on Underscore): https://gist.github.com/benshimmin/2ee78c932797faadfc89
You seem to be discussing a very different level of hardware development than the linked article is.

SoC design, along with FPGAs, and generally any digital logic oriented device lends itself well to software style development approaches because a large portion of it is software. The design of such devices is done in a HDL (Hardware Definition Language), not with schematics.

There really isn't a HDL for board level design (unless you count Spice I guess), mostly because board level design doesn't have the neat and clean abstractions that on chip digital design has. e.g. you can black box a 4-bit adder and glue a few together without much care about the implementation. You can't do the same thing with an audio pre-amp circuit that will be part of some mixed signal board as the implementation will often be driven by complex interaction with the rest of the design, right down to physical placement and layout of the circuit on the PCB.
There's little point to a non-portable release. They were made when ntpd was developing faster than OpenBSD, but it's not like OpenBSD stopped making releases in 2009.
Although it sounds reasonable, I'm not sure whether this way of contacts/pedigree is needed everywhere. For example in (continental) Europe people are treated more equally, probably because majority of good universities are public.
remember not to use water fresh out the tap.
Yes and certain foods can also be used to reduce symptoms, but of course they're not as powerful. Did that option fail for you?

The case I see more often is people get obvious cold symptoms and are back at work the next day. Thanks to symptom reducers they don't have to rest or eat properly for the condition, so their light symptoms persist for weeks. That also leads to complications.

Also I should have mentioned that most adults are not healthy and don't eat healthy to begin with, which creates a ripe market for band aid medications.
Fedora (or GNOME 3?) uses Chrony by default due to better power management. I assume the same is true for most other distributions.
Show HN: Appear.in integration for Slack
11 million dollars per mile does not seem accurate. They recently widened the Turnpike in NJ from 6 to 12 lanes over a 35 mile stretch, and it cost $2.3 billion. That's $65 million per mile. And that was considered a successful project.

http://www.northjersey.com/news/nj-turnpike-widening-set-to-...
> While the tests pass on my local machine just fine, many of them fail for no good reason on the CI server.

Offtopic: Time for start using Docker? :p
There is very little chance that BART would be faster than Caltrain on the Peninsula. Caltrain has a good right of way that could host 4 tracks. I would focus on Caltrain here, not BART.
Obama Says Sony Made a Mistake in Canceling “The Interview” Release
Why not just buy a keyboard with a layout switch button. No program will force you to use qwerty if your keyboard manages layouts. But seems like no such a keyboard is out there. Couldnt find it on Google or Amazon.
I don't exactly enjoy the state of being sick.
I remember back in my undergrad, "tuition" was approximately 1/4 of what students actually had to pay. The rest was "fees". Strangely enough, tuition wasn't allowed to rise faster than inflation, but our "fees" got larger and multiplied each year.

How about at Berkeley?
Separate issue. The oppressiveness of requiring a doctor to sign off on your personal decisions is not the same as making sure pharma companies are actually producing the right drugs.
I would suggest China. They have already demonstrated their affinity for HSR by laying 10,000 miles of track. A couple weeks ago they opened 32 routes in one day.

http://qz.com/308791/china-flexes-its-high-speed-rail-muscle...

If the idea is to develop and prove the technology, China can accomplish this in a fraction of the time, at a fraction of the cost. Building the second one is always less of a risk.

The distance between Shanghai and Beijing is 800 miles, so the 1hr travel time should be very appealing.
I was forced to watch the previews at Edwards - it's crap according to my moderately high standards. I know it's good for the demographic that watches movies with farts, vampires, zombies, and the horror crap that sums up what comes out of the rear end of Hollywood these days.
There's been half a dozen path traversing exploits against MS IIS, before they finally caved in and took reasonably complete measures in IIS 6 (IIRC).
I don't even see how one could compare Rails and Meteor. They are intended to solve two very different web development problems.

Discover Meteor, the most popular book about Meteor, even uses Middleman for their blog and website - because using Meteor for something like a blog or information based site just makes no sense at all.
I keep seeing these types of articles.

Then I keep seeing comments and links debunking them (example: http://muse.jhu.edu/login?auth=0&type=summary&url=/journals/...) and saying that the claims about the Piraha tend to be wildly exaggerated based on whose agenda (read: radically pro- or anti-relativism) the claims would end up supporting.

At this point I don't believe anything I read about the Piraha.
Your case supports that this isn't clear cut.
Do these vulnerabilities impact a local ntpd instance responsible only for local timekeeping? (In other words, does a compromised machine in pool.ntp.org pose a threat?)
Do you remember groove? They had 14 as a multiple for their SaaS but it could've been at the time they had 70k MRR.

ARR at 36 million....and 25 the multiple...gotcha now I have a solid number to gun for.
yeah i wrote a pretty comprehensive blog post about this - ie when it's better NOT to treat a fever
http://www.iodine.com/blog/should-you-treat-a-fever/
The 'ideal' language, in my eyes, would allow terse representation of _algorithms_, not of the language syntax. This often means that you need several different ways to do the same kind of thing in different contexts.

"The syntax is terse" doesn't help if the libraries aren't. We want libraries and common concepts to be terse. That's why I feel that any language designed without heavy consideration for how it's standard libraries are to be used is a regressive exercise. Write your libraries how you want them to be used, then figure out the syntax from that.