skysight-inc/HackerNews huggingface dataset:
I personally believe this is a honeypot or trial of sorts. The reason could've been to determine whether or not the intrusion was detected at all as a sort of validation of just how "almost invisible" the malware is, or it could've been to determine the time required to detect.

Alternatively, it could be a way of getting at the company's data or even to instigate a thorough review of their platform from the client's perspective. There's a lot of subtle information in the Kaspersky report that might be interesting to intelligence services:
- Simultaneous Duqu & Equation Group infection of one victim
- Feature coverage (and those omitted, like other payloads)
- Red herrings detected/ignored; strings, faked compile timestamps
- Noticed misspelling of "Excceeded" & lack of other linguistic errors

Kaspersky mulled this issue:

"So the targeting of security companies indicates that either they are very confident they won't get caught, or perhaps they don't care much if they are discovered and exposed. By targeting Kaspersky Lab, the Duqu attackers have probably taken a huge bet hoping they’d remain undiscovered; and lost."

However they also conceded that they aren't sure:

"The exact reason why Kaspersky Lab was targeted is still not clear – although the attackers did seem to focus on obtaining information about Kaspersky's future technologies, Secure OS, anti-APT solutions, KSN and APT research."

https://securelist.com/files/2015/06/The_Mystery_of_Duqu_2_0...
Agreed. I just used it to pay for my lunch at Panera today and it was the biggest response I've gotten so far, with an outrageous, over the top.... "heh, that's neat" as she grabbed my cup and continued with her day.
Firefox for Android has been downloaded between 100 million and 500 million times, which is a bit more than your estimate. :P

See https://play.google.com/store/apps/details?id=org.mozilla.fi... -> "Additional information" -> "Installs".

And given that AdBlock isn't available for Chrome on Android, I wouldn't be surprised if AdBlock for Firefox was a large motivator behind this statistic.
Relevant: coverage of various perspectives and positions by Ethan Heilman along with counterarguments to each:

https://github.com/EthanHeilman/BlockSizeDebate/blob/master/...

I like that it also includes discussion of the Lightning Network's role, and the idea of making the block size dynamic. These are less heard of perspectives that nevertheless seem significant.
The thread is about the industry in general, which has adopted Google's algorithm heavy interview process, but also adopted github and open source as a resume.
I don't know where you are getting this from - do you have any personal experience to draw from?

It doesn't match my experience. In almost seven years at Google I've worked on amazingly interesting projects - from hardware to user-facing products.

I've never once, in my entire time, had any level of management tell me that I should be worrying about selling ads or monetizing my projects. The consistent message has been "build great products".

So the notion that 99% (or really any majority) of developers at Google "drive the ad hive" is completely untrue - at least in my experience.
To what ends would you change his mind on this issue? For Internet points, or for a greater good?

The "gap" between the races on matters such as income, education achievement, or the demographics of Google engineers is a source of constant handwringing.

There are two explanations that are publicly admissible:

1) You can slander and libel white people and blame racism
2) You can slander and libel black people and say it's because of "black culture", because black parents don't tell their kids to do well in school

If you take a third position, the position that thousands of years of evolving in different environments and civilization complexity levels meant that there is a different statistical distribution in different traits, which means there is a different

This third position blames no one, yet the holders of this position are called bigots and are banned from conferences if they even mention this view under a pseudonym in an unrelated context. I confronted tptacek, because he is a person that I have up until now respected, yet he called Saletan an idiot for holding this third position. So I was interested in why tptacek called Saletan an idiot, and I was also interested in the more general problem of how to convince reasonable people to stop slandering black people or slandering white people on the issue of the gap between the races.
As soon as I realized it was posted in Fashion, I realized that it wasn't going to have any content that I care about. "It makes me feel this, people think that about me, etc etc" Hint: If you're going to buy products from the company with the strongest brand in the world, and you hate brands, you're going to have a bad time.
You're describing a mutual society, which is a voluntary thing, and very different in character and consequences to compulsory taxation and a welfare state.
Sorry for OT but why is google plus not responsive?!?

Sometimes I have to increase the size of the page to ease my reading. This is what I get:

http://puu.sh/iklL3/08aa3d3563.png

And I can't even scroll to the right! Is there something wrong with my chrome configuration (maybe a plugin not playing nice)? Or can someone else repro this on their mac?
What part of 'working together' involves people who don't want to?
Outsiders have no clue about Israel's role in the Equation Group. Or who the Equation Group actually serves, for that matter.
I'm not surprised by this at all. My issue is that these rules are often abused and used to silence opposing view points all in the name of 'hate speech'.

Seinfeld has come out recently and talked about how college campuses are so politically correct, it's impossible to be a comedian there these days.

College campuses were supposed to be about freedom of speech and new idea, not what they are today. I see Reddit going the same way.
Great news for anyone that doesn't care at all about protecting their SCM with MFA.
Attention somebody looking for their next startup idea!

Content publishers need an innovative way to serve ads in a way that cannot be distinguished from the content.

Perhaps by acting as a proxy for ad networks, perhaps by hosting the ads directly.

I guess publishers will need to collect their own demographic information and make it available to the advertisers.
Press releases masquerading as news have been a tradition since time immemorial: http://www.paulgraham.com/submarine.html
In DC the unacceptable opinions don't include the things listed above, but that doesn't mean there aren't any unacceptable opinions there.
That isn't how antitrust works. If Apple, for example, didn't allow anyone other than Apple to sell software for Macs- that isn't antitrust until Macs have a monopoly in the personal computing market.

You can monopolize your own ecosystem all you like, so long as your platform doesn't have monopoly power.

If iOS eats up all Android's marketshare and becomes the only platform worth a hoot, then you can start filing antitrust cases for this kind of thing.

The only reason Microsoft's IE bundling with Windows was antitrust was because Windows owned just about the entire personal computing market. Otherwise it would have been fine.

Some say Intel tolerates the existence of AMD, because if AMD completely disappears Intel suddenly becomes a true monopoly power and vulnerable to all kinds of antitrust suits.
I can reproduce it. In order to fix it, I have to refresh the page. Happens on my Mac all the time when accessing G+ from a browser window that may be a different size from the browser window I previously used to access G+ in another session.
A fools errand. The only news sources that can ever be trusted are publicly funded organisations like Australias ABC.

http://en.wikipedia.org/wiki/Australian_Broadcasting_Corpora...
If it ever comes to alternative non-ads form, I would consider this way.
This is the real answer to everything: if users dont like the ads, then dont go to the site.
Exactly. I see it as a tacit admission that you are effectively a cog in a wheel if those are the kinds of questions they are asking.

I know some people get frustrated by those kinds of questions, but I'd just see it as a reverse weeding out process. If you still want to work at (insert company here), just build something valuable and have them acquire you. At that point they'll acqui-hire you and you'll leap frog all the people who got in because they had Knuth books memorized.
I recently discovered the Photo Find app for iOS, which does the same thing:

https://itunes.apple.com/app/id939480376
Who else thinks bitbucket is better than github? And that even if its not, we should host a copy of repos on bitbucket too, because competition is good?

EDIT: (For git non-pro's like me)

How does one create a copy? After creating an empty repo on the web interface:

git remote add bitbucket <url of the repo>

How does one keep it updated?

git push bitbucket <branchname>

---------------------------------

Or if you'd like to always keep the bitbucket repo in sync every time you do a git push origin (preferred method):

`git remote set-url --add --push origin <url of the repo>`
Maybe offer a choice?

Some people hate homework. Same hate whiteboard. Offer the person their choice?
Don't forget that lead paint keeps ending up in the toys made in China.
Oh hey, me too! Well, the first part, at least.
The question isn't whether you should reinvent the wheel, it's whether you can if need be. It is important for companies to weed out candidates that can talk a good game but are useless when it comes to actual programming. So maybe in the process good candidates fall through the cracks, but then again, nobody has invented a perfect way to interview candidates.

In any case, how would you even go about knowing whether a certain piece of existing code that you blindly pulled in from some random place is optimized for your particular use case without first being able to conceptually understand it - which is all an interview is. Nobody expects candidates to create production ready code on a whiteboard.
I bought my Nexus 4 on the promise of Android.

Damn thing crashed and rebooted when I was trying to answer a call the other day.

There are so many UI issues. Material design might look nice, but sux in so many other regards.

I will not buy another Android phone that's for sure.
Idiot: We don't want to make any bad hires! Therefore, we reject a lot of good candidates!

FSK: If you pass on many good candidates, and you have a small chance of hiring any given bad candidate, then each good candidate you reject actually INCREASES your odds of making a bad hire.

Idiot: We made a bad hire once! Never again! Now we reject lots of good candidates to avoid that repeat disaster!

FSK: But, if you want to minimize your bad hire rate, you also have to minimize the number of good candidates you reject.

Idiot: NO! NO! NO! The way you make sure you hire no bad candidates is to be so strict that you reject lots of good ones! That's what everyone told me so it must be right!

In one ear and out the other. Why do people who don't understand statistics get to be managers? If you don't understand this statistics argument I made, you're unqualified to work in any sort of technical area.
The Boost guys factored the context switching and stack allocation stuff in to a separate library - Boost Context[0], which supports a bunch of architectures[1]. I'm sure their fcontext code could be lifted. They claim on modern x86-64 that a switch takes about 8ns[2]

The Boost Coroutine library is built on top, adds type safety, ensures the stack is unwound when contexts are destroyed, and enables propagation of exceptions across switches.

$ ls -lh /usr/lib/libboost_context.so.1.58.0
-rwxr-xr-x 1 root root 55K May 30 09:58 /usr/lib/libboost_context.so.1.58.0

[0] http://www.boost.org/doc/libs/1_58_0/libs/context/doc/html/i...

[1] http://www.boost.org/doc/libs/1_58_0/libs/context/doc/html/c...

[2] http://www.boost.org/doc/libs/1_58_0/libs/context/doc/html/c...
Yes, once malware has been found, it can be reverse-engineered and reused. Also, I recall reading that the NSA relied in part on independent consultants in developing Stuxnet etc. Maybe some of those consultants have other pseudonyms, and other clients. So we have malware proliferation. And it's far worse than, for example, nuclear proliferation. Because it's all just bits.
> Various intelligence services seem to be treating the Internet like a battleground in a war, potentially creating new risks for hundreds of millions of people.

The internet was designed to survive a war. Can it handle being the battlefield?

----

> We protect those people in the face of such risks ... generally speaking, deliberately attacking medics on a battleground is simply despicable and disgraceful.

No further comment.
it could be multi-factor-authentication/authorization but i don't know for sure
The issue with Home Depot is that if I buy a dishwasher from there, I get one dishwasher. If I give that dishwasher away, I have no dishwasher. With online content, that doesn't hold. If I give away a copy of an article I just read in the New York Times, I still have a copy.

It goes even further than that. Content I can share with my friends is MORE valuable than content I keep all to myself, in some cases. (Paywalls are most successful where that isn't true -- where there's some advantage to having information that other people don't.)
This and HTTP2 for content aggregation point to embedding advertisements deeper within the main content provider. Look for plugins to popular web servers to make a side pull and injection of content before it leaves the server, not in the browser DOM.
Why would anyone who has a job waste a vacation day to interview at a place that previously rejected him?

If your flawed process rejected a good candidate the first time around, what makes you think the same flawed process won't reject them a second time?
Personally, I'd prefer to work at a company where 90% used pkgsrc.
This would hurt Google so much.
Triple up-vote for this. That said, As said before, I would say if they get more applications than anyone else, their pool of possibilities is larger, so, even if their hiring process is sub par, it's still possible to get more better people. They have a lot of good people and quite a few really good people. And, likely more of those really good people. Someone has done the numbers.
It's a question of efficiency and maybe one of those smart ones is optimising it. It's quite possible that the process that looks shit on the outside is producing the right numbers.
I understand what you're saying, but a technical note: you say "start all over," but I think that is untrue. You would be starting from the position of having no debt and owning your home outright (a positive net worth.) That's an excellent position to be in, in terms of trying to build savings. Congrats on the mortgage! :)
I have the personal experience!

I'm a new hire, and I got assigned to somewhere that doesn't align with my interests, at all... other than the fact that it's "not front end."

Hoping switching is as easy as everyone says!
Can anyone tell me, why GitHub doesn't have this feature yet?

Every time I need to browse through the code on GitHub, I need to download the project and open it in an IDE. Very lengthy process. On the other hand this approach looks novel.
Clarification from the Reddit Admins on their announcement post indicate that they're banning subs where moderators either took no action or encouraged organized harassment (as in going to other subs or websites and actively harassing the person in question) as opposed to subs that just post awful things about people.
Yiddish "a" is from the same root as modern German "ein".
By the shirts, see the video.

Porto Alegre has 2 big teams, fierce rivals. The Internacional dresses in red, the Grêmio dresses in light blue.
That would certainly work, with the added benefit of value changes by page; however, I imagine it would require more work to display on every page. There are too many ways to serve web pages, and having to change your site like that seems like a potential turn-off for an already [negative adjective here] platform.
It's simple enough if you split the list at the partition point, but hard if you do it in place.
And imagine the outrage that would result if you had the audacity to commandeer the technical term "chrome" by naming your web browser "Google Chrome". :)
actually internal sources tell me that Mac OS X is the dominant OS at Facebook, Google and Twitter, with a lot lot lot lot more than 20%
Is switching really that easy?

I'm a new hire, and I've been given the choice of working on one of two teams, neither of which particularly align with my interests.
> I would like to point out that comic book guy was not the one who made the magic xylophone comment.

That is hilarious and quite appropriate in this context :)
Add another one to the list of things my team didn't know about until a public launch..
I didn't know what Taboola or Outbrain was so I searched and found this: https://newthealarmclock.files.wordpress.com/2013/02/screen-... and I recognized them. Very tabloid-style.
> We’re banning behavior, not ideas.

SRS has always had atrocious behavior that's been forgiven because of their ideas....
I agree.

I recently interviewed for a security engineering position at a startup, and while I got offered the job, the interview was quite silly.

The first thing I was asked to do was to write a lisp interpreter. It was a pretty trivial task, but it left me scratching my head since not only did it not tell them about whether I would be qualified at all, but I had explicitly avoided writing parsing code since I found ANTLR during undergrad.

In the end I wrote a basic stream abstraction and wrote my lisp interpreter on top of it with no real difficulty, but it was a completely stupid question. I told them on the third interview that they weren't asking me anything relevant and I still got another question later on about how to iterate over a tree in a specific order.

Part of the issue was that most of my interviewers were fresh out of college, it was literally their first job and they had no idea what to ask besides the kinds of questions they had been asked in their own interviews.
Probably offtopic, but the second or third poster in that thread had "Stormfront" in the sig.

Well.
That is interesting indeed. You didn't see Apple Computer, Inc. spinning up Apple Mobile Technologies, Inc. after the iPod and iPhone success. They simply pivoted (to use a maligned term) their company and mission to Apple, Inc.
I think you just picked a bad example, though.

To be specific, I find it an antipattern to think that memory or other resources can be pushed behind some lexical tricks. You still had better be able to account for your resources, in all places. Having first class control over them is often a matter of when you will need it, not if.
I'm no security expert, but I have a question.

In some systems I've built in the past I employ MD5 as a hashing mechanism to verify firmware integrity after flashing it in the memory. I don't use MD5 for anything security related (this is treated in other ways, depending on the system), just to check transmission and memory integrity.

Is MD5 still considered fine for this, or is there a real risk that random or systematic (but unintentional) noise could generate a collision between corrupted and original data? I do believe it should suffice, but hearing all the badmouth makes me wonder...
I'm not sure how much I believe that.

I've dealt with reddit's administrators from a moderator side before, and they can just shadowban moderators they don't like. It makes no sense to ban a subreddit for the actions of that subreddit's moderators when they can just remove the moderators that are the issue.

I suspect they wanted to ban certain subreddits, and "the subreddit has toxic moderators" is a good reason to give publicly. Nonetheless, they've always had policies for dealing with toxic moderators that don't involve removal of subreddits.
Obviously, copyright owners need to be able to control the distribution of their IP for this model to work. But that is as separate issue which is not mitigated by the ad-supported model. E.g. there are whole sites devoted to blatantly ripping off content from NY Times, WSJ, etc. and slapping their own ads on top.
It's already been discussed, which is why I'm at the "very annoyed" point right now.
That's not guaranteed to be safe.

Having new code check if your state is old and upgrading isn't enough. You also need to check old code doesn't process new state. That becomes harder under concurrency.

http://en.wikipedia.org/wiki/Dynamic_software_updating#Updat...

Erlang doesn't offer this check.

"Old code may still be evaluated because of processes lingering in the old code."

http://www.erlang.org/doc/reference_manual/code_loading.html...
What CMS/platform does the website use? Anyone?
Because you need a court order to get that information in many countries. These devices allow police to bypass the courts oversight.
> Intel Security has released the McAfee Labs Threats Report: May 2015. For the first time ever, we explore attacks on firmware. ... Persistent and virtually undetectable attacks by the Equation Group that reprogram hard disk drives and solid state drive firmware.

http://www.mcafee.com/us/security-awareness/articles/mcafee-...

I wonder if this was part of the attack on Kaspersky.
>If you rate engineers on their ability to memorize something they could have looked up on Google in 5 seconds, what are you really actually testing?

Repeating what I said earlier - You can't build a plane by opening a physics textbook. Starting with a LARGE pool of fundamental and higher order building blocks allows you to fit them together using whatever skill/talent you have at solving problems, in a MUCH shorter time than someone who doesn't.

Someone who constantly google's basic stuff is a net drag on a team's productivity. Rather than operating at their skill level, they're constantly being distracted by having to task-switch and waste hours researching stuff. The internet isn't going to magically know the exact problem you're working on and whether certain data structures or algorithms are appropriate for solving it, or if they need further tuning depending on what your priorities are, or what have you. Getting questions answered, and googling/learning about CS stuff is great on its own, and should be encouraged as much as possible, but it is not a substitute for actually retaining that knowledge.
They aren't banning behavior, they're banning the expression of certain ideas.

It would be one thing if the group was about beating up fat people, but posting comments online about them is clearly under the ideals of expression.

If they want to ensure it's behavior and not ideas they should get a judge to rule on whether the expression would be constitutionally protected.

And yes, as a private entity it is their prerogative to ban certain ideas on their site, however, they should just be honest about it, they are limiting speech in a manner that would likely be unconstitutional if they were a government entity, aka. they are abridging freedom of expression.
For an... interesting take on all of this, there's always /r/conspiracy: https://www.reddit.com/r/conspiracy/comments/39ddf1/rfatpeop...
Can we please not bring this to HN as well?
the best part of security is that fat meaty area in the middle of the venn for people that don't understand it and don't understand that they don't.
SOA – Latency SLA Calculation