skysight-inc/HackerNews huggingface dataset:
That really looks fun, please make it work.
This is not particular to Jeep, the Jeep Cherokee is simply the particular car they hacked. This basically affects all Fiat Chrysler vehicles.
Looking at Palantir only as a software company is incredibly misleading. They sell high-ticket custom solutions to massive organizations that they leverage many of their internal software tools and libraries to build. This involves large amounts of custom product and engineering development, ingesting complex data sources, integrating with operational processes, and communicating results and insights back to the customer in a way that changes the customers behavior and adds value.
Here is an implementation of the same thing, but tailored toward encrypting Bitcoin private keys. Generalizing shouldn't be too difficult if you're interested: https://github.com/petertodd/timelock

Also a good article by Gwern about the same topic: http://www.gwern.net/Self-decrypting%20files
So, this actually reminds me of a super sore point, and so a quick Angersock PSA:

Hey! Hey you! New founding CTO!

If somebody on your team comes to you with a technical improvement, support them. Ask what they need, setup dedicated work time (not some after-hours exploitation) to explore the idea, have the present, pay attention, and generally act like you give a damn about the quality of your codebase.

You don't have to promise to roll out the hottest new Reactular ES9 framework immediately, or even that you'll assign other engineering resources to it. You don't have to say "let's refit everything". You certainly don't have to take such suggestions on faith.

But you can do so much damage to your team, especially your early engineers, by being negative and conservative and saying "no" or "not yet" to everything.

Don't fuck this up.

Also, never say no just because you don't understand the new tech or language. Your job, as the chief technology officer, is to be constantly on the bleeding edge--even if you don't use that in production.

If you say no because you're uncomfortable learning or because it might mean the team may have to learn some new things, you are being lazy at your job and your displaying mistrust in your team.
This: When internet adoption began to take off in the 1990s, it came with skeptics and an endless series of questions. In 1995, Newsweek published an article titled “Why the Web Won’t be Nirvana,” stating:

“Visionaries see a future of telecommuting workers, interactive libraries and multimedia classrooms. They speak of electronic town meetings and virtual communities. Commerce and business will shift from offices and malls to networks and modems. And the freedom of digital networks will make government more democratic. Baloney. Do our computer pundits lack all common sense? The truth is no online database will replace your daily newspaper, no CD-ROM can take the place of a competent teacher and no computer network will change the way government works.”
Seriously. That's the real criminal action here.
A little explanation here. We took some of the best writing on Medium and remixed passages to make a single coherent review--from 25 people. Is it as good as the pros? You folks can decide.
I use PHP a lot (primary product is written in it) and I actually mostly like using it but you can get really burnt applying the "principle of least surprise" to the PHP standard library.

I really wish there was more support behind the idea of creating a new standard library and gradually deprecating the old one, it's been tried but never gets any traction.

Meanwhile frameworks and libraries continue to add their own (often very good) helper libraries to smooth the edges.
With self-driving cars, this is definitely going to be the norm, and this really draws attention to how dangerous they could be, although human-driven cars are also pretty dangerous.
> With 8Gb per DRAM die and 2 Gbps speed per pin, we get approximately 256 GB/s bandwidth per HBM2 stack. With four stacks in total, we will get 1 TB/s bandwidth on NVIDIA’s GP100 flagship Pascal which is twice compared to the 512 GB/s on AMD’s Fiji cards and three times that of the 980 Ti’s 334GB/s.

> The Pascal GPU would also introduce NVLINK which is the next generation Unified Virtual Memory link with Gen 2.0 Cache coherency features and 5 – 12 times the bandwidth of a regular PCIe connection. This will solve many of the bandwidth issues that high performance GPUs currently face.

To point out the obvious, this sounds like it could be fantastic for deep learning. Not just is the RAM big enough to hold a lot of current datasets, it'll help alleviate the latency bottlenecks in updating stuff.
Neutrino detectors should detect neutron decay, shouldn't they?

If so, we are looking very hard.
No, and Dworkin does point out that some women don't have that attitude. Here's a link to the piece in question:

http://www.nostatusquo.com/ACLU/dworkin/IntercourseI.html

Dworkin makes challenging reading, and is certainly extremely radical and outspoken. But most of the really unbelievable things attributed to her are misreadings or deliberate distortions. She just doesn't pull punches.
What’s Wrong with the Internet and How We Can Fix It: John Day Interview
(Russian here). I so much understand you brother (or sister). We've got an even harder wave of prohibitive laws and the local IT industry has been brought to its knees. Companies have been leaving, people have been leaving. I haven't seen any appealing job openings for close to two years. I myself am thinking of emigrating, even thought about France, but now I'm not sure it was such a good idea.

>> So much potential is wasted...
That's the most tragic thing indeed. You can import food, clothes, cars and so on but you can't import talent. When it goes, it's final.
Hilbert Hotel is a great thought experiment on this, I saw a BBC open university show on this one night after the pub and it properly bent my mind, I wish I had more mathematical aptitude as this stuff is utterly fascinating.
Good.

If you can login from "some random machine" that means your password is terribly weak as well. Use a password manager, generate passwords with over 100 bits of entropy, and then you can't log into anything without it present. Now start carrying around your password manager on an encrypted thumbdrive, along with your gpg key and private ssh key with the decryption password + password manager password being the only ones you remember.

Any password a human creates and remembers is a problem. The best mitigation is to only remember passwords that are only useful in conjunction with physical access (the password manager / decryption ones).
Yes the proper term is "variable compensation"
I dislike how my company involves alcohol in a lot of our outings. I drink very rarely and it's annoying to have to continuously justify myself to my colleagues.
And yet, prior to World War II, that economic disadvantage had absolutely no effect. Even decades later, systematic discrimination was an open policy, in direct violation of economic logic.

Weird.
At least in PHP. Unfortunately in my experience the PHP documentation is not frequently read by PHP developers or even PHP internals developers. It seems to exist mainly for PHP hatebloggers, for whom it's a gold mine.

This illustrates some problems with the PHP way of doing things. For some reason the PHP internals community prefers to have this function continue to spit out garbage when given invalid inputs instead of throwing an error, especially if spitting out garbage is what was done in the past. The answer is always, "Don't do that. RTFM." but most developers don't read the documentation for each and every function that they use, but rather rely on the name of and common sense until there's a error. If there's no error, the documentation never gets read.
You made me look up DAU. Thanks - an acronym I had never seen!
Phone Janitor – Take control of your phone number
The car company isn't claiming that the Wired hack was unauthorized.

That paragraph is there to make it clear that the tampering is a significant action to take.
I've been wondering, is there a good package manager for busybox-based distros? It would be nice to have a tiny system by default but be able to easily install other packages when necessary, for debugging or whatever.
So is the vulnerability fixed or not?
One immediate question is when and what constitutes a drinking problem? When is it too much. There are some medical classifications stating that one glass of wine per day constitutes alcoholism. Is that true, or does it make any sense?
> This is why C/C++ is usually faster than managed languages, they can get close on generated code but can be off by a factor of 50x in memory access performance.

This is a common misconception that is a result of Java's current state. Control over memory layout and garbage collection are two completely orthogonal issues. At the moment, Java just happens to be both GCed and to afford little control over memory layout. Currently, the HotSpot team (HotSpot is the name of OpenJDK's JVM) is working on project Valhalla and project Panama, two efforts scheduled for Java 10 and intended to give the JVM all the memory layout control you need.
Economics did end segregation of Asians, Irish, Italians and Jews. Again, the fact that some groups have been violently unbent does not mean that groups can't unbend themselves. Just because you can cite other examples doesn't mean that the ones I cited don't exist.

Incidentally, you are aware that Jim Crow laws were mainly about economic protectionism, right? Raising wages for (white) workers by using guns against the competition. Folks at the time were well aware that greedy employers might tolerate black as long as it came with extra green. In fact, all your examples live outside the realm of greedy economic actors interacting via voluntary trade, so I really don't get the relevance at all.
That's fine. Who knows what happens when you enter your password on the machine or if you have agent forwarding enabled.
No, it's a stopgap. They have to be seen to do something to counter all the bad press. You can be sure they'll be looking at a more definitive and more robust solution in the longer term but in the shorter term they need to be able to say 'this particular hole was plugged'. That's just damage control on their part, nothing more or less.
I assume there was security, no matter how weak, that was bypassed. That's criminal in the US under the DMCA. Hell, even bypassing ROT13 "encryption" is criminal under the DMCA. Furthermore, even if the system was wide open, I have no doubt Chrysler can claim criminal action under the CFAA.

Ain't America's laws wonderful?
But does this actually mean faster promotion cycles?

I worked for Accenture for a bit and decided to quit when they would use technicalities to deny promotions. As a matter of fact, I was denied promotions for three cycles because I joined 2-3 weeks too late. Basically, because I joined the firm 2-3 weeks after the big yearly review, I wasn't eligible for any promotion for two years whereas if I had been given a start date a month earlier I would have been eligible after a year.

I left and more than doubled my salary, work on newer technologies, largely in charge of my own schedule, can work anywhere in the world, and received promotions faster.
i have always been irked by the fact that my bank and most websites behind an https connection (especially after login) have ANY external resources. this is a major flaw on numerous levels; how such a thing is still allowed by browser vendors is IMO borderline voluntary negligence. all such sites, if they must host external resources, should do so only within an iframe w/sandbox [1]. the fact that the external resource is also "https" [on some foreign property] is completely and utterly meaningless.

[1] http://www.w3schools.com/tags/att_iframe_sandbox.asp
The good that comes out if this is that somewhere in the management chain people will feel justified to increase security investment by saying, "remember the Fiat Chrysler recall?"
It has also been helpful in aggressive desktop lock down corporations where I have to ask for each package to be approved prior to install.
I drank a fair bit when younger (socially/rarely, but > 1/3 of the time when I did drink it was 5+ drinks).

Now, in my 40s, if I drink more than 1 maybe 2 beers, the next day I feel like a train hit me, and don't find nearly the same appeal as before.
The New York Times website has some great annotated JS source code.
> Would you say that attempting to apply philosophy to human affairs is laughable?

If that was what you were doing, then I would applaud it. That's not what that was. You were focusing on precise inanities and using them to construct a logical sounding strawman in order to dismiss my point without having to address the main subject. This is a common rhetorical tactic knows as "disqualification."
Ask HN: Two kids (8, 9.5), two weeks, “learn to code”. Tips? Tricks?
Between the two of them, they can operate PC, iOS and Android devices. Know how to signup, log in and out of accounts. Have worked with Google Slides, edited videos for Youtube and reskinned their Minecraft characters. They can type (slow) with looking at the keyboard. They have played with Scratch, Minecraft redstone/commands blocks. They google their problems and watch Youtube for instructions. Their math/geometry is 3rd/4th grade level. They want to learn "to code" specifically "Javascript". We have two weeks and we'll have to watch the Minions movie in the middle...

Tips? Tricks? Ideas? Watch for? etc. much appreciated.
That's pretty vague. Of course they can hire good people if they have lots of money. But what exactly is it that makes the company valuable? This seems to be going round in circles. People keep giving them money, so they must be worth lots of money.
From my original post:

> I'm currently consulting

Yes, very lie.

The remarkable thing is that I don't need to push anything (well, okay, I pushed Chef over Ansible, because for nontrivial setups you end up needing some sort of unified orchestration layer and at that point you might as well use the more mature Chef than Ansible Tower). The still-Windows shops I talk to are pretty unified in their desire to branch out into other languages and environments. That one in particular was sold and already well underway before they brought me on-board to help them through it. But, y'know. Whatever you want to believe, chief. :)
I live and work in the US. The American Dental Association recommends brushing twice a day. There doesn't seem to be any benefit to brushing three times a day. I brush my teeth before I leave for work and before I go to bed. To carry or keep an extra toothbrush and toothpaste just so I can brush at work for no real benefit doesn't make sense. If my breath needs freshening, I can have a mint or chewing gum.
Insurance companies already do. Insurance rates are actuarily based on actual accident frequency. Outlier risks are covered by reinsurance. Not only are insurance companies well funded, they employ smart people and work in an information network with a lot of depth.
As an early user of Penny's beta, I've found it quite helpful. My Mint usage trailed off a few years ago for some of the reasons you guys mention -- too much work to manually categorize, and manual budgeting is too often inaccurate or spikey based on just one transaction or season (e.g. Christmas or summer vacation)

Penny solves a lot of this by making the categorization way simpler (only 4 categories) which maps much closer to my own mental model of things. The SMS-style UI is a pretty brilliant way to get an "in"

Penny is also pretty hilarious. Lots of great copy writing going on!
My bank (ABN/Amro in NL) is even worse, they not only include external resources, they include external resources that are critical for their site to function, in other words, if I disable the various trackers and analytics elements on their page the site simply no longer works. You'd expect the opposite!
We're switching to Wayland, where client-side window decorations are required. So this is prepping you for the future.
WIRED has another story about this question,

http://www.wired.com/2015/04/dmca-ownership-john-deere/

Supposedly the US Copyright Office will decide this month.
> This ignores the history of various oppressed groups who unbent themselves (east Asians, south Asians, Jews, Irish). It also ignores the fact that women have unbent themselves in most fields, just not math heavy STEM fields.

I almost had a crazy theory about what determines if a group can overcome their oppression and become mainstream, but the Irish provided a counterexample that shot it down.

The theory was that to overcome oppression, a group had to contribute a cuisine or food style that became mainstream. Asians. Check. Jews. Check. Italians. Check. Hispanics. Check. Blacks...they contributed soul food, but it has not gone mainstream the way the others have, and they have not overcome oppression. Indians. Check.

But I don't think I've ever even seen an Irish restaurant in the US, so my beautiful theory went down in flames.
What's more common outside PHP is that functions throw errors or exceptions when given invalid input, rather that trucking along and producing output that is clearly not what was intended.
The author first suggests getting supervisor buy-in as a means for allocating resources towards a demo. It doesn't sound like he's mandating that you work nights and weekends to prototype.
Hah, but they recently removed the Verge app from the android store to get people to use the mobile site instead.
IIRC the study I'm quoting (from memory, I can't find a link to it right now to verify unfortunately) they were considering everybody so yes, for people doing things right all the time the risk would be lower and those not (possibly lower than the LASIK risk).

It was only looking at people using daily lenses (the variety that I use) so things might be worse for monthly or "permanent" lenses depending on what you clean them with.

Some of the risk considered was manufacturing defects and so forth, so not all the risk considered was human error on the part of the user.
Chill out, I mean "good" as in competent.
I respectfully disagree. Those who claim "if you are not part of the solution, you are part of the problem," are fallaciously dividing the field into just two factions.

In reality, there are those part of your preferred solution, those who actively oppose your solution, those who are content with the situation as it stands, and those who may prefer different solutions, or perceive the problem from a different perspective.

What you propose is a world where people are constantly being accused of stupidity and insulted simply because they hold different opinions than their accusers.

I am not responsible for the whole of human behavior. I am only responsible for myself. If I, myself, make a token effort to neither exhibit bigoted behaviors nor teach them to those under my influence, is that not enough? What if one of my personal values is that other people are entitled to their own opinions, even if they are incompatible with my own?

A few of my in-laws and distant cousins are extremely racist, but it is not my job to "fix" them. Nor could I. Their minds are closed tightly. And they too tend to think that "if you are not part of my solution, you are part of my problem."

If you spend so much of your time screaming that other people are doing it all wrong that you have no time to do anything yourself, then who is the dumb-head?
Raymond, how did Chris get to take over the original branch, and yours appears as a derivative work, when you are the originator? What the hell happened?

I want to switch to uBlock Origin, but I currently use Safari. It uses the least amount of resources on my Mac compared to Chrome and Firefox.
I gave it up about 5 years ago. I say that, not to say that "I never drink" but I don't get drunk. Last night I had maybe 4oz of some wine after dinner, after not having drank any alcohol for about two months. It's not a regular part of my life anymore, it's very rare, and I don't drink to get drunk. So I don't have a problem with it.

What I dislike are the ads for alcohol. Nearly all of them start with the premise that you can't be cool unless you drink alcohol, or that because you drink you'll have lots of hot women nearby. Aside from the ads, its 'oh we have a lawyer show, lets make sure we have scene of them drinking scotch after a rough case' or a family show 'oh the dad came home lets show him going to his fridge and grabbing a beer' or a cop show 'he just shot someone, lets do a bar scene where he gets smashed'.
It's all on the CAN bus anyway. That's how modern cars are built. And hey, if you don't like that, you can always fly on a plane... those surely aren't internet-connected, right? ... Right?

http://www.gpo.gov/fdsys/pkg/FR-2014-06-06/pdf/2014-13245.pd...

http://www.gao.gov/assets/670/669627.pdf#page=23
At the time of writing this comment, there is just one comment on this thread complaining about the amount of alcohol in company outings. That comment has been downvoted and is now marked [dead].

The question isn't about each individual's drinking problem. The question is about tech culture's drinking problem. And there's the answer: denial.
From what I heard French are obliged to surrender encryption keys at the request of authorities or go to jail for a few years for denying their request. The only thing that may be left is to pack your things and go.
>generate passwords with over 100 bits of entropy

Is this arbitrary, or is there a specific reason you recommend at least 100 bits of entropy?
Good for you! Magento isn't in my wheelhouse, but I'd be interested in hearing how you've gone about marketing your book before release — building a mailing list, sharing articles to social media, guest blog posts, etc. Do you have anything you'd do differently if you were to write another book in the future?
I think this is awful, but is it wrong in the context the council was working in?

More specifically, consider how the US Supreme Court works. The Court's job isn't to decide what side is good and what side is evil. Their job is to determine what side is in accordance with the law, and if that law is consonant with our Constitution.

How similar to this is the French Constitutional Council? Were they given no choice, and forced to make an ugly decision because it is, indeed, what their Constitution allows?

If so, the answer isn't to bemoan the decision and criticize the Council, but to find a way to fix the French Constitution so that it no longer supports this decision.
First off that test is somewhat of a joke for SUVs since it basically rewards car-ish handling which is at odds with the truck-ish performance that is demanded of larger SUVs

In terms of comparing two different vehicles...

If the $year base model $carA has a suspension system closer in performance to the sport model of $year $carB but for $year+1 they put a much softer suspension in the base model of $carA in response to customer feedback then the results go out the window. Alternatively, if the OE tires are particularly expensive then you can bet that most owners will replace them with cheaper one. Additionally, particular trims are often incredibly rare or almost always have a particular option added. So testing a $trim without $package will be of little meaning when the vast majority of $trim that make it to dealer lots will have $package. In either case the results go out the window because there's a handful of large variables that are uncontrolled for. It's little better than the comparisons you see in car commercials.

If you actually want to grill Jeep over something I suggest you read up on 90s XJ gas tank fires.
Yeah, it's only as secure as Tesla's ability to secure its private key.
Perfect network security is a rather big assumption, though, isn't it?

We recommend layered security to protect people's cat pictures – doesn't it seem like a good idea for something which could literally result in casualties?
If we outlaw hacking then it will only be the criminals that have the hacks!