skysight-inc/HackerNews huggingface dataset:
There is such a thing as "criminal negligence", but I don't know if this case or anything in medicine would qualify. My guess is no, based on some examples I'm looking at.
Over half of new California driver’s licenses go to undocumented immigrants
Yep, it's a tricky one to sort out. Harder still if the domains are using a whois privacy protection service.

Checking if both domains resolve to the same IP could help establish a link in certain cases (e.g. where the same haproxy load balancer is terminating traffic for both sites).

Maybe also checking if the asset domain contains the string of the main site domain e.g. company.com and companystatic.com or company.com and companyassets.com

Edit: if both sites are served over SSL you could also sniff the cert to see if its the same one in both cases (i.e. they're using one cert and multiple subjectAltName entries).
Waste heat? Evaporating the water? Nuclear power plants are steam engines. All their heat goes to evaporating water.

Come to think of it, I wonder if you could harvest the steam from a nuclear plant, run it through a condenser or distiller, and in that way produce electricity and purify water at the same time.
I did a version of this a couple years back:
https://www.twilio.com/blog/2013/03/building-beyond-google-v...

It's rough but worked reliably.
>It all takes less than 70 lines of Python/Flask.

It's for people who can't write those 70 lines/don't know about Twilio/associate Python with an animal.
This is identical to my experience teaching non-programmers to write Python. We end up reverting to Excel so often.
Thanks, good response - this is what I'm trying to get at. Initial reaction to this threat is very much "OMG people are gonna die". And I'm going to be honest, I think people will, at some point, be killed because someone targets a vehicle computer system remotely. But it's not a law of nature that vulnerable systems will be compromised to cause the maximum casualties possible; it will take someone deliberately setting out to do it. This is a means; someone else has to supply a motive.
Sure, but now our hypothetical system-gamer is dipping a pinkie toe into the muddy waters of tax fraud. He has to wonder if taking on that kind of risk is worth getting slightly better margins on sales from a coffee cart.
Show HN: Mkt. And Sales Guide for SaaS Entrepreneurs
OOP encourages this kind of memory layout, but I don't think it requires it. I don't think there's anything preventing, say, a JVM or a CLOS implementation from storing "hot" members/fields in compact homogeneous arrays and "cold" ones in more traditional heap-allocated structures, perhaps with the help of a few programmer annotations. Or a tracing VM cooperating with a copying GC to perform this kind of optimization on the fly. This seems like it could make an interesting CS research project, in the (unlikely) case that it isn't one already.
JS.Geo Conference
Vessel (SF) – Looking for a Mobile Dev (Android And/or iOS)
Vessel - Video Startup by founding CEO and CTO of Hulu (SF)

@Vessel, we’re building a premium video platform for short form video content to capitalize on the change in video consumption. As team of generalists, we’re looking for like minded individuals who are excited to take on any challenge regardless of the the tool set or problem space.

We’re looking to bring on another Full Stack Mobile Engineer to work on Android, iOS, or both platforms. Although we've gained a lot of traction in the App/Play store, there's plenty of runway to make a significant impact on both devices. (Check us out on the stores!)

www.vessel.com/careers
Marriage as a legal entity is a legal recognition of a social custom. While some prefer to establish that social custom with a religious ceremony, there is nothing inherently religious about it. For example Buddhism has no religious institution of marriage, yet countries that are primarily Buddhist still have marriage as a civil entity.
No More Hidden Sugar: FDA Proposes New Label Rule: The Salt
pffft, xml is obviously a better choice for a serious spreadsheet engine... \s
What if we add kernel same-page merging to the mix? Might still be a little less efficient at run time than the optimal use of shared libraries. But shared libraries make packaging more complex, especially if one does it Debian-style, with each shared library in its own package, a separate -dev package, etc.
Arguably, it's a flaw in human nature.
Have you compared that to the transfer size of gzip without a minification step? I haven't seen a real difference, myself, and I've been considering taking the minification step out.
Evercookies sound terrifying. Not that I'm doing anything that I really worry about hiding, but I can't stand invasion of privacy like this.

Are there effective protections against them? If not, I wonder why the EFF hasn't taken up the charge to fight them?
Appabet-make your iPhone screen say “I like you”
A lot of cars have audio controls on the steering wheel. It used to be on separate wires but now that's on CAN, save money. So that's one reason infotainment is on CAN.

It could be it's own CAN bus completely separated but you probably also have the CC on the wheel too. So do you put the CC on the same one? But wait, there's the SRS there too, oh man that plays ball with the self diagnostics.

Hmm looks like we need a high priority CAN in the wheel, might as well use it for everything.

That's how it goes...
> is ever possible in a government that is rife with dysfunction, graft and bewildering inefficiencies at every level.

This is a fair point, but I think we'd be remiss if we didn't acknowledge the presence of a significant group of politicians in congress who have made their entire careers out of sabotaging government programs. Remember, Republicans have tried to repeal Obamacare at every turn, even taking it to the Supreme Court - twice.

So to say the system can never work because it hasn't worked is confusing the cause for the effect, it seems.
Why does Morocco love docker so much?
Actually the modulus needs to divide the number of possible output of rand(), which is by definition (MAX_RAND - MIN_RAND + 1), if you want to have a uniform distribution (assuming your rand function has a uniform distribution).

In the specific case of mt_rand, MIN_RAND is 0 by default, then the modulus needs to divide (MAX_RAND + 1).

In the general case, there's no rule in any uniform continuous implementation of rand such as (modulus + 1) needs to divide a specific number.
If we all ignored them, and their products, they would go away. Capitalism.

I don't care to offer them a way to improve; their future success isn't my problem.

Why do you feel the need to make Microsoft the victim?
Hooking C Functions at Runtime
OK, how about "entry point"?

It's an easier leap than jumping from Ruby into a strict, strongly typed functional language like Haskell, Ocaml, or Scala.
Now, if only I could get a MackBook Pro with 32GB of system memory... Does anybody happen to know why that is such a difficult thing to achieve? It's amazing that, starting next year, there will be mainstream graphics cards with more memory than top-of-the-line laptops.
> Use our public API to develop your own controls for your phone

I don't understand how it's supposed to be used aside from the API. They say "from the browser", but without examples, it's impossible to tell how much control you have without writing code.
Come on, capital expenditures to develop new products or enter new products have been a part of business since forever, and indeed the cost to develop a new product for a traditional company (say, a car company) is probably orders of magnitude higher than the cost to develop a new pure-software product.

I mean, is there some kind of truth that it's harder for public companies to do ultra-long-range moonshot stuff? Maybe. But the idea that this is what's keeping Uber or AirBnB or Palantir from going public is ridiculous.
This really is a bug in how OpenSSH USE_PAM is implemented.

Particularly if you presume that PAM is the devil, the last thing you want to do, from a security standpoint, is to let a client dictate how a server applies PAM. The policy _has_ to be entirely controlled by the server's config. Once you let the client decide, you're just asking for things to go wrong.
Killing them with cuteness: the origins of Anonymous' ISIS-Chan
IIHS uses cars that aren't running and don't have fluids in them. They don't want to clean up that mess (or have the car destroyed by fire). They do test fuel system integrity though. I'm not sure if they use some other fluid (water + dye) or something like pressurized air or leakdown test after the fact.

I guess you could engage in other antics but none of them would be all that effective since the car is towed by a cable until it's a few feet from whatever it's hitting.
> Instead, they’ll be sent a USB drive with a software update they can install through the port on their vehicle’s dashboard.

So, if I'm in someone's Fiat Chryslermobile, and they're pumping gas, I can flash the vehicle's firmware from the passenger seat?

This seems a lot easier than rooting it over the air.
That seems like a lot, considering I can do basically the same thing with a ton of flexibility using Twilio. At $1/mo + very reasonable per minute charges, you'd have to spend well over 1000 minutes/mo on the phone before the $15/mo becomes cheaper.
I really do think it's based on optics and spin, which is what has me so worried about the long-term applications. I was wondering if anyone has really considered the commercial implications of IoT data use.

I'm generally not excited for the IoT and the total destruction of the private sphere it will entail.

Sidenote: I feel like this intersects somewhat with our entire, terrible conversation about healthcare in America. In any situation, where a business has a good someone absolutely needs and a monopoly on it - you probably can't comparison shop hospitals - ideas of fairness or "corporate responsibility" go out the window and you'll be charged into oblivion. But the idea of letting anything other than the market decide prices is anathema, and so nothing changes.
Google:Our cars are smarter than human drivers
That assumes that stealing your private key is the same thing as sending arbitrary packets from your machine, otherwise things like restricting subnets/ip addresses and port knocking could still be useful layers. How different exfil of a private key from being able to send arbitrary packets on the user's machine is...probably not that different under most circumstances I'd guess.
> the main problem is that you cant's nest 3 for loops

I'm curious what you mean by this. Care to explain?
OpenSUSE releases first milestone for Leap
This only highlights how the intention of copyright as put forth by the framers has been distorted through the lens of business. Book publishers thought libraries might be a threat to the "modern" publishing industry in the 1800s, just like the movie studios thought home video would kill movies. They were incorrect on both counts, however with the ease and low cost of digital copies, there actually IS a great deal of money to be made without actually doing more work by perpetuating the endless copyright. Given how money focused politicians are, and how much influence business plays with them, its not a difficult argument to make, especially when the argument is money versus the betterment of society and future creativity. One is easily measured now, the other is not easily measured, and only pays off on the scale of decades.

Disney took public domain stories, and made billions by creating their own versions, and now seek to prevent others from doing the same. The estate of Sir Arthur Conan Doyle (who died 85 years ago this month) found only partial relief in the extension of the money machine, with stories and characters before 1923 now in the public domain, and stories after 1923 still under copyright 92 years later! Sherlock has become a huge influence not just in other creative works, but derivative works such as TV shows and movies that pay no royalty to the Doyle estate. Doyle himself was influence by other authors, such as Poe, as well as real people.

The intent of copyright was to give limited protection to the creators of creative works, because while society as a whole benefits from the arts, it can only occur if there is a benefit to the creators. So we gave them a limited monopoly, just like patents, to enjoy the fruits of their labors before they became part of society as a whole. Few artists want to create works that only a select few can enjoy, however the financial interest is in doing just that. Just as software patents threaten our industry (and patent abuse on the whole threatens many industries), copyright abuse threatens the enrichment of society as a whole. We do not own our children, we only raise them for a while and unleash them into the world. The same is true with art. That is the way it was meant to be.
It is not based on Twilio, they're quite expensive, it's built on Freeswitch and normal fully open SIP/RTP protocols and what we're doing isn't exactly complex yet. I don't have a whole lot of care about going open source or not but as far as our interface you can view source at https://phonejanitor.com/app/ and you might be pleased for the moment.
FCC Grants Approval of AT&T-DirecTV Transaction [pdf]
Ask HN: How to be a better person?
I interviewed for a position recently but they responded that they found my attitude to be negative and cocky. I don't think they're wrong. I was actually looking forward to the growth opportunities this place represented, despite the uncomfortable changes I would need to make, so now I'm not sure what to do. I've interviewed at several places recently but this was the first I was actually excited about. I don't know how I'm going to change as a person if none of my external influences change (like a toxic culture at present gig) I'm not sure how much progress I can make on my own.

I have no social support, no work support, and am generally feeling isolated and defeated. I'm trying to grow, but everything stays the same, so I stay the same, and that's really getting old. every project I build goes nowhere, ideas I suggest at work are routinely shot down & branches I do invest a lot of time and thought into are simply abandoned in the end.

Anyway, hoping someone has been in similar straights and can offer some insight.
The problem is that "market price" is extremely malleable, and it's easy enough to tweak the job title slightly in order to change what the person is being paid.

As I said, there are exceptions, but in general H1B is a mechanism for importing cheap labor.
I would have thought the whale would be more appropriate seeing as we're talking about GTK+3 (and thus by association, GNOME).
How about just counting the number of ad trackers?
Most people won't accomplish much.
"live somewhere where it's more sensible to get them some other way"

Yes, the main remote exploit you're exposed to driving round Yemen in a Grand Cherokee is probably a Reaper-launched Maverick strike, rather than having your transmission remotely cut :)
An argument could be made that putting the vehicle control system on the same bus as the internet-connected entertainment system was criminal negligence, but they would just hang the guy who probably put up a fight against it in the first place for not putting up a bigger fight or something, the company would never feel any pain. :/
1.1 million have applied so far. I wonder for reporting purposes if the people who successfully obtain their license also have their status change from 'undocumented' to 'documented'?

> The number of applications from undocumented immigrants ballooned to 687,000 as of June, and immigrants in California illegally have outpaced other recipients. Of the 759,000 total licenses the DMV has issued, 397,000 – or 52 percent – have gone to the undocumented. More than 1.1 million undocumented immigrants have taken the written test, and another 436,000 have taken the driving test.
The Housing Market Still Isn’t Rational
The original 'researcher' (because they did something so horrendously unsafe on public roads) mentioned that there are at least 2 car manufacturers who have devices on the CAN bus to watch traffic and detect when a device is issuing commands that it shouldn't be so the tampering can be detected (and assumedly shut the infotainment system off).
Reminds me of the Qattara Depression Project:

https://en.wikipedia.org/wiki/Qattara_Depression_Project

Build a canal/channel/etc to a below sea level place, harvest the hydro power, and get a nice new (saline) lake to boot.

Anyway, I don't think that the salt is totally worthless. Don't they have salt ponds in the bay around San Jose?

The energy input is the bigger problem; you can only get so much water from a glorified solar still.
Why our world would end without communication
Google Wants a Piece of Air-Traffic Control for Drones
It's up to the company writing the options agreement.
> For example for a sentence-based password, 100 bits is insecure. But for a password generated using the secure random number generator, it is absolute unbreakable e.g.

No, that's not accurate. Bits of entropy are based on how many options you have for the type of password you used. The password "goodnight moon" has far less than 120 bits of entropy. A word-based password search algorithm would find it quite easily. Those are easily both in the top few thousand words in the English language, so that password probably has less than 24 bits (2*lg(4096)) of entropy.

> 12.5 ASCII characters

That assumes 8-bit ASCII. In practice, a password doesn't include characters 127-255 or 0-31, only 32-126, and probably not many symbols. One character selected randomly from characters 32-126 has ~6.6 bits of entropy. One character selected randomly from just letters and numbers, no symbols, has ~6 bits of entropy. One character selected randomly from just lowercase letters has ~4.7 bits of entropy. And if you don't choose randomly, and instead use a memorable password, then you reduce that entropy.

https://en.wikipedia.org/wiki/Entropy_%28information_theory%...
If that's the truth and the employee's best guess as to the company's outcomes are that their options will either be worth nothing or the taxes will be too expensive to afford with the cash available to him, the employee should rationally value any option grant at zero. Startups may find it a little hard to recruit employees if everyone starts valuing options at zero. This isn't in anyone's interests.
But look, the internet isn't just textmode anymore, and it doesn't exist just in cyberspace anymore. Decisions coders make affect the--blah blah you all know this, software is eating.

So, maybe, just maybe, the hardcore-on-the-spectrum-practically-deterministic-themselves folks shouldn't be the only ones with commit-bits, hm? [...] Because software is eating the world, "Made with love" needs to more than a marketing slogan.

If that is the way you want to frame this, I think your goals are tangential if not orthogonal to the conversation
this blog speaks to. You're talking about products, most of the social topics rolling through social media and the tech news are about social interaction in and around development.

Obviously the developers are in a place to put their mark on a product, but that's quite different. They're generally not the decision makers on the product goals and feature set. And to the extent that they can influence the product, that topic has gone entirely unaddressed. Conversation has focused around about software team interaction.

But I don't see how that adds up to building a product "with heart." Some of the grossest software business models and anti-consumer practices come out of NorCal, the epicenter of the brand of progressive politics popular in these discussions.

A comically apt anecdote is of a Facebook employee. The name Facebook let a transgender individual use as their workplace ID was not good enough for Facebook's real name policy for end users. Of course Facebook fell all over themselves to fix it when they got bad press. But if any of the political movements in tech were even tangentially about the products getting built, it would have never been an issue. The business rule that developers were tasked with implementing would have never been commited, or never thought up in the first place.
> By that logic there's no security on the internet at all.

Have you /been/ on the internet, lately? ;)
Indepth tech interview with MIT's Sangbae Kim about Cheetah 2
Users Beware of Remote Tech Support Scammers
Well right, but compared to the number of units bought by IT departments, the "enthusiast" market is nothing but decimal dust.
I think it's pretty clear that connecting a computer to the internet is a matter of trusting the whole world, which is a lot harder than trusting local circumstances.

Your assessment of risk has to change when the cost of scanning and attacking your machine from afar in a hard-to-trace manner is dirt cheap.
very happy for you. Sounds like a dream workplace for most of us.
Yeah, I also do not agree with this. While there is definitely a certain minimum, you are not going to be paid top dollar on an H1B. More importantly, you have way less leverage for salary negotiations, so as an immigrant you keep at the same salary for years.
Several years ago, on a transatlantic flight, I observed some strange behavior in a game when I specified a high score name with some special characters. I noticed it would crash and exit back to 'home'.

I tried to hack at it by specifying the semicolon and such, but could not get it to do more.

I observed they had it at least mildly secure - it would not accept input for some special characters when typed; they would simply not appear on the screen within the game. But clearly there are holes in these. Without more information on the construction it was not trivial though.
How many interviews have you done, total, in your life? Building your interview skills will help build up your self confidence. So, don't give up! Read everything you can on interview skills and keep trying! The more you do it the better you get at it.