skysight-inc/HackerNews huggingface dataset:
What you're describing sounds like a firewall for CAN. It's a complex solution that will inevitably be insecure.

"Yeah it sucks, but it is what it is."

This attitude might work with some other things, but the automotive industry will have to deal with security in a reasonable fashion. This is potentially life-and-death stuff and consumers actually have choice here. Not everyone understands the full implication of someone tracking their cellphone or hacking their email, but everyone can imagine what will happen if your car will get out of your control.
Cool stuff -- at AltspaceVR we support the same concept with Netflix, YouTube, Twitch, etc, but as avatars within a virtual space (ideally in VR.) You can hang out while watching netflix with voice chat, body tracking, etc. This was a big challenge for us to get working well, so I can sympathize with the authors :)

http://altvr.com

Just install our browser plugin, go to a netflix vid, hit "watch in AltspaceVR", and you'll have a virtual space dedicated for that netflix movie.

https://chrome.google.com/webstore/detail/altspacevr/ijjkiof...
Oh, thanks for this. I will read any thing by William Finnegan, especially if it has surf anywhere in the title.

Playing Doc's Games (http://www.newyorker.com/magazine/1992/08/24/playing-docs-ga...) is an amazing article.
Looks like you're using Flowroute as backend service? At least that's where the number of the CEO is located.
Working exploits are useful to test and iterate on to ensure that everything is patched correctly (both for admins and researchers).

/r/netsec has some good discussion: https://www.reddit.com/r/netsec/comments/3ed4fu/cve20153245_...
SpiderOak 6.0 is out
http://www.ustream.tv/channel/iss-hdev-payload
Could you please elaborate what you mean by "SPA". I am unfamiliar with the term, but google only returns results related to massage and nail-care services, which DOES kinda make sense in your context, but I am not sure.
That's not necessarily true; some leaps are so obvious that it was only a matter of time before someone got to them, but there are critical jumps which are not so simple. If Newton hadn't invented Calculus, it's impossible to predict when another soul would have...so it's a damn good thing that he was supported by the Royal Society.
No, really. It took WWII for the United States to collectively realize that systematically excluding nigh-half of the population from the economy was a bad idea, economically speaking. And much longer for the damage caused by doing so in specific instances to have much lasting effect---indeed, without government intervention I suspect we would still be waiting.
Sure. You can protest for a higher minimum wage.
>It's not illegal to hack your own belongings

Doesn't the DMCA make that illegal? Isn't that the big fuss about John Deere tractor fixing and the like?
As a matter of fact, I do; as do many people who take cryptography seriously:

> Any one who considers arithmetical methods of producing random digits is, of course, in a state of sin. For, as has been pointed out several times, there is no such thing as a random number — there are only methods to produce random numbers, and a strict arithmetic procedure of course is not such a method. - John Von Neumann

But to your broader point, no, this is not a question of semantics. There is an actual syntactical difference being asserted here.

That difference is this: randomness has nothing to do with numbers. 0xca--the same number--can be either "random" or "non-random" depending on how you got ahold of it.

When we talk about numbers--prime numbers, even numbers, rational numbers, etc., we are talking about properties of the number; whether they are divisible by 2 and so on. But "random numbers" have no property by which we could recognize them. It is entirely a question of where the numbers were made, not what they are or what they look like.
Yeah, right. The only way insurance companies are competitive and pricing risk correctly is if there's a magic responsibility fairy that bestows wisdom and driving ability upon all at midnight on their 25th birthday.
yet it's an order of magnitude easier to just go buy the parts to a real 'time bomb' than to crack an OTA update. Security is relative after all, and evil geniuses have much better ways to kill you.
A lot of it is authentic misogyny, because there are a lot of bad people out there and misogyny is as old (and as new) as dirt.

My point is that programmers and technologists, as a group, aren't inclined to be worse than the general population. (Most programmers are pretty damn supportive of women getting into the industry and being treated as well as men.) However, the dominant culture is Silicon Valley isn't set by programmers ("nerds") but by the people sent West by the mainstream business culture to boss nerds around. That particular set of people (the colonial overseers) is across-the-board awful, and they've taken the waning casual sexism of the MBA-culture world (meeting a client, or celebrating a good day at the trading desk, at a strip club) and leveled it up into something a lot worse, and that's what we see in the Valley. It's authentic misogyny but it comes from the top. Your typical young engineer is just an average nerd; not a misogynist.
The data is usually released with a 5 year lag, along with meeting minutes. That's a rather high level of transparency, and a lagged release is not unreasonable.

I'm all for greater government transparency, but I don't think it's a problem here. Meanwhile, good luck trying to get the NSA to even commit to a 50 year release process.
Use a stepstone. This is really only feasible if you can get a user account some place where they take network security seriously.

(A stepstone is a well-protected server where you can log in with user/pass and use your keys to login to other machines from there.)
His point is that, when you translate a tale to a feature film, you're going to need to make certain adaptations. Many of those changes are quite natural, and several writers doing the same adaptation work would arrive at those same changes. But whoever was first to the party can claim copyright on the new version, so anybody else coming afterwards won't be able to resort to those same changes, obvious though they may be (unless they can somehow prove they've never watched/heard of/had any contact with the older film).
There is a subreddit called /r/iama where people can say "I Am A <noun>, Ask Me Anything" and then answer (or not) the myriad questions asked of them.

It is, perhaps, not too much of a stretch to say that it is this particular subreddit that transformed the site from a venue for engineering types to the mass market beast it is today. For better or worse.
Ramin Shokrizade - behavioural economist for World of Tanks, Eve, etc.
Thanks catso :)
They sure are valuable, he never said otherwise. His point was that the PoC exploit was released before or right at the time that patches became available and delaying the exploit PoC would give people a bit time to patch their systems.
This page (http://www.fiftiesweb.com/pop/prices-1955.htm) suggests that the average income in 1955 was $4,137, and

a house cost $22,000 (ie, 5.3x an annual income)

a loaf of bread cost $0.18 (ie, 0.004% of annual income)

Today, a median household income is $51,939 and

a median house costs $188,900 (ie, 3.63x an annual income)

a loaf of bread costs $2.26 (ie, 0.004% of annual income)

Current median income and house prices from Google, loaf of bread cost from http://www.numbeo.com/cost-of-living/country_result.jsp?coun....

All dollars nominal.
You may not be able to, but Patrick Stewart can :)
>It's also wonderful that you have taken the time to count the words instead of reading them; the number of words,

I read the article in a viewer that automatically shows a running word count down the margin.

I have a limited time budget for reading so I always have to know in advance if the article is 1000 words (less than 5 minutes) or 20,000 words (over 1 hour of reading which means I print it out and take it on the train).

I feel like you missed the point of my comment. The author's essay has already been done thousands of times by thousands of authors using different variations of words. (Indeed... see another poster commenting on Russell's "On Idleness"). They're not bad essays. It's just that there are so many of them.

Since many HN readers are well-read, they have already read dozens of these type of essays. My comment is to give them a heads up and save them time. On the other hand, if you found the essay filled a hole for you, that's great.

I disagree with you on the "whole point" of the article. She goes to great pains to talk about observing things like ants and coffee with friends instead of staring at screens. I don't see her emphasizing that one must read redundant articles on the same topic repeatedly. On the contrary, more time spent reading her essay is less time to spend observing ants.
If they control your number, could they not listen to all your calls, if they so wanted?
You mean my GF? She's cruising right along, hasn't realized it's a problem just yet. I hopefully won't be there when she hits bottom and realizes that what killed both of her grandmas and poisoned her mom could possibly hurt her.
Solar power isn't free. you've got the costs of plant capital and maintenance. That said, desalination is the type of readily added or shed load which can tolerate surplus / deficit variable energy supply.
self advertisement??
> For example CAN does not have a notion of source, it's really in the abstract a whole lot like a bus, just with cables.

I get that. And if it did, the attack would by spoofing that.

Which is why the solution needs to filter what goes onto the bus - at the only point the source is known.

> When it was all a wired network, it did not really matter so much.

Well, consider if I told you there was a way to "cut the brakes" (at a future date, when the car is at speed, etc) on any car you've been in, without any tools needed or evidence left. Untraceable murder.

It's only the scope of the current attack that makes that look minor.
I don't understand - California "issued as a license to drive a motor vehicle; it does not establish eligibility for employment, voter registration, or public benefits." Why would the acquisition of a state license for driving affect one's federal immigration status?

For example, an 'undocumented' person in California can get other licenses, like a fishing license, by presenting "A foreign government-issued photo identification" (see https://nrm.dfg.ca.gov/FileHandler.ashx?DocumentID=93497&inl... ). What makes a driving license special in federal eyes?
I wonder if amazon would look like a walmart if it had a physical store.
Indeed, this is quite newer, and a gradual introduction to FP idioms (with good successes).

Mine wasn't introductory and just threw out ways to decompose the problem into counter intuitive (think ~monad) blocks.

I'll edit my post to list those I've found so far. Thanks a lot anyway.
Great feedback; thanks. May I ask what city you'd suggest this for?
why would they not go low-tech / low effort?

Attribution. Mechanical attacks are easier to attribute than something that can be done from across the world over the Internet.
Interesting.. in the linux/unix world I've always intercepted functions with LD_PRELOAD. I'm guessing that's not an option on OS X?
When the government is your VC it doesn't matter if your company is a roach motel for cash.
I agree with Leif here. Sure releasing a PoC serves a purposes even in these cases, but this is just idiotic. One cannot expect outsiders to patch their systems this quickly. I would release without a PoC for a few weeks, maybe a month depending on how widespread the exploit is believed to be, to give everyone enough time to update. Humans need sleep , and some patches need downtime after all. Perhaps a tiered release would be best? Release a PoC to a few trusted partners to verify and pen-test the new patches before giving a full-disclosure.
If there's something I'm missing here I'd love to hear it, cause frankly I feel like I'm just stating the obvious here...
I think it would become much more palatable if someone came up with a plan for basic income that didn't require tripling the federal budget.
>Accounting doesn't work that way. You can have huge profits and reinvest them, but your income statement will show the profits in any case.

Sort of. I mean, I'm not a tax expert. but i do pay taxes on a bunch of money that, from my point of view, I re-invested in my business. But certainly not all of it.

My understanding of why you end up paying tax on money you re-invest into the business is depreciation.

The idea behind depreciation is that you write off the object as it loses value. So if computers last 5 years (and that's kinda the messed up part, the IRS kinda arbitrarily decides how long something lasts) I write off 1/5th the first year, 1/5th the second, etc... I still get to write off the full value of those servers I buy, I just can't write it off the first year, which means I end up 're-investing' out of post-tax money when I'm just starting or growing.

As an aside, if you have these sorts of problems, get a tax expert. Accounting is at least as deep as programming, and unit testing in accounting, while possible, is super expensive. It's not something you want to seat-of-the-pants.

When you are an S corp, it's super irritating, because 4/5ths of what I paid for servers is marked as income for me, and I've gotta pay taxes on it, which suucks when you have been scrimping all year to pay for servers.

Note, this is part of the "value" that leasing companies offer; It's common for companies in my business to lease their servers, and you write off your lease payments against income in the same year as you make the lease payments.

But from what I've seen, leasing increases hardware costs between 2x and 4x, and is way less flexible, so even if you have to pay tax on all the money you spend on servers, you're still usually coming out ahead. And buying, generally speaking, requires a lot less planning.

but on the other hand, if I hire someone to write code for me? that comes out right away, pre-tax, no depreciation, assuming I earn the money and spend the money in the same year. - so if I want a new software platform? I get to build it entirely using pre-tax money.

(Note, things get way more complex from here; Accounting is a complex thing and I probably don't have a strong enough grasp even as just a businessperson, much less as an accountant. But this is the basic idea on why re-investment money is sometimes taxed.)
Amazon is also working as quickly as possible to remove humans from everywhere they can, especially in the warehouses.
I'm probably going to get the shit flamed out of me for being a woman daring to comment in a thread about feminism, but fuck it. Maybe the Internet might surprise me.

I'm one of those 56% of women who left mid-career for a non-technical job; I don't have a family of my own, so that wasn't a contributing factor. Sexism was not the primary reason why I left, but it was a major factor in my decision. I returned to the field after a decade because no other job has been as satisfying as coding is, but it's still a really unbalanced field.

The things that most guys don't get is that it's usually not anything they consciously do. It's unconscious behavior. The one I wrestled with the most - and still wrestle with - was the unspoken assumption that because I'm a woman that I'm not technically competent. If I enter a technical conversation with male colleagues, their default stance is that I'm either less knowledgeable than they are (even if I'm the senior dev), or that I'm wrong. Either I get challenged and attacked on what I say, or I'm talked down to like a child. My male colleagues don't treat other men this way, even if the men they're speaking to is non-technical.

It's also about isolation. I'm on a team of 30, but counting myself, there's only two women. The only thing that's unusual about it is that there's two of us. It's far more common for me to be the only woman in the room. I can count the number of female developers I've worked with on one hand with fingers to spare. Tech is an incredibly isolating field for women; we're in an environment that is frequently uncomfortable (and sometimes outright dangerous) with very few allies and even fewer mentors and leaders. The women mentors and leaders we do see are often publicly lambasted and denigrated for existing, or harassed completely out of the field.

It's not getting easier to be a woman in tech, it's getting harder. Used to be I could connect to other women techies online without much difficulty; now we find our community spaces overrun with trolls and strident voices about phantom spectre of "the SJW". I can't read about women coders on places like Slashdot or HN without the legions of comments about how feminism is evil and women are inferior. I'm a developer in a highly specialized field, and I have seriously considered ceasing any contribution to the Internet outside of my code deployments, because there's only so much harassment one person can take before they just give the fuck up.
Even if he has, it's a ridiculous intro.
This does not work, but the US government is fond of snake oil and security theater. Real security comes from stable people with stable ideologies. The US instead often as a result of bad policy destabilizes ideology and people in certain regions and then tries to use technology to make up for the lack of wisdom. Which leads to security theater and other security snake oil.
Delaying PoC doesn't preclude others from analyzing the patch and writing exploits. The only thing delaying PoC does is provide a false sense of security.
As honest as the text appears, I usually associate websites which look similar to this as outdated and untrustworthy. It's the type of website you often see for old freeware, which is why it doesn't seem so great to a potential user as they'll assume the website style may reflect on the service they're about to receive.

I would take a bootstrap style over this. Maybe that's just me.
Lava Mae – Mobile Showers for the Homeless
On point 2: AMAs initially started out as a way for people to share what mundane thing about them makes them unique. It was much more community-oriented than celebrity oriented. The problem is that once this scaled beyond a niche community, people didn't want to read about other folks that were just like them, they wanted to read about celebrities who were willing to mingle with the common people. r/casualiama is much more like what r/iama started out as, and is IMNSHO more interesting.
What's worse is that there are still plenty of places that haven't actually progressed beyond 1999 using 56k dial-up. A lot of these multi-megabyte JavaScript-laden sites are basically a big "fuck you" to those in developing countries and even rural/underdeveloped portions of developed countries that don't even have so much as DSL, let alone cable broadband or fiber. For them, it's either 56k dialup or paying absurd amounts of money (in a multi-year contract, no less) for a satellite connection (which tends to have significant performance problems due to the higher latency).

Thankfully, this is starting to become less of a problem as cellular networks continue to expand, but there are still quite a few places where cell coverage is spotty at best (including here, in the Sierra Nevada mountains, where the mountains themselves cast all sorts of coverage shadows no matter how many towers get put up).
Driver's licenses are domestic government-issued photo identification. This secondary use is as good as a passport in a lot of situations.
Get size of Postgresql and MySQL databases…
I was in a bad working relationship for way too many years, the one thing that helped me turn my life around was Taoist Tai Chi http://taoist.org

I told my founder story on the Rouge Startup podcast recently http://www.roguestartups.com/rs023-perseverance-with-anders-... for more info!
OT: The use of text-shadow to break the underline on a link where it passes through a descender is pretty darned clever.

See the first link to Eager under "Why You Need Stout" to see what I mean, where the underline is hidden where there's a descender for "g".
Yes, and my argument is that providing a working PoC along with a patch has at least these immediate benefits:

1) It helps admins verify that the patch was successfully applied.

2) It gives security researchers more surface area to evaluate when looking for similar bugs or bugs in the patch.

I'm not asserting that there are not negative aspects, but in the majority of cases waiting for some indeterminate time before releasing a PoC or not releasing one at all is net negative.
> If there's something I'm missing here I'd love to hear it, cause frankly I feel like I'm just stating the obvious here...

Likewise — I'm very much a n00b sysadmin, but I'm having a tough time understanding how giving people a buffer isn't desirable.
One factor is the amount consumed, and yes people sometimes drink more than they should (everywhere in the world)

The other is HOW it is consumed - and here there are significant differences around the world (not surprisingly).

It is not unusual for many younger people in northern countries (the Nordics, but also partially in the US/UK), the goal is to get drunk and pass out as quickly as possible, with minimal social interaction. While in the south it is more about socializing, dancing, etc.

That said, it is really hard to generalize - there are always exceptions.
It doesn't necessarily mean that his thinking didn't extend beyond physics or that his social contact didn't extend beyond his office. In this case it's more about an indifference towards social conventions, e.g., his famous messy hair which is now the definitive image of the mad scientist.

As for Witten, I just looked up a video of him on YouTube. One of the top comments, unfortunately very inflammatory:

"If Witten wasn't a mathematician he would have been a serial killer."

I supposed this is referring to his unorthodox mannerisms of speech.

(The video: https://www.youtube.com/watch?v=Y6b3DjOnv3I)
So... Google Voice, but not free, and run by a small company that might fail, taking your phone number with them?

Might be interesting. The "not free" part is a BENEFIT in my mind, and your other post (https://news.ycombinator.com/item?id=9943660) tried to address the riskiness.
Oh geeze, I didn't even see there was a Makefile there .. sorry about that.
How much natural gas does this cost?
The $5B Battle for the American Dinner Plate
It's long seemed odd to me that people just accept ads. Imagine trying to explain that model to an alien familiar with the basic ideas of our economy but unfamiliar with ads as a primary revenue model:

"Well, say you want something from me, but you don't want to pay the amount I ask for it. Instead, you give a larger amount of money to a third party. The third party gives it to a fourth party, who gives it to me. I try to manipulate you into seeing the third party as more valuable, so you'll give them more money in the future. I do what you want in exchange for you putting up with this."

"Didn't it just cost me a larger amount of money that way? Because of all the intermediaries?"

"Well yes, but everyone just pretends to not know that. Oh, and this is the dominant revenue model for several large industries."
Here is one solution of the issue without disabling any plugins: http://bgroot-eng.blogspot.com/2015/07/wordpress-fixing-your...
Good point, and brings up an interesting question. How does one properly articulate "Desktop Microsoft Excel with integrated online data storage?"
That's what an embargo is and why it exists. And when it's up, it's up.

This is essentially a rehashing of the Microsoft/Google squabble a few months ago.
Thanks!

You can read about the technique here: https://eager.io/blog/smarter-link-underlines/

And try it on your site with Eager here: https://eager.io/app/smartunderline/install
Seems interesting but would like more information on how app works and security