skysight-inc/HackerNews huggingface dataset:
I think cyber warfare is inevitable. Because systems are so complex, defensive techniques will always fall short. The only effective deterrent is an offensive attack or at least the fear of an attack. The US has to create a catch-22 situation for China so that it fears the repercussions.
Do you think the amount of products being shipped to customers will be shrinking soon?
“This is one of those cases where you have to ask, ‘Does
the size of the operation change the nature of it?’ ” one
senior intelligence official said. “Clearly, it does.”

But of course, that doesn't apply to NSA's bulk data collection, right?
mutually assured cyber destruction?
Three reasons:

1. In the central LB setup, if the LB server dies, you're service dies. Not in this setup (HAProxy is deployed side-by-side with each instance).
2. Elasticity. Imagine you have a shopping cart microservice, a search microservice, and a users microservice. Each of these requires its own HAProxy instance. Every time you spin up or spin down a new instance of these microservices, you need to configure the central HAProxy to pay attention to these new instances.
3. Health checks don't work well in DNS. In the centralized load balancer infrastructure, you end up relying on DNS so that your users microservice can talk to the shopping cart microservice (for example). DNS requires client polling and has propagation delays, so if one of your shopping cart microservice load balancer dies, it takes time for all the other microservices to figure out where to connect to.

A central LB works well if you have just a single microservice. But when you have dozens of them, you're suddenly managing dozens of load balancers dynamically, and it gets to be pretty chunky to manage at that point.
City of San Francisco Announces Plan to Expand Access and Use of Open Data
One tech to another looking for some Internet advice on a story similar to yours
my non-unique story (i hope) :

Learned to code as a kid with BASIC then fell into the web industry by accident before I was qualified (some college but not CS). From there everything is a blur:

String of terrible jobs, Some OJT, loads of books, side contracts and personal projects. Career shifts, failures, successes, social / career fuckups, depression, anxiety, divorce, public mental breakdown, near suicide, loss of friends / social network, rebuilding, recovery, and now I'm trying to figure out what the hell to do.

During all that I transitioned between HTML / CSS, PHP, Python, Javascript (including node) and more.
However NDAs, dead companies and project ADD have lead to am almost non-existent portfolio.

I don't care for web dev. This isn't the what I wanted my life to be. As a kid, programming was an escapism and a hobby. I don't mind doing it for money now, but I prefer game development though I have no real experience in it outside of unfinished unreleased games I've built.

I suffer from anxiety and depression. Building games is a cathartic hobby for me. I would like that to be my main job - not for a company, but for my own independent games and my own sanity. I got serious about it a few years ago and started learning as much as possible related to game dev (not just on programming side but concepts like level design etc.)
I've played around with a number of concepts and engines and landed on Unity and a (hopefully not-boring) open world RPG.

I've been offered a couple of full time web related python jobs recently but I'm not too convinced that diving back into a FT job is the right move for me or for a company.
Does anyone have any sort of advice to hand out? As of late I just feel like throwing in the towel, heading into the forest and living in a tent with a laptop to finish my game.
This will most assuredly end well. I'm sure the Chinese won't respond in kind by escalating even further, thus creating mutual demand in both markets for cyber warfare.
Probably no one is reading this anymore, but I feel like this is an example of being fancy while also being true to the web page:

http://pitchfork.com/features/cover-story/reader/bat-for-las...

It's a fancy web page, but it's still just a page that respects the content and doesn't try to look like an app.
Cool nostalgia

Like to see some evidence they work and to know why they have gone out of fashion.

[edit] Reading the conclusion in one thesis, their findings were the colors did more harm than good. But the concept of using blocks might have befit.

http://www.worldcat.org/title/study-of-the-cuisenaire-gatteg...
and what's the alternative? not retaliate and try to beef up security even more? obviously that approach isn't working.
Having interviewed quite a number of self-proclaimed JavaScript developers over the course of my career, my experience is that this is debatable at best.
Compared to SF, oh yes, much better! The most common taxi in Stockholm is probably a Mercedes, and the average car of the kind of people who would want to drive for Uber is definitely not. I don't see how Uber could mobilize a comparable fleet to compete with that. I can see UberPool working where people expect a "regular" car, and I could see them becoming the dispatch of choice for non-affiliated taxi drivers, but that's the bottom of the barrel of that market.

If people think that taxi markets everywhere look like the one in SF, then I understand why people value Uber so highly and think they'll conquer every market easily. But the truth is that Uber doesn't have anything that isn't easily replicatable by entrenched taxi companies that are willing.
I hope not. I think it's like the nuclear arms race. Everyone wants one so that it can deter it's enemies but using a nuclear weapon can be disastrous. Similarly, the US strategy here could be to show China that it's capable of retaliating if it wanted to but doesn't necessarily have to resort to it.
Code Is Not Written in a Vacuum
I don't think his areas of specialization, personality, or interests align to the plea either.
These beautiful people definitely weren't dating anyone at the company.
Keeps stuttering for me. Otherwise is fun.
Finally a mutually assured destruction where the Germans actually have power. (Just check how much stuff worldwide is using SIEMENS tech, including almost all power grids, train infrastructure, etc)
yep, that's a ball of angry, smother-happy bees all right.
And so begins World War III.

We will look on in horror as the tools we built are used against us.
A couple of general ideas to help you scope the solution space:

- If you can do something with the part still in-circuit (i.e. the PCB assembly itself is still functioning), that's probably a preferable way to proceed. For instance, if the part is connected on the PCB to a processor, you may be able to connect to the processor via its JTAG or debug interface and dump the attached memory that way.

- If you're going to try to go down the flash programmer route, note that this will require you to get the part off the board, which can be tricky if you don't have the right equipment (especially if it's a BGA).

- One thought that comes to mind re: flash programmers is that some of the components distributors will do pre-programming as a service, which means they have equipment to program the loose parts (& may be able to use the same equipment to read the contents back out). If you or your company have a relationship with one of these sorts of companies, you might be able to lean on your sales rep to get a favor.
"The White House could determine that the downsides of any meaningful, yet proportionate, retaliation outweigh the benefits"

And yet, the title is "U.S. Decides to Retaliate Against China’s Hacking" - this is quite sensationalistic.
For a moment, I thought we were talking about the videos.
I'll guess we just have to agree to disagree...

Total compensation, which adds these benefits to wages and salaries, shows that earnings have actually increased more than 45 percent since 1964.[1]

[1]http://www.cnbc.com/2014/01/29/-wage-stagnationcommentary.ht...
Maybe China's just trying to help fight terrorism!
This is a huge milestone! I had a problem I was solving with Clojurescript six months ago and having access to the reader would have solved it perfectly, with lisp elegance. Instead I had to make a mess.

I think this opens huge computer science educational opportunities. Imagine a LOGO DSL inside your browser. With all the power of cljs. I am very excited!
I'm pretty sure that the nuclear arms race was largely driven by adherence to MAD. And what you're describing is exactly the kind of escalate-in-kind deterrence policy that was built on top of the mutually assured destruction philosophy.
ProcessWire 2.6.11
yes, but consider the political environment.

there are already people who complain bitterly about the military incentives (after they have taken and spent the money or gotten the education they wanted)... but no political groups are going to be taking up thier cause.
They have poor judgement for being right? Huh?
I wonder if this is how they decided to retaliate...by saying they would? This has the feel of an intentional leak to tell the Chinese that we mean business. If so, why telegraph our actions if we're actually going to follow through?
>Because systems are so complex, defensive techniques will always fall short.

sounds like a typical BigCo's PM argument when waiving security bugs.
A Rigorous Comparison Between Mathematicians and Engineers
A 26 week old fetus is viable, but you can still abort it.
It's not NSString, but it's interesting to note that Objective-C selectors are just interned strings. By interning them, they can be compared with a simple pointer comparison. Because they're just C strings, you can print a selector by casting it to char *. (But don't do this in production code, debugging only!)
A new 3DS hack has been released and the exploit game is FREE
Shame on you – you support a terrorist over the people’s president?
As for your quote - monospace white-on-black command-line is not a gendered aesthetic (although it's a stereotype aesthetic? The "typical computer geek" from TV shows I guess?). Glittery pastels are a gendered aesthetic.

>And they will appeal to different audiences."

So would having a sports bar and female strippers. I'm not denying that glittery pastels are going to attract a more feminine girly-girl audience. I'm arguing that not all girls are girly-girl types and many are tomboys and would feel completely out of place in a place that tries to yell "Disney Princesses" at the top of its lungs.

> So what if it's laid out in a manner that's coded as "feminine" by this society? What's wrong with that?

Not all girls are feminine and will feel out of place and unwelcomed in such an environment. We can start there. Which is the point I feel Joe was trying to get across and is definitely the point I was trying to get across.

>A quick google suggests that DjangoGirls is explicitly open to all women and also non-binary individuals, and at least one major player is connected with TransCode.*

This does not answer my question about "priority to female individuals". I had already answered myself about being welcomed or not. But when priority is given to females, do transexuals count as female in this regard? Because in many places we don't - especially pre-op.
It leaves a definite calling card, closing off some of the debate about who's doing what. Perhaps removing some of the ambiguity also reduces the chances of unintended political or market fallout.
Sounds like they sent daily reminders plus voicemail. Sucks to be on a trip without internet access but that could have happened with any customer service payment error.
Looks awesome guys! Keep up the great work :)
I'm not even anti-systemd, but I can certainly use you as ammunition against systemd proponents if the time ever comes. Thank you kindly for lacking self-control and giving me this opportunity.
I'd guess US would retaliate by releasing information that hurts the Chinese government politically, specifically corruption. I don't think it would escalate into anything other than stealing/releasing information. Full on cyber war is really unlikely as both sides would prefer to stay in power.
It does mean that every dereference needs to check for taggedness, though. For example, newer versions of objc_msgSend check the low bit at the beginning of the call before it proceeds to the normal message send path (or not, if it actually is a tagged pointer).
My college's critical thinking, diversity, religion, and environmental science classes were outside my major. Yet, they made for fun discussions and learning experiences. Met some good friends, too. I can tell that things I learned in those classes have had a long-term effect.
Yahoo Livetext app looks interesting.

http://www.producthunt.com/tech/yahoo-livetext
It's all technology man. There are plenty of cheap IUDs in the US, but everyone wants to use the latest and greatest.
If you're arguing that translate.google.com posts should be treated the same way, I agree, and they mostly are. We don't see all of them, of course.

It's impossible to say whether the upvoters of this story were mostly German speakers, but that's plausible. HN is fortunate to have many German-speaking users.

There are exceptions to every rule, but I wouldn't say this post was exceptional. Fine as it is in its genre, it adds no major information about the story. And HN generally eschews political tracts, not because we disagree with them politically, but because they're not what the site is for.

Not all articles on the same story are strict replicas of one another, but once HN has a major thread on a story, we treat subsequent posts as dupes unless and until one adds significant new information. We figured this out after the original Snowden/NSA deluge, when the frontpage was inundated with both kinds of story: ones that contained major new info, and ones that were simply piling on. There were an order of magnitude more of the latter.

Teasing the one class apart from the other does require judgment calls, but not wild ones, and in my view HN has benefited greatly from the distinction. It optimizes for the diversity of the frontpage while still allowing for ongoing stories. An example is the recent events at Reddit. I think HN got that roughly right: a fresh thread for each major new development, while treating the more ephemeral stories as dupes.
Shoptiques (YC W12) Is Hiring a Recruiting Director in NYC
Problem with retaliation is attribution; it can be hard to know just who should punish. In this case it seems to be clear, but that's not always so.
After learning Clojure and ClojureScript I got really excited and was ranting about it to my friend. He skipped Clojure and went straight to ClojureScript and has been having the time of his life.

One thing that's simpler in ClojureScript is that it only has one type of shared mutable reference, the Atom. Atoms are uncoordinated and synchronous. But Clojure has more types, with different behaviour characteristics. So in a way ClojureScript is simpler and could be the introduction.
I think most people would say that "viable only with massive medical intervention" is not what they mean by "viable" in this context.
Why is this only for Android? Is that because of JIT compiler or is it an issue even on JVM and hence can we use flatbuffers even on web?
I mostly agree with Universities and CS programs. It seems that most competency-driven stuff are the "hand-on" schools like ITT tech (local example). Even their quality varies widely based on reviews I've seen. In security, the only thing I ran into was the SANS GSE certification that involved interviews, paper tests, and hands-on demonstration of skills. That's a nice combo if following an education teaching fundamentals and practice.

Anyone seen something like that in accredited institutions or even affordable training companies?
As long as WWIII is a cyberwar of nerds hacking each others' systems, that seems like a big improvement over its predecessors.
I ran across Cap'n Proto (https://capnproto.org/) a while back and at a glance it seems to do something similar. Is that true? Are you familiar with the tradeoffs between the two?
No. Actually the amount has been increasing exponentially the last few years especially because of fast prototyping due to 3D printing and crowd funding. Additionally many of the new shippers have much different profiles than those before. Finally subscriptions have increased rapidly which is even more shipping.

The last trend is recycling subscriptions e.g. Le Tote which has increased the need for our service. (Le Tote is not a customer).
If only war was completely in "cyberspace" and no one got physically hurt...
Less a different time, more a different company. The sad part is, that sort of culture is why they "lost".

Thinking about more than yourself never seems to work out in this world. I really, really wish it would. And I'll personally continue to follow my conscience over my wallet. But the wallet always wins in the public arena. In all facets of life.
You're absolutely right, there is no decision, there is no announcement, they even say the White House can't decide how to. NYT needs to add a [RUMOR] tag.
Plenty of internal redundancy can be reduced by sharing components and some interfaces. However, it's not redundant if it's a necessary part of solving several different problems. We don't count as redundant buying different hardware for embedded, mobile, laptop, and servers even though they might use same ISA and Linux.
Lots of helpful comments on this thread. Things that have helped me in my past year (been doing it on and off before that) or so as a full time remotee.

Organizing work. Personally, Emacs 'Org mode' has been of tremendous help in this regard. Key thing was sticking to it consistently for about 7 months -- it has now become an almost reflex action to break down work into manageable chunks. Not 100% diligent at this, but I'm reasonably happy so far.

Also, having a fast communication tooling setup (my environment on Linux: 'mutt + offlineimap + postfix' and IRC) that works smoothly over intermittent network connections can be quite handy. Especially so when
you need a change of scenery -- working from coffee shops with feeble internet connection, or from a park near by, to shake up the day-to-day humdrum.

Most other points here about work/life balance seconded.

And, yes -- remote work is great, warts and all!
Any software where backwards compatibility is important requires a lot of "thought" up front. Otherwise you end up supporting half baked solutions for years.

I'm still supporting half baked solutions from 10 years ago because we don't want to break our customers systems.
Your credit score counts because credit score is a good predictor of accident risk. Apparently nobody really understands why, but that's how it is.

Insurance is all about trying to predict the future, which is tough. The tools are imperfect. But they're decent, and the data supports using credit score as a factor.
I really think if the US wants to retaliate they can just make it legal for US citizens to hack china's targets. Then just wait for the phone call "Prease make it stop!"
If they weren't so conflicted about encryption, the logical response would be to get serious about defensive measures and make sure they're more widely available.
You really think cyber-warfare can't hurt anyone physically? What if they hack the 911 system? What if they hack the power grid? etc. etc.
Thanks so much. Please ask your family/friends to try us out.
Thank you. The startup scene in BD is definitely starting to get traction -- we just need more engineers.

Please ask your family/friends to try out Chaldal.
Not all SAPs are black. Some are publicly acknowledged.
Experiment if you want, but as a guy, I would "nope" right out of there. I don't think those sort of tricks have a net positive impact on your numbers.
Actually, I don't live in the U.S., and the awful healthcare (unless you're wealthy) is one of the reasons that would make me hesitant to live there (in particular the cost of having children scares me).
"the goal was espionage, on a scale that no one imagined before."

NSA comes to mind...
You may not be their target demographic, but Polyvore is certainly far from that. At 20M uniques per month, 2.4M new sets per month, $22M raised, 150 employees, highest AOV of all social media sites (ahead of Facebook, Pinterest and Twitter), Polyvore is literally the highest converting social platform of them all. They're a pillar of the fashion community.
Complying with laws is hardly "evil", it's part of living/doing business in places that have them. How you (or Google) feel about these laws is irrelevant.

The article describes exactly why Google chose not to apply a French law to the entire world - it's an application of the rule "laws in country X do not apply outside of X." Doesn't sound very evil to me.
I was wondering about this. What recourse would the Chinese government have if you sabotaged some of their systems? Stealing their data would be the best move but causing some problems wouldn't be too difficult.
First thing to do is have a look at the datasheet <http://www.eonssi.com/upfile/p200892917341.pdf>. I was hoping that it'd be SPI or I2C, but it's a big parallel flash, so reading it is going to take some hardware.

Comes in two packages a TSOP and a BGA. I'm hoping you have the TSOP. If you've got a TSOP, you can get a socket for it / probe it. You can probably also get a socket for the BGA but you might be paying out the nose.

I like the JTAG approach as well. Assuming it's connected to a processor or FPGA that's got boundary scan, even if the rest of the system isn't cooperative you can bitbang the contents of the flash out using the JTAG hardware.

The JTAG silicon - even if it's on the same die as the processor / FPGA is totally separate. It's something like a tiny state machine. Read up on it, really powerful. <https://en.wikipedia.org/wiki/Boundary_scan>

Another option is to transplant the interesting flash from the dead device to an identical working device. Use the working device to read out the contents of the memory. This will require some soldering skills.

Or.. you can pull it off the board, and get a programmer. The industry std is Xeltek but they're $$$$. I've got a TL866, works pretty well. <http://www.eevblog.com/forum/blog/eevblog-411-minipro-tl866-...

Or.. you can read the datasheet and build yourself something with an arduino. You'll run out of pins though, so maybe a pro? or maybe port expanders.

Good luck!
Ok. Let's assume your right, he's misreporting things, and work from there. I'm interested in your assessment of its dogfighting capabilities based on that test or others.

1. Can a F-35 pilot visually track whats around them as well as a pilot of F-16's or Russian/Chinese hardware?

2. Can the craft turn as well as a F-16 or Russian/Chinese current gen fighter?

3. Does the cannon fire reliably and with enough ammunition to do its jobs?

If any of these is no, then Axe is on point in terms of his conclusions. He's wrong if they're all Yes's and you can back that with testing results.
Doubt it's a rumor someone leaked this or talked off the record. The government wanted to get this out even it was just to save face.