News for hackers. Stuff that matters.

hNewsLover99

Re:Evolution Runs Faster on Short Timescales on Friday June 16, 2017 @10:44PM (#14574012)
See also the link to "This might be the coolest visualization of evolution ever" and comments re: "Wolf359" and "Microcosmic God" by Theodore Sturgeon at...

https://news.ycombinator.com/item?id=12467015

Re:Steve Ballmer Serves Up a Fascinating Data Trove on Tuesday April 18, 2017 @10:45PM (#14145067)
Talk about your fluff pieces!

Sorkin's article ignores Ballmer's billion-dollar tax dodge... er, break... for buying a basketball team.* Ballmer should revise his boast from "paid for with pre-tax dollars" to "paid for with "shamefully un-taxed dollars."

Interesting terms that don't show up when googling Ballmer's site (at least as of today...): tax expenditure tax shelter estate tax good will sports team basketball... e.g., tax expenditure site:usafacts.org

And so much for the "already taxed" argument by Trump's billionaire class (and their gullible middle- and working-class sycophants) against the estate tax. How much supposedly already-income-taxed dollars of wealth will soon escape estate taxes? And how much will all of these tax expenditures add to working and middle class taxes and the national debt?

Now that, Mr. Sorkin, would be an interesting article.

* Check out "Steve Ballmer Gets Billion-Dollar Tax Write-Off For Being Basketball Baron" at https://yro.slashdot.org/story/14/10/27/0237200/steve-ballme....

https://en.wikipedia.org/wiki/Tax_expenditure

Talk about your fluff pieces!

Sorkin's article ignores Ballmer's billion-dollar tax dodge... er, break... for buying a basketball team.* Ballmer should revise his boast from "paid for with pre-tax dollars" to "paid for with "shamefully un-taxed dollars."

Interesting terms that don't show up when Googling Ballmer's site (at least as of today...)

tax expenditure tax shelter estate tax good will sports team basketball

             site:usafacts.org
And so much for the "already taxed" argument by Trump's billionaire class (and their gullible working-class sycophants) against the estate tax. How much supposedly already-income-taxed dollars of wealth will soon escape estate taxes? And how much will all of these tax expenditures add to working and middle class taxes and the national debt?

Now that, Mr. Sorkin, would be an interesting article.

* Check out "Steve Ballmer Gets Billion-Dollar Tax Write-Off For Being Basketball Baron" at https://yro.slashdot.org/story/14/10/27/0237200/steve-ballme...

https://en.wikipedia.org/wiki/Tax_expenditure

Re:Why the internet only just works (2006) on Tuesday October 11, 2016 @08:23PM (#12689569)
Wow! 42 comments on an article titled, "Why the internet ONLY JUST works" (emphasis added), and the word "security" occurs once, and the words "malware", "privacy", "malicious", "ransomware", "hack" and "cybercrime" don't show up at all.

Is there another internet out there that I don't know about? If not maybe the title should be "Why the internet only just stinks"!

Ask HN: AirPod Security Questions

Some questions re: iPhone 7 AirPod's Bluetooth implementation:1. Can anyone point to any specs or articles as to whether is vulnerable to eavesdropping? *2. Can multiple AirPods interact with the same device simultaneously? (Useful if legitimately authorized; scary if unauthorized/unknown.)3. Is it possible that unauthorized AirPods be connected, to an Apple device (either with or without...

( Read More... | 3 comments | 6 points | on HN )

AirPod Security Questions

Some questions re: iPhone 7 AirPod's Bluetooth implementation:1. Can anyone point to any specs or articles as to whether is vulnerable to eavesdropping? *2. Can multiple AirPods interact with the same device simultaneously? (Useful if legitimately authorized for local chatting; scary if unauthorized/unknown.)3. Is it possible that unauthorized AirPods be connected to an Apple device (either...

( Read More... | 1 comment | 2 points | on HN )
Re:This might be the coolest visualization of evolution ever on Saturday September 10, 2016 @07:29PM (#12471377)
Thanks for that tip and link, CarolineW ! I'll add this to my reading list. The wikipedia summary for Microcosmic God is chilling... Outsourcing with a vengeance!
Re:This might be the coolest visualization of evolution ever on Friday September 09, 2016 @10:51PM (#12467430)
Experimental acceleration of evolution was the plot of the 1964 teleplay, "Wolf 359", which was one of the very best Outer Limits episodes. A scaled-down version of a distant life-bearing planet was constructed in a laboratory safe-room. The passage of millennia of days and nights was simulated by a strobe light blinking at an imperceptibly-fast rate. Evolutionary progress was monitored and photographed through a mini-telescope in the adjoining room. Spoiler alert: it did not end well...

Wolf 359 asks whether evolution, at the grand scale, might be moderated, at least in part, by the mere accumulation of day/night cycles, regardless of their individual and cumulative lengths, like some sort of a cosmic iterator.

https://en.wikipedia.org/wiki/Wolf_359_(The_Outer_Limits)

Re:Designing Safe Software Systems Part 2 (2009) on Tuesday July 19, 2016 @10:40PM (#12126504)
A classic DrDobbs blog. Here's a link to Walter Bright's preceding part 1 blog:

http://www.drdobbs.com/architecture-and-design/safe-systems-...

This decision implies that a website owner can, on a landing page, and/or via postal or email message, notify Google, and other search engines, social media and data brokers that the owner does not grant, and indeed revokes, any authority to crawl, catalog, archive, link to or otherwise view or use the content on the site's other pages.

(Yes I know most sites want to be crawled and cataloged, but some might prefer otherwise, or to negotiate deals with search engines, or otherwise monetize or leverage their content.)

For a search vendor to proceed in the face of such a restriction would be an unauthorized and therefore criminal use of the site owner's server, content and traffic/throughput allotment.

Maybe this would be a good way to defeat Mozilla's upcoming Context Graph, which promises its own set of obnoxious side-effects.

I hate to speak ill of the departed. but none of the comments explore this point:

This guy sounds like a bit of an overly-solicitous Tesla fanboy and/or sycophant, who, possibly, having once "used this car to its full extent" in the prior avoidance situation, this time intentionally failed to take over control in order to test the autopilot, perhaps with the hope of getting another great avoidance success story and youtube video and/or to ingratiate himself with a celebrity like Elon Musk.

Some people can get a bit too cultishly infatuated with technology/social media attention/techno big-shots. We must think with our minds as well as our hearts.

I hate to speak ill of the departed. but none of the comments at the original story explore this point:

This guy sounds like a bit of an overly-solicitous Tesla fanboy and/or sycophant, who, possibly, having once "used this car to its full extent" in the prior avoidance situation, this time intentionally failed to take over control in order to test the autopilot, perhaps with the hope of getting another great avoidance success story and youtube video and/or to ingratiate himself with a celebrity like Elon Musk.

Some people can get a bit too cultishly infatuated with technology/social media attention/techno big-shots. We must think with our minds as well as our hearts.

Re:Database of 9.3M Healthcare Patient Records Breached on Thursday June 30, 2016 @07:39PM (#12012749)
"The database is being sold for 750BTC..."

Once again Bitcoin is the "getaway car" of choice for hackers and ransomware extortionists around the world.*

Where are all the Bitcoin fans when this happens? Probably reassuring themselves with, "Untraceability isn't a horrific crime-facilitating flaw; it's a feature."

At least good old currency bills had serial numbers on them...

* Just a few other examples:

https://it.slashdot.org/story/16/04/26/1357238/businesses-pa...

https://yro.slashdot.org/story/16/06/13/2211221/new-device-s...

https://news.slashdot.org/story/16/06/12/082234/ransomware-t...

Does anyone know if any large-scale landlord is also receiving user data as well as cash from its ISPs? EULAs are broad enough to let any ISP, website or app provider to do anything with customer data that they want. Landlords could already being treated as "partners" and thus negotiating for and receiving user data in order "to offer goods and services" and "to improve the "UX". Is this a fair price to extract from a residential "captive audience?"
So... these internet-founding Einsteins actually think that Bitcoin should be a part of "our" future Utopian web? Well what do they (and all the other blockchain fan-kiddies) think of the fact that Bitcoin has now replaced Western Union as the preferred getaway car for ransomware and other extortionists around the world?

Businesses, universities, and even hospitals whose critical activities grind to a halt at financial gunpoint, and who are advised by law enforcement to roll over and pay up because nothing can be done for them - must be delighted to know that the tools of their demise are so "Utopian".

The internet isn't never was and never will be securable. Even the most resourced orgs are unable to defend their data. The founding fathers of the internet and W3C should admit this, apologize, and stop holding out false hope for the future.

(Various edits) Facebook's justifications for its delay (i.e., waiting to confirm that the site was hijacked, and disregarding the obvious violation of community standards) are pure baloney.

Facebook's terms contain COUNTLESS LOOPHOLES that seek to PROTECT it in all cases, let alone its taking down a murder victim's bloody murder photo at the request of her family. For example:

--Facebook disclaims all liability for to its account holders and all other persons for any of its actions.

--Facebook Account holders and site users must defend, hold harmless and indemnify (reimburse) Facebook for any liability that might be imposed on Facebook by the account holder or any other person.

--Facebook reserves the right to pull material offensive to community standards or as necessary to facilitate law enforcement activities.

--Facebook Account holder's right to jury trial for claims against Facebook is replaced by "arbitration" by arbitrators (i.e., moonlighting corporate defense attorneys, who are well-known to favor corporate defendants).

Even assuming Facebook had some reason to disbelieve the family's assertions of murder and site hijacking - which it did not - how could it possibly have been sued or even criticized if it had promptly removed the bloody photos?

In the worst-case scenario, what measure of damages could possibly be imposed on it? What financial or property damage could possibly have flowed from its removal of the material were by some miracle held to be inappropriate in light of the family's assertions of murder and site hijacking? How about ZERO.

Facebook's actions clearly facilitated the murderer's goal of terrorizing the victim's family. I'd say that violates T&C and community standards. Of course Facebook also continued to earn revenue from ads as the site went viral. In a sense it is an accomplice after the fact.

Facebook's self-indulgently legalistic behavior in this case will incent other gun-nut nut-jobs to imitate the murderer in question by offering them a free 36-hour pass to post photos of their bloody crimes

Contrast this situation to Facebook's immediate censorship of a respected journalist's mere objection to Ferdinand Marcos' burial in the Philippine's Heroes Cemetery on the specious ground of "community standards". Facebook acts quickly to remove even the most innocuous content in order to protect its own interests (e.g., avoiding backlash of Philippines' conservative extremists). See https://news.ycombinator.com/item?id=11813354

In sum... this case encapsulates what is wrong with Facebook... and with Silicon Valley's tech elite.

DAO's claim of being "jurisdictionless" -- and thus not subject to any state or federal laws governing the rights and duties of business organizations, fiduciaries and beneficiaries or creditors and debtors -- then its equity owners (i.e., those who spent Ether in exchange for proportional ownership tokens) wouldn't enjoy the investor liability limitations and other protections provided by those laws.

As a result those equity owners could be on the hook for claims and judgments against the DAO for sums in excess of the value of the Ether they've paid in or the tokens they've received.

Interestingly, but not surprisingly:

1) The mainstream media coverage of the Johns-Hopkins study (or at least the reports that I have seen) omits the study's admission that it understates the total "medical error homicide rate" by not including similar fatalities at nursing homes, outpatient clinics and other non-hospital settings (SEE NOTE 1 BELOW).

2) As a result, most people who viewed that coverage now incorrectly believe that annual medical error homicide rate is a paltry 250,000, when in fact it has previously been estimated to be nearly twice that number. See, e.g., the 2013 study reported by HuffPo, in which the total figure was estimated in 2013 to be over 440,000. (SEE NOTE 2 BELOW.)

That's like losing the 50,000 U.S. soldiers lost during the ten-year long Viet Nam War every six weeks, month after month, year after year, decade after decade.

3) A condition imposed by the hospitals submitting to studies of this sort is that findings of error cannot be disclosed to the victims' surviving families or legal representatives (who, of course, are legally authorized to access the victims' patient records, and to assert claims on behalf of their estates). Stated differently, the medical profession can be induced to examine its inadequacies only if it is first favored (bribed?) with perpetual immunity, anonymity and concealment.

4) It is unknown (or at least unreported) what percentage of medical error homicides: - Are ever disclosed to surviving families, - Lead to professional conduct investigations, and to sanctions, - Lead to claims or suits, - Go uncompensated, or unfairly under-compensated, or - Are fairly compensated, both before and after legal fees and expenses.

5) As a result we cannot know the size of the economic windfall enjoyed by the perpetrators of these homicides, their stockholders, and their liability insurers.

6) But we can make some rough hypothetical calculations. If, for the sake of argument, half of the families of the 250,000 (or more likely 440,000) annual victims of medical error homicide were reasonably entitled to a $2 million (gross) recovery, but received nothing, then the annual saved-liability windfall would be $250 billion (or, more likely, $440 billion). Year in, and year out...

7) If the true economic costs of medical error homicide, of fraudulently-evaded civil compensation for victims' families were ever known, perhaps a different light would be cast on the ceaseless whining by the medical profession, insurance industry and political conservatives about "too many" medical malpractice suits.

8) Medical and support staff who withhold or misstate the actual facts of a patient death or injury caused by medical error can (and should) be, but rarely are, prosecuted for violating state and federal wire, mail and other anti-fraud statutes.

9) All citizens can and should do what they can to reduce medical error homicide rate. For example, when victims' families can identify staff who commit, fail to report or attempt to conceal such errors, they should demand civil and criminal justice and professional conduct investigations and discipline.

10) And in cases of extreme recalcitrance by medical professionals and staff, a little public shaming should not be out of the question.

NOTE 1: As used in this comment:

"Medical error homicide" refers to a medical error (i.e., an avoidable iatrogenic event, such as mis-calculating a dosage by making a math error, as in the famous case of the Boston Globe medical journalist, Betsy Lehman), which is legally negligent, and which causes or substantially contributes to the death of the patient or any other person. This definition reflects the fact that intent to kill is not a required element of a homicide.

"Medical Error Homicide Rate" is the number of medical error homicides committed in a calendar year.

NOTE 2: Sources:

Allen Frances, "Why are medical mistakes the thrid leading cause of death?" Huffington Post, 11/20/14, at: http://www.huffingtonpost.com/allen-frances/why-are-medical-...

Hospital Safety Score, "Hospital Errors are the Third Leading Cause of Death in U.S., and New Hospital Safety Scores Show Improvements Are Too Slow, "10/23/13, at: http://www.hospitalsafetyscore.org/newsroom/display/hospital...

CORRECTION: "Medical error homicide" refers to a medical error (i.e., an avoidable iatrogenic event, such as mis-calculating a dosage by making a math error, as in the famous case of the Boston Globe medical journalist, Betsy Lehman), which is negligent as a matter of law, and which causes or substantially contributes to the death of the patient or any other person. This definition reflects the fact that intent to kill is not a required element of a homicide.
Why are cars and motorcycles that can travel at 160 mph street-legal anywhere? Such vehicles should be legal on ly on private, properly-engineered high-speed tracks. Audi and all other car makers are hereby put on notice that it is foreseeable that such vehicles will inevitably be driven at reckless speeds on public roads so as to maim and kill drivers, passengers and pedestrians, and that they are liable for such manifestly foreseeable misuse. Unsafe at hyper-speed.
Re:Everything's broken and nobody's upset (2012) on Thursday May 05, 2016 @07:34PM (#11640527)
The "broken" items listed in Scott's 2012 blog are primarily personal productivity- and convenience-killing annoyances. Of far greater are the rather-more important things (like hospital operations, critical infrastructure and even medical implant integrity) that are broken, even though EVERYONE cares.

Software bugs cause more than lost inconvenience and productivity; they are an important vector for malicious activity that can be life-threatening.

Have things have gotten better or worse since 2012? Alot worse, I'd say:

2012:

The worst security snafus of 2012 – so far (NetworkWorld)

Worst security snafus of 2012, part 2 (Security InfoWorld)

2013:

2013 Raises the watermark of cybercrime worldwide (In depth Analysis) (Hack Read)

2014:

The year cyber danger doubled (Government Technology)

63 Percent of IT Security Pros Say They Can't Protect Confidential Data (eSecurity Planet)

79 Percent of IT Administrators Want to Quit Due to Stress (eSecurity Planet)

Average company now compromised every four days, with no end to the cybercrime wave in sight (ZDNet)

6 things security pros keep getting wrong (Security InfoWorld)

IT pros lack confidence in preventing cyber attacks, report shows (Computer Weekly)

2015:

Anthem says at least 8.8 million non-customers could be victims in data hack (Reuters)

US Office of Personnel Management Hacked Again (Slashdot)

Millions of records compromised in these data breaches (CSO Online)

2015's biggest data breaches: Were you a victim? (InfoWorld)

2016:

Hackers are holding a California hospital’s network hostage for $3.6 million (The Verge)

Infamous French Hacker Calls Internet a "Digital Shantytown" (Slashdot)

Ransomware Expected To Hit 'Lifesaving' Medical Devices In 2016 (Slashdot)

OK, panic—newly evolved ransomware is bad news for everyone (Ars Technica)

Even the Dumbest Ransomware Is Almost Unremovable On Smart TVs (Slashdot)

Bruce Schneier: We're sleepwalking towards digital disaster and are too dumb to stop (The Register)

Interestingly, but not surprisingly:

1) Like the hundreds of comments attached to this post (or at least the ones that I have read) today's mainstream media coverage of the Johns-Hopkins study (or at least the reports that I have seen) omits the study's admission that it understates the total "medical error homicide rate" (SEE NOTE 1 BELOW) (by not including similar fatalities at nursing homes, outpatient clinics and other non-hospital settings).

2) As a result, most people who viewed that coverage now incorrectly believe that annual medical error homicide rate is a paltry 250,000, when in fact it has previously been estimated to be nearly twice that number. See, e.g., the 2013 study reported by HuffPo, in which the total figure was estimated in 2013 to be over 440,000. (SEE NOTE 2 BELOW.)

That's like losing the 50,000 U.S. soldiers lost during the ten-year long Viet Nam War every six weeks, month after month, year after year, decade after decade.

3) A condition imposed by the hospitals submitting to studies of this sort is that findings of error cannot be disclosed to the victims' surviving families or legal representatives (who, of course, are legally authorized to access the victims' patient records, and to assert claims on behalf of their estates). Stated differently, the medical profession can be induced to examine its inadequacies only if it is first favored (bribed?) with perpetual immunity, anonymity and concealment.

4) It is unknown (or at least unreported) what percentage of medical error homicides: - Are ever disclosed to surviving families, - Lead to professional conduct investigations, and to sanctions, - Lead to claims or suits, - Go uncompensated, or unfairly under-compensated, or - Are fairly compensated, both before and after legal fees and expenses.

5) As a result we cannot know the size of the economic windfall enjoyed by the perpetrators of these homicides, their stockholders, and their liability insurers.

6) But we can make some rough hypothetical calculations. If, for the sake of argument, half of the families of the 250,000 (or more likely 440,000) annual victims of medical error homicide were reasonably entitled to a $2 million (gross) recovery, but received nothing, then the annual saved-liability windfall would be $250 billion (or, more likely, $440 billion). Year in, and year out...

7) If the true economic costs of medical error homicide, of fraudulently-evaded civil compensation for victims' families were ever known, perhaps a different light would be cast on the ceaseless whining by the medical profession, insurance industry and political conservatives about "too many" medical malpractice suits.

8) Medical and support staff who withhold or misstate the actual facts of a patient death or injury caused by medical error can (and should) be, but rarely are, prosecuted for violating state and federal wire, mail and other anti-fraud statutes.

9) All citizens can and should do what they can to reduce medical error homicide rate. For example, when victims' families can identify staff who commit, fail to report or attempt to conceal such errors, they should demand civil and criminal justice and professional conduct investigations and discipline.

10) And in cases of extreme recalcitrance by medical professionals and staff, a little public shaming should not be out of the question.

NOTE 1: As used in this comment:

"Medical error homicide" refers to an erroneous, and therefore negligent iatrogenic event that causes the patient to die. This term and its definition reflect the fact that intent to kill is not a required element of a homicide.

"Medical Error Homicide Rate" is the number of medical error homicides committed in a calendar year.

NOTE 2: Sources:

http://www.huffingtonpost.com/allen-frances/why-are-medical-....

http://www.hospitalsafetyscore.org/newsroom/display/hospital....

Re:Ask HN: Best home office chair? on Sunday April 10, 2016 @12:53AM (#11464956)
I feel your pain!!

Last fall I got a very adjustable but affordable chair from Staples; best one I've ever had. Reg. $199 and WORTH IT, but frequently on sale for $99. PLUS 30-day risk free trial, return no questions asked.

Staples Carder Mesh Office Chair, Black

http://www.staples.com/Staples-Carder-Mesh-Task-Chair-Black/...

In addition to swivel, height adjustment and back height and tilt, it features a tilting seat "pan". This is crucial for changing how your spine is loaded.

Tilt it forward to shift weight from your spine to your legs/knees/calves/feet. This helps you curve your lumbar spine. Then tilt it backward cradle your lower spine to reverse the lumbar curve for a time. Then zero it out level for a time. Rinse and repeat.

The combo of the height and seat pan adjustments are the only practical way to achieve the position advocated by PTs, i.e., your hips should be above your knees; though this position should be only one of many you assume throughout the day.

Also important: place chair on wood, tile or other hard floor, not carpet, and use plastic mat to make it easier to roll to/away from your desk without straining your back.

Good luck!!

Re:Common Fundamental Theorem of Software Development on Saturday March 12, 2016 @01:25AM (#11271628)
I'm no expert but it seems to me that the relative value of two programs (or functions or classes or whatevers) can be determined by only their LOC count only in the most trivial cases - e.g., a class that uses a single construtor/parameter signature and performs a single task under a single set of conditions.

If the logic has to handle multiple, possibly overlapping parameters and branching conditions in order to "do the same thing", then the longer code may well "outperform" the shorter one by whatever metric is most relevant to the use case (e.g., perform faster, use less energy, use less memory, be more readable, maintainable, portable, secure, or any weighted or unweighted combination of such metrics).

Does this make sense or am I missing something??

Re:5 Things We Have Forgotten About Open Source on Saturday March 05, 2016 @05:06PM (#11231289)
Here's just one pre-1998 use of the term "open source software", by Bill Joy, at 13:50 in this 1985 interview of/report about Bill Joy, Sun and Unix 4.2 on the Computer Chronicles:

"As for the future of Unix, he [Bill Joy] says its open source code, versatility and ability to work on a variety of machines means it will be popular with scientists and engineers for some time."

It's on youtube under the title, "The Computer Chronicles: UNIX (1985).

Maybe someday Google searches will include all transcripts of all videos relevant to our searches.

Talk about "Lies, damned lies and statistics." Why do these reports always understate, by many orders of magnitude, the number of U.S. patients killed by medical errors every year?

440,000 patients are killed by avoidable errors each year in hospitals alone, according to a 2013 hospital industry organization report.*

And don't forget about non-error-related iatrogenic fatalities, such as fatal cancers induced by CT scans, which the Archives of Internal Medicine estimates to kill 15,000 patients per year.

Or about non-fatal iatrogenic injuries, both error-induced and non-error-induced, many of which result in mortality in subsequent years.

No exaggeration to say that U.S. healthcare workers are one of the most lethal forces on Earth today.

Sources: * http://www.huffingtonpost.com/allen-frances/why-are-medical-...

http://www.hospitalsafetyscore.org/newsroom/display/hospital...

https://www.youtube.com/watch?v=wJ3Gh7a-FVQ

If they go out due to bankruptcy/liquidation, the b'y trustee can "avoid" what(ever few) privacy and IP ownership protections that my exist in the Evernote EULA and sell all of your data AND identity to data brokers... after all what's more important than making the creditors whole?!?