skysight-inc/HackerNews huggingface dataset:
You need Windows 8.1 for it due to the Hyper-V and WDDM dependencies.
The problem is what consequences those mistakes have for other people.

Yay more botnets.
Can't wait to use the new JSONB operators of 9.5, e.g.:

SELECT '{"k1":"v1"}'::JSONB || '{"k1":"v2","k2":true}'::JSONB

=> {"k1": "v2", "k2": true}

In 9.4 this is the 'best way' I know:

SELECT
('{' || STRING_AGG(
'"' || COALESCE(j2.key, j1.key) ||
'": ' || TO_JSON(COALESCE(j2.value, j1.value)
), ',') || '}')::JSONB
FROM JSONB_EACH('{"k1":"v1"}') j1
FULL OUTER JOIN
(SELECT * FROM JSONB_EACH('{"k1":"v2","k2":true}')) j2 ON j1.key = j2.key
ISIS, and other terrorist groups, encode all their data and use TOR in an effort to hide from efforts to catch them so, yes, encryption is used for that.
"Stop using overzealous static analysis tools" is a fine point.

"Reverse engineering kills babies^Wmarriages and the contract says not to look closely at the software you paid for so you're a bad person" is a terrible point.
Legacy systems...

That being said, as a (forced) Oracle customer I have been and will continue to do everything in my power to migrate off of Oracle's eco-system. This ridiculously offensive post by their CSO is just more motivation.
Actually, I was thinking of SPKI (my current nominee for 'best idea which failed').

I really do wish that canonical S-expressions had won over XML for data transfer (as opposed to publishing markup): much more readable, incredibly easy to parse, fairly lightweight. Really, nothing wrong with them except for some reason people seem to be allergic to parentheses.

Why is that? Is it that one has to hit shift to type them on a standard keyboard?
Clickbait title, content about why something like this won't happen. screw this.
I'd take Yahoo's data with a grain of salt. Was tinkering with options prices there, and the data wasn't clean which lead to a lot of false positives (e.g. a lower strike call was selling for 1/2 of what a higher strike call sold for).

Checkout TradeKing. You have to open an account to use it, but (to my knowledge) you don't have to fund it.
Which order of n it is has no influence on crypto. The crux is whether there is a large difference in computing an answer and validating an answer.

A technique which requires both n^100 for validation and computing is useless, a technique which requires n^2 for computation and log(log(n)) for validation would be fine (you just have to use sufficiently large n).

It's just that problems with an exponential computation and polynomial validation provide an almost unbeatable cost-to-benefit ratio in terms of n. A n^2/log(log(n)) algorithm might require 10MB encryption keys to be secure, while a n^a/n algorithm like the current prime-based cryptosystems require ~4KB.
You're correct, I had the "city of London" in mind rather than the "City of London".
It's exciting seeing these types of tools generally being written in Go.
The Philosopher of Surveillance
Lots of people suspect that the Chinese purchase of overseas property is mostly an expression of distrust at the Chinese government. Remember that China is still (very nominally) communist and not afraid to confiscate property of people who are sufficiently discredited. It happens occasionally in corruption crackdowns.

For this purpose, it's a minimum-risk store of wealth with a potential for appreciation and any actual returns are less of a priority. Something similar applies to Saudi and Russian oil wealth; an escape from the possibility of SHTF.
If I had the money, I'd buy all 400 of these villages, and demolish them (save for a few historic buildings). Let them turn back into forest.

Then I'd identify one village that was a good candidate for development. Start a new town with high density housing, walkable streets, and greenways. Require a green building code. Design great public transit. Eventually, ban cars. I would name this great city "Normville," after myself.

399 villages spared from sprawl!
He quit, he wasn't fired. If you have evidence to the contrary, please post it.
You can in about:config, just Google for it.
Is it really this way? My, this civilisation really is coming to an end :)
Useful, yet paranoid Java programming techniques
Our team is heartbroken at the news about Zirtual and how many people now need help. We've got your back! PowerToFly.com has professional women who are ready to work today. http://bit.ly/1NnsKKb We are also available at hi@powertofly.com for any questions you may have.

If you are looking for VA remote work (or other roles), please create a profile to begin applying to any open positions. Best of luck and welcome to PowerToFly!
* Support for the 1024-bit diffie-hellman-group1-sha1 key exchange
is disabled by default at run-time. It may be re-enabled using
the instructions at http://www.openssh.com/legacy.html

* Support for ssh-dss, ssh-dss-cert-* host and user keys is disabled
by default at run-time. These may be re-enabled using the
instructions at http://www.openssh.com/legacy.html
I did not say that the overall model must be built on intraday data.

But most models will simply be useless without proper execution. And IMO, the model should be back-tested with simulating the transaction costs as close as possible.

So the overall model might be fine and interesting, but if you can't close the loop with a proper execution model, which usually affects the overall model as well, you simply don't have much.
Android apps that fail to validate SSL
No, you'd get "You don't want a drink? Why not?" as I experienced many times. Hence the clarification.
This is disappointing. Everything is becoming centralized, even Firefox extensions. I wish there was an opt out like "unknown sources" in android, but they keep saying we're not smart enough to make or own decisions. They won't even put one in about:config. This change well undoubtedly upset developers and other techy folk, exactly the kind of people you want working with your software.

Fdroid is working on third party repositories, maybe that will catch on to decentralize the mobile world a bit. Something like that for browser extensions would be sweet. Take a look at Fennec Fdroid for a cleaner Firefox mobile experience at least.
Java Style Classes in C++
No big games that I know of, but it's certainly used in games; the LOVE engine embeds LuaJIT.
Oh yes, I agree. That is why I think it makes sense to tell everyone you can about the issue. However, there is only so much anyone can do about it, and technically it isn't Oracle's fault that people won't listen, only the bugs/vulnerabilities in their products.

A crude example: Imagine you're a janitor. Your company only supplies you with buckets from Leaky Bucket, Inc. Their buckets always leak, creating more messes that you have to clean up. Sure, Leaky Bucket, Inc. needs to fix their bucket processes, but I'd be more angry at the company for continuing to use buckets from a shoddy manufacturer.
You forgot the bit about "The Larry Ellison Institute for the Prolonging of Life: <stage pause> namely his"
https://news.ycombinator.com/item?id=9238739
To add to this, it is hardly justified to compare XML and JSON - XML and the associated standards are a lot more powerful and feature-rich than JSON and the same holds for the available tools. JSON works well for simple things, XML proofs its usefulness when things become more complex.

By the way, XMPP predates JSON or at least stems from a time when JSON was not jet standardized or widely accepted, so at least in the context of XMPP the XML vs JSON debate is pretty futile to begin with.
I love the part about students walking around in their pajamas at the library during finals week. The "puppy room" sounds utterly ridiculous.

It's been a long time, but this happened at my University too. It was just part of the relentless competition among students to make other students think THEY had it so much harder than anyone else. It was like a badge of honor to be taking a 300 level class as a freshmen, or have to study all night long, or to be starving because you had so little money.

I did the same thing.

And when you get out of college, it just transfers over to parenting.

New parents walking around in sweat pants and their hair a mess to show that they got no sleep due to the newborn. Then when you have 4 kids, you like to pack 300 lbs of kid crap around with you to show that you have WAY more kids than that new parent, or you talk about how many sports you are taking your kids to, how big your grocery bill is, or whatever. It's all so silly. I'm not sure why we seek this recognition.

I'm wondering what comes after parenting at this point... I'm assuming wealth and how we use our freedom among other empty-nesters???

EDIT:

I'd like to state that I actually don't find any problem with much of this, I just don't understand it.

When we are in college, we are facing the most challenging courses and living situations we have ever faced to this point. We are learning from books, and how to handle life's struggles.

As a new parent, having a newborn completely uproots your life, and it IS incredibly challenging. EVERYTHING has changed at this point.

Then with lots of kids, yes, it too is crazy.

From then on, I have no idea.

And the "puppy room", well, to each their own.
We sold you the car but don't you dare look under the hood, 97% of problems that these cars come with may one day be solved by us. Someone else may be trying to build the same car you already purchased from us! Why didn't we obfuscate access to the engine? Well that would have required some of the same effort it would have taken to write more secure software err make better cars in the first place! What do you take us for, competent!
But people don't tend to say "Why don't you have a lighter?" when you say "Sorry, I don't." in the same way that they query why you don't want a drink. I endured this for years; it gets tedious after a while.
I think that is a very reasonable course of action, and that is my point. Rather than complain about the no-reverse-engineering thing, you really should just move everything you can off of Oracle systems if you disagree with them on this.
University President Becomes an Uber Driver
ebooklib: Python library for handling EPUB2/EPUB3 and Kindle file formats
Thank you for the reply!

How are Hoare logic and predicate logic integrated? Hoare logic can be seen as a form of second-order predicate logic. What kind of Hoare logic, total correctness, partial correctness or both? There are two main approaches to dealing with aliases, separating conjunction and content quantification. Which do you use? Both become much more complex in the presence of ML-like extrudable scope, e.g.

let x = ref 3 in
let f y = x++; x+y in ( f, x )
I really, really disagree. If your data is on my computer I should have a say in what happens to it. If I want to tunnel your hsts connection through a proxy I should be able to do so.

You can't imagine how frustrated I was when I found out that I couldn't use my proxy any more, because some guy somewhere decided that it'd bee too hard to hard to add the following lines to firefox:

if (user_doesn't_want_hsts) { dont_do_hsts(); }

I can't even bend my head around how someone thought it was acceptable to totally take this option away from people. I understand that such an option should be hidden deep inside a config somewhere so as to prevent a normal user from compromising his/her own security. But please don't presume that you did everyone a service by taking this option away. I can't express how angry and frustrated I become when I even think about it.

As for your 'no downside', as I said, perhaps not for normal users. But I most definitively am not. And I probably need to jump though a lot of hoops to tear this "feature" out of my own firefox build.
Check out the subsequent posts as well. The Washington Post also picked it up: https://www.washingtonpost.com/posteverything/wp/2015/07/29/...
JSON over HTTP is not that bad concept. With the HTML5 server-sent events, this becomes a really cool stuff. And surprisingly it is working very well. For developers this is an order of magnitude easier and faster to develop rather than using low-level websockets which is reinventing the wheel.
Building Amaphiko
> Foreign investors buying up real-estate don't do it for the love of it. They seek returns by renting out.

Except often they don't, rental income is almost like a rounding error to them (it's not really, but they can't be bothered - the main thing, it seems, is buying the asset.)
They are already being "eaten" by the forest. Luckily, most of them are quite biodegradable: just stone and wood.
IMO, a lot of F/OSS seems to really ignore the UX/UI part. It doesn't seem to be just XMPP-community.

For another example, Mumble (VoIP) is effectively leader in bandwidth, quality, encryption, and extensibility - but have you ever tried to teach an end user gamer or otherwise about certificates, checking cert fingerprints, backing up their client certs so they don't lose admin privileges on servers, it's more or less a UX/onboarding clusterfuck.
Could someone be kind enough to edit away the shouty capitals?
I think it's perfectly reasonable to be plenty angry at Leaky Bucket, Inc for forbidding end users from patching their buckets.
Rustaceans – Rust User Groups
“Big data” features coming in PostgreSQL 9.5
They generally do that as well, but not in their op-ed pages. Let me look: yeah http://www.nytimes.com/2015/07/08/technology/code-specialist... http://www.nytimes.com/2015/05/20/technology/tech-giants-urg...

The problem with doing just that is that you run the risk of misinterpreting or subconsciously strawmanning the opposition. That's what op-eds prevent; they're an unfiltered statement of a view. If everything runs through a rewriter, the reader misses whatever arguments the rewriter feels are too weak to be included.
To Be fair that is an issue looming over Africa, one which Europe needs to do its best to mitigate the effects of.
'Any sufficiently complicated C or Fortran program contains an ad hoc, informally-specified, bug-ridden, slow implementation of half of Common Lisp.' - Greenspun;s tenth rule [1]

[1] https://en.wikipedia.org/wiki/Greenspun%27s_tenth_rule
They're non-starters because the alternatives do not fit the users needs - it's pretty simple actually.

It's not as simple as just throwing out Windows and Office and switching to Mint and Libreoffice.
done---sorry!!! was a lazy cut-and-paste
not sure yet, but as soon as there's something I'm making the switch.

Too many extensions are required to try to make firefox into something usable, mainly reverting changes or fiwing broken or missing features: ad blocking, sidebar, download manager, bringing back the add on bar, putting back the ability to disable javascript, session manager, cookie manager ability to take screenshot, mouse gestures, tab manager, …
This is not the first post by an actual professor pointing out this phenomenon. I've observed it myself as a professional mentoring college students during internship, but my sample is way smaller than what a professor can see.

It is indeed a real problem. Everyone feels like they are entitled to be not only safe, but also "comfortable" at all time. No matter what. Nobody should judge you, nobody should disagree with you, nobody should make you feel bad about anything. This is a recipe to create highly dysfunctional adults.

Accepting conflicting opinions, facing rejection, standing for yourself without calling a twitter mob to the rescue, not seeking constant validation is part of being a functioning human being.

I'm wondering what is the agenda behind this trend. The author seems to think that it is to make sure students remain babies and stay in college as long as possible to avoid facing the real world. Could it really be something that petty? I started thinking that it could be encouraged by politicians to create a generation of babies that would feel better about dealing with a nanny-state.
Ask HN: Time to update my skills.  What should I do?
Growing up, my parents (both teachers) had to put in 100 hours of professional development every 5 years; I've tried to do the same as a developer, and I feel the time to put in my 100 hours is nigh.

I just turned 40, been in the industry for more than 20 years. Management experience, lots of PHP, Python, bash shell. MySQL, CouchDB, and Redis. Plenty of network administration, web server, and infrastructure design / setup, including AWS for the past 5 years or so. I've got no formal CS training, just what I've picked up on the job. My tech portfolio has afforded me a good living working for startups as anything from systems administrator to front-end developer to back-end work to managing developers.

I hate to say it, but I don't feel like I've got a great handle on the Next Important Thing. Is it Go? Haskell? Ruby? Docker? Will learning any of those leverage my brain into important programming concepts, like the way C++ and PHP taught me the importance of OOP so many years ago? Are any of those programmatic approaches going to be cornerstones for the future?
The US Economy Continues Its Collapse
Is this woman aware that static analysis is a non-negotiable requirement for filing your 510(k) if you do anything vaguely medical the FDA has to look at? Not that I would willingly choose Oracle for medical device applications, but the cognitive dissonance here is amusing. Pax vobsicum indeed.
Unfortunately it's relevant in the discussion of what Mozilla can get away with.
Can you email me at me@arilewis.com? We are trying to develop a solution to this problem.
But you always have to make some serious trade-offs. Sure, maybe you can use map and friends, but you usually don't get the nice things like tail-call recursion semantics (though Clojure doesn't have that either), efficient persistent data structures, proper first-class functions (looking at you, Ruby), lexical scope, etc.

I program in a functional style in all of the languages that I get paid to use, but I'm always sad about the lack of many useful features.
> NOTICE: This document is Humorous. It MAY provide amusement but SHOULD NOT be taken seriously.

EDIT: Also the X in XMPP stands for eXtensible not XML
Absolutely. But with the current peg, where USD goes so the CNY goes. Given that only 20% of Chinese exports are to America, China is becoming uncompetitive on its trade-weighted basket and must adjust in the same direction as other currencies, that is, weaker vs USD.
Find the best trekking destinations in Nepal
I think there may be a language barrier here. So, this should clear it up:

The only definition of "reverse engineering software" that I use is this -- "Using tools and deep binary analysis to take a compiled binary, and convert it back to source code as close to the original as possible".

It is a very specific definition. I do not mean general "analysis" or vulnerability testing or input manipulation, etc... only attempting to discover source code.
I don't know. With this laptop I'd probably pretty much be there, assuming this new mobile Xeon CPU can post numbers in the same ballpark as a desktop Xeon from a year ago.
Sounds like a Rules Engine to me. Your description implies a brittle solution that may not be representative of the utopic circumstances pursued by our colleague. Look into Drools. ;-)
London courts declare “one” is legally anything between 0.5 and 1.5
There was a large outcry, then he resigned. His resignation can be directly traced to his views. Whether he was technically fired or "decided" to resign seems largely irrelevant.
Free, Unlimited Mobile User Testing (BETA) in InVision
... which would also be available from the carrier, as would location records from both phones, etc etc. I don't get this opinion piece, the IMEI on the back of a phone should be more than enough (with a little police work) to figure out who owned it.
Who's she attacking in that post (SASO)? Veracode?
I understand that no piece of software is ever finished but I think OpenSSH serves its purpose very well and isn't the kind of software that is worth adding experimental features that would change its scope/purpose and therefore releases tend towards bug fixes and security patches and in this sense makes it kind of "finished" as much as I hate saying it like that. An important aspect of unix philosophy is one tool does one job very well.
I thought the same. I was genuinely curious to read about this story and then bam:

"Well, that story above? Never happened. Totally made it up."
It sounds like Oracle doesn't want to have any customers.
Something tells me if you fill a village with people of your choice, you'll get homogeneity. And without the chance interactions with diverse people and perspectives, those creative people will feel a bit less creative.
This goes exactly against the point I'm making.

Those strategies are not a bottom up system that combines a tailored infrastructure with sophisticated trading models. BOTH are needed, TradeStation is absolutely NOT a sophisticated infrastructure. And I doubt that the models are sophisticated enough to rake in alpha, especially in terms of execution.

Maybe if you put in a little money you'll break even with the subscription cost. If you put in a lot, those systems will break down.
Perhaps, but it wouldn't be the only UK law to do so, for example section 2 the Criminal Justice Act 1987 requires disclosure to investigations by the Serious Fraud Office, and schedule 7 of the Terrorism Act 2000 also compels the detainee to answer any question asked. Both of these also under penalty of imprisonment and/or fine.
The Missing Link to Disrupt the Database Industry
The crux of the article is that Oracle is getting so many unsolicited false positive security threat vulnerabilities that it's a distraction to their core business. They don't want "I found a hole in Oracle" to be an achievement like "I have my name on a patent."

Investigating security vulnerabilities takes a lot of time; and it's very easy to quickly get overwhelmed by false positives. I've seen quite a few analyses of code that I write; and most of them are warnings with no context or exploitability.

If every customer expected an engineer to respond to these, my team would spend all of its time in a "PR role," and wouldn't spend any time improving our products.
> If you really need it, there is no substitute.

It is worth checking if this is the case.

e.g. at my workplace, we're going through an Oracle->Postgres migration and it's WONDERFUL. Everything is much better now. Just from being able to have a clustered PG pair per app instead of a centralised expensive monster box.

Oracle's database is very good indeed: it takes data in, it gives it back, it does so very efficiently. But everything else about it is enough reason to look elsewhere.
A Large-Scale Study of Flash Memory Failures in the Field
I'm always playing around with messaging for pet projects, and tried xmpp a couple of times.

Honest question for edification and future play around projects: what alternatives do exist, fixing the issues presented here?

I'd love a lean, multiplatform api, with presence, multi-user chat, extensible for my use case, etc.

Recommendations?
Might be a rare experience, but as a South American in an U.S university, I couldn't relate to many American Latinos for their neurotic concern with micro aggressions.

Jokes that would be seen as amusing in my country were taken as a personal insult and avoided at all costs. Many interesting non-latinos would gradually be excluded for no reason.

Ironically, I fostered relationships with apparently "racist white males" who were more concerned with the content of conversations than 'fighting the enemy'.
wow, how do they fix _only_ one code point!??! that's gonna take more effort than just properly fixing it no?
Your email doesn't show in your profile.
In the immortal words of Jason Ellis, "You need to harden the fuck up."

Why is it that we're removing so much responsibility from kids these days? Or is this the end result of helicopter parents?