skysight-inc/HackerNews huggingface dataset:
You forget your key when leaving for work, and don't lock your door. It was accidental, you have a lot on your plate. Your neighbour sees you didn't lock it, and tweets out, "Hey Mike at 321 Greyhat Bvld, you didn't lock your front door". He didn't send that to you as a text, he tweeted it. You come home, and you've been cleaned out.

I'm sure we can all agree, you should have locked your door. Why be mad at your neighbour, he didn't leave the door unlocked, he didn't take your stuff...
This is the single best source I've ever read on options, exercising them, etc:
http://www.amazon.com/Introduction-Stock-Options-David-Weekl...

When I followed the recommendations (after checking with my accountant), I saved thousands of dollars and I'm still benefitting from that even now.

My only criticism is that I wish I had read it about 2 years earlier.
Just giving the benefit of the doubt here, a lot of the time it's unclear if your disclosure even made it to the right people in a company or not. No response is the norm for security disclosures, as is claims of "we didn't get this", even if you have a receipt for their ticketing system that says they did. I've sometimes spent far longer attempting to contact a company than doing research into something that seems to be a problem.
I don't think finding a unique SaaS idea is the way to go. You're better off studying the competition and trying to see how you can sufficiently differentiate your offering from them and creating an overall better service.

If you or your team have strength or experience in marketing, you can even create a clone and out-execute them on the customer acquisition front.

There are still vast swaths of businesses that use paper and pen and Excel for many things. So your competition will not be other SaaS offerings but, in fact, no solution at all and not even looking for one. Converting them to your solution is the hard part.
We're running production apps based mostly on Knockout.js and jQuery. We also use lodash and moment.

The problem with getting stuck into one particular framework is that then become an "X" programmer, not a web programmer. If you need a fully fledged bells and whistles one though, Angular is probably top dog at the moment.
Ask HN: Career in Web development
I feel hopeless and stuck. I try learning a language get frustrated then move onto a new language over and over again getting tough and bored because it's hard and I can't build anything useful.

Ontop of all this I'm broke no money and I'm 25. I want to make something of myself I want a career in Web development but have no mentor or guidance on where to start. I tried applying for bootcamp but can't do the coding challenges.

What do I do? I'm tired of minimum wage jobs. I want decent money.
Get back to me when copyright isn't life + 70 fucking years, rayiner, and we can talk about to what degree those who disagree with the Hollywood stance on copyright enforcement mechanisms and cultural-appropriation strategies, have a moral responsibility to opt out of their own culture entirely.

We don't dispute the importance of what Hollywood et al do, we dispute the outsize leverage that gives them in our government and in our laws. And I don't think it is reasonable to expect people to give up a significant portion of their culture while fighting a battle that has, so far, spanned a few generations.
You can also install another OS. Putting an Ubuntu LTS or Debian stable on it will help you way more, compared to OS X 10.9.5, than any number of other mitigation strategies.

Frankly, I'm way more comfortable taking my Windows 8.1 machine to public wifi hotspots these days than my OS X 10.9 machine.
then won't the Heat List disproportionately output people from a certain race?

This will only happen if that certain race commits more crimes (in the training data). If you take race out of a statistical predictor designed to learn crime, but race is a good predictor of crime, then the predictor might learn race at an intermediate step.

Now there are statistical issues one might run into - e.g., early overfitting of what is essentially a bandit algorithm, and unaccounted for feedback between training data and system outputs. But at least the way I'm reading the article, it isn't calling for more and better math (which would be the solution to the problems you describe).
It is in octal actually, and it isn't overly portable.

It should also start with a 0 to be "correct". Which in this case "correct" means the libc inet_aton() function will accept it and convert it to an ip address. The octal portion is nonstandard technically for uri's and is more an artifact of the libc the software you're using is sitting on.
Repost from the comments in the original article indicates it may have be fixed because apple changed something in the way it handles permissions.

>EdisonCarter 3 days ago

>It's only really "fixed" in El Capitan as a side effect of
Apple introducing the new - and widely reported -
"rootless" security feature which introduces fine grained file permissions.
In practice, I have few ways of verifying SSH fingerprints that don't involve trusting the SSL PKI.
I'm seriously shocked. This is ridiculous. This looks like possibly the easiest root exploit ever discovered on a desktop OS (a one-liner in bash). Why in the world would they allow an env variable to write to a file in a setuid'd binary?

I'm suddenly very glad I don't use my macbook as my main machine, but I guess I'll remove the set{u,g}id bits on newgrp for now. Don't know if that will break things, but it's better than getting a rootkit.
> I could see people getting together to form a non-profit foundation that could at least pay for a few guys to continue to work on Go full-time.

It's not going to happen, for the same reason the biggest startups in the Silicon Valley never came together to write their own language before. Let's get things straight, the only people who control Go is the Go team period. You are not talking about facts, so i'm not sure what is the point of your comment.
Are you a 1099 or a W-2?
This happened to a lot of people in the Valley after the dot com bust. They exercised their options, triggering a tax liability, and then the shares tanked, leaving them with no money to pay off the liability. They could only deduct $3000/year. Lots of people were in a lot of trouble, but I remember hearing that finally the IRS made a change so that this wouldn't affect you anymore.
for preventive and (post)forensic measures see https://objective-see.com/
They should have made the charge port in the back center of the car. Then while driving along a charging vehicle with a snake on the front would drive up behind and charge you up! Now that I would pay to see. You could even make it a detachable accessory on all electric cars so any car could give any other car a mid-flight boost. The future is bright and potentially very funny.
Any volunteer to summarize and translate from Academic to Lay?
I don't know. What sort of media do you think might be inducing false memories that are related to those subjects?
The Ephemerides
explanatory post: http://www.decontextualize.com/2015/08/the-ephemerides/
Remove/Do not install Flash and Java, and make sure that Gatekeeper is at the middle setting. Turn your Firewall on regardless, and/or monitor your network activity. If you know what a packet is, then Little Snitch, if you don't Radio Silence is what I set my parents up with.
Section.io – Cloud Based Varnish Caching Solution
The Most Popular Node.js Framework (Survey)
tl;dr Know what you're buying, know your risk threshold, hold it as long as you can, invest frequently.

It's going to sound like a stale and naive quip but buy low and sell high. I look for deals. Sometimes that's an IPO with a nice finance sheet. Sometimes it's a huge correction on a popular mega-corporation.

Weather you're a value investor or a growth investor the goal is profit, right? What works for me is knowing what I'm investing in. I'm familiar with the products or services.

It's a fun topic. There's lots to read out there. Sturgeons Law holds in full effect. 90% of all of it is total crap. All you need is probably at your local library.

Here's some homework. Look up these terms:

dead cat bounce, double top, exponential moving average, don't fight the tape, upgrades, channel, channel up, channel down, wedge, triangle, insider selling, dividends, oversold, ticker, forex, a falling knife has no handle, FUD, Irrational exuberance...

fun time 45 min talk on the basics:
https://www.youtube.com/watch?v=WEDIj9JBTC8
... Unless you use Firefox.
I am not familiar with Lisp but these don't look like n-tuples to me. Is it just a function that multiplies a value by a fixed number?

As I understand it, a tuple is a collection of typed objects. E.g. in C# the type Tuple<Int,Bool> or Haskell (Int,Bool)
Backwards compatibility. Anything pickled with HIGHEST_PROTOCOL will be unreadable in anything below Python 2.3.
> constantly constructing new values and objects, and transferring them around on the stack

This is not necessary, as long as your type system doesn't allow aliasing of mutable values (such as pointer arithmetic, eww)

https://en.wikipedia.org/wiki/Substructural_type_system#Line...

http://clojure.org/transients
Why does pdf.js even have any special permissions? It doesn't need any to render a PDF.
Learning how to use a debugger is excellent advice, but this article would be more useful to beginners if it recommended some good resources for learning how to use debuggers.
I had some trouble reconciling this as well when I read about thrust SSC. Think about the prospect of going 1000+ mph where you need 3 separate systems to stop. That is crazy fast and there is a significant amount of time when the driver has little effective control over the vehicle. He is riding a rocket and hoping for the best. It's an amazing technical achievement, conventional car or not. I certainly wouldn't want to be the driver here...
I believe in defense in depth. There is always going to be an escape. Within the last month there has been several different privilege escalations possible in OSX. While I appreciate OSX having a strong security model, secondary solutions are desirable too me.
Close, but that only worked for punched paper tape (which had 7 positions for hole / not-hole per row, with a direct mapping to ASCII). Punch cards used Hollerith code, with 12 positions per column, with a peculiar mapping to EBCDIC, where there would be only one hole in rows 1 to 8, which more or less gave the bottom 3 bits of the character, and a combination of holes in the other 4 rows, giving the other 4 bits.
Yes - Mancur Olson it is. Thanks! It's more subtle than just Wealth is Power, as it also explains some counterintuitive results.

https://en.wikipedia.org/wiki/The_Logic_of_Collective_Action
Pretty much anything and everything Viacom and Disney put their trademark on.
Save Contacts Distribution List to Outlook MSG and Parse Searchable Folder in OST
> This looks like possibly the easiest root exploit ever discovered on a desktop OS

Well there's always the classic "login -froot" bug [1]. Although, to be fair, you did say "desktop OS" and I'm not sure AIX exactly qualifies.

[1] http://seclab.cs.ucdavis.edu/projects/testing/vulner/18.html
> Apple are shipping a free version of their consumer product on every Mac and iOS device.

Dropbox has always been for users who aren't locked into exactly one platform.
Software That Reveals Your Feelings
Bah! I say that the plebs outside the ivory towers should stop using overloading __scientific__ terminology!

Have you ever used "dynamic" while not talking about physical forces? BOOM: you are an abuser! Repent! Repent!
The "magic number" is just a signal to the rootkit. It's not a rootkit itself.
Move Over Santa: Putin Claims North Pole
A better analogy would be your doorman, whose one job is to watch who gets into your building, leaving the key cabinet unlocked and going to lunch.

I don't mean to blame any individual human here, but I'm baffled at the process by which debugging environment variables were added to dyld without being carefully vetted for bad interactions with setuid binaries. This is a well-known easy place to screw up, and I'm surprised that someone was working on dyld without knowing that (although yes, humans forget things sometimes), and much more surprised that this made it past code review and into a shipping product.

This isn't a random screw up in regular software. dyld is security-sensitive; it's one of the small number of libraries that bears a responsibility to be paranoid about setuid.
A warning then: don't read too much about abstract algebra, or the word re-use abuse will make you sick.
Don't you have the option of sell to cover? You basically exercise all of the options, then sell a proportion to cover the taxes?
Conceptually it is still building a system of concurrent units, which are also isolated from each other's memory space.

Erlang's VM is like a mini OS for your backend system except that it can handle a million isolated processes while the OS can handle a few orders of magnitude less.
Gloucestershire radio ham manages to contact International Space Station
Voting and Shuffling to Optimize Atomic Operations
Would it be possible to mitigate this by setting the immutable flag on /etc/sudoers:

chflags uchg /etc/sudoers
Same issue with our hi.fi. Facebook's JavaScript SDK wouldn't write cookies to it, instead rejecting it as too short and invalid. Had to open a ticket and the oversight was corrected, with lots of embarrassment and apologizing.
There's a reason that the store staff are instructed to encourage you to leave the store if you open a terminal.
I doubt it is a engineer / scientist thing. Dijkstra was way much more of an engineer-programmer than many would realize. He was an engineer first and the rest later.

I think it is about correctness of claims. There are engineers who are cognizant of the deficiencies of testing, and those that believe that testing is truly sufficient and complete.
Oh, yes, obviously use google-chrome (not even chromium; there's too much free-software-purity stuff in the Debian builds to make me feel comfortable with its security profile). At this point it didn't even occur to me you could use another browser and consider yourself secure, such is the awful world we live in.
That's kind-of a bad analogy. It'd be better of:

1) The person who left the house open was certain to get the message quicker because of the tweet than just a text.
2) It was possible to quickly and remotely lock the door. Apple can and should fix this bug very quickly, as that is certainly possible for them.
There's a patch here: https://github.com/sektioneins/SUIDGuard
For anyone looking for the patch: https://github.com/sektioneins/SUIDGuard
> The core of ML is the real gold.

I think that's the thing that keeps me interested in OCaml and is making me interested in F#: the core ML language is not very complex, and it can carry you a long way before you start requiring advanced features. I wrote a few compilers in OCaml using only the core language and very simple modules (basically just signature + struct, no functors) and the end result was very easy to read and modify. I think very few languages can make a similar claim: either the language doesn't get you all the way and you need external help (e.g. C and its pre-processor) or overshoots into too much complexity (e.g. C++).

ML is not a language for all tasks (I am learning Rust for those times when OCaml is not appropriate), but I think that ML languages could be used beneficially in many more applications today.
Anyone remember Logan's run and the dating "circuit" thing they had[1]? We are finally there.

1.https://www.youtube.com/watch?v=OMlHZNMH5KA
No, because the vulnerability is that you can write to arbitrary files with root privileges. It turns out that sudoers is the easiest file to write to to gain persistent root, but there are millions of other things: /etc/passwd, /etc/cron.d, /root/.ssh/authorized_keys, any binary that's run by root, etc.
elaborate on your theory. What do you mean by 'historical guilt'?
No, and that's not a claim I've ever made in the first place. Copyright gives you a remedy against infringement, but you can still encounter procedural legal problems.
They are?!
Static analysis–what’s it good for?
No. Europa and all the moons closer to Jupiter than it do in fact occasionally travel backwards in relation to their orbit around the Sun. This is also true of Dione and all the moons of Saturn lower than it, all the inner moons of Uranus, and all the regular moons of Neptune.

The gas giants are much more massive than earth, while also being much further away, and many of their moons orbit closer to them. This all combined makes some of their moons pulled more strongly by them than they are pulled by the sun.
Oh, good, here's my subthread. Yeah, total alienation just about describes it. Here I am, pretty happily committed and in love, wondering what the hell people are going on about casual sex apps for.
Ask HN: How much does a web developer make in 2015
An entry or starting level Programmer, Javascript.
> Stefan Esser for flinging the vulnerability into the breeze for anyone to catch

Then let me help you with this one. The former is responsibility of the worlds most profit corporation with tens of thousands of employees, and the latter is under the responsibility of a random guy on the internet.
Or sick people eat less spicy food?
/etc/sudoers is not the only potential target here. Even if that did work, this vulnerability could still brick your entire OS. They could overwrite any file they wanted to.
Speed matters: Why working quickly is more important than it seems
Yeah, map(<big function>, array) creates a dependency that exists from when you read "map" to when you read the name of the array, potentially spanning a very long function. But if you have map(array) do <big function>, then you only have a dependency from "map" to the beginning of the function.

In general, if you have a function call f(a, ..., y, z), when you parse that (mentally, or in a shift-reduce parser) you have to keep the function name f in memory all the way to z. So you want to make a, ..., y as short as possible.

Similarly, dependency length minimization predicts that in English people will want to order expressions from short to long after a verb or preposition. There is a lot of evidence for this preference; it's been documented since the 1930s.

If there were a programming language where the function name came after the arguments, like (a, b)f, then the best order would be long-to-short.

Similarly, the DLM prediction for verb-final languages like Japanese is that people will prefer long-to-short orders. It appears that this preference does exist, but it is much weaker than the short-to-long preference among speakers of English-like languages.
I did the article. ECC crypto can mean ECDSA which is also flawed 90's crypto. I specifically demanded EdDSA which can more easily be implemented in a high speed and constant time.

I'm sorry you're so laser focused on your own writing, but the DNSSEC debate is bigger than you.
The Connoisseur of Number Sequences
The journey of a startup, from idea to growth
The End of PHP 5.3
Well she's confused. She thinks what Eve is showing Alice is Eve, but it's actually a copy of Bob.
The collection is empty. Feel free to resubmit once there is content (other than section headers).
I would state the argument as follows: We should use the term "before nuclear testing", abbreviated as BNT. It is more precise than "before present", which will become more inaccurate over time, whereas "before nuclear testing" will always have the same meaning.
Because the people who are skilled with robotics should instead be working on chemical engineering and process management?

I'm tired of seeing this fallacy of "one thing being developed means that another thing is being put on the sideline". It looks to me like Tesla have the best people on the jobs they need to be on, and just adding "more" isn't going to speed things up more than having more mothers will speed up pregnancy.
No alternative needs to be suggested. There is a common time scale we all already agree on and use every day.
While OCaml definitely makes introducing C code easier than other languages, why not just us SWIG[1] and call it a day? Especially since it supports a lot[2] of languages effectively for free.

1 - http://swig.org/Doc1.3/Ocaml.html

2 - http://swig.org/compat.html#SupportedLanguages
So I've heard; I haven't confirmed this for myself.
Ubiquiti Networks Scammed for $39M
I would think journalists' standards of a great mind in this instance pretty much match up with an average persons definition too. His career as a barrister/adviser/judge is achievement enough, and then in between he writes meticulously researched historical tomes and learns languages? The guy basically is Mycroft Holmes only more productive :)
This makes me think of the ol' OS/2 downfall. OS/2 could run Windows applications; this meant no-one developed specifically for OS/2, so they never got the developer mindshare, so there were no OS/2 killer apps, so users saw no benefit to using OS/2 over Windows.
Ubiquiti Networks Reports Fourth Quarter Fiscal 2015 Financial Results
Looks like this was a talk at the Black Hat conference today. In addition to the slides PDF in the Github repository, the Black Hat site also has a short paper: https://www.blackhat.com/us-15/briefings.html#the-memory-sin...
Maybe the author, presumably well versed in type systems, assumed that the use of effect typing was implied. If you're not familiar go check it out, but I'll give a synopsis. If you're familiar with `unsafe' in Rust, it's a specific case of effect typing.

You can annotate a function with an effect (useful examples: unsafe, impure, throws exceptions) and then if another function calls that function, then it needs to also be annotated with that effect, or else the compiler emits and error. Usually there will also be an escape hatch where you can assert to the compiler that you know, in a way that it can't statically prove, that a certain call to, say, an impure function, still doesn't have side effects. Code that appears within these escape hatches needs to be heavily tested in order for effect typing to be useful.

For the above examples of effect types, the compiler will also consider certain non-function-call constructs to have an effect annotation. Dereferencing an arbitrary integer as a pointer, for example, would effectively have an "unsafe" annotation.

I believe Nim has a generalized implementation of effect typing.
This is a hard questions to answer. If you exercise now you can convert that stock into shares that after a year will change from short term to long term investments and thus lower your tax liability on the difference of the option price and the market price.

But, you will be risking the money that you use to exercise those options, ie if the company doesn't exit, or exits where only the preferred stock is payed out, then you will lose all of that.

IMO, this risk is not worth the tax savings, unless you have a ton of money to spare, in which case why even care about the taxes. Hold the options until there is a real market for them, it's the least risky option.
Anyone can blog
The Presidential Candidates’ 404 Pages, Ranked