skysight-inc/HackerNews huggingface dataset:
"
#	Server Code Injection
#
#	Strings which can cause user to run code on server as a privileged user (c.f. https://news.ycombinator.com/item?id=7665153)

/dev/null; rm -rf /*; echo
"
That's a little aggressive for testing no?
or Working Effectively with Legacy Software.
If you worked for yourself, you'd be able to make 10 times as much?
Another happy user of Flyway here which essentially forces all of the described best practices onto your DB. If they only supported transactionless migrations, we'd be totally happy campers :)
The point was never to sell access to compromised computers or anything quite as nefarious as that.

The point with all of these schemes is to get users to install applications on their computer (or phone) that we were getting paid for on a per-install basis. A user who ran through our installer and installed all of the offers might net you $3. Multiply that by thousands a day, hundreds of thousands a month.

On the mobile side, as I mentioned in the article, finding desktop users who we could actually make money off of on mobile offers was much harder, which is why I suspect the practice hasn't caught on and become much more widespread in the industry.
An amusing anecdote is the onion in the varnish:
http://c2.com/cgi/wiki?OnionInTheVarnish
Bi-directional text is probably another one. All the bidi control characters, especially. Probably really all Unicode control characters in general.
Auto.schema.org is live
I'm using cloudfront, it's a CDN service (Caching) for S3 when using in this model.

Best Regard.
Truth be told I've actually been considering Wall Street. With all the jerkwads wandering around SF in forced-chillax-corporate-uniforms (hoodie, t-shirt with company logo, jeans), it might actually be pretty chill. : )
PSA: Great Tech Companies Exist, Find One
"Brett Scott writes about financial activism and social and environmental finance. He is the author of The Heretic’s Guide to Global Finance (2013)."

Without knowing anything else about the author, this byline does give a bit of a left-wing impression.
The architecture is a threaded interpreter, a fairly old and not particularly unusual interpretation technique.

https://en.wikipedia.org/wiki/Threaded_code

When written in C, is typically done using GCC's computed goto and the && label address-of operator extension.

Writing the handlers in machine-agnostic assembly is interesting; I'm guessing they want to tune the output more than writing the handlers in C would let them, or they can't rely on something like GCC's computed gotos.
It fails not at all.

Result of https://www.howsmytls.com/

Version: Good
Ephemeral Key Support: Good
Session Ticket Support: Improvable
TLS Compression: Good
BEAST Vulnerability: Good
Insecure Cipher Suites: Good

Result of https://www.ssllabs.com/ssltest/viewMyClient.html

Protocol Support: Your user agent has good protocol support.
Logjam Vulnerability (Experimental): Your user agent is not vulnerable.
FREAK Vulnerability: Your user agent is not vulnerable.
POODLE Vulnerability: Your user agent is not vulnerable.
Cipher Suites (in order of preference): TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b) Forward Secrecy ←←←←← listed first, other ciphers elided
Protocol Details: Session tickets No ←←←←← feature is labelled in yellow, all other details are labelled in black or green, elided

If outdated TLS ever becomes a pressing concern, it's easy to put a proxy in front of the browser.
It's nice to see crazy people finding interesting solutions to imaginary problems.
I don't deal with user input validation, but any resources for reading about handling various inputs like the ones in blns?
For reference I drink 1-2 cups of tea most days, sometimes none. Have never smoked, drank, or done drugs.

For me it's a couple areas I notice:

I have a more difficult time remembering names, specific words, etc...

I used to be able to do relatively difficult math problems in my head without actually thinking about it. Now I'm likely to use my phone to calculate three digit+ sums.

I find it harder to get "in the zone".
But how could a company that fired the great Michael O. Church possibly be anything other than pure evil?

More seriously, I would never want to work at a place that is structurally unable to fire toxic people, which is one of the big downsides of unionization from the "worker" perspective.
> deported

in capitalist America, we ALSO deport intelligent workers
Amazon, Google Want Changes to Low-Altitude Airspace for UAS
thanks the gods.... hopefully it's better
Isn't it just a nice little parable intended to clearly transmit the idea?
It appears there's a large number of people here who disagree with you.
> (iOS users recently got many of the same updates).

How is it that Google is still "iOS first." I mean, I love my iPhone and am happy that Google feels the need to update iOS apps before Android. But why? That's like Microsoft being OSX First, it just doesn't make any sense.
Suicide Prevention Charity Blocked by Facebook
Appreciate it. Made my share of mistakes, but still standing.
Who's your target audience?

You've done a lot of things right here. You've designated a specialization, done work to prove your credentials. Social media will help, and ebooks, speaking, and online courses are all a part of the passive income model.

The only thing you didn't do was identify who your audience is. You think it's PHP developers, but as czbond pointed out, most developers don't care about those topics. You did't validate your product against the target. Either you need to come up with another product, or pivot to a different market.
The older get the more original the ideas I seem to have.

Strangely the older I get the more unoriginal and older the ideas the younger people seem to think up.. maybe its their inexperience.. but they always seem to be wasting more and more time until its a zero sum game or they give up and just have kids.. then stop doing anything.

It might explain the 10 percent phenom, only a very few people get more original with age.. the rest just degenerate and give up.
I was gonna cite this work from their experimental collaborator:
http://www.nature.com/nature/journal/v446/n7137/full/nature0...

It's one of the most exquisite bits of biophysics I've ever seen.
One of my favorite texts back in my college days was The Ascent of Man by Jacob Bronowski. USA folks may not be familiar with this. It was actually more of a polished transcript of his TV series, which had aired in the UK and some other countries (including Malta, where it was required reading for getting into college in fact). Leo Szilard is a familiar name from that text - he certainly gets plenty of airtime in there.
Thanks! I will go through it. And it would be helpful, if you can give feedback on idea.
Thanks for the suggestions.
There really is no defense. It's just a money grab. When I was working there I dealt with it through compartmentalization and rationalization ("if I wasn't doing this someone else would, so I might as well earn that paycheck anyway"). Others there probably just didn't care.

The culture was very money-centric... everyone's compensation included a bonus component that was directly tied to how much revenue your products generated, and there would be big celebrations whenever new milestones were met.
Related - FozzTech implemented the XTIDE server for Linux/RPI: http://www.insentricity.com/a.cl/244/adding-a-hard-drive-to-...
Clinton takes debt-free higher education from progressive dream to mainstream
Does Bitcoin's underlying technology have other uses? Investors think so
What's wrong with seeming like you are a recovering alcoholic? Many people are, and if someone judges you for that, they're not a good person. Many people also don't want the excess calories, and if someone judges you for NOT joining them in drinking alcohol, again, they're not a good person.

Same goes if they think you're a food/diet nazi. Who cares? It's your body. They shouldn't be so judgmental of your life choices, especially something as personal as how you decide to fuel your body and stay alive. And if they are judging you, in my experience, it's usually because they're working through their own issues and would rather it not be pointed out how unhealthy their choices are, and they want you to join them in their maybe-not-so-great decisions.
Often politicians say they are pro-business. They don't say: pro free market. They really mean specific businesses - their donors / lobbyists / chums / future employers.
This has been my go-to for years.
Ubuntu One file syncing code Open Sourced
We are looking for a few good web application developers
> In the US, we finance college students with grants and subsidized loans. But rather than making college affordable, this aid has had just the opposite effect by driving tuition up across the board.

Increasing price (outside of aid) isn't actually the opposite of the effect aid is intended to have -- subsidies always increase the cost before subsidy; the intent is that they will decrease the cost after subsidy for those receiving the subsidy since, under most reasonable supply/demand conditions, the amount of increase will be less than the amount of the subsidy.

And this would probably work fine for grants taken alone, but we can't really isolate the impacts.

Loans, however, aren't subsidies, they are cost-deferment measures. They aren't meant to make college more affordable (in terms of lower net cost after the policy) for those who get them, they are meant to allow people who could not afford college up-front but who would benefit economically from college so that college would be affordable if it could be paid for on a deferred basis can afford it.

College loans, however, are problematic because humans (in general, and those younger than mid-20s in particular) tend to be irrational and to -- as has, I believe, been shown in numerous studies -- overly discount deferred costs, so that loans have the effect of subsidies on near-term costs while at the same time just being deferred costs. So they increase the pre-policy cost without actually being a subsidy to those who qualify for them.
What’s in the missing 20%?
I do still have my scalp hair :) but I have some friends that are bald since early twenties so I don't think it is a major thing.

I don't and ever have worked in USA so it might be a cultural thing though.
Oh yes, the old GTalk was a really good software. I think the best messenger app I used, ever.
C/C++ Completion in Emacs
Errr, I don't know who came up with the concept, but it was prominently featured in Engines of Creation by that name.

It is a legitimate concern, but a few years later, when the nanotech conference was at MIT, I remember him saying that it looked easily solvable for the good guys, e.g. make assemblers depend one or more chemicals not found in nature in significant quantities. The problems of bad actors, well, no one has any better solution to them than we've ever had.

That's one of the problems I see with the chemistry etc. community's suppression of nanotech development. The first entity that both develops nanotech and decides to take over the world will do so unless we get our act together (something he's mentioned as well, I think in Engines).
This is an excellent observation. When you encounter a suboptimal system, there's a substantial chance that it either produces some unnoticed benefit or results from some coordination problem that can't be overcome by "just not doing that".

In either case, successful solutions have to work around the gap in the system rather than simply charging into it.
I wonder which they disagreed with, was it the 'was a bad poster' or the 'is still a person' part.
It is but the photographs might not be. In the US a straightforward photographic copy is not regarded as a work of art and hence is not copyrightable (see http://www.ibiblio.org/wm/about/copyright-issues.html), I'm not so sure the case law is so clear elsewhere. If you could somehow take your own pictures of it then you could certainly dedicate those to the public domain.
Here's the video that started a lot of the public awareness of the issue:

https://www.youtube.com/watch?v=dBnniua6-oM

And there's also now a great documentary on Netflix called "Fed Up" (https://www.youtube.com/watch?v=aCUbvOwwfWM), for anyone who has a subscription. It particularly tackles this silly idea that it's okay to eat and drink shitty food all day, so long as you exercise for a little bit too.
There used to be Pepsi Edge that was half sugar and half splenda (probably high fructose corn syrup) but it was discontinued for some reason one year after introduction in 2005... there is now Pepsi Next but I think that it is 70% high fructose corn syrup
An excellent keynote presentation showing this in the public-home-maintenance business in the UK is was presented by John Seddon at https://www.youtube.com/watch?v=hbNsQFd8DQw
We (PLASMA @ UMass, http://plasma.cs.umass.edu) have a project with similar aims that is somewhat further along: Ninia (https://github.com/plasma-umass/Ninia). Ninia is a Python bytecode interpreter in TypeScript. It is also being integrated with Doppio, a runtime system for running "conventional" programs inside the browser (https://github.com/plasma-umass/doppio), also from our group. DoppioJVM uses Doppio to run JVM bytecode in the browser (http://www.doppiojvm.org/). For technical details on both of these, see our PLDI 2014 paper: "Doppio: Breaking the Browser Language Barrier", by John Vilk (https://jvilk.com/) and Emery D. Berger (http://emeryberger.com): https://dl.acm.org/citation.cfm?id=2594293 (@ ACM), http://people.cs.umass.edu/~emery/pubs/doppio.pdf (non-paywall), video presentation here: https://vimeo.com/106106738.

Abstract:

Web browsers have become a de facto universal operating system, and JavaScript its instruction set. Unfortunately, running other languages in the browser is not generally possible. Translation to JavaScript is not enough because browsers are a hostile environment for other languages. Previous approaches are either non-portable or require extensive modifications for programs to work in a browser.

This paper presents Doppio, a JavaScript-based runtime system that makes it possible to run unaltered applications written in general-purpose languages directly inside the browser. Doppio provides a wide range of runtime services, including a file system that enables local and external (cloud-based) storage, an unmanaged heap, sockets, blocking I/O, and multiple threads. We demonstrate Doppio's usefulness with two case studies: we extend Emscripten with DOPPIO, letting it run an unmodified C++ application in the browser with full functionality, and present DoppioJVM, an interpreter that runs unmodified JVM programs directly in the browser. While substantially slower than a native JVM (between 24× and 42× slower on CPU-intensive benchmarks in Google Chrome), DoppioJVM makes it feasible to directly reuse existing, non compute-intensive code.
Also relevant is the reversed phrase, "Never attribute to stupidity that which can be adequately explained by X (some other reasonable cause)."
The icing: all the niggling details of system calls and signal propagation are handled in the FAQ http://www.ibiblio.org/harris/500milemail-faq.html
Pitcher plant in France eats bee-killing Asian hornets
Good luck with that unless California AB 465 passes and is signed by governor Brown and upheld in federal court. (Note: There is some concern AB 465 might not survive a federal court challenge as it might conflict with the Federal Arbitration Act).

Most employers make binding arbitration a necessary condition of employment. Binding arbitration makes it almost impossible to win a case against an employer.
I've had some good experiences with this integrating with Hibernate.
Whenever people tell me they're going to go into day trading, I usually say, "How many people do you know who've become wealthy day trading?" They say, "Zero." I also know zero people who got rich doing at-home algorithmic trading. But hey, there are probably some! That's the nature of randomness.
How-To Monitor EBS Volume Performance by Generating an AWS CloudWatch Alarm
Severe weaknesses in Android handsets could leak user fingerprints
How First graders can learn 6th grade coding concepts on their own
Isolated UTF-16 surrogate code points definitely crash Unity when it tries to display them. (Seen when I pasted some emoji in a text box in TIS-100 and tried to backspace.)
This happens to me as well. I've found the workaround is to always make hit "home" after finishing with the app before turning off the screen again. I've tested it, and if I leave hangouts as the on screen app when I turn off the screen it doesn't notify me of new messages.
As far as I know, of the five panellists only Musk is a billionaire - the rest are researchers/academics (Nate Soares is an edge case, but still, as the executive director of MIRI, I doubt he's rolling in cash - the whole organization has less than $2M/y in revenue).
HTC Is Now Essentially Worthless (And Insecure)
I think if we could externalize the benefits of unions such that they don't protect the willfully lazy and don't hinder the brilliant, that might be the best of both worlds.
Thanks. Btw, you forgot to put any link from your blog to the main site.
Polyglot Persistence (2011)
So, any example (easy to understand? well explained?, ie: apart to study a whole codebase as luajit) in what are the state of art interpreters?
If you're a big landowner or cattle baron in the Not So Old West, gunslingers are a fungible commodity in steady supply.

I mean - who was Leland Stanford, anyway? Railroad baron. Similar deal.

This IS normal for America, from the Mississippi Bubble onward.

If there is a 'hacker ethic', it's a variation on ham radio, maintaining your own vehicle ala John Muir, the Unix philosophy and possibly DOS using int21 calls. That's not a complete list.

I knew of much more Hacker Ethic in the people who went through the Depression and WWII. They were Maintainers, the sworn enemy of the dread lord Entropy. I worked for one; he used a 40 horse Ford tractor to move these giant sandstone rocks - hydraulics popping like doom; stand carefully - to build these phenomenal, beautiful houses of native materials. The houses looked a bit like Frank Lloyd Wright houses.

What came later is a caricature of this; college kids who'd read about Emma Goldman, or read Jack Kerouac, or Richard Farina, or...

The counterculture per se got coopted long ago. "Everybody in this room is wearing a uniform, don't kid yourself." - Frank Zappa.
"No [nuclear] bombs have been detonated for 70 years."

That is wildly inaccurate. At best, no nuclear bombs have been detonated in anger for 70 years.

A nuclear weapon was detonated during nearly every year between 1945 and 1996 [1], when the Comprehensive Nuclear-Test-Ban Treaty was adopted [2], over 2,000 weapons in total. Several nuclear weapons have been detonated since, though the rate has decreased [3].

If the author is intending to show how a group of dedicated, thoughful scientists can preempt disaster, this was a poor example.

[1] http://nuclearweaponarchive.org/Library/Catalog

[2] https://en.wikipedia.org/wiki/Comprehensive_Nuclear-Test-Ban...

[3] https://www.ctbto.org/nuclear-testing/history-of-nuclear-tes...

EDIT: The article has been corrected.
some sources say he was fired and then un-fired later in the day, when new aircraft orders started pouring in.
Show HN: Betlines ninja
I typically don't care about naming too much but "Hangouts" is so awful.
Small side-project to learn node.js for a backend project I have been running.
12 years older than you, and can confirm all the things you said in your post above.

I am worried about age discrimination, so I am planning my exit from IT.
Lovato
Coder wins a thousand Twitter contests using a bot
Looking at @marenkate twitter there is this:
https://twitter.com/marenkate/status/628400241511796736

I guess she confronted reality a week ago and told everyone today.
In fact, https://en.wikipedia.org/wiki/Cultural_Marxism redirects to that section.
Surely You're Joking Mr. Feynman.

Feynman's curiosity and drive to learn new things is inspiring to me.
This. Hidden white space has ruined my day before!
There's no official "policy" that I know of. It's just that most Googlers tend to prefer Docs. It works anywhere you have a browser, is easy to share on the web, has nice collaboration features, and built-in comments.
OK, I'm rephrasing to make sure I understand.

In the ordinary, C compliant switch code, you would do this:

int instructions[] = { /* bytecode */ };

// main loop
int* ip = instructions;
while(1) {
switch (*ip) {
case 1: /* instruction 1 */ break;
case 2: /* instruction 2 */ break;
case 3: /* instruction 3 */ break;
/* etc */
}
ip++; /* goto next instruction. beware jumps */
}

With a jump threaded implementation, you would do this instead:

int instructions[] = { /* bytecode */ };

void jump_table[] = {
&&lbl1,
&&lbl2,
&&lbl3,
/* etc */
};

// main loop
int* ip = instructions;
goto *jump_table[*ip];
lbl1: /* instruction1 */ ip++; goto *jump_table[*ip];
lbl2: /* instruction2 */ ip++; goto *jump_table[*ip];
lbl3: /* instruction3 */ ip++; goto *jump_table[*ip];
/* etc */

Which means, instead of having the compiler constructing a jump table under the hood, I do this myself, and get the benefit of jumping from several locations instead of just one. But I still look up that table. Now the indirect threading you speak of:

int instructions[] = { /* bytecode */ };

void jump_table[] = {
&&lbl1,
&&lbl2,
&&lbl3,
/* etc */
};

// translating bytecode into adresses
void* labels[] = malloc(sizeof(void*) * nb_instructions);
for (uint i = 0; i < nb_instructions; i++)
labels[i] = jump_table[instructions[i]];

// main loop
void** lp = labels;
goto **lp;
lbl1: /* instruction1 */ lp++; goto **lp;
lbl2: /* instruction2 */ lp++; goto **lp;
lbl3: /* instruction3 */ lp++; goto **lp;
/* etc */

If I got that correctly, instead of accessing the jump table at some random place, I only access the label table in a much more linear fashion, saving one indirection and some memory access in the process —this should relieve some pressure off the L1 cache.

Did I get that right?
Ah, right. A convincing argument; if I don't agree with your social deontology, I'm a shithead. You've persuaded me!
Facebook to Open Source Reference App for Marketing API
Not necessarily. Google Hangouts is still a much integrated experience on Android. iOS also doesn't have the Dialer app for example.
Show HN: One-click live broadcasting and screen share
I've started coming to the conclusion that as you stuff more stuff into your brain, the longer it takes to get to any bit of information that isn't in continual use. Larger index, non-linear search time.
"Persuade them" how? By legally requiring them to pay taxes under threat of violence?
Using Charts in Your Ionic Framework Mobile App
HTC should've sold years ago, or at the very least change its CEO.
>What if the fence was put there for purposes of adverse posession?

Answering that question is the very reason for pausing to investigate its purpose. Questioning past purposes before reforming is not equivalent to "defending the fence absent any documentation." Your own characterization of this "mindless conservatism" is itself a straw-man of the behavior Chesterton's fence recommends.

The alternative is an endless cycle of deconstruction that impedes any progress, as every possible step or rational for it brings a possible mask to power. The Nietzschean project, though fun, has produced nothing besides criticism, and would never succeed in taking any kind of action about said fence.
Hangouts team has significantly more Android engineers than iOS engineers, but features and bug fixes still take longer on Android. It's as simple as that.
At $5/person/month I don't think so.
Pretty sure that's tongue-in-cheek.
How did you construe that from what samastur said?
For those wondering how to protect against a "malware-steals-cookie" attack, see:

http://www.browserauth.net/channel-bound-cookies

I believe Google does this now for their auth cookies.