skysight-inc/HackerNews huggingface dataset:
Sweet baby Jesus, it has happened.

http://www.catb.org/jargon/html/Z/Zawinskis-Law.html
Anyone else using this in production?
Contract Position / London / Onsite
Our client is looking for a software engineer / full stack engineer for a 4 month rolling contract based in central London.

Key requirements are:

Python, candidates will be expected to create Python code from scratch as well as maintaining code which is currently in place. Candidates will also be expected to have knowledge of building Rest or Web APIs.

JavaScript, Candidates will be expected to create front end javascript (preferably using Angular JS) this code will communicate with the APIs

GIT, Candidates will be expected to know how to release software and manage the workflows within GIT

MongoDB, Candidates will need to have a hand on working knowledge of MongoDB

Linux SA, Candidates will be expected to have an understanding of Linux sys admin work

please call 020 7997 1075 or email gmusgrave@teksystems.co.uk for more info
Couldn't agree more. The $10 example was in response to the EC2/flask comment earlier in the thread.
Super-fast projector may be key to holodeck-like rooms
Sorry, mom and dad: Millennials still moving in
Indeed, one of the most authoritative sources. They should expand the fields treated, imo.
From http://www.cisco.com/web/about/ac123/ac147/archived_issues/i...

"publickey: The details of this method depend on the public-key algorithm chosen. In essence, the client sends a message to the server that contains the client's public key, with the message signed by the client's private key. When the server receives this message, it checks to see whether the supplied key is acceptable for authentication and, if so, it checks to see whether the signature is correct."
You're using "human trafficking" to mean illegal migration. When in fact it actually means:

the trade of humans, most commonly for the purpose of sexual slavery, forced labor or commercial sexual exploitation for the trafficker or others. This may encompass providing a spouse in the context of forced marriage,[3][4][5] or the extraction of organs or tissues,[6][7] including for surrogacy and ova removal. Human trafficking is a crime against the person because of the violation of the victim's rights of movement through coercion and because of their commercial exploitation. [0]

https://en.wikipedia.org/wiki/Human_trafficking
Public keys are meant to be public, so is it a problem if everyone knows your public key? How often do you want to SSH into a remote server while wanting to remain private? And supposing you really want to, can't you maintain separate keys for separate hosts as other commenters have suggested?

Perhaps I'm missing something here.
Battery cages do constitute animal cruelty in most senses of the word. The natural behavior of the hens is widely modified, injuries from the equipment/cage are the norm rather than the exception, and you could go on and on.

So, "empathy" towards chickens in these systems isn't just anthropomorphism or oversensitivity.

A lot of the same reasoning applies to dairy farms, but there the issues get more complicated.
Why 80,000 Hours is in YC as a non-profit
Twitch bans streamer who faked his own swatting
> Flash in Chrome uses PPAPI plus some private APIs that were necessary to support Flash-specific features

Thanks for the authoritative reply!

If Flash doesn't run under NaCl why use the PPAPI? Wouldn't libc be much more convenient, since you don't have to port Flash to the PPAPI?

Furthermore, I would imagine using the PPAPI directly wouldn't do much to enforce security since Flash can do whatever it likes in it's virtual address space, including jumping past checks and assert instructions in the PPAPI?

If Flash doesn't run under NaCl, does it run under the same user and privilege as Chrome?

Finally, can you comment on this quote from http://krebsonsecurity.com/2015/07/adobe-to-patch-hacking-te...:

> Several reports on Twitter suggested the exploit could be used to bypass Google Chrome‘s protective “sandbox” technology

It's frustrating that there is no source. However, the above quote would suggest that Flash runs inside NaCl. Is this factually incorrect?
Thanks for the correction. In that case it doesn't really seem to be an issue of borders. People can surely be exploited in those ways within their own country too.
Taylor Swift: Spotify a start-up with no cash flow
Well, technically, if it wasn't a journalist, but a police investigator, who wired the restaurant without a warrant, people would have been outraged about the privacy breach, regardless of the success of the recordings...

So, in part, this pretty much the legislation privacy advocates call for, though passed with different intentions and motivations...
I posit that if Git or Mercurial had better workflows for submodules, monolithic repositories would seem less attractive.
ascribe | Full Time | Onsite | Berlin

We're working to rewire the internet, so creators can get fairly compensated.

We're looking for frontend & backend engineers. Big data, ML, blockchain, webcrawl. React, flux, django, AWS.

Do you want to make a difference to the future internet, to the world? Join us!

https://www.ascribe.io/jobs/
Untested but you should also be able to use "Match" directives as well, assuming there's something in common you can match on, e.g.:

Match Host *.example.com, 192.0.2.*
IdentitiesOnly no
Sorry. I checked in the Network tab of the chrome developer tools. I'm behind a proxy server. So it is not loading. No problem with the website or the application :)
TPP or TTIP don't allow any jailing. It's just not their jurisdiction. In fact, both the European Union and the US have strict opinions on free speech, and it is unlikely that the EU would try to force US legislators to put away more of their own people (the US is already very good at that, thank you), even if it had any means to do so....
John Langford's hunch.net[0] has a lot of interesting stuff. One example: "Interactive machine learning is about doing machine learning in an interactive environment. It includes aspects of Reinforcement Learning and Active Learning, amongst others." [1] Tutorial slides [2].

A fair bit of this is theoretical, but the theory is extended to cover scenarios that more closely resemble operational use, rather than the textbook supervised learning world view, which assumes that (i) your training data appears magically, and you never get any more of it, and (ii) the predictions of the model are never actually used for anything.

[0] http://hunch.net/

[1] http://hunch.net/~jl/projects/interactive/index.html

[2] http://hunch.net/~jl/interact.pdf
The biggest problem I see emerging with Academia is the rise of administrative spending. Per-student administrative spending relative to academic spending in universities has exploded. Those in charge of University budgets are grossly expanding tuition and sinking the money into unnecessary infrastructure upgrades and expansions to the university administrative bureaucracy, with very little of it focusing on quality of education.
Why do you think integration is more painful in larger repositories? Presumably the architecture of the code is unchanged.
We Once Dared
That's BS, I have to say. Trade agreements can't bulldoze constitutional freedoms.
Whenever the bubble 2.0 or not debate is brought up, people mention that the current companies are creating value. While some are, there are also plenty of others like the one mentioned in this story that cater to a certain sector of society and might not be providing much value as a whole.

In that sense - the rising salaries are allowing people to use services that they wouldn't otherwise be able to use - a cottage industry around engineers with disposable income.
Show HN: Mobile-friendly pragmatic London underground status page
why would they? after all they are public keys, they are supposed to be public. if you really are afraid of github exposing your public key, I think you can always create a separate pair to use only with github.
Yahoo Attack Another Reminder to Disable Adobe Flash
Portable 2 in 1 car charger power bank
if you are in need a car charger for your mobile devices, 2 in 1 car charger is your best choice . It’s a car charger combine with power bank function . When use it in the car it is a car charger ,but
outside car it is a portable power bank with capacity of 1000mah ,can be a emergency charger for
your smartphone . The whole Metallic case shows the quality of it .www.szsunda.com
There's plenty of stuff rumored to be in TPP or TTIP which people don't like. Also there is a lot of confusion about initial/temporary negotiation positions and what's actually going to be in there.
Why Healthcare System Needs Business Intelligence Solutions?
> the recent IEEE conference

IEEE has a lot of conferences. Which one are you referring to? I'm genuinely curious.
This is the source (PHP/XSLT) on GitHub. For a live demo visit: https://unop.uk/tube/
Emacs long ago (decades) expanded to read mail. There are probably multiple mail clients in GNU emacs now
Redis backed user relationships on it's simplest form
After it became clear that darcs wasn't going to win the next gen source control wars I switched to mercurial. I now use and love git for its own charms, but I'd love to come across mercurial again professionally.

I own up to my preference to rewrite history—git has facilitated that in equal measure to mercurial—but my first source control love is mercurial queues. Queues taught me how to structure and sequence my changesets, and through that the structure of codebase evolution. The user experience is still unmatched by any patch queue on git.
WinlockPro – Smart security for everyone
So the reason "everyone" is complaining about or flat out hating Flash is that they have security holes to begin with?
I watch videos about programming or whatever else I am interested at the time.
To save you a click the live demo is here: https://unop.uk/tube/
A Drone Captured This Adorable Orca Family Photo
Ditto. Could someone please post the article?
atlassian recommends you consider sub tree as an option if you are looking at Git submodule
The even funnier part is that HBO spent years and millions on their inhouse .NET solution that was headed by a former MS exec who brought in a bunch of his MS buddies.

http://arstechnica.com/business/2014/12/hbo-cto-resigns-as-p...

>Anonymous sources speaking to Fortune say that the scrapping of project Maui was due to a growing distrust of Berkes. Berkes joined HBO in 2012 from Microsoft and built a Seattle office with 55 engineers, many of whom he worked with at Microsoft. The office’s separation from New York-based employees and its cost to the company apparently created divisions within HBO. Fortune wrote:

"According to sources, Berkes had known about a “memory leak” [on HBO Go] for nine months but decided it was a “non-issue.” That leak eventually led to the HBO Go outages. Internally, some accused Berkes of using the outages as a way to ask for more money to invest in his Seattle engineering team. He got the investment, but HBO executives have not been pleased with what he’s delivered. Berkes delayed product launches and was unable to deliver on upgrades. “If you look at what [HBO Go] is today versus two years ago, he hasn’t really done anything,” one source said."
I don't disagree. Although, for the case where you want to copy/move things across repositories, monolithic repositories still have the advantage that history is more easily preserved. Although you can argue that proper submodule support would handle this and preserve history.
Hover: Possible Unauthorized Access
I have just noticed the following mail from Hover in my inbox:

Dear Hover Customer,

We are writing to let you know that we reset your password today. If you are unable to log into your Hover account, you will need to use the “I forgot my password” option on the sign in page to change your password.

We did this as a precautionary measure because there appears to have been a brief period of time when unauthorized access to one of our systems could have occurred. We have no evidence at all that any Hover accounts have been accessed, but even the possibility that this could have happened moved us to err on the side of extreme caution.

We apologize for the inconvenience.

Sincerely,

The Hover Team
Super misleading title on this post, given what the email says. For the record, at the time of this comment, the title is "Hover hacked".
Why the attitude? Can we just sit down, relax, and enjoy the awesome hack that this is without being all "we're too cool for hacker news"? . I'm really glad someone shared this today as it really brought a smile to my face.
> It doesn't explain why Heroku uses it. Do you really push different submodules to Heroku?

I don't use Heroku, but, sure, why not? If I push a repo to Heroku that includes submodules, presumably Heroku then fetches those submodules (I'm assuming it supports submodules at all, which seems like an obvious thing to support). Therefore, those submodules must be specified by a URL that works for everyone, not just you.

> For Github et. al, that's easily solved by project-level or organization-level identity.

How does that solve anything? You're no longer identifying the user whose key is supposed to be used, which means this no longer solves your problem. And if you're going to suggest that it should only consult users who have access to the repo, for a public project that's everybody, which makes it functionally identical to git@.

> And using `git@` doesn't work if you use multiple accounts because you'd specify the IdentityFile by host.

Sure it does. IdentityFile is explicitly allowed to be specified multiple times for a single host, and the files will be tried in turn. So you can specify all your keys that way.

> Those service providers often get contacted because this happens BY ACCIDENT.

Someone uploads a private key that doesn't belong to them by accident, that screws up other innocent people? I'm rather skeptical. What's your source on this? And no, your own anecdotes do not constitute proof that providers often have to deal with this.

> A while ago at work, we were using a shared key that was used to setup the initial vagrant config. New hires often added that key to their github or heroku account.

Your work is handing out a shared public/private keypair and encouraging people to set this up as a default identity in SSH? That sounds awful, and it's entirely a problem you created and not even remotely the burden of GitHub or Heroku to care about.
I am open to suggestions, I did not intend to use a 'super misleading title'. For now, I have changed to title to 'possible unauthorized access'.
Release Notes for SpiderOakONE 6.0
Note that this is about illusions and card tricks, not about the Magic: The Gathering cardgame.

Did confuse me at first.
Learn golang by solving project euler problems
The Environment and Web Literacy
I am amazed commercial exploitation of the unlicensed bands is even on regulators radar. If you are providing commercial use of the spectrum, you have to get off that band.

It seems that "citizens band" radio was much better "branded" than wifi. Perhaps we should call it "citizens wifi"
China to put security teams in major Internet firms, websites
Make an india section, and get a guaranteed surge of users. The amount of funding into local delivery startups has grown so much, everyone gets paid to signup. People signup once, use the offer, and uninstall the app. VC-funded groceries FTW :)

Seriously .. make an India section.
Although, for the case where you want to copy/move things across repositories, monolithic repositories still have the advantage that history is more easily preserved.

Well, let's wait and see how partial clones actually handle this situation. I'm not convinced a partially cloned monolithic repository will be better than what submodules currently do.
ReactiveUI integration with Dynamic Data
Managing Nerds (2011)
Comparison of programming paradigms
Spyware demo shows how spooks hack mobile phones
There's also the multiple repository tool 'mr' http://linux.die.net/man/1/mr which adresses exactly the I don't want to waste time dealing with multiple commands to manage multiple repositories complaint of the author and moreover can do so for repositories using different version control systems.

I've been using it for years mainly because I have a few repos shared between projects and jobs, and using one monolithic repo would mean having to copy those repos around. (At least AFAIK - or how else do people using one big repository use external projects?)
Subtrees are nice for some use cases. But that's the very problem, there's no general (and supported out-of-the-box) solution to the problem. DVCSes have solved the distributed development part for one (sub)project, but we currently don't have a compelling solution for distributed development across several (sub)projects.
How to stop the apps from extracting data from your phone, upon install/registration?
I cycle to and from work, anywhere between 20 minutes and 65 minutes since I work in various different locations.

It helps keep me reasonably fit, and I'm convinced it's good for my mind too. Exercise is one of the rare times I'm not looking at a screen or reading complex information. I'm focused on traffic but not thinking hard, certainly not consciously thinking about work or personal problems. It's almost meditative. I think times like that are excellent for creativity and general good mental health.
Were I work we have a monolithic subversion repo that contains :

- DBs ddl

- Selenium automatic tests

- A hierarchy with our Java code were we have our libraries, modules, final products and client personalization of our products.

Our build solution relay on Maven with a nexus server and Jenkins to autodeploy maven artifacts.

Pros :

- We can do a single commit across all to update many modules/libs/final product to fix a issue or implement something new. So tracking a issue fix or a new feature across all is more easy.

Contras :

- We can't work like in git, where we can create a branch to develop a new feature or fix a issue isolated from other changes.

- Enforces big commits.

Actually I managed to use git svn to map our subversion repository, but I need to create many small git local repositories to track every module/lib/product/personalization that work over. Also, I have a few scripts to update my git local repos (master branch) against the subversion repo. This allowed me to be more flexible when I work on a new feature or a potential dangerous change, as I can create local branches, do local commits (and do a commit squash of they before send to subversion), stash , etc.

I think that with this I grab the best of both ways of working. I can be more flexible and more productive, as I can change of branch of a project/module/lib with a few keystrokes, and do local code versioning. At same time. I only miss doing a commit across modules/libs/products when to resolve a issue I need to do change across many modules/libs. On this case, I try to use the same commit message or at least, put the issue number on the commit message, so make easy track it on fisheye.
100% JCache API In-Memory Data Grid
Please don't editorialize the titles of stories you submit to HN.
> I am not familiar with German systems for changing laws

After 16 years of Kohl fiddling his thumbs and 10 years of Merkel glueing hers together, I'm not sure Germans are any more.
This would be better with a slider control / scrubber handle for the timeline bar, beyond just the play/pause control.

Like Perforce Time Lapse: http://www.perforce.com/resources/tutorials/using-time-lapse... but online.
Well, but std::vector always performs a move so any pointers to sub-strings won't be valid anyway from what I understand.
I am probably just not getting something but it really seems like it should just use realloc. Maybe it has something to do with thread safety though as I don't think there are any guarantees for realloc.
Well, Range was strangely un-eager in his investigations in the NSA scandal. There's something wrong here that is independent of the law.
Someone else commented on here that:

> FYI, this happens because SSH automatically presents a public key to the server when trying to authenticate. If the server doesn't know that key, then SSH tries the next one. You can enumerate all of someone's keys this way (like this SSH server does)

Therefore, even though I can't authenticate as Linus Torvalds, an SSH server can see me present his public key and hence, log that public key for future use, like sending a message? Is that not correct?
VEHICLES FOR SALE AT AFFORDABLE PRICES AND IN GOOD CONDITION, CALL OFFICER custom glory 08067834923
I first thought this was something new but wait he just gets public ssh keys. It is public for a reason, meaning anyone can have it and they are frankly useless. Can't find any comment below saying why this is dangerous ?
Note that -X is similarly bad on untrusted servers [1]. While it's an old article, it's still valid.

[1] http://www.hackinglinuxexposed.com/articles/20040705.html
Actually, I haven't been able to write posts these five months because of the ongoing semester. The whole discovery to exploitation didn't take more than a week, AFAIR.

As for the next post (with full exploit code!), you can expect it within 3-4 days tops.
Thanks for reading!

I haven't heard of such a project, but I'm not 100% sure I understand what you mean; are you asking if there are non-Android implementations on mediatek chips?
It's a common interface, but you can still distinguish which of multiple devices triggered the event (with pointerId) and distinguish what type of device it was (with pointerType, which can have values "pen", "touch" or "mouse").
iPhones, the FBI, and Going Dark
There are!

http://www.emacswiki.org/emacs/CategoryMail
S/MIME 3.1: https://tools.ietf.org/html/rfc3851#page-14
Well, it conflicts for this thing called "work ethic", for one.
'getObject' and 'putObject' using the JS AWS S3 SDK on Lambda, triggered by the API Gateway: http://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/S3.ht...
For us Greeks, it not a secret. The 1947-1949 Greek Civil war that created a bloodshed between the Greeks who fought the Germans, was all a British creation, just like it has ever been throughout the years in most countries (just read history to see that the British Empire did in Middle East and Far East)

Then the Americans came, who saved us from the "communists" and who openly supported dictactorships; dictaroships that challenged the basic human principles such as freedom of speech.

Unfortunately, Greece has been for a long time a vassal state, British and American interfering in our political life down to very basic levels. Even today, IMF, which is an American institution promoting privatization and looting of public resources, along with the Nazi like EU, govern our miserable life.

You need not go to far. Substitute the British actions of 1946 in Greece with the American actions in Ukraine supporting the puppet nazi government over there or supporting the so called "freedom fighters" of Jihad in Syria who have murdered thousands of innocent civilians.

The world would be a better place if England and US had kept to themselves and never interfered in other countries. But that would be asking a wolf to not kill a sheep if the wolf finds one.

What is worse, though, is that the British/American public support the governments, thus making them complicit in their crimes against humanity, which in essense, is quite tragic.
It would be extremely helpful if you added filtering by country. Most of these are only available in the U.S. and Canada.
Screw you man. You have zero idea on what you're actually talking about. As you say; you're full of shit. Lets leave it at that. You think anyone cares for a bunch of people, versus the countless cruel acts done against animals in the conditions that they're being done in?
Fifty psychological and psychiatric terms to avoid
Thanks for the feedback. That feature is on our todo list, and I agree that it will add a lot once it is complete.