skysight-inc/HackerNews huggingface dataset:
You are interpreting behaviors in other people (hair a mess, sweat pants, lots of stuff) as a status signal. And it may be. But it's also possible that they are not trying to signal a particular kind of status, and are just trying to cope with challenges in their life.
Why should you be angry? They are just being stupid. Being stupid is something humans do naturally. Choosing to rely on someone who is verifiably stupid (in your opinion) is significantly worse, I think, than the original stupidity.

edit: And by the way, the very first time you are forbidden from patching a bucket you could patch yourself should be the red flag that tells you to use different buckets. Move on to better things and encourage others to do so too.
Chief Security Officer for Oracle, Mary Ann Davidson
* sshd(8): fix circumvention of MaxAuthTries using keyboard-
interactive authentication. By specifying a long, repeating
keyboard-interactive "devices" string, an attacker could request
the same authentication method be tried thousands of times in
a single pass. The LoginGraceTime timeout in sshd(8) and any
authentication failure delays implemented by the authentication
mechanism itself were still applied. Found by Kingcope.

That's a pretty big hole. See also: http://seclists.org/fulldisclosure/2015/Jul/92
Assange is trying to set the rules…

He only claimed asylum when British courts rules he should go to Sweden.

If he was innocent why did he argue against going to Sweden?

He was in greater risk of being extradited to the US from the UK than he was from Sweden!
It's been one month and the new version of an extension I wrote is still waiting to be reviewed. I've since stopped waiting and started using the new version myself rather than download from AMO. I was already very disappointed by the review process and now this.

Tweeted to Chris Beard: "Dear @cbeard, please give your users the choice and control they deserve in @firefox. Allow extension signing to be disabled in FF42."

You want to protect the user, then start making extensions more secure and require permissions to do things. E.g. If an extension can access contents of webpages, pop up a dialog and ask the first time. There are other ways to protect users without going authoritarian on us.
86% of Business Calls Are Unanswered. Let Me Text You
It is not really a competitor for XMPP. It transports messages and you could build a chat service on top of it, so it is in a somewhat related space, but XMPP and MQTT aim at very different things.
Well, network engineers have to plan the network, then get land use permits to dig, a directional drilling company has to actually dig in the fiber, install premise equipment, circuit engineers build the circuits, test the circuits, setup any network monitoring and service level assurance.

I am pretty sure all those services don't just happen.
Ask HN: Where should amateur bughunters look for bugs?
I'm your typical computer security hobbyist. I'm interested in searching for bugs I can call my own. But, I'm sure that some areas are more fruitful than others. I'm looking for advice from professionals on where a novice is likely to have the most success. Other, more general, tips on bughunting is appreciated as well.
Given that Oracle was literally hiring fresh out of liberal arts college humanities majors with no tech (or management) experience ever and paying them six figures as project managers on Cover Oregon, as late as the integration stage the January before they scrubbed it, I wouldn't be surprised.
I'm not buying the land to remove the houses. I'm buying the land so developers can't get their hands on it.
Mmm
mmm
Survey: Admins Save Time by Moving to the Cloud
Windows 7 Enterprise Product Keys with Setup 32bit and 64bit
I've had this theory for a very long time that the massive number of extremely low paid workers in China is what enables the US's ZIRP and printing of money. You used to always read about the "bond vigilantes" who would drive interest rates up when too much currency was printed, but I can't even recall the last time I heard the phrase "bond vigilante" used in an article.

It's a common truism that governments can't (in the long term) set the price of money (eventually it will collapse as the market asserts reality upon the situation), but as I understand it, for quite some time now, the US Treasury is the bond market - as the largest buyer, they set the real interest rates, and the workers in China churning out cheap goods for $2/hr control the consumer price index inflation that would otherwise show up.

I've never thought this through at all though (and am probably not smart enough to), but have always wondered if there's some meat to this theory.
I agree. I'm just trying to figure out what prompted this to be posted here? I assumed there would be something particularly interesting about this release, but I can't see it...
See also https://github.com/Grive/grive
The title of this article is a little misleading. In absolute terms, medallion cabs are still about 10x more active in outer boroughs than Uber. (~1M rides for Uber vs ~12M rides for green/yellow cabs).

It seems like it would be more appropriate to compare these figures to other livery cab companies since that is essentially what Uber is. I don't think it's very surprising that Manhattan has a higher percentage of street hails than the outer boroughs.
> The client must hire their own project managers, have clear accountability/authority paths to their management and know exactly what they need (avoid endless upselling).

This so much. Especially the "know exactly what they need" side of things. I speak from the consultant side of the fence, and we've had a number of projects where project management was lacking on the client side; it ends poorly.

We always have our own project manager on projects, and we strongly encourage the client to have their own as well. It really helps to maintain a clear escalation path, and makes everything run much more smoothly.
What machine-learning algorithms are the best ones for Big Data analytics?
This is almost certainly because the engineers in charge of fixing the bugs are judged solely on the number of tickets they clear, and they could give a crap about the quality of the product as a whole or about Oracle generally.
I think the first question to answer is why would you do it? Kibbutzim work and they can be wonderful, but they're created often with very specific ideas in mind, like a communal way of life or a desire for ethnic homogeneity, not simply 'oh the land is cheap, what if we started a town there'. I can't think of a lot of benefits over starting a private space within the richness and diversity of an existing city, like say the mall idea you mentioned. (which is restricted by law, not by interest. There are legal restrictions that prohibit housing in offices or shopping areas which I think make a lot of sense, but it'd certainly be great if they were more flexible. For example in my city there's enormous housing shortages, and office surpluses, and companies offering to convert office units to housing, but the government rarely changes city planning for which legitimate reasons sometimes also exist, but it can be really frustrating)
Serialization and de-serialisation should be abstracted. I should be able to use JSON, XML, TOML, YAML or MessagePack and just write a plugin.
This is very frustrating. Made worse by the fact that they just replaced their packaging tool with a new jpm tool that doesn't yet match the functionality of the old tool.
You aren't defending your position with facts or figures, you aren't even saying anything other than "the truth is out there", and you continue to assert that because I hurt myself, nothing i'm saying is correct. I made points which plainly show HIIT to be less dangerous than running - and less dangerous than sports altogether. You haven't addressed them either because you're emotional and can't rationalize the argument, or are just willfully ignorant.
It wasn't really sold for €10k, it was just a rejected offer. Other companies have offered tens of millions and were also rejected (they must show they have the means to actually fix and run the airport).
Oracle appears to be Microsoft circa ~1999/2000. Some of us remember when all the big software companies had this type of attitude.
Octopuses beg to differ http://www.ncbi.nlm.nih.gov/pubmed/16631583
Or, we could take women and minority students at their word about the stuff they find offensive and hurtful and treat them with a little respect.

Oh, wait, that's too much work. They're just a bunch of whiners.

Edit: Not sure if the downvotes are because people don't get this was sarcastic, or if people do.

Either way: Try listening to the people complaining instead of just brushing them off as "whiners". I hope that clears things up.
Are there actually any numbers for this supposed infantilization? It seems to me that the number of people complaining about unis being not PC enough is relatively equal to the number of people complaining about the first group. (edit: had a logical mistake here)

Sometimes very small, very loud groups can be perceived by outsiders to be more influential than they actually are.

There some to be some more mix-ups in this rant:

>According to some universities, these counsellors provide “customer support”.

This is more an indictment of the sad state of student/university relationship - you pay so much, you're a customer, not a student.

>Final exam time at many large universities is when this infantilization really comes out. Students will literally walk around in public wearing their sleeping clothes and sweats. They nap in the library or in the hallway of academic buildings during normal work hours

That's not infantilization, that's just laziness and a short way to the dorm. Sleeping in a university during "normal work hours" (gasp!) has been normal for decades.

>Education is not trauma

Maybe it didn't use to be a trauma - but in the time of more and more focus on grades and GPAs, forced student competition, "career days", CV polishing courses, mandatory unpaid internships, i.e., ageneral shift from the university as a place that creates politically mature citizens to a place that churns out better trained cogs for companies, education may have become trauma.
Columbia House owner files for bankruptcy
From the article, the ISP in question receives $175 million per year from the Federal Government to run "rural" internet.

A different provider (whether they also get money from the government is unclear) quoted essentially the same run at 1/9 the price.
Glad I use a launcher and rarely ever touch the start search.
Dupe of https://news.ycombinator.com/item?id=10040130
Unless they bought it from a foreign investor.

There is something to be said for not having another country control property that one's citizens need to live. What if another country started buying up farmland, for example?

Beyond that they have no interest beyond financial to, say, keep things nice or affordable or to encourage sustainable growth or any of the other bonuses communities get when they have locals own property.
I'm really confused why everyone's so upset by the blog post, for a number of reasons.

Firstly, it's perfectly aligned with the world of proprietary software. Oracle is probably more protective than the other vendors, because the restricted access to the source code is at the heart of their business model. But none of the vendors I'm aware of is very keen on reverse engineering.

Secondly, the reverse engineering is prohibited for ages - it's not that it was added to the license agreement yesterday. And there are other restrictions (e.g. on publishing benchmark results), so rather that "Oracle is bad" I'd say "people who sign accept license agreements without reading them are morons."

And thirdly, the article is spot-on about usefulness of the reports generated from a reverse-engineered binary. I've seen shitloads of such reports, usually generated by some clueless consultant with the sole competence to run an automated tool and print the result. So it's probably (at least partially) a protection against a flooding the support with bullshit reports.

And it's also true that many of the companies don't have proper security rules (like encryption, identity or password management, network security) yet pay some consultant for reverse engineering one of the components. Because it's easier to spend a large amount of money than evaluating and rebuilding their infrastructure.

So while I dislike Oracle, you can't blame them for everything - the customers are the ones choosing the vendor. If you happily accept their license agreement, you can't later complain "but we want to do reverse-engineering" no matter how many MBA titles you have. If you want such freedoms, ditch Oracle and proprietary vendors in general. That's what open-source is for.
Well waiting 5 years and then switching to strategy B (interview in London) 1-2 months before the last possible moment was obviously not the best strategy for the (potential) victims.
Although this particular case is highly political and likely fabricated, the tragedy of such a law of limitation applying to rape is sickening. That's not just in Sweden, but many other jurisdictions, including most of the US states. The real question here isn't about Assange--that's an uninteresting political aside.

The real question is why do states have a statute of limitations on a crime that's sometimes a lot worse than murder and in the best cases, only slightly less bad? Yes, a statute of limitations is incredibly useful for petty crimes like stealing and other small things like that. We're talking here about rape and sexual assault though. As far as I can see, this is still a reflection on how poorly our societies treat women, even in the west. Perhaps the fact that the men in charge don't want to acknowledge the horror of rape? Women, however, are not the only ones getting raped. I truly cannot fathom the reason for this horrific limitation on justice, and I think if men being raped was more of a problem (outside prisons and jails where the authorities generally refuse to accept it happens) we would have no such limitations on rape or sexual assault.
> The amount of bandwidth that needs to be delivered to Google’s servers is outpacing Moore’s Law.

Which means, roughly, that compute and storage continue to track with Moore's Law but bandwidth doesn't. I keep wondering if this isn't some sort of universal limitation on this reality that will force high decentralization.
The real failure of this law is that, even if you use Common Lisp (or every other language), to implement your software you will finally have an ad hoc, informally-specified, bug-ridden, slow implementation of half of Common Lisp implemented in your software.

The solution is to design your software as a compiler from the start.
I work at a security company and sometimes reverse engineer systems and/or code to see if it is vulnerable to a plethora of attacks.

Presumably the only reason a closed source vendor would be against someone reversing their source is because they're afraid someone will steal their ideas and/or redistribute their code for free.

That not being my goal I really couldn't care less. I'll just go ahead and reverse whatever I want whenever I want. I value my security, and that of clients, over some legal piece of toilet-paper. Everyone who doesn't agree, should reconsider. Do you truly believe that people should not be allowed to look at code that is running on their systems for their security's sake? I will not redistribute what I learnt, but I will analyse it to see if it is safe.

If you didn't want me looking, you should not have put it out in the open.
Filmer: the Tinder for movies
I hope you enjoy the post :) Please comment on the post with any suggestions.
Formal Methods and systems like Agda, TLA+ or other where you develop proofs of your algorithm. For me this seems like a very rich and deep direction for software engineering. This is very much the atomic sledgehammer approach to "first: make it correct; then make it fast."
Ah...you've never used one of these tools on a large code base. The problem is that when I run the tool in my QA environment, I identify the false positive and configure my tool to account for the false positive (or I create a compensating control). If you run the same tool, you'll see everything I tuned out, and I then have to go back and trace where the finding was tuned out, why it was tuned out and make sure that's still right. It's not inexpensive when multiplied by hundreds of times. And that's if you use the same tool as I am; if you're running different one, we just as well could be starting from scratch.

Finding something, and worse finding something over and over again, means that Oracle QA is inadequate.

By what delusion do you think it's not the tool finding the same false positive over and over that's inadequate. The tools are not perfect, and often their developers are very obstinate in what they consider a finding.
Back to basics: a chat with Saul Klein about life after Index Ventures
> Although this particular case is highly political and likely fabricated...

Huh?
Don't worry, there are other blog posts there by the same person, many of which provide the same sense of mission and customer focus.

(popcorn)
Technically, you're wrong.

breaking and entering. v., n. entering a residence or other enclosed property through the slightest amount of force (even pushing open a door), without authorization. If there is intent to commit a crime, this is burglary.
I guess downvoters took my post as a micro-aggression :) Sorry I made you feel uncomfortable...
It's down.
http://www.imdb.com/title/tt0387808/
> [...] plugins don't need to be signed.

So the worst kind of threat is still there. Great job, Mozilla!
Ubuntu shortcuts are the worst. Why are they not consistent with other Linux distros, I'll never understand.
How to Write an Amazing Mobile App RFP [Free Template]
No, breaking refers to the act of crossing the threshold. Some states may not even have breaking and entering on their books. Trespassing is where you violate signage or warning; verbal or written.
Add-on reviews are done largely by volunteers.
The "Socrates" of this article believes he's safer if his entire life is monitored rather than just part. So much wrong with this.

1 - What about no surveillance until there is a reasonable suspicion confirmed by an impartial Judge (see 4th Amendment to the Constitution for details)?

2 - Ok, he feels safer with Big Brother looking after him ... but apparently that justifies in his mind that everyone should be watched since he prefers it for himself. Is that narcissism or just sloppy thinking?

3 - One of the many dangers of this sort of surveillance is the bizarre notion that we are the data collected. There is NO level of surveillance that equates to the actual knowledge of the self (sorry Google, NSA, etc.). Think about it for yourself - is there any data set large enough that it would capture without misunderstanding who you are? Now remember that the rest of the 7 billion people on this planet have just as rich lives (inner and outer) as you.

On that last point, keep in mind the so called "targeted" ads that Google uses. Or the movie/book suggestions from sites that use them. Now imagine such bizarre misunderstandings leading our NSA big brothers to act. Not a pretty picture.

Larger and more haystacks aren't the solution. Realizing that humans aren't stacks of data is.
Very neat idea. I found it rather humorous that when you expanded all the points to the corners of the pentagon, you got a list consisting of seven movies, among them being The Cable Guy and Still Crazy. Admittedly good films, and apparently very well rounded too.
Well, except that, like most enterprise software customers, these customers pay Oracle huge sums of money in the form of support contracts specifically so they could have access to an engineering team. I could understand the argument if this wasn't the case, but a big part of enterprise agreements is this very thing, so I'm not very sympathetic to the argument that such a support ticket, which these companies paid a lot of money for, essentially is treated like a second class citizen because of the way the company decided to do security testing. If this support agreement weren't in place? Sure. I could easily see this argument.
Turns out to be Oracle's chief security officer.

Read the other blog posts. Holy cow crackers.
A 'comparison' to the US can't prove that Swedens system is not fu but only that the US might be even more so.
It's not an aged domain, so it'll tank in the SERPs. I can offer $50 for it. Payment via Paypal ;)
I think the allegations are likely fabricated to get Assange to Sweden so he can be extradited to the US.
Yes, it's foolish for most people. But again, there still are some BYO everything HTF outfits, where essentially one man teams still do well - they do get co-loc and feeds usually though.

And there are some that can pull it off at home, algo trading slower time scales, but they are usually programming geniuses.
You would quickly run out of instances of a given NP problem that can be solved under 5 seconds.
Disclaimer: cross-posted from the original HN Post, but still relevant.

Apart from the legal stuff and a lot off egocentric 'we can do it better', she has one point. There are many companies giving a lot of money for security, manually scrubbing all exploits that come out, create their own patches. While some lack the basic security guidelines. I think this money can be better spend upstream, to create tools so they can test patches for exploits better and create a faster security update release pipeline, so that all downstream and customers can rely on the security releases and that it can be released quicker to everyone. (Controversial: Maybe even adding automatic security updates to the package itself, like wordpress did, so that customer cannot be on a release with exploits)

Though saying to your client that they cannot reverse engineer to look for security problems, is totally not done! What is next? "Exploits will not be fixed, because the users has signed an agreement that they will not hack?"
I think if recent history is any guide, a C-level who claims "you can't hold me accountable for stupid shit I say on my personal blog" isn't going to be one much longer.
If I had to guess, I'd say you're being downvoted for the completely unnecessary "nanny-state" remark at the end.
If you have less than 1GB memory on your device see Precautions for building on devices with less than 1GB RAM

Combined with "a tiny program" in the title, this makes me curious as to what exactly needs so much memory.
Yeah, I don't think this is really about anyone being surprised by anything they read in that post. It's more... what's a good analogy... like someone wrote a long post about the ethics and social conventions of pay phone use ten years after it became clear there would no longer be any pay phones. It's partly enjoyment of a spectacle, and partly pity, because it's so painfully clear how disconnected they are internally from what is actually happening in the world.
Vantagens de Oh yeah low carb bar
The ethics of modern web ad-blocking
>Sleeping in a university during "normal work hours" (gasp!) has been normal for decades.

Seriously. There's a reason campuses have lounges and quiet areas, and it's not just so you can sit and do homework during your downtime.
I personally found BSON* (or maybe protobuf) a better format for a wire protocol. I really miss support for a date type and binary data in JSON (for my own applications).

* http://bsonspec.org/