skysight-inc/HackerNews huggingface dataset:
And for those of us who don't want Lollipop, we'll never be offered the update. We have to either accept a bad system "upgrade" or stay insecure.
Backup to disk; replicate to an offsite disk array for DR purposes.

EDIT: I should have specified `backup to an SSD storage array.` Disk is just embedded in my brain.
This specific exploit can be initiated whenever metadata for an MP4 file is processed. Disabling auto-download of MMS is an important first step workaround. Be cautious with any untrusted media files on your Android device. Simply creating the thumbnail preview image is enough to silently trigger privileged code execution.
One of the key parts of this project is that we are using the code in production. Each piece is being used in our shipping releases like Java.

Open sourcing will happen. Doing it right is very important to us however, so we don't know when.
14 Ways to Make Your Business Blossom [Infographic]
That is really the thing, for a line of business application (which is what I write) I can hardly think of anything meaningful I can do in only 14k. If you are writing a marketing page for a random potato distributor I can see it, but even the standard run-of-the-mill home page has 1 meg of images, even more if there is video.
This is a great question, and it's definitely a problem we have.

We don't have a single answer we use for every system we work on, but we employ a few common patterns, ranging from just keeping hard-coded strings containing the expected output, up to and including implementing our own fake versions of external infrastructure. We have, for example, our own faked ISO-8583 [1] authorization service, which some of our tests run against to get a degree of end-to-end testing.

Back-testing is also incredibly valuable: We have repositories of every conversation or transaction we've ever exchanged with the banking networks, and when making changes to parsers or interpreters, we can compare their output against the old version on all of that historical data.

[1] https://en.wikipedia.org/wiki/ISO_8583
Highly-detailed tutorial on creating animations for the iOS platform. I love the animated train example. Nice work.
The thing that makes Sesame Street a reason for parents to switch or become customers is that it's actually a show that's tolerable (I'd suggest actually "enjoyable") for parents. A pretty large percentage of the content in Sesame Street is over the heads of its core audience, but hits a bullseye for parents.

Why does this matter? Much of the widely-covered "screen time" research has been of pretty poor quality, but there's some indication that the perceived or observed harm from screen time comes in part due to a lack of personal interaction while kids are sitting in front of a TV, especially as TV is used as a babysitter. With parents watching, laughing, talking to their kids about what they're seeing, not only might it mitigate that harm, but it certainly reinforces the actual educational content in the program.

My wife, a developmental pediatrician and neuroscientist, has a rule of thumb: it's "bad" screen time if you're not paying enough attention to what your kid is watching to follow the story yourself. Sesame Street is entertaining enough to make it easy to watch.
I have the same problem. list-view 2.0 exists as a branch on krisseldens github (https://github.com/krisselden/list-view/network) and there have been other people forking from there. The implementation is _much_ simpler now due to glimmer, no more needing to get funky with ember internals. So it's essentially a re-write.

I haven't tried the 2.0 branch myself, but it _should_ be a drop in replacement.
Police investigate 'first cyber-flashing' case
Is IT Jargon Monoxide Poisoning Your Marketing Content and Sales Conversations?
Out of curiosity, with regard to video, what would be the difference between what you describe and a nicer version of the sort of processing used in (for example) some Axis security cameras? I guess the current method is just to capture a decent range and then process each frame to boost the gain on shadows and lower the gain on highlights, right? Sort of an extension of quick-and-dirty HDR on still photos.

Either way, this is the sort of stuff that has always interested me about photography and videography. The creative aspects are obviously the end goal for most people (myself included) but I've always been a sucker for the technical aspects of it...the craft to the art as it were. Nothing prompts me to pick up my camera and shoot some photos or some video like learning about some new tool or technique that I want to try out. It may be the mark of the eternal amateur but still enjoyable.
You mean this will chase MS out of enterprise? Awesome! It means we don't have to support them anymore!

(Supporting Windows is 10X more work than all other platforms combined due to stupid "can't reproduce here" problems on rotted and unpatched Windows machines and general Windows driver API hell. I am including Android and less-commonly-used OSS operating systems like FreeBSD and OpenBSD.)
8chan censored on Google searches
Well, that entirely depends on the rate that Agent can negotiate. I don't often take a salary now, but from an hourly perspective (or day rate, or project based fee), the answer is absolutely yes. In fact, I think I do this now with recruiters. They put me in front of a client at a client at a particular rate, my bill rate, and then they take a percentage. Often that percentage is at least 20 - 33%.

But I think you make a good point about the employer having the leverage. It may be that the market isn't ready for recruiting Agents who work for the technical talent. It may be that the market is only able to handle recruiters who give the perception of working for the companies that need the talent.
Where do you live that a $500k house is considered a slum?
It's unfortunate you have no contact information in your profile :)
This seems to be one of the real costs of upgrading to the latest version of Windows. In this case your mom has to pay the bills, but in general I'm curious how long will it take for ISPs to launch a solid campaign against Microsoft, like they did with Netflix.
It's hard to know without inspecting the exact data involved, but I feel like this is dangerously close to a HIPAA or HITECH breach, and I know of several hospitals who are strongly on the Microsoft bandwagon and are considering Windows 10.

The "send search data to an internet endpoint even if it's patently obvious that the search is for local resources" reeks strongly of Ubuntu's Amazon Shopping Lens. Did Mark Shuttleworth switch gears from Canonical to Microsoft when I wasn't looking?
Are RoboAdvisors Really Worth Their Cost?
With some slightly questionable math you can turn 100 users/min into 7.2 million monthly visits. I guarantee you that's "large scale" enough. If you've actually got experience with deploying at your current job you should be fine, just apply. The only real way to learn is on the job.
Samsung Unveils Galaxy S6 Edge
I'm still unclear on the sandboxing assertion. The mediaserver in current versions is, in fact, pretty well isolated. I've had to work around and defeat lots of this protection for debugging purposes in my professional life, so I know it's there. IIRC you can't read system or app data outside the sdcard area, you can't write anywhere persistent. You can open network sockets and make binder requests, which is not trivial but again rather different from a remote root.

That this is an exploitable bug in libstagefright seems to be uncontested. But AFAICT there are no assertions of an actual sandbox breakout or a practical payload that does something more than e.g. send spam. Are there? Link?
Most people are 1-2 step thinkers. [Citation Needed] But I'll explain why I think this:

Many people will assume nobody will think about the problem (1 step thinkers). A few people will assume someone will think about the problem who thought about the people who won't think about the problem (2 step thinkers).

I think most 3+ step thinkers will take the problem to it's most logical inclusion (making them n-step thinkers). Why stop arbitrarily at 3 or 4? They've recognized that people who exist who will think other people exist who thought about the problem. At that point they should be able to recognize that this pattern will continue to n. While I am sure there are 3->(n-1) thinkers, they'll be more rare than n-step thinkers, I'd reason.

There are a number of 0 step thinkers who read the question and answered 33 though.

Now I have a question: Is the person who answers 0 smarter than the people who happened to guess the right answer at the proper point of time, even if at the current time (and possibly indefinitely) they got the problem wrong? aka "I only got the answer wrong because other people didn't think hard enough."
From the article:

"However, one technology can render RSA useless.

(Hint: it’s a quantum computer)"

So yes, it does.
I hear you. I had a Xerox 1108 Lisp Machine in the 1980s and the development environment was awesome, even by today's standards.
When I switched from Windows to OSX, I was constantly frustrated by the way Apple chose to organize things. I hated having the menu bar be on the top of the screen and not part of the window for example. Trying to take a screen shot was impossible without google. It was just as least as difficult learning to be productive on a mac as it was when I transitioned to Ubuntu.

I've come to believe that there is no such thing as a universally intuitive interface - consistency is achievable, but everyone comes to your interface with a different background and therefore a different sense of what is intuitive.
Hey look, I made one too https://fuego.link
It's very strange to imagine that you'd host a DB in a conceptually local manner to application services. This couples things in a way that's very awkward for scaling. Even if you're not using containers, you almost never organize deploys this way outside of beta/dev environments.

And if you were to make such a decision, then you'd capture it in the closure required to run the code you built, so you'd sort of bake in the inclusion of those services into any deploy of your code, using Nix's philosophy.

Or am I misunderstanding you?
I feel for people whose providers won't upgrade them and I think they've got a good complaint, but if you choose to get off the upgrade path I think it's reasonable to assert that you're assuming responsibility for your own choices and security. I expect it can be backported to 4.x via custom ROMs for folks in that spot.
see also, section III
http://www.justice.gov/sites/default/files/opa/press-release...
So I'm saying the radon they can take more from the top is workers have international competition. Without it workers could demand more. But they can't because ss they demand more their work is off shored -- see garment and footware workers.
Rust debated this for a while, and eventually did decide to make overflows panic -- but they are checked only in debug builds.

https://github.com/rust-lang/rfcs/blob/master/text/0560-inte...
Thanks to zipcar, uber, postmates etc it's becoming easier than ever to survive without a car. That's traditionally been a huge expense. Now those dollars can be redirected to housing instead.
I feel threatened when I see police guys nearby.

I was fined in my early twenties, because I just turned around my car where it was possible - it didn't happened on the street and police officer told me that I have violated the law. I have argued for long minutes only to give up and pay the fine.

When I checked the laws regarding this, there was no reason to fine me, but it was too late. The paragraph on my ticket was also completely bogus and the fine was already paid.

Not so many years back I was traversing the pedestrian crossing on completely calm Sunday (no car in sight). Of course there was red on the semaphore, but that would only mean spending senseless minute(s) to cross two and half meters. Officers were nearby, just waiting to fine me. What works here - you can always tell them that there's nothing to talk about, hand them your ID card and tell them that you'll be glad to visit their office once they're down with all the paperwork. Since the paperwork that needs to be done is quite obnoxious, whole thing is usually silently discarded (win).

To conclude - I don't expect anything from police. Most normal people around are reasonable and they will do whatever is needed to stop or alleviate the things that endanger someone.

Being fined because bandage from your compulsory first aid kit in the car expired week ago is just completely senseless. Why would a thinking human trust and feel safe around people who enforce such thing(s)?

This is Czech Republic, heart of Europe.
I think it's more difficult to patch old versions of Android than you're suggesting. You can't just backport a few lines of code and hope for the best. You have to maintain all the testing infrastructure that you had in place back when that version was supported, to avoid introducing new bugs with your change. And if you're releasing a security fix, you now have to coordinate that release across all versions that were vulnerable, because patching the vulnerability in one version usually discloses it in all versions. So you've slowed down fixes for your most up-to-date version, on top of the added expense of all that testing.

Companies like Microsoft make boatloads of money in exchange for supporting old versions of their software like that. But nobody is going to pay Google enough to support old Android phones.
Also "ferrofluid" because the fluid is ferrous (contains iron.)
That is good to know. I figured that ember-list view was likely using some private APIs and fiddling with the ember internals. It makes sense that the Glimmer engine would require a large amount rewrite work for list-view.
I just have a hard time envisioning package management as the light and the hope for this problem, at least at the level of granularity offered.
And I don't believe you.
This is a nice write-up on Hackaday.

I've got a guide on how to change the MS image to a standard one and my thoughts on IoT core here: https://unop.uk/dev/windows-10-iot-core-public-release-for-r...
The bug is not new after the patch. The patch just failed to fix the original bug.
I'm not sure what you mean by self resetting pixel designs. Do you perhaps means the self-shuttering (rolling shutters) on CMOS sensors?

This is very different. If you oversaturate either a self shuttering sensor or a shuttered CCD, that information is gone. All you know is that this is "100% bright, or more". Your software which turns raw sensor readings into an image makes the area full brightness, and you get blow outs.

With this approach, say the light is bright enough to make a pixel read 567% (if that as possible). A standard sensor would record 100%. This sensor would empty itself five times and record 67%. Then, the algorithmic magic happens which looks at neighboring areas and figures out how many roll-overs happened and adds the 500% back in.

You can't do that perfectly (hence my comment before about an overexposed zebra), and it will introduce new forms of aliasing, kind of like de-bayering the bayer masks makes moiree patterns.
It's also in the "Go" menu, under "Go to Folder...". Which, sure, you'd have to want that feature to go looking for it, but if you did search for it in the interface, it's pretty clearly the obvious place to look.
Can carriers (and by extension, the Hangouts backend itself) check messages and block "evil" ones? Wouldn't that be an easier way of fixing these things quickly?

At the very least, Google should block any Hangouts message that triggers the bug even on non-updated devices.
It isn't. Toronto has been building new housing at a rate higher than any other North American city. The city is filled with cranes everywhere. The growth is just from people filling up the newly created space. Something that isn't happening elsewhere on such a scale.
This looks superb. I've been wanting to move to Germany for the past year but I fear I may not have the right skill set.
I have that problem, as well.

But, the biggest problem I have is that even when there was a pledge to do so and when they actually eventually produced a D7 module (Drupal 7 is several years old...I spent most of this time waiting for the modules we rely on to become stable on Drupal 7), there wasn't a pledge to provide an upgrade path...so, you've got data in some module in Drupal 6, and no way to get that data into the same module in Drupal 7. Often there are bizarre workarounds, like using the Migrate module, which is designed to handle all sorts of migration tasks and is thus endlessly complex, and requires custom migration code (and comprehension of a huge swath of even more new jargon and convoluted, baroque, APIs).

It begins to remind me of Zope/Plone from many years ago, which had many of the same problems. Lots of jargon, lots of new ideas in each version before the old ideas were stable or fully implemented, painful upgrades, tight coupling of interfaces making changes in one part of the system require changes in every part of the system. A modular system is nearly meaningless, if every module has to be rewritten with every new release.
I understood that Netflix won't be able to stream any episodes at all, old or new.
That may be why the superchargers aren't in anyone's backyard.
Yes, but that's not the point here. The point is getting the code that knows what to do with the WebRTC connection.

Since you asked: https://github.com/cjb/serverless-webrtc/
Nope. There are are domains. What's also interesting is that GPS coords are used extensively for joining domains and accessing services nearby.
We have our own UNIX distribution now for cloud services. It's Called 'cloudy'
How is this a real cost, is there an estimate of how many bytes are sent and received and at what interval? If it was anywhere in the thousands of megabytes regularly, maybe that's the real cost but that's just an assumption.
You should correct some typos at the bottom of the page. Pythen, Unser Interface Design, Data Anaylist.

Somehow though I doubt the startups founded off of that will be very successful overall. If what I have understood is right, cofounders should know and like each other well before starting the company for things to go well.
Well, it wouldn't reach into functions. It would mainly just change the + and - operators within its scope to return a larger type. So instead of

int32_t plus(int32_t left, int32_t right);

the plus operator would be equivalent to

int64_t plus(int32_t left, int32_t right);

So basically

int32_t a = 2000000000;
int32_t b = 2000000000;
int64_t c = __no_overflow(a+b);
// now c is 4000000000;

I don't claim the idea to be flawless or completely thought out, but I believe something like that could be one of the more useful C language extensions.

Oh, and thanks for the link!
Because I shouldn't be required to accept giant releases (including broken functionality I rely on) to get security updates. Because it noticeably worsens battery life. Because it's a horrid practice to screw with software on production gear just for shits and giggles, and what is your phone if not a production device?
"This second round of forking provides a layer of isolation between tests: If a test makes changes to global state, running the test inside a throwaway process will clean everything up once that process exits."

But, then how do you catch bugs where shared mutable state is not compatible with multiple changes?
Can you name examples, where big corporations got "Serious" penalties for privacy issues?

Not yet, but I would argue that's because organisations like Google and Facebook have changed their behaviour when challenged to avoid things going that far.

However, Europe has imposed heavy fines in the past on the likes of Microsoft, and various nations in Europe have also formally investigated and taken legal action against major tech firms in relation to privacy concerns. For example, see http://www.bloomberg.com/news/articles/2015-05-06/facebook-p..., which is about an ongoing investigation.
If you bought a C400 were you "really" considering a Model S? Why didn't you buy another equally priced car? I'm just curious how you make the jump from Model S to C class. It sounds more like you decided you didn't want to spend that much money on a car. Which is where I am, although I don't have the means.

I have a CTS, lagging behind BMW/Audi/Mercedes in interior quality but ahead of the others that claim to be luxury brands. I really liked the P85S I drove and I would probably drive one if I could afford it. The interior was nice enough for me but the way it drives, exterior design and the fact it is electric is what interest me way more than interior quality. The interior quality is sufficient unless you're trying to buy the most luxurious car in that price range. In that case you get the S-Class. For the time being I'm waiting for the Model 3 debut.

Disclaimer: I've never actually been impressed by the C and E class interiors or the dealer experience at Mercedes.
> Type casting, which converts one type of an object to another, plays an essential role in enabling polymorphism in C++ because it allows a program to utilize certain general or specific implementations in the class hierarchies...

What? No. C++ polymorphism doesn't work based on type casting, it works based on virtual functions. Type casting would mean you were using some kind of "switch on type" scheme. That's not polymorphism. That's what polymorphism is supposed to replace.
it's already disclosed, don't pretend like patching 4.4.4 discloses anything
Did she set the connection as "metered"? I know some things stop then.

The $200 is likely from the automatic updates, which were pretty big. How much extra in MB was it?
The daemontools family
RPC Redux
NASA Challenge: Astronaut Smartwatch App Interface Design
Performance. That's an extra branch on every arithmetic operation.
The Lie I Tell New Hires
Look up Thilo Weichert, or, his replacement and long-years assistant Marit Hansen (Dipl.-Inf.)

They fought many battles, especially against Facebook, which led to court rulings in the manner of "Instant change of terms, instant destruction of data, or 6 months jail for the CEO".

Internationally, many might laugh about the ULD, but you do not risk a fight with them. And now, with them starting to look at Microsoft, I would not want to be in Microsofts place.
19 is the answer as of 28,800; 13 min later. So your guess might have been right.
Brooklyn Fiber is a commercial provider, so buying access from someone like them is basically how an ISP becomes an ISP.

If you were sharing your Cable or DSL, you might run into issues with your contract.

In both cases you would have to be prepared to handle abuse complaints, or your IP space would likely just get blocked from large parts of the internet, or at least major services.

For instance, the administrator of an office network may receive DMCA complaints about employees downloading movies or somesuch. If these continue, at some point your internet provider will terminate your connection. The same would be a concern for anonymous internet sharing.
Data Exploration with Weight of Evidence and Information Value in R
LTO6 is current. LTO7 is "future". LTO8 may never happen, let alone LTO9 or LTO10 (If SSDs prove to be superior to tapes... investments will change for sure.)

The chief benefit of LTO is that it still remains the cheapest and does in fact have huge sequential read/write speeds. Random read/write is even worse than discs but for backup purposes, sequential is king.
Ironically,
some game devellopers are using webkit on top of their game to do the UI.

Like simcity (https://news.ycombinator.com/item?id=5359143)