skysight-inc/HackerNews huggingface dataset:
I attended NAB (National Association of Broadcasters trade show) in 2006. The buzz about RED was incredible. They had a leadership team that included some heavy hitters in innovation. Jannard not only had money by he was driving a vision. Still, many of the engineers I spoke with at the conference were skeptical that a new entrant could overcome the barriers presented by the dominance of Sony, Ikegami, and to some extent JVC in the market.

Cameras are lot more than just the body which is the core of the system. Lenses, camera control units (CCUs), monitoring, media all have to work together. A producer/director/DP has to be convinced that the will save money or have a better product with the new system.

Red forced everyone to raise their game. ARRI's Alexa comes to mind. I have to applaud the RED team for shaking up a tough market to break into.
Not only that - but the 'duh' moment for me was the 96bit key size.
One thing we experienced is that the major devices often use different chipsets on the same model. So Samsung may source a Broadcom and an NXP chipset for NFC for the same Galaxy S model to prevent a vendor-lock-in. However this may result in different behaviour across users of 'the same device'.
In that case it does not ruin the standup to allow you to remain sitting, or have everyone sitting. Actual standing up was one point they recommended out of multiple and is not necessary for the practice to be useful.
This is a weird response to a comment that quotes Snowden at length providing technical advice to the IETF.
The rise of SMS based apps is very real.

This one looks cool though. Would love to try it when/if it rolls out to Los Angeles.
Just try it out for a project or two if you're curious.
Equal exchange: why you should give as much as you take
I'm still confused why this isn't just handled via email. Send an email at the end of the day and be done with it.
If your team is too big to interact with through the course of your work, then your team is also too big for standups.
Show HN: Algebra.js – Build, display, and solve algebraic equations
Design Hunt: Product Hunt for Designers
"There's no quick fix for the problem - the RFID chips in the keys and transponders inside the cars must be replaced, incurring significant labor costs."

What a nightmare. Car manufacturers have to design more resilient systems.

Based on the difficulty to secure hardware systems after deployment, they will be for sure trying to put more and more features on the software-side.

If so, they will also have to think about a quick way to deploy security fixes remotely. One way could be working with connectivity solutions for Embedded Systems (e.g. SigFox).
Minimalist 1.5kb event delegation for the browser (IE8+) and Node.js
Isn't is a breach of trust for a protector-against-malware to also be a producer-of-malware?

I'd certainly reconsider my Kaspersky license if I had one.
Yeah... But it's also very uncompetitive. And, more importantly, if they are willing to engage in this behavior what other perhaps more unsavory things are they willing to engage in?
Always sad when a big company kills an idea, but it happens a lot.

For me the really sad thing about this is thinking about all that community collected data. If a company manages to attract a community of people volunteering and contributing data, it's wrong for that to be taken away. Hopefully it won't be taken away completely in this case, but if the app is phased out, then you'll just have to hope your data shows up within google maps in some form. You're at their mercy. The data was collected by the community but it never belonged to the community.

There's a broad principle here which I think we need to be more collectively savvy about. Community "Crowd sourcing" should always go hand-in hand with community ownership of the data. This means open licensing and offering of bulk downloads. There needs to be increased awareness, and strong campaigns against the behaviour of companies who recruit a volunteer community, but don't give the data back (and I mean give it back properly, in a raw unencumbered open-licensed form)

Waze is not the worst example of this because I think a lot of waze contribution is in the form of very passive data collection. The value comes from algorithms rather than dedicated passionate contribution from volunteers. But even so. The community puts data in. The community loses the data in the end.
I think part of the problem is that our welfare system is also very flaky. Take for example a single mother who isn't working currently which takes in some amount of money from SNAP and TANF. If she takes a job immediately of any wage her SNAP benefits go down by some percentage (sometimes it's small but sometimes it's very large as much as 80% as it was for my sister) and her TANF benefits go away immediately. There's no gradient or curve for the sun-setting of the benefits as her income increases. Even the 'workfare' program is a joke because it doesn't pay enough to make sure hypothetical single mother has enough to pay rent, groceries, and other necessities. And I'm not going to talk about daycare but it's clear that's FUBAR by default (it doesn't exist in the US at least as I know of as a benefit).

So, if the US were to fix bottom end of poverty it would have to be in restructuring and probably centralizing the dispensation of welfare. I think no state or local government should be involved in the administration of said benefits since the lion's share of the funds come from the US government itself (not from the budgets of the state or local governments). But the chances of that happening is about as good as my chances of winning the Power Ball.
Yeah, that's kind of a weird comparison. You can't really tailgate someone through a car door to gain physical access, or social engineer your way to the car's server closet, or spam the car's employees with phishing e-mails.
http://c.learncodethehardway.org/ by Zed Shaw is an introduction to C that seems to have emphasis on writing secure C programs. It's an introduction to C so I'm not sure if it's a comprehensive guide to security in C but it does aim to teach C with security in mind, especially buffer overflows.
Ask HN: Is there any tool like MailChimp but for Geeks?
I want to editing template in pure html and css.
While I agree standups can have a use, I find they get pretty useless at my current place of employment. We have a small dev team where every single person is working on completely different portions of the software and there is little collaboration/overlap. The stand-up is pretty much just people telling what they are working on, so I'm not sure it's an effective tool.
"Google starts doing the same using youtube" is that confirmed or you feel inevitable?
This is cool. Yet the primary efficiency over conventional shuttles appears to be limited to lower labor costs. Unlike the taxi market, it does not appear to reduce vehicle count or improve passenger experience via better service.

Better service in a regular route context comes mostly from dedicated right of way and platforms. The classic example is Curitiba's bus system in lieu of a subway system It could not afford. The real change for campus shuttle service will be if automation leverages itself into dedicated shuttle rights of way as a safety measure or direct commitment to improved service.
Agreed. Tear down your Job's posters. Become your own man. The myth is a myth.
The bulk collection of phone metadata (which he exposed) was subsequently ruled unlawful: http://www.theguardian.com/us-news/2015/may/07/nsa-phone-rec...
96 bits by itself probably isn't within reach of brute forcing - I assume the algorithm itself had flaws.
>it's not that hard to arrange proper redundancies in your systems

If it really were like 'apt-get install redundancy' I'm pretty sure that AWS would have 1/10th the clients it has now.
Are you saying that Linux has the facilities for supporting more games now than Windows XP or do you mean that Linux has more games than Windows XP had?

Someone here yesterday stated that only about 15% of Steam games run on Linux. I'm not sure how accurate that is, but honestly even as a casual gamer I couldn't imagine having access to that low a percentage of games. If I were running games on Linux I would have missed out on Rocket League which is now probably one of my all-time favorite games.

So, I guess I just don't see the point of using Linux for games at all. The phrase "cutting of your nose to spite your face" comes to mind because I can't think of one reason that isn't purely ideological.

Anyway, the info about the Windows 10 upgrade has been out for some time. I managed to cleanly upgrade all of the machines that I wanted to without hassle.
You'll have to explain. Linux distros have release notes, too: http://docs.fedoraproject.org/en-US/Fedora/22/html/Release_N...
https://wiki.ubuntu.com/VividVervet/ReleaseNotes

or if you really meant Linux: http://kernelnewbies.org/LinuxChanges
Not pointless - that is two years of executive compensation which has not been impacted by costly recalls.
Standing Up is a crutch to keep meeting short.

If you can keep the meeting short and effective with everybody sitting why you make people stand up ? It is not agile to apply practices out of principle, you apply them with a result in mind, and if the result can be achieved in a more efficient manner you just do it that way.

For example, my team has never suffered from anchoring. We stopped playing with the voting cards once it became clear the result we got with or without them were the same, just faster without the cards. We continued to stand up because that meant people going away from distractions but not requiring a trip to a meeting room.
Depending on your skill, which is a scarce resource in general.
Luckily, with Rust's great FFI, it's easy to peel off a component and re-write it, you don't need to do the whole thing. It's not like Firefox is getting transpiled to Rust tomorrow, we're just replacing bits and pieces, slowly.
There is also an unnecessary "are you sure?" notification that pops when you leave midway through the quiz.
We have started seeing a lot of bad publicity and innuendos targeted toward Kaspersky after they uncovered and published about hacking attack against their infrastructure in recent past. Feels suspicious to me especially with comments attributed to 'former employees'.
>I'd certainly reconsider my Kaspersky license if I had one.

Well, giving ring 0 access to security software made by a company that is very near to a "not so friendly" state would worry me more than the fact that they play dirty with competition.
Exactly, I also find it easier to see the blocks.
From the screening arranger's words:

https://www.mnot.net/blog/2015/07/20/snowden_meets_the_ietf

It’s important to point out that this was NOT an official
IETF event, and neither was it giving external advocacy
organisations a stage (as some have intimated); rather,
it was entirely an effort of individuals, working within
the rules for requesting a room at IETF meetings.
https://news.ycombinator.com/item?id=10024791

In this reply, you are wholly dismissive of discussions about behavior that do not solely use behavior analysis.
It was a general point about the state of computer security. In 2015, if you're connecting a computer to the internet, you're vulnerable. If your computer has non-trivial wireless functionality (in this case, keyless entry), you're vulnerable. The only question is whether someone cares enough to hack you, in particular.
I guess because sometimes people don't read email properly. If people actually meet up, you can be mostly sure that everyone has heard and processed everyone else's status updates, especially if the meeting is quick enough that people don't get too bored.
> So like C++ with unique_ptr, shared_ptr, and RAII?

It is like that, but with stronger guarantees and less overhead.
It's sad how bad Second Life has become. It use to have plenty of different people you could talk to and places to explore. Now it's full folks like myself who don't know where to go, trolls, and unattended children (I don't know how this happens but it does, seriously).
> Implement all of the above, and you've obsoleted any argument that DNSSEC advocates can make.

Still no offline signatures.

How is it that centralized control is worse than the TLS's "everybody has full power to impersonate you" decentralization? You know that Certificate Transparency is still subject to MITM attacks, right? It just makes it obvious that you were victim of one after the fact (if there is an "after the fact").
The "new" (actually 2 years old) thing is the UK courts granting injunctions preventing the publication of security research from a well known UK university. WTF.

http://www.theguardian.com/technology/2013/jul/30/car-hackin...
You could say it, but it wouldn't actually mean anything.
$1 BILLIONAIRES
I'm sorry, that's nonsense – in the same way it would be to claim that any meeting where people usually sit down is discriminatory because some people have medical conditions that make that difficult.

Any company with even a shred of positive culture will work around an individual's medical needs. You can all sit down, or some of you can sit. I sit on my desk for most morning stand-ups.
Theft of newer-model cars is extremely rare and I don't think vulnerabilities will change that much. Anything that requires computers at all is going to be beyond the average car thief.

If you're worried about safety, buy a car with a good crash safety rating. You're far more likely to get into a normal crash due to bad human drivers or mechanical failures than you are to be hacked.

If you're worried about the financial loss from a crash or theft, your best protection is good insurance.
Email is asynchronous. Impediments can't be addressed with the same immediacy.
I can see if rivals were 'aping' their software, whatever that means, that Eug might get angry. It's another thing to engage in this kind of retaliatory behavior because not only can it lead to data loss for users caught in this juvenile dispute but raises other grave questions about what else they might engage in.

Most worrisome is what other unscrupulous behavior is he willing to engage in? Is he willing to do the bidding of the motherland at the expense of the trust customers put into the product?
Well, the advantage of VW is that the car itself is pretty secure.

All messages on the CANBUS are securely signed, there are multiple rings of security where data can always pass only in one direction, etc.

The only thing this exploit enables is that if you already have the car, managed to break the steering wheel lock, managed to replicate the magnetic signature of the key, and managed to start the motor, that you can circumvent the immobilizer that comes after that.

This is a pretty minor flaw compared to the "full control via radio" that competitors had.
Yes, that flaw has been fixed in the latest models.
An easier and cheaper way to go is (a) stop texting and driving and (b) slow down, leadfoot.
The Frege page says that Frege features

Higher rank types

but says nothing about higher-kinded types (HKTs). The two are different.
The rank of a type describes the depth at which universal quantifiers appear contravariantly. This is quite different from higher-kinded types, which allow type-level computation. For good monad support one uses HKTs. I wonder if Frege has HKTs and the description on the original page made a mistake?
It's not possible. Make sure your car is well insured. The insurance companies have traditionally put pressure on manufacturers to add better security. In the UK, the car insurers set up this respected research institute which has steadily improved car security:

http://www.thatcham.org/about
Two Days of Devaluation – Aftershocks of the Yuan
Rosz just doesn't give a shit.
Regardless of what is actually uploaded, a phone app and website implementing this would need to get microphone permissions from the user, and it would be difficult for the user to verify that raw audio isn't being captured as well. (There's no separate "audio fingerprint" permission.) That could become a barrier to adoption in practice.

I'm also not sure how I feel about a second factor that would allow an adversary to authenticate by simply sitting in the same coffee shop as me. Manual authentication seems important, and U2F already addresses some of the nusiances of TOTP-based schemes.

This is a really clever innovation, though.
Best Practices for Mobile Paid Search
That's a little breathless - I'd just think of it as a particular subset of machine learning that's produced some promising results, and leave talk of consciousness out of it.
In addition, it ruins the reputation of Windows and PCs in general, and just makes lives miserable for (at an absolute minimum) less tech savvy users.
How does your team aggregate, share and present all the conversations about mood during its retrospectives?
The one use I've seen there is helping people notice cross-cutting concerns that might need to be pulled out --- to do that though, you need to setup the standup in a pretty particular way, beyond just "here's what I plan to do today"
Even though these cars aren't a part of the internet of things (yet), situations like these are the exact reasons why I'm not enthusiastic about it. Honestly, I hate it.
Coding Without Loops
The terms and condition of "YouTube Audio Library" seems to be in a video (??!!) https://www.youtube.com/watch?v=V9eO9zrZAN0
Aisle JavaScript Web Library
It's great that you read these things with some suspicion, but would you use the same suspicion when reading allegations against US or European companies?

And, their main development being done in Moscow, do you expect current employees to stick their heads up? There aren't a lot of protections for whistle blowers in Russia. I'm pretty sure they'd be declared traitors, if they did reveal something like this in a formal setting.
Everywhere is my office – post photos of your remote workspace
> Anything that requires computers at all is going to be beyond the average car thief.

Not for long.
What happened in the last week of May 2015 that caused the huge uptick in growth?
> Assuming Chrome is rewritten in Rust or Go, will these security
> issues vanish? Of course not

It's true that they will never _vanish_, but all of the ones related to memory safety, which are the ones the article focuses on, shouldn't happen in Rust:

> 70% of the high-risk bugs in Chrome 44 would have been prevented
> if Chrome were written in a memory-safe language instead of C/C++.

(it's true that it's not 100%, because someone could still write bad code in an unsafe block, but that's a _significant_ reduction in the surface area, which should lead to a similar reduction in errors.)
HarQen, Full Stack Engineer, Milwaukee, WI ONSITE

HarQen is looking for a full stack engineer to join our software team.

We are a small team located in the Brewer’s Hill neighborhood near downtown Milwaukee, WI. Our tech stack is built on Java/Spring, Scala/Play, Python, JavaScript, and PostgreSQL. We also maintain native iOS and Android apps for using our platform. Our product is a digital interviewing system that processes phone calls, mobile video and WebRTC. In addition to digital interviewing, we do data mining and predictive analytics to help put more people to work around the world.

You will be responsible for a system that has touched more than a million people and helps them make the greatest financial decisions of their lives. We want to make the world a better place for candidates. We make it possible for more people to say “I can do this job, and I’m the right guy to do it”, in their own voice and on their own time.

Our ideal candidate is a motivated engineer who is comfortable doing full-stack development.

Contact pehr@harqen.com for more information.
FYI, you can use Factual.com to get location data for all kinds of businesses. You'll still need to source reviews from somewhere else, but this might be a useful way of ensuring you have good coverage.

(disclaimer: I work at Factual, but a) I'm commenting as an individual, not representing the company; b) I genuinely think this is a good choice for you; c) for a small app like this, the data will likely be free, so I have no financial motivation!)
South Korea Squanders Its Broadband Advantage by Run-Amok Rote Learning
Go add your awesome thing to a list this references.
Or /r/workspaces.
My team is currently three developers plus a product owner. Two of us might pair up on something for a day, while the third works on something else. We might not interact much during the day, but it's still useful to compare notes in the morning and understand if there have been any developments, changes in priority, or anything that could require discussion. I don't think that's unreasonable.
I wasn't trying to be picky (though the last line of my post came over a bit tetchy, sorry) I was more pointing out that you're capturing what you do with the continuation, but not what the continuation is. The continuation is a data structure. It is the jmp_buf if you want to implement simple continuations as setjmp/longjump. Though I probably wouldn't explain it that way, since most programmers don't have C these days.

goto on its own doesn't honor the call stack in C, which is what the setjmp.h is for, and non-local 'goto', so yeah, it is closer to that.

Continuations also don't have to use a call-stack (though I totally acknowledge we're outside mainstream programming now). The idea is very general, and very simple: a data structure that a) stores the current FP, and b) can restore that FP when required.
Yeah, but do you want to have 10 people go through their 5 minute thing every day? Its basically a whole hour that could have been better used.

Reading the same thing in email form and replying would maybe take 15min.
Easy Steps to Install WordPress Manually
Not really. Deep learning is the popular name for neural nets that use many layers (deep neural nets or DNNs). They are being used to do more than just pattern recognition (the mainstay use for NNs in the past). But at present DNNs do not attempt to solve complex/compound AI problems like planning or knowledge representation or understanding natural language semantics. It's not clear yet whether DNNs can be extended to those kinds of problems.
Why would git strip formatting from my message? If my team wants colorful messages why should git be the one to say we're wrong?

Git commit messages are used for lots of different things, but at the end of the day it's just another piece of data included in a hash in a content-addressable file system.

If you're doing something with that tool where including formatting like this would be considered a vulnerability, it's on you to take care of that. It's exactly the same with any other bug or exploit in your codebase: it's not git's fault that you committed it.
Strange that the YouTube link require a login. Using the officially approved library seems like a good tactic to not get flagged up by content detection. I've heard stories of big copyright holders claiming to own free music and videos getting removed or banned from embedding.

Edit:

Here's the playlist that doesn't require login: https://www.youtube.com/watch?v=HxAg2ycAuPA&list=PL93uzrz9f1...

Here's the trailer video with download links: https://www.youtube.com/watch?v=HxAg2ycAuPA&list=PL93uzrz9f1...
> (according to some source I read a month or two back that
> I can no longer find).

Stuff changes fast in Rust-land, so even if it were a month or two, it might be wrong. We should always be pretty close, and we're sometimes faster, depending on the code.
Most Important On-Page SEO Factors
Of course, this might call into question the authenticity of their recently published research into state funded spyware. I'm sure it's just a coincidence the anonymous sources chose to speak after a decade of silence.
Very cool. Would love to see Myra expand scope beyond restaurants and place.