skysight-inc/HackerNews huggingface dataset:
Sorry for late reply. Don't take the number literally: it was a play on something Dr Schell used to say (example in [1]). He pointed out the reason GEMSOS and A1 class included formal verification was to get the last bit of assurance done. The tests proved the presence of specific issues. The model checkers and provers were meant to prove absence of issues. Model checkers often did a search through a number of states checking for invariants but were often limited due to state explosion. So, provers had to be used to show a given design implemented given policy or invariants in all situations. Additionally, show that a refinement to more concrete form preserved equivalence.

This is hard work. The lessons learned in 70's and 80's showed you could only do it once you had good mathematical formulations of certain concepts. That explains why the effort vs defects found varied considerably among projects. The other aspect that all of them discovered was the design or code had to be built with verification in mind. As in, certain implementation details were easy to modify, translate, etc while others were either difficult or impossible. You could use model checkers, traditional methods, etc to get pretty far in your assurance argument, maybe even 90-99%. That last bit that fell out of range of tools due to their problems or your implementation choice might be impossible gap to close.

So, the highest assurance argument took a combination of strong specs/models, proofs of invariants on all use-cases, minimization of state/complexity in general, and easy-to-analyse implementations. You can actually see this in action if you look at the layering/composition of GEMSOS [1], PSOS [2], KSOS [3], and VAX security Kernels [4]. CompCert's compiler passes applied [5] same rules of thumb.

I still say use lighter methods if you have to or can get away with it. There's been a number of software that used model-checking with success at finding flaws and a decent assurance argument. The problem was that they often require you to extrapolate what happens with small amount of states, data, or time to potentially huge amounts. Experience shows many things break down as load intensifies. So, I'd rather know it works in all states. And that's the last piece of assurance case that might be impossible to reach if you didn't design for it from the start. Hope this helps.

[1] http://www.iwia.org/2005/Schell2005.PDF

[2] http://www.csl.sri.com/users/neumann/psos.pdf

[3] https://c59951.ssl.cf2.rackcdn.com/5085-1255-perrine.pdf

[4] http://www.cse.psu.edu/~trj1/cse543-f06/papers/vax_vmm.pdf

[5] http://compcert.inria.fr/
Show HN: My new startup (happy to answer q's)
That was the reason salts were used in /etc/passwd. You couldn't tell if John and James had the same password, and you couldn't tell if John used the same password on multiple machines. Or more critically, if the root password was the same on the entire cluster.

As you two have already discussed, it mostly provides herd safety. You can't target the 'weak ones' because all the passwords look roughly the same.
His research is based on overall sales. Your quote ignores a key point made later in the article:

> His research found that light trucks (which include SUVs) represented about 20 percent of passenger vehicles sold in the United States in 1980. That figure had climbed to 51 percent by 2004.

In other words, cars are not getting heavier. American car buying patterns are changing. They heavy vehicles American consumers were increasingly buying over that period were the same weight they had always been.
How to Boost Your Crowdfunding Campaign on Social Media
‘We+need+to+win+the+argument+for+open+borders’+|+Immigration+|+Video+|+spiked
also, once you get used to latex (and emacs in my case), you can't find any editor or format that makes exactly what you want as latex.
Only if there's a constitutional basis for doing so. I'm no expert on North Carolina law, but I'm going to go ahead and assume the state constitution is silent on electronic pictures of naked people.
Applications would be isolated between different accounts. What is the difference between this kind of isolation and the isolation supported by container technology?
> I think it's low effort nonsense.

Have you ever actually made a video game yourself, or written a piece of literature? Do you appreciate the effort this actually takes?

> Here's the thing - would those tens of thousands of people have seen it in the first place if Hernandez hadn't talked up her friend on Kotaku?

Sure. For one thing, Quinn had at least that many Twitter followers. It's a game, also, that covers mental illness, which isn't a frequent topic. On that novelty alone, it was likely to get some attention regardless of who Quinn's friends were.

> Would that niche of a title have wound up on the site at all if not for the personal connection between those two?

There's a good chance it would. Depression Quest was novel. Kotaku likes showcasing novel and interesting things.
I was hoping to launch a prototype of my food web app, but I just realized that I had added some enhancements to a number of its dependencies so I am working on pull requests to give back.
Well, big pharma still does R&D, and they will continue to do so if they think they can keep producing drugs cheaper than an acquisition (which they are working toward).
The pretentious approach to analytic number theory
Interesting - I hadn't heard of him. The wiki page certainly seems to back up the claim regarding his contempt for gamers.
> Despite the media hype you can't root your phone with the stagefright bugs and so it wouldn't qualify for the bounty.

Alone? No. As part of a "chain" of exploits, which is what this bounty is calling for, in concert with a privilege escalation? Yes. That bug allowed for remote and silent (due to executing in a way which would allow it to suppress notifications of the incoming message) arbitrary code execution as a user on the device, which, even as a user with minimal permissions or which has been sandboxed in some way, affords you the ability to do much much more on the device than you could before the exploit.

FWIW, the actual release included a demo of rooting a device on stage; they have a video with a similar demo. I presume the second bug they were using was an already-fixed kernel bug, but if you have something like stagefright your next step is to go hunting for such a bug. (Regardless, the question you were responding to was more about how most of the exploits people put together do not satisfy the "remote" and "silent" parts, as opposed to the "I got root" part; the latter is comparatively easy.)

https://www.youtube.com/watch?v=PxQc5gOHnKs
Did anyone else notice that the hover text on the Apple News link is "Big Deal"? Not sure what to make of that.
Reddit's worldnews?
I am proud to say that I will never download the Apple News app.
Users may not be allowed to delete chats
MyAcademicProgram:+Top+40+Colleges+Graduating+Over+90%+of+Students+|+NewsMeBack
Apple has been very serious about not wanting you to know what's going on in your machine since around 1984. The first Mac needed an extra-long hex wrench to open, a very uncommon tool at the time. They want good developer communities for good apps, yet they don't give them full control.
Yes, but it's after 100,000 rounds of PBKDF2.
iOS 9 has already been jailbroken, but it's not going to be released: http://9to5mac.com/2015/09/10/ios-9-jailbreak-video/
The following post on Joe Haldeman's livejournal came up in a previous interview/story. It's relevant to some of the discussion about Heinlein's Starship Troopers.

http://joe-haldeman.livejournal.com/51726.html

I pretty strongly suspect that Joe wouldn't actually mind if the teenage boys the novel was targeted to read it as a satire, but...
That's really very different. Berkshire isn't undercutting anybody in price with See's, just getting a premium for a brand name.
moot making sure his users are looked after. Nice.
Americans Greatly Overestimate Percentage of Gay and Lesbian in US
The comparison is specious. People die when drug development fails, is too expensive, or is done too slowly (or not at all.)
That was the cash, excluding equity.
Doesn't that mean the hash is the password, not the password? If I steal the password file what keeps me from just logging in as everybody?
Ask Apple for some freebies and call it a day.
Chaining hashes seems like a great way to get the benefits of both, and to have an extra layer in case one falls. Why isn't that done more commonly in practice?
The CIA Campaign to Steal Apple's Secrets
Your Guide to Dieselgate: Volkswagen's Diesel Cheating Catastrophe
I'm just about to hit thirty, but the first example is still _much_ nicer to read for me.
> There's not much that they can do to force these people to bring their cars back.

Uh. In any place with emissions tests I presume these things will instantly fail without the upgrade, so you won't be able to preserve your registration without it.
I, for one, would not at all like it to be subject to government shut downs, annual budget cuts to pay for wars, etc.
The Guevedoces:  Gender metamorphosis at work
Hahaha :) It was supposed to sound like Shih Tzu, breed of dog - http://jp12.r0tt.com/l_d67efae0-58bd-11e2-baa5-afb676b00012....
really enjoyed crystal lang's ruby-like syntax.
this works on windows
That was a great writeup, thanks. The author has a real talent for writing engaging explanations.

I've been making my way through The Design and Implementation of the FreeBSD operating System[1], which is a bit denser and more formal. It was nice to read about some of the same ideas in a different implementation. I'd recommend the book to anybody who enjoyed the post.

[1] http://www.amazon.com/Design-Implementation-FreeBSD-Operatin...
Fear, Standing, and Speculation for Data Breach Victims
You missed the part where that was a complete fabrication. Zoe Quinn didn't sleep with game reviewers, and even if she did, those supposed articles never materialised.
The requests that Telegram makes should be over https not http. If the links that it passed to create the gallery were https, a mitm wouldn't even know they are requests for images. He'd only see a timestamp, destination, port and request size. There are ways to obscure these requests, the article gives some suggestions.
Tracking User IDs Correctly in Mixpanel
On Windows I use WinSCP, from menu "Commands\Synchronize" and "Commands\Keep Remote Directory up to Date", or from scripting "synchronize" and "keepuptodate".
There are a number of preserves for farm animals, and many people have pigs, chickens, goats, and cows simply as pets. The number of these animals in existence will decrease, but they will still be around, just happy and healthier. We don't have to confine, torture and kill animals to prevent them from going extinct!
> H&K arming Mexican drug cartels.

Huh? The cartels are using primarily AR and AK pattern rifles smuggled through the US or stolen from the Mexican government.
Selfie sticks banned by major Japanese train operator
> You have fallen into the same trap as both sides in taking the radicals behaviour as typical of the movement as a whole.

That would require the radicals to not be the entire movement.
I don't know if I feel like that would hold up in court. Google's algorithm isn't helping individuals at Google construct speech, it's arguably collecting it's own data and presenting it's own results, merely according to guidelines it was taught or programmed with.
MMD :D
Yes, it's.
- PUT/DELETE
- CORS
- more sheets in the same workbook
- access for only one file in the Google Drive
- private APIs
What Marketers Should Know About International Promotions
The "examples" that were wholly false from the jump, the ones that depend on things that can be empirically demonstrated to not exist? Those ones?

I've met Quinn a few times and I don't personally care for her, but the monstrous behavior of the children afraid that the games that sell bonkers numbers of copies will go away forever because a few feminists criticize them is so incredibly evil (while also managing to be so, so stupid) that I can only laugh.
> I'm hoping to learn individual user's styles.

You'll probably have to train separate char-rnn instances, unfortunately. For the past week or two, I've been experimenting with putting in a metadata prefix which I can use as a seed to specify author/ style, but thus far it hasn't worked at all. The char-rnn just spits out a sort of average text and doesn't mimic specific styles.
>Karunamon - who has also been defending GG on this thread - agreed.

I'm not sure why Karunamon agreed, but I largely passed on this point because that is an argument that would only distract from the overall point. I would assume Karunamon wanted to not get mired down in that point as well.

From what I have seen, I would say that it was not founded for that purpose, but there have been bad actors who have been a part of it.

>Of course, I'd excuse a lot from a civil rights movement that I wouldn't excuse from a movement dedicated to fighting bad gaming journalism

What are some behaviors you would excuse from one but not the other?
It's not meant to indicate it's impossible to have both fast and secure, but in terms of where a company's focus is on improving their product. Many more resources are invested in improving security in an enterprise product than performance.
Git from the Bits UP
Awesome idea and your site is very well done.

A couple quick things:

1. In the footer of the site you have "Find a Vendor", I think it is supposed to say "Find a Venue"

2. The video is good, but 11 minutes is way too long in my opinion. I got tired of listening after the first 90 seconds. To be honest though, the site is so well done and clear you really don't even need to show the video. :)

3. One thing you may add is venue ratings/reviews. So after someone has booked a venue they could rate it.

Overall looks great and awesome idea. Good luck!
The Minimum Every Software Developer Must Know About Unicode and Character Sets
Is the CIA behind the XcodeGhost iOS malware?
Apple Speeds Up Electric-Car Work
You are missing the point on what I said - the China study was about plant-based diets. And all of the Blue Zone diets do not include meat - I can think of the Seventh Day Adventists that were studied just as one example.

While you are correct that the exception doesn't prove the rule regarding vegan body builders, it doesn't work for saying plant-eaters are puny either! You can be healthy or unhealthy by being vegetarian. My point was that it is very possible to be strong and super-fit. There are actually quite a number of vegan bodybuilders and athletes.
>to save lives

It pretty much does assume it there.

And it does matter because of how one would react. If your end goal is saving lives, you wouldn't spend a lot working for a cure to baldness and you wouldn't buy rights to a drug and then jack up the price just because you could.
The cover story in Scientific American, August 2015, is about 'How We Conquered the Planet' - 'Our species wielded the ultimate weapon: cooperation'. This is a much more nuanced examination of what made homo sapiens so successful (and dangerous).

From the article: "Everywhere H. sapiens went, massive ecological changes followed. The archaic humans they encountered went extinct, as did vast numbers of animal species. It was, without a doubt, the most consequential migration event in the history of our planet." ... "The sad story of those first victims of modern human ingenuity and cooperation, the Neanderthals, helps to explain why horrific acts of genocide and xenocide crop up in the world today."

The article also brings up another tendency among humans, best summarized by writer Slavenka Drakulic: "Once the concept of 'otherness' takes root, the unimaginable becomes possible."

Our species is still evoluting. Perhaps, given new understanding and the right constraints, some of the most damaging behaviors can be bred out...
Radio spreads. You can get a small chunk of matter very near c with a small part of the energy needed to send an easily detectable UV light bean to Alpha Centaury.
A Zipcar a day gets stolen in SF – here's how they stole mine
And you can make chocolates in your kitchen with ingredients from a grocery store.
Honest question: What's the value, if any, of using intrusive linked lists in this context? That is, I would have handled linked lists as something like:

struct TN_ListItem {
TN_ListItem * prev;
TN_ListItem * next;
void * data;
}

I can immediately see that each TN_ListItem would take up an extra word of memory in order to store the pointer to the data. Is that the main crux of the issue, or is there something more?
For some reason, this site is blocked by the proxy at work, with "pornography" as the category.
These days, what is wrong with rolling your own encryption of passwords using key strengthening and salting?

Like this:

hash = sha1 applied recursively 4071 times ( password . salt ) . salt

Serious question. Don't just say religiously, "just use bcrypt". Tell me what is really wrong. What attacks will succeed today? Any crypto enthusiasts in the audience?
Cycle.JS – Interview with André Staltz
I am in a similar position. I am a med student who loves to program - I find eHEALTH really attractive!

health gnu looks really interesting. Have you guys any experience with its real world application?
abakker was questioning how much the increased emissions per unit fuel was offset by the reduction in fuel required for a given distance. When calculating vehicle emissions per distance traveled, those counteract each other.
Those are fair comments, sure.

I think the rationale is really that Haldeman was really commenting on the pace of social change, especially for service personnel, particularly those who served multiple tours. The protagonist hates the horror of war as much as the alienation from the society he is allegedly being forced to defend.

Though I can see why that puts some people off :)
The people making the decisions don't play with their own money. You make a lot of bonus while the cheat is going on and when it blows up you walk away with the money. Either the shareholders or the regular employees (through layoffs) pay the bills.

Now if the decision makers had to pay back their bonuses that would be different.
For close-air-support (which the Air Force really doesn't want to be involved in...), the most effective aircraft have often been cheap, slow, unsexy aircraft that can carry a lot of ordinance, take a lot of punishment, and get down low and slow to hit ground targets with bullets. See the Ju-87 Stuka, IL-2 Sturmovik, Douglas A-1 Skyraider, AC-47 and AC-130 gunships, and the A-10.
I'm just throwing this here:

http://blog.mattbierner.com/stupid-template-tricks-template-...
Mainly because it adds complexity, and complexity in crypto can hide subtle bugs. Example: http://blog.ircmaxell.com/2015/03/security-issue-combining-b...
The cheapest trip of your life
Admittedly naive question: if the advantage of having Google Sheets store the data is that you can use the Sheets editor when you want to, could something like Sheetsu store the data separately, much faster, for the API, and then just sync any changes between the Google Spreadsheet and their data? So you could still access via Google when needed, but these problems don't matter?
OK. Then what do you think is the correct course of action for someone whose goal is to save lives? As opposed to making money, adopting temporarily your implicit contention that the two are opposed.

Preferably a sustainable course of action that allows for future actions to take place. A one-shot is generally useless on any kind of real timescale.
This whole thread is about a horrible abuse present in the current system. The potential for abuse in an alternate system does not disqualify it. There is no perfect system and bad actors are everywhere. However, I don't see terrible endemic problems in the UK, Canada or the Eurozone from importing drugs. I'm sure they exist sometimes. But in the entire rest of the G7 drug costs are less and their outcomes no worse than the US.
Do you mean DJing in the sense of playing curated playlists for events? Or DJing in the sense of mixing synthesizers, samples, and original recordings to create music? I imagine you're talking about the former.
4chan has an extremely non-SJW tilt. I wouldn't be surprised if the SJW term itself originated there as a pejorative.

The site's founder, moot, had to cut all ties with the site as it turned into an angry mob. It's no longer a fun and happy place, there's an undercurrent of hate, fear, and misogyny.
I know exactly what you mean. This no carb thing is a crazy fad! Many people don't seem to understand the difference between good carbs like many whole grains, and bad carbs like refined white flour. We shouldn't classify all carbs together in the same group!
yes. The constant threat of a big dominating presence of the authorities in the market, causes two-way flows to decline. You cannot rely on your macro skill set anymore to analyze the market direction, as anything you do is subject to policy maker event risk. Therefore faster money (read, speculators), who are the major providers of liquidity, stay away. It doesn't help that banks' risk taking, historically a big source of liquidity too, has been curtailed by regulation, but that is not the only story. It's also about the drunken elephant stomping all over the market known as QE/zero rates policy. So paradoxically, as the stock of bonds is ballooning, the liquidity is shrinking.

It was always the fact of course that the front end of the yield curve had policy event risk in it, but then you also had the shape of the curve which the market could use to intimidate the policy maker (too steep = a signal that the market was unhappy with policy). Today, the Feds have decided not only to guide the short end, but also to put the rest of the curve where they want it, and that's the underlying source of the problem.

Basically, the market is rigged. Nobody likes to bet in a rigged market.
I don't know about "not wanting you to know what's going on in your machine." It's more like they want you to treat their public OS API as "the machine": a clean black-box abstraction layer you can build on.

What goes on underneath, while interesting, is not guaranteed to be stable. They might, say, replace x86 with ARM one day, as they already replaced PPC with x86. If you're targeting "the OSX platform", that doesn't affect you; you just hit rebuild in XCode. If you're targeting the underlying computer, you're screwed. Apple doesn't want you to be screwed (really, they don't!), so they try to disincentivize relying on anything below the public API.

Compare this to Microsoft, where the Windows team deals with cases like these[1] by inserting compatibility shims to keep the behavior of applications using undocumented, non-public-APIs (or munging kernel-shared opaque structs, even) stable between OS releases. While it's great for end-users—their apps don't break—it incentivizes relying on private APIs, because Microsoft will effectively keep your app running for you.

[1] http://blogs.msdn.com/b/oldnewthing/archive/2003/12/23/45481...
Parking, Dreamforce and stuff
That site seems to document all of this stuff. Which parts are lies?
> If we were to meet an alien civilization and study their physics, as long as we know their number system, we would immediately recognize the number 1836.2

Only if that number really is a constant, so that it matches in their pocket of the universe. For sure-fire mutual recognition of numbers, I would stick with something mathematically defined, like some large-ish prime numbers, pi, e, and so forth.

> the ratio of mass of the proton to the electron will be the same.

In effect, the electron's mass is then the unit of measure. A proton's mass is 1836.2 electrons, and so many kilograms, do many ounces, etc.
if you go with /id/slug, you can redirect anything that is not exactly the same as the current, so any older links would still work because no matter what the slug was, you can redirect because the ID doesn't change.
Will it have Retina Windshield?