skysight-inc/HackerNews huggingface dataset:
That conclusion doesn't follow from the links unless they attempted to produce exploits from each potentially, exploitable defect to confirm or reject whether it was a vulnerability. Like what happens with disclosures in many projects. The truth is that they've fixed many problems in the kernel in the last 8 years which may or may not have been exploitable. They're only sure about two of them with a policy to not check the rest as their time is better spent fixing everything and moving on. I agree with that approach but it makes their 2 vulnerability claim impossible it wasn't tested on defect data.

My theory is supported by another post:

https://news.ycombinator.com/item?id=10337807

So, I'm dismissing their claim entirely and will counter it with their claims linked above along with my argument. However, even without that claim, the OpenBSD team can still make a great argument based on their QA processes and track record in fixing things as you linked. It will certainly have fewer 0-days than anything else which is why I told another OpenBSD developer I recommended Xen projects use it for Dom0 wherever possible.

Btw, thanks for the links. It answers the question about their defect tracking in general. Lots of detail in there and evidence of their QA working. As I expected. I'm keeping it to share if the topic comes up in another discussion.
Partitioned Cache Architecture as a Side-Channel Defence Mechanism [pdf]
My undergraduate curriculum in Computer Science had a "Professionalism in Computing" course where we discussed ethics. It is still a requirement: http://www.cs.vt.edu/undergraduate/courses/CS3604
Can you elaborate on what's good / bad about it? We have been looking for a metrics solution and trying to find a good option.

What I'm confused about DataDog is they charge your per host - how exactly does that work if you are just reporting metrics (I guess you have to pay per host you are reporting metrics from).
Yeah, I don't doubt that I do.

But presenting an entire post full of loaded language that also rails against "Social Justice Warrior Sarah Sharp's crusade" while claiming to be just "looking at the facts" is disingenuous at best.
Systemd v227
>most financial advisors do not recommend that you keep a significant portion of your assets in savings accounts.

This, of course, depends entirely on the individual and their circumstances.
>To pursue a PhD I've got to either put my job and my income on hold to go pursue it (while taking on the expense)

In other sciences, schools typically provide free tuition in addition to a decent annual stipend (for housing, food, supplies, entertainment, etc.). I'd guess most CS PhD programs are similar.

>Virtually nothing to gain FROM the PhD

That is probably true if you go into it assuming that. The idea is that you already have a longish (2-6 years) project that you want to work on. You gain whatever you'd like.

>There's just nothing in the field of computing that I believe couldn't be better learned by experience.

This is why one would work on a PhD.
What's the point of linking to something that has 4 up-votes and zero comments?
>Mozilla has been steadily improving the Web platform to support features that were once only available via NPAPI plugins.

Does this mean we'll get pre-emption and blocking I/O in JavaScript?

You can do that in a plugin.
Agreed. Getting a PhD is never a short-cut to anything
> GraphQL is an ORM for rest apis

No, GraphQL is a protocol that replaces REST.

Its closest analogue is the unholy beast that is SOAP + WSDL, except without the insanity of XML. With SOAP/WSDL you declare a schema for your API, which then accepts API calls containing parameters. SOAP/WSDL follows a classical RPC paradigm where you execute functions that take positional arguments.

GraphQL dispenses with that terminology, but is still very much RPCish. A key difference is that "arguments" are keyword-based. Where SOAP/WSDL would have you pass a "complex type" (ie., a struct) with optional fields, in GraphQL everything is built out of structs. Another key difference is that the output follows the structure of the input.

GraphQL remaps REST's paths to nested keys. For example, given the routes:

/books
/books/:id
/books/:id/authors

This becomes:

query {
book(id: ...) {
authors
}
}

Where REST doesn't help you is when you want to be able to filter on a lot of things — either your API becomes an explosion of all permutations of relationships, or you do (as many do) create a "query API" that takes all sorts of criteria as inputs. For example: When you get a books' authors you might want to filter by editors only. Or you want to find all books written by an author that were published in the 1950s. REST also doesn't help the client pick which fields to include, or which relationships to follow. Sure, you can implement it on top of REST, but any such solution becomes ad-hoc and app-specific.

Part of that is, firstly, because REST is a set of rules, not a complete protocol, and secondly, REST wants to deal with resources, not queries. Queries (ie., POST to some collection) are left as an exercise for the reader.

Coincidentally, there is no reason why you can't encode GraphQL queries as GET URLs via paths:

/books/id=1/year=1950..1959/authors/name=~John

This probably violates the tenets of REST, which says that resource URLs should uniquely identify a resource. I forget what REST says, if anything, about "views" into resources.
Why do you no longer parter with Criterion/Janus? Was it just more profitable for them to move to Hulu? I signed for The Auteurs a few years back but didn't follow through with t.
> but there is certainly much in CS that you will simply never learn in the field.

Like what? In other words, what parts of undergrad CS could you not learn on your own from the books given reasonable amount of time, you figure?
Yeah, an intern did this in his spare 20% time.

http://www.independent.co.uk/news/world/europe/volkswagen-em...

#enron #pinto #oilspill
Some schools require an ethic course and some do not for Computer Science degrees. I did at NCSU for my CS degree, but it's no where near universal.
"The cost difference is so large because this workload is not a very high EC2 utilization scenario. We need extra servers for multi AZ HA and to handle bursts."
Totem – A Continous Delivery Pipline Tool
Did this actually happen?
Discussion from 9 months ago: https://news.ycombinator.com/item?id=8878382
Really bad advice. The stock did stupidly well after that.
Because the rest of their savings is in Bitcoin? Right?
Some thoughts:

1. This kind of government thug behavior on a college campus is immediately counterintuitive, but makes complete sense after you think about it. All that DARPA money goes somewhere. It's a bit like being shocked that Ma Bell would be an integral arm of state security.

2. This story should be shouted far and wide so that people attending these type of talks will record them on their phones. Make this corruption of our institutions openly apparent, rather than isolated rare incidents easily written off. Make it known that the surveillance-collaborators are not appreciated in the least. These moles won't even return phone calls because they know what they did is indefensible with anything other than "policy".

3. I wonder about running a DoS attack on universities with such agreements, either to make NSA etc have to issue formal declassification of the public documents (unlikely), or to force the colleges to reconsider their agreements (and therefore their research foci). Imagine "I guess we have to destroy every computer in this lab too. And the network switches. And the Internet router, again".
Loves getting the yellow pages: it's the best way to get cheap paper for firing the charcoal grill.
This book is good (I've read it), highly rated on Amazon, and reasonably priced: http://www.amazon.com/Agile-Data-Warehouse-Design-Collaborat...
The problem is not the people working at NASA wanting to make bank. It's the people overseeing those people realizing that there is a possibility to make bank, then pressuring the people working at NASA to do research to make bank. That's the change I fear.

But I wanted to respond to a different thing you said in the first comment:

> why not try to commercialize existing NASA technologies

I never said commercialization of the technologies is a bad thing. In fact, I'm all for it. But it has to be done in a way that doesn't break what's already being done right.
> once that request comes in we service it and that's that

Well yeah, of course they aren't going to seize your server if you just give them everything they want. It is far easier and cheaper for them.
Leader of Christian group adjusts incorrect doomsday prediction: 'Soon'
The "LEGENDARY" dick is still unsurpassed, though.
I'll bet.

One thing you notice about these events in recent history is that they happened to already disarmed people (NYC < 60K each long and handgun licenses, D.C. all aside from grandfathering, U.K. pretty much all except shotguns, plus effective self-defense has long been illegal), it's most effective that way.
Why, would you need a javascript library to help you deliver fast static content? This seems like a solved problem one that we have been able to deal with for a decade of slow clients, latency and bandwidth limits. But since it has Google origins it will be popular.
NPAPI Plugin Perspectives and the Oracle JRE
The article did say

> The German automaker has suspended 10 senior managers, including three top engineers, as part of its internal investigation.

So it could be a few engineers and their managers that colluded together on this.
> There's just nothing in the field of computing that I believe couldn't be better learned by experience.

Not sure I would agree. School gave me a bunch of the knowledge I'd very unlikely picked autodidactically. For example, the basic advanced maths package, which is a key to understanding numerous CS concepts. Finite state automations, Fourier transforms, dynamic programming, formal grammars, graph theory.. are not something I could be able to casually pick up with just high school knowledge and fumbling around. No doubt some people could, but am pretty average in this regard and I think the majority would relate to that.

I'd even argue non-academic things, like organizing a project, working in groups, being able to tell a dud from someone who delivers, meeting the deadlines and time planning, are better and less stressfully learned in the school.
I think I misunderstood some comment here. Not sure if it was yours or one you responded to.

By "commit murder" are you using hyperbole?

I think it is useful to distinguish between murder and killing in self defense from a real threat to life.

I don't know if you were counting them as different.
Excellent example, thanks! Looks like that has a dependency on React. I'm currently trying out Angular but I'll give this a shot too.
The recession was 6+ years ago, perfect timing for those undergrads to become grad/phd students. I think his point still stands.
> There's a conversation to be had about many Americans living in precarious financial situations

There is! And much more interesting imo than whether the stats are borked because the savings are somewhere else than a literal savings account. Even taking this into consideration, I doubt the 62% figure improves very much.
India’s Energy Crisis
As always, it depends on where you get it from. I will say that one of the best things about doing you bachelor level work in the US is the diversity of the students. However, US degrees are a LOT more expensive.
I don't think you can do Docker on Snappy Ubuntu for RPi (ARM).
The frugal stuff is rubbish. He can be frugal because the main outgoing for any family is rent. He's taking in two rents. The rest is just a cheap show.

The reason why we are all suffering is because of rentiers. It's not because we have slightly expensive data plans on our phone. Rentiers are using this to explain away the real problem. This guy is along for the ride for the web-clicks.

Go on his site and ask a question that gives the info that he has two rental properties and see if he lets it through moderation. Be polite as you can. He won't. MMM knows where it's at.
Copying my comments from another posting of the same article-

""Social Justice Warrior"
Really? That's the level of discourse the author is gonna set the bar at? At least I know that I'm not missing any substance by having just skimmed the post.
Seems like a cheap scramble for pageviews with an incredibly biased article, starting with the title."

and

"... presenting an entire post full of loaded language that also rails against "Social Justice Warrior Sarah Sharp's crusade" while claiming to be just "looking at the facts" is disingenuous at best."
Someone's got to research the theories that you've read in the books. These are the kind of things you won't be able to learn in your spare time.
I did the same in 2010, seemed to be a good time to be in grad school.
A (very) Rough Guide to America from an Englishman in New York
What is the benefit? When I look h1b salaries they seem higher than normal but do they no include benefits or something?
Individuals have a variety of options for where to invest excess cash. On a slightly different subject, does anybody have any advice what a small business should do with cash? Are there practical or relatively safe ways to get a return on a corp's cash on hand beyond basic interest?
Burner integrates its disposable phone numbers with Evernote, Slack, Dropbox
Ask HN: Does the use of 3rd party services affect valuation of a startup?
Today, there are many companies offering API's for integration which allow for entire businesses to be built mostly on top of 3rd party services.

How does the dependency on these 3rd party services affect the valuation of a startup?
Particularly sad tidbit:

16. It’s best to think of the police as a sort of occupying army and avoid them accordingly – particularly if you are not white.
> So let's not blame officers. They're probably doing the best they can with a bad situation.

I don't know how you come to this conclusion from the data you're citing.

You seem to be claiming that LEOs kill more people because more people attack LEOs with guns; i.e. you're arguing that LEOs kill more people in self-defense. But you're far from proving that point.

In fact, the easiest way to prove this point would be to have data on police shootings: if every officer had body-cam footage of every time they fired in self-defense, your argument would be proven. Yet the majority of police officers are resistant to wearing body cams. If LEOs are really firing in defense of self or others, why are they so opposed to proving it?

One could make the opposite argument: that people who use guns against LEOs are doing so in self-defense. The fuck-the-police attitude is equally explained by this: if the police are murdering your fathers, brothers, and friends, of course you're going to thing "fuck the police". And this would explain why LEOs in the US are so resistant to body cams: if they are the aggressors in these situations, then they aren't going to want footage showing their crimes.

I think that the evidence better supports the latter argument. But of course, we're short on evidence: we're a long way from proving either point. This is why we need more evidence. If, as you claim, LEOs are acting in self-defense, the evidence will only exonerate them.
Why exactly a 30 day rotation schedule? To me it puts a lot of pressure on the subscriber to view a particular movie within that timeframe. Sometimes you're too busy or on vacation and you don't have enough time to view all the movies you're interested in. How about a hybrid model that combines the 30 day streaming service with a 3 month VOD service? Or a plus version of the regular subscription that offers a 90 day window for a slightly higher monthly fee?

On Android you can download a movie and view it offline for 7 days. What are the obstacles to offer something similar on other platforms?
This makes no sense. I've lived in the UK my whole life, and when growing up spent some time around pretty unsavoury people. I've once seen a firearm, and that was at a clay pigeon range.

I don't dispute that some people may own illegal firearms, but its by no means an endemic problem. Somebody getting shot in the UK is guaranteed to make the news. Just the presence of a criminal with a gun will interrupt live news channels, that's how rare it is.
If the market declines significantly, and you're still a long-term bull (inherent to the buy and hold strategy), you probably don't want to sell until the asset recovers.
Project Management Issues Log Built in One Hour on MyDataOrganizer Platform
However plausible it may be, it is still not excusable.

The company should have processes in place that can verify the claims it makes. Plausible deniability is really just a claim of neglect.

Edit: I'm being rate-limited, so I'll respond to the points below right here:

>What processes should be in place, exactly, to do what?

How about driving a vehicle in the manner most of their customer's do and examining the emissions?

>Quarterly polygraph tests performed by all engineering managers

How would that help exactly? Polygraph is demonstrably unreliable.

>to assure top management they haven't broken any laws?

It's mostly irrelevant how assured top management is about anything. What matters, in this case, is how far out of spec the vehicles Volkswagon produced are. That is what needed to be verified: specs vs. facts.
Then you don't know the motor industry very much as it has very strict coding standards like ISO 26262, the code has to be audited internally and by certified 3rd parties with every release to meet the development cycle requirements of the standards.

http://www.ldra.com/en/software-quality-test-tools/group/by-...

The industry also has specific coding standard for every language that is used in embedded systems like MISRA-C
https://en.wikipedia.org/wiki/MISRA_C

Today every thing you do with your car from using breaks to deploying air-bags is done through the computer, there's no way in hell that the motor industry would be releasing poor code "intentionally" because it would cost them billions in liabilities.
I can make a case for leaving money on the table for your customers, or your employees, or for some greater social good. I'm not seeing a case for leaving money on the table for your direct competitor in the abstract, though.
Undertale is the highest rated PC game on Metacritic right now
Right. And those tests and regulations exist in the interest of public health, not product benchmarking. So the issue is bigger than lying about some performance metric to compare more favorable to competitors. And it's also not a domain that's auxiliary—this is engine technology, the very heart of the company and the product. And good god, they built an entire brand campaign around it.

I really do feel this is analogous to some large pharmaceutical finally admitting that they cheated clinical testing on an important drug. You can't just pin that back to a couple of "rouge scientists".
Actually, I live in Far North Dallas. Rents in Uptown are too rich for my blood.

I get all the benefits of living in a suburb (low rent and lots of space), but I can still walk to Addison Circle when I want to go out and have fun. It's the best of both worlds to me.
I agree with your line of thought; however the NASA program described in the link only applies to non-exclusive patents. They state at the end that if you want an exclusive patent, to contact them.
Without really disagreeing with a number of things you say, it's also fair to say that we have an entire article based around a question the answer to which is essentially meaningless (given how low interest rates on checking accounts are). I expect that, for a broader population, a better question would be around the size of their "emergency fund."
But with a Mac, if I find I don't like the OS X ecosystem, I can always install Windows and be done. I get to enjoy my laptop and the ecosystem I want. I can't do the opposite with a Surface.
This pass the buck attitude really pisses me off. You're the head of the company, department, whatever, it's your gawd damn responsibility if your subordinates do something wrong. If you hired bad people it's still your responsibility. If you hired people that hired people it's still your responsibility. I don't care if you knew or not. You set the tone, you set the impossible deadlines or requirements.
You fostered a culture where someone thought that would be okay to do. Own up!
My own view is evolving in this regard. There are some immensely compelling and critical problems facing humanity generally. Most offer little by way of "market opportunity", and much of what is marketable is ... at best irrelevant, and far too frequently, actively harmful. Finding how and where I can apply my skills to net benefit is an exceptionally challenging problem.
Friend + Beer?
From https://news.ycombinator.com/newsfaq.html

If a story has had significant attention in the last year
or so, we kill reposts as duplicates. If not, a small
number of reposts is ok.
Mental note, never buy a VW car again. Cheating on emissions is bad, but passing the buck down to the rank and file is deplorable.
It shouldn't matter. Another test process should have caught incorrect code. The car should be tested to the specs and the specs should reflect the regulations.
Amazon Launches AWS IOT for Internet of Things
Because in diversified portfolio, to loose it all the following must happen. All listed companies must have completely collapsed. Goverment must have basically collpased to loose all value on the bonds.

If that happens its probably the financial amagedden anyway.

If the stock market falls by 50% i still have 70% of my portfolio. I'm OK with that.
The app situation is going to change very rapidly in the next few months. It's why Microsoft is making a big deal of the Windows 10 install base. There was a quick slide follow up in the devices announcement that showed that the growing install base has already attracted some big companies to the UWP [Universal Windows Platform] that previously had be meh on Windows Phone.

With Windows 10 on phones in November that platform will light up on phones finally. (Already the UWP Facebook app, as one example, is a leap forward in cross-OS feature parity compared to previous versions and it will be great to see that "day one" on Windows 10 phones.) On top of that you have "Project Astoria" which will mean very easy ports of existing Android apps to Windows 10 Phones for developers looking to leverage existing code investment. (Already somewhat released and being utilized is "Project Islandwood" and we're starting to see some iOS software ported to Windows through it.)

The UWP support on the Xbox One (and the merging of the Xbox and Windows Stores, huzzah) is supposed to light up as soon as November and we now know that a lot more developers will have access to HoloLens (which will also utilize the UWP) early next year. I think that access to Xboxen and HoloLens will encourage more developers to also consider cheaply scaling "down" to people's phones as well. So too should Continuum phones and their ability to offer side-by-side run "desktop-like" versions of UWP apps may drive some interesting apps to Windows Phone moving forward that have ignored it thus far.
Yes, the cautious and financially conservative Americans I know do not regard savings accounts as meaningful. They don't bother with them except as "thing that I stuff cash into that isn't in working cash".
"data literacy education"

Waiting since last 5 mins :(