skysight-inc/HackerNews huggingface dataset:
"This particular device, which took 10 hours to build and cost just about $150, uses a Raspberry Pi, Wi-Fi radio, and antenna to take advantage of a known exploit in Parrot quadcopters. The rifle shape, meanwhile, is mostly for kicks. ".

This is the future of warfare?
Codrops – Design inspiration for web apps with functional components
It you're the employer making the allegation, you can be sued.
Same issue on Android: http://i.imgur.com/FKPvJsq.png

Time to avoid /newest.
Well, Facebook is hiring ;-)
Name is identical to FreeBSD's device node manager.
This is exactly what I've been looking for recently. Live reload is very nice, I'm excited to give this a shot.
Summary of crazy terms in this post: OAuth, OpenID Connect, JWT, OAuth 2.0, OIDC, SAML.

I know what what only one of these means (OAuth), and the only thing it means to me is I'm in for a world of hurt.

I agree with the author, regardless of whether his terms were correct. It'd be nice to have something safe AND simple to authenticate people with.
The post doesn't indicate whether residents will be paid like PhD students or like Google employees.
This is going to be a deal breaker for many: Eligible to work in the United States
Imagine if Amazon delivery drones took off --and someone had this along their path. I still don't know how Amazon plans to address rogue actors trying to rustle their drones for their freight.
SNI is useful because it's less of a headache than setting up multiple network interfaces. Conserving IP address space is simply something really nice you get for free.
Code-push
If you're wondering why this is useful, the reason is buffer overflow exploits. Strings in C are null-terminated, so having a null in your code may stop it from getting copied.
Has anyone worked with or have a strong opinion regarding CAS?

http://www.yale.edu/tp/auth/cas10.html

It's very similar to OAuth, except way simpler to understand, and very easy to implement (I'm working on a standalone go server that will perform authentication, but have been dragging my feet a bit so it's not done yet -- basically the only reason it's not shipped is that it's failing tests)
David has a good track of having balls to say what he thinks.

http://techcrunch.com/2008/05/02/akamai-fires-engineer-who-s...
The theremin's sound (as well as the ondes martenot) is just the beat frequency between two supersonic oscillators. While it is the electronic generation of sound, it doesn't really have the ability to modify the sound. Wether that a synthesizer or not, is up to your definition.

Bob Moog's modular was also not the first (he and Buchla built their synths at about the same time). There was computer music being done on the RCA synthesizer in the 50s. Hugh Le Cain also did a lit of interesting stuff that predated Moog and Buchla.
It seems like many other types of things which are also termed "investments" involve a (significant) element of risk.
Contact File Containing All Robocall Phone Numbers
Isn't that the present (state) of cyber warfare (aside from the formfactor effects)?
I guess it's a matter of perspective?

For example, tech people tend to single out Google as a 'fast innovator', while attributing the success of Windows or the iPod to superior marketing or some other aspect of business hacking (as opposed to perhaps their success at building better product ecosystems).

One could argue that the iPod was a 'fast innovation'. Or conversely that Google followed quickly behind a host of others, simply building on what their predecessors had done before (and in some way at reduced risk, since 'Internet search' was known to be a viable market at Google's inception). The categories are fuzzy -- although hopefully not for those making the decisions!

Either way, the larger point I was making was that yes, being a fast follower is a legitimate business strategy. There are a lot of risks to being first, and the benefits of being first may not outweigh the risks.
This should really be called assisted cruise / piloting or something. Autopilot implies far more automation than what the car is currently capable of which is simply going to lead to more people taking stupid risks.

Some sort of crash / tragedy seems inevitable at this point based from all the videos on youTube.
I'm not sure about books, because the 'Net tracks everything so much more effectively. Treating the internet like a firehose-book, then...

- If you're interested in Linux kernel activity in particular, sign up for LKML updates so you have a constant feed of "ooh, what's that" to keep up with, although following everything in realtime might be a bit of an overload.

- It's good to have a passing idea of how the major distros work - if you have enough familiarity with a system to at least comfortably spin it up in a VM easily and quickly, it makes it that much easier to test how the occasional obscure edge case is handled in a given environment. If you're writing at the systems level (eg, background daemons, systemd vs sysvinit et. al.) this will probably come up reasonably frequently.

- I've learned that some languages can actually be almost as fast as C nowadays - in http://www.gopherjs.org/blog/2015/09/28/surprises-in-gopherj..., a small test algorithm that computes pi using 1 billion iterations runs in 6.434s when compiled with gcc -O3, and the same code written runs inside Node.js in 6.549s - 105ms difference, arguably nil.

- Real-world applications do undeniably introduce latency in the most optimized of environments, but capable, speedy CPUs are approaching such ubiquity that scripting languages are an extremely viable choice for a lot of tasks.

- I understand that IllumOS - the now community-maintained open-source project that used to be Solaris - has awesome kernel-level debugging facilities. This might be interesting.
> The important part is that the person interacting with someone has a distinguishable name for that person.

I think your example actually proves my point. In the limit, how does one tell apart all of the people with the name Tarou Suzuki's? Contextual hints aren't always useful to the identifying party (in the limit, none are), so ultimately a globally unique name such as a passport number or an SSH key must be used instead.

We seem to disagree on two points: on the utility of a globally-unique name being human-meaningful, and on whether or not these names need to be issued by a centralized trusted party. Regarding the former, I think there are many obvious cases where a globally-unique but human-meaningful name is preferred to a globally-unique but non-human-meaningful name. Examples include DNS name versus IP address, and Twitter handle versus user ID. Giving a user a globally-unique human-meaningful name already has proven applications for things like SSO (e.g. Facebook Connect), and has hypothetical benefits like allowing the user to share information across services seamlessly. This article makes the case for a decentralized implementation. Am I to understand that you believe this has no utility?

Regarding the second point, if you take a simple DNS-like policy of "first person to claim a name gets it, and has to renew it periodically to keep it", you can absolutely use a blockchain to vouch for bindings between human-meaningful names and humans. It's no different than binding an address to an unspent output in a transaction. As mentioned above, the caveat is that you have to trust that the peers mining the blockchain dedicate the majority of their cumulative computing power towards playing by the blockchain's rules, but I have argued that this isn't an unreasonable thing to do, due to the difficulty of creating a plausible but wrong blockchain. The reliance on a central party like a government isn't without its own issues, after all (even mundane ones, like sending the passport to the wrong address, or mistyping the owner's name).

I wholeheartedly agree that contextual clues and nick names are highly desirable. However, the fact that they don't always work means that we need a fall-back mechanism for identification. Why settle for a meaningless string of digits and characters, when it can be something easy to remember and meaningful to the owner?
Yikes. I'm a fan of the anti-tax message and - very rare - corporate use of free speech to rail against the rampant kleptocracy. But they really missed the mark on tone here. (As with most of their own-kookaid-sipping marketing efforts.) This does nothing but galvanize the opposition.
Are people currently doing their PhD eligible for the program? Thx
I think it's to collect data. With this beta Tesla can now review all data fed in when the car was driving itself, what happened when it sensed an emergency and how frequently a driver had to take over and what factors were there when the driver took over.

Beyond that it's a "neat" feature but yeah if you have to keep your hands on the wheel then it's just an awkward and somewhat useless feature.
Where do you buy your colatura? The prices I see online are about $30 for a 100ml bottle. That comes out to $4.50 for the single tablespoon (15ml) in your recipe. Exorbitant may be too strong of a word, but that seems like a lot of money. (I'll have to try out that recipe regardless. :) )

edit: I see a bottle for $15 as well, which makes it a bit more reasonable.
How Germany Does Prison
Thank you for taking the time to respond.

> Yes. And the same is probably true of the browser you used to post this. Also, the OS it's running on. It's the price of being "evergreen."

The OS, yes, to a certain extent. I don't think I've set up apt/cron-apt to automatically pull in stuff on (any of) my desktop(s) yet -- they tend to have a couple of bleeding edge repos enabled, and I often do not want even security updates at surprising times. Nothing like firing up your laptop on an airplane just to discover 3d acceleration no longer works because of a kernel security update (frequently for a local-only crash/exploit).

As for browsers, I'm mostly familiar with FF, and that usually prompts before update? I think you can set it to automatically update, though?

I do accept that trusting a single group of people to maintain the OS can be a good trade-off -- I trust Debian's Security team to do that. Sure, if they are compromised (or more likely, make a mistake) I'll suffer. But I'm not interested in having the small chance of key compromise be multiplied with all the (complex) software packages I use.

Also, for context, the same documentation clearly states "Urbit is not (currently) secure in any way" (or something to that effect), and in passing "if urbit runs as root". Well, apt-get does run as root, but a) it only runs automatically if I tell it to, and b) it's built on rather well-tested primitives (GnuPG etc).

So, having Urbit be notified of changes, and optionally automatically update sounds great, I'm not sure if I think "always automatically update" sounds quite as great. Especially if the stuff on which trust is built (encryption etc) is still considered unstable.

[ed: To be clear, the last bit, I like: "A normal Urbit user never has to think about software update." Key word being "normal". As Urbit is unstable, and everyone are developers and/or testers - there aren't (yet) any such "normal" users? ]
Yeah, this is an insane TOS. Not sure what they were thinking with that, probably boilerplate they didn't think through.
How Einstein Revealed the Universe's Strange “Nonlocality”
I wouldn't update the view matrix directly. Rather let the input events update one matrix and the game loop would copy it only once per frame. This way all the input events would be summarized in that matrix and the view would follow the dragging cursor, even at 3FPS.

So, many input events are seen as a summarized version in the game loop. Not many of them.
Good breakdown of different distributed naming/id systems, including OpenID: http://webcache.googleusercontent.com/search?q=cache:XpidG9O...
What the other commenter said. Southern Democrats switched parties as part of the Southern Strategy ('realignment'). This wasn't backroom stuff, it's well-documented in lots of history books using contemporaneous resources.

Wikipedia is as good a place as any to start: https://en.wikipedia.org/wiki/Southern_strategy
Most academics looking for promotion are subject to publishing KPIs where publishing in various journals is weighted according to the prestige of the journal.

So you mandate a 30% discount on the KPI for any journal that isn't open access. Suddenly prestigious open access journals spring up and attract the best papers thereby getting more prestige points and so on.

It's really that easy. Most academics I've noticed are more interested in their careers for which they're more than willing to exploit graduate students, holding them back a lot more than 3 years and so on to care which is why the problem continues to exist. Academics need to look firmly in the mirror when they ask why the journal publishing racket exists.
checked the video. Where can I get all the accessories if I want to make this in bulk? Do you guys take orders and deliver internationally?
Our documentation is still very young, but it is mentioned in our contributing guide:

http://urbit.org/docs/dev/contributing

There's much more to cover in terms of how the network works. It's coming! For the time being some things are just folk knowledge. We're always happy to answer questions though.
MongoDB and the Shocking Case of the Missing JOIN ($lookup)
Delaying vs being thorough would be incredibly tough to prove.

To a degree this happens already with large vs small company law suits, where the larger company maintains proceeding in some form til the other small business runs out of cash or gives up.
> I think you are looking for something voluntary when that is almost certainly not the case.

Your parent post never argued that it was voluntary, but contemplated if it would be perceived to be voluntary sexism if the genders were reveresed.
recs?
How can I forget, right? Hackers unite.
Analogies are inexact by semantic definition, and that doesn't make then "faulty".

Privacy is readily available through https, two factor OAuth, etc. just like oxygen generally is. What's your point?
Oh for those interested, here's the standalone server I've been working on (it's super rough):

https://github.com/t3hmrman/casgo

While there are other versions of the CAS specification (v2, v3, v4), my implementation sticks pretty close to v1, since it has what you really need (I diverge a little because I use JSON).
You'd think but there are issues like this today and it's difficult to prove depending on the circumstances (at least prove to the point where they can get in trouble with the bar).

Anecdotally when my father was going through his divorce his lawyer told him not to take the settlement with his now ex-wife and his lawyer promised she could get him better terms and an expedited divorce and would only need to go to one court appearance.

Two additional retainers later and she told my father he had to settle for what was offered at the court house which was a worse settlement and that she event told him she didn't feel comfortable negotiating beyond what was offered because it was "a great deal". I have a hard time believing she had my father's best interests in mind and just kept the case going for a bit longer.

I would expect a system like this would exacerbate this type of behavior.
Announcing “Adept”, easiest way to run SSH commands
Less discrimination?
I think obfuscation is another reason, since the classic "xor reg, reg" (31 C0 is xor eax, eax) does not have any nulls either.
What I'm trying to say is it's one of the more fun/rewarding fields so most of the people who get in to it do it for fun - getting a job is just a way to get paid while doing it. Unfortunately having a bunch of people willing to accept bad terms just to get to do what they like brings down the employee side of negotiation which is why I would never go in to game dev professionally - it's waay easier to go in to web or enterprise and it has way more jobs, better career path, better work environment, better pay. Game dev and stuff like scientific computing is way more fun and challenging.
Fair enough but when you consider internal structures as "data" I think the phrases loses some of its power; you could effectively make this argument about any type of meta data system at that point.
Absolutely this would increase frivolous but likely successful lawsuits. Much like patent law today. Justice IMO should not be tied to financial gain as much as is realistic.This is why I much prefer systems were personal trauma/compensation settlements are not near the levels you read about in some US cases, more about covering direct costs.

That said if they did do something like this I suspect the most reasonable way would be to treat it like political donations, similar to some countries where only citizens can donate, donations are transparent and capped as lower levels.
Maybe I'm being cynical, but I'm expecting a day when all this security backfires and you have to throw out your computer when you get attacked by certain malware that gets inside of these trusted computing areas. The part about not being able to read certain memory areas, even with hardware access, is especially disturbing.
*while illuminated by a bright laser. By dimming the laser the quantum behaviour returned, and you watching the atoms or not had no effect on the phenomenon.

Despite the misleading title, I imagine affecting the quantum behaviour of atoms with lasers has all kinds of nice use cases!
CAS is not federated. If your CAS authenticated wiki detects you're not logged in, it redirects you to what it knows as the CAS url, not YOUR CAS url.

This makes it wonderful for universities and large institutions that deploy lots of small applications and buy third party hosted services, as you can keep the passwords local while proving identity and providing relying parties limited data they may need for authorizations.

But if you don't have an account my CAS setup recognize, you'll need to make one first. And if you have one with another institution, we won't recognize it.
>>No, they are not. A good developer is someone who, by virtue of the fact that he or she has to write software whose theoretical underpinnings are rooted in CS, must be good in CS as well.

It depends on the problem domain. Most problems solved by software developers today do not require a CS background, or even any technical background. Just like in other fields, we have the advantage of building on the shoulders of giants. A smart person invents Ruby, another smart person builds Rails on top of that, and the next thing you know, a ton of people are writing web apps. This doesn't mean that the web app developers are "bad" developers. It just means they can focus on other types of problems.
Flipkart:Ambulance, Data centre and 1000 member team behind $300M BB Days
I find it already unethical for lawyers to take a percentage of the awarded damages, a practice which is fortunately illegal in many European countries.
Looking for time to leave your job for Startup?
If you really want to help refugees, look beyond the Mediterranean
There is also Jazz, which used to be Resumator.

jazz.co
Two years is nothing for something that's supposed to go global.

For how long was CSS developed before there was large scale adoption? It seemed to be seemlingly forever people were doing table based layouts even after it was available everywhere, and it probably wasn't available everywhere until many years after its inception.

> relatively few folks were willing to actually back up that belief with action

Which in this case turned out to be the correct decision. Nobody wants to implement a dying technology, no matter how good it is technically.

Most generally wait until it is best practice among the bigger players until they implement something, uness there is a clear user need.
Should lawsuits be open to lobbying and allow corrupt judges to make a lot of money on certain cases?
> We had the chance to "fix" this with IPv6... but we decided to give IPv6 addresses as well.

Who is this "we" of which you speak? IPv6 was designed by a committee, and committees get things wrong all the time, even in 2015.

> I'm pretty sure having addresses that can be broken into prefixes to assign to different ASes and refer to in BGP routing tables is a feature.

You are conflating two different things here. Yes, it's good to be able to build routing tables that are very efficient. But having a number that describes the route to a machine is a very different matter than having a number that determines a machine's identity.

The way things work today -- even with IPv6 -- is that a machine's identity is determined by a number (its IP address) and we have a namespace layered on top of that (DNS). The assumption that the machine's identity is determined by its IP address (a number) rather than by its host name is baked deeply into the fabric of today's standards. This leads to all sorts of horrible non-orthogonalities, like the "Host" header being required in HTTP 1.1.

I'm not saying this was an unreasonable design tradeoff, just that it was a tradeoff, not something that was desirable for its own sake.
[edit] derp I am dumb, was not familiar with https://ipfs.io/
this explains my questions
Great idea and use case for IPFS. I'm not sure I want to run php just to host images though. I always have this 'oh... It's in PHP...' moment with things like this and I generally end up not wanting to play with or host them, either because I don't find php attractive as a language or because of the various security issues around hosting php applications.
> The Swiss can do whatever they want ... Sadly they capitulated in what was naked Imperial aggression by a foreign power.

So you're unwilling to assign a moral value to Swiss actions, but are willing to assign moral values to the actions of others? Yes, the Swiss can run their country however they want - but so can everyone else, even if it includes not being friendly to the Swiss.

This is just the 'consequence-free speech' argument scaled up to national size.
Now you're just trying to discourage them even further.
>See What’s Happening At Home

Nothing. There. Didn't need your service.
A cause of action (a lawsuit) has always been like a property interest. As such, through an assignment, you can buy and sell it, mortgage it, put a lien on it, and do about everything else you could do with a property interest. I have never heard of anyone selling shares in a cause of action, though I don't see why this would not conform to existing law, assuming you comply with SEC regulation on the sale of securities.

It's an interesting idea. However, the financial crisis of '08 happened in part because wall street innovation allowed for the selling of shares of mortgage portfolios, so I would be cautious where this goes.

The arguments for and against it in the article seem to mirror the arguments regarding a lawyer's contingent fee interest. Some would say contingency fees have done harm to the legal system. In fact, some states limit contingency fee awards in medical malpractice to limit those types of lawsuits. So, if your goal is to limit lawsuits, this kind of arrangement probably would be bad.
I'm curious what people's opinion of Oz is as it was created by the "Fuck OAuth" guy aka Eran Hammer that the article refers to. http://hueniverse.com/2015/09/19/auth-to-see-the-wizard-or-i...
Being 'priced in' assumes the market is correct. From that logic we'd never have a crash, so not a fan of that catch phrase.

Also you pretty much cant eat ANY investment unless you buy productive farmland. Unless going full prepper (which is more insurance than investment) investments are about 1) wealth presentation to see you through the event, or 2) being in a position to take profit from a negative event.
No support for livereload.
It's just POSTing the image to a web server running from something else.

I don't understand why they are doing dumb things like passing everything to a shell when PHP has curl support of its own, and imagemagick.