skysight-inc/HackerNews huggingface dataset:
Uh oh. It's time for the monthly global computer security meltdown. Again, but worse this time. Security vulnerabilities in libpng are a huge deal; they affect lots and lots of different programs, including things people don't usually think of, and many them embed their own copies of libpng which makes them hard to update. The last time there was a security vulnerability in libpng, it took years before it was fixed everywhere.

Patching this properly will require not just replacing a centralized copy of libpng, but scanning all binaries for statically-linked copies. There might be some tools left over from the last time libpng got into trouble; this would be a very good time to update and link to them. Some categories of software that are at particularly high risk right now:

* Web browsers. Sandboxing likely helps, but there's a possibility that there are some usages (eg favicons) that decode outside the sandbox.

* MMS on Android (possibly remote root on phones with no user interaction)

* Any server that accepts PNG uploads and processes them (eg, user avatar thumbnail generation)

* Anything which shows people user-provided avatar images (eg, IM clients)

* Video games which download levels that can contain images

* File browsers which show image previews

* Music players which display album covers

Expect malicious images to start appearing everywhere, and soon. If you're responsible for the computer security anywhere, this is a drop-everything priority.
and iTunes went from a fully featured media library that focused on managing the media on your hard drive. iTunes STILL manages the media on your hard drive, but it's nearly impossible to manage the files through the stripped-down iTunes interface.

iTunes used to be a power-app, now I can hardly use it.
Did the article randomly jump around as you were trying to read it? Incredibly frustrating.
Sometimes I wonder if this whole food delivery boom is being supported by millenials who simply haven't faced the need (or desire) to budget yet. How sustainable is spending $25 per person per meal for those outside the top quintile? I know it works in San Francisco and NYC, but how deep is the market elsewhere? Or does that not matter? Maybe a significant number of them will never have families and all that disposable income will go to postmates and doordash instead. Maybe these businesses are built on price insensitive folks in urban areas for regular usage and irregular usage from everyone else?
nice... i really need something like this.
Non-strictness can be implemented with functions.

function thunk(f) { return { force: f } }

This, for instance, gives you a lazy stream

function unfold(step, state) {
return thunk(function () {
let m = step(state);
if (!m.ok) {
return {};
} else {
return { head: m.value,
tail: unfold(step, m.state) };
}
});
}
So, on discoverability in gestural interfaces: what are some good sources? I'm working on a touch interface right now and I'd love to learn how to make it better.
What are the practical implications of this?
In the early 2000's i almost exclusively used FreeBSD. The hardware i used were always a bit behind the curve, and still i could max my network connections.

What made me move to Linux eventually, was the ability to keep all my software easily updated, including the kernel.
One could also refrigerate contained gases.
old HN comments: https://news.ycombinator.com/item?id=7830767
Could it be that the ancients didn't have the same drive to propagate novel technologies and saw different ways of improving the human condition?
I'm all for the consumers seeing a huge disclaimer. That seems entirely fair and something that AirBNB should probably really do.
> It's five years low

So the commodities market is collapsing?
Is this more than a denial of service due to crashes?
I'm not going into the other potential enemies because I recognize there are valid arguments for guns there, but we know that guns won't help you against a) terrorists, because they have the initiative, so they'll attack in a way that is effective, taking into account whatever defense measures targeted population may have, and b) oppressive state, because a state actor has trained troops (as opposed to untrained civilians) with weapons and motorized equipment.
Ah ok, this was just a misunderstanding of terminology. "Psychopath" in English has a specific meaning having to do with lack of empathy and conscience, etc.—not mental illness in general. (It's perhaps confusing because "psychopathology" is quite different from "psychopathy" and does mean mental illness in general.) Colloquially, to call someone a psychopath is to condemn them harshly—even though technically it's an illness, though not everyone believes this—while to say that they're mentally ill is more neutral and in context can be sympathetic.

Your English is either native or extremely close to native, so it didn't cross my mind at all that you didn't mean the word as an insult, especially since some HN users throw it around too freely. My apologies for lumping you in with that!
Not just that, but the current engines are much more efficient as well. For example, when the first JIT engine was released for Firefox, it was an order of magnitude faster than the previous engine, even on the same hardware (for pure computation).
Thank you for the correction that extra info was not in my source (Dutch news agency).
One could point out here that Facebook have nothing to do with this - the problem is entirely that PhotoGap have not cleaned up their DNS records and they are still sending traffic to that IP.

That wouldn't give such a clickbait title though, would it?
Are there atheist suicide bombers?
Try harder. It is an excellent piece. The only false note are the cartoons alongside it which do not contribute at all and seem totally out of place.
As a new Macbook user this year one of my favorite examples of this is screenshots. On Windows I've always had a prt scrn keyboard button, Macbooks forego that. As of windows 7 I think, there was a program to screenshot a portion of the screen or a specific window, Apple don't have one of those. All the screenshot commands (screen, window, portion) are behind a 3 key keyboard shortcut that I have to look up all the time.

Edit: Csydas, I got a HN notify with a reply from you, it's a shame you deleted it - you brought up good points and I agree with you. If you were down voted before deleting it wasn't me.
I had precisely the opposite experience. My father bought me RedHat 5.2 and no matter what I did, I could not get anything but a stuck X -- no mouse, no window manager, no login prompt. every time, just the immovable X.

Returned it for The Complete FreeBSD and never, ever looked back. FreeBSD got me jobs at interesting places, and a handful of life long, interesting friends.

I agree with some of the other replies here -- I'm perfectly happy and even glad the BSDs have exactly the size and composition of users they do.

well, NetBSD needs much more public love, in my opinion.
That's utter nonsense, there were "Palestinian" (not necessarily carried out by Palestinians, in fact most of them were carried by left wing europeans who used that as a justification) terror attacks in Europe in the 70's when Israel was under a trade embargo by most European countries.
Also for the most part there are no European armies in Arab countries, Europe has barely any armies to speak off yet alone to deploy in force overseas.
Even if you completely isolate yourself you will still be under their crosshairs doesn't matter if it's for bombing Syria or for building schools in Afghanistan and Pakistan that dare to teach girls.
As for the refugees and near eastern and north African migrants that ship has sailed long ago, even if Europe doesn't take a single person now it still needs to find a way to solve it's own internal problem, Europe has utterly failed to assimilate any immigration from near east and African countries since WW2, even the enlightened Nordic states are rife with patronizing racism which prevents any true assimilation and the neo-liberal ideas that some how mandate that migrants should preserve their own culture at any costs aggravates that issue even further.
"Completely unusable"? Don't you think that's a bit over the top?

I don't know any advanced features but I can use all apps just fine. Pinch-to-zoom and a few swipe types are sufficient for most use cases.

Edit: why the downvotes? I didn't say anything controversial. If you disagree, write a reply.
But not pet hamsters!
No input validation in the IHDR as to the number of bits in the palette of the image. As I understand it, you just create an arbitrary image with the palette in the IHDR tweaked to a large number of bits, and watch as the process dies while trying to malloc() enough space to handle a palette that large.

http://seclists.org/oss-sec/2015/q4/264
You're right, the only things along those lines I can think of are DIY bullet time rigs and people doing spherical panaromas (and maybe videos for VR?) with a circle of cheap chinese action-cams
Could someone explain in layman words what is the qualitative contribution of the paper and why it is important?
It's nice to be nice, but it's better to be Steve Jobs
No. Buffer overflows can be used for privilege escalation.

Crashes are better than privilege escalation, but they do not mean that privilege escalation is impossible.
Being clever is being childish
I guess the problem is that you don't know:

> allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact

As far as I understand, trying to predict what is possible by exploiting a buffer overflow is hard because it depends on many specifics, such as compiler options used, OS protections, ...
pretty much this:
https://www.youtube.com/watch?v=QWaWsgBbFsA
I know about startup time:
https://gist.github.com/mj41/6761c021135ae1cb17f9

BTW: Not Moose related - loop with native int:
https://gist.github.com/mj41/20c70566564283151714
What about activated charcoal or baking soda being used as a deodorizer? Or chilling a bottle of white wine, or pitcher of water, before drinking?
Tufte evidently thought it would help people understand what's important about his work:

> the goal of Tufte CSS is not to say “websites should look like this interpretation of Tufte’s books” but rather “here are some techniques Tufte developed that we’ve found useful in print; maybe you can find a way to make them useful on the web”

It's really not just mimicry. For example, a distinctive design element is the cream colored background called out by the grandparent comment:

> Here too, the cream colored background looks gorgeous on paper and just weird and out of place on a webpage.

In fact, it was chosen deliberately to deviate from paper:

> Although paper handouts obviously have a pure white background, the web is better served by the use of slightly off-white and off-black colors.

Other examples include:

> Sidenotes are a great example of the web not being like print. [...] The goal is to present related but not necessary information such as asides or citations as close as possible to the text that references them.

> In print, this means [graphics] are not relegated to a separate page. On the web, that means readability of graphics and their accompanying text without extra clicks, tab-switching, or scrolling.
$40 seems really expensive for a short book like this. I'd love to read a few objective reviews to see if it's worth the price.

For $10 I'd buy without thinking. For $20 I'd probably buy with an Amazon type consensus. But for $40 I'd need a few trusted reviews before a blind purchase from a self publish.

Not that there's anything wrong with self publishing ... just that there's no judge of content or quality as there isn't a "style" for the publisher.
Have you ever heard about Kaddafi and how they lived? Have you ever heard violence in their country? Why the hell west destroyed their country? Can you compare current Iraq after war vs before war? you are saying that shariah rules suppressing human rights, thats actually how your teachers thought this to you, and do not forget your teachers are US gov and mass media. there is one formula for democracy: culture + accepted rules = gov. rules

If you think women rights are suppressed in east countries you are wrong, why? 1. you dont live there, so you cannot give objective idea. 2. things which are strange to our culture might be totally acceptable for their culture and maybe they are happy with that. Think about western women who wears anything she likes or even doesnt wear anything if she wants, so does this mean eastern people should come to west and bomb europe and say hey you are violating women right as we believe in our culture? what the hell is this? is this acceptable? when charlie hebdo creates comicses about died Russian people in Egypt is this acceptable? or do you say this is freedom of speech? f..k this kind of dual face freedom of speech and democracy, give people their rights to live on their country with their culture in peace, do your business in your country, if you want to buy something, buy it, dont try to teach them how to live, they know how to live, if they dont they are trying to find a way, this is a nature of human.
Thanks a bunch for the explanation, i'll definitely keep that in mind in the future. :)

And yeah, i'm fluent in english, but my native language is german. (As is my mindset, which is why some bits of HN can be a little troublesome. ;) )
Minimal password manager for OS X and Linux
The article is on the difficulty of writing specifications. The fridge is a metaphor. Your insight amounts to “we can always assume that the specification has already been written and correctly implemented on the other side of the interface”.

This remark has a place in the discussion, but not the one you probably think.
Nah, the original Mac had all that too. You'd select multiple files by shift-clicking. Command-option-escape would force-quit an app. Numerous corruption & crashing issues would be fixed by holding down Command-option-P-R on startup. MacOS 8 gave us Ctrl-clicking to pop open popup menus. Option-click would often do a number of strange app-specific things.

I suspect it's more that you're becoming a power user. Power users have always had a lot more functionality available at their fingertips, in exchange for investing time learning a platform really well. It's just market segmentation: you don't have room to put all the functionality that everyone might need on screen, so you put the stuff that most people need all the time on screen, get them hooked, and hide other stuff in an obscure reference manual so it can spread through tips & tricks blogs.
> iTunes used to be a power-app, now I can hardly use it.

This happens to a lot of software. There used to be lists of "last good version of ..."

The Usenet group alt.comp.freeware sometimes used to recommend the last good version rather than the latest version. There's probably a Reddit subreddit for it.

ACDSee and Nero burning rom are well known examples. I guess Imgur is at risk of this, but they seem to be keeping stuff in check.
We used FreeBSD exclusively at my first startup in 1999 (flashbase), partially because of Yahoo's success with it (I was at Stanford). We found the base OS to be very stable and the networking stack to be especially robust. But, the mysql port was not that stable and drivers for proprietary products, like Oracle, were hard to come by.

Back in the day, Oracle did a freebsd driver partially for Yahoo. The Oracle drivers were not open source and hence there were few options to connect without Oracle's help.

I worked in the kernel networking group at SGI in the 90s and there was a lot of freebsd loving there. Also, the FreeBSD license was more relaxed and commercial products (like NetAPP) could include and extend FreeBSD without disclosing their modifications.

Our frustration with lack of support for FreeBSD moved us to choose Linux and Windows (for SQL server support) the next time around in 2004.
Horizon, a game based on rolling shutter mechanics, but with geometry instead of pixels:
http://omershapira.com/portfolio/horizon-a-4d-game/
Mapping financial acceess through Geosocial data mining
Apple does this too. Except they hide the undo command behind a completely insane "shake the device" gesture, and half the time it fails to retrieve the email.
No one's published an example which causes arbitrary code execution yet (that I'm aware of), but most bugs of this type end up there eventually.
How  to Promote Your App Without Spending a Ton of Money
Mac OS X has always shipped with a screenshot utility called "Grab".

https://en.wikipedia.org/wiki/Grab_%28software%29
What terrible thing came from preventing multiculturalism? None. On the contrary - terrible things happened BECAUSE of multiculturalism. Several groups of people cannot live as a community when their ideas of a community are different. "Multiculturalism" is only possible when the cultures WANT to live together. In our case here in Europe, whites want to live together with muslims, but muslims don't. Ant that is the problem. We can not fix it, only muslims can. And if they won't fix it, terrible things WILL happen. We are doing our part. It's time for other cultures to do theirs. And if they won't, we will have no choice.
An ironic piece where I had to wade through a preview ad and three poorly placed overlay ads to even this article.
The Battle of Algiers, in French

https://www.youtube.com/watch?v=y-7j4WVTgWc

I watched it in French and I don't speak French. The story is easy to follow.
From CVE:

>and 1.6.x before 1.6.19

Unfortunately, the latest version on libpng site [0] is 1.6.18.

Why was this CVE announced before the patch and version update was released?

[0] http://www.libpng.org/pub/png/libpng.html
Well, did they in fact improve human condition? They probably had lots of engineering talent, with a drive to improve too, but they lacked the nescessary science to provide proper methods. Calculus means a lot i industrial engineering. And chemistry has its role. You don't get far with alchemy.
> Politics can be irrational even at the best of times, and this isn't the best of times...

The people and institutions pushing these confusions and trying to signal who The Real Enemy is know exactly what they're doing.
Already in my Facebook feed I'm quoting information from 'slau because people are saying that the attackers are definitely immigrants because Syrian passport, while carefully ignoring the "French and the fingerprints" angle.
Making internet available to people with no internet connection
A good opportunity to check how https://github.com/PistonDevelopers/image-png is doing (a PNG decoder written in Rust). Looks like it includes bindings to use miniz.c for DEFLATE decoding as well as "inflate" (which seems to be DEFLATE in Rust). Also, it seems to have a fuzzing driver (png-afl). Good times!
> so that I know all the food is correct.

But why penalize the courier? In a restaurant, every worker shares tips; so if you have a problem with the order, your disapproval is shared by everyone in the chain. But in the case of PostMates, you're just penalizing the delivery person, who doesn't make much money at all.
"Gone are the fundamental principles of good design: discoverability, feedback, recovery, and so on. Instead, Apple has, in striving for beauty, created fonts that are so small or thin, coupled with low contrast, that they are difficult or impossible for many people with normal vision to read. We have obscure gestures that are beyond even the developer’s ability to remember. We have great features that most people don’t realize exist."

OMG have you guys tried to navigate the Apple Music iOS app?? You wouldn't think they could make it harder to use than iTunes... but they did! Almost impossible to find features, and when you finally do figure something out, it's hard to remember by the next time you run the app.

The bloated number of swipe gestures on iOS is ridiculous too... I am always cursing after swiping in some direction by mistake.

(I am generally a big apple fan...)
As a side effect, result from all the tiny 'improvements' since Snow Leopard, I have moved everything from stock apps and services. Ecosystem is simply not something I would rely on. Mutt/offlineimap for mail. Baïkal (on my own server) for contacts and calendar. My photos are outside of Photos. My music is outside of iTunes. As a final result of the process, my iCloud account has all the checkboxes unchecked. I would not strive to be OS agnostic if Apple didn't bend over backwards to tie me in into their services.
So yeah I agree with other comments, half of the hidden gestures are there to tie us in. Bad move.
> The tech came out in 1996 by Microsoft and nobody used it until 2003.

Not really.

Ever since there iframes things like that could be implemented. People just didn't care...
Another big reveal on Theranos: Safeway execs questioned accuracy of blood tests
Yes "we" want. And "we" don't understand what is e.g. this about https://en.wikipedia.org/wiki/List_of_Python_software#Python...
All I want is a Youtube app that does this:

> It's also really really nice to have the music play in the background

Apparently this works on the IPhone but not on Android...
Indeed hidden iframes were the original way in which these effects were implemented.
Theranos secret partnership worth $350M has since fallen apart
Turing Tarpit
Did they strip it down? I haven't opened it for the past several OS releases. It always annoyed me that they added so many conceptually different applications to an audio player.
React wrapper for clipboard.js (flashless clipboard)
The low-barrier-to-entry plays are getting lots of attention, while the ones that take more capital, research, a breakthrough, or all three, are also getting some attention.

The article also simply states the obvious: trivial stuff "is trivial."

This "culling of the herd" can happen continuously, or there can be a flood of investment leading to a bubble. Lots has been blogged about how to make different mistakes [1], how to think different [2], or just how this time will be different [3].

Failing is part of innovating.

"We avoided dying till we got rich." - pg [4]

[1] Just one of many: http://www.inc.com/niel-robertson/brilliant-failures/dot-com...

[2] http://www.thenational.ae/business/technology/apple-is-the-t...

[3] https://avataric.wordpress.com/2015/08/14/startup-culture-ev...

[4] http://www.paulgraham.com/die.html
The Rise of the College Crybullies
Wouldn't you get other issues with decimal numbers? Consider 1/3 for instance.

What you really want, I think, is rationals by default, as in Perl 6.
To get past the paywall:

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&c...
And what do you do with Avocados?
You can sometimes explain better by a set of examples rather than an explicit categorical description. The base set of examples I started with is what my mother put in her refrigerator.
I still use them for white-on-black terminals when I can.
UK: I'm on adsl over copper (actually solid aluminium) wire from a phone exchange 6km away. No plans for fibre upgrade. 2.4Mbit/s down and something like 0.8Mbit/s up costing £12 per month to the ISP and around £65 per quarter to the national phone company for landline service. All this and I'm about 2km from the centre of a major city.
Fun fact: Russia loves FreeBSD. (https://www.google.com/trends/explore#q=freebsd)
Look at Exter's pyramid and decide which level(s) can withstand whatever you flames you think are coming, and then divide your assets among those levels in proportion with how bad you think things might get.

https://en.wikipedia.org/wiki/John_Exter
Yet we don't see terribly much christian terrorism, buddhist terrorism or agnostic terrorism.

All kinds of people are impoverished but we only see extreme violence from one background. This rules out poor suburbs as prime cause.

One can argue mass shootings of US of A is another example, but it doesn't seem to exist much outside of USA.