skysight-inc/HackerNews huggingface dataset:
The difference being while a lot of people argue against upgrading to Python 3, I've never heard anybody argue against upgrading to PHP 5.
Hell, maybe the rotation of distant galaxies is off because they're just sprites

So there's probably some other simulation of our universe where they tried to do models, but it was too slow.

If not, then the simulator introduced a pre-mature optimization. The existential ramifications of such a development inefficiency are palpable!
Guess we can't keep waiting for the vaporware that is Mou 1.0.
Where is disabling TOR connections in LP settings? Can't seem to find it.
Decide for app users without making them feel like idiots: anticipatory design
He's not implying anything. He's saying it's wrong to assume that everybody should want the same thing. Is it that hard to understand?
> With the recent security issues surrounding LastPass

What security issues? This blog post isn't really new information (or surprising), and I cannot think of anything else.

The biggest problem LastPass has had is that LogMeIn purchase them who a lot of people hate/distrust (myself included).

The rest of your post is predicated on LastPass being of "low quality" because of supposed "security issues" so I invite you to point them out.
> We're all good at securing small pieces of paper.

Not true, as it turns out. I created passwords for my users and put them on a laminated card as a courtesy, with instructions to keep it in their wallet, purse, etc. They were turning up stuck to keyboards, shelves next to desks, etc. Some people are really crap at securing small pieces of paper.
With the exception of Atom, aren't those all just text editors when not extended? (Another serious question; I don't know for sure.) If so, what would be the extra baggage beyond a markdown only editor?
I still don't understand what happened here historically, was there ever an upgrade path or way to make this a smooth transition? I can't think (surely there is) of another language that had such a hard-breaking version change that still persists 10 years later as a fracture across the community.
What I like is he came to America to go to MIT. That great mind is now an American mind, and with his family origin, I would hope a world thinking and sympathetic mind. Perhaps he can do good in this world.
What about http://commonmark.org?
I'll bet you if it were the details to their own bank account they wouldn't do that! It's a problem of how much people care, really (or how much they think the organization cares).
And I feel a little guilty whenever I think about this, because I believe in the right to union (or not), and I've read that the FedEx drivers don't get a very good deal. But man, I just don't have the social justice energy to withstand the poor UPS service, on the ground and on the web.
Visual Studio now available in cloud subscriptions
It's not a bad approach - it lacks integration, it's easier for malware to grab, but that's about it. Malware can already dump the memory or log the keyboard and mouse to grab what'd be needed to decrypt your LastPass or KeePass, so in the end those solutions are no better than plain text files inside an encrypted container. The lack of integration, generation and other UI niceties is really the biggest loss I think.
Using GPG means that Password Store is less than 600 lines of bash at its core (minus emacs, completions, so on). http://git.zx2c4.com/password-store/tree/src/password-store....

GPG is maintained, and well. Even as it supports different ciphers, that attack doesn't apply here. And very little functionality is accessed through this script.

If that's not a tiny attack surface, I don't know what is.
>Also they did not come from poor social classes. They don't have the "excuse" of having grown in a troubled society, they were not desperate because of their shitty life

They were "westerners" only in their nationality not in their ethnicity. For some western societies it's difficult to imagine the difference, but it exists -- not everybody gets assimilated to the culture he lives in, especially if there's another culture he feels he belongs to by inheritance.

For those of people (who are not the majority of ISIS, but a small minority) it's about a twisted idea of revenge for what happened and happens to their (origin) countries and to people of the same faith there, and how the west views and treats them -- not about struggling with poverty.
This has the same issue. Dividends plus any gains when they sell the stocks remove currency from circulation.
5 things to get the best out of push notification
Many (most?) modern linear accelerators have imaging panels behind the beam path (see image [1]) which could be used for dose monitoring although they are primarily used for imaging purposes. I'm not sure whether any of these are currently used for dose monitoring.

[1] http://tommytoy.typepad.com/.a/6a0133f3a4072c970b0147e2ed7f8...
GitHub Flavored Markdown editor with PDF export: https://github.com/srpeck/markdowned

The editor happens to fit in an HTML file <9k (excluding the behemoth browser...:).
As it already is, for the most part, they don't.

Questioning the sacred cow of universal suffrage might be a better allocation of mental resources than picking on a single kid's parents.
I don't know the version but I saw one program written in PHP break because there was a custom function called "goto" and a later version added that as a keyword. But often people don't really have a choice as to whether PHP is upgraded or not since it often runs on shared servers.
Oh, Go Ahead, Overthink FizzBuzz (2008)
To whatever extent your comment was intended to contribute to the discussion, I apologize for any misunderstanding. To whatever extent it might have been motivated by pride, I wish you luck, for your sake and those around you, in overcoming this tendency. Beyond that, I think this conversation is now of too little value for us and those reading to continue.
I think the half-keyboard stuff.

http://blog.monstuff.com/archives/000021.html
Why Nigerian Scammers Say They Are from Nigeria [pdf]
Entity Framework 7 RC1 Available
So many people praising this brainwashing I can't even believe it. I'm ready for the downvote but please comment to why it is not the case. That's a pretty story but if their parents went on teaching him something else than physics everybody would go on their horses and scream for child abuse.

What choice did the kid have? None. Dude didn't go out and was full MIT mode from the age of 5.
Thanks for bringing this up. This is a oft forgotten point as to why private space flight is so difficult in the US. Private ventures can't compete when the rules are set up so they've been kneecap'd from the start.

Ironically, I can't drive my car without insurance but I can fly a plane without it.
Hi! Project author here. The keyboard has both the macro functions (from F1 to F12) and the keylogger. Since it's completely open source / open hardware you can disable the keylogger in the firmware if you don't like it. I personally don't use it. No one uses the keyboard except me and I'm not going to log my own stuff :) . Just put it there to show that it is possible to do it. Regarding the source code, it's available in my github: https://github.com/masaleiro/HacKeyboard
Password Store might be tiny but GPG itself is a huge attack surface - that's the problem.

Maintained, yes, well... I'd question that. I don't think it's very heavily reviewed or anything, and vulnerabilities pop up in it quite frequently, enough that I'm uncomfortable using it for serious purposes.

https://www.cvedetails.com/vulnerability-list/vendor_id-4711...

Many of these vulnerabilities have to do with very important cryptographic code... If you're comfortable with it, that's fine, it's not a bad solution. But personally I'd honestly be more comfortable with plain text files and TrueCrypt, which has no real cryptographic problems even after quite heavy review, the best we've found is a privesc bug in the Windows driver.
I remember him from Brilliant.org, saw him solving problems there.
Google Play Music was great until I updated the hard drives and then OS on a few devices. Each thing counts towards the device limit of 10 and you can only delete 4 devices per year.
First, National Semiconductor buys Fairchild Semiconductor, then spits then out before they are acquired by TI, now On Semiconductor wants to work them over. These mergers and acquisitions tell me that the epoch of non-linear growth is over in the semiconductor industry.
Why refer to these as two separate languages? Right now, the vast majority of Python's most popular libraries and packages support both 2.7 and 3.4+ with a single code base. We are a Python shop, and we are doing the same with all our new projects as well. There's a little bit of extra awareness you have to have to do certain things (metaclasses, for instance), but the overhead is no more onerous than, say, following well-defined coding conventions.
Microsoft open-sources Visual Studio Code, launches dev essentials program
I heard that the attack was prepared in a flat in Paris, perhaps they should also ban flats. And cars. And clothes.
How can I pay you for this?

Note — I know many might disagree, because of very valid points, but for me personally, deployment is a nightmare. I really have no clue how that works. I didn't know SQLite3 (being file-based) needed special permissions on the .db file to be able to avoid an OSError, and the folder containing the file needed other permissions. The whole absolute-path-in-server-but-relative-will-work-locally, blah blah — This is really a irritating business for me.

Deployment ideally should be like —

$ sometool deploy myAwesomeApp

$ Enter <some-sort-of-username-for-server> — myServer

$ Enter <some-sort-of-password-or pem key location> — ••••••••••

$ Deploying...done!

$ Your app is live on YOUR-SERVER-IP

Too far off for many. Many might hate it, but trust me I personally know atleast 50 other developers who would benefit from a setup like this. Mostly people learning how to code, who just want to put their simple apps out there.
Nope, nobody contacts me personally through gmail. I kind of wish g+ had a similar stats tracker as youtube so I could check where all the traffic came from.
This is a weird story, since professional security people would have told you the same thing back in 2007.

Windows wasn't originally designed to be secure. Even NT, which is a serious multi-user kernel, was a product of 1990s C programming style. And while that's true of the Unices of the time as well, none of them had Microsoft's absurd user base, and so none of them had the same terrible malware incentives.

This all came to a head around 2001-2003, when the Internet worm phenomenon got so bad that Microsoft was routinely on the front page of CNN, and serious talk of congressional action began.

From what I understand, there was a dramatic top-down response, led by Gates and Ballmer, requiring software security training for developers, giving product managers the power to slip release dates to ensure bugs were caught, and funding what I believe is probably the largest 3rd-party software pentesting program in the industry. Several well-known software security firms (my old firm, Matasano, not really among them) were basically bootstrapped out of Microsoft contracts.

Today, Google probably does a better job on software security than Microsoft does, but it's hard to come up with another rival. Tellingly, Google's security efforts were also a top-down reaction to a major security incident.
The php part has almost no content. Im also concerned that the custom builds are not documented, its easy to build a dev env with half a dozen rpm files thrown in, but when it comes to getting all your custom extensions etc added thats a bit harder and we cannot judge that as of right now.
It's easy to port to python 3 but I think the holdup with some libraries is that they want to support both 2 and 3 with the same library so that devs who cannot upgrade the python on their system don't get left behind. Supporting both at the same time is possible but takes longer in most cases.
Wouldn't it have been easier to just fork Android and slap a Windows logo on it?

Like Amazon have done.
Any plans for front matter support?
> PasswordSafe has better looking cryptography, though still not up to where I'd like it to be as well as a worse UI, worse browser support, etc. And last I checked I think Linux support was sketchy.

PasswordSafe is, I think, the current best-of-breed with respect to its crypto. Like you, I have some concerns with it (notably the use of Twofish rather than AES, and a too-low PBKDF2 default), but it's the best you can get without writing your own.

It seemed to run ok in WINE last I tried it, and there're one or two native Linux programmes which can read & write its files.

These days I just use an org-mode file encrypted with gpg: emacs automatically prompts me for my password and decrypts it when I open it up.

> So I'm about to take KeePass, gut the crypto, replace it with simple scrypt and AES-OCB or chacha20-poly1305 and hope I can wind up with something I'm comfortable using - anyone have a better suggestion?

Replace the crypto and data model with a PasswordSafe 'v4' format: scrypt plus AES-GCM plus chacha20-poly1305.
When Software Eats Bio
Announcing .NET Core and ASP.NET 5 RC
Announcing the VS GDB Debugger extension
VSC has revolutionized how I code on Linux. Thank you, Microsoft!
https://github.com/burrows-labs/pz

68 loc
The traps and tricks are well known. With due diligence -- few if any.
Just invent shorthand syntax for XSLT, output your data for the template as XML and let the xlst transformer do the template instantiation for you.
It hasn't been 10 years. There were known IO performance regressions at the time 3.0 was released, nobody involved in releasing it would have said to use it in production right away. 3.1 was released ~6 years ago:

https://www.python.org/download/releases/3.1/

(Even if the above is deemed BS, the release of 3.0 was 7 years ago)

Many of the 3.0 features can be switched on in 2.7 and there were some attempts to automate as much of the code change as possible (but people ended up preferring to write code that runs on both 2.7 and 3.x, but I suppose that then is not really evidence of a fracture).
>I feel regret almost every single day and constantly feel 1 or 2 years behind the curve.

I'm not sure how old you are, but I'm guessing you're pretty young. The older you get the less a year or two matters matters.

By the time you're 30, no one (not even yourself) will notice that you are 2 years behind your peers (based on whatever metric you're using). In fact, the older you get, the harder it is to measure what being 2 years behind even means.

And, just think about the huge variations in life span. Say, for example, George finished college 2 years later than Bob. However, George lived to 90 and was able to do productive work right up to the end, and Bob died at 78. George had an entire extra decade, even though he had a slightly later start.
We, like otto, see the need for tools like these in today's development climate. While both tools are very similar and accomplish nearly the same thing, the main difference is under the hood:

1. Nanobox embraces Docker and the philosophy of containers. Every component and process of your app is housed inside of an isolated container. The VM only runs the Docker deamon and the Nanobox deamon. In contrast, otto leverages Docker, but is built more to conform to Hashicorp's existing toolset.

2. Extensibility in Nanobox is accomplished through engines, which are inspired by and very similar to Heroku buildpacks. As noted above, engines run inside of isolated containers inside the VM. Otto's extensibility is accomplished through Go plugins that run on the host machine.

3. Nanobox caters to the dev workflow. We'll automatically suspend and save the VM state when it's not in use. Nanobox doesn't require the VM to always be running.
One point that isn't directly mentioned is that he was able to turn the 'wobbling plate equations' into a Nobel Prize because he had such a wide breadth of knowledge to draw from, and probably had a habit of drawing parallels between what he's doing and other things within that breadth of knowledge.

He wouldn't have even thought to make the parallel between the wobble and how electron orbits move in relativity if he didn't already have a good understanding of electron orbits, and it wouldn't lead to the Dirac Equation in electrodynamics without him being familiar with that, then quantum electrodynamics without being familiar with that.

So yes, while play and working on things 'with no importance' can lead to great discoveries, or something of importance later, you need to have that background of knowledge and the habit of connecting two disparate concepts together or else it will always remain something 'with no importance'.
Thanks for the share. Relevant given politicians are currently, and predictably using the recent news to push through various snoopers charters.

Has nobody told them that in reality, the problem is not encryption. Its poor foreign policy as well as poor international relations.

Thats my two cents for what its worth. Im no expert on foreign policy though although I do understand that the clear agenda in it is peace.
Visual Studio Code Is Now Open Source on GitHub
The Fetch backend works pretty much like a crawler, what Google sees, it sees...private content is not indexed, e.g. your gmail mails, but the titles are indexed so there is still some usefulness in the search. We may add functionality for the user to sign in to these services so we can index them. E.g. the user may add his google account ao we can index mails etc. Would love to hear your thoughts on this.
Ha, I've never seen that BSOD clip before. They handled it really well.
Visual Studio Code Is Now Open-Source
https://www.youtube.com/watch?v=nUCwCgthp_E

So many coincidences.
I think Schneier's (and my) mistake was assuming people know to value their passwords. It's getting bad when the Head of IT, however, is one of those sticking the password to his desk :(
> you get the occasional Ted Kaczynski

Occasional? Ted was one of a kind. And apparently, you don't "get" someone like him. Allegedly, rather, you "make" that kind of person through government sponsored psychological torture experiments. http://www.theatlantic.com/magazine/archive/2000/06/harvard-...
TensorFlow?
There's currently only one php engine, other than the generic php engine, listed on https://engines.nanobox.io/languages/php. However if you look at the generic php engine docs, there's a lot of content: https://engines.nanobox.io/releases/3b30f069-bb16-4f1a-9c36-.... And even more in the Advance config options included in the nanobox-engine-php repo: https://github.com/nanobox-io/nanobox-engine-php/blob/master...
I really think that if folks had a better understanding of what happens in cremation, embalmed entombment and unembalmed burial that we would see a massive societal shift towards unembalmed burial.

Cremation, in particular, is a nasty bit of business. Those 'ashes' aren't actually ashes: they're bone meal.

The morticians I know would never be cremated, nor wish their loved ones to be (I don't know all the morticians in the world, of course: no doubt there are many who would be fine with it).
I develop in OSX, Vagrant is entirely too much overhead and hurts more than it helps. It's less work to make the app work cross-platform than to have to deal with the slowdown and the added tool complexity.
> NOAA provided Rep. Smith with all the data, methods, and explanation he requested but has refused to hand over the communications of its scientists, which it regards as protected.

I'd better hope so.
http://www.urbandictionary.com/define.php?term=all%20hat%2C%...

So if you're a rocket company and don't make your own engines you're not really a rocket company, you're just talk.
> GPL ... it's a bare copyright license, not a contract

Yes, the GPL is a licence... for redistribution. As buyer of a product containing code licensed under the GPL, the GPL is not involved, though there is a recursive offer of a license should I want to redistribute the code. I can ignore the offer of redistribution license and use product any way I want (provided I do not copy it). This is even stated in the GPL itself (GPLv3, section 9).

> Licensor has the legal right to prevent you from taking Action A, e.g., under the copyright laws.

That's entirely my point - I am not making copies by using the software. I'm not even making copies reselling my copy (provided I actually actually transfer the work; keeping a "backup" would be a violation). I have zero need for a license.

Conflating use with redistribution has been a popular scam in recent years, in an effort to apply copyright enforcement tools to mere use. While software companies would like to control how their product is merely used, their rights end at the first sale.

> copyright license, not a contract

Yes, I'm very familiar with the difference.

> unilateral contract ... browser-wrap

Sure, provided all the elements are there. I have nothing against actual contracts. These are not involved when I walk into a shop and buy a widget with firmware in it. The only transaction is: pay cash, receive widget.

Some software is sold under a proper contract, of course. Most things with software in them (and a lot of software) are sold plainly as a simple exchange.

> That's not a universally-held view in the courts

Key phases in my post: "post-purchase", "inside-the-shrinkwrap". Throwing legal papers at someone after consideration has already been exchanged is at best a new offer, which the customer has no obligation to accept.

Yes, there have been a few badly argued cases on this topic. Contracts are not supposed to be a "gotcha"/surprise; a "meeting of the minds" (mutual agr4eement) is a requir4ed element. Therefor, I find it hard to believe that, in the long run, undermine hundreds of years of contract law by allowing extra obligations only seen post-purchase.
I read both. I wish the article you linked to had more substance. It provides no argument that ISIS is misinterpreting Islam, only assertions. If someone has an article that actually makes that case, citing texts and explaining the misinterpretation, I'd like to read it.
We ported a major production site from python 2 to 3 a year ago. Exactly one bug has come up - something to do with unicode encoding on a relatively minor part of the site. Thanks to 2to3, the concerns for bugs coming up in porting are way overblown.
Show HN: Interviews can be stressful – give take-home projects instead
Until they ship something, that promise is completely useless for users of those platforms.
IP can be (cross) licensed, for instance on a world wide non exclusive basis. To do a proper legal job of creating a license, you need to get lawyer(s) involved. At that point things tend to get (even more) adversarial and expensive. :-/
I'm curious. What are the sketchy parts about KeePass's cryptography?
This article seems to say that ISIS' violence against civilians and other Muslims has its roots in a 13th century interpretation of Islamic warfare, but that's obviously not true. One example is that Mohammed killed the jews in Medina after they had peacefully surrendered. Another is that the Muslim expansion before the that time was accompanied by plenty of violence.
Possible, but it's a usual Microsoft tactics to announce a product years in advance and never deliver (vamporware).
corporate shill /s
It takes about as much energy to get into orbit as it does to fly from NY to Japan. So, regular trips to the moon could end up fairly cheap even with chemical rocks.
"Still, episodes of online hacking have become even more startling, including the theft of personal data from millions of Target customers and terabytes of private emails from Sony Pictures Entertainment (and both companies use some Microsoft products)."

So somewhere in Sony and Target's organisations there are one or more Windows computers?

This is just lazy reporting NYT. Do better.