skysight-inc/HackerNews huggingface dataset:
http://lcamtuf.coredump.cx/oldtcp/tcpseq.html

> However, guessing the right ISN from the entire 32-bit space (4,294,967,296 possibilities) is not feasible due to the excessive amount of bandwidth and time required. That is why a good TCP sequence number generator implementation currently provides enough security to protect against spoofing attacks, at least for the present time and in typical conditions. But increasing bandwidth and processor speed will eventually make brute force guessing of 32-bit ISNs feasible for the average attacker.

See also
http://www.jakoblell.com/blog/2013/08/13/quick-blind-tcp-con...
The mass and stopping distance of trains is what dictates the length of the space, so we are already operating at the 'same safety levels that we accept for road traffic'.

It's all based on the friction between the vehicle and the surface, in road vehicles that's typically asphalt and rubber and stopping distances are relatively short because of reduced mass. In trains the materials are steel and slightly harder steel and stopping distances are much larger, especially when the rails are wet.

A loaded freight train running 55 Mph will take more than a mile to come to a full stop. A passenger train doing 100 Mph takes 750 meters to stop with emergency brakes applied. This will lead to lots of people being wounded due the fact that trains don't normally have seatbelts, unsecured overhead luggage and people standing if the train is relatively full.

Trains also can't evade, they're tied to the rails.
"[star] matches zero or more occurrences of the previous character"

…those aren't regular expressions. Those are fancy globs. Regular expressions have a formal definition that is strictly more expressive than that.

They mention they use recursion (which you can use to actually implement regular expressions, albeit poorly) but…

…they use the recursion as a way of implementing a state machine in C? You can get away with this (and it's somewhat common) in a language like Lisp or ML that guarantees tail-call optimization, but this is poor form at best in C, where some compilers are unable to optimize tail calls, and you will blow your stack with long-lived state machines. Code recursion is really only appropriate when your data structures are recursive.

This is poor pedagogy. Students internalize stuff; you can't present them incorrect definitions and poor coding practices. C'mon guys, can't I expect better from the inventors of C and Unix??
Just remember that each arrow that crosses team boundaries on those graphs costs a lot. Usually the cost is on the side of the team on receiving end.
They'll be happy to help you out. Get ahold of their repair department and if they need to it'll get back to the quality department for the special request. They love that stuff.
Because you lose a tremendous amount of leverage in negotiating that way. 99% of the time, no matter how much you emphasize "at least", we salary talks start the HR person's first line is that they're offering you what your minimum was. You will counter with something higher and I promise you the response will be "Oh but we understood you would be okay with this amount I offered." You are starting out at the bare minimum. It's a terrible idea.
It's your wake up time that is the mots important : you should wake up at the same time every day, including week ends, no matter what.

Napping can help compensate a shorter night.
I kinda figured this out in high school. I slept irregular hours throughout the week, in bed around 10:00 PM weeknights, but staying up until 1:00 - 2:00 AM on weekends and sleeping until 9:00 - 10:00. I had headaches 2-3 days week.

Then I got a job that required a 7:00 AM start on the weekends, and the late nights stopped. So did the headaches.
There are a few (at least in the "whatnot" category), but they think bigger than 1000-person towns, and it's often unpopular with the public: http://foreignpolicy.com/2014/09/01/under-new-management/.
The Most Intrusive Black Friday Email Campaign
Duolingo does this to teach you languages.
AR works nicely for simple basic queries but everything more advanced should be done with custom queries. That helps a lot :)
I was a TA for classes using this material. We(the TAs) sometimes come up with problems to be incorporated in it. The lecture notes are superb, I often refer people to them because it's freely available.

The hw is basically"given you've learned this, can you apply them?" I found many students like this style of problems.

I personally prefer the homework problems of Sariel har-Peled(who teaches in the same university, and I'm TAing for) http://sarielhp.org/teach/
His hw problems guides one to figure out important materials that's not covered in class by breaking it down to small steps. (Say, a hw problem that introduces parametric search)
I definitely recommend solve some sariel style problems once one mastered the basic material.
Perhaps what's new is that it is so easily exploitable?

I remember when 32 bits seemed huuuge, and now … not so much.
Share end-to-end encrypted files in your browser using Dropbox and WebCrypto
Agreed. It is often true that different parts of a problem are best solved in different languages. That's one reason we built Beaker and released it as open source: http://BeakerNotebook.com. Its polyglot architecture and autotranslation makes working with multiple languages easy.
Well maybe i'm transmitting my memory dump or generating random traffic / sprouting entropy. Or everything is transmitted with mime types? Even so it makes no sense as even the most basic steganography would provide plausible deniability. I mean encrypted data is indistinguishable from noise...
It's not the same level. You're quite right that stopping distances are longer but we don't require road traffic to be its full stopping distance apart (you have to be much much closer before you'll get stopped for tailgating), and we do see much higher accident rates for buses and other road traffic than for trains as a result.
Being able to adapt dynamically to schema changes would be great. If you do develop a solution for that, please do publicize it. Simple uses segment.com for some communication of analytics info to third parties, and Segment folks have built some capabilities to infer schemas from incoming messages which they then apply to history tables in Redshift. We're hoping to learn more from Segment about how they make that happen.

What you described with documentation efforts is kind of scenario I fear. We could spend significant effort putting together a documentation system that simply doesn't meet a real need. It's good to know other folks are also struggling with that, though.
You picked a bad example. Yes, you need to purchase Logix X for 199, but you probably won't need to pay for any Logic updates in the foreseeable future. While the lack of update pricing is a problem for many developers, it's also a feature of Apple's software. They usually simply don't do priced updates. As far as I remember the upgrade from Logic 9 to X was free on the App Store.

Furthermore the full price of 199 could very well be mistaken for an upgrade offer - it's a very reasonable price.
To be fair, don't just down vote the parent comment because your don't like someone bashing php; it's a pretty reasonable question to ask.

Most people don't actually know that php powers such a large portion of the internet, because globally there's waning interest in php (http://www.tiobe.com/index.php/content/paperinfo/tpci/PHP.ht...) and it's generally dreaded by developers (http://stackoverflow.com/research/developer-survey-2015#tech...).

In all seriousness, why would you get into php at this point?

Do you want to go and work for Wordpress.com? (I mean, heck, they're building node sites now (https://developer.wordpress.com/2015/11/23/the-story-behind-...).

Are there really that many php jobs floating around?

I'm certainly not seeing it.

There are a tonne of 1-click-wordpress-for-$10 companies out there, making $10 websites using it... sure, and certainly, plenty of people use it as a blog; but is there really a professional path for a php developer?

There's no where near the interest in it that there is in engineers using say, java or C#, or heck, even javascript.

I mean, I'm totally down with looking up composer and php classes if you're curious to see what 'modern' php is like, but I certainly couldn't come up with a good reason to do it other than curiosity.
on the other hand your reply deeply reflects on the common (lack) of knowledge of government types - i could bet they think the same :)
> Did something happen?

This happened:
https://twitter.com/hypothes_is/status/671684236869414914
Plugs in your ears and or thick isolations on your bedroom walls should help.
AT&T Developer Summit Hosts Biggest Hackathon Yet
> There is clearly something interesting happening in the data - it's very far from what you'd get by random chance. That seems to be worth studying, yet no one seems to be doing it.

I think there are fairly straightforward explanations, simply deducing from books I've read about urban crime... Most crime is intra-racial because it occurs between people who know each other or live near each other and tends to be concentrated in areas of poverty which tend to be demographically homogeneous. Overall, blacks commit crimes at higher rates than whites, which partially correlates with higher poverty rates, but it's not distributed equally because it's also highly concentrated among small numbers of urban street gangs/groups who commit enormous amounts of crime (of which there's no poor white rural counterpart). These groups are mostly surrounded by blacks, so most of their victims will be black, but there are enough whites near them that the whites who are victims of these groups contribute to the black-on-white numbers being higher. Part of the irrationality and bigotry comes from interpreting these numbers as some kind of targeting going on specifically to whites because there's no reverse equivalent instead of understanding that it actually comes from an urban dynamic that overall causes black victims to suffer even more than whites.
Show HN: HitByWords v1.4 – News browsing with real-time Google Trends search
You love continuing to bring up the Java like example, this discussion however is about PHP. PHP will never have namespacing nested like that in the base language, so no point beating that dead horse.

> why is that bad for language wide utility functions?

There's a handful of reasons, but one important one is backwards compatibility with existing codebases (naming collisions).
It won't be $1, but once every year or so I routinely take a handful of items down to a local cleaner to fix/replace zippers, repair a split seam etc. The cost tends toward $5 or so per item. (More for things like zippers.) It's certainly economical if the clothing is otherwise in decent shape. Doing a button myself takes a few minutes--however long I procrastinate about it :-)

I agree the overall economics of having clothing repaired isn't as attractive as it was 20 years ago. But it can still work--especially for more utilitarian and better-made gear.
Upward firing weapons were actually used in a number of fighters - originally in WW1 for attacking zeppelins:

https://en.wikipedia.org/wiki/Schr%C3%A4ge_Musik
Show HN: AI Personal Assistant
It's also just about long enough to become annoyingly cocky about quickly one is picking up a new skill.
Peloton Raises $75M from Serial Fitness Backer Catterton
No it's not, the author "failed" to mention that the vast majority of networks drop spoofed packets. It may be exploitable inside a target network, locally, but one usually has a lot better options if he has a foothold there, than bruteforcing sequence numbers with gigabytes of traffic for a single connection.

It's dumb is what it is.
#WhatsApp code decompilation shows that they target all domains with “telegram”
I had an LL Bean catalog delivered to me the other day. Almost everything I saw in it was exactly the same designs as twenty years ago - although I will admit I didn't peruse the women's apparel sections that closely. It may not be your fashion cup of tea, but the stuff tends to last forever and a day.

I believe that they still honor their lifetime warranty, either repairing or replacing anything that you buy from them. To the point that it is worthwhile to buy thread-bare LL Bean clothes at yard-sales and thriftshops if you can get a deal.

Do people really darn socks still? Cotton socks are so cheap that I almost don't want to bother washing them, let alone repair them.
Introducing Volupedia: Wikipedia, Powered by Sketchfab
Totally agree - without strong controls (internal or enforced by an external party), there definitely is a large risk of fraud.
Remember that the war was basically over at that point, and they were fighting against an enemy starved of resources and experienced manpower, particularly pilots (cf. kamikaze tactics).

The "79 fighter planes" claim doesn't pass the sniff test to me either. Remember that two months after this, the Japanese didn't even bother sending fighters to even try to intercept the planes that bombed Hiroshima (for example).

I'm not saying that the claim is definitely false, but I wouldn't take anything written in the press during the actual war at face value.
I don't think probing the whole ISN space is new, but that's not how the tool Mitnick was given worked. At the time of the Mitnick attack, TCP ISNs were trivially predictable; you could connect to a host, note its ISN, and then know within a very tight range what the next ISN on the next connection --- from any host --- would be.
The Definitive Guide to Ruby Heap Dumps, Part I
Have been waiting for this anxiously. I've been running a few test builds on it occasionally, but its nice to have the guarantee to shift prod systems to it.

New Features list is at https://secure.php.net/manual/en/migration70.new-features.ph...

My favorite is scalar typehinting by far.
The sequence number prediction specifics are different, but the attack is the same, blind TCP spoofing.
When and where did you go to school? That seems like an exception rather than a rule.
Priscilla Chan and Mark Zuckerberg's 99% pledge is born with strings attached
There's also the Emacs stack exchange^1. It's good if you have specific problems (this setting does X, I expected Y, what's up?), but not too much for advice (what do you prefer for task Z?)

[1] http://emacs.stackexchange.com/
This is interesting. You feel gravity less when you are in fluids. Does this mean all babies feel gravity differently because we all experience different amounts of fluid in the womb (not to mention the variations in baby sizes)? The impact is probably miniscule but I wonder if it has any effect on development of babies in the womb.
You get that for an awful lot of chips or software which are thought to have "dual use" to aid inadequately defined nefarious things.

On most orders for electronics parts, even if it's European distributors shipping to me, in Europe, I'll have to click some boilerplate where I assert to not make the chips available to terrorists on the Denied Persons List of the US department of commerce, which is conveniently available in ASCII...

https://www.bis.doc.gov/dpl/dpl.txt
Finnish Emoji Advent Calendar
The "edge" as in "napkin weapons that would've never have been able to have been deployed and worked, effectively"
Why would a company like GitHub choose Ubuntu over Debian? The LTS policy?
I think it depends on how you read the article. The most charitable reading is that the authors couldn't find a source for probing the whole ISN space, and believe that variant of the attack is novel. I think you have to be a bit uncharitable to assume they're claiming the whole concept of blind TCP spoofing.
[POD] Mynewsdesk’s Jonathan Bean on the art and science of growth
There are several points where he won't mention the language. Which languages do you think he meant?
Urge him to switch to a sane language instead. You are doing no one a service by advising them how to make using PHP suck less.
Occupy WWW Street, Internet Activism and Media in the Age of Social Justice
New high speed railways in Germany are built only for 250km/h: https://en.wikipedia.org/wiki/Wendlingen%E2%80%93Ulm_high-sp...
Just because a lot of sites run it doesn't mean it's not crap. A lot of companies still host stuff on Windows like it's still 2002, as well.

PHP has no place in modern development.
To be honest sounds more like you're talking about agile people. Move fast and break things doesn't work in any of those scenarios, I've seen a lot of people during my engineering days who just wouldn't work under the pressures required to design a system with extremely high reliability.

It goes back to hiring the right people, not to the people themselves :)
> PHP is the only lasting language where making code that allows SQL injection is easier than code that forbids it.

Pretty sure this is true for any language, the key difference is education. When learning JDBC for example, you're taught to use prepared statements with params vs. string concatenation.
https://en.wikipedia.org/wiki/Jigokudani_Monkey_Park
The issue is that the line between simple and advanced is blurry, especially for an inexperienced developer.

Maybe someday we (Royal we of all software engineers who build tools other engineers use) will learn there's a limit to abstraction layers applicability and put hard breaks into the code when that happens.

I guess one shouldn't complain, the more tools allow developers to shoot themselves in the foot and not feel the pain until the leg needs to be cut off, the more variety of positions that will be open for engineers who've been there done that.
Depends on the climate. In some climates you really really want to be up at sunrise so you can do stuff before it becomes too hot. But then again, the night is long when you don't have artificial light.
Legal moves to force Facebook to stop sending data to US
> The insight is that there Needs To Be A Central, Browsable Repository of What Pages Have this Meta Content.

Are you able to give further examples of projects like Hypothesis failing? I’m not sure I’m quite ready to conclude this _can’t_ work without a centralized interface.

In any case, though, it would probably be straightforward to add a centralised top stories page while keeping comments inline.
How old are you, if I may ask?
Agree, then again there are different types of people.

Some wants to learn from bottom up(analytic approach), others want to see cool stuff then tweak, modify, replace to find the limits (holistic approach).

IIRC there is a tendency that young people prefer the holistic approach while teachers either are selected for or grow into preferring the analytical approach.
A question on Twitter (https://twitter.com/sayhar/status/671867539480305664) asked about how Simple decided to do ETL in Redshift.

I think the main benefit is flexibility. Since transformations are happening in the same system where the data already lives, there's no I/O overhead and the performance is pretty fast. Our full suite of nightly ETL jobs runs in about 2 hours, and that's without any effort to run jobs in parallel. There's also minimal schema maintenance involved; the nightly jobs completely drop the existing tables, and in most cases the table creation is handled automatically as part of a CREATE TABLE AS statement. That means we're pretty free to add, drop, or rename columns without needing to worry about migrations or keeping the schema in sync with what some external tool is doing.

That said, no one on our team has deep familiarity with ETL tools, so there may be other good options that we simply haven't investigated.
Man charged with felony for passing out jury rights flier in front of courthouse
I think I had your problem as well. my solution was physical exercise,a more intense social life, fixed sleeping times and no caffeine.

It improved it quite a lot, hih
Yawn, another language-specific package manager.

If only there was something like a universal package manager, that provides a generic but powerful package-management platform. Something where package specifications look just like expressions in a purely-functional programming language, and the package manager implicitly understands the complete dependency graph, including all inputs to all build actions.

Something like Nix.
I interview a lot of php-devs, and a very large proportion of PHP shops are still on 5.4 or earlier (which is all EOL). Very often they are not at all aware of the new features in 5.5 and later.

CodeIgniter is still popular and a lot of developers have no clue about namespaces and composer usage. It will really take a _long while_ before php7 becomes commonplace.
I think it's the overuse of gradient. Shadow, etc. gradients make everything look poorly made.
I posted a 9 second video of me pushing a coke can over a table making a sound that's similar to Chewbacca (https://youtu.be/myhYNsRXYgs) a few days ago. So far it's been seen 750.000 times on youtube and about 3.000.000 times on facebook. This is about 416 days worth of people watching this video (wasting time).

However, I think it is the wrong perspective to take. People do all sorts of "seemingly" non-productive things (including but not limited to watching stupid youtube videos)... all the time. But I think these activities might have important and positive social properties (people bonding over the video, having a laugh). There are possibly even some positive psychological effects (such as stress relief). Well, that's just my thoughts on the matter. :)

But of course I'm not a psychologist, and I don't know if this is the case in reality. But it is certainly an interesting topic to explore.
Elasticsearch and Kibana for Selenium Automation: Real-Time Reporting
I too would be interested in the answer. From my perspective, Debian is the server Linux distro par excellence, and in my experience the folks who choose Ubuntu have been devs who don't actually use Linux (e.g., the sorts who develop on a Mac or in a VM rather than on a personal Linux system). It's not really fair to Ubuntu, which is decent enough in its own way, but I tend to consider the choice of Ubuntu to be a bit of an architecture smell.

I'm honestly interested in what the valid reasons to prefer Ubuntu over Debian (particularly on the server side) are.
Young people who question Government or media may be extremists, officials say
There's two situations in which you can receive gov't subsidies:

1. Foreigners married to Koreans (multicultural families; 다문화가족), or
2. Low-income/asset families

I'm not sure which applies to my family. Either could be as we are #1 but sorta #2 as well since I'm not employed nor maintain perm. resident visa status in Korea so my income doesn't really count.

I would encourage the people you know to look into it if they're multicultural families.

http://southkorea.angloinfo.com/family/toddlers/childcare/
> PDO is awesome but requires deeper level of understanding (for a beginner), which may increase the frustration and may end up returning back to the mysql_query and co.

Yeah, that's basically why I wrote EasyDB. https://github.com/paragonie/easydb

$rows = $db->run('SELECT * FROM comments WHERE blogpostid = ? ORDER BY created ASC', $_GET['blogpostid']);
foreach ($rows as $row) {
// etc
}

Teach people to do things this way rather than concatenate strings, say goodbye to SQL injection vulnerabilities.
I would cut them a lot more slack if they mentioned that their method doesn't work in the vast majority of networks today (assuming one wants to cross networks with it), due to egress filtering. If one is already present locally, and can send spoofed packets, there are far better attacks to try than sending tens to hundreds of gigabytes of data for a single spoofed connection (that will be immediately terminated).

Their method doesn't even attempt to keep the connection going.

Anyone with network experience would see the bruteforcing method as elementary and common knowledge really, it's nothing new.

In short, amateur hour.