skysight-inc/HackerNews huggingface dataset:
you need as many functional implementations of TLS as you can get. written by people with pedigree. you need them to cross-polinate and find bugs in each other. Go's TLS stack for example is used to test the TLS implementation is BoringSSL: https://www.imperialviolet.org/2015/10/17/boringssl.html

Go's crypto wasn't rolled out by amateurs.
"It would be a much better design if it worked the other way around: Aggregate recent security patches into a database and send those to the servers, and have them do a local compare of vulnerabilities. You could charge for the database access and still keep your business model."

There is definitely value in having an aggregate database with recent security information. We agree that there are certain customers who would prefer / require an on-premise solution. Selling database access is something that we have considered, but haven't looked into deeply.

There is no restriction that the data must come from your local machine. You can integrate with our API to create a machine that has ``all'' packages for Ubuntu version X. We will then notify you when packages are outdated and you can act on that locally. Granted this still leaks the version of Ubuntu you are running, but we will have no insight into what each of your machines are actually running.

Thanks for raising these concerns.
Yup, because the math (ironically, the part most people find most difficult about the series) doesn't change. Algorithmic complexity, number theory, set theory. These are things that show up again and again in "higher level" concepts.

These are computer science books, not software engineering books.
How does that square? I mean, I have one copy of a shared library on any of my machines. I don't even necessarily know off the top of my head what of the Go tools my developers found bloggable enough to want in the stack that might be impacted by this bug. (Or rather, I do, but that's because it's my job, and I'm actually good at my job. I don't have the same high hopes with regards to most other infrastructure folks I've worked with.)
Australia has managed to avoid recession so far. I know that's only technically true, but that's the best kind of true. (We had a lot of defense spending in one quarter that pushed us over the line between contracting/expanding.) It'll be interesting to see how Q1 2016 goes. Even if it is a recession, it's not a normal one, since unemployment is going down.
CoinDesk Gets Acquired by Digital Currency Group for $500k-600k
Nuclide's new 'Unified Package' release
Something like beanstalk is a great example because it's basically a canned configuration for other AWS services meaning you can graduate to fully custom virtual infrastructure with far less hassle. That's tough for other services to compete with.
Hmm... I've only ever heard about the reward checks for finding errors in the books. https://en.wikipedia.org/wiki/Knuth_reward_check
The Xiaomi Yi also has some community and collections of simple startup scripts to modify the camera's capabilities simply by placing a file on the MicroSD card. For example: shooting 1600x1200(4:3) video, or adjusting noise reduction etc..

https://github.com/PJanisio/Xiaomi_Yi_autoexec

https://dashcamtalk.com/forum/forums/yi-action-camera.153/

http://fpvlab.com/forums/showthread.php?45118-Xiaomi-Yi-Enha...
What if someone said: "In English, 'experts exchange' sounds noticeably different from 'expert sexchange'; therefore, no one would ridicule expertsexchange.com for its similarity to the latter."
We're talking about a scenario that involves buying all tickets when the odds are favorable for a greater return than investment in to lotto tickets.

So no, the people playing this game would not have a firm grasp on statistics; they'd most likely have a very strong one.
Scary enough to have redundancy?

edit: I'm talking about redundant systems. A wood fireplace, for example.

You should have a backup of any form of technology you rely on to maintain your life. We regularly do it with far less critical applications.
I've also been told by people I know About Nests crashing and turning off. [edit: yes, anecdotal but it's not an unknown event] This is completely unacceptable in a Northern climate. No, it's not the only failure mode for a heating system but I have zero interest in adding another point of failure for the sake of having a cool device. Frozen pipes is a serious business.
There's a confirmation bias in that kind of logic, since people who start out poor and work their way into the middle class (or higher) don't "count" any more.
Good grief what a terrible policy!
Interesting. What did you think of them? ive always wanted to visit that part of the world
Can you point to a resource that explains what a carry propagation bug means? I am having a hard time searching for an explanation, especially in the context of how it can cause security issues.
Another one that's sort of touched on is websites which change the scroll rate. For some reason, designers think it's their job to adjust how much the page scrolls for any given spin of the scroll wheel on my mouse.

Just leave it be, please!
"It also happened recently with Fitbit, the maker of wearable activity trackers. The company was hit with a class-action lawsuit in San Francisco asserting that the wristbands failed to “consistently and accurately record wearers’ heart rates,” which is vital for those with certain medical conditions."

Apropos of anything else - I don't think Fitbit has ever tried to market itself as a medical device.
Al Jazeera in general and its US arm in particular were always more of an instrument of foreign policy for Qatar than a money-making endeavor. I covered the channel as a journalist at a competing news organization, and spoke with dozens of journalists on the inside of AJ.

My guess is that Qatar decided they didn't want to waste quite as much money and time trying to sway public opinion in the US. The Arabic version of AJ has always been much more important. Pure speculation, but the cuts may be due to the plunging price of oil, which in turn is affected by the slump of the Chinese economy.
Can you have redundant thermostats? Though I'd note that traditional thermostats and even simple programmable ones are very reliable.
Think about what you just said. Redundancy for a thermostat. You know, that thing that before the Nest you never even had to think about.
Bear in mind that this was written in 1981, at the beginning of a decade that saw enormous progress for Pascal, rendering most of "some guy"'s objections invalid. ANSI C only happened towards the end of that decade.

I think when an essay from 20 (or 35) years ago claiming "X sucks" is referenced, it's kinda foolish not to draw attention to the history that followed.
Oddly, neither the anonymous hacker(adjective not group), nor a high ranking gov't intelligience officer were available to comment on this twitter picture we found on facebook after it had trickled down from 4chan to reddit.
What? I don’t just encrypt my desktop, I encrypt all the servers too, for the same reason.
And to close the citation loop: https://twitter.com/internetofshit is fun for people who want to roll their eyes at misbehaving smart devices.
Powerball tickets are going for $3 each in China
WiFi not working at all is a different matter, but not working with a specific wireless card is a quirk.

Mini PCI Express is a standard (as was Mini PCI before it). Swapping out a laptop wireless card you don't like isn't that hard. I've done it several times (to get dual band support, for better Linux drivers, etc).

Spending around $100 (including installation if you don't want to do it yourself) may be annoying, but it shouldn't be a deal breaker.
The solution is contained in the post. I can't find a problem with it. It was you who were suggesting this is a naive analysis.

Equilibria just seem to me to be the wrong tool for the job, you have to (as you have) invent a related infinite game with additional axioms and expectations before that kind of analysis kicks in.

Check your responses. If you can't describe what you're trying to say without mentioning anyone 'changing' their strategy, or assuming that a strategy is default, then you've got the wrong framework, I'd suggest (modulo my admitted lack of specific expertise).
I'm consistently amazed that Google doesn't do this already.
An hour or two of reading is too short to draw any conclusions here. Choose something in the books that looks interesting to you (not necessarily in the earlier chapters) then spend a week or two working through it, and _then_ decide if it is worth it or not.

I suspect that for most of us TAOCP is a rich red wine that we would sip from occasionally to get that feeling of "aha, so that's what red wine should taste like!"
Free the Cube
Even with a Universal Deal, Does SoundCloud Have a Future?
I tried to put my original thermostat on top of my Nest but it doesn't fit. Do you have any tips?
Amazon has had a litany of labor issues and complaints related to conditions at its warehouses. One temporary worker was crushed to death in late 2013 after getting stuck between a conveyor system while sorting packages in Avenel, New Jersey.

Lest we forget: that would be 57 year old father of 4, grandfather of 7 Ronald Smith, of Irvington, NJ:

http://www.nj.com/middlesex/index.ssf/2013/12/worker_crushed...

In which context the %7,000 "slap" issued to Amazon for continued violations at the same facility is nothing short of laughable.
I have read much of it. It's a project I started in my late teens, and have revisited many times over the subsequent twenty years. I have done many of the (simpler) exercises, and I have even sent in a letter detailing a small error in the text, yielding me a minor check (not to be confused with the major check) from the Bank of San Serriffe. I also got a response from Don Knuth, who corrected my letter inline in pencil. Both an awe-inspiring and humbling experience.

Should you read the series? Well, that's largely up to you. There are other books that cover subsets of the material, and many books that cover algorithms not in Knuth's text. However, there are such amazing gems of knowledge in this work that it would be a shame to miss out. I'm sure that many people keep this set on their shelves for some sort of bragging rights, but I often leaf through sections for both inspiration and for entertainment.

You don't _need_ to read TAoCP, but it is a refreshing read. To get the most out of the text, you will need to have a pretty good understanding of mathematics, and you will need to be willing to work out the things he describes on your own. It's not a passive reading experience, like reading most fluffy books found in the "computers" section of the average bookstore or library. It is an active experience, like reading a mathematics textbook. There will be parts that challenge your conceptions, and there will be parts that will take several attempts to fully understand. Then come the exercises, some of which are still open problems in Computer Science.

It is a worthy endeavor. I recommend it.
Why nobody extends excellent platform like LuaJIT, it has all the qualities to becomes an "Uber" dynamic language platform.

LuaJIT platforms like luvIT[1] with proper VM management/diagnostics APIs will make it compelling solution for backend middlewares and IoT boards.

[1] https://luvit.io
happened to me too. I thought it was a problem with the heating system itself (why wouldn't the nest be getting a charge?) but now it all makes sense.
While it is indeed free, it comes with online activation and needs to be tied to a Live account (or whatever it's called these days) after the first 30 days. This is a pretty stupid decision IMO, as I discovered a few weeks back on a non-internet-connected dev server.

And I say that as a longtime VS fan and advocate!

(Of course, I guess JetBrains products would suffer exactly the same problem now with the new SaaS model - I just needed a rant about this particular issue.)
> Lastly, do everything you can to limit their distractions. Instruct coworkers in non-technical disciplines to direct all questions to you, be the development team's "shield" against pesky interruptions. Managers who have done this for me have won my respect much quicker than those who have not.

Maybe the definition of tech/team lead is different from company to company, but where I work, I still have an engineering manager that takes care of the personnel issues and pesky questions from project managers and other non-technicals for me. The role of a tech/team lead for us is a developer that removes the technical roadblocks, spearheads new ideas/projects and acts as developmental resource for the team. It's sort of a symbiotic relationship--I keep the technical aspects of managing the team off the engineering manager and he keeps the stuff I rather not deal with off of me and the team.

I agree about shielding your team though, but more on a technical aspect. Taking on the tasks no one else wants to do and making the tasks everyone has to do more efficient. Also, being the advocate for your team when the company is making major changes that will affect them. I do write code, but it's not as much as everyone else.
AJ+ (their social media offspring) is pretty well disguised. I always like to watch their video news items from their Facebook page (https://www.facebook.com/ajplusenglish) but it took me a while (months) to figure out that AJ stood for Al Jazeera.
I am an academic, so slightly offtopic from the original post, but still may be relevant. I think TAOCP is probably not worth reading cover to cover for even academics let alone practical programmers, but definitely having it by your side for reference.

The important thing that distinguishes the book is this: the attention to detail. Knuth is one who famously shuns email to "get to the bottom of things", rather than stay "on top of things".

I am trying to get into an area called pseudorandomness, and Knuth vol 2. 3rd edition has an excellent treatment of the subject in all its incarnations. The details that are in the book beat even the original research articles where the results first came in. So I refer to Knuth first to see if it is there, and then go to the research articles!

Bottom Line: To get the details correct, trust Knuth, rather than a random blog article on the web on the same topic.
I wonder how accurate this is. I had assumed making a balance spring precise enough to be reasonably reliable was extremely difficult. Being made of a plastic like substance that can only be accurate down to a visibly low resolution, I would guess it's not very accurate. Sort of a moot point considering the main spring only lasts 30 minutes.
The thermostat at my place works great. That wasn't enough to keep the heater from breaking for about a week around Thanksgiving.
This thing needs a fucking threshold mechanic. I just signed up and it sent 3 refund requests all for around 50 cents. That's just embarrassing. I contemplated cancelling my account before I realized the damage (the emails) had already been done. If it does this again before a threshold mechanic is implemented, I'll be definitely closing my account.
Possibly a really big utilitarian van with a super expensive diesel, like a Mercedes Sprinter? (but ooooh that headroom)
Al Jazeera tended to be more or less balanced when it came to western news, however, the propaganda was clear when it came to middle eastern/ Israel issues. It was in my opinion no different from how RT(Russian today) operates. AJ is still quite popular in UK though, unlike the russian channel.
Feeling your pain right now. I have a service running in go that runs in multiple machines and this will keep me busy for the night. Worst is that I can't have a sysadmin do the whole process. Now QA has to sign off on it... It's no wonder things stay broken for a long time. It is a lotnif work. Sorry for the rant. :)
It sounds a little ridiculous, but it seems just about as plausible as most things in paleo-archeology[1]. I've been on a kick of reading a lot of nautical fiction and autobiography, and you come across a lot of accounts of plant and animal life transported surprising distances in the aftermath of severe storms.

[1] Could archaeologists, or really, the media reporting on it, be more upfront about the fact that virtually everything they are talking about is wild speculation based on very tenuous evidence? I don't want to knock the people doing the work of digging this stuff up and trying to understand it; but really, when you find one jawbone and extrapolate an entire organism, complete with artists renderings and even taxidermied monstrosities, or compare incomplete, fragmentary, dried out, degraded DNA material from Hominid A and B to conclude which is more closely related to modern man, my bullshit detectors start going off. The sample size is just too small.
It turns out even if a company markets its products with big bold "not for diagnostic/medical use", and its customers use the products for diagnostic or medical use, the company can still be on the hook. It depends on a number of things, not least of which is the company's knowledge of the actual use of their devices.
US mass media exhibit both government bias and corporate bias. And it can be hard to distinguish them, because US government is also subject to strong corporate bias. That was very much so during the Regan and Bush years. The Democrats are more subtle, and reflect a power base that's far more covert.
Two years ago: https://news.ycombinator.com/item?id=6885947

https://news.ycombinator.com/item?id=7019617
Or are they leveraging their resources to provide a capable service at a lower cost? Two huge players (and other competition) seems like a healthy space, unless they're colluding.
Yoda Is Dead but Star Wars’ Dubious Lessons Live On
Technical lead here: This is a tough position to have. I can't comment on the post but feel free to email me if you want to rant, vent, or talk. :)
Not before Nest, no. I guess so now?
Sure, at least for traditional two-wire thermostats that turn on when the circuit is closed: connect them in parallel.

The Nest is so obviously a product designed in warm California—not anywhere that sees truly hard winter. If it were designed well, it would fail safe (furnace on). I'd rather have a hefty heating bill from my furnace running 24/7 than have all of the pipes in my house freeze and break. If I ever install a Nest or other smart thermostat, it will be in parallel to the bimetallic-strip-and-mercury-switch from forty years ago.
I wouldn't call that a tragedy of the commons. I would call that "capitalism" because it is exactly the relationship between the owners of the means of production and everyone else.

"But anyone can become a miner" so it's free as in market and fair as in game. /s
Good advice; it's good software. Per their site, so good that GoPro actually bought Dashware (or at least the team, not sure of the details of the product).
Fascinating.

I believe we're nowhere near a full understanding of the diversity of pre-H. sapiens species. Just last year the discovery of another Homo species, H. nadeli, was claimed [1]. I feel like we're going to keep finding more and more of these folks, and - like the Neanderthals and Denisovans - discovering through genetic analysis that we interbred [2].

Also, the thing that complicates paleoanthropology, especially in regions like the Indonesian archipelago, is that most of the areas where prehuman Homo populations would have lived for significant lengths of time are now underwater.

Frustrating, but if we knew all the answers, what fun would that be?

[1] http://www.theguardian.com/science/2015/sep/10/new-species-o...
[2] https://en.wikipedia.org/wiki/Archaic_human_admixture_with_m...
I have a fitbit chargehr. It doesn't monitor heartrate for shit; it's 20-50 bpm off during exercise.
Fingerprints aren't secrets. Once you have your fingerprint stolen, it's useless.

https://www.schneier.com/blog/archives/2015/10/stealing_fing...

http://www.theguardian.com/technology/2014/dec/30/hacker-fak...
Maybe you could have a thermostat in parallel that's normally set to a minimum temperature? Thermostat -> furnace communication is pretty dead simple.
This is a problem with relying on APT for security fixes anyways.

It's been particularly bad in the past for things like nginx, where we've known about memory corruption bugs for multiple days and had clients who were incapable of patching because they only had infrastructure for downloading packages.

You should have tools in place to build, from source, anything that might be a significant security issue.
Tony is GoPro's President, not its CEO. Nick Woodman is still very much GoPro's Founder & CEO.
No, the *Kit suffix comes from NeXT, which Apple acquired and is where Mac OS X (and iOS) are derived from. NeXT started using that terminology in the 1980s, before Be Inc. was started (in 1991).
Yeap on the odds. In other words, best game if you want to have a reasonable chance on being a lucky winner.

Also impossible for the casino to make a subtle rule or behavior change that negatively affects the odds.

I personally don't know why casinos bother worrying about card counting. All they really have to do is increase the number of decks and/or increase the reshuffle frequency.

Or if they really want to stop it but some house rules that say that the next bet can't be any more than 2x the previous bet.

Sure they might miss that person that is going to go all in on one last draw. But whatever. Besides gambling revenues are down and non-casino revenues (like shows) are up. So maybe Las Vegas will stop being a gambling mecca and just be an entertainment hub.
> The author's first point was that "the unbanked want to remain anonymous"

That seems wrong, and also self-serving. I doubt the people who are cashing their checks into prepaid debit cards at Wal-Mart are doing it for anonymity.
If I took home $500m from the lottery I'd hire a security firm, too. It's not really an option, at that point.
I'm a user of Heroku, and I went in with the idea that the add ins (DBs, notification, logging, etc.) offerings would be super easy to use and compelling to stay in the eco system. They are super easy to use, but I learned that so are their competitors, and they don't integrate into Heroku in a compelling way. I ended up with a DBaaS that was miles more expensive than the AWS competitor that I will switch to when I get a chance. The base Heroku service, while not super cheap is one of the few pieces of my puzzle that may not change. AWS EB is probably better than the Heroku dynos, but not so much that it's on my short list of things to do.
Is Poland a failing democracy?
They actually bought a startup that did this (forgot the name). I imagine it's in the works to get fully integrated.

The thing I really want from GoPro is a camera with a battery that lasts more than 30 minutes. They always seem to be duds for me.
I don't think it would be as simple as a high heating bill. A residential furnace is certainly not made to run 24/7. No big deal if you're at work but if you're out of town for a while...
Agree, but there are tools to help. We maintain Djangae, to run Django on App Engine. https://github.com/potatolondon/djangae
As long as they keep producing college kids, Red Bull has an automatically-replenishing consumer base, and sell a product with addiction potential...

Now, if they were to vertically integrate and buy a cut-rate vodka distillery business \s
Yes, and they're appropriate for many use-cases, just not mine.
It isn't a smart/learning thermostat, but I've been very happy with my http://www.radiothermostat.com/ CT30 - and it hasn't left me in the cold. There is a newer model now, but you can get them with a Wifi or z-wave module. It has a json API and of course that means there are free apps too.

I easily added a few controls to my own home automation system and now I can control it from anywhere and I don't need a 3rd party (other than the internet) involved. What do I like the most? Since I've set it up I haven't had to physically touch it. Programming it through json or an app is easier than the buttons on it. Now if you want a smart/learning t-stat, you'll want something else.