skysight-inc/HackerNews huggingface dataset:
Which is why the campaign for liberated firmware is so important. If motherboard manufacturers were committing work to a common project like libreboot then hundreds of eyes would be upon it and awful code that does this insanity would never enter official repos.

Linksys had this problem a few years back with their new line of "open source" routers - it took them months to clean up their awful internal coding styles to get patches accepted into DDWRT, and even then they were accepted on a compromise where DDWRT developers had to fix a lot of it to make it less of a security portability and readability nightmare.

These hardware vendors at all levels - storage controllers, chipsets, radios, and more all have absolutely no QA on their code and by being so extremely proprietary nobody can do anything about it, and not enough people care to speak with their wallet to changes these terrible habits.
KFit Raises $12M to Expand in Asia
What you describe is a way to describe pages, not documents.
Vast majority of muslims are not really surrounded by a sick culture as you imagine from outside or what you watch on TV. For example, Turkey is a 70M country. There are surely sick (or radical) religious sub-cultures in Turkey but I don't think they are more than 5% of the population. Most people are nice people trying to have a happy life. Not much different from American people. And they would not turn into suicide bombers even without good parents.
And so they went with a language without so much as a standard string API.
Alex Ionescu wrote a paper [1] on Win10 and SGX.

> It’s important to realize that for now, only Intel has
> the required key to allow an enclave to be launched
> without knowing the required CPU-specific enclave key,
> and no other (even signed) enclaves can be launched
> without it. Once Intel releases a permissive loader, or
> if Intel ME vulnerabilities are found to extract the key,
> then the real abuse will begin.
>
> Indeed, one area of further research is the Intel SGX
> Driver that was released for recent Intel SGX-enabled
> Dell Laptops, which contains a le.signed.dll file that is
> the Intel Launch Enclave. Additionally, it contains
> Intel’s EINITTOKEN that can be used to launch such
> enclaves, as well as a service and set of APIs which
> appear to make it possible to launch additional enclaves.
> Windows 10, on its own, does not seem to ship or support
> its own Intel-signed Launch Enclave.

[1] http://www.alex-ionescu.com/Enclave%20Support%20In%20Windows...
He meant the dynamic layout model which was pioneered by Tk and adopted by AWT, GTK+, Qt, and others.
For anyone who doesn't know about Liberty Reserve, here's a good back story: http://www.theatlantic.com/magazine/archive/2015/05/bank-of-...
HTML is a technology that was stretched too far in the wrong way. When Tim Barners-Lee invented HTML the idea was to describe simple documents semantically, and even embedded images were just an extension of the original idea. When the web became a commercial success, engineers tried to make HTML fit every conceivable need, including making it a UI description language, which it is not. The result is the mess of technologies we have nowadays. It is not a sane system. And still, several people try to defend it and push the envelop even further away from its original intent without exploring alternative technologies.
That's true if all operations and intermediate states must be determistic, but if instead you only need some things to be deterministic then the cost is a lot lower. For instance, if you spawn a bunch of threads and join in them in the same order they were created, the order of the results you gather from them can be always be the same even if they didn't complete in the same order. The computation phase didn't pay any synchronization cost, but the gathering phase did
Yeh I wasn't laying blame on the *nix side of things either. No OS should be able to do this because the OS shouldn't have that level of control over the system it's sittting upon. Firmware absolutely shouldn't fail to a broken state. If you hose some configuration and it crashes, it should revert back to a known good configuration e.g.: a factory reset / fail-safe configuration.

You shouldn't be able to hose it completely except through special equipment, for example by connecting to system programming terminals on the motherboard with external hardware. The fact that a higher-level system can damage a lower-level system is just bad design.
Nanosheet growth technique could revolutionize nanomaterial production
The Breakfast Experiment – Quantified Mind
"Binary compiled"? Isn't waf a Python script?
Does the design improve surveillance security? Looks like the insulated plug prongs and the ground pin enablement features would help resist server plug capture devices for seizing servers while powered up.
Eaglefiler might be an interesting alternative.
Closed source, OS X only, but actively developed, and from a one-person shop.
http://c-command.com/eaglefiler/
He doesn't seem to see a difference between "merely" having to reinstall the OS and restore from backups, and a machine that can't boot any OS anymore? And he's apparently a "senior software engineer" at RedHat?

It doesn't even matter if you're pro or anti-systemd. That sort of response just shows a huge lack of understanding about the severity of the problem.
I tried DarkBasic years ago as well, I was into Bryce, C4D, taking a bunch of A/V classes, and learning to program at the time. I was in major overload. I ended up buying a few a of their tools, the pro version, etc (which were mostly made in DarkBasic as well, aka eat you own dog food). But I haven't touched it in years...

But since seeing this post I looked at the DarkBasic website and it appears they are also OpenSourcing their Pro version as well.

https://www.thegamecreators.com/product/dark-basic-pro-open-...
Thank you for this good info.
If you're dragging the team down, you are either oblivious to how you're being difficult or you know you are and you think you're in the right.

Thinking you're in the right - that's when you need to eat some humble pie and recognize aggravating people is almost never a good idea. If you are in a do or die situation, sure, hurt some feelings. Otherwise, it is not going to work out for you or them long term. Long term, people want to be happy. If you're preventing that, you're the biggest problem in their life :)

If you're oblivious - then... There is no answer, you'll simply learn through the hard knocks of life.

I was being difficult once - in hindsight, people do the best they can and if the circumstances you're in can only result in a shitty product getting shipped unless you put in heroic efforts, opt for the shitty product. It's like 'the wire' (great hbo show) - when the system is broken, the one trying to do the right thing is going to get squashed.
I agree with you in regard to this (or similar) event.

I think the larger question is does this stuff really ever get turned off after the game? As the article notes, many of the surveillance techniques and such were in place well before the Super Bowl event: license plate readers, cameras, etc. The real issue isn't what happens during a high profile event, but how much of this is really just the normal course of governing... and why it needs to be that way.

I think it reveals a more fundamental problem in our society: a tolerance for unnecessary intrusion by those with the power to disrupt our lives.
Federal Reserve does not issue cash, that is the job of the Treasury Department.
Drone Racing Erupting as New ESport
There's a lot of new stuff coming in the ARM world which goes way beyond what they have today. (I know about a couple under NDA, and about the current state of the art, so I have to assume there are others).

The best "demo" of this in a fairly open way is USB Armory; they exposed the best features currently available in a developer friendly way. But there are some other things coming which are even better.

(I care about end users being able to trust remote servers; I don't really care about remote content owners being able to trust local client devices. There are usually no rights issues with the former, and DRM is the obvious (but not only) use case for the latter. I generally believe whoever buys a piece of hardware deserves full rights to it, but there are cases where that's an organization and they have ever right to expect all of their widely-deployed hardware is untampered...for instance, a closed computing environment for processing PII of third parties.)
Why drop "With Lasers" from the headline?!
> I guess I have no other choice but to provide the source code to the clients, just like Atlassian does.

Is there a reason you don't want to do that? It clearly works. Release your code under the BSD or GPL licenses and provide it to your customers. If you did that, I'd be happy to pay for software like that. But for me, free (as in freedom) software is a requirement for anything I'm going to run on my machine.
> Among graphic designers and studio artists, a "grid" was always just a fun-to-try curiosity for noob artists to learn composition.

Some very famous graphic designers used a grid as the basis of their designs.

http://www.amazon.com/Grid-Systems-Graphic-Design-Communicat...
I know IE used to do this too.
That's a good question. I'm not sure about StampReady, but Campaign Monitor has a few of the best email designers in the biz working there (namely Nicole Merlin and Stig Morten Myre) who strive for really robust templates. Nicole in particular has written about her approach (typically called 'hybrid' or 'spongey' development), which works without media queries. It's basically using fluid tables, max-width, and MSO conditional tables to get things working and is the best approach around these days. You can read more about it here: http://webdesign.tutsplus.com/tutorials/creating-a-future-pr...

I wouldn't be surprised if Campaign Monitor's email templates built in their builder follow the same approach. MailChimp's too, for that matter. The team there use similar techniques.
Since this is about Tcl, there is a SafeTcl subset that was specifically designed for running untrusted code when there was hope that it might become a standard web scripting language. It eliminates all commands that can alter system resources and is a truly safe sandbox. You can still use it today by creating isolated sub-interpreters with an option to use the safe subset.
So did Tim Cook when he fired Scott Forstall.
Nobody has a problem with security at or around the super bowl.

Where people have a problem is in the use of surveillance that's both very invasive and very ineffective in actually stopping terrorist attacks. Dragnet surveillance of internet packets fall into that category.
I sympathize with you that the UEFI implementations are bad, but I don't agree that it's an excuse for everything on top of UEFI to be bad.

I think the two competing ideas are:

Either you make libraries that strictly conform to the spec and are "technically perfect", leaving any bugs that stem from non-compliance to the violating parties (i.e. the UEFI implementors)

Or, you make libraries that conform to the spec and have some "dirty" handling to work around holes left by crappy UEFI implementations.

The first options feels great to write as a developer, but the second option is what most users really need - it's the "it just works" factor that users care about. I know it hurts to code around shitty implementations, but there's no other alternative if reliability and idiot-proofing matters.

The best I can suggest is to make the workarounds "pluggable" so that developers don't have to deal with the harsh realities unless they specifically go looking for the plugged-in workarounds.
Sure, but you normally have higher expectations from prodigies and geniuses.
Identity theft and credit card fraud are victimless crimes?
Big Data can prevent terrorist attacks? Do you agree?
An app for discovering the code quality of different companies
I'll try that, thank you.
Show HN: Rebalance Calc – A Portfolio Rebalancing Calculator
doesn't Apache Avro solve this problem?
> Trust is critical. Almost all of us [GNU/]Linux users run at least a few prepackaged binaries on our systems. But they come from trustworthy sources such as big companies like Github. These proprietary binaries are usually vetted by security researchers as well to detect any malicious behaviour.

Speak for yourself. I explicitly have removed all proprietary software from my machine. The whole "vetted by security researchers" is such a vague metric with mixed results. One researcher will find 30 bugs while another will find 5 in the same time.

> Additionally, I'd recommend posting SHA checksums and offering a more traditional "Download" button as an alternative to the one-liner.

> TLDR: You're asking people to take a risk on a new project, without any indiciation of who's behind it or why they should trust you.

Which is why he should just release the source. Then trust isn't a factor. I don't trust random people on the internet. And no, I don't trust GitHub or whoever you want to pick.
BlitzBasic started on the Amiga and was used to create games such as super Skidmarks 1 & 2. It featured easy to use GUI functions that allowed lots of people to create programs for the Amiga easily. The Windows version is known as BlitzPlus and also has GUI support among other functions such as networking, DLL calls, Sound, etc. It is mostly used for 2D games but you have to render rotated sprites before you can use them. It is a procedural language.

Blitz3D includes 3D functions but it is also a procedural language.

BlitzMax is an Object Oriented language. It also allows on-the-fly rotation and scaling of sprites. Most examples of the Blitz family of languages on the web are for BlitzMax.
There is a Linux as well as a Mac OS compiler for it.

MonkeyX is also from the same company and improves upon BlitzMax. It has several free and paid compiler backends as well as several IDEs. The free version of MonkeyX will compile/export to Desktop executables and HTML5.

DarkBASIC first appeared in the late 90's/early 00's and offered several 3D functions from the beginning. It is a procedural language.

The biggest differences in the base language will be the way Types are declared. DarkBASIC will be much like QuickBASIC while BlitzMax will use the Field keyword to define member variables and the Function keyword to define methods.
I'm not sure how moving boot settings from one OS-accessible place to another improves security.

If you are bothered by people booting unauthorized disks on your hardware, enforce signature checking on OS images.
I agree with this. The people saying it's technically possible to get a different webpage at that resource address are missing the point - it's trivial to do A/B with the same site, same port, same protocol, based on user IP, time of day or a RNG.

The point of URL is to identify a single address owned by one guy. Removing the www subdomain means you have two addresses, possibly owned by two guys.
Annoyingly, this can be difficult to do if the A record for your domain doesn't point to a webserver. There are other legitimate things it could point to, like an authentication domain controller or a session border controller. Do you really want to be running a webserver there, even if it's only redirecting?
I considered off and on about getting a parrot, but every time I read articles like this, it puts me firmly back into the "shouldn't get one" camp. I'm always shocked at how people can pay so much for one and then treat them so poorly. They're wonderful creatures, but I don't know if I can take on the responsibility of having something that's like a child that never grows up.

I'd probably feel a little guilty for also keeping a (tamed) wild creature in a cage. However, all the legally purchased ones in the United States at least were born here, so it wouldn't really be taking it from its wild habitat.

Crows would also make a fascinating pet, but having one as a pet would be illegal in North America[1].

[1] https://en.wikipedia.org/wiki/Migratory_Bird_Treaty_Act_of_1...
If you're looking to go freelancing but aren't yet ready for the jump, perhaps try asking your employer if you can go part time so you can slowly build up your client base, rather than suddenly hitting $0 income from day one.

I'm in melbourne and the market seems pretty healthy, however you need to be fairly specialised. Anything generic (web sites, online stores etc) is totally saturated, so it's a race to the bottom on hourly rates with Upwork if you cannot differentiate. I agree with the comments below - get specialised in something and then leverage those vendors to build your customer base.

As an aside - I'm on the other side of the equation compared with many of the replies below. I'm a sales & marketing person first up, and a developer by necessity secondly (PHP & RoR). I have a micro-business on the side which is gaining more traction than I would like, and think I will need some folk to help with delivery in the next 2-3 months.

So, if you have some PHP experience and know how to hit APIs with JSON and XML then perhaps shoot me an email we can keep in touch, as I might be able to find you a day a week in a couple of months time if you do totally go "cold turkey" and resign.
It can, but how to preserve Privacy? How can you build that kind of predicting system, without erasing personal freedom?
You can turn it around easily.

You mean instead of being able to download and run something natively at my convenience, I have to run it on (barf) JavaScript in the browser? I have to submit to being tracked everywhere I go online, and send my data to a central "cloud" where advertisers can profit from it freely without paying me royalties?

No fucking thanks.
I'm doing OK :).

I've got one large client who I basically subcontract for, then a handful of other clients I work on a less regular basis. About a 50/50 split between the large client and the rest.

I earn less than when I was working full time, but love the freedom to spend my time as I like, and to have the time to work on my own startup projects. I'd earn more if I took the freelancing more seriously and made an effort at sales and marketing, but as it is I'm thinking of scaling back to concentrate on my own projects more.

Retainers or any other regular monthly income are gold.
Can something like an Ionic Breeze type system work? Or does it have to be HEPA? Frankly, the smell alone makes me want to enclose it in acrylic and use a HEPA + carbon + fan.
Large scale responses to purely imagined nightmares do not come without consequences to civility and society. On the contrary, it elicits a response to something that will probably not happen as if it actually already occurred!

The purpose of terrorism is to elicit this exact response. When we have the same reaction whether they show up or not, their goals are met without any effort or risk on their part!

Extraordinary success. They've gotten all they asked for and didn't have to lift a finger. Good job for them!
> RISC-V, save us!

You presented evidence that hardware vendors write awful firmware code - why will these people write decent firmware as soon as RISC-V comes, i.e. what evidence do you have that we won't have the "accepted" behaviour of having RISC-V and bad firmware?
Whenever this gets posted, comments seem to focus on what to use going forward. It seems obvious for most projects there are better alternatives.

However whenever I see autotools documentation I think of only one thing: it's worth learning how this old system works because, even if you will never yourself use it for your own projects, so much code written by others over past decades requires autoconf, automake, often libtool, and sometimes pkg-config.

For me, understanding how these old hacks work is very important in getting a large majority of open source software projects to compile after I make modifications, e.g., removing code.

Oftentimes I think that people who use autotools do not truly understand _how it works_, they have only figured out _how to use it_. This is reasonable but the problem is that autotools is very brittle, and if it breaks they have little idea how to fix it.
Copper Deposition to Fabricate Tiny 3D Objects
Suntory’s new line of Yamazaki whisky has critics ecstatic
Awesome! have a gif of a working calculator? Reminds me of the way that people would build digital electronics in the 'powder-toy' genre of games. Was that an inspiration for this project?
For what it's worth, just because they can live very long doesn't mean they always live very long. If you buy a cockatoo when you are 70 years old, it will probably outlive you, for instance, but inheriting birds is not a usual thing. I got this from the person I bought my Senegal Parrot from - he said "plan on 15 years", and he's been supporting birds for decades.

Incidentally, birds are weird, weird pets. They become intensely attached and loyal, but discipline differently than any mammalian pet. If you do get one, find a good dealer that has a lot of experience, and spend time around their existing birds.
Then it was one simple step for board manufacturers to mix this with low level hardware settings which also need to be stored somewhere and produce the kind of trouble we are seeing.

The "low level hardware settings" were always stored on the motherboard, ever since the PC/AT. The big difference is that a simple CMOS reset would reset those to the defaults, and the machine would be bootable with the defaults. In the old days some errant program could corrupt CMOS (writes to port 70h/71h), but that was relatively easily fixed.

With this UEFI stuff, it appears the configuration data is stored in nonvolatile RAM, there's no easy way to "reset to defaults", and the defaults are either missing/unusable.
If the interests would have aligned better, Google Wave could have been this. A better protocol that allows mixing of synchronous and asynchronous communication. It's so sad that opportunity wasnt used with more passion and adopted by a larger ecosystem of players.
<sigh> Not a single tool we use is open source. Mainly because with an open source application there's no one source for security to go to and ask for a letter certifying the safety of the software.

I wish I were kidding.
I think taking 6-12 months on-site contracts is the best approach. The contract environment is pretty good in Sydney and Melbourne.

Contract work pays very well, you get to invoice a full 40 hours each week, you meet lots of smart/cunning people, you learn stuff, you build connections with big companies
(not small startups who might go bankrupt in a year or two). Also, I find that 6 months is optimal for learning and self-improvement (useful if you want to become a manager down the line).

On top of all this, it is often less stressful than working for small clients who don't have much money and have tight deadlines.

The main issue is that the barrier to entry is higher - They're not just going to hire anyone. For the rates they're paying, they want people who have experience/achievements under their belt.
Open source work is a good way to get your foot in the door.
It's worth looking at AirStory - http://www.airstory.co I like their web clipper more than Evernote's.
Instead of calling them "assholes", I wish people like the OP would just be honest and say they don't want to work with people on the spectrum. There's no shame in that, it's perfectly fine to prefer neurotypicals at your workplace; the vast majority of people do.
Issuance and printing are distinct operations. Federal Reserve Notes are in fact issued by the Federal Reserve, and printed by the Bureau of Engraving and Printing, which is a part of the Treasury[1].

[1] http://economics.stackexchange.com/questions/8320/how-and-wh...