skysight-inc/HackerNews huggingface dataset:
Scheda Sim addio, Samsung lancia la eSim
That isn't really possible, Linux for example doesn't even have a security issues page, you are expected to read git patches yourself and understand the implications of each patch.

In general, looking at the security information for a Linux/BSD distro containing the software you care about is probably the best way, along with tracking any RSS feeds you can find that do exist.
Eustia: a tool for building your own JavaScript utility libraries
Well, you have to chose something. You can't have security, automated updates to latest version and stability in the same place. You're either in debian/RHEL world with old kernels, old libraries and old userspace tools which miss a lot of fresh features or in npm/pip/curl|bash world, where you have latest version of everything all the time.

In former case you can do `apt-get upgrade`/`yum update` and be almost sure that everything will continue working, but - no - you can't have PHP 7.

In latter case you either use npm shrinkwrap-like tools to install the exact same version of everything every single time, or play Russian roulette with the new dependency versions. And - just in case if you didn't notice - when you pin some package to a specific version you no longer receive security upgrades for it. And let's be honest - you have a lots of those "^1.0.1", "~0.10.29", "^0.3.1" things in you package.json/Berksfile/... And for almost any package "^0.3.1" is the same as "0.3.1", cause the next version will obviously be "1.0.0" and 0.3.X won't be receiving any more updates.

It's obvious that no single distribution will be able to package the insanely large amount of packages from all the different sources, let alone backporting patches. So you either limit yourself to only the stuff available in your distribution, or you're on your own with updates (including security ones).

As for the packages updating themselves, sometimes it's a good thing, sometimes it isn't. I bet a wordpress installation which can't overwrite itself (because is owned by root), and doesn't allow executing user-uploaded .php files will be much more secure than one which has full access to itself.

P.S. no amount of tooling can solve this problem. If you're using version X of package A, then you find out that there is a security vulnerability in version X which is fixed in version Y and version Y is not fully compatible with version X (changed an API, config file, anything else in a backwards-incompatible way), you're semi-screwed. You will have to handle that situation manually.
It's not pretty (you need to do filtering yourself), but https://nvd.nist.gov/download.cfm will give you 99% of the data you want.

Otherwise, look at specific distro feeds. For example Ubuntu has http://www.ubuntu.com/usn/ (RSSable) and Debian has https://www.debian.org/security/ (also RSSable)

(apparently you can also generate your own feed from http://tif.mcafee.com/ but I never used it)
This is more of a "why C++ programmers suck", but the main gripe I have is with programmers who seem to be obsessed with stuffing as much of the latest C++20 (or whatever they're at now) features as possible into the code they write, making it more verbose and bloated than necessary. The fact that these features now exist, somehow makes people want to find a use for them. The same phenomenon doesn't happen with C because the language is so much simpler.

and today the first thing I suggest to people is to stop thinking that C++ is a superset of C

I think that's the problem. It's certainly possible to use its features sparingly, as an object-oriented superset of C, resulting in the code as performant as C but less verbose, which is IMHO the main attraction of the language. Going crazy with the abstraction is what turns it into a mess. (Compare the similar "use as much as possible, and maybe more" behaviour often encountered in the past with design patterns, and the huge OOP-ifying of everything when OOP just started becoming popular. Maybe in a few years C++ will settle down with most code being written in a saner subset, with only sparing use of the advanced stuff...)
Looks interesting (like the expiration=never). Uses Mozilla Persona, which I hadn't heard of before. Apparently 'Persona' is no longer being developed by Mozilla since early/2014(1). Also... warnings that 'Persona' isn't secure for high-value data(2).

(1) http://techcrunch.com/2014/03/08/mozilla-stops-developing-it...

(2) http://benjamin.smedbergs.us/blog/2014-02-11/dont-use-mozill...
He's using PS CS2 which was released by Adobe for free [0]. For what he's using PS for, CS2 is more than adequate. And you can't beat the price. He could also use GIMP for all those steps as well.

[0] http://www.digitaltrends.com/computing/how-to-get-photoshop-...
Keep in mind that the period 2000-2015 includes two major recessions. Almost any other fifteen year period will work even better (you can test it on that website). Move the timeframe to 30 years (which is the bare minimum that the early retirement crowd looks at) and it's difficult to find a period with less than 7% returns. Even adjusting for inflation, it's rare to have a 30-year period with less than 4% returns, which is the basis for the 4% Rule mentioned in the article.
Related to open source, you probably want to track OSS Security mailing list [1]; or if you're part of an organization relying on open source software, you should have someone looking at that list.

I think it is a good complement to the security advisories of your Linux distributor (Debian, CentOS, whatever), but is isn't free as you'll need time to keep an eye on it.

1: http://oss-security.openwall.org/
Regarding your first point:

According to the graphic in the article, he has a net income of 6200 CHF/mo. He says he saves 80%, that's 5000 CHF/mo, or 60k CHF annually. The graphic says he's 27. I assume he started work at 22. At a constant salary, he will have saved 300k thus far, and will save another 300k in the next five years.

So in five years, he will have accumulated 600k savings in cash. That's not sufficient for early retirement -- not even for MMM, who retired on 600k cash + 200k house. I suppose he could make it happen if he bought an extremely cheap apartment and lived more frugally than MMM, but that does not strike me as having a satisfactory quality of life.

Regarding your second point:

While it is true that investing over the span of 5 years does not significantly change his cash stack, investing matters looking forward: he definitely needs to invest if he plans to retire early on mid six-figure sum.
Does this make Matt Novak from Gizmodo a liar? Maybe, maybe not.

However this undoubtedly makes him a terrible journalist.
"Everything seems to be running on stock Ubuntu VMs nowadays" -

More of different linux variants actually. Amazon, for instance, provides their own version called "Amazon Linux" which is based on RHEL/CentOS for their aws servers. I've also seen many use Debian for their servers (In fact, Debian/Ubuntu doesn't differ much technically on the server side, but Debian's simplicity and FOSS-friendliness drives many towards it).
I think something that accesses main memory goes beyond 'simple' instructions for this definition.

This is an example of a Java compiler phase doing it, although here it looks like it's only doing it for empty loops (or loops that end up empty due to hoisting), so it's not quite what was going on about https://github.com/graalvm/graal-core/blob/0a68438187e7e3196....
Some distro rolling releases get upgraded every 6 hours, are you sure you want to potentially upgrade that often?

If I were running a larger company I would assign my security team to help out a distro security team, so I benefit from the work of others as well as getting specific support for the software I really care about.
Since new C++ projects are being started today, reality contradicts your beliefs. Which one will win, I wonder - reality or dogma?
The golden rule is to spend no more than 4% of your assets per year, so it's quite doable.
Can you say a bit more about what you do? Sounds very interesting.
“Smartphone” is the wrong name
Seems more like a competitor to the Surface 4, which is a lot cheeper then the Surface Book. Alone for the fact of the flimsy keyboard it can not be compared to a Surface Book or Macbook.
Would love your feedback on the service and website. Thank you
That's where I would think "there's only one way to find out..."
Sony Is Building an Education and Testing Platform Powered by the Blockchain
> Debian privacy policies don't allow it to check mod updates by default.

Just make it opt-in, should be fine to do that.
Let me save you some time. Atari: Game Over on Netflix ~> http://www.netflix.com/title/80042198
Could someone explain what's special about Arch compared to other types of Linux? I don't know and I don't understand when reading it here.
> ..."the Hong Kong billionaire Li Ka-Shing"

That's the most awesome billionaire name I have ever seen.
Amazon finally decided to stop losing a little on every sale and making it up in volume. This looks like a classic dumping strategy -- sell products below cost (and evading sales/use tax, wink wink) to bankrupt competitors, and then raise prices.
Tried to buy some computer components of Amazon the other day, it became such a pita that I aborted the order and bought the SSD in person at the local PC World (for those not in the UK shipping at PC world is the last resort when in a rush) for a couple of quid more.

At this point I actively avoid Amazon, they lost their mojo and ruthless focus on customer experience.
Venture capital startup F50 on beta launch of co-investment syndication platform
In Python you even have the shortcut 5 < x < 10.
The Torygraph obituary is far better [1]. I don't have much love for the Telegraphy apart from their excellent obituaries - I can't get enough of obscure soldiers and landed gentry.

1. http://www.telegraph.co.uk/news/obituaries/12167611/Captain-...
Thanks for the promo - signed up. This thread got me searching and there's a lot of good feedback around
So Atari spent $21,000,000 to buy the rights and $5,000,000 on marketing but having more than 1 developer on the project was too much...
>I suggest to people is to stop thinking that C++ is a superset of C. It is, but let’s forget that.

Hard to take any article seriously that makes such a glaring and naive point. C++ is not a superset of C and if the author really knew the language well, he would not make this point.
The argument is mostly about double comparisons, i.e., checking for belonging to an interval.
I wonder how much they paid the 1 programmer for the 5 weeks of development time. I'm sure nowhere near the $5m they spent on advertising or $21m on game rights.

Also, if they did indeed sell 1.5m copies at $40 per copy, that's $60m. Even allowing for large amounts of unsold stock that surely can't have been too far off covering costs, and can't have been the only reason for their subsequent $310m loss.

EDIT: Fair points about distributors margins, retailers margins, manufacturing costs etc. But even if they only saw $10m-$20m of the $60m in retails sales, that is still a reasonable amount, and mean their losses on that one game would only be in the millions or low 10s of millions, so there must have been additional reasons for the company's $310m loss.
You don't have to upgrade every 6 hours. The upstream repo may be constantly updated, but the smaller your scope is, the less you need to care about really. For example I expect that I'll have some new packages on my desktop every few hours, but on a server with system+service+monitoring it may be one package a week instead. At that pace, it's trivial to just get notifications and classify updates as critical/useful/whatever.

If you have a proper test/deploy pipeline you can retest with new software all as it's released, but only push to production every week, or when it's critical.
Top 7 Mobile and Web App Framework for UI/UX Designers
By using relase designation instead of toy codenames ("testing" instead of "Stretch") in apt config files I get pretty close to rolling realease. Using that and apt-pinning I am totally happy running stable/testing/unstable/experimental system with majority of packages from testing on my desktop. I am rather conservative and would avoid anything bleeding-edge on production systems so using stable with security updates (and stable-backports if needed) would be my choice. YMMV though.
What to do when your self-driving car decides to drive you to the police
Go package for the Visa developer API
Oh hey. Cool! My area. (digital humanities) Nice to see it hit the front page of HN.

For anyone who hasn't heard of it yet, the digital humanities (DH) is humanities 2.0. It is an evolving area of research that uses computational methods to explore and answer traditional humanities research questions. When I say humanities, I'm assuming you know I'm simultaneously talking about arts, as in the A in BA, MA, and so on :)

Digital humanities[1] is actually a re-branding of what is known as _humanities computing_[2] which is arguably a more accurate term mirroring as it does the term _scientific computing_[3].

DH covers things like digital archiving, using GIS in archaeology, using computational linguistics in the service literary criticism, stylometrics, applied ontology, digital metadata standards, and much much more.

A good journal to start with is Digital Scholarship in the Humanities: http://dsh.oxfordjournals.org/ and the main umbrella conference this year is in Jagiellonian university in Kraków, Poland -- one of the oldest universities in the world, operational since 1364! http://dh2016.adho.org/

[1] https://en.wikipedia.org/wiki/Digital_humanities

[2] https://en.wikipedia.org/wiki/humanities_computing (redirects to DH)

[3] https://en.wikipedia.org/wiki/scientific_computing (redirects to computational science)
How about being a compiler engineer in the UK?

http://www.fsf.org/resources/jobs/embecosm-compiler-engineer
Eternal Fascism: Fourteen Ways of Looking at a Blackshirt by Umberto Eco (1995)
I actually knew someone who had this piece of garbage. In rural mid-America. It sure as hell was distributed!
The BBC Micro also allows you to change the address of the video framebuffer. A particularly neat trick was to remap it to 0x0000, so you get to see the OS workspace, stacks, program storage etc. You can watch the bits twiddle in realtime as you do things.

There's another neat hack which would cause the machine to run in slow motion. I don't know how it worked; I can't find any references now. Possibly it overloads the system with interrupts. But under its influence, clearing the screen would take several seconds. These two hacks combined beautifully, letting you see all the details of, e.g., Basic's heap management.
Yes this is true - I guess I am just expressing my personal experience where I forget I am speaking to non-native speakers and use language they are unfamiliar with.
I am sure it was. The point is that Samsung didn't stop them.
Uber taxi torched, driver injured in suspected business rivalry
I am frugal and like many people here also attend to my side project on nights and weekends, committed relationships are off the table with this lifestyle (sure, there might be rare exceptions).
The Fairphone2 was already modular before this...
http://shop.fairphone.com/spareparts.html
> This is still far worse than just enabling automatic updates in Wordpress.

A webapp updating itself, having write access to its files (I see zero privilege separation in [1]) and getting updates from a hopefully not compromised source (see Linux Mint lately), that's just asking for trouble. I trust the Debian mirror infrastructure with signed packages that are updated by a privileged system user way more.

[1]: https://codex.wordpress.org/Configuring_Automatic_Background...
Out of curiosity: is anybody here using a binary clock (or another rather exotic clock design) on a daily basis and is able to read the time as fluent as with a normal clock?
About Arch itself - nothing much. It's just in the same bag as Gentoo regarding release process. Rolling rather than periodic release means that whenever upstream project releases a new package, it's either automatically monitored or someone clicks "out of date" on the package site (like https://www.archlinux.org/packages/core/x86_64/bash/). Then you get the new version in hours or days, rather than when the next OS release comes out.

Taking GCC for example, that means Arch users are at 5.3.0 now, while Debian is still on 4.9.2.

For security patches though that means that on Arch you have to upgrade to the latest version, while Debian will likely give you the same version you're already running with the issue fixed. This may be annoying on Arch if you're patching PHP for example - it may not work anymore with the site you're running and you have to migrate to the latest version.
I'm willing to buy into that. I'm very happy that they are doing that. But sadly, many are now tying to be more concise and the subjects now look like tweets with truncated words (please = pls) so its a new mind bender to decipher the subject. Lots of times its read the subject, go ??!?! and the read the body and spend a few mins trying to figure how the got the subject lines

When I start getting emojis in subject lines it will signal the death of email. ;-)
Indirect Use of SAP Licences – Study Highlights Incalculable Costs and Risks
The system learns users' preferences, recommends new cigars to try, then, based on feedback on how user liked the recommended cigars, suggests changes to personal profile and further refines recommendations. No sale of ads, nor of cigars, nor of user personal data. It's a (small) membership subscription model.
Really like the intense focus music. Seems to work really well for me. However I am not a fan of the nature based ones. The nature sounds comes of as too artificial. I might consider buying something like this, but not sure if I think a monthly subscription is worth it. Could there be a market for making an "album" with 10 generated songs in a category?
I immediately though of this as well. Its becoming increasingly in demand in IoT-related things (particularly in industrial applications, certainly automotive and medical).
$40 would be the retail price, no? After retailer's margin and distributor's margin, maybe Atari got max $15 per cartridge. Making the whole debacle a money-losing affair.
A recent TED talk by Gregory Heyworth on using spectral imaging to reveal the hidden (to our eyes) content of ancient manuscripts. I don't usually watch TED talks any more but this one has a fair bit of meat and I found it genuinely inspiring.

http://www.ted.com/talks/gregory_heyworth_how_i_m_discoverin...

What does it even mean to say that humanities scholars tend to stay very isolated. How would you even measure that? And as compared to what?
Thanks. Regarding cost... someone should sell curated security feeds to startups.

There must be many dozens of engineers who monitor mailing lists for issues in (let's say) ElasticSearch. They could be incentivized to share their findings.

Then if one source tags a certain CVE as significant, I get a ping. If several sources tag it, the ping gets more urgent. Eventually I feel scared enough that I upgrade.
Arch is based on "rolling" releases where they very quickly promote whatever the original author has released into their distro. I think there are some checks but it is quite a light process. You are a lot closer to the upstream developers of the software you use, but you have to take on the responsibility for stability.

A lot of the Debian process is trying to avoid releasing packages with (known) bugs
I literally broke down and cried my freshman year of college when I heard the news. I was a massive fan of his at the time and I really was devastated. I binged on his music for a couple days and eventually was at peace with it all; its touching to me that his music can have that effect. RIP Jun.
same. I prefer anything but the relaxing kind of repetitive music they'd suggest. the whole thread above this also has very nice music suggestion, but nothing I'd use to get in the zone.
I agree that it's rare, but aren't those exactly the cases where this kind of optimization is relevant? In the cases where you're using i and it could overflow, the optimization couldn't be applied anyway.
Getting your Ionic app to update automatically: bypass Apple review
Actually Debian's rolling release is newer than Arch, 5.3.1:

https://packages.debian.org/source/testing/gcc-5
Oh yes, this is a big problem. I still run into things like installing ownCloud client on Ubuntu and then wondering why it doesn't work (it's years old). Or recently I found out that Python3-Pandas on the Raspberry pi is version 14.something which has annoyances that have long since been solved. If you install Drush (Drupal Shell) from Ubuntu 14.04, you get version 5.10! (They are at 8.1).
Arch Linux is already much better but one breaks things occasionally and they were kicked off of Digital Ocean, sadly.

I really hope Ubuntu Snappy packages, which is essentially the same as the Arch User Repository but more secure If I understand correctly, will solve this messy misery.
It's not so much a self-help article as it is a you-can't-help-it article. It's about recognizing that sometimes there isn't anything you can do and that there is no need to feel pressure. In lieu of that, you just relax and let these moments pass. For some people, that realization can bring happiness.
Programmer Creates Retro ‘Snake’ Game That Slithers Around Your Keyboard
I think you're deliberately making it more verbose than it needs to be. The class definition could be condensed into:

class Expression {
enum Tag { litteral, symbol, funcall, conditional,
while_loop, sequence } _tag;
union {
Value *litteral;
std::string *symbol; // or a true symbol?
std::vector<Expression> *composite;
} _val;
};

And you could probably use templates or macros to autogenerate most of those constructors/destructors automatically.
Premature optimization is the root of all evil - a lot of programs perform more than adequately when just written in a way that directly expresses programmer intent. In cases where you need to push the very limits of performance, you'll have to add extra processor-specific information (or at least information based on educated guesses about how processors in general behave) - I don't think there's any way to avoid that. But if you're including extra information in the source that clutters up developer intent and doesn't help the processor optimize, something has gone very wrong.
Of course the timeline in this case was:

1. Retire

2. Live of savings as planned for years

3. Start a blog that ends up making money
Perhaps sign up and participate in the Launch Hackathon[1] at the end of the week? Best case scenario you start your own company. Worst case scenario? You have a fun time just sitting there crunching on a problem you're interested in.

[1] http://www.launchhackathon.com/
According to his site, he was already retired when he started blogging.
from my experience, gramatical gender is always more difficult than no gener, even when you have a native tongue that employs a grammatical gender. In romance langauges, the moon is feminine ("la lune"), in german it is masculine ("der mond"), so for both french and german speakers learning english ("a moon") should be easier, because it does not require learning an additional bit or two of information.

I would argue that dictionary size does not matter for basic language skills, but becomes more important the closer you get to native proficiency.
This is an awesome story...would make for a great ad for Netflix (well irony aside).

I can vividly picture the "Where did my show go??" moment :)
A lot of languages support C linkage. It can be surprisingly easy to migrate a codebase a little at a time.