skysight-inc/HackerNews huggingface dataset:
I have the 1995 prints of the 2nd edition core books (Player's Handbook, Dungeon Master's Guide and also the Monstrous Manual), sometimes referred to as the 2.5 edition. They are not in this list and also not in the DMG store. While rule-wise there were almost no changes from the original 2nd edition, the layout and color prints got a complete overhaul. And before you ask, no, I'm not going to cut them up and scan, sorry.
If that's the case, it sounds like the FBI are being very careless with evidence and passwords to suspects' phones, even in very high profile cases.

If they can't keep passwords secure, they aren't going to be able to keep this backdoored iOS version secure either.
That is sort of the joke.

Eco's journalistic pieces are quite short and he tends to take an everyday thing and run with it making its absurdity show up more with each paragraph.

There are collections in English of the newspaper articles available. Each piece can be quite entertaining but the books of collected articles were not intended to be read from beginning to end.
Yes, daily. I was and still am a big user of FeedDemon.
^ meant to type 'very little original works'
If the synthetic eyeballs don't arrive, I wonder if by 2050 we'll have more options for correcting myopia. Right now we basically have 4 options, and they're all imperfect:

1. Suspend a lens in front of the eye (glasses). Drawbacks: condensation, not good in rain / water sports / contact sports, aesthetics

2. Stick a lens to the cornea (contacts). Drawbacks: risk of infection, not comfortable for everyone, hassle of daily removal / cleaning. Deprives the cornea of oxygen slightly

3. Remove some of the cornea with a laser (LASIK/PRK). Drawbacks: Can be inexact, not everyone gets perfect vision. Risk of side effects like haloes at night or chronic dry eyes. Risk of flap dislocation injuries in the future. The cornea may be permanently weakened.

4. Put a lens implant inside the eye. This one seems to be less common, but it's used for people with high myopia whose corneas are too thin for LASIK. Drawbacks: risky operation, risk of infection and complications.

(5.) There's also Ortho-K, where you wear a set of hard contact lenses at night which temporarily reshape your cornea, and give you temporarily improved vision. However it doesn't seem very popular these days, and I think it only works for low prescriptions.

I wonder if some new ways of attacking the problem will emerge. Like a semi-permanent contact lens glued to your eyeball?
Orwell would be proud of the comprehensive surveillance systems we now have in place.

Just for fun, the old Apple add

1984 Apple's Macintosh Commercial (HD)

Video
https://www.youtube.com/watch?v=VtvjbmoDx-I
You consider that to be a serious news source? Come on.
Colma is a lovely necropolis. I went there once to visit the grave of Emperor Norton I, one of my personal heroes. I'm still disappointed they didn't name the Bay Bridge after him.
per capita vivae?
How Economists Would Wage the War on Drugs
I was thinking more of SmallTalk for Zen (Enso)
I wonder why they didn't trawl eBay first? A lot of what they are after can be found there for <50$. Is it just to avoid the actual scanning work?
Installing Android studio on Ubuntu linux
A workaround for long compile times is trying to stay withing GHCi whenever possible and reload from there.

http://chrisdone.com/posts/haskell-repl

http://chrisdone.com/posts/making-ghci-fast

The Haxl team seem to use this strategy:

"Haxl users at Facebook do a lot of development and testing inside GHCi. In fact, we’ve built a customized version of GHCi that runs code in our Haxl monad by default instead of the IO monad, and has a handful of extra commands to support common workflows needed by our developers."

http://simonmar.github.io/posts/2016-02-12-Stack-traces-in-G...
Surely you're arguing for there to be a monopoly at any given time there - if company X does Y first, you'll always use company X's stuff (even after other companies implement Y) until another company does Z first, in which case you'll always use their stuff.

Or, more specifically - there should only be one company in the world manufacturing nuts and bolts, because you can't really create a superior nut. The first company to invent them should've won out.
The concept of the anti-library definitely shaped my approach to knowledge a lot.

Umberto Eco’s Antilibrary: Why Unread Books Are More Valuable to Our Lives than Read Ones https://www.brainpickings.org/2015/03/24/umberto-eco-antilib...
Is patching this bug on any server a matter of running `sudo apt-get update` (or the equivalent of the linux flavor in question) - and then rebooting afterwards?

EDIT:
From AWS (https://aws.amazon.com/security/security-bulletins/cve-2015-...):

"""
We have reviewed the issues described in CVE-2015-7547 and have determined that AWS Services are largely not affected. The only exception is customers using Amazon EC2 who’ve modified their configurations to use non-AWS DNS infrastructure should update their Linux environments immediately following directions provided by their Linux distribution. EC2 customers using the AWS DNS infrastructure are unaffected and don’t need to take any action.
"""
if ($password == blah.crap) is insecure in any lang.

What I mean is, we solve one vector, but is always another (logic flaw vs stack flaw). Is there a truly "perfect" way to code? Is there any academic philosophy that is impossible to exploit?

I ask from a very ignorant perspective. I can barely program.
I wonder how much time is spent on deriving instances and whether some sort of caching would make a big difference. After all if datatype definition has not changed there's no need to change the derived code.
Coding: A Formality
You could put a lower limit on it by assuming the rest of the NPC members are flat broke: 463.8/2987 = $155 million per congress critter, or about 150x the average for US Congress critters.
It draws too much attention to itself to be body text, yes. It requires the reader scan the letters more than recognizing the shapes of words and moving on. (Yes, this is why we miss misspellings and even missing words. It isn't my job as a reader to catch that. The author should have a spellcheck program and, if it's at all serious, a human proofreader.)

There's a reason there's a distinction between fonts for body text and title text: Body text is all pretty simple, uniform, and easy to just scan through. Title text is meant to be a logo in its own right, more difficult to read, and therefore take up more of your time. Comic Sans is, arguably, a reasonable title text font. It isn't for body text. It's meant to ape handwritten text in comic speech balloons, but if you look at actual good handwriting, it looks more like body text than title text.
The SecurityHeaders.io Chrome Extension
I've had teslabox.com since 2003... Someone was sending certified mail to the pobox I had - I only checked the box every six months so I never got their letter. The sender had to have gotten that address from whois. I got a free domain from Google, transferred, anonymize, and closed the pobox last November.

Noticed recently that an Asian manufacturer registered teslabox.net, for their Tesla Model S accessory. Maybe someone wanted to buy my domain.
It is a reason for not reading it and worthwhile information.

Your comment however was arrogant and uncalled for.
Dear Commenters,

We have just updated our site and placed direct link to Atom Package Registry http://platformio.org/#!/platformio-ide

Sincerely, PlatformIO Team.
Self hosted gitlab is also slow unfortunately. I introduced gitlab to my company as a replacement for gitosis. It's been ok but we're looking to move to gogs.io which is a lot less clunky and slow. If gitlab really want traction, they need to fix their software to be on par with the quality of other open source offerings.
That's for speeding though. Parking is flat rate in Finland as well.
> Is patching this bug on any server a matter of running `sudo apt-get update` (or the equivalent of the linux flavor in question) - and then rebooting afterwards?

That's how a well-configured server works by definition. How much do you want to bet your server's well-configured?
Excellent. In German there is a word for this trust in yourself and that things are happening when they are happening: "Gottvertrauen" (literally: "trust in god", although often used in a non-religious context)
I could not find a config setting for httpd in OpenBSD that allows me to specify custom status pages.
What do they say at airport security with magnetic metal under your fingertips?
COMPUTER KEYBOARD DESCRIPTION
To be honest, superior nuts is being produced:

* self locking nuts

* different steel alloys

* different price points

* different certifications

Thinking that others jobs are simple is a mistake that I'm waning myself off: thinking that what others do is easy, - that they should just do this and that.
Technically one is in Daly City and the other is in Colma. But yeah, they're both within about 2 blocks of each other (opposite sides of the freeway).
What's strange is that they're investigating two international terrorists who committed mass murder and all they're talking about is their fucking iPhone?

What if after all this drama and forcing everyone to install backdoors and disable encryption they find out that they used it only to play Clash of Clans and take pictures of food?
The one at Serramonte Shopping Center is almost always busy/crowded. Parking can be absolutely awful. That's since it's a mall. When the "Colma" Target didn't have a pharmacy, that was the one advantage that the Serramonte one had over it.

Nowadays it's almost always better to go to the Colma one if possible to avoid the crowd.

I think someone told me a while back that the one at Serramonte is one of the best-selling Target locations in the country, which I can definitely believe.
What is also curious is that simple Google searches such as https://www.google.com/search?q=Advanced+Dugeons+and+Dragons... turn op decent scans of the materials on the very first result page. I don't think this was thought through at all. Is there some legal angle why they need someone that owns the book send them a personally scanned file?
So, good idea.

I'll make a webpage where I'll sell elementary.io then.

Obviously, the money stays completely on my account, but don't worry, the OS comes with a few additional programs I wrote (or, rather, will have written), like a nicer IRC client.
I feel the same about Ubuntu, it's confusing that the download page and /etc/issue refer to 15.10, but when searching for packages you need to know that's Willy:

http://packages.ubuntu.com/search?keywords=asterisk
Philadelphia began implementing this but typically screwed it up by charging you (and not telling you) a renewal multiplier of cost*n where n is the number of renewal.

Want to pay once and subsequently "feed the meter" twice? Gonna cost 6n vs 3n if you walk back to the meter and pay in person. Want to renew again? Total cost is 10n instead of 4n.

Pretty much everything the PPA does here is direct proof they're not interested in making parking a legal matter so much as a money-extraction matter.
The paradox ignores that more people than ever use computing devices, especially mobile devices. If we limited the view to users of software equivalent to those that used computers in the (say) nineties, the paradox might be less severe. But maybe then the programmers to create open-source code wouldn't exist either.
In 3 Years Reglobe Touched 81 Crores Cash Transactions from 116,000 Gadgets
If you look a little bit closer into camlistore, you'll see that it splits content with content-defined chunking, ie when there's a change in the middle of the file only this zone (camlistore targets 8kB) is really added to camlistore; there's an indirection between the file as an object and the actual content. That means that hundreds (or even thousands) of slight changes to the same big file won't change much.

Regarding misclicks, for camlistore everything is private by default; in order to make something public you have to build an authorization, which you give to someone. You also have the possibility to remove that authorization, and the data won't be publicly accessible anymore.
> Somewhere between base arithmetic and x86 is a sandbox people can’t just walk in and out of....Efficiently microsandboxing individual codepaths is a thing we should start exploring.

wat

The turtles need to end somewhere --- at the end of the day, you are writing something that becomes machine code, and you've lost the benefit of your high-level abstractions. The glibc bug is a perfect example --- glibc is an abstraction layer to make life safer that virtually all (excluding Debian and some other distros, but near enough) Linux code links against.

No matter where you put it, your stack is going to have a layer like that in it somewhere, and sometimes you're going to find bugs in that layer. Maybe next time it's a bug in your C-to-JS compiler that emits insecure code, or a bug in your `microsandboxing framework` that allows RCE. Shit, maybe there's a bug in your CPU architecture that allows RCE.

The glibc bug is an example of the sort of incredibly rare screwup you can't escape no matter how hard you try, and we're fortunate that 'the good guys' caught it before it had a chance to develop in the wild.
Self-driving cars could drive insurance companies out of business
Maybe we want Apple to lose this case.

If Apple wins, DOJ gets to turn around and push legislation mandating backdoors on the basis that terrorists are winning in their courts. The public will eat it up, because who the hell wants to side with some guy that murdered 20+ people in San Bernardino?

Conversely, if Apple loses, there are no real lasting effects. Encrypted phones are the new norm, and the 5C is weaker than its successors. If Apple actually can't undermine the encryption (ie: like the newer iPhones), the courts can't force them to do anything. The precedent of being able to force them to undermine underminable phones is meaningless.

The thing to fear is legislation.
Gotham by Tobias Frere-Jones. A very similar open source alternative is Montserrat by Julieta Ulanovsky
Myopia has a large genetic component, but genetics cannot explain the recent rapid increase in myopia, so there must be a pretty strong environmental component as well.

But we're only just beginning to understand what that environmental component might be. As others have mentioned, studies from Singapore have found that time spent outdoors matters more than close work. (And close work might not matter much at all).

Nobody is yet able to predict how myopic a specific person will be.

However, it might be sensible to start testing babies for the genes that influence myopia, so that we know to take extra care of the environmental factors for those children. Holding school classes outdoors, where the climate permits, would be a pretty low cost intervention. Actually, why not do that for everyone?
Ember.js Tutorials
Can someone explain the physics behind how the Earth actually accelerates because of this?
Why would they care? They are selling a Chinese made product to the Chinese.

Maybe not as profitable due to exchange arbitrage, but still profitable since the costs go down exactly as much as the retail price does. Engineering for the Chinese market already exists due to all the other markets, so it's essentially money left on the table if they don't.
HipChat Status
I did see that, and I think that Cringley is--like many other people who haven't paid attention--seriously misinterpreting Scalia's history on the court.

My own, admittedly amateur, interpretation is that he's largely internally consistent with his ideas of protecting person freedoms and advocating in favor of judicial restraint.

I see citizens united as an exanpsion of Scalia's attitude about protecting personal freedoms (and this is an expansion I disagree with, btw). His logic in Bergofell was that the court doesn't have the authority to meddle further in religious matters than it already has and needs to exercise restraint.

In my opinion, the argument is stronger in Bergofell than it is in Citizens United, even though I agree with the result of the former and disagree with the latter.

I could be incredibly wrong, but I think that over 30 years, Scalia has been a champion of individual rights and protections more often than not. Much to various people's chagrin at different times.

That has sometimes led to good results and sometimes led to bad. I feel comfortable in this case making the assertion that Scalia would have definitively come down on the side of Apple, and done so in the heavy-handed manner that he was known for and probably persuaded a fence justice like Kennedy to side with him in this case. But possibly also bringing RBG in with him at the same time.

Yes, it's all prognostication at this point, and I know that. But in my opinion, the bigger picture of Scalia outside of Citizens United and Obergefell are the history of someone who would have opposed the order against Apple.

Cringley is just being Cringely: bigoted, hateful, and wrong. As usual.

But then again, I could be really wrong. It does happen sometimes.
We can eliminate entire classes of attacks by using certain languages and technologies.

Simple, forgotten example: You can't just patch a running OS kernel from an application program anymore. There's hardware in the CPU called an MMU, or Memory Management Unit, which inspects all attempts to access memory, read or write, and checks them against a policy the kernel set which aims to disallow all unsafe memory accesses. (This is like nine kinds of oversimplified, but it's not actually wrong... ) The MMU will alert the kernel if an application program attempts to access memory in a way contrary to policy, and the kernel typically kills the program dead right there. That's what a segfault is.

My point is, prior to the MMU, the only possible response to "Applications can modify running OS kernels willy-nilly." was "Don't do that then." There was no way to enforce that policy. That's why MS-DOS, which ran pretty much exclusively on hardware either without an MMU or with the MMU disabled, had no effective security policy: Any application could modify the only thing attempting to enforce that policy at any time, and nothing could stop it. In the immortal words of Bokosuka Wars, "WOW ! YOU LOSE !"

We take MMUs for granted now. We take OSes which use MMUs for granted now. We no longer have to rely on the care and kind nature of strangers to enforce the basic policy.

The trade-off is speed: Adding an MMU to the path to RAM inevitably makes accessing RAM slower. There's no way around it. We see it as a rock-simple win-win tradeoff that we've almost forgotten that there even is a tradeoff, but our computers would run faster without MMUs. We've just, as a hardware and software culture, decided that it's worth it.

So. The discussion here is, "Which other tradeoffs are worth it?" Because there are other technologies we could adopt, hardware and software and a mix of both, which could completely seal off other classes of attack vectors, and we need to decide which of those technologies are worth implementing.
Add another zero to that and you're closer to the real figure, which doesn't even include ongoing expenses like the ramping up of the domestic security apparatus and the surveillance industrial complex created in the wars' wake.

ARRA didn't even crack a trillion.
You've always been able to add collaborators to private projects. What you miss out on is the team features, which isn't very much if you have a small team.
The timescale, I think. If the ice at the poles melts, the water immediately (days?) distributes itself along the geoid, the earth's moment of rotational inertia increases, it slows down. But, once the weight is taken off the poles, the crust rebounds over a period of thousands of years, making the earth less oblate, its moment decreases, it speeds up.
Hi! I am the patch submitter and I just wanted to make an honest contribution to fix something I thought was broken. I could not find a way to specify custom status pages in OpenBSD httpd.

The smart quote error was my mistake. I figured patches to email lists should be submitted in a signed email message and used Mail.app for the first time in a while (where I have it configured). Didn't see the auto corrected quote before sending. Contributed a new corrected patch which I hope works better.

I guess this patch will never be considered if the use of Comic sans is intentionally hard coded into httpd but at least I tried.
That said I think John McAfee and probably a few people on here could get in, so the tl;dr is ya they coming for that secure enclave.

Small note - in the case of this particular phone it doesn’t have a secure enclave. But yes, I’m sure parts of the US government want to use this case as a stepping stone to gaining access to the secure enclave via legally mandated means.

Once they have a legally enforced backdoor, that’s a mechanism that the security services can use worldwide to compromise any phone they’re interested in, as we’ve seen with the mandated wiretap accesses built in to phone switches.
Bingo. Not enough people in here are understanding the legal side of this.

Someone in this community could quite reasonably root against apple, on the basis that a DOJ loss would give the DOJ a lot of fuel to push for legislation mandating backdoors.

It's a very different situation when Apple can reasonably do something to undermine encryption and when there's nothing they can do, and the precedent going forward from this case is negligible considering that the 5C is the last holdout of an enclave-less iPhone. What we should fear is legislation that bars the creation of truly secure phones. A ruling for Apple might aid in the creation and passing of such legislation.
I find ghcid very useful. It reloads your code automatically when it detects a filechange.

https://github.com/ndmitchell/ghcid
http://neilmitchell.blogspot.de/2014/09/ghcid-new-ghci-based...
The argument is that once they have this precedent in hand, they can then use it to force Apple to alter the code in the secure enclave of all current Apple devices so that the security services can gain access to them on demand.

Or else, even if this case doesn’t give them sufficient precedent to force that kind of access, it’s certainly a legal stepping stone along that route, which is precisely why the FBI is taking the case all the way even though it’s clearly not necessary in this specific case - the NSA is perfectly capable of gaining access to the phone in question if they want to & according to Snowden they even have the legal right to do so since it was a work-issued phone where the issuee had signed over the right to scrutinise it at any time.
Thanks for sharing, this is very nicely documented.

Funny fact: it can be used as Grass Generator

Exponent: 7
Starting Spread: 35.3
Spread Reduction Constant: 20.5
Conservation of momentum
Are you sure?

http://www.city-data.com/crime/crime-Colma-California.html

It's a really quiet and boring place where you go to Home Depot and Target. It looks like theft is more likely than robbery. I don't live in Colma, but I know SF and Oakland are much worse.