skysight-inc/HackerNews huggingface dataset:
Remote Code Execution in the Baidu Browser for Android
Take a look at Eltechs' tooling - you can already do usable emulation for certain classes of software.
CSP rules are a good defense-in-depth measure to most likely limit the reach of vulnerabilities. They're not a cure-all that makes it so you don't have to understand HTML/text encoding.

It's like what ASLR and stack canaries do for buffer overflow vulnerabilities in C/C++. You still should try to avoid writing buffer overflow bugs, but if/when they do happen, the protections mean that the issue will probably just be a denial-of-service issue rather than an issue that lets an attacker execute code on your systems.
Amazing work from the author, as usual. For anyone who isn't familiar with the rest of Benedikt's work, it's absolutely worth taking a look at.
Hopefully. I'm willing to give Apple the benefit of the doubt here that this was unintended oversight. Practically speaking, iTunes should use exactly the same SSL infrastructure as Safari.
Someone still has to come up with new art styles for the machine to mix.
If it's the same as the previous models: no, the audio of the Raspberry Pi is pretty rudimentary (it uses PWM) [1]. However, you can use an external DAC to improve this.

[1] http://www.crazy-audio.com/2014/07/sound-quality-of-the-rasp...
Here's the backend it's based on:

https://github.com/jcjohnson/neural-style

and the paper:

http://arxiv.org/pdf/1508.06576v2.pdf
Easiest way is simply XOR the database auto-increment ID with a fixed number, then truncate to (AND to) however many bits seem reasonable for your site.

Not super secure, but good enough for this purpose.

Unless you have a long ID people can always simply try every ID, no matter what format you use. So fancy encryption on the ID isn't all that useful.

If security is important then generate a random 64bit number and store that, rather than let the database auto-generate a number.
No, the audio by default is pretty crap. There are several add-on daughterboards/hats available that use the i2s port to give better audio.
Right, except that Rust is a modern power saw with safety enclosure and C is a rusted chainsaw that only works half of the time.
What is most important for startups?
The limitation of this method is that you do need your own port exposed to the internet. The advantage of this method is that you don't have to trust a third party.

For the explicit example above, your guest's firewall would have to be pretty brutal to not allow port 80 through.
It's a cheeky way of saying don't rest on laurels. So you landed that client? Great, now let's never speak of that again and move on to our new targets! Success or failure, there's very little profit in dwelling on things.
my favorite line:

( ) the length of the solar day is ultimately unbounded
> Overcommit is not actually relevant.

It is if you ever want to exercise the code paths. Overcommit means you never get an out of memory error. Your process just dies. Kind of like it would if you just aborted.
For a hobbyist who is a windows user, linux isn't exactly user friendly. Every simple thing takes time. I managed to get my thing working with a little bit of python but it took me a day to do something that would take me 10min in .net and windows.

I don't think regular linux users realise the importance of a good UI to make linux go mainstream and be accessible. No UI for the firewall, no UI for scheduled jobs (CRON), no UI to give the right permissions to enable some script to execute. Lots of acronym based commands that are anything but intuitive.

As is, my experience of linux is that it is a "RTFM or die" system.

[edit] and also the python 2 vs python 3 thing, which technically isn't linux's fault but that I wouldn't have to deal with if I could use .net. This was my first experience with python and I lost two hours on a bug to realise that python 2 wasn't compatible with SNI. And then you have several versions of python installed and to run anything you have to specify the right version and sub-version of python in the command. This was an awful experience.
Doesnt HDMI audio provide as good quality as any i2s connector? Or do you just need i2s for interfacing with your own microcontrollers/older recieviers, which dont necessarily have hdmi (and thus copyright compliance, making it more expensive)?

Last I read Raspberry Pi should allow for 5.1 hdmi passthrough or at least DTS.
Greek startups to look out for in 2016
NOTHING is free in this world.
TinyChat – Lightweight Chat application
Hardkernel have the ODROID-C2 in beta for a release in two days' time for 40USD - http://forum.odroid.com/viewtopic.php?f=135&t=18683

Compared to the RPi3, this extra 5USD gets you gigabit ethernet, 2GB DDR3, higher clock speed, and HDMI 2.0 capable of 4K60.
It's the same as what Yoda says, "Do or do not, there is no try." Trying and failing is the same as failing. You don't get credit.

Now, maybe you learned something from your failure, in which case you have another chance.
Is it a code generator?
I think other boards should get a shot too, but no one else has managed to rally such a community around them.
A language like Go that has political campaigns encoded in its compiler has creepiness written all over it. For me, this is a no-go area, pun intended.
What Are Food Incubators and Do They Create Viable Businesses?
WebTorrent actually implements the bittorrent protocol, and can be used as a nodejs bittorent client. It extends the bittorent protocol to do p2p sharing inside the browser (but you only can connect to other people using the webtorrent nodejs app or in-browser app, and not all the bittorent network)

FilePizza and Bitfly are much simpler implementations, doing 1-to-1 file transfers in the browser using the basic WebRTC Datachannel API.

Looks like FilePizza is now using WebTorrent too now, as it's mentionned in their FAQ:

"Where are my files sent? Your files never touch our server. Instead, they are sent directly from the uploader's browser to the downloader's browser using WebTorrent and WebRTC. This requires that the uploader leave their browser window open until the transfer is complete."

https://github.com/kern/filepizza
Actually (unrelated to Pi 3), audio was recently improved in an experimental driver.

From the engineer who worked on it:

> I reimplemented the original PWM-based 11-bit audio @48kHz as 7-bit 2nd-order Sigma-Delta modulated at 781.25kHz. The effective noise floor with this scheme approximates that of CD-quality audio DACs.

from the forums https://www.raspberrypi.org/forums/viewtopic.php?f=29&t=1364...
"Despite students pouring out their heart and souls, in the end, the majority do not win a prize. I am a staunch supporter of rewarding participation and effort. If this sounds like advocacy for mediocrity, instead of merit, it is not."
I got confused when I read that section, I realized what he was trying to say was, "When things go wrong in your company, your employees don't care about your excuses... Nobody cares about your excuses."

And that's true, if my company stops giving me a paycheck, I will be gone very quickly. No reason to stay around that kind of company. I doubt you are much different.
HDMI audio requires an extractor (so one more wall wart + device), and I'm using a Pi2 for home cinema. And I'm one of those with an "old" HiFi setup without digital input, just analog.
Build a database, randomly assemble.

Recurse.

Use whatever language generator deemed appropriate* to assign proper titles for the newly-evolved art movement.

*this may be delegated to a meat-computer, in pity.
> About two years ago

So the Raspberry Pi is four years old... (according to the article)
ODROID-C2 64-Bit ARM Development Board Is Now Available
Too bad it still doesn't have SATA, USB3 and Gigabit Ethernet.But this is already big step forward, wifi, bluetooth and a better cpu for the same price. The next generation will look even more promising. Currently I am just using my obsolete wifi dongle for my rasp
So my first, totally picky question, is - is the onboard wifi (woo!!) using a free and open driver in Debian?

That would be awesome-er
Furthermore, even if you already know this lesson, hearing it again can help you get into the same mindset. Kind of like listening to Eye of the Tiger to do a workout.
Yeah it was mostly the senders firewall (or the NAT you find on most consumer routers) that i had in mind.

The OS may also balk at opening such a low port as a user, now that i think about it.
Is this more suited to robotics?

The main stumbling block for the previous Pis was a lack of real-time OS e.g. RTLinux port.

This was discussed recently on Proggit recently https://www.reddit.com/r/programming/comments/3zf04e/where_a... after I blogged about how I couldn't find a Pi robot kit to buy my kids last year: http://williamedwardscoder.tumblr.com/post/136598180858/wher...
Everything in jQuery is DOM manipulation. (Well, except for the little extra parts that aren't like $.ajax.) Tons of websites' code is primarily just jQuery calls because DOM manipulation is what makes things happen on the web.

The only native DOM API calls that can get you an XSS vulnerability are sets to `innerHTML`, `outerHTML`, and maybe some few others. Most of the methods for getting things done don't have any possibility of introducing an XSS issue. With jQuery, many methods including every method capable of inserting elements is also capable of introducing an XSS issue depending on the types passed to them. So you when you're reviewing for XSS issues, you have many more places to check, and analyzing the calls to jQuery methods to see if they have the potential for XSS is much more difficult because you have to trace the path backwards from every single call to see what types are set into the variables passed to the methods.
Engineering – Converting Buses into Mobile Showers for the homeless. [Video]
Monetizing Mobile Gaming
Why iOS developers should try React Native
Lets look at other media and see if your conclusion is correct. Do TV networks vet, produce and handle the ad-client and ad-publisher relationship, or do they mainly interact through marketing firms? The answer: they work mainly through marketing firms. The TV network is still ultimately responsible for the content they broadcast, as dictated by law.

Do newspaper work with individual advertisers, or do they work mostly through local marketing firms? The answer is again the same as above. Buying a news ad is commonly done through a marketing firm and the news paper is always responsible for what is printed.

Very few publisher in any media deals with individual advertise clients, and yet it works. Responsibility is done through contracts, through professional liability and standards, and as last resort through business insurance. As a result, its quite uncommon to see illegal ads on physical newspapers, on TV, on busses, and on other physical objects.
Similar - got the kids one for Xmas thinking "this will last a while". They are still in the packaging while I fuss about other things. Ah well, they can get faster boards in a while.

Mine craft runs anywhere
Given that this mostly indicates that cars are just a better product than public transit for the individual, one might hope that this would be interpreted as a challenge : can we make public transport as good as having a car ?

I wonder if public transport would still be cheaper than having lots of cars if it were demanded to provide the same service : pick up anyone anywhere, including goods, and bring them to their destination, without having to change vehicles halfway.

The thing for me is, even with absurd levels of traffic, my car takes me to work in ~50 minutes, 20 minutes if there's no traffic. The only public transport option would do 1.5h, and would always do 1.5h (with regular delays to 2h I might add). Furthermore, I wouldn't be able to take much more than a laptop bag on public transport, whereas with my car I can do groceries on the way home.

And the only thing the government is talking about is making public transport more expensive.
They don't lose anything compared to monomorphized templates. You can only access methods of the trait in both cases.
Just the Salmon? ;-)
The majority of people can ultimately attribute meeting nearly all of their friends to either work or school. Having friends also makes meeting new friends both easier and far more likely.

People who move around often are hit pretty hard by that dynamic. I'd say people with little to no educational background who then work remote or otherwise solitary jobs also have it rough in that regard.
Based on Gambit Scheme, which compiles to C. Then you use the C compiler for your target platform.
>> Are there any apps in the app store that are currently built using this technology?

uSquish, the simple example game included in the LambdaNative repository, is available as a free download on the Apple[1] and Google stores[2].

[1] https://itunes.apple.com/us/app/usquish/id647308142
[2] https://play.google.com/store/apps/details?id=ca.bccw.usquis...

PS: I am not from the LambdaNative team.
i'm not sure this is exactly a revelation. did i miss something?
If it had all those things it would be a PC, with a price tag to match. If you need those things, build a PC.
Every country wanted something out of the EU other countries may have not agreed to, the French wanted agricultural subsidies. If you have 28 countries in a trade union, you're bound to have disagreements.

The government in the UK was particularly enraged about FTT (Financial Transaction Tax) a couple of years ago & that is what has actually led to this whole referendum thing. Every country is good at its own things and they wouldn't like it if was attacked. Imagine a tax on manufactured exports, Germany would have a fit.

It's not like there are policies in the EU that attempt to reduce trade in financial services such as the tobin tax on financial transactions. Italy enacted the tax and its reduced trade quite considerably.

Every country has it's own fight in the EU, it's not just Britian, France had the subsidies problem, Greece had its bailout problem.. each has had its own. There isn't a reason for Britian to be treated differently.

Sweeping generalisations you say? Have you not asked Frenchmen their opinions of the UK in the EU? There are a couple of firms that have done unbiased polls all over the EU and Frenchmen quite simply do not like the UK in the EU, some things just don't change.

CDG is long dead but he is still relevant as he chimes in with the unchanged opinions.
Like http://www.theverge.com/2016/2/24/11094524/prt-transit-histo...?
I could have used this the other day... https://twitter.com/mwpastore/status/698207163550994433
The Best New Tech We Saw at Mobile World Congress 2016
I guess for anything IBM related, you can still throw many at IBM. With other companies, you might be out of luck.
Sorry about that, it was a private note. Fixed now.
i'm not sure if its the majority... i used to be this way, but as i got older i ended up making friends in more 'traditional' social settings too (i.e. down the pub) and these friends greatly outnumber the "met them at work or school" ones now.

given that i didn't work with the vast majority of those people i would /guess/ that they are in a similar position.
I'm writing OpenGL code. I know lots of languages claim support for OpenGL, but in my opinion dealing with gpu stuff is something best written in C or C++. All the guides, all the answers to questions, all the popular books, everything out there assumes you're using C or C++ when you're working with GPU code. It's fine. I like using C++ for this. OpenGL in any other language and you're a second class citizen at best.
Before that becomes the main problem, that other problem must be solved where you give it your picture and the Mona Lisa whose style is to be copied and the way it copies the style is it paints her eyebrow atop your mouth. 'Cause it's not like this thing can really distinguish between "style" and "content". What it does is it pastes patches from the "style" image onto the "content" image. Sometimes the result is interesting, much of the time it's between boring and terrifying. It's cool and all, but it's not much more intelligent than your favorite Photoshop filter.

"Going the way of the dodo..."
Happy to help you - the default "NOOBS" installer for Pi should be GUI all the way through.

The UI for iptables/ipfw should be on Raspian and is called "Firewall Builder"

Cron is taken care of here: https://blog.bartbania.com/linux-2/cron-jobs-with-gui/

Right clicking a script file should give you Properties, where you can select Execute permission.

There's a critical need to attract more UX designers and testers to something like Raspbian, and I think the Raspberry Pi Foundation is in a good position to do that.
not enough to put me off... never had free parking.

try no parking (really no parking, not just what people think of as "no" parking) and a congestion charge... and actually i would still drive if not for traffic. trains are rubbish.
And particularly worrisome are the little plastic beads that make your ex-foliating shower scrub so pretty looking. They're also made of plastic, and all of it goes down the sewer. In insane quantities.

https://en.wikipedia.org/wiki/Microbead

https://en.wikipedia.org/wiki/Plastic_particle_water_polluti...
Kirkkonummi – Kieli- ja kulttuuriryhmien opetus
The original (and still primary?) target market is clinical applications on mobile devices, where I assume it is highly desirable to have everything look exactly the same across different devices. This aids in accuracy when describing patient data remotely.
> I did mention another common way to prevent this is to have a content staging site, where all your content is edited; this should ideally be _completely_ separate from the public site. When content is published, it's published to the main site from the staging site.

Modern non-enterprise CMSes make this very hard. Wordpress and Drupal mix configuration and content all over their databases, and there's no "sync this content from stage to prod" that works reliably (i.e. they fail as soon as there is a single non-standard plugin loaded).

I haven't evaluated Drupal 8 yet, but I'm not counting my hopes too high.
"can we make public transport as good as having a car ?"

i wish the people involved would take that challenge very seriously. :P
The guy who wrote 'The Revenant' novel has a seriously impressive day job
Ask HN: Any devs/engineers looking for a designer/marketing partner?
I'm a product designer for a startup in SF during the day, but I've been itching to create a side project.

I've built a couple of successful side projects, but they were smaller, and mostly content type sites, since the extent of my programming is HTML/CSS/jQuery and WordPress. I would also say that I have a lot of marketing experience and am pretty connected in the startup/design community.

Anyone interested in partnering up to build something? I'm interested in possibly an app or SASS product. Let me know what you think.
When I go to a cafe, it's really about the space. I pay for a great space to hang out and chat with someone. It's less about the actual beverage if I'm being honest.

That's why I don't particularly care for making coffee at home. I enjoy hanging out at the coffee shops for extended periods of time. I'll read, get some work done or just people watch. It's fun and my way of giving back to the shop is to buy stuff like a bagel and some coffee.

I do have a daily coffee habit, but more so as a pick me up after lunch at work. At work we have multiple ways to make (free) coffee so can't really complain there! I've been trying to drink less coffee though. I should really stop eating so many carbs during lunch. It really slogs down the rest of my day and it makes me need coffee.
Gameloft Board Rejects Vivendi's Takeover Offer as Too Low
The article started off so promising. Just when I reached the part where I expected the author to begin making their point, it was over and all I saw were comments.
It was pretty bleak except maybe the last paragraph. "Perhaps this occasional tendency to keep friendships from getting too deep, and being willing to let them go [...] comes from the knowledge of how hard it is to leave people."
When the megacorps like Alphabet and Apple start building their own cities, the nation state will really be in trouble.
Fabregas dan Branislav Ivanovic mencetak
Snapchat Debuts Stories Web Player for Academy Awards
Raspberry Pi kinda won the race not because it had superior hardware, but because of the community it sapwn. You have an order of magnitude more content online about the Pi than the competitors.
http://images.math.cnrs.fr/Un-nouveau-Bourbaki.html
It's Big Think, not Big Talk.
My contact details are in my profile. I've got some holiday time now, I can help you directly if you want.
FaceTime is also encrypted, end-to-end, iMessage too.
I didn't read it that way. That authors' goal is towards assessing progress in the field. To some extent, adding more researchers is like adding more CPUs; fuel for an industrial process, which should be corrected for when trying to gauge the rate of return on those investments at the current level of technology.
We took a look at the new Pi 3 in our blog post here: http://blog.pimoroni.com/raspberry-pi-3/

We have them available shipping worldwide in our store! https://shop.pimoroni.com/products/raspberry-pi-3
Triforce Overload, Sierpinski Pyramids
> Easiest way is simply XOR the database auto-increment ID with a fixed number, then truncate to (AND to) however many bits seem reasonable for your site.

XOR has a trivial known-plaintext attack, and you don't even need to determine the entire key to get something useful. If you can create a few posts in order and obtain a series of sequential items, you can obtain the low-order bits of the number XORed in, at which point you can easily browse around for adjacent items from any post.
I would like to see that map with metro areas but with GDP figures (and/or GDP per capita) in stead. I find GDP per capita figures hard to find for cities.
How to use LESS in Drupal
Space Photos of the Week: The Milky Way Gets a Close-Up
One language I encourage people to try is myrddin http://myrlang.org/.
I understand losing time to silly bugs and issues is frustrating. I'm a C# coder professionally but I've been using Linux for over a decade.

It's much, much better than it was 10 years ago. You can even use C# these days! [1] [2] [3]

[1]: http://www.raspberry-sharp.org/

[2]: https://dotnet.github.io/

[3]: https://raw.githubusercontent.com/dotnet/corefxlab/master/de...
Ouch. I've worked remotely for years, have a history of moving, and haven't been in school for over a decade. I can easily vouch for your statements, not to mention two other factors - being in a Southern European country where "there's no future" (and thus it's the locals that move) and being in my 30s when most social circles are already established.

It gets more complicated depending on the type of country one lives in. It's been said that Portugal, where I'm living, doesn't have so much of a social culture while Spain very much does. This weekend I went to a Spanish border town and saw infinitely more people, of all ages, out and about. Crossing an artibrary EU border (just a sign) and suddenly everything changes. The problem lies in what this means for the individual. As it has been explained to me, social cultures are like peaches - easy to breach, hard to truly enter - while less-social cultures are like coconuts - hard to breach, but easier to truly enter.
Probably not outside of kits. It's my understanding getting them to the price made them unviable for the manufacturers.
A couple of years ago I bought a Raspberry Pi 2 to use as a music server. However, when playing through a Benchmark USB DAC I hear pops and clicks in the audio. Instead I bought a Cubox and use its Toslink output which works perfectly. Does anyone know if the USB audio issue have been fixed in the third version of the Raspberry Pi?
Check out https://www.tinfoilsecurity.com. It looks for XSS, and about 60 other different types of attacks.

(edit: full disclosure, I'm one of the founders)