skysight-inc/HackerNews huggingface dataset:
You misunderstand how Debian works.

Debian practically never updates to new versions of software (until you upgrade Debian). Instead they "backport" security fixes into the older software versions, preserving the old version numbers but adding some stuff on the end to reflect Debian's changes. The intent is that you get "only" security fixes, never features or improvements.

So when you see "OpenSSL-1.0.c-stuffgoeshere" you are not looking at "OpenSSL" openssl anymore, but a version that Debian customized, probably to add security fixes. I say "Debian" here, but really most distros do it (RHEL, Ubuntu, CentOS, etc.) I'm just not familiar enough with their processes to comment specifically.

Debian has disabled SSLv2 in its OpenSSL packages since 2010 [0], and if you are running a Debian OpenSSL version later than 1.0.0c-2 your OpenSSL version is not vulnerable. The current version of OpenSSL in stable is 1.0.1k-3+deb8u2, so unless your server has been under a rock for 5 years you should be fine. And if it's been under a rock for 5 years you have a lot of security vulnerabilities to be worried about.

Of course you may have installed OpenSSL from somewhere else, or you may be using some other software for SSLv2 that doesn't involve OpenSSL at all. So merely upgrading your OpenSSL version is not a silver bullet, you need to think about every TLS deployment you have and how it might be used.

More broadly, use this vulnerability as a wakeup call to learn about "where your software comes from", because everybody has a role to play in staying secure, including users. Debian is maintained by volunteers; you might be happier with a commercial vendor who guarantees response times. Debian backports security fixes; you might be happier with a distribution that upgrades to new vendor versions which may have avoided the confusion here.

[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=589706
Show HN: Export Data from PostgreSQL to JSON, CSV, XLSX, XML
Chess-dataviz – chess visualization library written for D3.js
Why you should pay employees for free-time Open Source contributions
You are only moving massive amounts of money if you are moving massive amounts of money. Having massive amounts of money invested in ETF's doesn't mean you are executing massive trades if you are holding endowments and your only trades occur when you invest new gifts, withdraw a constant income stream, and rebalance your portfolio mix on a regular basis.
Ford, Fiat Chrysler Crush Estimates for U.S. Sales in February
> popular Google-Internal Meme Generator

Never heard of this before. So Google (allegedly) have their own 4chan-alike service internally?
I have a recent Samsung refrigerator, which has a nasty habit of forming ice in the fan blades. Samsung refuses to further warranty it....

So, I use 2 thermistors and a photoresistor and equipped them in my fridge. I used an Arduino Nano clone with a nRF24L01+ chip and MySensors library for getting data.

The data then is posted to my MQTT server (Mosquitto) and also saved in a file. The file is parsed by a graph library and is displayed on my http://[hash].onion/fridge . Also, if I detect >45f or higher after last fridge door open event, I throw an alarm (chirp on piezo speaker and email).

And yes, It's saved us at least 1 fridge load of groceries. We can't afford to buy a fridge every 3 years, even though throw-away culture sure would want us to.
Google self-driving car crashes into California public bus
Cisco is buying CliQr for $260M to expand in hybrid cloud management
Nice. Its simply bit still a little unique, exactly as the title promises. A little heads up: http://imgur.com/YUF4xIh (latest Chrome on Mac)
Satirical Reddit Front Page from the Year 3016
The news report is wildly misleading, the underlying study barely measures democracy at all. A more honest name would be the "governments that do what Bertelsmann Stiftung wants them to do index".

http://www.bti-project.org/en/index/methodology/

Various non-democratic elements that they include in the methodology are "No interference of religious dogmas", "market based competition", "anti-monopoly policy", "anti-inflation policy", "social safety nets", "equal opportunity" (under welfare regime), "GNI cc PPP rescaled", "education index", and all sorts of other things.

I'm all in favor of market based competition and anti-inflation, but you can totally have a democracy that lacks these things - Greece, for example. Voters might be influenced by religious dogmas and vote against market competition and equal opportunity; this is a feature of democracy.
I think this is the tldr; When operations use the (Intel) CPU cache they complete detectably faster than when using system RAM. When OpenSSL performs an encryption/decryption (five squaring operations followed by one multiplication) it divides up which cache banks it uses by multiplier number. If an attacker on the same system has filled the CPU cache banks they can detect which section of the cache bank has been written to and how long it takes. That information and knowledge of the OpenSSL cache use obfuscation scheme give the attacker the multiplier numbers used for encryption.
More than 11M HTTPS websites imperiled by new decryption attack
I tried watching it in the original Japanese, but I did not get very far. I just hate how obnoxiously loud and violently the language sounds in the movies.

To exaggerate a bit, a hypothetical scene which has one character confess love for another can in Japanese sound like a hateful declaration of war. Lot of shouting.

Edit: Since this comment seems to be getting downvotes, I should add what I thought was obvious: the above is just my opinion, that's how the movies in Japanese sound to me and my ears.
I applaud trying to spread the news about these awesome technologies, but personally I think it would be much more helpful to _not_ hide what's going on behind a template generator. The build.boot file itself is easy enough to write[1], and that is really the huge value proposition with Boot vs. Leiningen plugins.

[1]: A simple example: https://github.com/pandeiro/jamal/blob/master/build.boot
Or just matching the title. Because that seems to be pretty constant.
The concepts of malnutrition and abysmal living standards, on their own, are proof to the contrary. Prior to the industrial revolution, most human beings faced these realities. Today, a tiny fraction of individuals deal with these issues.
Geneva Motor Show: Rolls-Royce paints it black
Is it just me or is 1s latency terrible?
Yes, seems that way.
i heard such claims before, you can safely ignore them. nobody is jumping even 2x in performance, not straight away, it's a stupid move from financial point of view and they never did it before so why start now.

extremely happy to be proven wrong in near future :)
The Singly Linked List Data Structure in JavaScript
I was wearing glasses for years when I decided I'd rather not see perfectly and not have to wear them. I only do when driving now. Which is why I am less than excited with the perspective of having to carry more stuff on my head.

And I am sure that many people will.

I am not saying that VR headsets won't be useful. I can see a future when your laptop will basically just be a keyboard, and your VR headset your screen. Doesn't mean you will wear it all the time though.
Article uses the term bloc 60+ times without ever defining it other than to say it is small and black.
West coast carbon monoxide explosion could be precursor to major earthquake
Common implementation of overcurrent protection on USB ports consists of polyfuse on VBUS and feedback pin from this fused VBUS to controller (to detect tripped polyfuse), on some devices such polyfuse is even shared by multiple ports.

In theory, original USB1.1 expected the trip-point to be programmable, but most USB hosts are not implemented that way, because it requires some kind of low-drop high-side power switch that tends to be expensive.
HTTP can be fast-enough, but it is also a poor choice to communication between microservices. Many people learn about REST and just assume you must use HTTP. It's an awful protocol with 2 decades of technical debt.
The Last Film for Millions of Classic Polaroid Cameras Is About to Go Away
Honestly, I think that would require a generation or two of a modified education system to bring about the desired result. You gotta deal with the here and now sometimes.
Boomers' children are slightly better. They haven't really known rationing so aren't in the position where they really want to push "luxury" crap on their kids. It's been a slow realisation but I think we're only just getting to a point where as a population we understand that feeding children crap means we get fat children.

Food waste is something slightly different but I agree, there's a very consumerist approach to food these days. Most are disconnected from production so don't care where it comes from, how much effort goes into it, how many welfare sacrifices are make to get its cost down.

Fixing both of these issues is done by getting people making and eating real food.

Re my original comments, OT is a geriatrician in England. She's seeing people in their 60s and 70s who have had to move back in with their parents to be cared for. You shouldn't be having geriatric issues until you hit your 80s. She obviously doesn't have the direct experience of other generations but her colleagues tell me this is a relatively recent thing, with this generation.

It'd be interesting to munge through a ton of medical data on this.
(Webinar) Codeship Jet: The Codeship CI Platform for Docker
There is Love (but it's not webdesign): https://love2d.org/
Yep. The speed destroys every other virtualisation app on OS X.
In London, tech does not rule the city. No single industry does. Not even finance.

Apart from the City, which is quite literally ruled by the finance industry. [1]

[1] https://en.wikipedia.org/wiki/City_of_London#Elections
Here are the 18 books Wall Street will be reading this spring
> According to the info page, SSLv2 can only be disabled on OpenSSL by having the right (newer) version of OpenSSL installed.

Not quite. If you disable the SSLv2 protocol, you're fine. If you have the SSLv2 protocol enabled but all the SSLv2 ciphersuites disabled, you're not fine. You can disable the SSLv2 protocol in versions of openssl previous to today's.
Bit of a tangent, but in a fit of snark a few years ago I wrote a bash "task runner" in the vein of Grunt and Make:

http://manuel.00null.net/

Not very useful, but it kept me amused for a weekend at least.
> If the charging device can use more current, nothing happens.

That's not true -- if you put a power supply capable of supplying, say, 10 amps at the end of a wire rated for 0.5A, and then you connect a 10 amp device to that wire, the wire will get very hot and then melt.

If this wire is on a circuit board inside a device, the resulting heat may destroy the components nearby and/or start a fire. If the wire is a USB cable, the cable and/or connector may melt.

Most of the wires / traces in an computer or smartphone aren't capable of carrying the full amount of current that a battery or charger can supply. That's why protection circuits are required, and why USB 3 has a complicated negotiation process around how much power the bus-powered device can draw.
Would that be a capitalistic move to suppress land prices?
Add Code of Conduct to Underscore
This is true, both my bosses worked for a larger well respected endowment about a year ago. The firms are not doing well and at least this one is not and there is talk if going to the strategy here.

Basically a fund of funds with a bunch of mutual funds. They are facing competition for PE deals and maintaining higher risk trading desks with high cap costs.

I would note that while the numbers in the article did beat performance now could be the best time to have a trade desk. Most indices look like this

/\/\/?

Not
/
/
/

So having a group work on minimizing that could be profitable
I've used it in production code for the last 10 years. Used in both C++ and Python flavors of the lib ... works great!
> If she has a software patent, it could mean she understands how the system works, you wouldn't hire a lawyer who doesn't have a title, on the other hand, one that has written a law would appear more knowledgeable.

You're being too considerate. It's not like hiring a lawyer who's written a law or has a title. It's like saying a lawyer needs to commit a crime to be a better lawyer.
Twitter, Google and AP Launch Tool to Monitor Election Buzz
And why not Akira?
SPARQL endpoint for the Italian Senate data
https://test.drownattack.com/?site=mail ouch
Wild new invention
Wow, 2 other people in the universe who actually care about this stuff. I thought I was the only one!
Announcing Microsoft HoloLens Development Edition open for pre-order, ships 3/30
The Industrial Revolution is a very large, complicated suite of changes. If we hold as a spectrum capitalism in one direction and mercantilism in the other direction, on a single line ( for simplicity's sake ) then most of the excesses attributed to capitalism begin to look more like mercantilism than actual capitalism.

People like Henry Frick just didn't know any better because it was all new.

Capitalism works well at eliminating production as a bottleneck. The rest is up to us. There's generally another bottleneck. Much of the 20th Century was about logistics.

But it's sort of dangerous to say that "capitalism was limited" - the thing that limits capitalism is economic busts. It's dangerous for two reasons. One, it's extremely hard to do at all, much less well, and two, you have to ask yourself if it ever actually was done to start with.

Peter Whybrow has a very good presentation on one of the CSPANs using Adam Smith as a yardstick for what may be wrong with capitalism today.
"Extend the use of state remote computer hacking from the security services to the police in cases involving a 'threat to life' or missing persons. This can include cases involving 'damage to somebody’s mental health', but will be restricted to use by the National Crime Agency and a small number of major police forces."

I didn't think I could be surprised, given that the UK hands out "anti-social behavior orders," but now they want to hack the trolls?

edit: I can't HTML
Depends on whether these results are net of their management costs.
Your claim is that capitalism solved poverty and didn't create any instances. I'm pointing to an instance where people became impoverished because they were rendered redundant from capitalism. That's all I'm saying. You seem to be arguing against something that isn't my point.
This is interesting! Shoddy writing int he Fortune piece though.

"The amount handed over [to charity], though, is not likely to be $1 million, because of changes that Buffett and Protégé made in the wager a couple of years ago"

One paragraph later:

"Buffett also issued a guarantee: He will pay the winning charity $1 million if the Berkshire stock bought isn’t worth that much at the bet’s end."

Nitpicky I know, but it sounds like the winning charity is guaranteed $1 million.
When will this trickle down to wxPython?
dragonwriter put it very well in terms of religion. Plus, I'm quite sure people of differing religions (even devote ones) can become friends. I do let people choose an age group and a category ('professional', 'creative', or 'blue collar') so you can be placed in a group of your peers. But I think having diversity in groups is very useful, and I'd hate to exacerbate social segregation.

Krewe is not a Tinder or Match.com marketed for making friends. It's doesn't work anything like that, because making friends is not like finding dates. I think what makes churches, as well as stuff like schools, sports teams, fraternities, community service organizations, etc, so great at helping people form lasting, meaningful friendships and relationships (and why people love them so much) is that they really are just a group of people getting together often. You don't need to find the absolute best or most compatible people for you--you get to have multiple friends of varying closeness after all. You just need to have access to people who you can see frequently, build connections with, become involved in each other's lives, and create a culture of new, shared interests, inside jokes, traditions, etc. It's really how human society has worked since its very inception.
Cisco to Buy Cloud Management Provider Cliqr for $260M
Facebook's LATAM VP Arrested in Brazil for Not Releasing WhatsApp Data (PT)
HOW THE GOVERNMENT'S DRONE REGISTRY MAY HAVE BROKEN THE LAW
Shoutouts and Shoutbacks – Instant feedback on features releases
Here's a link to a video showing the damage to the Google car: https://youtu.be/wBU9zsGQR5k

Here's a link to the DMV Google traffic report: https://www.dmv.ca.gov/portal/wcm/connect/3946fbb8-e04e-4d52...

From reading the above report, it seems it was officially only a one-lane road, but the road was big enough to handle two-streams of traffic. The google car could have just stayed in the middle of the road, but instead, was hugging the right side of the road in preparation for a right-hand turn. Due to sand bags next to a storm drain, the google car had to "merge" back into the one-land road to get around the sandbags. Considering it's still a one-land road, the bus driver should have yielded to any car that was in front of it. I'd place a majority of the blame on the bus.

What I don't understand: Why doesn't the Google car have video of the accident? Or if they do, does anyone know if they will share a video of it?
WxQt sounds a bit of overkill.
Most of the UK already can't think of anything worse than living in London, and you want to make it 5 times more crowded?!
There already exists a renewable surplus of food, water, and shelter but so much of it goes wasted every year. So poverty is not a problem of production but of distribution.
iOS Project Boilerplate
Here's OpenSSL's announcement on disabling SSlv2: https://marc.ttias.be/openssl-announce/2016-03/msg00002.php
> It took almost hundred years from the start of the industrial revolution before real wages started to grow.

Even the most pessimistic view suggests that real wages grew, especially after the conclusion of the Napoleanic Wars. [1]

> The real benefits from industrialization were realized after hard political changes.

The real benefits of industrialization were immediately realized via mass production of widely desired and previously unobtainable goods. This should be clear from migratory patterns: workers abandoned the countryside en masse (in spite of city living/working conditions) for a reason. Enclosure laws were not a major factor until 1845.

> You don't create middle class from mid 18th century society.

Of course you do. The rise of the managerial and professional classes is a direct consequence of the Industrial Revolution.

[1] http://www.nuffield.ox.ac.uk/users/Allen/unpublished/pessimi...
Both as a user and a developer, I would prefer a lenient, lazy approach over an over-zealous over-pedantic approach.
As much as I value Wikipedia as a resource, I've personally never understood the culture behind it. Long-term, to me, it's unclear what the future holds for it.
Ex-Oracle evangelist gives tips for getting Java 9 ready
early adopter != polished new technology. just one question - what games/software would you be using it after buying right now? usually bundled stuff last couple of days, max weeks
Show HN: React-Most – A Monadic Reactive State Container
"This drone did not testify."
The bus is considerably more dangerous than a car, even while traveling at a significantly lower speed.

The potential damage may be greater, but significantly lower speeds creates a much greater risk of some accident. All things considered, then, it's not clear what's worse at the bottom line.

The chance of an accident is greatly increased when vehicles are traveling at very different speeds. See, for example, http://priceonomics.com/is-every-speed-limit-too-low/
> Googlers and Xooglers receive no special treatment. No current Googler would risk getting fired to help a Xoogler. No conspiracy theory required.

Unless the person knows he is a future Xooglers. Come on, corruption is everywhere and employees do bad things all the time. The employee(s) may be paid for doing that.
I'd be surprised if the actively managed funds had less risk than the market.
I have taken transit all my life, thousands of trips, and have never seen any evidence of this.
If you look back through the history people have always said that.

People were saying headphones will never become a thing because no one likes to put something clunky like that on their head and ears. Now it has become a fashion item too.

Same thing will happen with these VR headsets.
It's not enough to not run SSLv2 on the target; SSLv2 can't be available on any server that shares the same RSA keypair. It's a cross protocol attack, where attackers use the SSLv2 server as a tool to attack the TLS server.
> But Heartbleed was the first one

Perhaps with a logo - I never really pay much attention to logos - but it wasn't the first to have an accessible name. Just off the top of my head I can name 3 SSL vulnerabilities that predated Heartbleed: BEAST, CRIME, BREACH.

Personally I can't see how having a logo changes much in terms of press coverage since radio and printed newspapers tend not to publish the logos, online publications have a large resource of stock images they can use (eg Getty) and the TV would likely want video footage anyway.

I think the nature of the bug with Heartbleed also played an important factor in it's coverage. It was quite a simple exploit to explain to the lay-person (albeit imprecisely) when compared to BEAST, CRIME, BREACH, POODLE, etc which require a much greater understanding of SSL/TLS. We do see other unbranded exploits are reported by the mainstream media, such as websites being hacked, DDoS attacks, etc, and in all of those instances the content is easily communicated in a 30 second soundbite.
You have to consider a few things:

1) one may be interested in the opportunity of above-average returns. If the average vanguard return is 7%, and the average self-managed return is 6.9%, on average of course vanguard is in your best interest. But what if you think you can do better? Harvard's ran a 12% return for 20 years, for example. Should they forgo it because the average is a more guaranteed, safe, and on average, better bet? Probably not. Does it signal to weaker funds to simply go with the Vanguard option? Yes.

e.g. check out this report: http://www.hmc.harvard.edu/docs/Final_Annual_Report_2015.pdf

2) looking at just returns is myopic. You need to look at risk-adjusted returns, for which finance has proposed a whole bunch of measures. I would not be surprised if the endowment funds were less risky than the vanguard, although it's hard to tell. And guess which years generate brilliant performance for risky portfolios that are heavy on stocks? Post-crisis years where the market rebounds. Risk isn't the only thing, there are all kinds of objective funds can set. Most colleges for example set liquidity limits that would be unworkable for traditional hedge funds that invest in high-potential returns in illiquid assets. Limiting yourself like this changes your roi.

That having been said, there's obviously a lot of value in this simple perspective. And it completely confirms a new reality: outperformance is getting harder and harder and investors are less likely to beat the market and add value with their investing know-how. It's pretty recent that this has been happening to this extent.