skysight-inc/HackerNews huggingface dataset:
ObOriginalTanenbaumTorvaldsConflictLink: <https://groups.google.com/forum/#!topic/comp.os.minix/wlhw16...

Linus' personality is remarkably intact, 24 years later.

More background:
https://en.wikipedia.org/wiki/Tanenbaum%E2%80%93Torvalds_deb...
you know now i really wanna see a LS1 swapped tesla.
No, it's not true anymore. From the link you replied to:

"On our production frontend machines, SSL/TLS accounts for less than 1% of the CPU load, less than 10 KB of memory per connection and less than 2% of network overhead. Many people believe that SSL/TLS takes a lot of CPU time and we hope the preceding numbers will help to dispel that."
- Adam Langley, Google

Getting an SSL certificate used to be a cost, but that's taken care of now by https://letsencrypt.org/.
The Accidental History of the @ Symbol (2012)
Microsoft Thought About Buying Slack for $8B
https://news.ycombinator.com/item?id=11234008
Should I write a TCP/IP stack in 2016, I would do it IPv6 only. There are several methods for translating IPv4 into IPv6 so that you can get both protocols working anyway. Writing it IPv4 only is useless and harder to extend later.
And don't come to tell me that we are not using IPv6 please... ( https://www.google.com/intl/en/ipv6/statistics.html )
[Edit: link]
JFK's Harvard Application Essay
Declaring variables at the beginning of such a small function is certainly not out of style. IMHO, it's not detrimental. In fact, I find it quite useful (i.e. just by reading the declarations, I can infer the expected flow of the function -- fd will be used to open a device file, from which ifr is going to be populated through a call to read() or an ioctl). However, it's largely a question of style.

Using strcpy is a big no-no -- it's both detrimental, and out of style. Its manpage gives this warning (on FreeBSD -- the one you'll get if you type man strcpy may differ, but all man pages have had a similar warning since 1990something):

> The strcpy() function is easily misused in a manner which enables malicious users to arbitrarily change a running program's functionality through a buffer overflow attack.

That's because strcpy(dst, src) will basically do something like this:

int i = 0;
while (src[i] != '\0') {
dst[i] = src[i];
i++;
}

(the real implementation is usually more terse for reasons I won't go into right now, but this is what it basically does in more verbose terms).

without bothering to check if dst[i] is not beyond the end of dst. This allows you to write past the end of the buffer that holds dst, and who knows what's there...

Nowadays, all that usually happens (on sane operating systems running on machines with a MMU) is that your application crashes due to something called ASLR. It used to be a big problem before that, though, and it still is (on insane operating systems, on machines that don't have a MMU and so on).

Either way, it's not a good idea, and it's considered to be a pretty big code smell. strncpy is the encouraged version. strlcpy is the sane one, but it's not available on all platforms (and even when it is, it's not always sanely implemented).
Isn't the warp of the universe determined by mass? I wish there was some indication of how he plans to warp space while not having the mass of a star in his ship.
That's one alternative, but by no means the only one. You could:

- reduce consumption

- consume the same or more, but of content that costs less to produce (say modern day dramas with fewer special effects and less well-known actors instead of high-end special fx driven or period-driven narratives)

- reduce consumption of something else to make up the difference and consume the same amount of media for a higher cost

- Other options I haven't thought of
Well, this is an interesting story. Reminds me a bit of the Phantom games console, that 'super system' that never materialised and seemed to be entirely be a scam of some kind.

The most important about all this though, and which was mentioned in the video posted in the article, was about where exactly this console would make money or gain support. Cause only a small audience would buy a retro system like this, and it's likely not enough to sustain any real game development or long term business. And with the core of the system being basically the ability to play games from existing consoles, none of these games would ever really make sense as exclusives anyway.

Bit like the Ouya that. Just not enough of a market, or with unique enough hardware to really support much in the way in terms of original games.
Couldn't email you. Contact me, details in profile.
Once we were notified of the issue, I manually removed the bad code and shut down further updates. If you have this plugin, update to the latest version immediately.
Maybe, but single moms with only a high school education who homeschool, will place their kids int he top 60% of publicly educated kids.

Nothing matters more than parental involvement. And if every conversation about public education centered around "we can't do much if you don't care about little Johnny's education" maybe parents would start doing more. I'm not sure that being ambivalent about your child's education isn't a severe form of child neglect.
This argument is similar to "a condom can always break". Technically you are correct, but I'd still use one.
Unlikely, given that the idea has been around since the days of Ancient Greece. Plato (speaking through the character of Socrates) grumbled about excessive pandering to youth in The Republic.
House prices are indeed influenced by credit availability (and prevailing local wages, housing supply, housing demand, property taxes, purchase alternatives [like renting], school quality, and many other factors).

Rent is likewise a balance of many factors, including wages but also interest rates, house prices, rental supply, rental demand, property taxes, and other factors.

I'm not sure what you propose as a workable alternative. Banning renting of housing? Government dictated housing prices? Banning real property ownership? Something else?

Buying a house and renting it out is not a land monopoly in any meaningful sense of that phrase; otherwise, I'd have a "monopoly" on the shirt I'm wearing right now.
Two different things. In the context of the parent, aftermarket means parts available from non-OEMs. I can go to the local NAPA and get spark-plugs for my Jeep produced by multiple companies.
What it's like to be that fat person sitting next to you on the plane
sorry, i messed up the dns records. jacques@forwardtrail.com will work for now
As a CEO you set the rules your company operates under and you determine who else has what kind of powers within the company. For instance, you could delegate some of your work to others that you feel are more qualified or that can help you lighten the load. Even so, you are still responsible for whatever it is that they do and even though it is great to work with others and to be able to trust them because the end responsibility is yours you are still required to check up on them to make sure that they actually do what they say they do.

This is an issue that trips up companies that get into legal trouble; oftentimes the CEO or senior management suggest that they are not responsible for the actions of a "rogue employee" or a scheme that was carried out by underlings without their knowledge. In the U.S., the company (and its officers) are liable for the actions of employees.

There is a book by Constance Bagley called The Entrepreneur's Guide to Business Law, 4th Edition (ISBN 9780538466462) that covers this and other issues (contracts, incorporation, fiduciary responsibility, etc.). It's a great resource for anyone running their own business.
A very valid point! I'll update the code.
The headline should probably say "at least Mac". I hope we soon learn the source of the compromise, but nothing so far indicates that Linux distributions' packages would be affected by a Mac malware.
I assume most people on HN, given the warning and the CVE, would easily find the information they need on google. But sure, if you read this and need information, please read @Ao7bei3s' comment.
I could listen to Andy talks for hours. He has the greatest stories, so much experience and wisdom. I wonder if he and Linus get along in person, I had a 100% different impression of this guy solely based on his flamewars with Linus (who's probably the 'bad one')
In their code examples they indicate that this works by:

1) plugin sets header key
2) the site servings ads needs to hit an API endpoint to verify
the header keys' value before rendering ads.

This seems really oversimplified since ads are spread all over most pages, so it first needs to block rendering to wait for a reply from the API, then each ad needs to be wrapped in a conditional. I wonder how well this works with the ads, since I assume they are not set up for conditional loading.
In the original thread, the initial reporters specifically pointed out that the files they had downloaded did not match the checksums on the Transmission page. My guess would be that the attackers compromised a mirror, but not the web server serving up the user-visible page with the checksum.
IPv6 support is very important. But IPv6 only is probably a bad choice that will end up disconnecting you from much of the IPv4 only world.
Wring.io, 0.9 released
Unsure if there are any currently publicly known exploits, but it sure isn't unheard of for VirtualBox:

* http://arstechnica.com/security/2015/05/extremely-serious-vi...

* http://www.securityfocus.com/archive/1/495095

* https://www.cert.be/advisories/oracle-vm-virtualbox-two-priv...

* http://www.coresecurity.com/content/virtualbox-privilege-esc...
In a study, patients aren't lied to exactly; they're told their either going to receive a real treatment or a phony one, but they won't know which.
It was unfortunate how Minix was distributed as a $69 book. It was very expensive for a student. Inflation corrected it would be about $120 now. However being in the UK meant the usual 1 USD = 1 GBP conversion (making it cost about 50% more), not to mention VAT at another 15% on top - a total of about $210 in today's money. I am pointing this out not because the pricing was unreasonable, but because it was a big barrier to use. (At the same time a full version of Windows 3.0 retailed for $149 or $79 (upgrade) - 1990 dollars. You also required a copy of DOS.)

The article also mentions 32 bit support, but there was a lot of tension going on. It was possible to make Minix perform a lot better by deeper platform support and multi-threading components (especially the filesystem), but this made the code more complex, longer and harder to understand. Consequently there were two versions of Minix in use - the base true to the mission, and big patch sets on top that made it more usable/performant. The latter were distributed over the Internet.

This shows why Linux took off so quickly. There was no barrier to participation like paying for the book. While functionality was a lot less, there was no gatekeeper keeping it small, simple and educational. And Minix had shown how to collaborate with patches to an operating system over the Internet. It didn't take long for Linux to overtake Minix onto the path we see today.
I am very involved, and I've seen plenty of good work, from Java 8, through the upcoming Valhalla and Panama, and to the amazing work on Graal, which is probably the biggest breakthrough in compiler technology in the past decade. Doug Lea is still working as tirelessly as ever on java.util.concurrent, and while letting the evangelists go was bad PR, it really changed little wrt to technology investment. There have been some missteps and setbacks, but while making some noise, they have been few. Don't forget that Java is huge; probably the largest standardized language ecosystem ever, and not all of its many corners can always be covered well. And when an ecosystem is nearly ten million users strong, even one percent of disappointed users is larger than most other languages' entire ecosystem.
We realize your startup idea We build your MVP
Wouldn't they have to do a bit more, to induce pain, swelling, soreness and such, for the patient to think surgery on their knee had actually been performed?
Looking more at this issue, it seems like the problem may have been (hard to tell, not a lot of information) a compromise of a third-party mirror to which https://www.transmissionbt.com/ redirected users; the checksum on the HTTPS site was unaltered, and was used to identify the altered download.

Perhaps a defense against this kind of attack would be an altered version of HSTS - one that protected the content of download links, and not just of sub-resources included on the page.
OK so let's imagine sandboxing is on by default, then "Transmission" pushes an update that asks for read/write access to the whole home directory. You don't know if Transmission has some legitimate need for that or not, so you just shrug and click Allow. Boom—infected.

So I think sandboxing is basically useless against these kinds of attacks. Either they allow apps to elevate their entitlements in an update, or they don't and developers will always out-out from the start (or pick the widest set of entitlements available).

If sandboxing is forced with no opt-out, then users will have to jailbreak their computers so they can install Parallels...
Nice! Looks cool, I thought at first that it was this Wren: https://github.com/darius/wren, it's super compact, but not so easy to read haha.
The page simply removes the ads before serving
The 'leadership culture' was something I noticed when I moved to the US from London. Where I'm from kids are mostly told they need to worry about getting a job, here in the US the grooming to hold a leadership/supervisory position is much more explicit and intense. Perhaps due to the hereditary aristocracy in the UK and many other european countries, it's implicit that social leaders will most likely be those born into aristocratic or well-off families, as has been the case through most of history, whereas in the US anyone can play (theoretically at least). I've never quite got used to it, though I don't necessarily think it's bad.
From your own link (great source!), it says that the expenditures on instruction are, respectively, $7714 and $7073 per student per year. But Detroit spends much more on support services and food services.

> If money were the solution why is Detroit not on par with Dearborn despite Detroit spending 30% more per student?

I don't know that anybody is arguing that more money is "the solution," although surely it must be part of any solution. Even if more money was the solution, I don't know why 30% more would be the magic number.
The PC v MAC is an interesting parallel. Sure you can mod your pc and fix it yourself, just like most cars today. You also need very specialized skills and could ruin your whole system (Car or computer). Mac on the other hand, you can't really mod, but it just works and thats good enough for most people.

The difference is cars need regular maintenance and computers don't. The author is claiming maintenance on Tesla's is difficult, but he dismissed the point that they might not need regular maintenance like other cars.

I think only time will tell (a justification on most of his points) whether Tesla is the Mac of cars, or if Teslas still need regular maintenance.
I'm a bit sad to see these types of responses downvoted since this is exactly how I myself feel.

If you thought that was worthwhile reading - have a look at Ben Horotitz' book - it's much more dense and full of actionable advice.
Until you need verified checksums to drive on a public road.

Using public infrastructure is a privilege, not a right.
Youtube lets you speed up playback
More like time for the media to stop ignoring it and start calling out some of the crap included in it. Cause while few people were exactly praising it, you could tell that the corporate news sources were doing everything in their power to pretend it wasn't a thing.

Or is that not possible because of corporate control of the media?
>remove the copy protection that prevents them from being digitized

In other words, cutting that little square of plastic off of the top right corner of the 5.25" disks? I distinctly remember learning that skill myself.
Right. But the reason I use USD is because it's what I spend in. If I'm primarily in an area that doesn't use USD, I would avoid holding USD.

There's no benefit for the overhead. This is an argument against using bitcoin.
Glad I could help. Your little project is pretty ambitious; I hope it turns out all right -- best of luck! You certainly started well.
I put my email address in my profile just for you, but it looks like it might not be updated immediately.

[username]@gmail.com

Thanks in advance.
It might be worth updating the title to specify the vulnerable version (2.90) and the platform (OS X - from what I can tell, this is not a vulnerability on Linux or Windows).
> which effect the "pick one of ten" method exactly has on the entropy

Probably impossible to say exactly without knowing what your brain is doing when it picks one. But let's be pessimistic and suppose it picks the "nicest" in some global sense and that "nicest" is the same for everyone (or, at least, that an attacker knows what you consider "nicest".

Then the question is this. Generate m samples uniformly from {1,...,N} (with replacement? without? That depends on exactly what you do if you happen to get two passphrases the same, but the probability of this is small enough that it likely doesn't matter) and take the smallest; what's the entropy of the resulting probability distribution?

That seems like a difficult combinatorial question, so let's consider a continuous approximation. If we pick numbers uniformly on [0,1] and take the min of m of them, the CDF is 1-(1-t)^m because the probability the min is >= t equals the probability all m numbers are >= t, so the pdf is m(1-t)^(m-1). We can compute the continuous entropy of this distribution (if both Wolfram Alpha and I have done our parts right, the answer is - log m + 1 - 1/m) and of the uniform distribution (zero). Continuous entropies are kinda meaningless but in the limit their differences equal those of the corresponding discrete distributions -- and for large N we are close to that limit.

So I think what this means is that by picking the "nicest" of m choices, you lose log(m) - 1 + 1/m nats of entropy. (Divide by log 2 for the number of bits.)

Crappy simple approximation to those: you lose log(m) nats of entropy (log2(m) bits), which is just the same as if you divided the number of possible passphrases by m. In reality the amount you lose is a little less.

So, e.g., if m=10 you lose about 1.4 nats or 2 bits. (The crappy approximation says 2.3 bits.)
Here's what the page looks like on an iPad:
http://imgur.com/tUGUfpA
My build from cask didn't start the process but force removed it anyways and am waiting for cask room to point towards 2.91.
I had the same thought. How many people would ever even consider maintaining their own car? I bet its insignificant in the face of Tesla's target market.
Toward a Production-Ready Docker Swarm Cluster with Consul
Go Proposal: add context to the standard library
So can you recommend a mirror for them that supports SSL?

There are multiple named projects there that aren't using SSL, and I don't think it's just laziness. If you know of a way for them to use SSL mirrors for no additional cost, I'll work on getting them to switch over.
The only reason Spotify needs the ability to play local music is to play music that is not on Spotify. Most other services, including this Google one, let you upload your collection to play on any device.
I'd like to hear more about this. Is the 100 an observation from personal posts or analysis from some dataset?
VCR repair too.

The big thing nobody talks about (or some people even brag about) is how Tesla records your entire driving history to improve their future products. It's kinda creepy and you have no option but to obey if you want the Tesla Experience.

Other companies are trying to "catch up" in this way too like how Google Android Auto Car Integration requires manufactures allow Google Android Auto Car Integration to send live, real-time individual car performance data back to Google HQ so they can also analyze it all for their own purposes.

There's basically no legitimate reason why a 3rd party music player app requires your car to transmit real time acceleration data, sensor data, fluid levels, and seat positions back to Google.
It's actually kind of surprising this is the first occurrence of ransomware on Apple's platform. It seems Macs are still, at least to some degree, protected by security through obscurity.
You're still missing it - the crucial point is 'you had nothing to say, it was a rant'.

If you think the internet is a soapbox for you to vent your frustrations out and have people go 'yeah, me too', then you don't need to change anything at all.

If your intent was to actually give meaningful advice, then you could start with giving credentials for what qualifies you to be giving CEOs advice, followed by sharp, concise bullet points - since CEOs don't have the time to read pages of text.
How is restricting who can service the car supposed to keep the resale value up? It means the prospective buyer will have to pay more for repairs when they're necessary, the cost of which comes out of what they'll be willing to pay for the car.
Seriously? I have seen this code many places, even written it.
Url changed from https://i-d.vice.com/en_us/article/science-has-revealed-bank..., which points to this.
Many managers were demoted from their supervisor roles, likely as part of the changes to make IS&T a flatter organization. However, in several cases, new managers were put in place as soon as their predecessors left.

Friends of the newly appointed boss, I'd not be surprised. Jobs for the boys.
This is a kind of dickish way to reply. Yeah it's not the original point but there is a discussion of this issue in it IIRC.
Absolutely not. The only thing that does is drive up ad prices. If I am paying I want NO ADS. Not a bidding war, not less obtrusive ads. NO ADS.
I performed the in-app update to 2.90 last night. Just found about this. Doesn't appear that I am infected, amazingly enough.
@jarnix: I'll join you. What's your contact?
Everything falls after launch. Everything.

It's relatively easy to get the "hey look over there!" viral bump, but beyond that it turns into a game of retention with ugly words like "drip campaign."

People are always interested in "new," but they need a reason to keep returning. That's what makes a business run.

(kinda like how, for movies, the opening weekend gets all the news, but not so much the 22nd weekend.)
Meet the World's First Truly Universal Cable
C’entra il fegato di Montalbano con la dottrina Obama per la Libia
So you're saying this guy's blog post is part of a conspiracy to drive down the price of Tesla stock?
This article[1] says Transmission is doing to offer a way to check, but I'm not sure it's on the site yet. Apparently tomorrow is the ransomware activation date for people who installed the infected version on Friday.

[1] - http://www.reuters.com/article/us-apple-ransomware-idUSKCN0W...
All the points you named can be solved by contracts and litigation (perhaps, yes we might need stronger consumer protection). What can't be solved (from what we've seen so far) is manufacturers polluting the environment to no end except by making their products into services.

> 2. When I buy something, I am an _owner_ not a user.

Yes, please get over it. If you don't own a car, your car will not take up useless spacetime. Imagine what cities could look like without parking spots!
"I wonder how much the economy would break down, and have to change, if email suddenly went away?"

Or suddenly went proprietary.
Rarely. It's mostly a game of "i'm too chicken to make decisions on my own."

VCs love love love the joke of "We're supposed to be all about new unproven dynamic ventures and insight into the future, but we're so risk averse! lol!!!!"
Does that mean we can use Haskell with datomic?