skysight-inc/HackerNews huggingface dataset:
We need to use Make for sensible (partial) rebuilds of static websites. I'm exploring ways to build a dependency graph out of Handlebars files. That might be enough to generate a Makefile and leave Gulp/Grunt out of the equation. Anyone doing anything similar?
Hi Chandler,

I should have clarified that the comments I was referring to were on this bug: https://llvm.org/bugs/show_bug.cgi?id=11763

I was surprised to see: "I don't think it's really worth warning about, considering I don't know of any real-world implementation where it doesn't work."

That sounds a lot like someone knowingly writing UB in a C program because no compiler they know of breaks the intended behavior. I doubt any memcpy() has ever guaranteed in any kind of official way that overlapping regions are ok, even if it has historically worked in practice.

I mean I'm sure it'll get fixed now, I was just surprised to see this kind of reasoning coming from someone who I presumes works on the compiler.

btw. I'm pretty sure I heard that glibc broke this behavior sometime recently. There's a new memcpy() symbol in glibc these days with a different symbol version that no longer provides correct behavior in the case of overlapping memory regions. This is all second-hand from some other people I was working with, but if I got their meaning correctly I think this issue will actually have relatively widespread impact.
This is an interesting topic! All advises in the article are really good ones! And I would add couple of points more (from personal experience): use services like Coursera (there will be tests, homework, forums, you may get a chance to work on real problems and solve them); keep connections with your teachers from University and schools - ask them about their projects and life sometimes, try to meet them from time to time, offer them your help.
On a totally segregated classified messaging system. Who knows if it's protected by more than obscurity, but it's definitely protected by obscurity.

Government officials commonly have 2 computers and 2 phones, one classified and one unclassified.

Hilary is alleged to have handled a little bit of classified information through her unclassified system, but it's not like she was routinely moving state secrets through civilian email.
This feels like they are trying to make the powers of 10 fit too much. I think the thoughts behind the article are good, but I disagreed on most of the timings.
> a song gets stuck in your head from lack of "closure".

I usually turn off my car's stereo only at the end of musical phrases for just this reason. This phenomenon happens a lot to me.

There is a song, stuck in my head since a little over a decade ago, which ends with a fade out, not providing any closure at all.

It still pops up occasionally, but fortunately I can usually override it by recalling any of a number of favorite other song loops I have collected through the years and haven't gotten tired of yet.
Synchronization primitives in the Linux kernel. Part 3
Please, please add some way to see new comments since you last viewed.

Otherwise, looks awesome!
> if they have something in common, and confine their friendship to that thing

What we all have in common is the human condition which is much, much bigger than hobbies, career paths, or political beliefs. We get sick, lose people, fall in love, have children, get better, meet people, and eventually die. Our surface area for meaningful, fulfilling interactions is enormous, but our culture is set up in a such a way that it's easy to forget.
> wait, I'm not dignifying /dev/random: it refuses to provide output at random

Why would this be a problem? Read one byte from /dev/random, and observe one of 257 possible values chosen at random. :D
To be fair, those things could all be deliberately unspecified. Granted, the shortness of a language's spec is less impressive when it is simply the result of the language being woefully underspecified.
OK but I also think you're conflating two issues: text vs. binary on the one hand, and delimiter vs length-prefixed on the other. I like DJB's netstring scheme, which is an ASCII length-prefixed encoding:

3:foo,
10:0123456789,

Text formats usually have delimiters (like HTTP headers), and binary formats usually have length prefixes, but technically they're orthogonal.

I've never seen a fixed-width text format for numbers in practice.
Perhaps the bit about companies setting up near an airport. Thus they ensure global access and think of their "home city" as mostly yet another venue. That, I think, someone serves as an insular force for the present "big" localities - localities large enough to have an international airport.
Twitter Shadowbans Donald Trump Tweet
It's important to measure "gun violence" that apparently harms no one, because otherwise we wouldn't be able to claim the level of "gun violence" is high enough to justify Gun Control Measure X.
The idea is to force other people out of the market because they can't continue to sell at your price. If Apple gave away their iPhone for free (and could sustain that with the cash they have) they could drive every other phone manufacturer out of the market (assuming everyone wanted iPhones). This works better if the product is homogenous.

In web products maybe Gmail is an example? Hard to compete with free and the # of features they have. It's hard to come up with a better example because features is a big differentiator.

Once your competitors go out of business you're the only guy left in town so you raise your prices to the moon and profit.
I think it's because Massachusetts has nothing that can be described as a large commercial crop. However, it isn't the largest, and Massachusetts isn't the largest producer of them.

Wisconsin produces 60% of cranberries in the US(1), with Massachusetts producing half of what Wisconsin does(2), 201k tons vs 94k tons, out of 343k tons total. The rest of the producing states combined are half of Massachusetts.

As for, what is their largest crop, if it isn't Cranberries? Nursery products like ornamental flowers and shrubs(3).

1: http://www.agmrc.org/commodities-products/fruits/cranberries...

2: http://archive.boston.com/news/local/massachusetts/2012/10/2...

3: http://www.netstate.com/economy/ma_economy.htm
In most jurisdictions, one can order full-auto blank guns that are not firearms. It would usually be illegal to fire them in a city.

https://www.blank-guns-depot.com/blank-firing-guns-store/cat...
No. There was a period in the mid-late 20th century where it appeared that the future was really in car-oriented sprawl, and the cities were abandoned to the poor people and minorities who couldn't afford to get out. The population growth, wealth, voters, political power, consumers, and the American Dream itself were in metro areas but definitely not city limits.

The idea of that cultural moment having ended is relatively new.
Clearly the spider mastermind...
A morality in which someone steals something from you, and then also incurs moral obligations on you to address their mental health issues, isn't really scalable. If you want to help him and go above and beyond, more power to you and my blessings upon you, but it is a bonus, not an obligation.
I think it's the opposite: as it's not widespread anymore, it becomes less nuanced (in each particular incarnation) and more solipsistic.

And the discussion about pop (and that's what pop ways, after all: a big discussion) is poorer/reduced, as fewer people participate to it per segment of "popular" culture.

Like them or not, past musicians, due to the centrality of pop music to everyday life, the huge amplification of their message (not easy to escape in micro-niches), and lack of alternative diversions, were part of a huge cultural discussion. Not encompassing everybody of course, but still huge, which gave added meaning (even if it was just an "interpretation" and nothing inherent) to their work and news, and especially gave it potency beyond "affecting a single person".
I have the feeling that someone trying this in Atlanta would just get themselves shot. Hopefully nobody around here is inspired by this.
The magnitude of the peak for 2016 isn't what's important.

The steady yearly increase is what's important.
It suggests that replicating the nature process can have the desired effect. Though perhaps that implication is less pronounced without the title (and the author may have had no control over that) so point taken.
I'd love for a TechMeme style site that sorts and organizes the articles more intelligently ( sort out the articles that just say the same thing without adding anything new, mark and organize responses and followup third party articles as 'informative', 'rebuttal', or 'support', etc.
What do you see as the gating milestones that we can't hit in 10 years?
Gah. Another brain-damaged system that implements complex (and, no doubt, broken) "entropy estimation" with a goal of delivering "information theoretic" security that doesn't even have a structure where information theoretic security could actually be proven.

To the extent that any applications exist where a information theoretic RNG was required, this scheme does not provide one. Instead, it continues the to offer an interface that causes confusion and insecurity without an apparent benefit.
Could be as simple as twice as many false positives in DC or half of shots undetected in Oakland.
Apple Services could be sold to very different customers - those on Android and Windows devices.
Most fast methods for computing fib(n) come down to some variation of repeated squaring, so the time is dominated by the last multiplication (since the number of digits is doubling each time).
I'm thinking more in terms of a lifetime of treating your body like shit, to include all substances (not just opiates).
Show HN: Annotated Tempo Estimation Algorithm
Bodybuilder Recounts His Story of How a Steroids Bust Landed Him in Prison
What kind of hat do you wear?
Well, I'm not arguing that they are optimal now, or that code reuse is an issue now. My point is that it really couldn't have been any other way, for economic and evolutionary reasons. In your posts, I see the implicit assumption that "someone made a mistake a long time ago", and that a lack of knowledge by those people led to the current situation.

I should have been more precise about extensibility. (I have had this argument a bunch of times...) Another way to say it is that text formats are more amenable to partial implementation. That's the "dual".

Suppose you have N people using a protocol, and there are O(N^2) communication paths. And then three of those people have a need for some extension -- say they want to add some new caching mechanism to save bandwidth. They can negotiate an extension to the protocol out of band. If it introduces some value, then it might be adopted by everybody. Or it might just die.

But at all points in time, somebody is extending. And they don't necessarily consult a spec to do so; they just read the raw messages and negotiate something based on their needs, which doesn't break other people. "The Art of Unix Programming" has more concrete examples of this process actually happening [1].

Depending on how you look at it, other users now have a partial implementation. It can also start the other way -- there are plenty of partial implementations of HTTP that are useful -- implementing only GET, not implementing caching, etc. Yes these are sloppy, but they are useful, and help the protocol gain adoption.

Don't underestimate the number of people debugging HTTP with telnet or netcat in a shell script either. You can either try to each everyone the "right way" to do things or accept that there is a lot more diversity in the computing world that most people think.

The precise things that make text formats a pain to deal with are the things that make them survive. There is no instant at which a global truth for the protocol is born; it arises over time. This wisdom is baked into the name: "RFC". It's open-ended and ambiguous.

[1] http://www.catb.org/esr/writings/taoup/html/ch05s01.html
New debugging method found undetected security flaws in popular web apps
Is there a difference between re-seeding and re-keying?

I think of this analogy: you re-key/re-seed periodically not because the originally lock gets weaker, but in case someone stole your key without you knowing. Accurate?
Papers We Love
No. This would matter if entropy was somehow directly provided to applications. But no modern system does this. Instead, entropy is hashed into a key for a keystream generator (based either on a hash function, a MAC, or a stream cipher).

That's the entire point of a DRBG†: to securely incorporate inputs of wildly varying randomness into an RNG whose future outputs are as difficult to predict from past output as keys are to recover from ciphers.

To somehow "predict" the output of the system from its input, you would need to be able to work back from the output of a cryptographic keystream generator back to its key. If you can do that, forget the RNG: you've broken most modern cryptography.

† and even prior to this proposal, that's what the LRNG implemented
It's working strangely (or, not at all) on Chrome on Android
There's absolutely nothing about replicating the natural tectonic process in the article.
> An implementation is not bound by the standard in its own use of the standard library functions. The implementation can use a function like memcpy in ways that would be formally undefined if they occured in user code; its implementation of memcpy just has to harmonize with that use, so that the intended behavior is ensured. This is because implementations can add their own requirements to areas that the standard leaves undefined. For instance, an implementation can add the requirement to its memcpy that the copy may overlap, if the destination has a lower address. Then, the implementation can generate code which uses memcpy that way, or make internal uses of memcpy from other library functions which use it that way. It's just using its own (possibly not publicly documented) extension.

Yes. But right now they do not do that, and it's not their implementation of memcpy they rely on, and they are exactly doing the kind of things they disallow their users to do, so the whole picture is just plain insane. They just call libc memcpy in some cases, and their rational is that "it happens to work". Except nobody is actually sure about that, it might be already buggy on PPC, and the guarantee is not documented anywhere. Completely insane - especially given their very own approach in similar situations. As usual, they are prioritizing "optimizations" over correctness, and lets not even think about defense in depth. It's a brand new level of insanity, even beyond their usual "the standard allows us to do that" excuse, because here it does not even allow that, and it seems that neither do officially all the used implementations!

Software engineers must loose the habit of taking all kind of crazy risks that can only lead to marginally faster execution of newly introduced bugs. That does not serve any purpose.
The recapturing of some of this is one of the best things about my job, not because my job is anything really special in that regard, but because I'd spent so much time contracting (alone in a room by myself) or in grad school (same.)

Having an office, and a culture where people would 'drop by' sometimes, either for real work reasons, tenuous work reasons, or purely social, has been a godsend.

Now I'm thinking about how to consciously engineer this given our environmental constraints...
Our image duplication project on bioRxiv
Not just that, but not all 802.1x methods actually provide mutual authentication either. In order to avoid this attack, the user device needs to authenticate the access point (and keys have to be distributed somehow!) At the very least, ensuring that an access point is the same access point as it was before, which would mitigate spoofing.

Authentication in one direction (or lack of authentication entirely) is what leads to this attack, since the fake access point can just say "OK" to anybody trying to connect.
If she is successful with all this, she won't be able to sell it in an FDA approved manner, but she will have an extended life/health span which is its own reward. Not everything is about money.
The 'cleaning the house' especially. At some point adulthood seems to inculcate this notion of formality to visits. It's been universally to my social detriment.
Pretty much yes.
Answering your (perhaps rhetorical) question is hard without being there to see the actual guy.

Morality is situation specific, OP was there, perhaps if you were there you would have done the same.

There may have been other people whom most anyone would press charges apon.

Revenge is a dry & tasteless dish against some. Some deserve justice, some need only pity and help. Rehabilitation is logically better than punishment. One case is unlikely to alter overall deterrance. Thus each case should be judged on its merits.

Perhaps the guy's obvious disturbance was a ploy to fool the OP, luckily the cops could assit in this judgement with assesment.

This is the failure of Zero tolerance, when it produces obvious injustice. Equally this is the greatness of a judiciary who weight not only guilt but intent and circumstance.

The only bad or anti-social thing, is abrogating personal responsibility. Such as avoiding Jury Duty. Asimov's 1st law shows both an action or inaction that cause harm are equivalent.
The scary example against the "separation" the author suggests is Sony, having the structure where the different profits and loses produced the results where one Sony makes another Sony worse and vice versa.
Replacing the LRNG with Yarrow or Fortuna or something like it would not break any client code, because no sane client code can rely on when /dev/random decides to block --- even by the LRNG's broken definition, that blocking happens at random, and could be deferred indefinitely if enough "entropy" were available.
One of the Chart.js contributors here. Version 2.0 is a massive overhaul of the underlying library focused on ease of use and extensibility. Hundreds of issues from the 1.x branch have been resolved, making Chart.js even more stable and user friendly than ever! Here are a few of the core changes:

- Github Organization: Moved from github.com/nnnick/Chart.js to our own org, github.com/chartjs/Chart.js, where we hope to continue to grow the awesome community
- Scales: New time axis, log axis and multiple axis support
- Animations galore: Just about everything animates now, from adding/removing datasets, updating data or even changing colors. Based on canvas, animations run at 60fps even with tens of thousands of data points
- Dynamic config: It used to be difficult to interact with a chart after creating it, but now it is as simple as changing the object and calling the update function
- Mixed charts: It is now trivial to put a line on a bar chart or whatever combination floats your boat
- Legends: Now supported for all chart types, they can be placed anywhere on the canvas and support toggling data visibility by default
- Chart types: More charts supported out of the box, including stacked area/bar and bubble charts
- Labels: Built-in chart titles and axis labels make it easy to understand your data
- Responsive and mobile ready: Charts, labels and legends all scale down to accommodate any screen size out of the box, with touch event support
- too much awesomeness to list here

Moving forward, the core team is committed to a faster release cycle. Version 2.1 is slated to come out in the next week with:
- Plugin support: Add optional support for features like zoom/pan (forthcoming) without adding bulk to the core library
- Shared data between charts

We'd love your help, so please join and contribute! We have a very active Slack community that you can join at https://chartjs-slack-automation.herokuapp.com. We'd love to add new chart types and to get the documentation translated, so if you think you can help, we'd love to have you!
Machine learning rivals human skills in cancer detection
Blocking pain by turning off specific neurons with light
The big reason not to stay with D7: it's dying. Issue queue activity has dropped off a cliff in the last 6 months with D8 released.
"A safe reason to be hanging out."

That really cuts to the heart of it -- I've always had a 'disability' where I am immensely social if I have an 'excuse' and just abysmal without one. Seeding the environment somehow would make all the difference for me; wonder to what degree it's generalizeable?
Tobi Lütke of Shopify: Powering a Team with a ‘Trust Battery’
While city driving might be some ways off, do you really believe reliable highway driving is more than 10 years off. I really can't see why that could not be achieved within just a few years.

We can send rockets into space to build space stations on autopilot, why not drive on the highway? Those odd, really seldom cases where an AI can operate your car it should not be hard to build a failsafe system which drives the car safely off the highway, stops, wakes you up and insist that you take over the driving.
What better way to prepare children for life under secret, quasi-legal mass surveillance by officials.

If the innocent are caught up in the dragnet, the neologism collatoral intrusion exists.

Freedom from warantless search never applied to children's diaries, schools are in loco parentis.

If an overactive imagination doesn't make one culpable it cannot be ignored by liable officials and may be an indictor of intent, disposition or a pre-crime.

As a society we have decided no price is too high for child safety.

The only flaw I can see in this scheme are officials with less than perfect judgement or their own prejudices.

/s
So yes it looks like the "LinkNYC Private" network is indeed using full-blown WPA2-Enterprise IEEE 802.1X EAP-TLS w/ client certs.

It looks to be using Wi-Fi Passpoint "online sign up" (OSU) setup for client cert provisioning. Unfortunately, it does NOT look like it uses OSEN (WFA-UNAUTH-TLS type EAP-TLS) for the OSU WLAN, but instead chooses the option for an open OSU WLAN (using the same SSID as the non-private network) with a HTTPS captive portal. I would assume that this is the mechanism behind the reports of certificate downloads on iPhones.

LinkNYC and Hotspot 2.0:

https://medium.com/@LinkNYC/secure-browsing-on-linknyc-s-wi-...

https://www.globalreachtech.com/deployments/link-nyc/

Wi-Fi Passpoint aka Hotspot 2.0:

https://www.wi-fi.org/downloads-public/Passpoint_R2_Deployme...

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2...

Reports of cert provisioning:

http://blog.alexflor.es/post/137705262900/linknyc-secure-gig...

http://www.engadget.com/2016/01/19/linknyc-gigabit-wifi-hand...
I am not sure that self-driving cars will become an utility.

There are two problems - peak demand and hygiene.

With the personal car I am guaranteed to get it when I need it and in the controlled condition.
The Linux kernel in its current design is not intended to provide subsystems for other operating systems while the NT kernel was from beginning on.
For a deeper look into the role of cities in society, check out the work of Jane Jacobs: https://en.wikipedia.org/wiki/Jane_Jacobs#Works
I'm a Java developer and couldn't imagine doing 100% of coding in just a text editor. I installed a Vim plugin for Eclipse to get the functionality and tools of an IDE while having the text editing capabilities of Vim. Its working out pretty well so far.
I'm talking about a specific component named memcpy. Obviously this does not apply to other components.

And even that is only if the bug report is correct.
Why do pro-gun agenda people always say that violence would continue to exist without guns?

Do they think people would replace guns with knives? What makes them think that people wouldn't just give up?
22 Things to Make Blogging Better and Build a Better Blog  – Satya Prakash Joshi