skysight-inc/HackerNews huggingface dataset:
As a quick follow up, one of the things I found surprising were that some of these bugs could have resulted in DOS for some significantly important systems, and that the code was written by some of the smartest people I have ever worked with. If these people were unable to write secure C++, it really made me question whether anyone could reliably do it in a business environment.
it didn’t have to be a problem if everyone was a good team player.

The eternal line that makes law inefficient, and "government secrets" or "spy agencies" utterly untenable.
My time with Rails is up
14000 transactions at 1400 ATMs in 2 hours?! Think about the logistics. That's 120 transactions per minute. And 1600 cards. Either an army of coordinated people, in itself highly risky as it vastly increases the likelihood of someone grassing on the group, or fewer people all sitting at the same ATMs drawing for 2 hours.... difficult not to get noticed. If they really pulled this off it will be the most well organized organized crime ever.
It would be funny, if it weren't a major publication. We could call it a "Howie", and a have a laugh. Now we're all faced with yet another ugly incarnation of Brandolini's Law.
This is more than a year old. I've been told that btrfs has improved greatly in that time.
Pantomime is a networked augmented/virtual reality system that supports desktop, laptop, as well as mobile and tablet devices.

It's great to run the server on the powerful desktop, and use it to display an overall view of the world.

https://vimeo.com/149319403
What is with BTRFS? It stands out in every single test (and not in a good way).
Whenever a story about Snowden is in the news, some people complain that some of the documents he released were "off topic". They accuse Snowden of releasing too much[1]. I agree, in an ideal world Snowden's bulk-copy methods shouldn't have been necessary.

Unfortunately, we don't live in an ideal world, and the "proper" methods of whistleblowing didn't work. When the proper methods fail, fallback methods are used. When legitimate channels fail, whistleblowing has to appel directly to the people. This is practically guaranteed to have collateral damage.

Anyone who is angry with Snowden's methods should work hard to create safe and effective whistleblower mechanisms.

[1] The cutoff point for "too much" varying with personal opinion.
GitHub uses SVG path to draw icons
> money management software, to code editors, vector image editors, remote storage, news readers

Is that really true? e.g. for code editors: vim, emacs and several IDEs.

There's usually only a very brief period between when an idea gets maket validation, and competitors appear.

In effect, your question asks us to predict the next successful idea, before it's successful.

That said, creative people tend to be attracted to newer platforms - web, mobile - which generally have more user convenience and features than desktop apps, and are "powerful enough" these days.

Something that requires even more power - simulation, VR, games - and/or requires keyboard and mouse could win on desktop.
In the large blue world, where having an online presence becomes increasingly more important, I don't see why not.

Blog it, tweet it, possibly present it at beginning coder meetups (in my area there are quite a few of these, many specifically for women), put it on the resume.

I also recommend (for anyone) following the path of discovery and delight, versus relying too heavily on conventional wisdom from jaded observers. Enjoy the unexpected, learn and adapt.
Ex-contestants: ‘Biggest Loser’ drugged us so we’d lose weight
> I wrote applications in asp.net mvc, Spring MVC/Boot, Rails for many years, they all failed me.

Could you elaborate more on how these alternatives failed you?

I've been considering jumping into the Java/Play ecosystem for awhile but have been hesitant so far. Analysis paralysis at its worst!
Ah, I didn't notice at all :) Didn't even know there was such a thing as wikivoyage, definitely very cool though.
I've mainly seen it discussed in the webdev community
My understanding is that French (and presumably other European) banks assigned the liability for fraud to the account holder, whereas in the US, liability for fraudulent credit card charges falls to the banks and the credit card processing networks.

This meant that individual account holders were much more tolerant of chip-and-pin technology, and demanded additional security features like portable card readers, which mean that the credit card never leaves the account holder's possession.
Slurpee Straws?
The article really bungles the strategy talk. In the actual game, there are 14 tiles unseen.

http://www.cross-tables.com/annotated.php?u=22368#17

If Wellington plays his 86 point bingo, he empties the bag and if Lewis bingos back, the game ends and he'll get the value of Wellington's final rack added to his score. By not emptying the bag, Wellington keeps control of the game and prevents the only way he can lose.

It's not some crazy strategy, it's a pretty clear decision for a high level player.

Source: Played tournament Scrabble and memorized something like 50k words for about 4-5 years.
> Why this article had to be segmented into 10 pages is beyond me, however.

"I've figured out a way to increase our pageviews by 10x!"

For "major" sites there's usually a printable view that consolidates things into one page. I don't see one on this page though.
By any reasonable definition of torture, definitely. Certainly if a foreign government did what we did to Manning, to an American hostage, we'd call it torture. The problems with recognizing torture today though, have gotten harder, not easier. It's fundamentally harder to make people understand torture that utilizes "soft" methods (as defined by Darius Rejali) such as electrotorture, solitary confinement, various forms of drowning/suffocation, drugs, etc... compared to torture that leaves unambiguous physical scars.
I was thinking the same. And it mentions every single transaction was for the maximum withdrawal amount.

The system doesn't notice when 116 transactions per minute are for the maximum withdrawal amount?

The ATMs don't run out of cash really quickly?
That's a good point, I didn't properly imagine the scale.
In statically typed languages, JSON is awful and clumsy compared to XML which has a standard parser and query language. There's pretty much no case where JSON is easier to traverse than XML. I'd challenge you to back up that statement.
Possibly being used to track battery usage by the app, so that they can provide a better experience for users.
European data protection rules apply to CCTV systems; they're generally legal with signs and appropriate policy.

(Compare US law on taping phone conversations)
If you use the Mozilla SSL Configuration Generator [0], you can select "Modern", "Intermediate", or "Old", and end up with a cut-and-paste configuration snippet that'll best suit your specific needs.

[0]: https://mozilla.github.io/server-side-tls/ssl-config-generat...
Show HN: Convert HTML to HAML in Vim
Kvm (or any overwrite workload for that matter) is the worst possible workload for btrfs because of COW. We have ideas to address this but honestly it's not high on the list.
The same happened in Germany where the BND (German NSA) destroyed evidence, most likely because of obligations to allies like NSA. Then the state safety agency (Staatsschutz), something like the secret service to uphold the constitution, destroyed evidence and obstructed investigations in a decade long Neo-Nazi killing spree. These orgs operate, and maybe have to they way they are set up, with no real oversight and anytime other branches of government want some info they accidentally park their computers in an MRI machine during lunch hour.

Edit: The Staatsschutz did that to save their own skin because they had moles inside the neo-nazi groups and probably wanted some info to be buried deep. What the BND destroyed and was made public not that long ago were something called "selector lists" for mass surveillance in partnership with the other big brothers.
Author here. Wrote an article on the process including certain issues as well - http://codetheory.in/html5-fullscreen-background-video/

I did try to work around slow network speed (can see in the network_speed_optim branch on github but with the current APIs it's a tough problem to crack.

The current implementation is basic but works well. Suggestions welcome so that I can improve it.
Manning wasn't lucky enough :( Snowden barely made it to Russia. If they had caught him, he would probably have ended up at a black site. Never to be heard from again. That could still happen, if Russia gives him up.
That it's unconstitutional is bad enough. But the ineffectiveness of the NSA is the most damning aspect of all:

> Drake had discovered a shocking example while researching his postmortem report on the September 11 attacks. Months beforehand, the NSA had come into possession of a telephone number in San Diego that was used by two of the hijackers who later crashed planes into the World Trade Center. But the NSA did not act on this finding.

> As Drake later told the NSA expert James Bamford, the NSA intercepted seven phone calls between this San Diego phone number and an al-Qaida “safe house” in Yemen. Drake found a record of the seven calls buried in an NSA database.

> US officials had long known that the Yemen safe house was the operational hub through which Bin Laden, from a cave in Afghanistan, ordered attacks. Seven phone calls to such a hub from the same phone number was obviously suspicious. Yet the NSA took no action – the information had apparently been overlooked.

If you are going to shred the foundation of jurisprudence, you should get something for your trouble.
Not sure what you mean here. They showed that ZFS performed well on linux. Are you saying that ZFS performs poorly on BSD and Solaris?

Love me some ZFS and it works well pretty much everywhere. OpenZFS shows good promise of keeping (bringing) the BSD, Illumos and Linux versions in line with each other.
> Every (or about so) mainstream language has libraries that make either format really transparent to use.

That's really only true about XML, that is not the case with JSON. JSON is a pain to work with in C# for example compared to XML.
I've never heard of stealing and reselling laptops in Russia, perhaps because used laptop market is very saturated. People have more than they can possibly sell. This might change in a few years of harsh economic downturn but there's no signs yet.

Ten years ago cellphone stealing was a thing, then market saturated and it became thing of past.

I've been to Uruguay and we had no problem using ATMs at Tres Cruces. Of course you need to carry some cash, but $100 equivalent is more than enough.
Argentina, totally different story as you might imagine.
Getting something correctly packaged for popular OS's is not as easy as it may seem. Even Torvalds famously gripes about it. Luckily, there's no need for that here since it can be distributed as a Python package. The project already uses setuptools (in setup.py) so it's most of the way there.
In the US the liability for fraud is on the merchant accepting the card.
The demo works on mobile but ya not entirely responsive in a lot of cases. Will be done soon.
What kinds of workloads is it designed for then?
If I were in this conversation, it would turn a bit like this:

"It's kind of complicated..."

"I need a number."

"I'm not giving you a number."

"Why not?"

"Ask me an intelligent question and I'll give you an intelligent answer."

"What??"

"On the day we use horsepower as the sole measure of a car, I'll give you a sole measure of a programming language."
I found it just recently when upgraded my VM images storage and BTRFS was still significally slower on HDDs using Ubuntu 16.04. Though I only compared it to EXT4 on LVM with QCOW2 + backing files.

Any idea if there was newer performance comparison for VM storage?
Already built for alpine linux, and I have it setup to use a stage 2 bootstrap. So you build off debian, then build locally to build an alpine apk.

https://github.com/mitchty/alpine-linux-ghc-bootstrap

Recently updated last week to 8.0.1, and its submitted upstream but not yet accepted because alpine linux 3.4 is about to come out.

If you want to try it now you can docker pull mitchty/alpine-ghc:8.0
That's really useful, thank you.

But my question still stands - why do nginx and Apache not provide the same settings as a configuration option?
Diving into the Fleet – A Look at London's Lost Tube
The $5m a year is if you want to maintain the extensive grounds and can't beat the federal government on upkeep costs.
Acceptance Testing a Laravel and Vue.js Application
What a lot of people aren't mentioning is the legacy factor.

We had a "C++ interpreter" called CINT for a long time, which the ROOT data analysis framework was built around. It was, to put it bluntly, a mess: it had inconsistent scoping and syntax with C++, gave worthless debugging messages, and couldn't handle a lot of standard C++ code.

It was also the way that a lot of physicists at CERN ran their analysis code. We needed an interactive language to make graphs and histograms and to fit our data, and when CINT was conceived the only other solutions were proprietary packages like MATLAB. So CERN went with a homegrown solution and wrote a C++ interpreter many years ago.

Flash forward 15 years. "Big data" is all the rage. Python, R, and the huge list of packages built around around them would easily solve the problems CINT was designed for. But the codebase for the larger experiments at CERN is maintained by physics graduate students, a good fraction of whom had no programming experience before grad school. We don't have the time or the resources to rewrite our existing code in scipy, and the older generation doesn't have the experience to supervise such a transition.

Given that so many physicists are still using CINT, the ROOT developers had to make a choice: they could continue to maintain CINT, which would have been nearly impossible with their resources and the evolution of C++, or they could rewrite something that did almost the same thing using more modern tools. They opted for the later.
http://www.economist.com/news/science-and-technology/2169909...
It is confusing, but the release number is never decremented in this example, the compatibility number is being reused to indicate the release is compatible the API documentation for the existing compatibility number.
> "Hillary Clinton argue that Snowden broke the law when he should have trusted it. “He could have gotten all of the protections of being a whistleblower,” Clinton said in the first Democratic presidential debate last October. “He could have raised all the issues that he has raised. And I think there would have been a positive response to that.”

Tell that to Thomas Drake. Tell it, for that matter, to John Crane."
You slipped in a zero :). It's 1400 transactions, for ~12/min. Still a lot, but not quite as omgwtf'y.
Public roadmap to the new JSFiddle (voting enabled)
A complete history of the rise and fall of ’90s chatroom (2014)
well oddly that isn't as true as some might believe. there is this whole ownership versus usage game that some of them play to let them "use" computers as long as they don't own them or the place where they are kept.

plus like many faiths, it depends on which exact subset you are
"May" ought to be translated as "must". Templated C++ is incredibly sluggish without inlining. People are comfortable debugging C programs with more advanced optimizations turned off because performance will still be decent. In C++, the optimizations are the only reason it ever performs reasonably.
Probably not that much? A scrap company would probably do it for free.
Moon-Men's Mini-Montgolfier Mission Maps Migratory Magnetic Margin?
Unfortunately, much of information looks out of date or imprecise. I'm contemplating doing edits.

"Tickets to international destinations (international means Mongolia and China, but not ex-USSR countries) are a completely different story. You can buy them only at dedicated cash desks (международные кассы) at major train stations. You can't buy such tickets online, even if you see the number of free seats and other details on the website. Prices do not depend on the season. They are calculated in Swiss Francs."

WUT? Maybe it was indeed so at some point of time but now it's news from Mars.
I just saw this, and I would have submitted it based on the subtitle, something like "the aftermath of the Uber/Lyft pullout from Austin". That seems more descriptive of the content and less clickbaity.
Chip and pin does not predate the EU. Debit cards used to be swipe and pin since the 80's, credit cards were not so widely used and supported both pin and signature.
Bring YouTube over any keyword on your page
Broadcast TV can be replaced with cable, WiFi can be (mostly) replaced with a good ethernet network in the home - it would have to be properly wired and I doubt powerline would cut it.

However no cell phones. I'm guessing landlines and VoIP are popular.
6 Ways to get yourself super motivated to write and become full time writer
Do you have a source for this? Lite googling suggests this isn't true now in the UK (e.g., http://www.theukcardsassociation.org.uk/faqs/ ) and I can't find any evidence it was true in the past.

Edit: it's also not true in France now: http://www.french-property.com/guides/france/finance-taxatio...
The Yakuza has 102,000 members - https://en.wikipedia.org/wiki/Yakuza.

"The yakuza are notorious for their strict codes of conduct and organized nature."
Go encryption support looks really elegant.

Ironically just before reading this article I was reviewing a Java code change to force TLS 1.1+. The logic to set security protocols and ciphers correctly is quite tangled in part because it's not consistent across different libraries e.g., for JMX and SSL sockets. I still can't tell if the code I was reviewing will work in production.

Has anyone posted a general comparison of Java vs. Go on security? This deserves a closer look.
A cult / survivalist group?
I will be implementing click to play and pause (necessary for iOS, etc.). Contributions welcome! :)
Whoa!

Imagine if it were all computerized, you could just key in what you want.
when that line keeps moving its easy to lay claim.

from your definition its pretty much anything someone wants to take offense at. which in turn pretty much causes a lot of people to tune the issue out. Manning is fine, its the people we don't know about that we cannot be sure of.
The reason I didn't read the article.
I've learned about US's Office of Special Counsel - an agency that's tasked to protect government whistleblowers - from an episode of Person of Interest. In it, a low-ranking NSA worker tried to ask his employees about what he discovered, only to get terminated and framed for drug use; he called the OSC and in response to that the OSC sent his coordinates to a squad of black-ops hitmen.

While obviously work of fiction, it somehow feels like an accurate description of how this works, and this article only confirms it. If you stumble upon a secret that could endanger important people in the government, the government ain't gonna be helping you. I think Drake and Crane are lucky to be alive today.
It was a replacement for the old C++ interpreter, CINT, which was already a central part of a lot of CERN code. Building Cling was probably easier than maintaining CINT.
I'm talking about a system where it is legal to collect vast sums of money and hide it using opaque financial instruments (offshores, derivatives, charities, fake accounting). Most people reading this blog - probably all - are not the people who are doing that. The fact that I didn't do it, or you didn't do it, does not justify such a system or a failure to recognize that the system exists. That would be illogical.
I think good code and a business environment just don't go hand-in-hand. I work for a company where one of our core values is writing clean code. We have fired clients who compromise too much on quality.

But despite this, corners are always cut when there's an arbitrary deadline; and in enterprise, there is always an arbitrary deadline.
In 1950s Vegas Exploding A-Bombs Were Cause For a Party
This argument doesn't make sense. The original argument was "this town isn't as free a market". Your argument can be used similarly by a non-free market spokesperson too: "Is not free market. (But) You're free to find other place to set up shop in".
The difference, which seems to have went over your head, is that it was done using the personal attention of someones handywork. Anybody can make a knife, just as anybody can create bonsai trees. The point is it was done by hand and was not manufactured. Just as the first poster talked about aesthetics. Similar to an original painting, or is it just a print?
Is it possible to just have my actual phone handle voicemail? I'm walking around with more computing power in my pocket then we used to fly a space shuttle, you would think it would be able to record a simple voice message from a phone line.
This is mostly false. In the past, the liability was completely on the bank. In October, it switched to the merchant only if the merchant hadn't upgraded to a chip reader. The switchover process is continuing, and when it is complete the liability will be with the banks, as it was before.
Have you ever worked on a risk system? Hard to get right I would imagine. Very possible news of a hurricane would lead to a bunch if max rate withdrawals. May not want to cut everyone off then..
It's a general purpose file system, it does great with metadata heavy workloads and normal streaming writes. The overwrite case is special because of COW. Eventually we'll be comparable to everybody else but we aren't now.
*Hey this is a turkish guy and you just wrote something wrong there

In Turkey not a lot of women wear burkas. Burkas and the variation that you would like to point are different things. If you wear burkas, it will be really hard for video surveillance. Because only your eyes and wrinkles around them are visible. The other variation "Head Scarf" which lets your face totally visible is ok for identifying people.

From cultural perspective, a lot of women in Turkey wear "head scarf". It is a symbol that you are a part of a religion and you share almost the same vision with the religion that you are a member of. But burkas is different. It means you feel more radicalized in terms of religion. A social example would be shaking hanks with women. If you are a man in Turkey and have a intend to shake a woman's hands, you can do it with a woman wearing "headscarf" but not burkas.
So, basically No. They don't wear burkas at all may be 4% percent at most.

Below is my personal opinion.

I don't really understand why people are bullshitting my country. You never lived there. What you just wrote is a black propaganda. What is the relation between wearing burkas in Turkey and ATM heist? You are not in that position to conclude that opinion. It is just a subliminal message.

A recent survey in Turkey showed that Atheism and other close variants are on the rise at its highest rate ever. I hope that one day people in Turkey will break their chains and get rid of that human-made arabic culture.
If this kind of thing interests you and you are in the south of England (or even Brittany in France) you should definitely check out the WW2 German bunkers in the Channel Islands. They are easy to reach by sea or air, especially during summer. I'm in Jersey and have access to a few large ones, contact info is on my profile page. Here is some background info if you are unfamiliar: https://en.wikipedia.org/wiki/German_occupation_of_the_Chann...

We regularly have people visit from all the way up and down Hitler's 'Atlantic Wall' and they really like the number and condition of the bunkers here.
That is the Sugar Grove NSA Listening Station. This is mentioned in the article.

Also google satellite images shows it pretty clear if you search for it. It's south of Sugar Grove.