skysight-inc/HackerNews huggingface dataset:
You've just described ROP chains. While ROP chains allow you to bypass W^X they are not without their limitations. First of all, you need to have some sort of memory disclosure of the target process in order to figure out what gadgets exist. Secondly you need to have significant control of the stack (lots of empty space) to create a full ROP chain. Thirdly, not all processes have enough libraries loaded for you to do a nice ROP chain (I believe glibc gadgets are Turing complete but I think some other libcs are not).
inputmice: I hear your Conversations app is really nice, and it's great to see XMPP is evolving well. Rather than being defensive about XMPP and badmouthing matrix, perhaps we can just bridge both ecosystems and both sides and clients benefit from wider reach? Especially when some tech like interoperable E2E ratchet implementations is of direct use for both ecosystems.

The two protocols have entirely different designs and philosophies and do different things. It's like claiming that NNTP competes with SMTP because you can uses them both to hold conversations. Please can we both just get along? :)

In terms of matrix's usability: i'd say it's been very usable for the last 6 months or so - and given the size and activity visible to the matrix.org homeserver, others seem to concur.
> but conversations will ALWAYS ask the user where he wants to send the message

Must be a bug (or OTR requirement, as OTR doesn't work with multiple devices). XMPP clients shouldn't require sender to choose the recipient's resource, unless sender is explicit that they want to target a specific device.
Yes, it worked initially, as those oppressed groups did get some degree of equal opportunities. But today, as it evolved in such a political way, the subtext has changed, different groups of people using it not to gain equal rights, but equal privileges, or rather, supremacy against other groups.
> What this paper describes is called ROP (return oriented programming). Theo has a different patch in OpenBSD to help mitigate that by re-linking the libraries at system startup, randomizing the location of most gadgets.

That's quite clever. By relinking I'm assuming that includes randomisation of the library objects? But that probably doesn't protect you if the program has a memory disclosure bug.
MVP and shipping. Then add value adding features and review customer fedback.
You need to have a memory disclosure bug (they're very common). You don't even need to be able to read all of memory, you just need to know the start offset of where the library is loaded (if the library is from a distribution you can download it and figure out the ROP offsets using the library -- though apparently OpenBSD has defences against that too).
But how can you estimate the "current value" for a unique piece of art?
Проститутки Киева (050) 330-94-94 – Проститутки Киева
That's the worst part about it. I believe art older than a reasonable number of centuries (e.g 300 years) should not be tradeable. What's the moral argument for allowing it?
In the general case I'm with you, but I think !strcmp is a very common idiom that makes me(and most C programmers) go "string equality". There is also the streq(a, b) camp that #define streq !strcmp.
Why do you have to incentivise an increase in the birth rate? Why does it always seem when there is a discussion of birthrate, it's somehow automatically assumed that low-birthrate == "bad", with the obvious next point being that it has to be fixed.

Honestly, from my point of view as a free-minded individual, this is exactly the sort of thing that is quite frankly disturbing about government intervention. Society is seen as some sort of grand-experiment that needs to be tweaked and prodded in order to optimize X or reduce the risk of Y, in endless different contexts.
Emphasis on in 2014, that was forever ago in Internet time. XMPP is steadily moving forward and the things mentioned in that post have improved a lot. Check out https://conversations.im/ for example.
Living in London I can hire cleaners and people to move stuff at very affordable hourly rates (the fact there's not an extremely popular Uber-type service for it says something about the demand...) and get food delivered whenever I want. And I'd expect sufficiently motivated humans to be considerably better at those tasks than a generalist robot.

I suspect that the purchase, maintenance and software licence costs of an extremely complex piece of machinery with incredible AI isn't going to compare that favourably with a minimum wage human anyway, even spread out over a few years.
And there are OpenWRT-enabled ones. I can't wait for a socket that can hacked and that I need to regularly update!

The IoT future is looking very bleak, with all the vulnerabilities it's going to introduce.
Really? Because I see debates about taxation and politics in general all the time in the comments - especially when these themes are directly related to the posts.

Seriously, how can you say that comments about taxation are off-topic while this article is not off-topic and is currently on the front page? You can't really have a conversation about poverty, welfare and related policies without talking about taxation, and it's a weird moderatorial distinction.
Hi Rob, I would lik to share an idea with you. Please drop me mail on rume.gbenedio@yahoo.com

Speak soon
but still it doesn't make any sense, because the costs of screening all candidates is much higher than preselection

The cost of screening 70 year old stripper candidates depends on how many such candidates their are to begin with. I doubt there are many, because the candidates select themselves out.
There is a village in China that will make a copy of any artwork for you. I have to say that good forgeries are just as collectable as the real thing :)
> you can't change your face.

You can obstruct it enough to confuse OpenCV: https://cvdazzle.com/

I wonder if this is the future of fashion?
This is a big deal. For those unfamiliar with Flask, it's a great library but has been sitting on 0.10 for three years now.

Blog post about it: https://www.palletsprojects.com/blog/flask-011-released/
Blind people might want to know what those images are supposed to be showing them.
Google Talk was based on Jabber, so you could log in to it via any Jabber / XMPP client.
Systemd 230 Is Upsetting Some Over Its KillUserProcess Setting
If you go to the Daily Mail report on the story it has loads of photos of him trying to be a goat http://www.dailymail.co.uk/news/article-3612748/Why-decided-...
For the cost, you could say the same with all the technology packed in a smartphone or a laptop. The fact is it has become very cheap once it is mass produced.
If you need to connect them with a wire, you might as well sustain them in the air with a long stick and spare the energy.
SWIFT to enforce customer-side security following banking hacks
Different sequence but same gene ? what is a 'gene' then ? a position on the DNA thread ? a % of similarity ?
I am trying with Torbrowser 5.5.5 on MacOS X with javascript activated, and weak privacy settings, and the webpage detects neither that it is TorBrowser nor that it's on MacOS X.

I have also installed uBlock Origin; maybe it is what makes the difference?
This is going off topic, so , to bring it back to subject: What about the fact that most of these artifacts have shady past? Many are the results of stealing, looting, illegal excavations , and for the most part even the recent artists received very little in compensation. Since you are aiming for the right thing to do, how do you justify the ownership of a roman sarcophagus in the first place?
Autonomous tools vs autonomous puppets to operate conventional tools. Roomba vs Ltd Cmdr Data.

We won't be seeing much of the latter any time soon. Even Star Wars assumes that the "roomba" type would be far more useful than his golden friend.
Heart rate is the main thing that matters from a health perspective. The 10000 step thing didn't come from any research, it was probably a guesstimate about how much you should power walk to get your heart rate high enough for a high enough period of time. Personally I've been power walking about 8km a day for a few months, and it's doing wonders. But what's important is the pace and your heart rate (mine peaks at 160, which is okay considering that I'm not running). Oh, and eating well is a must. Personally I don't crave junkfood and shitty soda anymore.
I'm currently working through the book Programming Phoenix and it's going well.

I would love more video tutorials because I personally prefer them to books. There was one where Chris went through building a chat app, but it's very outdated now.
If you think Vive is awesome just check out HoloLens its brilliant. Forget all the issues with limited FOV. HoloLens changes how you interact with real world.
previous discussion: https://news.ycombinator.com/item?id=11782364
It only confuses viola jones style haar detectors. You'd need different makeup for every detector.
In some (quite a lot of!) jurisdictions there are already laws that prohibit concealing ones' face. While the laws are against masks, it won't be a big stretch (esp. for a rogue regime with a plenty of corrupt judges at hand) to apply or extend such laws for this sort of make-up as well. All in the name of public safety, of course.
Thanks for the response and the link to the previous response. I'd missed that! Both are great answers. :}
Globe Gaze: Control the globe with your eyes
Ultimately it probably isn't for the immediate future.

I'd (a) ask you what makes you think people think it's a big deal, and (b) remind you that most "new" technologies, once they trickle down to the masses, are perceived as the next greatest thing.
You cannot use tabs for alignment, and people align things.
> I'd suggest you put your attention to more contemporary issues.

Like the rise of xenophobic, populistic, nationalistic, fascist groups in Europe - where I live.

> lamentable sub par state of most muslim countries.

I suggest you take care of that. It's not my business. I have nothing to do with muslim countries.

> stop the population explosion

Where I live, there is no such thing.
I know that version numbers don't necessarily mean anything. Wine took 15 years to get to 1.0, while Chrome and Firefox increment major version numbers every few weeks. But it still seems odd to have a major web framework at 0.11 after six years.
20 years of NetBSD code bloat
If it is working like it is supposed to, I don't see what the problem is.
Secret German WW2 code machine found on eBay
This is a confinement of OTR. OTR was never made for modern day instant messaging. Use OMEMO or send unencrypted messages and you won't have this problem.
Does Military Sonar Kill Marine Wildlife? (2009)
My mistake. It should be "just like most engineers I know at Google, I ...", which includes my friends, interviewers and people in Google interview process videos.
Didn't expect a new flask release because i had the feeling the author moved to rust development. did anything change recently ?
> Having children is not being valued highly, having a career is. Imagine a woman proudly announcing to some gala aquaintances that she has 4 children. In a lot of countries, this would be the norm. In Germany, the woman would be deemed low-class.

i was amazed reading this. there are nations where the natives are proud of beeing breeders?

while its not something to be ashamed of, it most certainly not something you should be proud of either...
Tests ported to py.test. I never got a full understanding on which python unit test lib I should use ..maybe that's a hint.

ps: well thanks for the hints below guys.
In times and places where eunuch servants have existed, there have been happy eunuch servants and unhappy eunuch servants
Calling it 'stack allocation' is confusing - object fields are replaced with scalars in the IR. The whole object is not allocated as it would have been on the heap but on the stack in the alloca sense.

But I don't think the constraints are that bad are they? Can you give examples? Modern compilers like Graal can even scalar replace objects if they will escape in the future.
Agreed. The only reason I can sort of accept is that making trade illegal would cause some items to be hidden completely. (Which is not a moral reason to accept trade.)
Lacrimi ascunse in secret
How luck plays a part in success
Private property? If you were to implement such a measure, it further encourages black markets, since the demand will still be there. A bad consequence can even be the destruction of art from either: hiding a crime or harder access to legitimate researchers and restorers.

Besides, not everything old is necessarily worth preserving.

You don't always need a physical object, you can take high-res scans or pictures.

Many pieces of privately-owned art are actually on long-term loans to museums.

Public museums usually have far larger stockpiles of objects than can reasonably be displayed. Many languish in storage for decades at a time. In private ownership they can at least be displayed and taken care of.
Who's got two thumbs and has already deployed Flask 0.11 to production? This guy.
To get full DSL speed you need to be within X feet of a junction box, which many people are not.
Besides adopting ideas from the mainframe world in UNIX System V architecture, what improvements has UNIX had in those 20 years in what concerns modern computing architecture?
Changes sshd port every 30 seconds, using Two Factor Auth to login
To be fair that's mostly the case in Baden-Württemberg and parts of Bavaria. Additionally the agglomerations in North Rhine-Westphalia. All other states have their workforce more concentrated in the bigger cities. You can move to the periphery but most jobs would include a commute to the next bigger city.

But Germany in general is pretty decentralized and you certainly don't need to move to Munich to get a job – there are many in cheaper cities as well with different sectors usually preferring different regions.
True, but you also need the interface for AI, which was BD developing. Human facing AI has a serious limitation if it lives 100% in the box.
From the vibe I get from our club adviser, it seems like a "they'll find you if you do it for long enough" situation. I wouldn't want to tempt fate and do it.

It's the same as if you have a noisy transmitter.
https://github.com/RocketChat/Rocket.Chat
EURUSD Looks to Weaken Further on Bear Pressure
py.test is fantastic, so yes.
Is Pallets the new name for Pocoo?
What's the moral argument for NOT allowing it?

The default is allowed, not disallowed.
It is possible: https://www.facebook.com/search/114952118516947/residents/pr...
There are lots of situations when you have to leave your home and you can't take your dog with you or it would be very difficult to handle.
No one is opposed to requiring non-GMO labels to be accurate, just like all other advertising.

What's being discussed here is simply requiring Joe's Corn & Pork to put "non-Halal, non-Kosher, yay GMO" on their label. I.e., forcing Joe to participate in someone else's marketing scheme.
I tried to get deleted a page recently where all five citations were to a commercial website that required a login. Apparently this wasn't sufficient reason to get the page deleted. I was told the sources "deserved further scrutiny." I gave up on Wikipedia editing after that.
But it is, sans the tactile feedback. By which I mean, once worn, the experience is indistinguishable from being in a room. This is from experience. I've experimented with Oculus, Hololens and Vive and by far Vive has the most compelling experience from the point of view of generating a perception of an alternative reality - and your description is actually pretty good in explaining the experience.
> why isn't the fact that the U.S.A has even more lethal weapons troubling?

Business Insider is an US publication. In their POV, they aren't threatened by the US armed forces. Armies of an antagonist state do represent a threat, particularly when these arms races are motivated by a specific demand to counter the capabilities of the US armed forces.
Maybe on VAT, but in regards to US sales tax laws (which are implemented on the state level), I believe it's on the sales price only.
As far as I understood there was a delay in the release process because of documentation missing/outdated and project organization changes, not because the project itself was not moving along.
Bangkok Airport Express was closed down in 2014 due to low ridership. [1]
The non-express line also serves the suburbs so it doesn't count.

[1] https://en.wikipedia.org/wiki/Airport_Rail_Link_%28Bangkok%2...
It's not their content, it might fall under fair use but I'm very doubtful. And that doesn't help with restricted content, where they are almost certain to get a DMCA takedown notice.
10 terabits per second on a single strand.

Amazing. I think if people back in 2000 would have realized the capacity coming along in fiber, then a site like youtube would have been obvious to many more people. Back then, I think a lot of people thought it would be cool to have a video distribution site... but how the heck would you pay for it. I remained amazed and confused by how Google could somehow afford to embed video on every random website -- becoming the video provider of the entire Internet. But I guess for them it was a simple formula of using their excess capacity for something.

Amazing.
No, not quite.

It's a single camera mounted in the centre. So it can't do stereoscopic 3d and although the resolution is OK, it's not great. Currently you can bring the camera up as a floating window attached to you controller that lets you look out into the real world. It's kind of like looking at the world on a tablet screen in your hand.

I believe they recently have provided access to the camera stream via the API, so we might see developers start integrating it into things, but it's never going to be like AR.
I would highly recommend pytest. It's very simple, very pythonic.

Here is for example my Hearthstone simulator, with ~600 pytest-compatible tests: https://github.com/jleclanche/fireplace/tree/master/tests

It's just plain asserts. You run it with `py.test`. Nothing simpler.
I really like the ideas behind Matrix. Sure, the existing (open) clients aren't all that sexy, and synapse can be a bit slow sometimes. But implementing your own client is a breeze and bridging other networks through application services makes it incredibly powerful.

My experience with the matrix.org community has been very pleasant so far. Keep up the good work, folks!
Seems like the tech industry is moving toward it or at least, heavily investing in it: Oculus, Vive, Gear, Daydream, Hololens, AMD, Magic Leap, Sony (Playstation) and on top of that the media is promoting it as THE next big thing. And this is what I don't get, maybe it's just me but I don't see it becoming practical/essential (like a computer for example) for a long time, but again this is what I think.
Pallets is the new umbrella project for all Flask/Werkzeug related projects.
Not to mention that is only for facial recognition.

If you want to look at a much better way of tracking people check out CreapyDOL [1]. It works by looking only at wifi data. As he says it "Stalking an entire city on the cheap."

Not only this, but if you want to stay in the CV realm you will also need to switch up:

* Your stride
* Your height
* Width of shoulders
* How far or if you sway your arms while walking

All of those could be used to track an individual. It's not an absolute game, it's a numbers and percentage game.

[1] - https://www.youtube.com/watch?v=BcvxD7p4Suw
Using linux utilities in a real world usecase
No real problem. But I think many can have an subconscious bias that any software at 0.x is unstable. This is how semver[0] treats 0.x releases and it was a common convention long before that.

[0] http://semver.org/
> we should at least attempt to figure out a way to put communication back in the hands of the people.

What to do if people (majority) don't care ?

Because that's the side result of bringing uneducated (regarding IT) masses online. They sell on instant gratification, cute shit (emojis, gifs galore) and hype. In return they don't hesitate to give their data and conversations.

No wonder everyone want's their own silo.
I'm not bad mouthing anything. It's just that Matrix doesn't solve any problems XMPP hasn't already solved or could have solved with an extension. Matrix is basically a pointer to a stream of messages. You could have easily made this into a XEP. In fact there have been ideas in the XMPP community called MAM subscriptions that are basically the same thing.
Even if that extension would have been a radical change in C2S communication as long as S2S stays the same you could have built your protocol on an existing infrastructure.

I mean I rather have people use matrix than a closed system like WhatsApp or Signal. But I honestly don't see the point for developing a new protocol other than JSON over HTTP fits better into the zeitgeist and NIH syndrome.
What UX designers can learn from 1990s Japanese video games
You've linked to the main page, which at this moment in time happens to have the bullshit blog post at the top. It's better to link to the actual blog post: https://stactivist.com/2016/05/29/bullshit-fighting/
The NSA Stopped Zero Terrorist Attacks
I've seen this in almost every online community I've been part of. Online moderation seems to attract a certain kind of person: very picky but with some logical flaws, lack of common sense, relatively poor social skills. Eventually the bad money drives out the good. Usually they act in a way that isn't technically wrong (or borderline) but still cause damage.

Strange thing is that I'd expect Wikipedia to be one of the exceptions. HN and Reddit are: the quality goes down a bit with more low quality contributions, downvote-disagree etc. as the community expands. But overall pretty stable. I always thought this was due to size: at some point there are enough people "in power" that a reasonable number will see the bigger picture. Haven't had enough bad Wikipedia experiences to comment, but find it surprising.
But it's not an idiotic simplification. Money, diplomatic relationships or international reputation are objectively irrelevant (if one wants predicatble outcomes) when dealing with the lords of Kremlin.

For example, observe the effects of economical sanctions on Russias de-facto war with Ukraine (none).

I'm not saying other large powers would be any better. The difference is, for example with US you can follow a little bit better as an outsider what is going on with their policies while Russias actions are far harder to predict.
European VC Challenge
Passing References to Deferred Function Calls with Std::ref
Successful Teenager How to become one
Affiliate Marketing
I'd love to see a similar article on the economics of these steps. The only paying customers are in the datacenter and the end users, but I was under the impression that peering agreements were free as long as the bandwidth is balanced between the two parties. But surely someone must be paying for these massive infrastructures. Is it a system of back to back recharge of bandwidth?
Phen375 Diet Pills Benefits and Reviews
Yothu Yindi's Treaty
Paper Points Up Flaws in Venture Fund Based on Virtual Money