skysight-inc/HackerNews huggingface dataset:
> It's not. There are two areas where the leniency was a problem here. Firstly, the leniency in rendering one media type as a completely different media type because the browser heuristic thought it was being lenient. Secondly, the leniency in parsing HTML out of an image file – you can't do that with valid HTML.

I think you can argue the first is a problem. You have an example demonstrating as much. Arguing that the second is a problem is much harder. Lenient HTML acceptance been hugely advantageous to the adoption of the web. There may have been some issues from this, but it's valuable enough that the effort to "fix" it was abandoned and the W3C and WHATWG returned to codifying what leniency should look like.

> I've literally just given three specific examples of it causing security vulnerabilities.

Well, at least one example. Coercing a file served as an image to HTML isn't an issue of accepting malformed HTML, nor would I agree that the JS example is a problem with leniency.

> No, it was intentional. It was specifically Unicode characters that looked like less than and greater than signs, but weren't.

Okay, I reread your last comment. I initially thought you were saying that Netscape was treating '&lt' as '<'. So Netscape decided to treat some random unicode chars that happen to look kind of like the less-than symbol (left angle bracket: ⟨, maybe?) as if they're the same as the less-than symbol? This seems amazingly short-sighted and pointless. How was this issue not seen, and was this even solving a problem for someone?

> Somebody noticed that href="java\nscript:…" wasn't being parsed as JavaScript, and it was causing some malformed pages to fail to work properly. Rather than let it fail, they tried to fix it by stripping out the whitespace, and caused a security vulnerability.

So the issue here is incompetent input sanitization. I don't think the browsers being lenient here is the issue.

> If these three examples aren't enough, take a look at OWASP's XSS filter evasion cheat sheet. There's plenty of examples in there of lenient parsing causing security problems: https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_She...

A few of these are interesting in the context of browsers being lenient. e.g. This one requires lenience as well as poor filtering:

<IMG """><SCRIPT>alert("XSS")</SCRIPT>">

Most of these are just examples of incompetence in filtering, though, and a great example of why you 1) should not roll your own XSS filter if you can avoid it, and 2) why you should aggressively filter everything not explicitly acceptable instead of trying to filter out problematic text.
Now this seems going to end very shortly
Maybe I shouldn't have looked at Elm. Now I cannot “unsee” it
Something I just noticed after testing Librevault today... Extremely low CPU/power consumption. Nice!!!
Cache link: http://webcache.googleusercontent.com/search?q=cache:bBMzhiV...
... and yet again this shows that complexity is inherently BAD in secure systems.
Meet the California couple who uses more water than every home in Los Angeles
Publishing a copy is not taking. Taking would be something like declaring exclusive use over the work (taking the copyright itself).

Publishing a copy of something that already exists is an independent action that doesn't affect copyright holders' use of their property.
Good documentation is a key part

- Good summary of best practices for documentation: https://bocoup.com/weblog/documenting-your-api

- Tips for good api doc design: http://blog.parse.com/learn/engineering/designing-great-api-...
How to safeguard web service failures in Elixir with Fuse
shudder unity performance....
I'm sorry, but this critic is way off base about NBC's gymnastics coverage. NBC should be applauded for letting the performances speak for themselves and having the self-restraint to focus on what the gymnasts do well rather than poisoning the mood by expounding on minor imperfections.

Additionally, I didn't get a single hint NBC was characterizing these gymnasts as 'teenage pixies,' or trying to deceive the viewer to ramp up the drama. NBC let the images do the talking, and the US team was a picture of control, power, and intensity.

Last night the US had essentially won the competition before the floor exercise, but still, as NBC showed the US gymnasts warm-up, I was overcome with a realization of just how powerful these young American women are and how well they represent the United States to the rest of the world. Tears swelled.

After Raisman's transcendent floor routine, NBC showed her parents in the stands. Despite being nervous wrecks in all the previous camera shots, they looked on expressionless, probably coming to an unknowable realization of their own. Raisman eventually walked over to her bag at the side of the arena and the Chinese team basically lined up to pay respect and show their admiration. The crowd started chanting Ali's name, which I've never heard at a gymnastics event.

I hope the critic wasn't consumed with the inane chatter of the internet during these moments. Then again, here I am engaging in the same. I just wish journalists would stop treating opinions from the internet as legitimate and representative, particularly from Twitter.
A new collaborative tool could revolutionize scientific authorship
Why NIMBYs and Their Haters Can’t Offer a Solution to Seattle’s Housing Crisis
It would be fun, at some point, to compile a list of onomatopoetic translations for the various Scala operators that are found in nature. For example:

>>= "fffff...Pwip!" (the sound of monadic bind)

|==> "TCHvvvvvv..." (lightsaber igniting)

|@| "AAAAAAHHHH!" (Edvard Munch 1893 operator)
Thought we could maybe get a bit of a discussion started here. I have been struck by the simplicity and beauty of Elm and now looking back at JS with all the Redux boilerplate just kind of makes me cringe. What do you guys think?
Ask HN: Software community requests your product be open source.. thoughts?
Say you come up with nice software which people like. It uses the freemium model so the core functionality is free but some features are paid.

But there's a section of users who think it should be open source. They suggest they'll only use it if its open source.

What do you think about this scenario? Should you make it open source?
I've been through their process twice at different points early in my career and received offers both times- the reason I didn't join both times was that I was interviewing for a specific position on a specific team and because of whatever reason I was getting an offer for a similar position on a completely different team.

The first time I assumed that it was just a freak thing, after the second time I asked around and got the vibe it was completely normal for a variety of reasons, often because a manager on the interview cycle with more clout decided they liked you and you were therefor going to be working for them.

I like a lot of things they build and believe there are some very talented people there, but at what cost am I willing to participate in that activity directly? Not that high, I'll just reap the fruits of their labor from the outside.
> which lets me make forward progress on deduction before I forget WHY I was looking under this rock in the first place.

There's nothing quite as deflating as finally getting to the end of diagnosing a particularly pernicious bug just to have the understanding trigger the realization that you've encountered this bug before a year or two prior, spent just as much time originally figuring it out, and had somehow forgotten about it the interim. Yay for wasted days of our lives.
The real quote would have been:

> Do CPU designers spend area on niche operations such as _binary-field_ multiplication? Sometimes, yes, but not much area. Given how CPUs are actually used, CPU designers see vastly more benefit to spending area on, e.g., vectorized floating-point multipliers.

So, CPUs are not "optimized for video games", they are optimized for "vectorized floating-point multipliers". Something video game (and many others) benefits from.
The article is overly narrow in its interpretation of her comment - its a figure of speech saying that yes hard work matters. Sometimes execution and its extent matters a lot more than the idea itself. She didn't qualify it by saying nothing else matters. Obviously she knows its one of the factors, but its a way of saying "Yes, hard work is really important for early stage startups."

Not saying she is the best CEO ever, but dumbing down what she said to this level and going on a long rant is just stupid.
Hydrogen molecule falls to quantum computer
Maybe a better headline would be something like "How software crypto can be as fast as hardware crypto". I was curious about this after the WireGuard announcement so thanks to DJB for the explanation.
C# is just a glue language, physics is run inside the engine as optimized C++, it is vectorized where possible.
The CoWatch Smartwatch: First to Bring the Power of Alexa to Your Wrist
They got into an iPhone5C. If that phone was a 5S (and the FBI screwed up the MDM process just like they did) they would be out of luck.
Unity scripting is in C#, but the engine itself isn't necessarily written in C#. The physics are based on physx (which I assume vectorises things).

http://blogs.unity3d.com/2014/07/08/high-performance-physics...
Just think, there were even multiple versions of JSONx so someone somewhere had to be using it.
> the rent is $6200 for each couple.

Wow ^ Wow!

Half of that amount to share a place was ridiculous enough. Paying that full amount in rent every month is a different level of stupid.
Location: Spain

Remote: Yes

Willing to relocate: Yes

Techologies: NodeJS,Python, ArcGIS, R

Résumé/CV: https://es.linkedin.com/in/manuel-jiménez-bernal-669b976b

Email: manuelo.dev@gmail.com
As far as I can tell, the word intended here is “mediocrity”.
Me to. Haven't thought about it in ages. Does anyone know what they are and if they're poisonous ?
If-Then-Else Is a Code Smell
I can't ever imagine a scenario where a hack _like_ _that_ is acceptable.

If you need something like that, just drop down to assembly. It's more portable (in the sense that you're coding to an interface), infinitely more clear about what you're doing and and how you're doing it, much less likely to break, and when it does break is likely to break loudly.

Even if you've never done a lick of assembly programming (I haven't done much) it'd still be infinitely preferable, even if you had to support a dozen architectures with two dozen different function proxies.

"Hack" is a very broad term. By some definitions a significant chunk of extant code qualifies as a hack. But whatever the definition, a hack still implies some quantum of legitimacy. There's nothing legitimate in using function type punning as a way to reorder or control argument values. Not unless this was 1969, where there was precisely one C compiler, used by precisely one guy, and where such code was expected to be thrown out in short order, never to infect code that executed in other than identical circumstances.
If you make it open source those people will invent new hoops for you to jump through. IMO you should killfile them and increase prices.
I'm sorry, but this critic is way off base about NBC's gymnastics coverage. NBC should be applauded for letting the performances speak for themselves and having the self-restraint to focus on what the gymnasts do well rather than poisoning the mood by expounding on minor imperfections.

Additionally, I didn't get a single hint NBC was characterizing these gymnasts as 'teenage pixies,' nor trying to deceive the viewer to ramp up the drama. NBC let the images do the talking, and the US team was a picture of control, power, and intensity.

Last night the US had essentially won the competition before the floor exercise, but still, as NBC showed the US gymnasts warm-up, I was overcome with a realization of just how powerful these young American women are and how well they represent the United States to the rest of the world. Tears swelled.

After a transcendent Raisman floor routine, NBC showed her parents in the stands. Despite being nervous wrecks in all the previous camera shots, they looked on expressionless, probably coming to an unknowable realization of their own. Raisman eventually walked over to her bag at the side of the arena and the Chinese team basically lined up to pay respect and show their admiration. The crowd started chanting Ali's name, which I've never heard at a gymnastics event. It was high Sport and great TV.

I hope the critic wasn't consumed with the inane chatter of the internet during these moments. Then again, here I am engaging in the same. I just wish journalists would stop treating opinions from the internet as representative and worth responding to, particularly those from Twitter.
Yeah! I was surprised by the amount. When I read things now about compiler speed, I'm looking through a different lens now that I have an idea of the sheer amount of work it's doing. Pretty impressive.
I should have been more precise. Access and use are synonymous with respect to the topic. The more appropriate word to have used is perhaps taken.

Your land may be taken from you in the sense that there is now a concrete block where your house used to be, but it is difficult to say what is taken when someone else prints a copy of something they saw.
Keep in mind that combining most normal formats with most archive formats is trivial, because normal formats start at the beginning, and archive formats have a table of contents at the end. Concatenate both files and you're done.

Combining with PDF is also on the easy end of things, because the PDF header just has to be somewhere vaguely near the start.
All I want is for C-x ` to work in Emacs's built-in compilation-mode. As long as the new error reporting doesn't break that, I and the other Emacs "M-x compile" users will be happy campers.
No. Undefined parameters are not guaranteed to be zero in C. Static variables not explicitly set are guaranteed to be initialized to zero in C.
TruValue Labs is an awesome growing fintech start-up leveraging advances in natural language processing, cognitive computing, and machine learning to provide actionable insights. Our products analyze big data in real-time, providing analytics from sustainability and Environmental, Social, and Corporate Governance (ESG) issues at the speed of current events – an essential tool for successful business and investment decision-making.

We are looking to hire for both frontend and backend roles. We are also looking for Data Engineers and Machine Learning Specialists.

We have a great team, great benefits and early stage stock options! Apply via the links below. All resumes come directly to me. Thank you!

Jennifer

Location: San Francisco
Will sponsor Visas.
Relocation assistance available.

Frontend Developer:http://truvalue-labs.breezy.hr/p/72f6528b870a-frontend-softw...

Backend Developer: http://truvalue-labs.breezy.hr/p/e3ab0b6e9bc1-backend-softwa...

All other positions: http://truvalue-labs.breezy.hr/p/85e88fd1c6e1-general-applic...
I've been working with Elm over the last week, and the error messages are informative and helpful. When, possible they educate you on the nature of the error and guide you on how to fix the problem.
The irony is that the word is "mediocrity" when referring to an individually mediocre person, as this article seems to advocate. Unless of course your goal is to call out the culture of the company which is entirely mediocre.

Anyhoo the point is that you're better off being empathetic and understanding of people who you judge as in some way not be "adequate". And even then first have a look at yourself in the mirror - are you really so awesome? And even THEN, people don't like being criticised - it's the best way to destroy a relationship.

So perhaps if your colleague isn't performing at the level you expect you can either be quiet or help them get to the next level.
Thanks for raising this concern. To make it clearer, we do collect the data to do processing but then we delete the conversations and the executive summaries we generate after sending them to our users.
Why are they optimized for vectorized floating-point multipliers? Does the CEO of Intel just tell all the engineers to do this because he likes multiplication?
While interesting, this research is not on the path to "true" artificial intelligence. It may solve playing a majority of video games given enough effort, but that is not the author's stated goal. Why do I think this?

The representations of the various algorithms are not unified. The answer to the question "what algorithm lies halfway between JinJerry and YOLOBOT" is difficult to answer. This is because they are discrete solvers who's implementations cannot be seamlessly blended. It is only at the level of their decision outputs that they share a common language.

The strength of natural intelligence derive partly from the fact that all strategies are implemented using the same components. Strategies can be described as sparse activation patterns of a neural substrate. Any strategy can be added to, subtracted from, or otherwise combined with another because the activations have a common representation language. The choice is never "either/or" for natural intelligence but "how much of which?"

This problem is also found in the meta-selection problem. The decision tree used to choose a component algorithm (even if applied repeatedly throughout the course of a game) doesn't allow for strategic blending, and itself is not implemented in a language common to the strategies.

In contrast, biological strategies are selected by competition between signals from many lower level systems and top down control and predictions. Ultimately a decision such as "fight or flight" comes down to how strongly a sparse set of neurons if firing and which motor paths are suppressed and which are activated. Because both the strategies and the evaluation of those strategies are implemented in a common substrate, you can blend, adapt, compare and update all aspects of the system. This is crucial to the adaptability and speed of natural intelligence.

Edit: I should note I am in full agreement with the author that simulated environments (of which video games are an example) are going to be essential for the creation of "true" AI. My comments relate specifically to the line of inquiry in the papers described.
I'd say modern CPUs are not optimized for anything in particular. They are simply okay at doing general purpose stuff.

Anything more specialized exists in the form of DSPs GPUs, etc..
Connotation. Connotation is a huge part of human language, and is completely orthogonal to the denotation, which is what a vector is going to find. For instance, an AI should accurately be able to distinguish the fact that calling someone "cheap" is different from calling them "frugal", even though both objectively mean that the person doesn't spend much money.

There's also the related phenomenon of "subtext" -- the idea that some language has a different meaning than what's said. For instance, when I ask about whether a signature line on a form is required, and the other person says, "Yes, it's required. However you think best to get the signature." There's a subtext there of, "This signature won't actually be checked, so don't worry about it."
Here's the request and response from router: http://pastebin.com/e7rxLsGJ

The router itself is a BT Internet (UK) branded one. Not sure of the exact model but I'll try to find out...
Reminds me of FOMO bot by Thoughtbot https://github.com/thoughtbot/FOMObot
I took digital design. We started with gates and used a simulator. We made flip flops and microcode to make a CPU.

I took courses on the M6800. We learned about 74LS logic and fanout and karnal maps and wired-or. I took a course on computer architecture. Theres a harvard architecture.

I got paid to program in VAX, 68000, 8086, 8051 PIC and AtmelAvr assembly language. I also know 6502, of course, and M6800.

I got a master's in electrical engineering control systems. I am an expert on differential equations.

I designed and did layout on a couple circuit boards at one job.

I made a 300VA line regulator at one job.
http://apiusability.org/

This page was started by a dozen or so researchers back in 2009 and has a list of publications on the subject.
Thank you late2part for catching these errors. We obviously didn't do a good job proofreading our content. We just updated the website right now. Thanks again :)
The World's Rarest G-Shock, and a Conversation with G-Shock Inventor Kikuo Ibe
This may be an unpopular opinion, but I find it completely fine and reasonable that CPUs are optimized for games and weakly optimized for crypto, because games are what people want.

Sometimes I can't help but wonder how the world where there is no need to spend endless billions on "cybersecurity", "infosec" would look like. Perhaps these billions would be used to create more value for the people. I find it insane that so much money and manpower is spent on scrambling the data to "secure" it from vandal-ish script kiddies (sometimes hired by governments), there is definitely something unhealthy about it.
Same issue with a physical one. The solution is the same, too: get a new key (and lock).
The fact they didn't want us to know
Ask HN: How to negotiate pay when being indebted to employer?
I'm currently a university student who's about to finish his bachelor degree. I've taken part in what we call "dual studies" (literal translation) which is basically employment by a company while also being admitted to university for a bachelors degree program.
The employer pays all university fees and you get a normal monthly paycheck (albeit smaller compared to a normal employee obviously, but more than enough to sustain yourself). You go to university like everybody else, just work whenever you don't have any classes.
Since this is costing the employer more than it earns them (because university is taking up most of the time), it's pretty common to have a work contract waiting for at least a few (say 4) years after university to sort of re-pay the money the company spent to get you through the degree. In general, this is a pretty good deal when it comes to earnings and opportunities (given the company is willing to invest in this).

In my contract that I signed when I started it basically said that if I'd leave directly after finishing my degree, I'd have to pay my employer back for the amount of money they spent on me, or, like I mentioned, work for them for the next 4 years. However, the contract that is meant for those 4 years I have yet to sign and I have yet to discuss pay.
This is where my question lies, what is the best mindset to go into a negotiation for the payment I'll receive in the next years? Since I'm kind of paying off my debt, should I be ok with a paycheck that is below the average for my field or should I not care about that money at all when it comes to my paycheck?

Greatly appreciate your thoughts on this.
I've just started dipping my toes into education; sharing stuff through my blog to demonstrate how clearly I can convey things.

I don't know about your personality, but if you're similar to me, then it's about stepping out of our comfort zone and building a network.
The tech looks cool, but the hardware... one thing Amazon nailed was the look and feel of the product. This IMO looks more like a toy. (Hope that isn't much of an insult, I naturally haven't seen it in real life.)
Friends as in "professional contact"? Meetup.com has tons of groups dedicated to startups and software development. They have talks and meetups routinely. Very informal and easy to just get to know other professionals in the area.

Friends as in people you hang out with during your down time? That's beyond me. I'm afraid. I only manage to befriend old people.
Do you have a free trial that I can check out?
Thanks. You would think an article about kissing bugs would have at least one clear image of the bug itself. I now know exactly what these are, thanks to the article you linked.