skysight-inc/HackerNews huggingface dataset:
Linus would like to have his cake and eat it too. On almost every debate on licensing (binary blobs etc), he's consistently taken a "liberal" approach that would better suit a BSD/MIT license rather than the GPL. Through the years, he basically enjoyed the benefits of the "forceful mindshare" the GPL imposed on other developers, all the while pissing on everything the GPL promoted: "hey, you're forced to show us what you developed, but really I'm not going to force you wink wink". As much as I understand the world is not black & white, overall it's a very hypocritical stance.
So such a long sentence probably means he wasn't cooperating with other investigations, right?
This is an interesting, albeit well-known attack vector. A similar attack was used to attack Avast [0].

The author notes that write access could be used to inject dangerous objects (e.g. malicious pickles) into the database. This is arguably a much more serious bug because it does not require DNS rebinding (such a request can be performed cross-origin) nor can it be mitigated by refusing to read the response (as Chrome is proposing to do).

In short: the database modification attack is potentially much more severe, but as of yet no precise attack chain has been identified. However, I think it's very likely that some server software uses e.g. pickles in the database.

[0] https://bugs.chromium.org/p/project-zero/issues/detail?id=67...
This is purely anecdotal, but I am seeing far fewer replyallpocalypses than I did 10-15 years ago.

Has something changed, like better server or client email software? Or perhaps admins and users are more savvy about avoiding this kind of behavior?

(Maybe I've just been lucky to not have to deal with one of these for several years.)
But if the developer has, for whatever reason, chosen not to update the app to support retina displays, larger screens, and anything else that would benefit the user, isn't that an indication that the app is abandoned? Even if the functionality doesn't fundamentally change, it's not a good sign if the look of the app has been neglected.

I'm sure the vast majority of apps this affects are mostly rotting away with broken functionality. Worse still, there are many apps that could definitely benefit from newer APIs. There's no doubt that this new ruling is going to have some edge cases where old, but perfectly functional, apps are lost - but there is a grace period that developers of these older apps can work in to update them and keep them listed.

This is a good compromise - Apple issues a store-wide ultimatum to developers and any that are still interested in keeping their apps listed will update them. Those that aren't will need to do nothing. If any of your apps disappear, it stands to reason the developer has abandoned it.
On the Insecurity of Whitelists and the Future of Content Security Policy
> A maximum punishment “would also help address any false perception that unauthorized access of a computer is ever justified or rationalized as the cost of living in a wired society — or even worse, a crime to be celebrated,” Assistant U.S. Attorney Maya D. Song wrote.

If the US judicial system is serious about that statement they should be addressing the blatant violations of the law perpetrated by the NSA and FBI. As long as our own elite groups engage in hacking crimes, "unauthorized access of a computer" will remain "justified" in the minds of hackers.
Right, men tend to take on jobs that are physically demanding, or may have more dangerous aspects at higher rates. The reasons are complex. Pressure to support a family or make more money despite potential harm to themselves, unwillingness to turn down difficult assignments to avoid seeming weak, valuing personal strength and "toughness," less dangerous jobs are unavailable for their experience and/or location and they have to take whatever's available (again, social pressure means they "have" to work in the first place, no matter what the job is). Social stigma towards blue collar workers and manual laborers, and getting trapped in these jobs due to an inability to find safer employment while doing them.

Women tend to take on jobs that pay less, have fewer responsibilities, or they take more time away from the workforce. The reasons are complex. Pressure to devote more time and energy towards family and childcare directly, and conversely, less pressure to support the family financially -- sometimes even before children enter the picture. Inability to get childcare support from spouse/family/outside sources, not wanting to seem too "tough" or "aggressive," avoiding social stigma towards working mothers, pulling out of the workforce to avoid restrictive maternity leave policies, difficulties re-entering the workforce afterwards.

Lots of people face lots of problems.
Outreach.io | Full-time | On-site Seattle, WA

We are building an uncharacteristically good solution in the enterprise sales space. We have thousands of customers and a beautiful office in the Fremont neighborhood in Seattle.

Lots of go, react, and ruby. Email jobs@outreach.io
While true, NASA was able to have the shuttle program be so successful because of the things that they learned in the previous space programs. This is SpaceX's first space program. Don't compare a "senior" program to a "freshman" program.
You only need to know one: subtract and branch if <= 0.
LIVE BETA Now OPEN: Social Media and FULL Project Management All in One Product
_nice_.

For my pi I want something that I don't have to think about. A colleague pwned my rpi because I hadn't updated it in ages. OpenBSD seems like a better choice...
>It was an extremely financially stupid and ego-maniacal deal

Care to provide any evidence of this? Some analysis of the solar industry in general and what made Solar City especially bad? What's the insight you have into Musk's overall strategy and why do you feel like this merger is contrary to that strategy?

>There is no reason for Tesla to have purchased Solar City

They are releasing giant battery packs for homes. This seems like a pretty good reason to also have a solar solution to work with them, considering that just storing energy from the grid is sort of dumb. There are places with variable pricing but I can't imagine a Power Wall would ever offset those price differences.
Hmm, Little Snitch, if configured properly (ie. you allow the browser to only connect to ports 80 and 443) will alert you if a site wants to connect to something weird like 3306, 9000 etc. Then you can kill the packet and nothing happens. Like on OPs PoC. Still, it's super interesting PoC.
I agree on the analysis. You don't need enforce Linux in court, Linux will then keep getting more popular, to the point that those GPL-violation will gradually find that upstreaming/releasing their code is actually more beneficial than making the code closed. In the long run everybody wins.

Even Microsoft is embracing Linux as it pretty much has no other choices due to the ever increasing popularity of Linux.
First in the world Skype Network Compatible client released
This write-up by CitizenLab [1] describes the Trident iOS exploit chain. Excerpt:

CVE-2016-4657 [2]: Visiting a maliciously crafted website may lead to arbitrary code execution

CVE-2016-4655 [3]: An application may be able to disclose kernel memory

CVE-2016-4656 [4]: An application may be able to execute arbitrary code with kernel privileges

[1] https://citizenlab.org/2016/08/million-dollar-dissident-ipho...

[2] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2016-4657

[3] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2016-4655

[4] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2016-4656
If you mean "from data acquired since connection to STEREO-B was reestablishd", then no. The abstract of the paper says:

> "We present image sequences collected by the inner Heliospheric Imager instrument on board the Solar-Terrestrial Relations Observatory (STEREO/HI1) in 2008 December"

and the article information says the paper was received 2016 June 9.

Contact with STEREO-B was lost on October 1, 2014 and regained on August 21, 2016.
To choose an ip address from 127.0.0.0/8 subnet randomly in Python 3:

>>> import ipaddress
>>> import random
>>> ipaddress.IPv4Address('127.0.0.1') + random.randrange(2**24 - 2)
IPv4Address('127.23.181.175')
Is there any evidence that he'd have any means of cooperating with other investigations? He seems like a garden-variety social engineer, like the person who "hacked" their way to all those celebrity nudes a few years back.
Blue Apron – NYC – Full Time – ONSITE
Blue Apron (http://www.blueapron.com) is an NYC-based startup delivering original recipes, and pre-portioned, premium seasonal ingredients needed to prepare them.

Our engineering team creates software to manage the forecasting, purchasing, preparation, and shipment of new fresh ingredients every week. The nature of our business carries with it unique supply chain and logistical challenges at a large scale that require purpose-built solutions and data analysis. We're now shipping over 8 million meals a month nationwide up from 500,000 just over 18 months ago.

Current stack: Ruby, Rails, Ember, Backbone, PostgreSQL

We're hiring:

- Sr. Frontend Engineers: Experience building out front end architecture; JavaScript MV* experience (Ember would be awesome but not required) - http://www.blueapron.com/pages/jobs?gh_jid=14848

- Software Engineers/Leads/Mgrs: Ruby, Rails, Ember - http://www.blueapron.com/pages/jobs?gh_jid=11091

- iOS Engineer: currently iPhone app built in Swift; Swift exp. a plus - https://www.blueapron.com/pages/jobs?gh_jid=74053

- Product Designer: looking for someone who is equally strong with the visual aspects of design as well as thinking through UX flows and what the simplest, most elegant experience for the user could be - https://www.blueapron.com/pages/jobs?gh_jid=118839

This role comes with health, dental, vision, life insurance, a flexible vacation policy, and competitive salary and equity. To apply, visit our site (blueapron.com/jobs) and drop an application; it only takes about 60 seconds.

*While the numbers have increased, this article provides insight into we operate: http://www.forbes.com/sites/alexkonrad/2015/10/14/inside-blue-apron-and-the-meal-kit-rush/
I wonder if the autotldr bot on reddit might be able to help with that.
Private launches are required to carry insurance in order to receive a license; I looked it up when the Orbital rocket had a similar RUD, and the government had mandated something like $140 million or so between government property contingency and general liability, if I recall.

Edit: Yeah, here's Orbital's (I can't find SpaceX's): https://www.faa.gov/about/office_org/headquarters_offices/as... -- last two pages. It looks like they revised this license recently for their return to flight, too?
Revinate | Tacoma, WA // San Francisco, CA // Manhattan, KS // US-based Remote | Linux Infrastructure Engineer | Full-time

We’re looking for an Infrastructure Engineer to help manage and expand infrastructure that supports our front-end SaaS application and our back end data collection and processing. Our infrastructure is built upon cutting edge technology and we use Kubernetes, CoreOS, and Docker to run most of our applications and services.

We aim to build a well-rounded team and we’re looking for a someone with Linux systems background, who happens to also have deep TCP/IP and network engineering knowledge. We run on a large cluster of private baremetal servers running CoreOS and we’re looking for an engineer to round out our team with the skills required to move this environment into a co-location facility.

We're designing our infrastructure to require a bare minimum of operational maintenance. We aim to completely automate the traditional sysadmin tasks of hardware provisioning, software deployment, cluster management, and network configuration. While we don't expect you to have experience with every technology in our stack, we need you to be curious, motivated, and have a proven history of investigating and deploying cutting edge tech.

Interested? Please reach out to me by applying here: https://www.revinate.com/company/jobs/?gh_jid=264788
Dialing up the interview to 11 means that you are now a confounding factor to your own hiring processes. Removal of confounding factors means an improved ability of a company to develop evidence-based hiring strategies.

It sounds like you react to dishonesty with bad faith acts of your own, since you had no interest in giving that person a standard opportunity. The way you reacted sounds emotional and personal.
I agree your translation is a lot closer to the original text, the original for example talks about a 'solitary meeting' with the ship, it does not say like in the translators' that the character got there alone, they could have gotten there with others and left them to wait for the boat alone for all the reader knows.

As much as the sentence in the article is quite nice, it seems more of a reinterpretation of the original compared to an exact translation like yours.
Feedly competitor appoints new CEO to drive expansion
Unique, latest, cute and quick hairstyles for short hairs, just take a look, will help you to find short hairstyles for women, gives you killing look: http://www.camestyle.com/classy-trendy-short-hairstyles-wome...
The logic here seems to be, if NSA is allowed to break into computers, Jeffrey Tambor's email is fair game for everyone else.
One thing to note is that the purported health effects of smoking are almost all mental or neurological in function rather than physical. I imagine that before the modern era, where one could argue that mental disorder was far more uncommon, having tobacco to "modulate" mood and nerves would be seen as a legitimate boon to the user and society in general - especially when a person is liable to die from other physical illness than cancer (which takes a long time to develop). With reduced amount of mental illness a society can start to concentrate on the long term effects - people are more likely to get to the long term.
How to add Docker power to a Heroku app
Keyboards Without Keys? Surface RT Anyone?
Which is a sub-class of anomaly :-) it is really hard to scrub Youtube videos, and I (like probably a zillion others) was looking for root cause indicators; things like where exactly on the fuselage does it start? What equipment is there? How energetic was the explosion (oxidizer only? mixed with propellant? Etc. There are at least 30 frames between 1:10 and 1:11 (maybe 60). There are many things to rule out, was it a leak in the LOX hose? Was it a rupture of an internal tank? did the equipment detach prematurely? etc etc.
There's a new add-on called Dockhero. Alpha testers are very welcome!
Selinux (semanage port) and iptables (SECMARK?) might help you there.
You don't need legal action to exclude someone from a community. Many people in the community are anarchists of various kinds, and some have been targeted by governments, including Jake himself. They would really rather not involve the state (any state). Here is what one of the victims wants: https://medium.com/@flexlibris/theres-really-no-such-thing-a... It's not a witch hunt.
Anomaly Updates
Very exciting...I hope this works and they are able to bring half a billion people in remote areas online. Also interesting that they are future proof so their Infrastructure is ready for 5G and 6G.
We don't have an ETA for Office 365 support yet because we're focusing on getting the experience right first. But we get a lot of requests for that so it's definitely a high priority.
I'm sure I've seen browsers (maybe Opera?) which wouldn't let a website on a "routable" IP address make any requests at all to anything on a "non-routable" IP address; I assume that 127/8 is included in the latter range. That approach basically eliminates the DNS rebinding attack, I assumed that was normal practice in all browsers - obviously not, though.
Time for content creators to start banding together. Force youtube to deal with their lousy policies.
Todoist always let you put gmails as todo items. What does Moo.do have over Todoist (or at least different).
> if everyone's getting some candy.

The point is that people going to the SFC for help are clearly "not getting some candy", otherwise they wouldn't be bitching. A "non-enforcement" deal is much, much sweeter for corporations and sociopaths than it is for people doing the actual work.
Jisto (http://www.jisto.com) | Boston | Full-time | On-site

Jisto helps its customers run many more workloads on their (typically-underutilized, existing or new) data centers and cloud resources, without disrupting their existing mission-critical and legacy workloads and infrastructure.

---

We’re looking for a Highcharts expert:
Are you experienced with Highcharts graphing, especially with large, real-time data sets? We’re looking for someone that can create a Highcharts-based graph module capable of handling up to ~30,000 values on screen at any given time, without spiking browser CPU or memory. This module should be able to do full and partial refreshes, support user interaction and data export.
Interested? Please contact us at careers@jisto.com.

---

We have 2 other positions that all come with competitive compensation (full-time, on-site):

- Senior Software Engineer - Docker, Node.js, Golang: http://www.jisto.com/cloud/careers/#senior_software_engineer...

- Senior Software Engineer - Enterprise Applications: http://www.jisto.com/cloud/careers/#senior_software_engineer...

---

To apply, please email your resume or CV to us at careers@jisto.com.

Not an exact fit for one of our full-time openings, but know someone who might be? Refer them to us at referrals@jisto.com, and if we hire them, you get $2,500!
This is special pleading. Charges like these are vivid because we can see ourselves as somehow sometime being in the same judicial crosshairs. But in the grand scheme of American justice, hackers do not have the rawest deal --- that probably goes to low-level gang members.

Sentences are across the board too high. The US isn't accomplishing anything with a 4 year sentence in this case than it would with a sentence of 1 year. But we should be careful to remember that white dudes messing with computers are not an especially persecuted class.
Speak for yourself. The tone seems completely appropriate to me.
Commander Riker, as a Service
...twas qmail's spool space and nothing more.
Betting against insecure companies on Wall Street
That's not necessarily a good thing. Take VC out of the economy and you don't have much funding for innovation outside of academia, and academia fails miserably at bringing the results of research to the product / usability stage.

It's also important to note that over-investment in index funds will lead to economic distortions for the same reason that the housing bubble happened. "Mortgages are incredibly safe as an asset class, so let's put all money into broadly diversified pools of mortgages!" (Six years later...) "Who could have predicted that the entire housing sector would over-inflate and all mortgages would suddenly default?" When you inflate a sector you change the odds via feedback loops.
Information Security Techniques: How to Build a Command Shell Using NewLisp
> Fire crews can't approach until the fire burns itself out - too toxic.

You're thinking of hypergolic propellants like hydrazine and nitric acid. This is kerosene (RP-1) and liquid oxygen. Not particularly toxic, just hot as hell.

The deluge system in shuttle launches was for the flame trench and sound dampening to avoid the air pressure from the noise damaging the vehicle, not fire extinguishing.

You can see the launch tower get charred black, that's the fire protective paint.

It's not really possible to fight rocket fuel fires, just mitigate the damage.
And not just string compare. There are many operations where general purpose CPUs have problems for giving optimum results when operating with elements of 1 or 2 bytes at once with dependencies between them. E.g. UTF-8 string search implemented in hardware using the Rabin-Karp algorithm with a simple enough reversible hash window guarantying O(n) time could outperform current string search optimal O(n) implementations by e.g. 16x on CPUs with 128 bit / cycle load capabilities.
You can jump into real mode from long mode, but you can't run real mode programs while inside long mode.
Somewhat (maybe) related : another world from Éric Chahi used to support the pc speaker as sound output, and had digitized sound effects and voices (very low quality but still incredible).
It's really more about SIMD than about CISC or RISC. The pcmpxstrx family of instructions aren't like classical CISC string-compare instructions (though note that those are there too—"repe cmps"). Rather, they take 16-byte registers and perform operations (find first byte matching X, etc) on the bytes in them. I imagine that they can take advantage of effectively map-reduce style techniques for this (which is what you would do in software too if you were using simpler SIMD instructions).

Note that pcmpxstrx isn't really that fast in many cases compared to just doing ordinary SIMD operations.
One would think that people in that era would have a lot more to be nervous and irritable about. It is actually soothing for those things even if someone is not an addict.
I think in general overuse of "reply all" has been publicly shamed in recent years. Internet etiquette has evolved past sending chain mail office jokes.
"Nobody goes there anymore, it's too crowded" is a classic joke.
The use of the term "megabyte" to refer to the other measure predates the coining of "mebibytes," which is used by rather few people. And as you can see on that page, at least one standards body still uses "megabytes" for the power-of-two units.
I like Obama. Obama was wrong about that. It's not the only thing he's been wrong about.
At least the last two launches, off the top of my head.
I would imagine that crash on launch culling can be completely automated.
Ah, one of those rare articles that give the impression of being illuminating while leaving people not familiar with the topic far more confused than they were coming in.
SEEKING WORK - NYC / Budapest, Hungary + Remote - Full-stack Web / mobile development team

ZenHeads is your remote dev team at hand, team of 8 including the founders.
We help build your MVP and beyond (ref: classport.fit / trkr.net / riport.co.hu / soctics.com)

* Mobile: preferably Xamarin MVVM Cross (Android / iOS / WinMobile) or Unity3d (VR)
* Frontend: React, Redux, Angular (turning more towards React nowadays), D3
* Backend: Django/Python, Erlang
* Databases: Postgres, Redis
* OS: Debian Linux
* Hosting: AWS or any smaller VPS. provisioning with Chef / Fabric
* CI: Gitlab
* Clients from NYC / high profile investors

info+hn@zenheads.hu

http://zenheads.hu