skysight-inc/HackerNews huggingface dataset:
If they are, they're not telling.

In theory the nvidia out-of-os x drivers are for people using their cards on the pre trashcan Mac Pros. In practice they allow you to make yourself a decent hackintosh desktop. Or used to. Maybe the 1xxx cards don't work on the old Mac Pros, in which case i don't think nvidia can justify continuing putting out those drivers.

Who would this hurt? Apple. Very slowly though. Most people running hackintoshes are opinion leaders wrt to tech stuff, and when they switch to Linux or Windows, Apple will lose more mind share.
He's the CEO
Two Indian engineers at Garmin in Kansas shot, one killed
I'm guessing they saw it through remote access logs? If they see he downloaded gigs of data he wasn't supposed to be using for his job then that's very suspicious. I wonder how they found out that he copied it to an external hard drive though. I'll want to watch this case as it develops.
Ask HN: What programming language used to build websites is deprived of fatigue?
Like in title - in the last years I've noticed that javascript has its own fatigue, Ruby with Rails framework too (a bit), I see it also in Python + Django (Python 2 vs Python 3) and PHP (a lot apps to maintain that works on old PHP version).

Is there currently any backend technology that doesn't have such problems?
Even so, if the parser handles security or human safety then it shouldn't be written in C, or even using a parser generator that generates C.

Just use ML, or Rust, or bloody JavaScript for all I care. I don't care if they add a ton to response time, or add 100% perf overhead costs for running the thing.

Having an OS, ssl library, web server etc written in C is bad enough but at least that code has many eyes on it. Companies shouldnt throw their custom made tyres on top of that fire.
> This list contains all domains that use cloudflare DNS, not just the cloudflare SSL proxy (the affected service that leaked data). It's a broad sweeping list that includes everything. Just because a domain is on the list does not mean the site is compromised.

In this case, HN , IIRC, does not use the proxy.

Checking the certs, CloudFlare reissue using DigiCert, I think, whereas HN is using a Comodo cert.
due to the inherent bandwidth limits that Thunderbolt has as compared to the buss speeds of these GPU cards

[citation needed]

There probably are applications that need every single GBps of the x16 connector, but just saying "bandwidth limitations" isn't sufficient - see also the common SLI setup which switches to x8/x8 if two cards are installed.
5 Steps to Install MacOS Sierra in VirtualBox on Windows 10
http://www.cell.com/cell/fulltext/S0092-8674(17)30130-7

It's called a fast mimicking diet or FMD.

Quantified Bob took it on last year: https://www.quantifiedbob.com/2016/04/fasting-mimicking-diet...
A friend of mine was on the brink of Type 2 diabetes and reversed the symptoms / indicators after reading about the Newcastle University study. Worked for him.

http://www.ncl.ac.uk/press/news/2015/10/type2diabetes/
I'm not saying it's not a mistake but the possibility that it's deliberate must at lest be considered.
Well it probably just checks if the given domain uses CloudFlare and reports compromised if positive.
As a side note, depleted uranium is certainly still radioactive. "Depleted" refers to the percentage of U-235, the isotope used for making nuclear weapons. Only about 0.7% of naturally occurring uranium is U-235, with the rest being mainly U-238. U-238 emits alpha particles, with a half life of about 4 billion years.

The radioactivity is unrelated to its use as bullets, which relies on its high density, but it is radioactive.
We are emailing them all, but we are starting with those that we know had data cached by a search engine.
See also: On Chomsky and the Two Cultures of Statistical Learning by Peter Norvig: http://norvig.com/chomsky.html
If only they would have waited for Ryzen :-P
etfs own the underlying stock. if the ETF bitcoins are lost or stolen, the ETF is worth zero. stocks cannot just vanissh like bitcoins can
That is weird. What kind of tech company doesn't have an old laptop or a Chromebook for such interview format? What if you don't have a personal laptop? I'm certainly not bringing my work laptop to a job interview...
Not in a random unrelated bug that people hijacked to discuss a different problem, no.

I think there's nothing special about refusing to discuss stuff there and disabling comments.
The Rise of the Monk Mode Morning
I'm not sure if you've had a chance to look at the Cloudflare blog post yet (https://blog.cloudflare.com/incident-report-on-memory-leak-c...), but while they take full responsibility they do point out (under root cause of the bug) that a generated equality check could be >= instead which would avoid the bug. Obviously GIGO applies and it's their bug, but it might be worth seeing if there's anything you can do on Ragel side?
Yes. If there only were a header that could tell the server which languages the user considers acceptable..

No, geolocation is probably a great idea. /s
Supercomputer tests ways to divert blood from aneurysm
In addition to comments here calling the words 'memory leak' disingenuous because it's technically correct but underplays the problem, I'm now seeing articles in non-technical publications referring to the incident as a "leak".

In the wider world the word "leak" doesn't mean memory access patterns, it means deliberate sabotage.

The headline in "The Verge" is "Password and dating site messages leaked by internet giant Cloudflare". That's technically correct too, but also gives completely the wrong message.

Simpler, proactive messaging from Cloudfront might have helped here.
IP addresses of visitors? Depending on the site or visitor, that could be theoretically a compromise.

But the parent comment is untrue. Cloudflare will have unencrypted data in memory at some point, even if it's encrypted coming and going. This is how they eliminate the scary browser message about self-signed certificates, ironically.
Wait until the managers are replaced.
Yes, svn handles large binaries just fine. Most last-generation version control systems do. It's probably the main thing keeping some companies from switching to git.
No. Eventually you have to interface with JavaScript, and then the suck begins.

I wish web programming wasn't such a dumpster fire, start to finish. It makes me long for the days of native desktop fat clients.
AFAIK, type 1 diabetes is thought to be an autoimmune disease, where the immune system incorrectly identifies the beta cells as an infection/foreign body and destroys them.

With that in mind, I wonder how effective this actually is. I (I'm a T1 diabetic) grow some new beta cells, my overly aggressive immune system wipes them out again..

EDIT: reading the reddit thread (https://www.reddit.com/r/science/comments/5vufpb/the_pancrea... - thanks austinjp) i'm not the only one to ask this. The general consensus is it's not going to be useful for T1 diabetics, it's just treating the symptoms, not the cause (the immune system), again (like injecting insulin).
It's a good point, but at least with Go the leak would be limited to the allocated buffer. This is probably a case where Rust or C++ might be more helpful. Presumably you wouldn't want to allocate a new (variable sized) buffer each time (particularly in a GC language), but you could create a new (bounds checked) slice[1] / array_view[2] / gsl::span / RandomAccessSection[3] each time.

[1] https://doc.rust-lang.org/nightly/std/slice/

[2] https://github.com/rhysd/array_view

[3] https://github.com/duneroadrunner/SaferCPlusPlus#txscoperand...
So I had a go of this. I pasted in Yeats' Second Coming [0] (feels somewhat salient these days) to see how it looked [1]. For the most part it looks okay, but visually it adds too much space between lines and the gap between the two verses has been eliminated.

I guess what's happening here is the usual HTML thing of compressing all whitespaces. I would just be concerned that if a plain-text medium is being used then whitespace becomes more important for formatting and it should perhaps be preserved.

[0] https://www.poets.org/poetsorg/poem/second-coming

[1] https://txt.fyi/+/f765eda5/
I second this, and you'll be even more furious if someone used that to compromise your data/accounts.
The nicest thing about this affair is that Google Play Services kept popping out every few seconds asking me to enter the password while I was driving (using Waze).

Is it that whatever the issue that caused all this kept happening again and again every few seconds, or is it that once Google Play Services determines you have to login back, it intentionally nags you making your mobile hard to use?
Help Wanted: Quick survey about OSS licenses
I have a quick survey about comparing OSS licenses with EULA.

Highly appreciated if you could fill out & share: http://connect2effect.forcrowd.org/app/survey

Hoping to reach at least 50 ratings, currently it's 16.

If you have any questions or would like to have more info, please don't hesitate to contact.
Of course, I even write some hobby projects in Common Lisp.

There are data interchange formats that use S-Expressions, namely EDN[1]. But JSON remains the most popular format for its widespread support, and its few data types map to most languages.

[1]: https://github.com/edn-format/edn
You are comparing release notes for a beta to an actual release. Based on previous rails releases, by the time 5.1 rolls out the releases notes will get much more detailed and resources like guides.rubyonrails.org will be updated to reflect the latest features.
Depending of if whether you qualify you can get "up to $15,000 of AWS Promotional Credits" with Stripe Atlas.[1]

[1] https://stripe.com/atlas/faq#what-resources-will-i-receive-f...
I would keep the code proprietary and donate 20% of the application's revenue to the open source projects that made it possible. As soon as profit stops, open source it.

You'll be "giving back" way more this way.
I followed the links and got rickrolled.
Wasn't it the real purpose of this website? ;-)
Great!
Patent infringement is the least of the worries.

Trade secret misappropriation can lead to criminal charges.
Even after reading the text of your question few times, I have no idea what are you asking.
that looks painful to use. Do Linux distros let you automatically protect services? E.g. On FreeBSD:

mysql_enable="YES"
mysql_oomprotect="YES"

Now every time you start the MySQL service it's automatically protected
I saw that recently and can certainly recommend viewing it.
If they used asan/msan and its support for manually marking regions of memory as invalid/uninitialized, that could have caught such cases too.
My desktop computing happens on Windows because I need graphics card support (games at home) and because my work pc is windows. I chose the Macbook Air for my travel machine because it's extremely light, it's battery lasts more than a day and macOS is unix-y, I initially planned to install debian on it but I couldn't convince myself that the power management would be as good so I left macOS on it.

Window management is vastly superior in my opinion, I frequently just full screen everything and swipe between the full screens, this is particularly notable in my case since I almost exclusively use the keyboard (get bad RSI from mice)

Updates feel like they have much less friction.

But basically it comes down the underlying unix-y system.
I'm never going to do serious development on a laptop but if I pick up a macOS machine it has the unix core tools that I need to get stuff done, vim, ssh etc. (Though there are some pain points mostly they're fixed by brew for machines I'll use for any length of time).

Also, I helped someone set up Parallels the other day on their MBP and tried out air drop for the first time, show me friction-less 4GB ISO copying OTA between Windows laptops that aren't on the same network!
Losing 0.65% of customers that work in IT could very well cause long term damage that the 2% of regular customers can't make up for. People working in IT often have a much bigger influence on others in that area and you don't want to lose that.

Look at Microsoft. They've been there and are currently investing quite a lot to get developers to use their software.

If Apple were clever, they'd look ahead, but it seems they go for good quarterly results instead and repeat the same mistakes others have already made. It has all the markings of a company in decline.
Leading builder in Kottayam
From the EROS website which specifically described the checkpointing mechanism as well as gives a short description of the journalling support.

If you just pretend you're running in RAM, and the system crashes, you will lose the data between the crash point and the last checkpoint unless you have explicitly used the journalling mechanism. Often that is acceptable. E.g. since you're restoring the program at the same point in time, if the changes are entirely based on data that were in the system at the point of the last checkpoint, it will just redo the work to calculate the changes.

But if there are side-effects, that is often not going to be acceptable. E.g. database updates that the system has said were committed will suddenly disappear.

To solve that, EROS has a journalling mechanism to allow you to give guarantees about specific data that changes in between checkpoints, but that requires applications to explicitly use it to tell the OS what needs to be saved when so that the application can guarantee that a given piece of data has been durably recorded when it promises a client it has been recorded, and that the writes get correctly ordered.

That's a sensible compromise - if you do it right, it only needs to touch the "boundaries" where the system does IO.
It seems to me like this is just a lightweight pastebin clone with some extra privacy and markdown support.

I don't see the value. Feel free to enlighten me -- anyone.
We have Unicode now.

Not everyone and not everywhere, and depending on the font, the line-drawing characters may not be the same width as the others even if it's a monospace font (e.g. see https://blog.helftone.com/ascii-art-unicode/ ). The whole point of text files in things like RFCs is to be as portable as possible, and using Unicode somewhat defeats that point.
In fairness, Russia flat out deny ALL extradition requests for their own citizens.

https://www.theguardian.com/world/2007/may/22/russia.lukehar...

A commendable stance, IMHO. (From a most uncommendable unregime).

They also have no extradition treaty at all with the US. Hence why Snowden is there, I guess.
This reminds me of the "webmaster" days when the debate was over whether doing HTML could be considered "programming". My position then as now is that being a programmer (developer in this context) requires programming a programming language, and neither HTML or Wix is that.

On the other hand, in practice, in the presence of a technology that non-programmers can use to build perfectly viable products, the onus is probably more on the "programming-language-programmers" to differentiate themselves and seek out the challenges that can't be solved by "HTML-programmers". If you as a programmer find yourself in a venue head to head with a Wix'er, you may win a small victory in the battle over definitions, but you will lose the war. If the problem can be solved with HTML/Wix, in most cases it should solved with them.
CoffeeScript was never the "default". Since the asset pipeline was added new rails projects contained only a single 'application.js' which included any default JS libs. There has never been coffeescript in a default rails project. That makes the default plain-old JavaScript. CoffeeScript has just been there as a default gem so it was available to you by default, but you have never been forced or even strongly encouraged to use it.

That said, I love CoffeeScript and continue to use it to this day. It gets a lot of hate and I've been pushed to write a lot of ES6 these days, but CoffeeScript is still much more succinct.
Do browsers still leak history info (eg http://zyan.scripts.mit.edu/sniffly/) is it possible to have a page show visitors if they are likely to be affected?
Well doing that would mean ragel would incorrectly read one character, rather than run off forever. Personally I'd rather have the latter. Much easier to catch with memory checkers. Eventually you try to read some thing you're not allowed to read, or blow something else up, instead of just read the first byte of the int following the buffer, or whatever.

There would have to be an additional bounds check when issuing a goto in an error action, but doing that is contrary to the simple execution model that ragel users have come to rely on.

Gotta ask the question, where was the testing when they altered 7 year old code without the involvement of the original developer?
They admit they do not have enough information to determine the cause, yet they suggest there is little security risk. They can either not know or not know, but not both at the same time.

At least that is how I understand the statement.
See also this BBC report.

http://www.bbc.co.uk/news/uk-politics-39056786
Once I found out about NVMe providing up to 2x-10x better performance than regular SSDs, I immediately started wondering when Cloud/VPS providers would offer something based on that technology. I think that before U.2 (or M.2?) was a thing, they were stuck with really expensive PCIE cards. Now I am guessing that something like U.2/M.2 NVMe subsystems can make the price more practical.

But back in September I asked on the Linode forum and also on the Uservoice for Digital Ocean about NVMe storage. Basically I got crickets on Digital Ocean, and "don't be an idiot" from one Linode user. https://digitalocean.uservoice.com/forums/136585-digitalocea...

https://forum.linode.com/viewtopic.php?f=7&t=14058&sid=4a574...

But I think that as more and more people get computers with M.2 built in, they will eventually start to wonder why their PC's disk is 2x-10x faster than their server's disk.

There are a couple of little providers like UltraVPS, ControlVM, and Gignode that at least say they have NVMe available. I have been thinking about UltraVPS because it looks like a deal.. of course don't know if it really does perform or is reliable.

Basically my thing is that from my experience the faster IOPS/sequential read translates into less database tuning or zero database tuning depending on the application I am coding.

Just to throw another wrinkle in here, I feel like pretty soon the inexpensive VPS/cloud servers will not only have to move to NVMe, but within a few years the expectation may be to include some kind of GPU hardware somehow as a standard thing. Just because neural network stuff seems so important for so many applications these days, and unless we are going full peer-to-peer internet or something I am going to need that on most servers going forward pretty soon.
I'm a fan of fasting, thanks for sharing this!

All guys/gals with any sort of disease, I pray you all get well and better soon!
CloudButt
That's a wide impact. While any hijacked account is bad, some of these are really bad.

For example, https://coinbase.com is on that list! If they haven't immediately invalidated every single HTTP session after hearing this news this is going to be bad. Ditto for forcing password resets.

A hijacked account that can irrevocably send digital currency to an anonymous bad guy's account would be target number one for using data like this.
>One day that was particularly bad, I noticed that when I booted, Windows would immediately attempt to copy to RAM a gigantic binary file that was the sound files of a game I played a lot recently, this caused trashing due to reading the file, then, it would attempt to load other programs it had to

Oh, that's just superfetch, it's a service you can disable to reduce a bit the idle trashing after desktop has loaded.
Deep Learning-Based Goal Recognition in Open-Ended Digital Games [pdf]
What would make sense (to me, not a business/marketing guy, nor a lawyer, at all) would be a t-shirt and free subscription as the offered thing, something which costs the company nothing.

Then for anything like this, give publically a bonus gift which makes it worth people reporting to them and not blackmarket selling it. Once it's gone through the legal dept. and so on.

Then they can be very quick with handing out tshirts and so on to any and every microissue report, without the people running triage having to care about amounts or tax or whatever.

Having any kind of publically offered payment for service (beyond a tshirt bounty or services in kind) is just begging for legal issues, right?
getoos emerge can. A package definition contains a source URL and git urls (with branches and tags) are accepted sources.
At least some of this is incorrect. The issue is NOT the pages running through the parser — the issue is the traffic running through the same nginx instance as vulnerable pages.
Your IDE won't change, but YOU will: HELLO Machine learning
Artificial Intelligence Holds Promise for Seismic and Drilling Data
Email from Cloudflare's CEO about 'Cloudbleed'
Password managers are mentioned.

I looked on the lastpass blog (s/www/blog/), nothing about this. Is it just too early?
Oculus affirms its commitment to open VR standards
Jim Sterling already uses a variation of this strategy, which he calls the "Copyright Deadlock"[1]. He discovered it is possible to defeat ContentID-based forced monetization of his videos by including multiple songs/footage from different businesses.

[1] (warning: Jim Sterling uses strong language) https://www.youtube.com/watch?v=cK8i6aMG9VM
ShitFest
Here's a script for checking domains of saved logins in Firefox against the list of sites using Cloudflare:

https://gist.github.com/avian2/30db0d579732287d758c21ba8ded9...
> Making the system run slower is almost always better than killing processes at random.

In practice, heavy swapping (forth and back) makes it impossible to even kill the culprit manually (because I can't open an xterm or whatever). While there is often no benefit to have the processes continue running that slow.

Also, idealistically programs should be written with the assumption that the machine could go down at any instant. Having a few more cases where the program is killed will have the effect that the program is better tested and debugged.
Can you change swap settings on macOS, I haven't dug in deeply but couldn't find an option anywhere but I feel that the default settings is faaaaar too aggressive.
Probably not. Cloudflare is designed to automatically swallow large increases in traffic.
Javascript Boilerplate Fatigue
You can also download the program with youtube-dl without a VPN.
Or maybe The Internet Archive could obey the law. Google are similarly guilty of this - their empire is built on intellectual property, yet they only pay distant lip service to others' intellectual property. It would be trivial to implement a system where every rightsholder can register their copyrights and trademarks and subsequently forbid the uploading of content that infringes those. It would be trivial to scan trusted publications for new movie releases and forbid uploading content with the names and pictures they contain unless it's done from the studio's trusted account. But no - today's robber barons Google & Facebook are content to let unprecedented thievery run rampant on their services and gorge themselves on profits, while the rightsholders and content creators lose billions of profit every year. The Internet is the worst thing to have happened to our shared culture.
Delivering RCS messaging to Android users worldwide
>- I have gotten used to clicking the window first, before it doing something in that app - so fewer accidental actions

Jeez is that an actual thing on OSX? That would just make it feel unresponsive to me.