skysight-inc/HackerNews huggingface dataset:
Well, if you haven't fixed CVE-2015-3864, CVE-2015-3876 and CVE-2015-6602 chances are you are still vulnerable by visiting a wrong web page.

Just look at the monthly security fix notes. There are critical vulnerabilities getting fixed every month.

Here are more critical ones: CVE-2017-0764, CVE-2017-0756 from the September patchlevel that also affects Android 4.4.4. See https://source.android.com/security/bulletin/2017-09-01

In August 2017, three more. In July one. In May another two. Still not convinced?
Google Developer Account Wrongly Terminated NO MEANS OF DISCOURSE
| https://news.ycombinator.com/item?id=15197357 (flagged, 44 comments, Sep 2017)

Don't ever do a chargeback! (This is actually a great way to shutdown an account you don't want...)
for (j = 0; j < len; j++) {
buffer[j] ^= (i + j) % 0xFB + 1;
buffer[j] ^= key[(i + j) % kl];
}

somebody can explain how the author managed to work this bit out?
Without question. But CMM covers more than that--how requirements are gathered, reviewed, approved; who in the chain has the proper training and at what level. It much more than just coding. And how all of this is measured. So if the goal is writing simpler code, it is about how you would measure that.
Douglas Crockford is the guy who pushed JavaScript into this world. He wrote the first jslint which put JavaScript in the build pipeline on it's own. Also the YUI compressor and minifier are old enough to be deprecated.
A fight there'll be. Too many in favor.
Any clues where I could get info on past instances like this or examples of underbelly tactics would be much appreciated...
The alternative to giving away your personal time for free to an open-source project is gouging people on vital medication? That doesn't seem true in any sense.
> Median 3 person family income in NYC metro area is only 85,900

There are companies inside and outside NYC that will give a much better deal than that to the median-quality software developer. If the median developer takes that pay, barring some special circumstances, the best alternative to the negotiated agreement has much better cost-of-living-adjusted compensation.

The employer could counter with statements about median pay in the area to demonstrate their perspective, but that doesn't make the alternative options less attractive.
How would this system work with people with say dementia who could not recall their key?
LiPo is just Lithium-ion polymer, which is basically a Li-ion battery with a specific polymer container.
> What are we as a collective supposed to do? Routinely exterminate criminals?

There are a zillion ways to reduce crime in a more friendly manner. I'm not an expert but what comes to mind are reducing the incentive to engage in criminal activity in the first place (economic factors could be at play), proper education, social projects, gun control, early psychopathological diagnosis, ...
Emacs upto25.2 enriched text / MIME remote code execution
I'm reading 'The Fatal Shore' by Robert Hughes at the moment, it's description of the customs of one primitive tribe might lead you to question how happy the women are in those Amazon tribes.
> That's still printed on them.

Q21: When did Social Security cards bear the legend "NOT FOR IDENTIFICATION"?

A: The first Social Security cards were issued starting in 1936, they did not have this legend. Beginning with the sixth design version of the card, issued starting in 1946, SSA added a legend to the bottom of the card reading "FOR SOCIAL SECURITY PURPOSES -- NOT FOR IDENTIFICATION." This legend was removed as part of the design changes for the 18th version of the card, issued beginning in 1972. The legend has not been on any new cards issued since 1972.

https://www.ssa.gov/history/hfaq.html
Reminiscences of a Stock Operator (1923)
based f.x. on suicide statistics and common sense.

measure your own well-being by spending a week programming vs spending a week in a hut in a forest.
As college morphs into High School+, and society extends their definition of 'childhood' to cover up to age 25, steps will be taken to destroy the autonomy and personality of these 'children.' Children are entitled no rights, no difference of opinion from them is respected, and any degree of control over them, no matter how extreme, is always seen as warranted.
Angular 4 does code splitting, but it's bundle size carries a pretty big baseline
Thanks for the response. This is something that's not well known to me and in the age of retailers trying to upsell the same thing for a fee, I'm not surprised that it is obscured.
much of the fertilizers used in commercial farms rely on fossil fuels. we would need a way to overcome this.
Token.io- How to invest in Steve Kirsch's new company?
Does anyone have any idea how to invest in Steve Kirsch's new company, Token.io?
I know employees get stock options, but other than that, I can't think of any way.

I'm told their is a highly lucrative options play that can be made here...
I disagree. Consider this counter-example, "This function takes a float64 'x' where 1.0d <= f <= 100000.0d and returns a float64 'y' which is the square root of 'x' to within 10ulp."

Tests can verify that the implementation with certain inputs is correct. If done incorrectly they can even over-specify the spec, like asserting that sqrt(16.0d) exactly equals 4.0d when it should also allow 4.000000000000001

But I don't see how they are less ambiguous or why they are better.

(As a real-world example, look to the Pentium FDIV bug.)
Nigerian here, and yes this is truly happening in my country not just in Lagos state but all around with Ogun state pretty much taking the lead for the position of most mega churches in Nigeria.
It is very nauseating that with all the poverty in my country snake oil prophets; (which is what they majorly are) would rather build mega churches/houses; (as their houses are mostly built with the churches) and schools with outrageous tuition fees from the proceeds of offering and tithes from those same gullible congregants who can't then afford to attend such schools or build such mega churches/houses for themselves.
I quickly created a basic userstyle to use a better font and a paper-like which is easier on the eyes.

* {
font-family: 'Open Sans', Helvetica;
color: #222;
font-size: 1rem;
line-height: 1.4;
}

body{
background: #dac3a8;
}

main{
max-width: 920px;
margin: 0 auto;
}
That's not evidence. Hearsay most likely. Definitely suspicious.

I could walk into a bar tell everyone I killed someone and boast about it. I may become a suspect or person of interest to the police, but they're gonna have an awfully hard time pinning me with murder based on purely bar talk. Now if the police have bodies or weapons etc. then this is a different story.

OTOH who knows how rigorous the Brazilian court system is...
Its illegal to use NIN by companies in the UK as an identifier or database key
Data security firm InfoSum raises extra $5M for its seed round
That's because its illegal to use NIN by companies in the UK as an identifier or database key
Show HN: Check the probability you win tonight in Fantasy Football
ChainLink – A Decentralized Oracle Network
>RMS? really?

The dude wrote EMACS, GNU, GCC and the GPL license. He more or less single-handedly invented the concept of Free software. If RMS isn't a genius, then I don't know who is.
If you want screens before bed, try something like Flux.

https://alternativeto.net/software/f-lux/
I use Roku in Greece and it's been a pretty good experience.

It's not Roku that makes you jump through all those hoops for spotify, but spotify itself.

https://support.spotify.com/us/listen_everywhere/on_tv/roku/
You need it so they can report it to HMRC who use it as an identifiter for tax contributions
That's just not true in any possible way. The handling and driving experience of a nicer sports car is absolutely nothing like a regular midranger, not to mention all the quality of life features.
It's not like I have done a comprehensive study on this but at least here at umich there are still places to live that embrace weirdness, they are just not owned by the university. These days I think it is just too hard for a big university to let things fly for a multitude of reasons. I hope there will always be such places and it is sad to see such an iconic and important one go but I have faith that brilliant weirdos are very capable of finding space for themselves.
Syntax Highlighting on Blogger with GitHub Gist
I don't need to be an expert on sexism to make judgments on it. This is one benefit we get from science: it allows one to make accurate judgments without becoming an expert. If one had to be an expert to make any judgment at all, one would never be able to leave their house.

Of course, some disclaimers apply. Any conclusions you draw based on a study have to stay faithful to its constraints. And you have to keep in mind that some fields are more trustworthy than others. E.g., so-called 'social sciences' seem to be as much overrun by extreme-left fanatics as the 'progressive' mass media, which is evident in ignoring obvious control factors (e.g. taking into account marital status and number of children reverses results on sex bias [1]) and in publication bias [2].

Also, it's you who needs to prove something wrong, since it's you who doubts a scientific study. And please stop linking news articles, I'm no longer entertained to learn more ways in which the mass media spins the Damore story.

[1] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4418903/pdf/pna...

[2] http://www.sciencedirect.com.sci-hub.cc/science/article/pii/...
> social housing, preschools, and savings & loans associations

Those all sound like laudable charities. What about that is "outsized"?
We as humans set the larger context for greed and the use of force to achieve that greed. We don't need those trees in the ever expanding amount of forest we cut down, but we can trade money for it, and thus the present robs from the future in the same way it robs those villagers of their life.

When a child gets run over by a car, all of society is at fault for valuing the driver, car and road over everything else. Self driving cars or better traffic design is simply an optimization and not a re-examination of the underlying contract.
You got it right, it's difficult to imagine for a European what it's like to deal with having no medical care if unemployed.

In addition, the fact that's part of every discussion gives a hint of how much of an issue this is.
Meta 2 Augmented Reality Developer Kit
Yes, different algorithms. Credit Karma shows you VantageScore 3 and car lenders usually use FICO 8.
I know very little about cybersecurity and cryptography, but wouldn't it make sense for each device have a different passcode associated with a touch id? For example, my iPhone has a passcode XXXXXX, with touch ID associated with it. At the same time, my Macbook has a passcode 0123456789 with a touch ID associated with it.
I would read PDF if large (13+ inches) eink readers weren't so expensive...
As a learning experiment, I tried my hand at an amazon affiliate site http://nextlesson.com , but it ended up only making 67 cents. I might change the site in the future to focus more on young learning.

I have been channeling my efforts into my food side project https://bestfoodnearme.com the content is thin as it is only food dishes, and the site does not generate any revenue. Its more of a scratch my own itch.
Amazon gift cards - in their local currency - is a fairly easy one.

Depending on your relationship with them, a subscription to an online learning platform like Pluralsight.

Voucher codes for professional services like Moo are also useful https://www.moo.com/uk/gifts/cards/

$84 would pay for a year of GitHub Pro - but I don't know if you can buy it on someone else's behalf.

What a great question though!
Gone: The ephemeral to-do list
They were a primitive technology empire though weren't they? I've always had the impression their tech was closer to that of the ancient Egyptians... so close to 2000 years behind the Europeans.
It depends on the device. On a typical 6inch eink ebook reader, a PDF is pretty much unusable, unreadable or both.
Why micro-kernel in particular? Just curious.

Early stages, but you could take a look at this OS written from scratch by someone with an amazing track record in OS development:

https://github.com/vygr/ChrysaLisp

Some pretty cool stuff there to get your teeth into...
We kind of did this with a project I was working on once. Someone was being helpful, main maintainer was getting tired, so helpful guy got full rights to the repo. He went on a several-year-long frenzy of activity, up to being a release manager, putting lots of micro-optimisations into the code and still being generally helpful until he got sucked up by Google and vanished.

Sadly, lots and lots of little bugs and awkward design decisions crept through. Obscure ones, hard to find, and a coding style that tended towards obfuscation. Guy had a habit for assemblyish/fortranish code.

I think the lesson learned is, sure, maybe give the helpful guy full access, but still keep your eye on them and encourage everyone else to do so too.
Best Blockchain Programming Books for Beginners
Bunk beds, roaches and nerdy geniuses: my year in a Silicon Valley hacker house
In Finland alcohol tax is based on volume (liters) so premium products don't get more expensive
ImageSoup: Image Searching for Humans
Quick link to download/mirror for the lazy: https://cdn.discordapp.com/attachments/347469400565219338/35...
Agreed. Right now it looks like we may attempt a Mars Colony in my lifetime and by 2100 I wouldn't be surprised if there were dozens of Martian colonies.
I think the most common practical problem for sorting large amounts of data is to enable efficient search operations later, for example binary search over sorted data.

I also agree that needing to sort large amounts of data fast is actually not that common a requirement.

EDIT: I would add that the speed of sorting on CPU is often underestimated. See my blog post about fast multithreaded radix sort on CPU here: http://www.forwardscattering.org/post/34
I didn't see any theological details in the article. What is "blurring the line between religion and cult"? Call-and-response group communication (1)? I've considered that an interesting anthropolicial phenomenon, but nothing to eschew. Am I missing something?

(1) https://en.wikipedia.org/wiki/Call_and_response
In all fairness, it's not a standard thing. Most of the extended card protections that go beyond purchase dispute resolution/defective product come from various premium cards more so than basic no-charge ones.
> Software patents can only be used offensively.

Well, not really. This exists:

https://en.wikipedia.org/wiki/Open_Invention_Network
http://www.openinventionnetwork.com/
> I have not doubt those tribes are happier than 90% of the people belonging to advanced civilizations.

I have just spent a year in 16 countries in West Africa.

On the whole, people here are extremely happy / content / friendly.

In all honesty, they make Canadians look unfriendly and unhappy.

I know you strongly believe everything we have invented in the modern world makes us happier (almost everyone does) You really, really, REALLY need to see with you own eyes, not just listen to what you have been told.
If you run custom ROMs on Android that situation is currently better than anything - you can still get updates for a Galaxy Nexus from 2011. Xiaomi is also currently providing official updates for 4+ years on some devices.

The official situation should change too - with the release of Android 8 there is now a more defined layer separating the HAL from the rest of the OS, allowing updates to be pushed out universally.
7 Ugly and Universal Truths About Branding You Need to Know
> Compare that to Chromecasts: You can give those to grandmas and they'll just work.

Unless you happen to have one of the many different wireless routers that Chromecasts just refuse to see.
Supercharging Cities
The good thing is that today you don't need an education to educate yourself dorm rooms aren't the only places where weirdos han out.

I actually have much higher hopes for technology allowing those greatest minds to be pushed forward than before.
Ask HN: How do you develop business processes or workflow?
I have been working at the same company now for almost 12 years. I have worked at much larger companies before, but I noticed at this company that operations and business processes greatly affect the company as the headcount grows.

I remember reading the original E-Myth book years ago and thinking about the how it highlighted the franchise process.

What books or material could you suggest on how to develop business processes and workflow? Ideally it would be something that produces an outcome that could work well with the human element and not just for those with a technology background.
> Lineage is updated weekly for many devices

You see, right there you described why most people, myself included, aren't interested in that. I can't be bothered to care about weekly OS updates, I tolerate the 1-2 yearly updates to my android because as someone in the security industry I understand the need for updates but that's it. A phone isn't something I care about tinkering with, it's a tool and I want it to work well with as minimal maintenance getting in the way as possible. I couldn't even be bothered to root my current phone, much less install a different OS.
I was moreso referring to his alternate title, General Overseer which legitimately sounds like something out of an Orwell novel.

I have no beef with religion in general, other than the fact that many religious leaders seem to have picked that job because they weren't qualified to do a single other thing, but hey, to each their own.
I have also looked at switching to Linux over OS X and the retina/hidpi alone stops any attempt. I actually had someone on here argue that no one needs retina, and that it didn’t make any difference visually!
it's a city that way less desirable to live for young people, and for the vast majority of the population.
I also find that its is not even individuals in the institutions but somehow the collective that causes this. I do not think this is the end of such places though as this kind of stuff has happened before and I think people will always find and make new spaces to make their own culture, the destruction of such places seems almost inevitable as they gain more and more notoriety.
Uber does ok in London despite it having decent public transport. Even with decent public transport you don't necessarily want a night bus after your date.
Not crazy at all; The CPU did not need emulation, and the ROM was rewritten to use the Amiga's superior hardware.

For example, the Mac back then did all graphics in software, where as even the earliest Amiga model, the 1000, had a capable hardware blitter. If I am not mistaken, the Amiga's copper chip was flexible enough to map the display memory exactly like the Mac.
I really like and appreciate the notion that a project could/should state what the assumptions are, where applicable. And, perhaps point out weak spots that could be important to users. If nothing else, it sets the expectations right.

The perfect example is yours, "this project does not take security into consideration. Use at your own responsibility. You should probably start with securing this_X, that_Y, and that_Z.".

Another example could be "this is a POC and does not go kindly on system resources. You might want to scale back the number of simultaneously opened sockets for any real use."
> How many opportunities are there today for someone with a 2.65 GPA?

Just as many as there used to be, it's just never been easy. Actually I thought about it some more, and there are actually probably more opportunities today than before with the internet and the democratization of knowledge.

> Woz and Jobs started out in business selling blue boxes to illegal bookmakers.

> Imagine a world in which they had been subject to the modern surveillance panopticon and the sort of prosecutorial malice that was levelled against Aaron Swartz.

I think you're looking at it wrong, Woz and Jobs started selling niche items directly to a small group of customers, that still exists today, they just wouldn't be selling blue boxes, maybe it'd be an interesting SaSS today.
> five minutes later they started emailing our parents—and

> then all undergraduate parents

Can somebody explain why the University would email the parents? What do they have to do with it? The students are of age, right?
4 Times Companies Were Forced to Shut Down Due to Hackers
Stick to your guns on pricing, it helps keep away customers you don't want.
Can you make it as a Software Developer?
Buku bookmark manager 3.3 released
Browse rap quotes and songs from the blog of legendary Ben Horowitz
So the city superchargers are charging more slowly than those along the highways, right?
Compared to more outdoor friendly cities out west, Detroit is a downright depressing place to live. Especially for young people.
Australia's 3D printed rocket engine is being tested
The author of this article has soaked up the conventional wisdom about Apple's pricing. Yes, they don't sell cheap phones, and sure they make a healthy profit, but it doesn't then follow that the product is overpriced. The iPhone has always been an extremely high-quality product and has always been competitively priced versus comparable models from other phone makers. So why do they have the reputation of premium pricing?

This $1000 iPhone X may be nearly as expensive as a Macbook Air, but that's entirely reasonable: it's a far more powerful and sophisticated computer in a much smaller package. Why would you expect it to cost less?
> I’m sure Facebook, Google, and PayPal would all love to take over from the credit bureaus, and there are real reasons to be wary of that. Some people will tell you we should put it all on a blockchain, decentralizing the system and querying discrete pieces of information as needed. New solutions bring new problems, and there’s no perfect answer to any of it.

This is what concerns me most as we move from this to implementing solutions. We now have a glut of technology companies, some large and trusted, and many that will be created specifically to address this, that will permute the risk factors an pitfalls of such a business infinitely. One hundred companies doing credit bureau things means 100 places you'll have to put your sensitive info, 100 places that will have some different vulnerability, and 100 more targets on your attack surface.

Granted, one of these solutions may be sound, viable, secure, and advantageous to consumers. But the extant bureaus and any company that comes in to compete is a business, needs to make money, and will resist competition, will resist security over profit, and will never capitulate to a better competing solution until their last dollar is raised and spent.
Is this this functionally different from Pidgin and other libpurple based messengers?
I very much prefer a week programming so I don't think common sense has much to say. As to subside rates they are generally higher among tribes. However, it's been an enduring misconception that they are low.
Scientists discover hidden patterns of brain activity
As someone from the UK you probably didn't have to assemble your own power-supply either? (Yes I had to, because it shipped a US power supply only)

Spotify was just one of many examples which for me solidified the impression that this device was purely made for the US market.
Security.txt: A Method for Web Security Policies
The big state colleges are regarded as equals in the state, only in athletic terms. Everyone knows Michigan is the lone standout academically.
Even if the default position is to help, it can't be unconditional, there are limits. You don't have a right to expect help when it places an unreasonable burden on the helper.