skysight-inc/HackerNews huggingface dataset:
See, the issue is that many think "but big guys would know!"
Big guys actually do not care much.

People do not notice that. Such bugs (that can be exploited) are inserted into the kernel very often, even from legit people and no one notices. [1] I don't blame them, but we can't _trace_ it if it's been done by an attacker.

About your second link, once again, you limit yourself to attacking linux.git. Unless you crack SHA (which, is actually possible, it just looks terribly odd in the commit, and has nothing to do with flapping your arms to fly).

Instead you append commits to a repository Linus pulls from for patches, and you can do it so that when Linus pulls, he gets the extra patch, and when the owner pushes, nothing happens. Heck you can even hide it from the gitweb interface. You can even do that on Linus's linux.git directly, but since zillion people look at it, its much safer to go through a branch Linus will pull from.

Oh and the code isn't going to be a bind shell in the f. middle. it's going to be a dangling pointer or the like, that you know, these devs miss every other week as pointed out in [1] and bang, here's your exploit.

Do you think all attackers are that retarded that they can't spend an HOUR modifying GIT for this?

Keep the blind-folds on.

Bonus conspiracy theory:

Imagine they find such a commit, by luck or hard-work, signed off of course by someone Linus pulls from. They're going to do what? probably leave it there in a couple of month have a fix (that won't go in CVE as many of their fixes which aren't found externally). No one will be able to tell if it came from the attack (which would be a PR disaster for Linux) or not, even if uncovered.
Cockpit mounted camera in model F-16
I know what I was thinking most of the time: I want to get this thing working and out there as quickly as possible.

Deadlines are probably the root cause of most of the world's most horrific hacks.

Also, I've never once had a boss turn to me and say "you know what, forget about writing any new features for now - just refactor the code that is working just fine but looks horrible."
I agree that application titles should be unique. I'm surprised that's not the case as it makes sense and is easily enforced.

> the straw that broke the camels back was when another dev released two apps with the same name as my apps whilst they were in the Top 5… Apple did nothing about it.

If someone can compete with your product with little effort, then how good was your product in the first place? If their product is not as good and yours already sits front and center in the top 5, who cares if carbon copies exist? If theirs is better, then be glad you made it to the top 5 first.
Desktop segment is bound to decline over time, yes. But the laptop market is not going down anytime soon. Infact they will see a surge for the next few years. So the overall PC segment will still hold forte. Having said that, one would love to see more powerful tablets and smartphones. My point being: stating that its a post PC world is far from the truth. And yes, users perhaps in all segments will have a distributed time spent between their PCs and these new form factors.
True, although Plan9 pushed that part of the Unix philosophy even further, towards where it arguably handles some of those more general cases as well, with "structural regexes" that work on things other than collections of lines: http://doc.cat-v.org/bell_labs/structural_regexps/
My bad, I thought you were just a software development shop.
Wikileaks Discloses The Reason(s) Behind China's Shadow Gold Buying Spree
It depends on what the documentation is. If it's 100 pages of "AbstractClassFactoryClassFactoryFactory is a class that builds AbstractClassFactoryClassFactory objects", then that's useless.

Also explains why it's 200,000 lines of code, for something that should be an order of magnitude smaller.
After a little over ten years of daily full-time coding, I'm finally at the point where I can go back to code I wrote three or six months ago and not think, WTF? I'm by no means a great programmer, certainly not compared to some of the brilliant coders on HN, with whose work I'm constantly inspired and humbled; but as Dirty Harry famously said, "A man's got to know his limitations," and I think I'm pretty realistic in that regard.

To get better: keep noticing your mistakes and taking them into account on subsequent activities; keep modifying your workflow to incorporate and automate good practices and to remove the potential for preventable mistakes; keep taking opportunities to clean and refactor old code when you have to face it; keep reading other people's code (especially those brilliant coders kicking around HN) and learning from it; and keep pushing yourself to get better. Rinse and repeat for as long as you spend programming.
I thought this was a really interesting article and I've been interested in addressing the accessibility of startup sites recently. It's true that certain accessibility modifications can be difficult/costly but the majority of them are very easy to make. There are many "low hanging fruit" fixes that any site should make. The improvements will assist with accessibility, usability, and SEO. If anyone would like a quick review contact me on G+ https://plus.google.com/111107665026656718495/posts
I use a few plugins to handle this, check out:

http://www.ghostery.com/

http://open-bits.com/shellfish/

http://webgraph.com/resources/facebookblocker/

With ad block it cleans pages up like you wouldn't believe. Many sites actually become readable :O
If you have regular income and outgoings, and large efficiencies to scale that could make sense, mostly done through factoring, ie credit against invoices, so secured lending. It is less sensible in businesses with more variable cash flows and nothing much to secure borrowing against.
Recent findings by Carol Dweck and others challenge the prevalent notion that willpower is an exhaustible AND finite resource. She found that the subjects who believed that exercising one's willpower strengthens it rather than depletes it actually increased their willpower. One's mindset was the key. http://www.stanford.edu/~gwalton/home/In_the_News_files/Job,...
"Unless you crack SHA (which, is actually possible, it just looks terribly odd in the commit, and has nothing to do with flapping your arms to fly)."

Don't be absurd. You have to craft a 1) valid C file that 2) contains and exploit which 3) doesn't look "terribly odd" and 4) has the same SHA1. "HOUR" LOL!

Linus's urination world domination plan is far more practical.

As for the rest: PRATT
I'm currently working on a startup and like the OP I was questioning how good of a programmer I am. I'm self taught and have been programming since I was in middle school computer club more than 8 years ago.

Working on this startup project has taught me that in the beginning it's all about delivering a product that works that users want. When requirements are constantly in flux and you're working hard and fast to develop a fully functional prototype there's little time for code refactoring to make it "perfect" because the longer it takes to launch the larger the possibility that someone beats you to it. As long as the code does what it's supposed to do and is not loaded with bugs and isn't terribly slow I say to just go with it.

Requirements are always changing in startup land and a good programmer adapts to make those changes and is focused on producing a workable prototype before their competition does
Disclaimer: I have like 6 years of experience, I'm not a famous programmer, but I do get people telling me (more than 20 programmers) that I'm a good programmer and I write good code.

Read code, watch people coding, care about your tools, and finally, your code will never be "good enough" you'll always improve.

Read code: Read open source software, from the libraries and frameworks you use for example; That way you'll learn new techniques and ways to organize your code so it's more readable. Also it helps reading books like Code Complete and Beautiful Code. I recommend "Framework Design Guidelines: Conventions, Idioms, and Patterns for Reusable .NET Libraries" even though I'm not a .NET programmer I really like that book.

Watch other people coding: Get together with friends to pair program, or online, most people like to pair program. Or watch some of the new Peepcode videos on experts programming (https://peepcode.com/screencasts).

Care about your tools: Now that a lot of people are using dynamic languages I see it over and over again, people just use whatever editor, debugger, etc etc, care about those things, you'd rarely see myself making a "unused variable" mistake, because I have all the linting tools, and I follow them, same goes to code formatters, etc etc, I recommend VIM to edit code, Git as a communication tool (which is version control), Chrome as debugger. Also try the best way you can to reuse things, framework like Backbone, Batman, Knockout helps a lot with your JavaScript, never use just raw jQuery, it's not needed anymore.

You're never gonna be good enough, there's always gonna be a DHH, Jacob Kaplan Moss, Jeremy Ashkenas (just to name a few) to look up to.
The optimal solution is to find or create some tool that lets you bypass these options. This is a bit of a tangent, since that's really not what this post is about, but it's worth mentioning.

If you're stuck in a wheelchair, it's good when people build ramps, but it's far, far better to have a wheelchair that can go up stairs.

The former makes you dependent on the consideration of others, and sometimes that consideration is really not a reasonable thing to ask or expect.

Even in this apparently simple case, as others have pointed out, it is not easy to make everything accessible to screen readers. Also, what about older websites and archives of scans and so forth? It's far better to focus on tools that let one be as independent as possible.

I understand the annoyance. And I really hate it when people respond to requests like this in a hostile manner. But at the end of the day it is better if the person with exceptional needs can take on the responsibility for making these transactions possible themselves. (Also I'm sure there's loads of money to made developing these tools.)
I'm in love with Khan Academy. I truly think it will be able to make a difference. My only concern is about the visa.
The evolutionary argument for the obsolescence of philosophy
Prediction: There will be a backdoor.
It's always funny and somewhat humbling to remember that children have to develop the ability to delay gratification.
The unsung engineering school in Boston. Tough to get any love when MIT is a few T stops away. Right on.
The all one one page version:

http://www.h-online.com/open/features/We-won-and-we-didn-t-n...
I would imagine that this is similar to other ACL products in which the NSA has previously expressed interest, like SELinux. The "labeling" probably means setting permission levels.
Samsung Galaxy Tab 7.7 removed from IFA show | Front Side Bus
"Most pages have a Google Analytics tracking script on them. Do you trust Google? ... Do you trust Facebook?"

I don't trust either.

I have blocked Google Analytics along with Facebook, Digg, Twitter, and a bunch of other "services".

Needless to say, I don't have an account with any of them. The "free" services they provide are of very dubious value compared to my privacy and information about my friends, interests, and online activity I'd be giving up by using them or allowing them to track me.
If people, and in particular libraries like jquery, didn't specialise for IE, many websites would be unreadable and leak so much memory they would rapidly crash IE.
This looks awesome! However, it doesn't address the only problem I have with browsing HN on my Xoom with the regular browser: accidental votes. Is there a way you could add voting arrows larger than the ones on the web page?
I assumed OP was competent but not stellar, so my answer was about the difference between average and good.

You're talking about bad. I agree that no competent programmer would do the things you're describing if they could possibly help it. So we probably would have given OP the same advice if we had started with the same assumptions.
"this person doesn't adapt well to his surroundings"

Just so you know,some people consider that a sign of true genius!
A new smartphone for $100: hands-on with the Samsung Conquer 4G
I'll take any help I can get. It's been half a year with no progress. My site is in my profile, and there's a link to my e-mail on the right hand sidebar of my site under my picture.
Has this book received major updates lately? It has been available in draft form for a while. Many chapters are still empty.
Make Your Welcome Emails Better
there's an art to writing readable and reusable code, but you have to start by understanding the problem.

when you really understand the problem, the problem and surrounding use-cases become obvious. when this happens, writing readable code becomes trivial, as long as you understand what tools you need to use to solve it.

sometimes the right tool is a library, sometimes it's adapting existing code, and sometimes it's a special language construct like Python metaclasses.

whatever your problem, try to describe it and the solution in english at a high level. then, how can you best fit your solution into the mental framework that you just created?

as for reusable code, just be aware of leaky abstractions and complexity. often times i see libraries that introduce more complexity into a program than needed, sometimes because the solution doesn't really fit into a module. often times the solution is another language, like jQuery or Haml.

anyways.
C'mon Zed, really?

a) The code will be open source - the community can verify the code for anything untoward

b) Given the nature of the product, most implementations are going to be behind a firewall anyway, with the storage layer talking to business logic. Even if there was a backdoor, and I'm sure there isn't, not sure how NSA could get in.

Do you think there's a backdoor in NSA's open-source algorithm for SHA-1 too?

I applaud the government for putting tax dollars back into open source. My only gripe is the lack of transparency as to what this is primarily used for within the NSA (to be expected I guess). I generally like to know what I'm helping commit code to go do - although granted you have no idea what other open source projects are used for regardless of whether the lead sponsor is government or private company.
Benefits (eg, healthcare) might be difficult to extend overseas, as compared to within the US, especially for smaller companies.

Further, there might be some general hesitancy due to fear of the unknown. A small company might have few or no dedicated HR staff who are familiar with the legal and financial ramifications of dealing with paying someone overseas. Even if it is the case that it's pretty easy to do, they don't have anyone who knows that for sure.

Edit: It also occurs to me that if they need you to come in in person on rare occasions, it costs more money and effort to do that from outside the US than inside.
>we can only trust Verisign when it says "anything we do with our private key we do with security measures adequate to the task of protecting the entire Internet".

like we trust with the same to any other CA in the browser trusted root store.
It's a social convention to support your arguments when debating.
This is probably a bad comparison to make but I am curious, apropos SICP, how does this book stack up? I notice right off the bat they're using Lisp.

Anyone who's read through this, do you think it's still valuable if you're already working through SICP?
Everybody has unlimited texting on their phones now so there's no need. There was a time when unlimited texting was rare and not all phones even had SMS, so it was popular to use various free web-to-SMS gateways if you were at a computer and your recipient may not be. I used AT&T's gateway in particular to message friends for a few years before I got an SMS phone. There were also shady ad-strewn "free texting" gateways, some acting as frontends to the official ones, some with a Turk behind the scenes, and even some that didn't work at all but just faked a texting interface to serve up ads.
A Dangerous Group Of Millionaires You Must Be Aware Of
This is true, but Dreamwidth is a blogging platform (it's a fork of Livejournal), so those errors weren't caused by the post's author. Presumably it's accessible enough for the user in question to be able to navigate and post at, though, since they say they're using a screenreader; I assume the "disabled and disgruntled" tag means this wasn't just an academic exercise.
AdMob To Stop Serving Ads To Mobile Web, Google Pushes Developers To Use AdSense
Audio-Visual Studies of Simple Harmonic Motion (best with headphones)
I've heard/suspected concerns with benefits, but I find this to be, well...laughable! Consider that healthcare costs in the US are some of the highest of anywhere in the world. Specifically, I've already priced health insurance costs for my family, and they would come to $6000 (USD) per year to cover everyone.
Sounds like your candidate is not the quiet little bitch that loves writing code exactly according to orders (and people complain why programmers dont get any respect!) and he actually has some creativity and respect for himself...Pass on his contact info to me and I will probably hire him!
Mentioning powershell and denigrating "cryptic one liners" in the same post almost made me spit milk out my nose.
Why is being a commodity a "price"? Even if we are applying the (obsolete) ideals of commercial success, nearly every company I know of would love to be a commodity.
More people need to be like this guy and complain when sites are not accessible. It might make my bosses and clients actually care when I want to take time to make a site accessible. I can make noise about an issue, but nothing brings it to the forefront like an angry letter from a user.
Absolutely. I was recently kicked off my cable provider's ISP for excessive DMCA violations (torrenting) after DVRing and their OnDemand services proved too shoddy to actually watch. (And I forgot to DVR one show, to be fair. That one's completely on me.)

It seems that they could ask you to sign in to a service, offer free show in segments, and build in local (or at least relative) advertisements.

I'm told web ads cost less than traditional ads. With growing numbers watching plus interactivity, I don't get that. But even so, for generations TV has made its job to take in insane amounts of money on the back of free programming. I find it amazing that given the ability to spread their show faster and cheaper the more people watch it, they're now having trouble with this.

Please, let me give you my time and eyeballs. Stop suing because we want to watch the shows you've told us are available for free, our entire lives.
Essential Bacon Hacks (Today is International Bacon Day)
Ummm... The strict uniqueness of app names IS enforced by Apple, unless you're saying that "Color!" and "Color+" are the same app name. How would you expect Apple to enforce such a policy, anyway? Is "Sky Cloud" the 'same' as 'My Cloud'? Who should make such arbitrary decisions?

As far as "Apple doing nothing about it"... Why does this even matter? If your app is in the top 5, being viewed by thousands of people who presumably then click on it, why would you think that a similarly named app that is not in the top 5 receive any attention? If the developer of the other app was able to make money piggybacking on your sales, I'd love to see your sales chart clearly demonstrating this effect, and I'm sure Apple would as well. They're out to make money, too.
The first vimeo video really gets me.
In my experiences dealing with recruiters, they have trouble with the basics, like knowing the difference between java and javascript, and expecting them to be able to handle a resume in PDF form is sometimes too much. I think the problem might be that you're dealing with recruiters. If you're a US citizen, it really shouldn't matter that you're remote.

We've been outside the US for quite awhile and as far as any of the legal or other issues, we're still US citizens. We have US mailing addresses, US health insurance (that covers us worldwide, we checked on that) etc.

Fortunately, I don't have to work for an employer, but if I was working for others, I'd tend to structure things as a contractor or as a corporate entity that they were hiring to do work. this makes things easier for them, and actually cheaper which means you can charge more and possibly more financially efficient (if they are paying for overhead that you don't have and wouldn't use as an employee.)

Not exactly in the same situation as you, but that's roughly how we're handling things. We formed a corporation and when we need to deal with other business it is as a corporation.
Hubspot - Social Media Toon of the Day
If there are plenty of good uses for the code, I'd still want to improve it, even if I find out it's used by the Kitten Krusher 3000.

Unless a "please don't use this code for evil" license is legally binding, that's just the nature of open source.
Radpaste minmalist paste bin with code autodetection
Journalism is easy to define
Will this work well for phones?
Android devices alone are enough to more than offset all iOS devices.

http://mashable.com/2011/01/31/android-most-popular-platform...

Even were that not the case, the consumer handheld market is dwarfed by the rest of the embedded market.
Did Scheme/Lisp make new home at Northeastern?
Olin Shivers is also there. Some of his prose may not appeal to all but I find these legendary: http://www.scsh.net/docu/html/man.html
http://www.ccs.neu.edu/home/shivers/autoweapons.html
Isn't the general consensus that regexes are hard to maintain and debug? I'm not sure that "structural regexes" are solving the right problem.

I think maybe we're not shooting at the same baskets though (basketball reference, apologies if you're not from US); I'm trying to write software applications, not shell scripts.
- Read open source code of people whose code you respect
- Pair with those people.

Remote pairing is pretty easy these days with SSH, tmux, and VOIP.
Yes. YES YES YES YES YES.
For example: No restaurant will go bankrupt or even perceptibly lose money because blind people can’t read the menu on their website. There are too few of them.

Old people often have money. They also tend to have eyesight issues and other physical limitations. At the moment, old people are underrepresented online. Give it a few years and that won't likely remain true. At some point, making it easier for people with eyesight issues to access your site may become a much bigger issue. Some businesses may not realize it is impacting them, but I strongly suspect it will seriously begin to impact them in the not too distant future.
Ask HN: How do others find new/interesting content online?
So, in general, I haven't been much of a 'blog reader', haven't used any rss aggregators, etc. (although I do keep up with hacker news.) In fact, I found a pretty interesting article today via hacker news, and found the blog in general pretty interesting. I also found another blog kind of randomly while browsing github.

I guess what I'm getting at is I thought it might be useful to start keeping track of everything I find and was just kind of wondering what methods others use to find new/interesting content besides hacker news and just randomly coming across stuff.

Sorry if this question is a bit too general :P