skysight-inc/HackerNews huggingface dataset:
Watching Out for Jenkins Security Advisories - by K. Kawaguchi, Jenkins Founder
As Jenkins is a web application, it is not immune from vulnerabilities. So I recommend anyone running Jenkins seriously to watch out for security advisories and keep your instance up to date. Here’s the procedure...
The International Space Station Sends Back an Amazing Photo
On :target
Strikes me as a great idea.

I board my dog with the doggie daycare that she goes to every day, but before they started offering that service I hated boarding her. There just aren't any boarding services in town that I trust, and our dog has a terrible time in those kennels where the dogs are cooped up in concrete-and-mesh-fencing pens 23 hours a day. The last time we tried, she chewed herself badly enough that she had to go the vet. After that I had to resort to driving five hours (each way) to drop her off with my parents before going on trips.

I'd have leapt on a service like rover.com if it had existed at the time.
Good feedback; just bumped up the split between users and games. Should ease up a bit. As traffic ebbs and flows we'll try to keep it balanced. It doesn't assign users in any intelligent way right now..
Although I understand your point, there is a limit to the rate in which you can even spend cancer research money, even if you wanted to dramatically increase it. For one thing, you are limited to funding the research that you think will lead to a cure. It may turn out that the level of funding for direct cancer research is fine but what is needed is increased funding for nano-robotics or strong AI, or supercomputers that can simulate tumor growth and evolution. The linked article was very sobering indeed; finding a cure for cancer almost seems like trying to find a grand unified theory for physics. It may turn out that you basically have to figure out how to cure all diseases in order to cure cancer.
Yeah it's just in case there are no surviving references to those vars. For example in the hello world code app gets GC'd unless it's in a callback in setTimeout().
EFF has two reasons to oppose this bill other than that it's bad public policy:

(a) EFF consistently objects to the language used in every law pertaining to the Internet; in this case, their lede is that the language is "too broad". It's possible that no bill with any reasonable chance of escaping committee will ever have language locked down enough to satisfy the EFF publicly.

(b) The EFF can fundraise (and, at the very least, draw attention) out of every one of these controversies. I personally think the EFF has overspent it's credibility doing this over the past several years. Note the difference in coverage between EFF and ACLU (which I do support, and contribute to), on both CISPA and SOPA.

The do-nothing attention-grabbing nature of this bill is a reason to oppose it, and probably one that I share. But that does not make it OK to stir up pointless controversy, to extrapolate wildly from its text, to invent features of the bill out of whole cloth, or to demonize any company associated with it. (Not that you're doing any of that.)
Way to go Mr. President
> Includes its own private crypto code (has
rijndael-alg-fst.cc been vetted for timing issues?)

This is as far as I can tell the original rijndael-alg-fst.c reference implementation, which has cache timing issues in the S-Box table lookup.

The crypto/aes/aes_x86core.c implementation from OpenSSL uses pre-fetching as a countermeasure.

[Edit: Better formulated as a question? :-)]
Since OpenSSL is a long tested and optimized library, why did you decide to ship an own aes implementation?
> rare/unusual

Or "misspelt/misspelled", as we prescriptivists like to call it.

Though when I see hypercorrections like "humourous" on the internet, I begin to suspect that people are using UK/Commonwealth spellings because they think they should, not because they're actually more familiar with those spelling conventions.
Fab Speakers: Open Source Portable Speakers, Online and in Glass Jars [Gallery]
So did I. Thanks for posting that link. It's a sad day for me.
I didn't mean to imply happstack copied snap, but rather that my perception of happstack as "weird" was wrong and it is actually pretty much the same. The sales pitch request wasn't hypothetical, we've only been using snap for a little while and I actually am interested in any advantages happstack may offer.
Microsoft quietly buys Netscape browser technology (and patents)
It wasn't your imagination: US experienced warmest March ever
Nice job with the single player versioN!
I love node.js, but this made me lol. (I use both vanilla JS and CoffeeScript, fwiw.)
For some definition of "damn good" I guess. All security protocols can have holes. But a trivial session key is hardly rocket surgery. And spoofing attacks (which I assume is what you're talking about) don't require moving between one IP and another anyway.
Microsoft Flaw Demonstrates Dangers Of Remote Desktop Access
EDITED to a more neutral title. The title will never be perfect but FBI is certainly concerned, as are US colleges.
I get this error when trying to create a meeting (Chrome/Ubuntu). I was never prompted with a Accept/Deny dialog, so I'm guessing the meeting features just don't work on Linux?:

Oops, looks like you clicked Deny.

You need to enable peer assist and your webcam to
participate in the meeting.
Turn your iPad into a netbook sized MacBook Pro with this awesome case
2012 eclipse calendar alignment
2012 eclipse leading up to ultimate alignment with the sun and the black hole of the Milky Way
Inside Foxconn
It seems like there needs to be a combination of cultural/societal changes favoring education in the life sciences, combined with funding. The launch of Sputnik led to an upsurge of focus in math and science education during the Cold War. To a much smaller degree, C.S.I. inspired a generation of forensic scientists.

Maybe the startup response to this piece should be to figure out ways to spark public interest in tackling this problems.
Are you saying JSP and meaning something else? I can't figure out any way you could think that other than confusion over what JSP is. JSP is where markup and code are mixed together, using a special delimiter to start and end code parts. Just like ASP and PHP and hamlet and virtually all template engines. Lift/heist/zpt are the exceptions to the rule.
That's a long list of open source projects. I wonder did Instagram contribute to any of them, or help out in any way?
The scoreboard has been hacked already!!!!

Also, I'm not sure if I was regrouped with players who weren't signed in but after logging in with Twitter I no longer saw any other user pictures.
One billion dollars... For Instagram? While it's a great company, is it worth this much? This doesn't sound like a sane amount to buy the company for...
It is a fork in that it is a parallel line of development but from reading Twitter's blog the desire is to get some or all of their work upstream. Releasing the fork like this gets them some early OSS & engineering cred while being able to start the conversation on their modifications.

We look forward sharing our work with upstream and other downstream MySQL vendors, with a goal to improve the MySQL community.

http://engineering.twitter.com/2012/04/mysql-at-twitter.html
10Gen Takes Open Source NoSQL MongoDB Commercial with Red Hat
Exactly. Dogs are something that you should have a much deeper connection to than an apartment, there's no way I'd let mine stay with some random person.
No login I guess.
Software Engineer? Join Heyzap and push code live to millions of mobile users
The game is scored in total value of the ecosystem. Apple captures a higher % of iOS ecosystem value because it's the only device manufacturer. Google captures a lower % of a larger ecosystem, leaving value on the table for OEM partners. The latter is a stronger long term strategy.
Minicamps on Rationality and Awesomeness: May 11-13, June 22-24, and July 21-28
Hah! Yeah, we left the debug console open so you can play with it. It's a graphical debugger that shows the data updates for the game in realtime. Have fun: http://mmoa0.firebase.com/mmoaleaderboard0
Evidence of this memory explosion? Keep in mind that Go processes tend to take significantly less memory than Java processes, especially when dealing with IO related code, i.e. sockets (http://shootout.alioth.debian.org/u64q/benchmark.php?test=al...).

Sure, if you do it stupidly, and have a highlighter process per open document or something, it could add up over time. But if you share highlighter processes between documents, you have 1 process that you keep open for the lifetime of the application. A simple HTTP server in Go takes < 5 MB of RAM in its steady state, a server using domain sockets would probably be comparable. And even better, a bug in the highlighter doesn't mean your main application crashes. If it crashes, the parent merely restarts the process. Even better, its more secure, in the sense that you can run your highlighter with absolutely no OS privileges. Also, this allows for plugins written in any language that supports sockets.

All I'm saying is that there's no evidence that IPC isn't performant enough. And IPC comes with security, compatibility, and isolation advantages, to boot.

Note that I'm definitely not saying that dynamic loading wouldn't be nice. Do I miss it, when working with Go? Not for my use cases. "Plugins" for servers don't really make sense. But dismissing Go because it doesn't target every use-case at the moment is somewhat shortsighted.
not that it's apples and oranges either (50mm vs. 1bn) you'd think diligence takes time (i.e. longer than a weekend).
Indeed. I often find myself using nmap on my own network to find out which IP address was assigned to a system when .local/mDNS name resolution is down and the DHCP server doesn't provide enough info to identify a specific computer.
I wonder how easy it would be to hook this up to dns tunneling software such as http://code.kryo.se/iodine/ in such a way that after the the initial ssh auth step, you would have a useful terminal that would be accessible even behind captive portals and the like?
Do You Think This Short Story Is Scary Enough To Be Made Into A Movie?
I went to the first one of these, and I can personally attest to it having been awesome.
A one time payment of several hundred million and you are pretty okay.
How do you happen to own asteroids.com? There must be a good story! :)
IAMEXEC.COM is done on the (very carefully designed) Twitter Bootstrap grid. The spacing and type size are mostly inherited. The color scheme is black & white with accent blue. The photography on the site is custom and reasonably well done.

Your standards are too high. You may be tired of Bootstrap sites, but I assure you that the rest of the world isn't and while Bootstrap's particular look/feel may go out of style, the world isn't going to get sick of sites like this just because they're Bootstrap.

When you say something is "unprofessional", you are implicitly making a comparison between it and other companies in the industry. Exec is a new service, but it serves an existing market which includes Craigslist, Angie's List, Zaarly, TaskRabbit, and AskSunday. Despite being an almost- out- of- the- box- Bootstrap design, it is already better than several of those sites!

It's perfectly fine to not like Exec's design! I'm not faulting you for thinking the type is bad (I think you're wrong about "spacing" though) or the colors generic.

What's less fine is "unprofessional". Again: I think that assertion isn't just wrong; it's part of a meme that casts a pall over the whole site, which is chock full of people who would launch services except that they're waiting months and months and months to get "good design" that nobody in the whole world cares about other than a couple loud people on HN.
Yes, he posted that after Greg posted "no, hamlet is the best thing ever nobody can want to use anything else". Greg is the other yesod developer/maintainer. Notice other people have replied with similar sentiments. I think your love of yesod is blinding you.
Every subset of piracy is by definition piracy. But if you mean what kinds of things I think shouldn't count as piracy even though they are illegal in the U.S., here are some examples:

1. Posting a link to a web page that contains a link to a torrent that contains directions for downloading a song that was copied without permission.

2. Breaking the DRM on an e-book, song, or video stream so that I can enjoy it on another device that I own. I bought the song, goddammit. I should be able to listen to it whenever and wherever I want.

3. Copying a book, song, film, or game whose original author has been dead for 20 years, provided that no publisher, record company, or film distributor has obtained from the author the right to print or distribute the work commercially. In other words, the work is out of print.

4. Copying a work whose copyright owner appears to have no intention to license his work in your country anytime soon. This is less of a concern in the U.S., but a huge concern in the rest of the world. You can't lose any profit here if you have no intention to make a profit here, can you?

5. Creating a derivative work (e.g. YouTube remix) that cannot reasonably be expected to eliminate a person's desire to purchase the original work. Nobody who sees a YouTube remix of 90 seconds of excerpts from Inception and thinks it's cool will then think, "Hey, that's enough Inception for me. No need to go see the actual movie."

The whole point of copyright is to encourage creative endeavors by allowing creators to have a monopoly over the distribution of their works for a limited time. Therefore, any behavior that does not hurt the creator's actual (not hypothetical) profits should be permitted by default. So if the causal link between my action and loss of profit is really sketchy (#1, #5), or if I have already paid the creator (#2), or if the creator clearly cannot expect to derive any monetary benefits from my consumption of his work (#3, #4), the whole rationale for copyright protection falls apart.

Just the other day, I read somewhere that Shakespeare wrote King Lear (one of his best works) about a decade after seeing, and even possibly acting in, a similar play staged by a group that would later become his major competition. Some of Shakespeare's other plays were also based on stories that were published only a few years previously. Any law that would have made it illegal for Shakespeare to adapt these works into his masterpieces, I think, has absolutely no reason to exist at any time or place.
It would not seem to be the wisest of choices.
is this a schizophrenic auto replier?
I'll agree it's multiplayer, but considering gameplay goes from "fun and challenging" to "frustrating" at around 10-15 players, I doubt its massive-ness.

However, if the map scrolled instead of wrapped, it could easily become massive.
I agree this is a risk in the business model. However, given how annoying it can be to coordinate schedules, an online scheduling feature could be useful enough to bring them back to the site. (And if your preferred sitter isn't available... you'd need the site for a new one.) I guess it depends on the extra perks of the site vs the cost of use ie. the percentage of revenue Rover keeps for themselves. I'd pay $2 just to avoid a chain of emails asking what day/time works best for any calendar event.
CISPA is not SOPA
Not sure of the connection here. BTW - check out the nerds-central post on why Thorium matters if you are pro-nuclear - it might have some good amo for you to use.
Do I understand correctly: to use mosh, I must have mosh-server available on the remote machine (?).
How many schools could that have built?
Ha... Want to get more depressed? Alexa reports that Instagram is ranked as the 6,534th most popular site on the Internet. Compete.com said it had 331,529 users last month. Seriously, what the heck? What kind of reality distortion field did they have to come up with to convince the Facebook guys that this was worth $1 billion dollars?
This looks fantastic and seems like a very much needed part of the ssh ecosystem. Most of my work is sshing from my home computer to servers in the cloud, and this seems like it will be perfect for mitigating the feeling of lag.
EveryMe (YC S11) hits the App Store
And slowly the cracks begin to show in this system.
The article mentions they have a team of 3 engineers. You don't pay that much cash for 3 dudes who managed to boot some instances on EC2 and install an off-the-shelf open source stack.
This right here is the mentality that bothers me.

I promise you: the industry of professional designers is full of people who believe that only professional designers can create sites that will pass muster with buyers in the real world.

The reality is simpler, cheaper, and fairer: there is indeed a minimum standard that company websites need to achieve to look like a "real company", but it is many many thousands of dollars cheaper than a professional design project. You can buy it for tens of dollars on Themeforest. Your customers, unless you sell primarily to designers†, will never notice or care.

Most professional design projects by pre-revenue companies are vanity exercises. A lot of professional design projects post-revenue are too.

It is completely f'd up to say that a company looks unprofessional because its website isn't the product of a professional design project. Professional designers are not the gatekeepers of professional startup site launches. They just aren't. People need to stop acting like they are, because it's keeping them from getting to market.

† Do not do this.
I have some questions about your points... How many people do you think one would need to find any decent cures/treatments? How many patients are current researchers making use of to accomplish the feat? If moldbug had said something along the lines of "you can increase the numbers by having billionaires fund people other than themselves, such as their parents or other people they care about, or just as donations, in ways that don't bankrupt them but still provide lots of experimental data", do you think the increased number could still not possibly be enough, would you still object?

If moldbug had started with 5 concurrent treatments instead of 30, would you object to that? (Though considering death is coming I personally would rather die of treatment exhaustion from X treatments than the actual cancer, knowing I tried many potential solutions. (This conditional on a cancer that actually threatens my life.))

Lastly, are the "unknown collaterals" equivalent unknowns? Shouldn't we try to estimate them and decide whether ramping up the release/iterate process is worth it? That people are dying because the research system sucks doesn't seem that controversial to me or very unknown in truth-value. How likely do you think it is that someone kills 1 million people with some remedy, and how likely do you think it is that the same 1 million people would have lived much longer without such a remedy being attempted on them?
A not so interesting infrastructure that FB will probably overhaul. I think the author does not realize that facebook runs on custom server hardware, php/Hiphop, a bunch of open source stuff they contribute to like cassandra, memcached, varnish etc. The size of facebook and its platform is simply staggering. I 'm pretty sure their engineers are going to be hard to be impressed by these.
What's Zynga.com ranked at?
Where is the casual programming?
Frankly, this is as much confirmation as anyone should need that we are in fact in a massive financing bubble.

The sums of money being bandied about are absolutely mind boggling. 1 billion for a photo sharing app?
Is there any overlap between the work done in Gizzard and the other popular MySQL forks (Percona, MariaDB, Drizzle) or are each of these solving different (incompatible) problems?
There was another one called Subspace (now Continuum) http://www.getcontinuum.com/. I loved the early days of that game. 1997-ish.
wait...do people really buy Sebastian's shtick?
Natively supported by Flash Player 10+, it's been out for 2-3 years now if not longer.
Oh no. I predict that within the hour every player will have a rage face as their player picture.
The problem with regulating possession of specific kinds of software is that they are entirely a product of the mind. You need specific precursor materials to create explosives and controlled substances, but anybody can imagine and create a good system administration tool.

There should never be a legal concept of an "authorized" information security person. It's about like defining a concept of an "authorized" painter or musician, since all are talents that can be developed in isolation.
12

http://www.linkedin.com/search/fpsearch?companyId=2289109...
No, the game is not scored in "total value of the ecosystem". The total value of the ecosystem is only relevant if you control the whole ecosystem. Google is making far less profit on mobile than Apple is. If its strategy of growing the ecosystem out and skimming less profit from it is a good one, we should see it in their bottom line. We aren't, nor do we seem to be trending that way.

Maybe someday soon Google's strategy of letting a thousand Android devices bloom will pay off. But that is still a "maybe". Apple has tens of billions of "definitely's" to counter that maybe.

Meanwhile: I think people are getting hung up on this whole Apple vs. Google point, and getting away from my real point, which is that:

(i) Google's bids for a stake in mobile have been hugely expensive and not particularly profitable,

(ii) Apple's bids for a stake in mobile have been hugely expensive and hugely profitable, and

(iii) Facebook's bids for a stake in mobile have been expensive but orders of magnitude cheaper than Google's or Apples, and could end up hugely profitable in the long term.

Facebook will end up looking pretty smart if that's what happens. They didn't even have to buy a cell phone manufacturer or write their own OS!
you may have peer assist blocked for all sites on your flash global settings. - go here and enable for meetings.io http://www.macromedia.com/support/documentation/en/flashplay...
Good arguments. I based 1kw on the 800 watt rating of the machine mentioned plus a/c etc. It is all ball park and I am a bit shocked you are the only person to call me out. But it does not matter because if you 1 tonne per year - it is still plenty. The car thing is a good point to make but I think you are stretching it with the telecommuting. This is especially so as the key to telecommuting if fast software (ever tried implementing video streaming in an interpreted language?) The amortized over many people point correct but not valid to the argument as it is a multiplicative not additive effect it has as no impact on the over all calculation.
I discovered this one last week, and I personally prefer it: http://seb.ly/demos/MMOsteroids.html
Nice tips. I'm using Alfred on OS X and Xmonad.Prompt on Arch but the cron to web view is a new clever idea.
>feels too much like piecing together jigsaw puzzles where you first have to know which pieces actually exist.

Well... that describes programming in many ways. That's not to say that shell scripting is the perfect casual programming environment - in fact, it certainly isn't! - but that anyone dabbling in things will certainly come to feel that problem. When I hacked in BASIC thirty years ago, then moved to Pascal, and then to C, that's largely how I felt the whole time.
Your comment seemed to imply that Paul had not looked closely at deals with Facebook: "But I suppose if you do have trust in Zuck you do not have to look too closely at the details of deals like this."
No, Netflix Has Not Formed A Pro-SOPA SuperPAC
SOPA supporters await cash infusion from Netflix PAC
The Weirdest Thing About The Instagram Deal
I believe I read that Marc Andreessen is an investor (and board member?) in both companies. Seems painfully unlikely they did not know. And why wouldn't Instagram TELL them?
I did as you suggested but in the logcat output I see the following message:

"Emulator without GPU emulation detected."

Is it accelerated anyway?