skysight-inc/HackerNews huggingface dataset:
As someone who works in the IT security industry, I absolutely agree with this statement. I could give dozen of examples showing Apple does not prioritize security as much as, say, Microsoft.

For example, when an open source software project bundled with Mac OS X releases a security update (LDAP, Apache, Java, etc), it sometimes take Apple months to merely test it and ship it out.

OS X was also very late, compared to Windows, in implementing in-depth defense mechanisms such as address space layout randomization, stack protection, etc.

And last August, it was discovered that LDAP auth on OS X blindly accepted any password! Apple's code review and testing processes must be very immature to let such a glaring vulnerability ship to customers http://forums.macrumors.com/showthread.php?t=1197379

But I think Apple is slowly and finally understanding the importance of security in their software ecosystem...
Sorry for the downtime on the main site but our Heroku/Amazon ssl load balancer died. I temporarily reverted to Heroku's piggyback ssl so the site will work but with an invalid security certificate. We are trying to resolve the issue with Heroku now.
On the last point, if the claim is dismissed due to the lack of registration, can't they just register and re-file the claim? Afaik dismissals of that sort are without prejudice. Is the concern the expense/delay that having to file over again would cause?
IPad use may hurt infant development, say experts
Paul Graham: "$50m companies innovate. Mine did. We basically invented the web app. We were doing complex stuff in LISP when everyone else was doing CGI scripts. And, quite frankly, $50m is no small thing. "

Of course, no one uses CGI now. It's all complex stuff done in LISP. Innovation is amazing, isn't it?
Heh. There's a lot of excellent discussion in all these comments, but when i read the post, I couldn't escape this point.
I think there's certainly some conjecture mixed in with experience, but if you want something a little more focused I wrote this a while back: http://blog.mozilla.org/webdev/2011/08/08/pragmatic-growth-f...

The "Build a culture people want to be a part of" section is probably most relevant.

But really, most of the concepts are so simple that you could find them in a children's video about bullying: http://www.brainpopjr.com/health/relationships/bullying/
People in financial industry unfortunately still have to deal with IE
The fill rate is not an arbitrary rule. The goal of ELP is to allow more orders to be filled on Direct Edge (i.e., not routed to INET/ARCA), thus saving Direct Edge customers routing fees (and making DE more money).

If your ELP members aren't filling orders, then customers pay more to have their orders routed and DE makes less money.
I was on Chrome and never tried with Fx.
Daemons in PHP (vs. crons)
There was nothing to disagree with. What I said was entirely factual. The only conceivable reason to downvote without comment (aside from being utterly irrational) was being upset by those facts.

And yes, I was upset — that people were reacting out of ignorance. It wasn't that I was downvoted, but what the downvotes signified, so I wanted to particularly call attention to the secondary issue I had observed.
Exactly. When I used this, I had some work and exercise-related positive goals, a multi-point goal (cooking, which I love but don't always make time for) and one negative line (caving in to the gaming addiction of the moment).

At some point I abandoned it, but I can't remember what caused me to break the habit. I might have more luck with an iPhone app that kept the chains in my face more often?
I think the argument here (which I am not saying actually happens or can happen, as everything I know about this comes from reading this discussion) is that it is a little underhanded if you go "anyone want to be the other side of this transaction?" and someone in the room decides that you were a sucker for giving him the announce notice, opens his laptop, manages to find out that outside the room the going price is actually $450, quickly buys some at that lower price, and then sells it to you at $500, whereas if he didn't get involved that $50 difference would have stayed with you (as your $500 intention would have been fulfilled at the slightly lower rate in the larger market).
Interesting. Does this make pigeons (and similar such creatures that navigate by using magnetic field data) vulnerable when magnetic fields are disrupted either by field reversal or a solar storm?
While I don't disagree, I think it could be a bit early to judge in this case given that people were probably mostly kicking the tyres.
Those sentences do not say the same thing. Most worrying: "promoting" in the Google terms.
Probably not. Consider IBM's women-only scholarship program:

The American Physical Society and IBM co-sponsor a research internship program for undergraduate women. The goal is to encourage women students to pursue graduate studies in science and engineering.
-- http://www.aps.org/programs/women/scholarships/ibm/index.cfm
Airbnb Streamlines Booking Process for Last-Minute Travel
Depends on how you define "the best". I guess it's partly an ego stroking thing but also based on the sort of problems that the company might hope to have to solve in the future.

Of course being "the best" depends on the company. Let's consider someone like DHH from 37 Signals. He created a very popular web framework and a suite of popular products so no doubt that he is a very productive and talented developer. However would he be the best person to choose if you wanted to do complex cryptanalysis or develop a high performance OS kernel?

What if you took someone who was skilled in these things and gave them David's job, would they be "the best" then?

I think it is this confusion that makes interviewers think they must ask complex math questions to interview someone who's day job will be to write code that generates HTML.

There also seems to some confusion that you are only elite if you use the latest and coolest tools, which leads to weird stuff like someone who made a web 2.0 social chat app in nodeJS being considered better than someone who designed and implemented a 6 nines reliability infrastructure system for a bank but who was building on top of legacy Fortran/Java/Oracle.
So, there wasn't time for preparing some video summary of speakers and what they talk about... but there was enough time for making 2 or more videos about songs, piano perf and well, baloons.

It's clear what was more important to organizers. Certainly not Rails :)
"Groklaw does have a history of predicting future events in these court cases that FOSS Patents can't pretend to match"

Having read both regularly I don't find this to be accurate. Groklaw makes actual predictions rarely and consequently has a cleaner track record. FM makes a lot of predictions and is, as you would expect, both wrong and right more because of it. He also covers a lot more cases.

As regards this case the big ticket item has been the Lindholm email and FM seems to have been right that it would stay in. And while I don't recall Groklaw definitively saying it wouldn't, their coverage certainly skewed heavily towards "remember that email from SCO that was just like this".
The program runs for June 4 - August 3
>OS X was also very late, compared to Windows, in implementing in-depth defense mechanisms such as address space layout randomization, stack protection, etc.

These are not areas where Apple is even close to 10 years behind Microsoft.

The statement here is absolutely indefensible, In 2002 OS X was way ahead of Microsoft on the security front, and OS X has not gone backwards since then.
The Art of Wargaming:  Creating Interactive, Social and Immersive Platforms
I wasn't saying that the example arguments I gave were necessarily invalid, only that they are remarkably uncompelling. Is functional style the only way to achieve concise code? Is "mathematical" code really the standard to which we ought to aspire? These questions, among others, are left unanswered.

Essentially, a bad argument for functional programming says, "here is what functional programming does well; here is why that helps you". A good argument for functional programming says, "here is a very real problem that you have encountered; here is the remarkably effective way in which functional programming addresses it". Note the inversion, especially the focus on solving problems rather than on justifying paradigms.
Because it's impractical to create a TOS that defines all possible ways they might need to use that data in order to provide the service (from any court's viewpoint) but also explicitly carve out that usage. If re-using the code as you posit is indistinguishable (legally) from a valid use of the data they need in order to provide the service, they're not going to carve it out of the TOS. It's better to not attempt that, and let you (as the customer) pick if you're okay with that. If you find the risk unacceptable, don't use the service. To some degree that's a better outcome than exposing the host to a ton of legal risk.
Much to say… I recently got a chance to meet these two people and within that first meeting, I could tell they were on to something… most importantly; it was coming from the right place. I gotta speak on Christians teaching style, having met a lot of programmers and read many books; it’s a treat getting a chance to meet and learn from a person that has so many contexts from which to pull a clearly explained, simple to understand answer. But that doesn’t really do him justice in the sense that, it’s important to understand when you can say more and when you should hold off, and he’s got that. I’m currently taking classes from Christian and David (tonight in fact) and I can say that I look forward to getting the insights that you can only get when you talk to people who are intimately familiar with the environment around development and the coming and going technology and programing paradigms. They even brought a Google engineer the first night, come on! That's pretty COOL! For me, this is the most excellent way to get a chance to rev up my skill set without having to put my carrer aside for 18 months to several years to get it from a formal school. And on that subject, all the engenieers and CEOs that I’ve talked to say the same thing, education is awesome, but show me what you’ve built. From day one in our class, they said on day two we’re gonna start on our projects. That’s learning by doing… and if you’ve ever spent 30 hours figuring out that you missed setting a reference somewhere that coulda been spotted in 15 seconds by someone who was looking over your shoulder… then you can appreciate a place where your day consist of coding with peers rather than reading about chapter 23 by yourself! Let me build something that has meaning to me... and they're doing just that! David is awesome too! Very personable and a testament to how good of a teacher Christian is… ‘cuz he can get down with the code too!
Gotta go! Got some work I gotta show up to class with. These people leave you feeling like you’re so lucky to have them as your new friends that you don’t want to disappoint them or yourself.
I’m sending a friend to go and apply for their summer fellowship for women. I love to see anyone who just needed a push… finally get there! Much Luv Guys!
I don't think there's a confusion. As far as I'm aware, women consistently express a preference against the aggressive and disrespectful communication style that's common to many software projects, meaning that this style functions as an effective barrier to women (and men who don't like overt conflict much either) joining these projects.

I don't think nitpicking the semantics adds much here.
Hey, you have a problem with the VanDerVosses?
You could also add -ms-transform, since that works as well in IE9+.
Would you pay for freelance marketing and user research?
I'm thinking about going independent as a freelance marketing and user research contractor for startups. Think of me as one person method, ideo, or other marketing and usability / user research shop without the overhead, but all of the experience.

I can help you package and pitch your product, learn more about what users want from your work, build a marketing plan, and teach you how to do those things yourself.

I'm doing a bit of exploration.
- Would you hire someone like me?
- What would you want me to do for your project or company?
- What would you want to pay hourly or weekly?

p.s., A few of my developer friends suggested that I post this here. Apologies if this feels like spam.
CISPA passes House despite opposition
Log Everything as JSON. Make Your Life Easier.
Sluggishness and battery life are big complaints about current-gen phones; going higher-level is probably not a good idea.

I'm still not sure why Google went with Java over C++, other than thinking "phones are fast enough."
Actually no supermajorities were not in the Senate by design.

http://upload.wikimedia.org/wikipedia/commons/7/79/Cloture_V...
I was going to comment saying about the same thing as you: none of the ultrabooks on the market are quite there, particularly when it comes to build quality. I am a big fan of Thinkpads, however :)
Basically it says the 4th Amendment does not apply online, at all.

Incredibly, this was described as limiting CISPA, but it
accomplishes the exact opposite. This is very, very bad.

Far from the defense against malevolent foreign entities that the
bill was described as by its authors, it is now an explicit
attack on the freedoms of every American.

Can someone with legal expertise tell me if this is this hyperbole or reality?
Why isn't email programmable?
Instagram founders talk: 1 year ago
I just left an environment that was eerily similar (on a point to point level of the article) a few weeks ago, after management started panicing that their new product (which is a pivot of the code base) was slipping (almost day-for-week in some aspects). It was getting so bad that only one of the developers would actually show up in the office (and everyone else working from home) just so that they didn't have to deal with the awkward silences. Nobody wants to speak up or admit responsibility, so mistakes are swept under the rug.

When you remove the ability for individuals to speak openly and freely (either because of pedestals, political reasons, or silos), you lose the dynamic that allows for true innovation to foster with your development team. Calling an all-company meeting to say that "We're not going to promote anyone to any new position, we're going to hire everyone externally" doesn't feed the team/company spirit, it makes you feel like you're in a dead-end job...and when you feel that you have no motivation/skin in the game, your quality of work, life, and support start to diminish.

Ultimately, I started seeing that I was becoming miserable in spending any time working, and I started to notice the quality of my own work starting to diminish as I started to take on less and less risky moves; something that is completely unacceptable to me. While I've left without a formal offer in hand, (and I'm confident that I'll find something that works for me) I've found that I've been in a BETTER mood, knowing that I don't need to deal with the stress, the mis-management, and the 'zombification' of my former coworkers. I'm happier -- and that's what matters the most to me -- and I've now noticed first hand what the warning signs are so I can avoid places like this in the future.
Funny he doesn't quote Tim Sweeney :)

http://lambda-the-ultimate.org/node/1277
Hopefully that's where it dies - along with a lot of good legislation in the past -dead waiting for the "silent filibuster" to end.
C is an adequate language (actually, more than adequate) with a large base of skilled programmers. There is a long history of successful development. And the developer base is aware of the warts that still remain in the language.
Try out http://dontbreakthechain.com/ - it's awesome.
Reward good behavior - it's the only way to train them.
Awesome, I'll check them out, thanks!
You're responding on a thread that provides chapter and verse citation to the statute that already made this kind of sharing lawful. You might just as productively oppose every bill for not fixing the ECPA.
I did not for following reasons.

1. I do not want to keep installing software on my system especially on my office computer.

Why not Google came out with a G Drive similar to Amazon where you do not have to install anything but still can upload and access all files?

2. And Google is late to the game. I have already 5 GB from Amazon and 5 GB from Dropbox and that will be enough for me for a while.
I think that to give the responsibility of security to the government is a fallacy, not only because the government is very capable of abusing the power and screwing up in a huge way, but also because it will make private companies less likely to take the appropriate measures to protect themselves.

Defending yourself from an attack is almost always easier than being the attacker. You just have to know what type of technology you are working with and the inherent security holes in that technology. You don't need to blow millions of dollars on security unless you are already a company worth several hundred million dollars.

And the other problem is that there will always be skillful hackers, and these hackers will always have the means and the knowledge to hide from the government, even if the government has access to a much greater percentage of information going through the internet. If the government has fancier tools to access things like email, hackers will be more careful/liberal with their use of encryption.

I believe that this bill is going to work a lot like DRM. It's going to put hackers and civilians alike in a more uncomfortable position, except that the hackers are going to figure out how to work around it fast enough that its hardly going to make a difference, and the techno-ignorant (for lack of a better term) civilians will just have to deal with it.
Which would be what?
But why use C when there are other Systems programming languages like Go, C++, D, etc..
Hypnotoad compels you to apply...
I don't believe OSX has ever been ahead of Microsoft in security, it just didn't have enough popularity for anyone to really care about attacking it. That has changed.
Am I the only person who feels really embarrassed for everyone involved? This is not the kind of thing that should be done in public. If you want to court someone then get in touch with them and make some real offers. If they say "no" even after you've made a couple bigger offers then respect that, and move on with your life.
This is probably the best summary of functional programming, written by the best "pragmatical" programmer of the world. I wonder how much Haskell code Carmack must have written to reach this kind of knowledge... and whether it is open source. It would be a good read for the weekends.

BTW, I think the pure keyword in C++ would be great. I wrote some C++ in school, and even I can tell that const, as applied to functions, could use some retirement. It's nonsense to keep this unmodified, stateless so to speak, but allow global variable assignation, and so on.
CISPA is not SOPA. We explain the difference.
I downloaded the app but didn't register. Any chance you can put the map you show on your web page in the app? So at least I can see that without registering?
I disagree.

If it results in companies actually spending the time to design better APIs I would absolutely support them being copyrighted.

Millions/billions of dollars is wasted each year because of terribly designed APIs. And I am a massive fan of a future where every system (internal and external) has a clean, interoperable API to build next-generation mashups. But right now that is a pipe dream.
Rakudo Star 2012.04 – a useful, usable, “early adopter” distribution of Perl 6
IMO It'd be the best thing Google could do, but (sadly - even though I don't like Google one bit) they don't have the courage.
My guess is $10m. We shall see what we shall see. I will extrapolate post facto.
CISPA, Surveillance and the "Militarization of Cyberspace"
Levis Belts for Sale
Thanks for the summary. I'm curious why the EFF/DemandProgress would be using up the energy of their supporter base trying to tackle an empty suit of a law, if it is one, and why they've expressed glee at the threat of a veto.

And from what I've heard about the attacks on various DoD organizations from people I know there, a sharing infrastructure to spread information about vulnerabilities quickly is probably going to be necessary soon. I really hope they're aggressively compartmentalizing those networks.
Chrome 1.0 on Windows had a similar annoyance - it was pretty fast for a 1.0 browser, but was absolutely not a refined product, using amazing amounts of memory and spiking my processor way too often.
A music streaming tool to find niche artists that works
That may be the nature of the complaint, and it is definitely the underlying concern of the NBBO rules. But by saying "hey, anyone want to be the other side of this transaction" you're stating the price at which you'd find a trade beneficial.

This gets back to the nature of the market price. There is a fallacy that the market price is the price of the last trade. At any price, there is some combination of supply and demand.

Similarly, at any latency, transaction fee, etc., supply and demand may converge slightly differently (without NBBO rules). Since there is always the risk of trades occurring too far away from the price on the larger market, any ETN trader is going to figure out what his/her risk aversion is to this phenomenon and design his/her strategy accordingly.

For an HFT trader on an ETN w/o NBBO rules, it might make sense to buy a data feed from the NYSE to be sure to be aware of the up-to-the-second prices there. The NBBO rules benefit both the large mega-exchanges like the NYSE and also benefit other market participants who would have to buy a separate data feed to reduce risk, by strapping the cost of that additional data onto the backs of all the other participants, even those who would have a greater appetite for risk or whose strategies don't depend as much upon the ultimate depth at a given price.

What makes this even sillier is that for the small investor, trades on something like eTrade cost $20 each. If you're simply moving the investment between two investments that means two trades. This makes a LOT of strategies utter failures and not worth trying. The world of ETNs is just one more step of automation, dollars, and sophistication away from a simple eTrade account... hence its highly disruptive nature and the many startup hedge funds that have sprung up.

The genius of ETN creators was the realization that there is lots of depth provided by smaller, more niche players... to the point where many trades can be filled directly on the ETN for no fee. This opens up the door to many strategies that would simply have been impossible before, and combines the capital of each of these smaller players... each of whom has some exposure and who combined offer non-trivial depth... enough to take away volume from the major exchange monopolists.

This was not lost on the major exchanges who used their clout with regulators and journalists to institute the NBBO rule, to paint flash orders in a negative light, and generally sure up their monopoly positions against any competition.

Yes I said it, the major exchanges should be subject to a major anti-trust investigation and broken up. Of course, everyone (regulators included) is so afraid of upsetting the market that this will never happen... and if some other country opened up a market allowing such things, the US would ban Americans from using it.
Seems like something that almost never happens, actually. In the list of ways that copyright can screw musicians, this seems very very far down the list.

(and as an aside, you can most definitely sue for copyright infringement no matter what a click-through license says)
Meet Ukrainian girls and women for marriage
Heroku has now acknowledged issues https://status.heroku.com/