skysight-inc/HackerNews huggingface dataset:
I'm a long time Java dev and lately it's been terrible, totally terrible, for Java from a security point of view. A gigantic fiasco. Flash's track record is very poor too. Saying that something is "less vulnerable" than these two really doesn't mean much.

We're talking about hundreds of millions of zombie PCs due to Java applets + Flash exploits. So being "less vulnerable" than these technologies doesn't mean much.

So no Microsoft product in the top 10? You mean Word is not as big as an attack vector as Java applets and Excel is not as big as an entry point as Flash? Is there any surprise in here!?

That's not the interesting thing: what concerns most people is the browser they use to surf the Web. Is Safari + Java applet plugin more vulnerable then IE + Java applet? Is Chrome + Flash more vulnerable then IE + Flash?

That's what counts.

And also: how do you install Java on your system if you really need it (e.g. because you're a Java dev) and yet make sure it's not available from your browser? Or from another user account? This kind of stuff is trivial to do on Linux: it's been a long time since I'm using a throwaway user account that has no Java installed to "surf the Web" (using Chrome but whatever). It's trivial to do because on Linux you can install Java from a regular user account (no need to be root).

On Windows this is not possible: installing Java requires the admin password and opens a whole can of worms ; )

I can tell you: I'm surfing from Linux using Chrome which has Flash. I also have Java installed in a separate (developer) user account. And I'm pretty sure this is more secure than surfing from a Windows machine, no matter where Microsoft stands in that report from their "friend in bed" Kaspersky...

Also, for a little touch of irony regaring the article, Kaspersky's revenues are virtually entirely coming from sales of anti-virus protecting Windows OSes. Why aren't they succesful on the Linux servers powering the Internet?
Given that the first thing I think when I see your username is "who is he going to shit on today", I would suggest that perhaps some "physician, heal thyself" is in order.

I find that, as trite as it sounds, you really do get out of HN what you put in. When I first posted at HN I adopted an aggressive, frankly really fucking douchey attitude that reminds me of your continual one. I'm still slowbanned because of it[1]. When I moderated the dipshit attitude out of my posting, however, it became a lot more fun and I've made a few friends through posting here.

Let's get real here. Ideological downvotes aren't your--and I mean your, in particular--problem. Being an asshole, who apparently can't get through a day of posting without attacking someone or caricaturing a position with which you disagree, is. I mean, come on. "Fandroids hate Apple." "Leftists hate private property." You're not fooling anyone: the schtick you are employing is to make statements that are tailored to offend, under the guise of "stating your opinion," and then get outraged when they do offend and people take advantage of the moderation mechanism of a downvote to say, "we don't want this here." You don't get to be surprised or offended when you do that and conflating rejection of your behavior with rejection of your beliefs is intellectually dishonest.

The problem with the reception of your posts is you. I know this, because I've been there, and I chose not to be quite as much of an ass. You, apparently, have not. Act like less of an asshole and I'll bet you that what you see as "ideological downvotes" go away.

.

[1] - The slowban used to annoy me, but I find it moderates my initial, fly-off-the-handle reaction pretty well. I think I'd miss it if it went away.
It should also be weighted by probability, so it's not quite ideal.
Finding a job
Most landlines, of which a significant number are VOIP do not charge per call or per minute to any number in the US. There is a flat monthly fee for unlimited calling. Mobile phones charge the same per minute regardless of the number dialed.

Yes, this is oversimplified and there are billing options which do strange things, but it's unlikely that the reason for the local number policy is the cost of the call.
This page is a good high-level summary: http://code.google.com/p/address-sanitizer/wiki/ComparisonOf... .

I've used most of the tools on that page, including Valgrind. Valgrind interprets your program, and hooks loads, stores, malloc/free, etc. to track memory usage. ASan is a compiler pass that inserts extra instructions around loads and stores to drive per-address state machines that live in a shadow area of memory.

Valgrind is slow (20x-50x for serial programs, more for parallel programs because Valgrind only executes one thread at a time), but can detect reads from uninitialized memory because your program is essentially executing in a VM. ASan is much faster, especially if the compiler pass can avoid instrumenting some loads/stores based on static analysis, and cannot detect reads from uninitialized memory, but can detect most other kinds of memory areas.

They're both thread-safe, so you can use them to debug parallel programs. As mentioned above, Valgrind is much slower at this, and until recently [1] you would never see most race conditions in multithreaded programs because Valgrind's schedule would run each thread until it yielded voluntarily, rather than pre-empting and time-multiplexing between threads. In contrast, with ASan all threads are running close to at-speed and simultaneously, so in my case performance was >100x better and I actually saw the race conditions I cared about.

Valgrind supports more platforms than ASan (see [2] vs. [3]), and does not require compiler support (so you can use it to debug code from any compiler), but does tend to lag behind new platform features a bit. For example, until recently it borked if you used the new x86_64 RDTSCP instruction.

Mudflap seems similar in concept, but there appear to be issues with the implementation (see "Known Shortcomings" at [4])

[1] 3.8.0 and on have the --fair-sched=yes option http://valgrind.org/docs/manual/manual-core.html#manual-core...
[2] http://valgrind.org/info/platforms.html
[3] http://llvm.org/releases/3.1/tools/clang/docs/AddressSanitiz...
[4] http://gcc.gnu.org/wiki/Mudflap_Pointer_Debugging
Astonishing things in informatics
My 2 cents:

1. Find a customer which you think this product is made for, if you can. Pitch them your model. Get feedback, iterate on the model.

2. Develop an MVP. Search tech talent on oDesk, Elance or your personal network - get something out. Keep that customer in the loop.

3. After that, try to get that customer using it. Iterate again.

4. Market it. Get more customers. Raise $$$. Build a team.
The function of an iMac isn't to remove and replace hard disk drives.
Yes, that's right. It does do the same thing as valgrind but the practical benefit of compile-time instrumentation rather than dynamic translation is that ASAN is enormously faster.

A lot of people are using this on their fuzzing rigs with large software applications like Firefox. ASAN hugely decreases cost per test cycle (and therefore cost per bug, without changing fuzzers).

A friend and I chipped in to get a fuzz server (quad xeon X5660, 96 GB RAM, dual SSD). It's paid for itself twice over in bug bounties and there are more in the queue. Valgrind was always too expensive but using ASAN builds we can find more bugs.

Having ASAN support in GCC would be really handy, because for large projects it can be a major effort to get everything to compile in CLANG.

If you are sufficiently paranoid, and willing to accept a speed and memory hit (roughly factor of two) you could use ASAN in production. Personally, I am beginning to entertain the idea of using an ASAN-instrumented browser for day-to-day use.
Twilio/Tropo, or something similar probably.
Not so much rationalize - he's actually putting it on a statistical and quantitative foundation. There's a fundamental difference between arguing from narrative and history, and technical arguments based on the statistics of how people actually vote based on polling.
Gittip applies for Shuttleworth Foundation fellowship [video]
Sports fans are constantly arguing about who they think is going to win such-and-such game. It's not important... but people enjoy it.

This isn't much different.

For both the games and the election, we will wait and see what actually happens. In the mean time, we enjoy discussing and forecasting.
Spooftooph 0.5.2 - Automated spoofing or cloning Bluetooth device
Article is correct. Founder stock is owned by the founder subject to repurchase right. Founder has legal and voting rights on the stock. Company must actually pay the original purchase price back to repurchase if the founder leaves. Note that this is different from options.
I really like this company out of Techstar's - https://www.digitalocean.com/ . Been using them for a bunch of apps with no problem
No backups? That's entirely your own fault, especially with Time Machine being stupefyingly simple to use.
I agree this is the best way to market this, if apartment complexes offer it as an included benefit to tenants. Have you considered the larger possibility of selling this to the alarm/gate companies to give them the capability of not requiring a local number?
29C3 presale has started
Most apps are pretty trivial to build, though. The trouble comes in making something that people value, not something that is hard to make.
The problem isn't that it's been tried and found difficult, but it's been assumed to be difficult and not tried (to paraphrase P. G. Wodehouse)
In that case your argument should be that "retina" ppi should be the target. 150ppi as on my tablet definitely isn't. 130ppi as on my laptop is not either. I join Linus and others calling for higher ppi displays on laptops. There is debate on the exact number but it would certainly be at least ~220 ppi on laptops and ~300 ppi on phones/tablets.
Do you have any plans to allow the user to input colors and get the value?
> But the only thing obligating them to do so in an absolute sense is copyright, and the moral compass of great swaths of the general public seems to have evolved quite decisively beyond it, and as problematic as that is for the current model of creative business I doubt it will change any time soon.

I wouldn't be so sure respect for intellectual property was ever all that widespread.

We've simply transitioned from a state in which it was difficult to 'disrespect' intellectual property, to one in which it couldn't be easier.

I'm sure if, in the past, people could have costlessly and near-instantly duplicated and shared vinyl records, cassettes, etc. people would have done it in similarly large numbers as they do today.
Phone prices have been totally skewed for a long time, and most new high-end phones have cost $600 only because that's what they were expected to cost. The release of the first iPad made that obvious, because it was the same mobile components as the iPhone, a bigger battery, a larger screen, and more aluminum and other materials for the case, but still cost $100 less. And the iPad was still profitable! The only reason companies continue to get away with $600 phones is that carrier subsidies distort the market. The notion that there's some mythical "correct" price that manufacturers used to charge that's now being undercut by Google is ridiculous. This is a market correction.
It's not libel because it's true.

the contrary, the court has explicitly found that Samsung did not infringe, so it is indeed libel.

This just shows how much of a joke the UK legal system is.

That "joke" provides the foundation for the American legal system as well as that of all commonwealth countries, are those legal systems jokes too? If the court had ruled in Apple's favour would you still be posting here calling the UK legal system a joke? (this is a rhetorical question)

And you guys getting excited about where the notice appears on the page shows just what petty and petulant jokes you are.

Hello pot, meet kettle
> This is also a pretty trivial app to build with the twilio/tropo APIs, so it's not an earth shattering product.

There would be people who might pay for not having to bother to write the code (and maintain it, and maybe innovate on it) for this. You never know.

"it's trivial to write" does not mean people won't pay for it. Things are more complex than that.
Apple isn't a niche player in mobile. Wether you like Apple's App Store or not, in terms of security it's a raging success.
Web designers: Thinking about screen sizes
You found a bad user experience for you (a problem)
You built an e-doorman (a product)

Now think about the problem an solution in terms of Product and market

Is the market who you think it is ? (I.E. who will buy this ? people, buzzer system makers or building owners ?)

Then think about what would be the product that would allow your market to solve the problem. Might not be the one you built exactly.

A product is only successful if it solves a problem for a market. Both problem and market are mandatory.
Shouldn't that just install python? Though you'd get into a bootstrap issue.
looks like a scam
>> http://news.ycombinator.com/item?id=4737400

That's the second time you post an almost identical comment in a thread about people not buying apple products due to their behaviour and you're telling them they are not truthful.

What reason would someone have to say anything whatsoever about a decision they've made? It's not as if they have Samsung stock or are shorting Apple. They are simple statements of fact. If someone states something about themselves then your best bet is to believe they know better than you what made them decide.
You've done the easy bit.
The hard bit is how to make money. Selling to the apartment owning/building/management industry will be very difficult. The product needs to be a lot more refined. The marketing materials just so. The team selling experienced in the industry. And so on.

Some fights are worth having. If you can find a sidekick who relishes the sales battle then sobeit.

Else consider open sourcing what you've done and move to the next problem.
With all due respect, I don't think there is such thing that "you think" your idea is 99% successful. You will never know until you try it out. Go to meetups and talk to others about your idea. Also joining Startup Weekend might be a good thing too. Finally, if the technical aspect of it is not overly complicated, try to learn to code. I have a friend that is a doctor turned hacker. Never too late.
I am taking Operating Systems at Auburn University, and my professor had us work on the Linux kernel source, learn how to define and implement our own system calls using the SYSCALL_DEFINE[0-6] macro and then implement our own memory snapshot tool. It is similar to /proc/<pid>/statm. We had to get other info on major and minor page faults as well. I learn a lot doing things like this.
Why it is rational to vote
At a glance, I consider this advice highly insightful. In my opinion, ego is one of the worst distractions from any pursuit.
You know what all you delusional conspiracy theorists keep forgetting. That roughly the same financial system model in the US exists in many other countries. So does that mean that there is a mini-conspiracy in each country or is it between countries ?

Anyway this whole government is scared of Bitcoin is ridiculous. They know, just like everyone else does, that Bitcoin is nothing but a modern day pyramid scheme that disproportionally rewards early participants and relies on new entrants to prop the whole deck of cards up.
Here's mine: https://github.com/darius/ung

It can be fun if you try to put your own spin on things, though with diminishing returns.

Edit: also https://github.com/darius/sketchbook/blob/master/regex/grep....
Project 1 PSD to Bootstrap
Obama on sorting 1M integers: Bubble sort the wrong way to go
Hmm you can try hitting the up arrow but I think that got taken out for release. Sorry!
Meta-point - I much prefer links to original content e.g. the EFF statement over links to the Slashdot (or other link aggregator/discussion forum) discussion thread.
Nice! Didn't know there was work to add ASan to gcc too.

ASan is already in Clang[1], and I've heard some of rumours of a ‘Thread Sanitizer’ as well. All kinds of interesting projects brewing inside of google, it seems :)

[1] http://llvm.org/releases/3.1/docs/ReleaseNotes.html#whatsnew
thanks yakshay, sounds easy but I guess step 1 will be most difficult
An alternative to truncating to get under 80 is to take out most of the vowels: "Why pltcl jrnlsts cn't stnd Nate Silver: Th lmts of jrnlstc knwldg". That's only 66 characters.
What is the point of hopping off the ground?
Its not? What make you jump to that conclusion?
BeEF 0.4.3.8 - Browser Exploitation Framework
How is that not different from our current system? Early participants acquired huge savings that continue to accumulate, so the rich get richer, requiring newer participants(immigrants) to help prop up the system and make the rich even richer. The only difference is bitcoins are a pyramid scheme that governments cannot control.
There are plenty of right-wing journalists outside of fox.
Born to be breached: the worst passwords are still the most common
I had the exact same issue as well. And I'm working on a hacker news Chrome extension as well which caused me to refresh too many times. The blocking doesn't seem to be time limited. I restart my router which assigns me a new IP.

For development, you can copy some hacker news sample pages and put on a local server and edit your hosts file and use your fake local hacker news (at least for the parts that is possible) then you can refresh as much as you like.

I hope people behind Hacker News give us some details about how things work so we can adjust the extensions, etc...
The question is, as MOOCs continue to grow in popularity and the "graduates" of these courses inevitably enter jobs that use these new skills, will the "certificates" that these places offer come to have their own currency?

In other words, will there come a time when a "degree" from Coursera showing proficiency in a relevant topic become more valuable than an actual degree from an accredited four-year institution?

I think that this will happen. Slowly, but it will happen. Software companies will probably lead the way on this. If I were hiring someone for a developer position, I have to ask my self which I would rather see:

- An online portfolio complete with GitHub resume of open source samples, blog posts demonstrating writing skills and competence, and a collection of certificates from Udacity, mitX, and Coursera.

OR...

- A degree from State Tech with transcripts showing an A in Data Structures, a B in databases, and an A in Operating Systems

Obviously there won't be such a clean divide between the two for a long time, but it's always been my belief that software development especially (and engineering in general) are better served by a master-apprentice approach than a four year "liberal arts" approach. Seen this way, the rise in "online credentials" is most valuable as a way of selecting those who would most benefit from the intense time and money investment of a master of their field.

As for general education, I do think it would be a shame to throw the baby out with the bathwater and end up with an entire generation of people who are really good at machine learning but never took a higher-level history course. So I'm thinking a good hybrid would be a two-year associates degree that covers the basics followed by self study online using MOOCs (perhaps combined with some kind of enlightened one or two year "work-study" program offered by companies like Google).

I'm really just thinking out loud here, so this isn't some kind of formal proposal or argument. I'm just wondering what the most optimal "end game" is.
Correction: Host your users data outside of the country they reside in. The EU is just as bad about this as the US is - An unnamed EU nation ruled that all user data stored on servers in their jurisdiction and pertaining to users in their jurisdiction was subject to police investigation without warrant, subpoena, or the hosting provider to inform the users that their data had, or could be, accessed in this way.

My company still runs a datacenter within that country - but we assure that no users that reside there also have their data stored there. Making it cross-jurisdictional, even a little bit - the user data is still in the EU - does wonders for privacy.

I wish that the courts would rule cell phones and hosted services an extension of the human mind (and thus protected under the fifth), but I doubt I will ever see this. Too many people fail to see how vulnerable they are.
Draw a stick figure comic for your pizza||ups delivery story! Much other consumer packaging to do, but that solves your messaging question
The only thing that matters when it comes to copyrights is what benefits society. It is not a matter of being rude or not being rude, it is not a matter of morality, it is not a matter of the creator's wishes, it is a matter of ensuring that the general public has access to "science and useful arts." Copyrights were created to promote businesses that make copies of creative works, because in the 18th century that was the best way to spread knowledge and art.

Of course, today we have a much better system for spreading knowledge: the Internet. We should be promoting that, and developing new systems for paying for creative work that are based on using the Internet (and especially peer to peer networks) to spread that work.
Aggressive pricing happens to any market which gets commoditized. It leads to more competition among the existing players to innovate and differentiate themselves.

Today, a tablet is a commodity product. Making a faster and higher resolution tablet is no longer revolutionary but just evolutionary. If the OP wants the existing players to survive why can't they create more breakthrough products than encourage inflated profit margins?
Gandi's new "no bullshit" branding
HN has an automatic banning system that looks at frequent requesters, and in my opinion it's set way too strict.

I got banned as well. In fact, for about five months I got banned about every 14 days, apparently for incurring short bursts of about 4 reqs/sec according to the server logs.

The fact that such a ban simply closes the server connection is pretty weird and unfriendly. For a long time I thought HN was simply down.

Eventually I sat down to search for the cause, and traced the problem to Reeder, the app I use to read HN on my Mac, was trying to auto-discover HN's site icons. It would look for a certain Apple-standardized icon name, and then load the front page if that failed. (When I informed Paul Graham of the cause and solution, he curtly told me to stop emailing him.)

In my opinion the system needs to be improved. The system ought to return a properly formatted HTTP response, and triggering the system should not immediately ban a user for a whole week. I would suggest a gradual system where you initially enter grace period of a few minutes (where the system might reply with "you're loading pages too fast, please try again in a minute") and only ban your IP if you don't honour the grace period.
The papers I read in preparation for the project and my main references:

http://dl.acm.org/citation.cfm?id=234537
http://dl.acm.org/citation.cfm?id=91423
http://tobias-lib.uni-tuebingen.de/volltexte/2001/240/pdf/01...
http://www.google.com/url?sa=t&rct=j&q=&esrc=s&#...

There were also a few other documents I had but they don't appear to be hosted online anywhere.

The Lorentz transformations are not as apparent as the visual effects, they're not canceled out though. You can actually see them, try speeding up and slowing down when you have >50 orbs. You'll see a warped view and such :)
Bursting the Analytics Bubble
I'd suggest manually taking on the first few dozen customers by word of mouth, as many as possible, then using that as evidence of a quantifiable need - after that point, contacting letting agents who may be able to use it as a neat selling point?