skysight-inc/HackerNews huggingface dataset:
The author makes it sound like an exploit, when found, is a magical object of wonder that was found by extreme luck and skill and thereby, if ignored, will cause no problems... in fact, from spending a lot of time with the kinds of people who routinely find an use these kinds of bugs (iPhone jailbreak scene), I feel pretty confident saying: in exploitable bugs are extremely common, they are often easily findable by people with relatively little programming experience (with fuzzers, or even just normal usage), and in most situations (normal computers or even small devices that do not spend inordinate amounts of time on anti-exploitation measures) do not take rocket science to exploit... in a world with these properties you have to assume that "the bad guys" already have the exploit you just found, and thereby any time the vendor spends obfuscating the bug fixes (which this guy claims is somehow important or useful) is just increasing everyone's risk.
I love when technology is used to enable people to keep doing what they love.
Dune 2 Online: Ported from DOS to the Web with Emscripten
Good point. I'm curious as to which HDD models Apple uses nowadays for their Time Capsule, that would allow for a better comparison. I couldn't find that information anywhere.

By the way, my first generation Time Capsule has a 500GB Seagate Barracuda ES, which used to retail for over $300.

http://goo.gl/Yazvn
I worked on the Palladium/NGSCB team from 2002 to 2005 - ultimately the team shipped BitLocker in Vista, but approx half of the team were siphoned off in (IIRC) 2004 to work on Hypervisor so the engineering effort ended up contributing to two pretty important OS features.
I'm not familiar with wordpress but does it require that you use mysql?
Same as for anything. In the United States there's a chart for looking up rights and determining if a property has reverted to the public domain: http://copyright.cornell.edu/resources/publicdomain.cfm

1923 is the base-line year for any works with a proper copyright notice. 1977 for any works at all, as the requirement for a notice or registration was eliminated.
No offense to the OP but the customer reaction seems obvious. I've thought about doing this with my apps before and then thought about how I would feel as a paying customer if the developer suddenly thrust ads upon me and asked me to pay to remove them again (or didn't give that option). If you want to put ads in an app people have paid for the only real solution is to release a separate "lite" version with ads. It might not seem like the best decision for your business but it's better than pissing off the people that cared enough to pay for your app in the first place.
Tripomatic overhauls travel-planning app, switching to MapBox maps
Would it be ok if we used some of these tips as part of the introduction process on the site to help guide people who are new to contributing to open source?
We use a combination of geospatial features from our database (MongoDB) and linear algebra to compute the distances on a coordinate grid. Admittedly this isn't a flawless approach, and cases like yours reveal some of the weaknesses. Certainly open to suggestions on a better way :)

With regards to ordering of results, it is mostly by distance, with some outliers. Definitely an area we are working on improving.

Thanks for the kind words.
Stop the Internet Coup
MapBox iOS SDK release with background tile cache seeding and native callouts
JVM Profiling Disclosures
How would this work in a real world scenario?
Summary:
- Intel fabs ARM cores for iPhone
- Apple agrees to x86 for iPad

This is an absolutely crucial moment for Intel and I'd love to be a fly on the wall on these negotiations. The nuances of the decision making must be absolutely fascinating.

Intel, I feel is making the wrong bet going all-in on mobile. This is somewhat like a "part two" of the Nokia collaboration on MeeGo except they're probably looking for more assurances from Apple.

The problem for Intel is one the one hand their process advantage is slipping (albeit slowly) and third-party fabs are "good enough" processes for mobile, and on the other hand everybody else is going ARM for cloud computing hoping to beat Intel on price.

Apple on the other hand has to consider the pain and cost of another "Rosetta" process for iPad, but it should be much easier since app delivery is constrained to their app store.

Apple definitely has the upper hand in negotiations, but that depends on how constrained they are on the supply side. I'm sure that Tim Cook would have planned accordingly, the question is how good a deal can they wring out of Intel instead of moving to TSMC, or if they get their act together GloFo.
So do an unencrypted normal site and an unencrypted attack site (like my spam folder is full of links to).

Most self-signed sites are fine, but because a few are MITM attacks, they should all throw big warnings (which users will learn to ignore, because of poor signal-to-noise).

Most unencrypted sites are fine, but because a few are attack sites, ....

The criteria for a user to enter sensitive info should not be "the connection is encrypted" or even "the connection is encrypted and goes to the server it says it does", but "I know the real-world identity of who I'm talking to".

The criteria to warn the user against entering sensitive info should be the negation of that; "I don't know the real-world identity of who I'm talking to".

The means of warning the user, should be such that the user does not need to act when not trying to enter sensitive info. So rather than pop-ups or interstitials that have to be dismissed -- and that the user can learn to dismiss -- there should be some persistent UI cue (like the green "Citigroup Inc (US)" beside the address bar) that the user can check when needed.

Browser: "Bad cert! The world's gonna end!"
User: "That's just a discussion forum, I don't care."
Browser: "Bad cert! The world's gonna end!"
User: "That's Joe's blog, I don't care."
Browser: "Bad cert! The world's gonna end!"
User: "yeah yeah, that's nice"
Browser: "Bad cert! The world's gonna end!"
User: "Would you shut up already!"
User: "...Why is my bank account empty!?"
I don't know about you but I want to see a buffer box setup where one of the lockers just says "I'm feeling Lucky" :-)

Edit: and given a game of chance, and games in general. I wonder if anyone at Google has considered combining BufferBox with Ingress such that as you're playing the game if you 'win' a power up it is in the form of Google schwag in a locker, where the open code and which locker appears on your augmented reality glasses to claim your 'prize'.
Haha, I liked this conversation! @jstalin I'll get my raspberry pi delivered in a few days, I'll let you know if I can figure out the varnish issue. Meanwhile, you can also submit a ticket on Trac https://www.varnish-cache.org/trac
Considering Solar Power, Post-Sandy
You'll have to pry this dollar bill from my cold dead hands
This doesn't sound like an aquihire where the product usually dies and the team disperses. Sounds like a regular acquisition - ie Google wants the team to continue working on their product but have it integrated with the rest of Google.

Congrats on the team, to me it sounds like Google wants BB to become a major point of contact between Google and it's customers.
Wow....never saw this one coming.

This could be awesome. Congrats guys. Look forward to seeing what the future holds.
QUIC network protocol in Chrome repo
Instagram Co-Founder's 8 Principles For Building Products People Want
Kickass idea, great execution.

Personally, I think the paint scheme had a lot to do with the success :). Great to see startups have success with tangible technology.
> The prompt style I use was invented, IIRC, by one of the Bell Labs Unix guys in the early days of windowing terminals.
: text;

My prompt is two lines. The first line is info line followed by $ prompt on the next line. If I were so inclined, I would simply change the $ to ; or blank. I don't have to choose only one of them, but if that were the case, the verbose prompt would have stayed and ; would have gotten the boot.
I disagree. Once you have already done it your likelihood increases that you will do it the second time around. You have more capital, experience, and connections.

You are right in the sense that before you start a business you are less likely to have multiple successes than you are to have one success.
iTunes 11: the convergence of iOS and OS X design
Agreed on 2, 4, 5, 6, 8, 9, 12
It's more than just command line stuff; Google did an extensive comparison that more people should look at: http://code.google.com/p/support/wiki/DVCSAnalysis
It's not a new idea. We've had them running in my country (Denmark) for the last five years at least. They are everywhere.
Walks & Walking Cornwall Walks Pendennis Castle Falmouth Walking Route
> The question is not "can (and should) people be prevented from resharing content", the question is, "what does content creation look like in a world where everything is shared"

DRM is an attempt to force rivalry and excludability onto information, which is inherently not a private good[1].

You can try and use a government fiat to legislate the market to behave a certain way, but at the end of the day, if those are at odds with the fundamental laws of economics and reality (ie, one's ability to copy information "for free"), you're playing a losing game from the start.

[1] http://en.wikipedia.org/wiki/Private_good
A malicious sender could just strip out your +whatever, and then you are where you started, unless you already filter all mail without a + part and give all your friends a salted email address.
I doubt that the CoffeeScript-haters would accept any compile-to-js language. Maybe it's language stockholm syndrome. ;)

But for me, JavaScript's shortcomings are far worse than CoffeeScript's.
If you're an experienced programmer, LPTHW is not for you. That much should be evident from the very first sentence: "This simple book is meant to get you started in programming."
There's a reason why most of those valid email addresses are not allowed by most email providers. As an example, in the 1997-early 2000's, underscores were very popular amongst the internet users and most of them had an underscore in their E-mail addresses. Whilest applying for a job, they would fill out a form in the employer's website/some form application software where the data is then later tabulated.

Once tabulated, the entire email address would be underlined by many popular softwares back then, since it's (was) essentially considered as a link. Then, while the recruiters were trying to copy and paste these prospective e-mail ID's in their respective email clients, the underscore would be missed out and would have just a space instead (which the recruiters have no idea as to why) and thus the recipients would miss out from receiving these emails. Hence, many email providers wouldn't allow one to register an underscore (or any complex character) after receiving many such reports, just to avoid these hassles.
In addition to the points that solutionyogi raises, I don't think that is a very good comparison when you consider the differences in commercial and private RDBMS', and the differences between commercial centralized VCS and open source DVCS.

DVCS (either mercurial or git) seems to be a much more exotic concept for people unfamiliar with DVCS than MySQL/PostgreSQL is to those only familiar with, say, Oracle RDBMS.

I'm not a DBA though, so maybe I am wildly wrong with that thought.

(Also this comparison maps back to the topic incorrectly, in that I obviously greatly prefer PostgreSQL in the comparison, but I greatly prefer git in the other scenario).
Barkley, Shut Up and Jam: Gaiden Sequel on KCKSTR
Show HN: HTML5 API for multivariate testing
Photosensitive Seizure Warning!

Wiggling your mouse at http://www.staggeringbeauty.com/ (one of the possible sites) will trigger it.
You say "mature", I say "reached the limits of efficient flight in 1963" (http://www.empiricalzeal.com/2012/10/12/can-we-build-a-more-...). We're nowhere near what we can do with computing, but we are with airplanes.

Safe, cheaper and boring may be an artifact of the physics of flight in Earth's atmosphere, combined with an intertwined US defense and aerospace industry. Why should we let corporate and government interests "unring" the general computing bell? Why should we let corporate and government interests stuff the genie of democratic publishing back in the lamp?

General purpose computing hardware got super cheap by way of the mass market, and mass production. General purpose programming got cheap and universally available by way of mass communication. In 1983 a C compiler on VMS cost some thousands of dollars. Today, GCC and Clang and Pcc are free, and they do optimizations that Tartan Labs could only dream about.

That's a hugely different path than the carefully-cultivated air travel industry took. I think you're underestimating the effects of the FAA and the DoD on how air travel looks today.
Well, first, it's not my argument; it's both the conventional argument for the bundled pay TV model, and HBO's explicit argument for why they won't sell you an online-only subscription to HBO Go.

Secondly, the issue isn't that HBO is contractually unable to offer direct HBO Go subscriptions or release-window a la carte access to Game Of Thrones episodes. The issue is that it would be financially irrational of them to do so, because their subscribers would defect to the online offering; they would, in effect, be offering a fire-sale on their most valuable offering.

I don't know how much a single episode of Game Of Thrones would cost if you factored all this into it. It obviously wouldn't cost $2.99. I'd tentatively suggest that it would cost so much that people would pirate it and rationalize doing so by saying "HBO can't reasonably expect people to pay so much for a single online episode of Game Of Thrones; if they just used more reasonable prices, people would stop pirating".
I'm not from the US, but I believe it's partly about risk. Hiring overseas might be a not so costly option but the risks involved might make it not worth it.
There is a myriad of things that could go wrong shuch as the hiree might fell more unconfortable than excpected living in a foreing country and his profile might be different than what you were led to believe by a non-presential long distance hiring process.Reducing this possibilities incurs in costs that probably far outpaces the high cost of hiring internaly.
> Edit: I wanted to add I think you might be making a mistake backing down at this point. It seems that all of the problems you mention in this post relate to some small (yet vocal) percentage of your existing users being upset with the recent changes. That's a temporary problem, and probably not that big of a deal at this point since you've already absorbed the majority of the backlash you're going to get. If you think the changes you made in your latest version are the right direction for your product in the long run, then I'd stay the course.

I completely disagree with this. It might work as a business decision but it could cause problems in the future, especially if these early paying customers are vocal or previously bought your other apps. I think if a more popular/downloaded app did this (thrusting ads on paying customers) the backlash would be huge and it would severely damage the companies reputation. Just because you are a smaller business less likely to get press coverage for a bad decision doesn't give you a free pass to make it anyway.
If they'd admit that Trident wasn't a great engine and swapped it with something else (Webkit), maybe.
Congrats! We have a few of them here in the Communitech Hub in Kitchener/Waterloo. Our CEO swears by them :)
No, standing close is not qualifying for sex offender. It's the "problematic" bit that makes him a sex offender. The fact that you suggest otherwise is rather disingenous.

And given that he pleaded guilty what else of his story do you need to hear?

Can we please stop making excuses for sexual assault?
The quickest way to get an answer regarding varnish issues is to ask on the irc channel.

irc://irc.linpro.no/#varnish
Oh! Sorry, I stand corrected. BOOO, BUFFERBOX. BURN IN HELL!!
Or imagine how useful wind turbines would've been during a hurricane. Turn the problem on its head. Use the enormous destructive energy of a hurricane to increase the energy production during that time, instead of a blackout.
Yes, DHL already did this. But, its market is huge and it will grow. Even, I would say still there is space for new arrivals in this field.
Absolutely - I think that would be pretty awesome.

I have to admit tho: I toyed with ironically denying it :P
The suggestion is to tell people "you are safe if there is a green padlock in the address bar", and only display the padlock if the certificate is signed by a trusted authority.
Your license to the content, when you buy it, is tied to the medium you bought it on. You can buy the Blu-ray, watch the Blu-ray, but that doesn't give you a license to watch a downloaded copy.
The Super charger stations are not solar powered, right? They have solar panels that feed back into the grid in an attempt to make then power neutral.
Sorry MoMA, video games are not art
Where were these services during the Cold War era? I could imagine endless movie scripts of sending secret packages of stolen material prototypes etc. via these services. I guess drug lords and assassins might still be able to use them :)
Game developers Wanted (Must already have a game with high scores)
Gamerholic.com is a competitive gamification platform. Gamers play each other for money in heads up games and tournaments for money. We are expanding to mobile and browser games with a competitive high score API. Gamers make money for setting the high score, game developers get paid each time your game is played (no ads)

A gaming accelerator really likes the API, they want to see it in action. I'm looking for game developers to plug in it.

@gamerholic @unfundedhype 415-867-5336 is you have any questions.
Always be closing.
Wait, we vote for it? There isn't a single political party whose digital agenda I agree with, how am I supposed to vote better without going into politics and starting a political party myself?
The Verge's Video Review of Microsoft Surface
Again, apart from the fact that the absence of a green padlock is an insufficient alarm for "your site is being hijacked by a MITM attacker", a session with a web application consists of many hundreds of individual connections.
It makes sense for Amazon since they make money on all the packages. I would guess that purchases made through Google would likely be free at BufferBox.
How Can Gaming Piracy be Reduced
Congratulations to the whole bufferbox team. Waterloo ftw.
This is the future...direct from creator to consumer
I'm not rationalizing.

The media companies, at one time, had some of my money. They don't now.

I'm a dirty pirate who takes what isn't bolted down, and unbolts for others.

P.S. Adblock and noscript take away adverts. I do that too, so I'm also evil in ad revenue streams.
I was trying to describe how it looked from an academic standpoint. Direct threading and register bytecode was well known (register stuff is actually very old, but the jury was out until about 2003), but everything else Pall did was basically new to programming language researchers and implementers.
Google Acquires BufferBox
Maybe, but the we'd need incredibly better tools than what we have today. Git was a vastly better tool, which enabled us to reshape the culture around how we managed code. Test-driven development is a culture that lacks git-level tools.
Why I love Twitter and barely tolerate Facebook
I don't understand why you keep saying "attack site". The problem the self-signed cert warning addresses isn't malicious sites; it's attackers who intercept TLS connections to online banks and swap out the Verisign certificate with a self-signed certificate.

The warning isn't about the site; it's about the connection.
telnet is useful for somethings, but it does have it's limits. Often I'll compose my message and then paste it in (If I want to do something specific or have a header dump from chrome or something and don't want to convert it to a curl command).

openssl s_client is useful for debugging SSL issues. It gives you just about all the info you could want about the certs and then gives you an open pipe to the server that I treat like telnet above.

(Not really trying to argue. As things grow up more tools will support them and engineers like me will learn to adapt and debug them as they do the current generation of protocols.)
I guess somebody has to take the polar opposite position to Atlas Shrugged, to bring balance to the derp.
Yeah, I followed the wiki, but I still ended up having to google around and keep a few browser windows open just to list the keyboard shortcuts.

And unfortunately, Therapist isn't available for mac, and I'm not willing to install a VM just to play it :/
Microsoft antivirus software fails security test
Gamerholic.com is a competitive gamification platform. Gamers play each other for money in heads up games and tournaments for money. We are expanding to mobile and browser games with a competitive high score API. Gamers make money for setting the high score, game developers get paid each time your game is played (no ads)

A gaming accelerator really likes the API, they want to see it in action. I'm looking for game developers to plug in it.

@gamerholic @unfundedhype 415-867-5336 is you have any questions.
Congestion control, crypto, FEC... looks pretty advanced. Are there any references to it from elsewhere in Chromium?
That'll show those evil media companies for funding the kinds of content that dirty pirates want to watch. You show 'em!
Real Estate Deal That Could Change the Future of Everything
What do you like about bazaar in contrast to mercurial or git?
^This ... is exactly what I'm thinking.

But I have no access to such an industry like hardware production. Software is cheap, hardware is not :(

As for URIs - this is where they fit in well, remember that // stands for domain root, so instead of /net/google.com it's ok to use //google.com. Schema on the other hand is a hint for a port to use, so http://google.com/ is the same as //google.com:80 + it can be used for URI driver negotiation. Simply go with fopen("ftp://domain.com/file.txt") and kernel uses FTP driver, go with fopen("imap://me:pass@domain.com/inbox/") you'll receive your inbox folder on a mailserver, etc. Avoiding schema would fall back to file://, avoiding domain falls back to localhost, so /documents/hello.txt is really file://localhost/documents/hello.txt and localhost is managed with a VFS where you can create even funnier stuff, like linking other types of URLs to your file system. For examlpe, file://localhost/some_site.html -> http://www.google.com/ or file://localhost/documents/work/ -> ftp://me:pass@work.tld/home/

Basically, that is my idea of what I'd love to do + yes, complete hardware overhaul, but that's not for me (at least not for now) as I'm living in banana republic and we don't have 6 layer PCB printing/soldering facilities here :D
FWIW, they were charging $3/package for their initial launch at UWaterloo, and people were actually paying for it. You're right - probably not enough people for it to be feasible, but yeah, even some of us ('poor' students) were paying for it.
I had not heard about this as a kid growing up but it would have definitely made me buy the cereal. In fact I'm off to see if I can find the game now somewhere.