skysight-inc/HackerNews huggingface dataset:
I'm curious what the performance is like in Chrome or Safari (which do not have asm.js support.)

If performance is acceptable in Chrome/Safari then that helps sell the idea that the web is ready for 3D games now.

If the performance isn't acceptable then that helps to make the case for asm.js.
How did the men allow this to escalate? What did they do other than joke privately between each other?

Maybe you mean them posing for shot she took without asking permission?
Is that it?

This was all In Adrians head, the woman is disturbed and lacks some serious self awareness.
There isn't much incentive save for the fact that it is easier to configure. For some versions of DNS servers you need to consciously disable recursive lookups and then configure the list of servers that are accepted.

If a DNS server doesn't perform lookups for any outside server it isnt very useful.

If you think about a web host, with X number of servers that host websites, these are considered the Master DNS servers when the physical domains being hosted reside on those servers.

The public listed DNS servers on your domain WHOIS records are actually the Secondary DNS servers, and these perform the DNS lookups when someone accesses the hosted website on your Master server.

If the Secondary server accepts requests from anyone, even domains it isn't explicitly responsible for, then it is performing recursive lookups.

A more secure configuration is for the Secondary servers to only accept lookups for its own Master servers.
This is why having a way of getting people who deserve it but cannot afford it is a very good thing for conferences. I hope more conferences adopt it as a policy.
"Not a single line of apology to a man's career she ruined, his family's welfare"

Agree. But would like to point out that most likely the developer I will assume admitted to readily (and honestly) what he had actually said.[1] He may not have thought it was so bad -or- he simply underestimated the reaction of his employer. Hard to believe that if he had hemmned and hawed a bit and put off saying anything (giving himself a chance to think it through) that the employer would have fired him a) based on what a friend or third party reported or b) based on what Adria Richards did.

[1] Remind me of the scene in "Fast Times at Ridgemont High" where Judge Reinhold (the fast food clerk in the particular scene) admitted being surly with a customer and was fired by the manager on the spot.
asm.js paying dividends already, performance is always useful. But the larger problem is cross platform gaming, so hopefully webkit and others get something like this. The problem is Chrome has NaCl, Microsoft has their designs I am sure, we still need WebGL support which I am sure isn't coming.

For now Unity, Flash and general html5/canvas is still a better cross platform solution. If this leads to browser mobile games though that are native speeds, then we have something.
Beer Selection
It must be nice to have finances.
International law is a thing now, but it won't be respected until there are teeth behind it. And there won't be teeth behind it until there is actually a functioning world government with military and police power. Most currently powerful countries are too self-interested and enjoy their freedom and autonomy too much to actually want such a thing to exist. The UN is an attempt at it, but it is not powerful enough because the powerful member states undermine its authority by vetoing everything that goes against their individual interests. So it gets used as a mere tool for powerful countries to police weak countries' internal and neighborly disputes.
sigh maybe you should read it? what qualifies for suspicious activity pretty lose. Any transfer of more than $10,000 is reported as suspicious.

You should also considering comparing that with other 'privileges' certain government agencies have and their record of abusing those privileges.

Or you can be intentionally obtuse about it.
Well, you could substitute that for

if(Int.CanParse(s))
{
i = Int.Parse(s);
// OK things.
}
else
{
// Not ok.
}

but it also be weird in Java because Parse throws and exception, so you'd have to either write an empty catch block or declare the method with a throw clause, event though it actually doesn't throw anything.
Thanks, I actually went and tried myself as well and saw the same. So quite good though not yet fully "symmetric".

>> z=size(a)
(3,)

>> z[2]
BoundsError()
12-year-old girl sentenced to 1-year Facebook ban
Slack in the System
It's extremely unlikely that spoofed headers or the lack of an SPF record would get you listed on an RBL, especially Spamhaus. I can't guess what happened in your case, but somehow your IP address obtained a bad reputation or was unlucky enough to be in a tainted block. FWIW, the very first thing I do after getting an IP allocation is run an RBL check on it and demand a replacement if it's listed anywhere.
>It's snake oil.

As opposed to a miracle elixir that cures all ills?

It's a tool.

Like most tools, it's best used when you thoroughly understand the challenge and how/why to apply that tool to it.

The problems you've noted here seem more indicative of poor planning and understanding of the solution than any intrinsic deficiency of virtualization.
Is backbone the best Javascript framework to go with these days? I'm keen to switch to this style of web development but I'm waiting for the community to pick a winner.
if you can't do, sue. Seriously how has she been representing developers? i'm a developer and i'd rather be represented by someone else
Edit: Saddam Hussein is Not better
I could be easily pm'ed via the forum. That would be a professional way to call me.

I neglected to mention that the phone call came late in the evening, and on a weekend I think.
Announcing here.stamen.com
Ask HN: How good is your handwriting?
Writing with pen might be obsolete these days, but I have never been able to get a consistent style with my handwriting. Are you happy with your handwriting? How can one improve his handwriting?
Author of TFA is talking about the ideal world, not the actual world IMO. Good comments at cryptome.

At 06:09 AM 3/18/2013, Eugen Leitl wrote on Cypherpunks:

http://edition.cnn.com/2013/03/16/opinion/schneier-internet-...

The Internet is a surveillance state

By Bruce Schneier, Special to CNN

March 16, 2013 -- Updated 1804 GMT (0204 HKT)

STORY HIGHLIGHTS

Bruce Schneier: Whether we like it or not, we're being tracked all the time on the Internet

Schneier: Our surveillance state is efficient beyond the wildest dreams of George Orwell

He says governments and corporations are working together to keep things that way

http://cryptome.org/2013/03/net-spy-state.htm

"Where does snake oil end and "something better" begin? Is something better ever not snake oil? Is a public discussion of an issue never not rigged in favor of the organizers? Is tumultous public discussion never not preamble to a coup justified as needed to control the mob who has gotten out of hand, who voted the wrong way, who attacked the leaders? Who hacked the experts?" --JYA
Mushroom Networks and T-Mobile USA Distributor One Shop Wireless Partner
8 Ways to promote your online courses
"And this reduces the protections international law has for his house and the civilians within ( his family)."

I don't know what protections you are talking about, but I doubt the pilots would be piloting anything from their homes. They only go there on leave, just like all other soldiers. As for hackers, if a state sponsored attack is launched from a civilian home, it is a violation of the rules of war. The hackers should be in a military installation when doing anything (they probably would anyway, just for security, easier cooperation etc.). There has always been soldiers who fight wars without going to the battlefield.
The outpouring of misogynist hatred may or may not have been triggered by internet trolls, but the tech community has demonstrated a decided imbalance in its allocation of outrage:

http://i.imgur.com/9Jg2brL.png
Free Navigation Bar Designs To Use In Your iPhone App
Diversity Seems Dismal
There's basic language bigotry going on here: an aged internet meme declares that C++ operator overloading is bad because you can indeed, in theory, do idiotic counter-intuitive things with it. Yet the identical capability in Ruby, Scala and Haskell (inter alia) is deemed A Good Thing by the consensus.
Apple doesn't sell MacOS to be installed on computers not bought from them (in fact they deliberately make it hard for people to do that) so I don't see how this issue would affect them.
They set up a caching server for their organization so the DNS lookups are faster, but they forget to restrict the recursive queries only to their organization so anyone else can use them.

That makes them work like Smurf ampliefiers (http://en.wikipedia.org/wiki/Smurf_attack) in the past.
Then they should say that. Reading their website tells me their are doing that bullshit thing were they divorce the tech from the marketing completely.

> OpenStack is a cloud operating system that controls large pools of compute, storage, and networking resources throughout a datacenter, all managed through a dashboard that gives administrators control while empowering their users to provision resources through a web interface.

Should it (??) really say :

> Openstack is a ton of scripts and tools and things which pull lots of various bits of software together and allow you to have redeployable virtual machines all over the place
The rise of the small and narrow vehicle
> and the appropriate thing to do is turn around and ask them politely to keep it down

there's been a rebuttal to this concept in the form of the #iaskedpolitely tag on twitter. Not everyone is comfortable with direct confrontation in situations like these.
> I think it's brave and noble for her to make (what seems to me) to be an attempt at civil dialogue.

> In effect she's saying: I want to keep talking about this,

To me, it looks like a statement prepared by a legal team.
asm.js is just a subset of JavaScript, so it works in all browsers already, unlike those "alternatives" you mentioned.
Creatine zorgt voor extra spiermassa en een betere gezondheid
Experiments in GitHub-Based Procurement
That is a remarkably level-headed statement considering all that's gone on. I can already see the rage brigade firing up the oven, but maybe some good discussion can happen here.
> "No, no programmer would do something this." He was not sarcastic. I wanted to switch back into Molecular and Cellular Biology right then. But then he added, "No one would end up with code like this because they simply would not have had the patience."

My brother and I learned to program in BASIC on an Apple IIe when we were kids. At the time, we were also into making little movies with our family's VHS camcorder. You could draw graphics in BASIC, so we thought it would be radical to write a program that would draw a cool logo animation for our movies.

We got a big sheet of graph paper and hand-drew the intended pixel art for our logo. Then started writing code to draw it one line at a time. We put a delay between each line so that it would do an animated wipe. We knew how to pause by doing a busy loop:

10 FOR I = 1 to 100
20 NEXT I

What we didn't know was how to define reusable procedures (GOSUB). So between each of the hundred lines of pixel art, I typed in that loop. And I mean that literally: this was a line editor. No copy and paste. I wrote it out each time.

Now I just lament having the much free time and focus to be able to do that...
How other languages say "um," "like," and "ya know"
For those who have not yet tried it, I would highly recommend TIm Branyen's Backbone.LayoutManager [1]. It solves items 1 and 2 very well.

[1] https://github.com/tbranyen/backbone.layoutmanager
I've never exposed a Postgres or MySQL database directly to the internet, either. They're always listening to localhost connections only, and the only code that gets to make direct calls into them is my code, which means input sanitization prevents attacks like this.

The same goes for my use of MongoDB.

Though I am curious if anything similar exists for CouchDB, as they seem to be encouraging dangerous configurations like that.
Laziness has nothing to do with it. The US is stuck with an intractable electoral system that all but guarantees two political parties which devour the votes of everyone else. This phenomenon is known as Duverger's law.
Your comment rested on the false predicate that the nation will inevitably be dismantled. You're entitled to hold the opinion that it will, and I feel equally entitled to point out that you are simply begging the question.
Creepy or driven? Either way it's probably better than that email correspondence between a Gizmodo writer and that Nick D'Aloisio kid.
Agreed. There's a picture of him, and it says it's of him at demo day, but the article doesn't mention anything about Y Combinator. Very confusing.
PhoneLocator App responds to 'Bad Comments'
I imagine your mileage may vary depending on the functions and operations that you are performing. I did a simple test of python vs R and python was the overwhelmingly faster. I believe both languages are primarily written in C, and as such, the speed of your program will depend on the 'efficiency' of the underlying code for the functions you are using.
Enough with The Blue Icons
I wonder what the political implications of this type of "collateral damage" might be.

Governments have recognized the need to defend against direct attacks on their networks and develop their own offensive attack capabilities from a national security perspective but I haven't seen the same level or response to these sorts of events.

When the damage spills over to impacting services that tens of millions of people rely on and cause economic damage, should we treat this as the same as an attack on our critical infrastructure (electricity, water, etc.) like an act of terrorism? If that becomes the case, would it warrant the use of deadly force against the attackers?
Lessons on becoming a lean service company
> esL4

It's seL4 (secure embedded L4). I'm just pointing it out in case someone else is interested in "miceokernels that are formally verified", like a friend of mine who is obsessed with seL4. If you google "esL4" you'll get completely different results so I though I'd point that out :)
Very interesting analysis. The central legal principle that we are talking about here is under the UN Charter which of course all members of the UN agree to abide by.

Article 2(4) provides that all members will refrain from the use of force against the territorial integrity of any state.

I think the question narrowly put is whether the cyber attack is equivalent to a physical attack. In this case, I think you could argue that the Stuxnet worm, at least to my knowledge, had an effect broadly equivalent to a physical attack, say by planes akin to the previous Israeli sortie against Iraq's reactor.

Anticipatory self-defence is a developing topic but I don't think in this case, and borrowing from general self-defence principles, I don't think the threat was imminent enough, particularly in light of Iranian hyperbole.

Of course, the reality of what would actually happen in the case of a breach would still be subject to the desires of individual countries, particularly on the UN Security Council, but for me it is still interesting to assess whether a cyber-attack would constitute a breach of Art 2(4).
Its a fair point that 'law' isn't what folks necessarily think it is. The role of law changes as we move from municipality to city to county to state to nation and to the world at large. But by and large the law seeks to be an expression of the principles under which we agree to be governed, rules if you will, that codify acceptable and unacceptable behavior or action.

The world is having a conversation with itself. It does so constantly as it seeks to understand what is expected of it. The discussion of computerized warfare or criminal activity is one that has lots of variants. From Aaron Schwartz to DMCA to Stuxnet to peering agreements and spam.

To have that discussion we have to decide on what we can agree on, and what we can't. And when I read this paper I felt starting from the perspective doing a person or property physical harm, was a good step at differentiating between computer acts. We've had an ongoing discussion about economic damage (piracy being the common one), and not a lot about "harmless" hacks.

Having a common understanding about these things are going to be instrumental in writing credible laws about what constitutes a computer crime and what doesn't.

All of that takes thought. And this team has thrown their thoughts out there for consideration. Discussing them is the next step to figure out where we agree and where we disagree.
3D Rendered Bumblebee in 1K of JS
Come on, it wasn't that bad. If anything, the writing was heartfelt. I rather liked it.

I'm not defending Forbes though. Like, eww.
> If the sample is non-random then the conclusions are unreliable, regardless of the population size

That's not true. You may still get meaningful data, but it's less meaningful (i.e. the required interval to achieve a given level of confidence becomes wider, perhaps significantly so).

But either way, I mentioned "non-random" to pile onto the ridiculously low sample size. Even a random sample of such a small size would have given a low-confidence result.

> Because it seems obvious that if you want to measure the salinity of the ocean, you can scoop up a cup of water from it and analyse that. You don't have to use a different size cup for different size oceans, or even know how big your ocean is.

You're expressing a "population" parameter that doesn't actually exist. There's no such thing as "salinity of the ocean"; it changes depending on where (and what depth!) you are at. Sampling the salinity of the water in the cup tells you, at best, about the water where you're at.

Now you could probably talk about things like "mean salinity of the oceans", but to determine good bounds for that you would have to sample. And to figure out how much you must sample, you do indeed have to have an idea of the total population size, even if it's just to determine that the population size is so much larger than the sample size that you can ignore the population size and simply use the standard error formula.

If the population size is not much greater than the sample size then there is an adjustment you should make (the finite population correction).
No, not everything one does for a job is fulfilling or worth being proud of, just because someone asked for it. Often it is something useless, maybe not even what they really wanted, sometimes even annoying or harmful. Lots of us work on things which are basically useless that will go away soon. At the end of life, perhaps all you really accomplished was to stay alive in a certain sort of lifestyle.

Making it technically good is a way of making it interesting and something to be proud of. You could also make something that is yours. You could also make something that is really actually important. Without any of those outlets people will just hate their jobs and only live for their time off.
If you can, can you point out the legal reasons?
But I don't think the "masses" have noticed or that it has become a social/political issue of nearly the magnitude that it's importance would suggest.

In fact, many who are aware of the changes even defend them as being necessary. They still don't notice the overall direction or net effect.

Some of the comments on this thread alone speak to that.
Yes, but if you're going to make a twitter app that just points to twitter's web app and then it doesn't behave in a sane way, you can't expect twitter to write code fixing those issues.
While it's great to have that as an extra layer against attacks, as with all security by obscurity, the problem is when you rely on that detail to act as your security. If that hash is computed from the user's data, in 5 years time when they need to expose new data to some new platform, they may mistakenly choose to use that hash. Now every attacker has access to that hash - and your security that relied on keeping the hash secret is now wide open. There are many other possibilities of losing secrecy of a public url hash like this also.

The advice is still bad. Rather make your URL as open as possible and actually secure it for an attacker who happens to know it. If a user gets hacked and your response is 'well, nobody should have known the users ID!' then you're going to be looking pretty dumb.
Being Google
When I think about R I find it difficult to stop making analogies between it and JavaScript. Both are dynamic, "script" languages with C-based syntax and with LISP-like nature that lurks underneath it. Both have functions as first class citizens. Both are inconsistent in different ways. Just to name a few that first come to my mind ... I think that these analogies reduced frustration that I had felt about R once when I "discovered" them and helped me to adopt and learn R.
Does this mean that proper egress filtering would solve this? Because that seems like a more feasible solution. Having a bunch of large ISPs and datacenter operators block outgoing packets with sources outside their own IP ranges sounds much easier than having many more home users reconfigure their routers.
Haven't had time to read the whole article yet, but these two paragraphs from the conclusion (p. 24-25) are excellent:

"In our hypothetico-deductive view of data analysis, we build a statistical model out of available parts and drive it as far as it can take us, and then a little farther. When the model breaks down, we dissect it and ﬁgure out what went wrong. For Bayesian models, the most useful way of ﬁguring out how the model breaks down is through posterior predictive checks, creating simulations of the data and comparing them to the actual data. The comparison can often be done visually; see Gelman et al. (2004, Chapter 6) for a range of examples. Once we have an idea about where the problem lies, we can tinker with the model, or perhaps try a radically new design. Either way, we are using deductive reasoning as a tool to get the most out of a model, and we test the model – it is falsifiable, and when it is consequentially falsified, we alter or abandon it. None of this
is especially subjective, or at least no more so than any other kind of scientific inquiry, which likewise requires choices as to the problem to study, the data to use, the models to employ, etc. – but these choices are by no means arbitrary whims, uncontrolled by objective conditions.

"Conversely, a problem with the inductive philosophy of Bayesian statistics – in which science ‘learns’ by updating the probabilities that various competing models are true – is that it assumes that the true model (or, at least, the models among which we will choose
or over which we will average) is one of the possibilities being considered. This does not fit our own experiences of learning by finding that a model does not fit and needing to expand beyond the existing class of models to ﬁx the problem."

And section 4, which discusses issues that arise in Bayesian statistics when working with multiple candidate models, is interesting and agrees with my limited experience, especially 4.3: "Why not just compare the posterior probabilities of different models?"

ps (to the submitter), it might be helpful when submitting a 30 page paper to mention what part of the paper you'd like to discuss. It makes it easier to get started.