skysight-inc/HackerNews huggingface dataset:
Shader validation in ANGLE and black-listed drivers are how this is protected against in Chrome and Firefox. Microsoft was never really clear what the security issues were- really felt like a bunch of FUD.
IE has a lot of market share with IE7, IE8 and possibly IE9. They don't have a lot of marketshare with IE11 - and possibly never will.

So the argument that "WebGL is not supported by IE so I'll never use it" was pretty bogus anyway, since the people using those versions of IE were probably never in your target market anyway.
Your comment is spot on about the types of businesses that VCs are funding - the ones with "explosive" growth potential (with the expectation that it happens quite soon).

I do disagree that startup has to be growth centered. By virtue of software for which the distribution costs are practically 0; most software companies have potential for a significant growth (unless they are targeting a very narrow audience). It seems that the growth would come naturally once you have a product of high quality (with sufficient exposure/marketing). Hence shouldn't the primary focus of startups be on producing a product of high quality?
Germany blasts Britain over GCHQ's secret cable trawl
It's a shame iCloud backups aren't encrypted, but the only information that seems newsworthy is the fact that it takes so little to reset an AppleID password. Although I suppose if the intruder knows the AppleID and last-four of my CC, then they probably know my name and birthday as well. :/

The rest of it though... iMessage is not perfect, but it's better than most alternatives.

* Plaintext logs of iMessages (iOS or OS X) allow you to view past messages. Duh. So do plaintext logs of OTR chats via Adium or Pidgin.

* You don't generate your own key nor verify the keys of others; you rely on a third party to do it. The effect is that the system is actually used by normals unlike, sadly, GPG or OTR. Heck, even many of the technical people I know give up on GPG and OTR because they're just too much work. The point is the messages are encrypted in transit and cannot be read by just anyone ... in contrast to SMS and typical instant messaging.
Makes sense; thanks.
Adding /devel to a location that already has /dev seems like an annoyance to the tab-completers among us.
Uh, if this gentleman has the freedom to print such t-shirts, then I see no reason why others cannot also exercise similarly protected freedoms by complaining.

As for the rest, to paraphrase an Australian fellow, the standard you walk past is the standard you accept. "Just ignore it" at a minimum enables, if it's not tacit approval.
Yes. The certificate contains a signature of your public key (and other data), which is derived from your private key.
FWIW, I agree, I would love to see an expert talk about real tradeoffs, both abstractly and in regards to clojure. I'm just kinda piecing it together from what I think Rich was thinking, what I've picked up from JoC, blogs, talks, and experience.
Immutability means that if you're "modifying" the structure you must actually be "making a new copy with a small change". Structural sharing means that usually only the small change itself gets new allocation, but it's still more pointer-chasing than a continuous memory map.

Lots of algorithms don't work with this kind of copying semantics, but you have all of Purely Functional Data Structures [1] to help.

[1] http://www.amazon.com/Purely-Functional-Structures-Chris-Oka...
Lazarus 1.0.10 release available for download
Just prefix the space with a backslash. Eg: ``$ ls /foo/bar/my\ directory/``. With that backslash in place, you can continue your tab-completion.
Based on the ones I've seen in other contexts, the key is to be able to aggregate. If you do, you can often find really interesting stuff from unclassified contracts around the periphery, then presumably FOIA more, but knowing how the system works helps a lot.
I put up an explanation of the difference between /bin, /usr/bin, /usr/local/bin, and ~/bin, as part of an argument why the "robustness" of using #!/usr/bin/env $binname vs. hardcoding #!/path/to/binname is not a good thing:

> The reason that depending on PATH is not considered good practice is that the script can make no assumptions about the content of the PATH environment variable, breaking the "sequential dependency model" of binaries where

1. /bin contains the executables needed at boot time;

2. /usr/bin contains the other executables used by the OS installation;

3. /usr/local/bin contains executables installed by the system administrator that are not part of the base OS.

4. ~/bin contains the user's own executables.

> Each level should not assume the existence of binaries later in the sequence, which are more "application" but may rely on binaries earlier, which are more "fundament". And the PATH variable tends to run from applicationy to fundamental, which is the opposite direction to the natural dependency above.

> To illustrate the problem, ask yourself what happens if a script in ~/bin invokes an script in /usr/local/bin that invokes Ruby? Should that script depend on the OS installed version at /usr/bin/ruby, or on the personal copy the user happens to have at ~/bin/ruby? PATH searching gives the unpredictable semantics associated with the latter (maybe ~/bin/ruby is a broken symbolic link), while baking in the path to #! gives the former.

On the Unix&Linux SX - http://unix.stackexchange.com/a/11917/5197
Network Speed Test for Windows Phone 8
Works well on Ubuntu 12.04 with std Firefox 21.0 for me.
state secrets steganographically embedded into porn videos. Poor NSA analysts forced to sit through hours of it trying to discover the hidden message.
Unless it's a one time pad with good RNG. In that case it is indeed a good idea to assume your cryptography is perfect and always will be.
Show HN: BugClipper - a plug & play library for iOS apps.
Testing apps require lot of screenshots and screencasts to report bugs.
We've built BugClipper - an iOS library that fits inside the app and provides the tools required to grab screenshots, annotate them and record screen videos from inside the app.

Seeking comments from app developers & testers
Accelerators speed up the ability to play the startup game.
So? Is that a problem?
Long path names are an annoyance everywhere, from the commandline to the file browser. Use long names where appropriate ('aunt sally photos 2011' is better than 'asp11'), but for the dozen things in the root directory, there's not much effort involved.
LightTable has some pretty interesting features in this direction: http://www.chris-granger.com/2013/04/28/light-table-040/
>I doubt Google really wants to get into the offline payment market.

NFC payments? Google Wallet?
> but massively hurts him both in the court of public opinion

How? Oh, look he isn't an idiot and he knew the CIA would try to assassinate him to silence him.
You're right. Last time I checked, IE8 was still the most popular IE version. However, since IE9, it's being updated automatically, so I have some hopes that most IE users will end up using the latest version, just as with Chrome and Firefox.

The main reason for IE8's popularity is probably that it's the last IE version available on Windows XP, which is still popular. I really hope Microsoft gives up on the idea that new browser versions can only come with new OS versions.

But still, even if only 10% of all IE users use IE11, that percentage can only grow. Previously, IE was a dead end for WebGL. Now there's a perspective, and that's probably good enough.
Is there another tweet that explains this tweet?
It has feel of google-reader and has this Paper-service inclusion which seems to be a good thing to try out :) posted a screenshot on https://plus.google.com/116652754764170659317/posts/RexLipFr...
If SO decides that SO isn't the place for opinions, then they're right. It's their site. I don't see why this is such a difficult concept.
No, its more like this. You download a series of truncated hashes; you generate a bunch of permutations of your URL (strip the query params, strip components of the path/domain), you hash those, check them against your local list. If you get any matches, you request an expanded list from Google, giving them the truncated hashes that matched. This gives you a cacheable list of full hashes; you check your matched hashes against those full hashes, and if any match, then its a match.

tl;dr No, its not that easy.
Yes, by hiring a legion of professional photographers and offering their services for free. That's a hard model to sustain/emulate
We don't really know if they're brute forcing (which I can do) or if they have some secret backdoor. There are good arguments either way.
> But do you think the slightly harder task of running MITM attacks (as opposed to simply siphoning off a copy of the data as it passes) would thwart an entity like the NSA?

MITM attacks have the disadvantage that they can be noticed by communicating the session key through a second, more secure, channel, for example one using a client certificate.
Seems like the kind of thing that you could test empirically.
This one?

http://blog.xen.org/index.php/2012/06/13/the-intel-sysret-pr...

http://www.vupen.com/blog/20120904.Advanced_Exploitation_of_...

Exploits are developed to break VMs, just like everything else, and are promptly patched once revealed. Apart from general intrusion detection tools, I think you would be hard pressed to find anything to guard against them.

Maybe run a VM inside another VM ;)
> Just want to reply to say I also would like to hear an answer to this question.

The question is that they do what a business is required to do: let the market decide. Shockingly, the market does not want actual security; it wants lip service to make people feel safe and it wants shiny features.
the API , called XAPI, that the management application uses, has always been public and open source, as far as I know. It is based on OCaml, IIRC.
> right, because ABS does not work by pulsating the pads off and back on

So ABS can fully cut off brake pressure? My understanding is that it relieves extra pressure and that regardless of the valve position, either full force of the pedal (including locking the brakes) or reduced relieved pressure is still sufficient to stop a vehicle.

> What I would do if it was a spy movie

All posible. My comment was really just a response to Richard Clarke's comment that it could have been an "untraceable" "car cyberattack."
Headset sends electric currents into the brain to improve focus
Agree! We forget that to live broadly is human. Arguments linked exclusively to success are not thoughtful enough -- and neither are they actually accurate about enabling success. The specialization model came about from industrialization. Nowadays, "specialists" in third-world countries struggle to make do, while people with breadth and creativity design the products of the future. Let us not forget that cashiers, too, are specialists. Does it follow that they are living their potential to the fullest? Clearly no. And only with breadth, does one even begin to have a sense of what is good for oneself and society at large. Of course, that does not excuse one from the need to pursue excellence as well. But there are synergies with breadth.
Sounds good, will shoot a message.
I feel like this sentiment has been bubbling under the surface of my thought process every time I open up my editor. I've never taken the time to scrutinize that feeling though, too busy stressing over the details of whatever I'm making.

Perhaps only tangentially related, but our workflows are significantly related to the technologies we use, right? Ian Hickson in an interview [0]

"The Web technology stack is a complete mess. The problem is: what would you replace it with?"

[0]http://html5doctor.com/interview-with-ian-hickson-html-edito...
A small nitpick: the article lists the "IE Developer Toolbar" for IE6 first, and suggests that everybody else's development tools followed that model. In fact, the earliest reference I can find to the IE Developer Toolbar suggests[1] that it was released in early 2007, while the Firebug version history[2] shows Firebug v0.2 released in January 2006, so it's about a year older than IE's developer tools.

Even if Firebug itself is no longer head-and-shoulders better than other tools, the fact that the basic model was copied and polished by Microsoft, Apple, Opera and later Mozilla themselves shows that Joe Hewitt had a pretty great idea back in early 2006.

[1]: http://blogs.msdn.com/b/ie/archive/2007/01/09/ie-developer-t...

[2]: https://addons.mozilla.org/en-US/firefox/addon/firebug/versi...
/usr/games has been around since Unix v7, released in 1979. Before there were package managers, putting optional features in a designated place was the only way to conveniently control them. There were once systems that controlled access to the /usr/games directory during work or daylight hours to keep game playing from interfering with other users on the multiuser system.
Interesting. Thanks for that insight.
Trying it out now, thanks for the link!
The entire point is that you really can't separate politics and social well-being. Often the most effective way to improve some groups life is through politics. Killing separate but equal for example.
this guy is documenting the death of his startup in real time

#popcorn
Only a very few niche services encrypt user data such that the service provider cannot read it, because then users lose everything just because they forget their password.

And said services are explicit about this upfront.
Railstutorial is an awesome awesome intro.
I learned Rails with it and had negligible coding experience.
Real-time user activity recognition Service.
It seems workflow isn't the only thing broken.
No the key of that phrase was:

> I did not end up doing it.

It's implying had he sent it the laptop wouldn't have been stolen.
http://www.boston.com/metrodesk/2012/11/01/rezwan-ferdaus-as...

Basically Ferdaus made statements that he supported terrorism and had some vague idea of an attack using RC airplanes, FBI agents posing as terrorists got in touch with him and coaxed him into more than just words. They gave him money which he used to buy guns, explosives, and model planes. Without FBI assistance his "plans" would likely never have gone anywhere.
Then make plans to do this shitty job in as kind and professional manner as possible.

That means NOT stringing people along. Sit down and figure out whether you're going to be able to keep people employed at 100% of their current pay and benefits. If you know you can't, then the biggest favor you can do for them is to lay them off quickly so they can start looking for a new job immediately.

If you can make some calls to get them leads at other places that's great, but the most helpful thing you can do for them is to let them go as soon as you know that they have no future at your company.

I've done firing and layoffs and I know it's hard. Delaying it makes it all much worse, for you and the departing employees.
mistake: I wrote 'any' directory, but that's not true. It has a limited set of information, but I tried to make it as complete as possible.
>Rationality carries with it a connotation of deeper underlying symmetry to surface reasoning. The "aesthetic ideals" you're referring to.

I disagree. Rationality is orthogonal to aesthetic ideals.

> A reasoning is different from a rationale.

No, its not.

> A rational person makes optimal decisions,

That's true pretty much only if you are referring to the definition of a rational actor in rational choice theory, in which "rational" has a very special definition that isn't very much like its use anywhere else (since it presumes both perfect and total knowledge of the utilities and disutilities, both immediate and distant, that will result from any choice, and a universal decision rule of action in which the actor always maximizes his own utilities.)

> We want our laws to be rational, not consistent.

"Rational" in the sense it has to make your previous sentence true cannot be applied to laws except as acts of individual legislators, and if it was it would mean that they were acts maximizing the legislators personal utilities.

> To seek out an ideal regulation of behavior that's fair and useful to everyone.

"fair and useful to everyone" is "just", more than "rational".

> It is certainly consistent within a specific framing of law that useful actions be outlawed, but it is not rational.

In the sense that your stated definition of "rational" is an unattainable ideal and, consequently, any real world law regardless of its attributes will be "not rational" by it, I agree; OTOH, I don't think that -- even aside from the fact that "rational" is the wrong word for it -- its really useful to use such a definition in a binary sense to discuss real world laws.

OTOH, using a continuous scale, even the most just law possible is going to occasionally prohibit some acts with social utility.
No, this is a guarentee the information gets out regardless of what happens to him. Snowden is going to get the information out. Or, if they kill him, the information gets out. This puts those who don't want that information getting out in a difficult position, but it doesn't change his own situation very much.
Show HN: One site in 4 web frameworks, Behat for behavior spec, all open source
I think you underestimate the complexity of Python language.

Note that PyPy is not the only project that did that - remember psyco? There are reasons why after 3 years Armin said "I give up, let's do PyPy". It's not the "well behaved" part, this can be worked around, Python is simply more complex than Javascript or Lua and by complex I mean just bigger. All the extension modules that everyone naturally expects to be fast (even just the stdlib), descriptor protocol, crazy frame access semantics. That does make it very labour intensive to do the right thing. Look what happened to Unladen Swallow - they did not get anywhere really within a year. Several of PyPy optimizations that took forever to do are really new stuff, whether you do JIT by hand or generate it automatically.
Yes, before Firebug, we were using MS Script Debugger/Script Editor in IE. It wasn't great, but it was more reliable for script debugging than Firebug for a long time.
This is bikeshedding, but "The only hard problems in computer science are cache invalidation and naming things" - there's already a quite popular, multi-paradigm programming language named Falcon[1].

1. http://www.falconpl.org/
Why are we doing this backwards compared to everyone else? Integrating debugging tools into the runtime (browser) is great, but everyone else tends to integrate them into the IDE. Wouldn't that make more sense?
Tours are still offered through the San Francisco Bay Wildlife Society.

http://sfbws.com/activities/2013/07/06/drawbridge-van-excurs...
Bitcoin - merchant howto
We have this optimization in PyPy (so yes, Python can do it). There is even a paper [0]. LuaJIT is a great source of inspiration but Python is just a huge language, which makes it much harder.

http://www.maths.lth.se/matematiklth/vision/publdb/reports/p...
Also note that the [dud] guns and explosives were provided entirely by the FBI.
The problem here is that you need to know the other person's encryption key. Since I'm not warned whenever you get a new device, I have no idea how many keys are assigned to you. Hence, the key distribution problem still remains.
The TV Apps Economy Will Be A $14 Billion Business
The Mozilla DOM inspector is even older, it was even bundled in the Firefox installer in 2003. If the IE toolbar DOM inspector which was the reason some devs used IE 6 like the article suggests, I would bet that they had never even tried Firefox.

http://kb.mozillazine.org/DOM_Inspector
Sadly not that one. It was a general vulnerability based on the way processors work that is effectively unpatchable. Something that could easily fit into Zalewski's Silence on the Wire.
>51% of its money on social welfare

That's a pretty sucky rule, but regardless, I'd still have a hard time believing a "Tea Party" group would ONLY spend 49% of its money on politics, so I'm sorry, but I have to say "ha ha" that they missed a chance to influence the election.

I don't care if they apologized. That's PR 101 these days, regardless of fault. They also targeted progressive groups. And open source groups, apparently. Maybe they did target MORE Tea Party groups, or maybe there were just more Tea Party applicants than progressive group applicants. Regardless, it's all mob mentality lynching of the IRS without enough evidence to know what was really going on.

And I guess people who point out that it's not necessarily an actual conspiracy get downvoted for bursting that particular bubble. So be it.
Oh my god. I was just commenting in a Stripe thread about how insane it was that Square wasn't online and that they would capture tons of revenue if they would just stop being boneheaded and expose their API.

This isn't exactly that, but in a lot of respects, it's better. Way better.

Yikes. I need to rethink how I am selling online.
Fair enough, but I wasn't talking about modification, I asked about iteration.
So this attitude I find hard to take seriously if your goal is to become a well versed, proficient programmer.
I love their content. So far, it browses fine for me in chrome and on iOS. I'd be fine with a simpler presentation, though.

It is certainly no OnSwipe, crasher of browsers.
The workflow might need polishing, but tools like SublimeInspector are not the answer. They are miles behind the Chrome Inspector. Try it if you're not convinced.

The Chrome team has shown that they are very interested in moving the Inspector forward and have succeeded in integrating local files access via the editor, SASS support, Source Maps support, and a lot more. It is to the point where it would not be crazy to consider building a site entirely within the inspector. While the editor is not as good as others, you do gain simplicity and the ability to patch running code. The workflow is getting better.

Writing a great inspector is the hard part. Comparatively, writing an editor should not be as difficult. Chrome built the inspector first and is circling around.

The only integration I would really care to see (perhaps via ST2 Package Control) is the ability to directly pipe into the Inspector and patch running code. For large projects, especially in development mode, it can be a drag to ajax in >200 source files (even from localhost) and refresh every time you make a change.
'''...almost all platforms map Python floats to IEEE-754 “double precision”.''' http://docs.python.org/2/tutorial/floatingpoint.html
Ghar ka darwaza khola rakha hai
The "American life'style" ... What a load of uncritical, unthoughtful, anti-American nonsense. So do these non-American countries have air conditioners, plumbing systems, and so on? If so, how did they get there without so-called "servants?"
deep man.
TV+Internet convergence... now with Apps.

Not really sure what makes it different from the other times this has been tried. Those Cable companies are really good at stomping out any innovation.
If an eavesdropper records all traffic between client and server, he/she will also record the encrypted session key. If the server's private key is compromised, the eavesdropper can decrypt the session key and use it to read the rest of the communication for that session.
Well, I'm not to worried about trouble in the UK.
What if it's not a dumb move? Meaning, what if it's a good thing to be honest with people that working at a startup is hard, that it's emotional, that it's human, that people make mistakes? I think opening up a bit about our culture -- which is hard driving, passionate, etc. isn't a dance in the park and can break some dishes along the way? That's pretty true of all startups.
The title is very misleading - it should be called "How fast can we make CPython", because it talks about compatibility with PyObject* and stuff.

While I would argue that we can't make interpreted Python particularly fast, the actual topic in question is much harder than that.