skysight-inc/HackerNews huggingface dataset:
The fundamental reason is that we start with a fallacy, that you can predict with any accuracy how long it will take to build a complex and likely poorly specified system in its entirety.

On top of that, there are two common development environments. In the enlightened one, management asks you or your team to go off and create an estimate. You come back and tell it to them, and you're informed that it's crucial to deliver to an important customer by date N. So you go back to your desks, lie to yourselves, then come back and tell management that you've recast the problem a bit and you can bring it in by the required date. Then you either blow the date, or deliver garbage by the date.

The more common environment, management either baldly states or subtly telegraphs the required date. You go back to your desks, then come back to management and show them the estimate, which will be done by the required date. Then you either blow the date, or deliver garbage by the date.

I've heard that some people don't do it that way.
If I recall, this is basically the surest way to lose your DMCA protection. The key is for them to prove that you knowingly profited from the copyright infringement. Another issue is what percentage of your service is legit/infringing.

As much as people hated it at the time, the DMCA is a pretty reasonable law (which is why the bad guys at various companies are trying to replace it).
"maintain 2 protocols" - actually, yes, I do expect browser vendors to maintain compatibility with HTTP 1.0, 1.1, 1.2 and 2.0+. By the way, you might be interested in 1.2: http://www.infoq.com/news/2011/04/http-1.2-released

The way I see it, we can have our cake, both flavours. Why make someone remember different URLs? "http://" is too entrenched for when people type it in, and I'd rather not worry about browsers trying to sniff out faster protocols as they currently do with SPDY. Better to make it a version number, even if you personally never use it.
Of course ;) I'd take number 1 any time
To the midwesterners, particularly upper-midwest (Minnesota), we are more familiar with, "duck, duck, gray duck", (if that helps).
PCWorld Exits Print, and the Era of Computer Magazines Ends
>but the sheer complexity of items and purchase order is overwhelming.

There are built in user contributed guides that suggest what what to build and why, with the guide's author comments on both individual items and skills, for every hero and numerous alternative builds. There is in game voting on the quality of each guide. It's a cinch now in Dota 2 to buy basic stuff even if you've literally never played a hero before, and also easy to try experimental builds for fun right in game.

The skill is all judgement calls and spacing. Memorizing item or skill progressions is irrelevant and indeed "trivial" in the sense that it plays little part in the game or your thinking during it. On the other hand, having the skill to use the blink dagger and catch opponents or save yourself is essential.
To save you from looking up the more obscure acronyms like I did (summaries where given are my own words):

RTO: Rejected take-off, when you have to abort a take-off (though it seems in the context of the post, the exercise described involved an edge case when you should go ahead with the take-off)

AGL: Above ground level

CAVOK: Ceiling and Visibility are OK: no clouds < 5000 ft AGL, with >10 km visibility

VOR approach: VHF omnidirectional radio range: navigating based on a radio signal, considered "non-precision"

IAF: Initial approach fix http://en.wikipedia.org/wiki/Initial_approach_fix

LNAV/VNAV: lateral/vertical navigation http://en.wikipedia.org/wiki/LNAV

FAF: Final approach fix

UNSAT: unsatisfactory rating (paperwork)

FCOM: Flight crew operating manual

CRM/CLR: Cockpit resource management, a set of NASA-originating practices to limit and contain human error http://en.wikipedia.org/wiki/Crew_Resource_Management
The Secret to Making People Want What You Got
I think I accidentally upvoted this comment when my phone's browser glitched. Meant to downvote.
>many, though, actually do work for defense and intelligence contractors. Should they be banned because of their affiliation?

Absolutely. The hacker community should not contribute to the knowledge of those who work to undermine privacy and feed the surveillance-industrial complex.
How to Improve your Email Click-Through Rates by 12X
I'm not entirely sure what the US constitution says about a reasonable expectation of privacy, but I certainly have to wonder what the authors of it would have changed, had they envisioned a society in which the government could constantly, reliably, and ubiquitously surveil its' citizens.

That is, perhaps we shouldn't have an expectation of privacy in public, but for a long time, we had a reasonable expectation of relative anonymity, at least, the average person did.
As elsewhere, the expectation of "just another face in the crowd" pseudo-privacy.

When we (as a society, by which I mean my grandparents parents) agreed to have "unique identifiers" prominently displayed on vehicles we own, the reasoning behind that decision was based on a different reality.

This is _very much_ scope-creep - without anyone affected being asked whether it's OK.

If there was a proposal to have police all stop 1000 people per shift to check and record their ID, people and civil liberty groups would be up in arms (perhaps literally).

Is this _very_ much different? Shouldn't we at least have had a discussion about it before rolling it out without letting anybody know what was going on?
"consumes less energy and is dramatically simpler than conventional techniques."

I remember a video that shows some kind of filter (it looked like a plastic sheet). They were simply pushing water against it and you get clean water from salty water.

I don't think it gets easier than that. However if I remember correctly the filter gets unusable after a while
Triple bypass – What does the death of the semantic web mean for publishers?
Supporting ICANN is hardly working in the name of "good".

Sure, working with ICANN may not be associated with "evil".

However to those in the know, it is associated with greed under the guise of "service to the public".

Personally, I'd prefer a world where ICANN, namely the centralization and commercialization of domain names to benefit a select few insiders and an array of parasitic sleazebags, gave way to a non-antagonistic naming system harmonized with trademark law and actually run transparently as a public service, for the public benefit.
>this is a joke

More of a PR effort to salvage the brand than a joke, I'd guess.
You should do more study on the varied senses of "theory."
It's entirely likely they're not licensed drivers, and that the vehicle isn't registered, and never will be. California seems to semi-intentionally not enforce registration/licenses for political reasons.
What NTSB has now said is that Auto-throttle has not 2 but 5 modes. Im not a pilot so all I knew of was 2. That may be a combination of different auto-pilot modes combined with auto-throttle modes.

But what seems clear is that the moment that the pilot turned off auto-pilot, the flight was doomed to crash as the auto-throttle was not in the right mode for landing. As in, a mode that would actually use thrust vs elevators to maintain airspeed.

NTSB also revealed that course corrections were being done not at the latest moment of 500 feet, but at 4000 feet 2.5 minutes before landing the plane was off course, in which case supervision, and correction would have been appropriate in a training scenario.

I hate to draw conclusions like this, but in today's modern aircraft pilots only fly about 20-30 mins of a flight, takeoff and landing at most with autopilot managing most of the rest under normal conditions.

The inability to hand fly an airliner, is a disqualifier to be a professional pilot.

NTSB revealed that several modes on autopilot and autothrottle were being cycled in the last 2.5 minutes of the Asiana descent perhaps indicating a reluctance to hand-fly the plane and an over-reliance on automation.

Any commercial pilot that cant hand-fly a 777 on a perfectly clear day at SFO should never see a commercial cockpit again.
Nitpick: it can't be from "before BASIC" if it mentions Pascal. BASIC is older than Pascal (1964 vs 1970, according to Wikipedia)

Also, http://en.wikipedia.org/wiki/Real_Programmers_Don't_Use_Pasc... (with links to the essay; look at the email address. That alone shows that we are talking of a real programmer) says it's from 1983.
Top Photos from Inside 3D Printing Chicago Conference Day 1
Twisted Light Sends Data Through Optical Fiber for First Time
A moat "this year" until it's safe for them, PR-wise, to work at legitimizing the feds again.
It's not practical (or even possible) to carry on all of your gear all of the time. Our field engineering team(s) have been travelling for 5+ years with > $100K worth of checked electrical gear to Brazil, London, Singapore, Germany, Hong Kong, and Malaysia.

A couple times gear was delayed, and so the FE team had to wait a day or so for it to arrive, but nothing has ever been stolen.

Nice thing about a Pelican Case - no straps to get tangled up in any baggage sorting gear, and large enough that it doesn't usually get stuck in the corner somewhere.

From a probability perspective, much more likely to get mugged coming out of the airport, or getting hijacked using your equipment in the field - this has happened to our Field Engineers multiple times, but no losses in the airplanes (yet).
"Twisting light means photons have a quantum characteristic called orbital angular momentum (OAM). Photons with OAM have electric and magnetic fields that corkscrew rather than oscillate in a plane. There are a theoretically infinite number of OAM values, and multiple beams having different orbital angular momentums can occupy the same fiber, allowing more data to be transferred." --quote from article
MCSD SharePoint 2013 - Go? NoGo?
James Bamford pointed out in The Shadow Factory (back in 2008), that much of the "surveillance-industrial complex" is outsourced and that much of this bleeding edge tech is in fact coming from private companies (Narus, companies originating from Israel, etc). Should DEFCON setup a review board to ban employees from private companies they also don't agree with?
Dropbox for the Enterprise ‘Will Be Dropbox’
How Cable Should Be
>everyone is welcome, regardless of background or ability

This year, in the spirit of inclusivity, they should bring in the lead architect of the Great Firewall of China.
http://goo.gl/QcXyE + 1st link for paywall-busting
Why not? Contributing to the knowledge of companies such at Narus is detrimental to the good of humanity.
The PCs are actually improving, but they are improving in things that are not immediately visible. Mostly, this is about, how

- IPS monitors are now way cheaper, so people can get nice 27" FHD IPS monitor for the price of 23" TN monitor few years back. And if you're adventurous, you can get QHD one from Korea for good money.

- SSDs are becoming standard. I know that "everyone who used it will tell you it's awesome and will want to have it for all time" sounds like fanboyism, but with SSD, this is really true. They add incredible responsiveness to any computer they are installed in. It won't actually compute any faster, but you will spend less time waiting and doing nothing, and that's worth it.

- While I can't say what users really care about, the CPUs are actually getting faster. Not only quad-cores trickled into midrange and AMD is now putting octa-cores (with slower individual cores, however) into upper midrange, but the CPUs are actually faster. Look at this benchmark [1] comparing Core2Quad 2.4 Ghz with current upper-midrange i5 4770k. The new CPU is about little less than three times faster.

So the PCs are evolving. And IMPO, SSD and IPS monitor is more important than new CPU anyway.

[1]: http://www.anandtech.com/bench/Product/53?vs=836
> That mainly benefits the big web monopolists, who require the browser to be the ultimate application platform, where they can track to their hearts content, display unsolicited advertising

Please. All you need for advertising is plain text, all you need for tracking is cookies.
Tracked changes show up in bright red, blue, and green colors. Difficult to miss, as long as you don't hide them. There are also ways to ensure that a "final" revision of a document is saved.

The hidden versioning I talked about are attributes on elements in the XML version of documents that are not normally displayed. They contain a random number that distinguish text edited in different "blocks" from each other -- making it possible to determine how to combine different versions of text, without containing full version history (and thus leaking information like in your example). It's not as good as a recursive three-way merge that git has, but it's reasonably effective when combining documents.

You are right that it doesn't separate the content from the history -- but keeping full history and keeping things private are at odds with each other anyway. Consider the outrage when people rediscovered the Fast Save feature -- it was very useful, but it also leaked potentially sensitive information in a way people didn't expect.

http://support.microsoft.com/kb/197978

http://news.cnet.com/8301-10784_3-9780073-7.html
This doesn't sound right. You have good credentials. You should be able to get a job.

1. Are the companies looking at your transcript? If so, are your marks acceptable?

2. Are you targeting the right jobs?

3. How far are you able to get through the HR process? Do you get interview requests? Do you pass the first interview with HR that usually just measures culture? Do you pass technical interviews?

4. For companies that you've had some sort of convo with, have you asked them for constructive feedback? I've done that successfully many times

5. Make sure your GitHub project clearly demonstrates your programming skills. If you don't have any open sourced projects on your account, that's a serious disadvantage. I had a few private repos that I recently open sourced, I said "ah what the heck, why do I need to keep this code private?" and it's really helped my job search process. Employers don't feel the need to test me so much in technical interviews because they've seen a lot of my code on GitHub.

6. Spray and pray is just one tactic. There are many others. Use LinkedIn and request to connect with people who work at your desired companies. You absolutely must write a personal message <300 chars and sell yourself. Or google those people at your dream companies, find their email address, email them, sell yourself, ask for a convo. Some will respond and have a convo with you or they'll connect you to HR. This got me some great opportunities.

7. You should be working your network. Go through your LinkedIn contact list, use your discretion on who to message, send a short note that you're looking for X role in Y type of company. People will help! Again, this has worked for me.

Find my contact info on my profile, I'm happy to help via email/skype.
> (IE they've made a horizontal agreement not to compete on price)

So it'd be a cartel-like behaviour?
I am doing 90% of my searches in DDG. And its just a matter of time to also do the remaining 10%.
Meanwhile, if they add the something like google apps, it will be awesome. Specially a free email service.
New Aus Incubator SketchBook Ventures launches
Marco claims that HTTP 2.0 is overly complex, but never gives any reasons why. He claims that text protocols are better than binary, but never really gives any reason for that either. Nostalgia for the days of telnet and gopher is not a reason.

Then he goes off to talk about SOAP, which he hates, because "the only way [he] know[s] to hand-debug a SOAP transaction is with a hammer and a straitjacket." But SOAP is text based, which directly contradicts his argument from earlier.

The other allegation here is that the new protocol "satisf[ies] what are essentially the needs of a small group of very influential players." Again, Marco just states this with no rationale at all. In fact, the opposite is true. By being more efficient, HTTP 2.0 will serve the needs of everyone. Should startups have to pay for 10 servers when they could have paid for 5 with HTTP 2.0? Apparently Marco thinks they should. It's easier for Google to pay for a few more servers than it is for Joe startup. This should be obvious to everyone, but apparently it's not.

The whole binary versus text thing is a complete red herring. If you have ever used wireshark, you know that it makes binary fields easy to read. Binary protocols are easier to develop and standardize. Pretty much every good developer realizes this, and the responses here reflect that. The idea that making something LOOK like (but not actually be) "human text" makes anything better is an idea we should have buried along with COBOL and other mistakes from the past. But I guess not.
True - but saying that I'll Google it then jumping on Duck Duck Go is more amusing.
Iron Man 3 Pitch Frames - Prologue Films
How about HP Elitebook 8470p or HP Eliteobok 8570p?

" Two displays: 2560p, 2760p, 8460p, 8560p.
Three displays using integrated Intel graphics: 2170p, 2570p, 8470p, 8570p.
Five displays using AMD Eyefinity Technology: 8460p, 8470p, 8560p, 8570p.
"

That's without a dock. All do have docking stations available.

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.js...
Yes Gen. Alexander is still speaking at Black Hat. I'm not sure that DT has the influence inside Black Hat that he once did. I would be interested to see how that talk goes down, but then BH has never been about "hackers" in the way that DEF CON is

There appears to be a distinct effort to separate BH and DC this year, there is less speaker overlap compared with previous years, attendance to BH doesn't get you in to DC like it used to, etc. This is probably UBM (owners of the BH brand) trying to protect their revenue.
Americans: Snowden is a whisleblower, not a traitor
While this is an accomplishment, I'm much more impressed by difficult manned arrested landings like these:

https://www.youtube.com/watch?v=4gGMI8d3vLs

But it is just a matter of time before that type of landing is part of the historical archive.
I wouldn't describe Googles as a perfect search at any stretch. The spammy sites that have scraped a terrible version of some old data that is vaguely related to my search terms a a constant irritation, and scrolling past several adverts its very annoying. NSA and creepy tracking aside.
Latitude and offline maps sacrificed at altar to Google+
makes sense, both the head and copilot on this flight were relatively inexperienced on the 777.

I wonder if the Airline had laid off their veteran (and hence high earning) pilots earlier (which would have exacerbated such a situation with inexperienced pilots); it's certainly not unheard of in the industry.

Lastly, apparently the Asiana Air CEO has been quoted as saying that all responsibility lies with the pilots and that he and/or the company are not responsible. Great to know that your boss has your back >_>
I'm curious about what the other pilot was doing. According to news articles, the second pilot was more experienced and qualified for that aircraft. Shouldn't he/she have been monitoring the approach ?
Driving away from American police officers is not a good idea.

http://reason.com/blog/2013/05/03/culpeper-cop-who-shot-and-...
Hack4ac recap
Excel has track changes, and Powerpoint can merge two different versions of a slideshow together. Word can do both, of course.

Yes, it's slightly clunky, but quite effective as long as you know how to use it: for example, you usually want to minimize unnecessary changes to formatting to make it easier to see differences, just like how you're not supposed to mix whitespace and code changes in a patch.
I'd call it X.509 Certificate Authorities. Unfortunately, the root of that is busted, so we should build on something else.

The same thing could be done with GPG, via identity validation (jumping through whichever hoops are required to link people's claimed 'real' world identities with their keys; probably checking documentation and then signing a key). However, that's probably best achieved via some decentralized method rather than trusting a centralized corporate intermediary as per X.509 CA's.
>He is probably getting a mountain range of shit right now from the feds.

I doubt it. It's just PR. Defcon will invite the feds back once everything blows over, PRISM or not.
Googling for "Current Push Theory" only gets 5 results, none of them relevant: https://www.google.com/search?num=100&q=%22Current+Push+Theo...

Can you please define the Current Push Theory?
Civilization VI at least.
My favorite part: This carousel suffers from the same failure-to-reset-timer (timeout, in this case)
If they're off duty and in plain clothes shouldn't it be a civilian assault? Although, since the intent is to paint a federal agent I suppose you'd have a case.
I don't think you actually need to do the keyboard thing.

You should be able to use "accessibility" features to bring up a soft keyboard (or just cut and paste from known things) to run the entire attack as a normal-appearing HID mouse, which just happens to be evil. No need to reconnect via a hub; you could do the whole thing within a mouse controller. Bonus points if you can manage to fit all the logic in the same processor/memory the thing includes by default, or something which looks like the same physical package and thus passes a non-destructive open-device analysis.

(which is kind of terrifying if you think about it; almost no one checks the provenance of "dumb" devices like mice. Keyboards sometimes get a tiny bit more scrutiny due to hardware keyloggers inside inline, but that's about it.)

The ultimate solution is a trusted supply chain and equipment which is tamper-evident, non-counterfeitable, and which can securely attest to intactness and provenance; x9.9 pinpads and hsms. But no one does that for general purpose hardware.
How I've missed these: http://penguins.neocities.org/
Could the Post Office Pivot?
eventually when most cars are self-driving and many cars are paid for by the use and ridden by many different passengers, license plate recognition will be less informative than ever

Except that then they'll have credit cards matched to continuous GPS data.
If you force slaves to work harder, they'll work harder. Whoop dee effing doo.

I think MOBA games (except for the kiddie ones like LoL) are popular there because they like their games to be challenging. Most games today are rich in graphics but poor in gameplay, dumbed down for the masses to enjoy. At least in D2 and HoN even the most dedicated players still get a thrill out of sharpening their skills and being better then the other guy.
SOAP is to REST as XML is to JSON. They're all technically 7-bit and notionally human-readable, but SOAP/XML are (well, can be) so verbose as to be near-impossible to parse by hand. Comparing the "Hello World"-style simple examples on Wikipedia is instructive:

REST

http://example.com/resources/item17

SOAP

<?xml version="1.0"?>
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
<soap:Header>
</soap:Header>
<soap:Body>
<m:GetStockPrice xmlns:m="http://www.example.org/stock">
<m:StockName>IBM</m:StockName>
</m:GetStockPrice>
</soap:Body>
</soap:Envelope>
What does he mean by partner? The partner seems twice his age so perhaps it's a poor translation for friend, professor, father, etc?
Nice Output for Capistrano and ruby scripting at large.