skysight-inc/HackerNews huggingface dataset:
It was down for an hour, seems to be intermittently up now. I tested from 2 different ISPs from Sydney Australia.
What the current version means depends on how it works out in prosecutions. If weev is prosecuted, normal security research is endangered.

That's the whole point of the Mencken quote squeak posted. Another favourite: "Bad cases make bad laws" - if bad principles get enshrined in the precedents made by convictions of bad people, those bad principles will hurt good people or good activity down the line. That's precisely why the EFF, Schneier, Felten, et al., are devoting their precious time to this case.
having statistics on contributors might be quite useful.

So you are proposing harvesting & storing stats on contributors indefinitely to help track down criminal intent? This sounds familiar.
The top sheet keeps your blankets and comforters clean; its much easier to wash a sheet than a blanket.

If you buy a bedding set they usually come with two pillow cases (for queen and king sized beds or one for smaller) and a loose and fitted sheet.
> Acting shady hurts your brand.

These companies are not silly, they understand the damage to their brand can be quantified as $x and that the benefit to their bottom line can be quantified as $xx .

Sometimes you do things you know have a negative, because you believe that the positives outweigh it.

Not that I agree with these dark patterns, but I understand why companies choose to implement them.
You must be kidding. It's a solid step back from Sketchpad developed in 1963:

http://www.youtube.com/watch?v=FuKREmsiD9o

Apple had an almost identical drawing program in the early MacOS version:

http://en.wikipedia.org/wiki/MacPaint

There were tens of better drawing programs meanwhile, for example I remember being able to do animations as a 5 year old kid using the fantastic Fanta Vision program under MS DOS (pity the editing isn't shown in the video):

http://www.youtube.com/watch?v=mjj7Yf3JRvE
http://www.old-games.com/download/5732/fanta-vision

Unfortunately the leading open source painting programs are remarkably uninspired, interfaces of Gimp and Inkscape are truly a mess, but then artists are hardly Linux users. On OSX there are a lot of great painting programs, for example:

http://www.artrage.com/artrage-4-samples.html
How much is your gmail worth?
Apple implemented a full AOT/JIT/Disassembler (LLVM), debugger (lldb), static code analyzer (clang), C and C compiler (clang), and c++11 stdlib, all under a free MIT-like OSS license.

There all built as libraries, can be linked against to build IDEs, JITs, etc etc etc.

So how is it that they don't get along, exactly?
OK, in Haskell, data is immutable. If you want to pass data from one thread to another, there is no point in serializing it, sending it between threads and then deserializing it. You can just pass a reference. The data is also not typed, but that is potentially something you could fix in the bindings.

I know that in Erlang, you do pass data by exchanging blobs, but the difference is that Erlang has per Erlang-process heaps. Haskell has one heap, so there is no reason to do this.

It comes down to this, the way that you communicate between threads in the same process is different than the way that you communicated between processes.

> Are threads in Haskell not asynchronous by nature? Do you get synchronization for free somehow?

I'm not talking about what's happening underneath. I'm talking about the style that code is written in. I suppose, I could use a coroutine style monad over ZMQ's asynchronous API and create pseudo-threads, but they wouldn't get pre-empted, so you'd have to be careful to ensure that they didn't stave.
I understood that was where you were, and by accepting that constraint you define what you can and cannot do vis-a-vis package signing. As you point out there isn't a magic bullet, some forgotten design pattern or algorithm, or some clever slight of hand that will make your repository secure.

That leaves you with one of two choices, accept that it isn't going to be secure and plan accordingly, or change the constraints.

For example, lets say you had exactly 1 volunteer who was willing to sign up to be your key signing authority, and as a volunteer they were only available on weekends. You could build a central authority but the throughput would be quite slow. That would impede your developers from getting authenticated and packages would take a long time to get out. But they would be signed and you would have some measure of trust in the packages as signed.

That might be unacceptable to your user base and they all go off and use something else (or as it often the case in open source they fork a new copy and decide theirs will have the rules they want). No amount of forking will create a secure system, so your constraints mean you choose risk and a wide pool of developers over less risk and fewer developers.

That a system that meets two incompatible constraints simultaneously is impossible should not necessarily stop you, but it can inform on what will happen in the possible futures. Its like growing old, you can say "I never want to be older than 25" but really there isn't anything you can do about that, what you can do is say "I always want to be able to do the following things like I was 25 ..." and work on what ever sort of preventative exercises or stuff you need to work on to make that true, but you can't stop yourself from aging.

So you can't have a package signing system with the current developer environment. Awesome, what about package signing is important going forward and what about it isn't as important? And given that, what changes can you make and what changes can't you make? And then given that you know how the future for that particular set of choices are going to roll forward.
You clearly misunderstand his goals and those of GNU/FSF -- that is evident from every single one of your posts on this article, despite all these people trying to explain it to you. Not going to continue here; have a good evening.
>Users can already choose to not use proprietary software

And developers can already CHOOSE not to use GPL licenced code, this part of your argument has no point whatsoever.

The GPL licence exist to grant the right of end users to examine, modify and compile/run the source code of the binaries they recieve.

The user does NOT 'already have these rights' with proprietary software.

When a developer licences their code under GPL it means that all recipients of the code in both it's original state or modified will have the above rights.

And again since developers will be 'end users' themselves once they recieve a binary containing modifications to their code, it creates an effective tit for tat mechanism where they will recieve the source code of any modifications.

There is no 'right' taken away from 'developers', they have no 'right' to use code other than under the conditions set upon it by it's owner, this holds true for all licences.
Nonetheless, Epiphany does see a few situations where it might perform better than a classic CPU and better than a classic GPU. Its just a different software architecture, focusing on a different problem niche.

Do you have any examples?
When the map covers the entire width of the screen, it is impossible to scroll past it on a mobile phone.
Mainframer here. Hercules is a pretty amazing piece of software. (Fun fact: One of the main developers, Jay Maynard [1], is also known as the "Tron guy") Unfortunately, Hercules is as close as the average person can get to the platform without working for a corporation that runs z/OS (the modern successor to MVS) or Linux for System z (s390x Linux running on mainframe hardware) in their shop.

The platform has a big image problem. I personally blame IBM for not maintaining relationships with their education customers in the early 80s. The high cost of the hardware drove universities to adopt the new and exciting (ie cheaper) distributed platforms, and thus breeding a generation of distributed-minded graduates never even hearing about the mainframe platform except in history books. I know, because I was one of them.

Now the industry is now facing an exodous of their mainframe experts as most near retirment. The average age is something like 55-60, ready to retire [2]. There just isn't any young, talented mainframers being educated. IBM has realized this, and they've started the "IBM Academic Initative" to partner with schools and incorporate mainframe into their curriculum. It's a start, but the damage is done.

The technology, however, is top notch. The closed-source software/hardware model provides a lot of performance gains over the open source model. z/OS is updated every year and IBM releases new, faster hardware every year. And it's not always more expensive. An EC10 can consolidate several racks of Linux blades into its zVM hypervisor (btw IBM has been doing virtualization for 30+ years) while processing 145,000 credit card transactions per second into a single refrigerator-size machine 24x7x365.

If you are looking for a new career, consider mainframe [3]. It's the backbone of financial, retail and data processing industries. It may not be as glamorous, but it's not going anywhere. And when all that old mainframe talent retires, you can write your own check.

[1]: http://en.wikipedia.org/wiki/Jay_Maynard
[2]: http://www.businessweek.com/stories/2010-08-03/big-tech-prob...
[3]: http://www.forbes.com/sites/rogerkay/2012/01/30/kids-see-a-f...
It sounds like, by deciding to make a charge based on what amounts to a temporary cache of the balance, there has always been a race condition in the billing code? I would think it would have always been necessary to successfully update the balance before proceeding with the charge in order to avoid double charges.

I can see how this sort of situation is hard to predict and test for, but that means it needs to be designed and implemented very carefully. $0->charge card just isn't a reasonable approach at all.
BlockPRISM.org Facebook Encryption for Everybody
EVE's "ISK" does carry legal risk as they are an operator of a centralized virtual currency.

I think it's mostly a matter of FinCEN et. al. not yet training their sights on ISK, because ISK is not widely supported in terms of fiat-exchange and online purchases.

There's certainly no reason someone couldn't accept ISK on Silk Road in exchange for their magic mushrooms, but the reality is, why take ISK when you could take Bitcoin which has better tools/software for trading, better liquidity, and no centralized control?
VR Jam - Presented by Oculus and IndieCade
I opted for MPL, because it is the most liberal licence that I could find, which is still "copyleft". The spectrum between MPL and GPL (covering LGPL etc) is complex.
QUIC - Multiplexed Stream Transport Over UDP
That was really really annoying and pointless. Why has this been up voted?
Wyden: http://en.wikipedia.org/wiki/Ron_Wyden
That instance is fine. It certainly is nice that they released it under a free software license, it would have been better if they used copyleft, but there is nothing wrong with the license they chose. They part where they don't want you to "get along" is the part where they distribute proprietary software, sell devices with proprietary hardware locks, forbid use of the GPL (and other free software licenses) on their app store, etc. See this blog entry for an example of how this has specifically applied in one case to some FSF-copyrighted GNU software: https://www.fsf.org/news/2010-05-app-store-compliance
Kick Starting a Vibrant Community
They are. And soon we'll be them. I hope my NES works when I'm 90. And I'm hoping they still have a copy of Notepad and javac.exe around for me.
It may end up with Al-Quran classes in Massachusets.
Yes, well done for how you've handled the situation. Very professional, very honest. I liked Twilio before, but I'm even more impressed now.
> Chaos is the Android philosophy, and absolute order is the Apple one.

Heard of entropy? So basically you're saying that android is tending towards dissipating any useful energy.
Nice to see Rust doing so well, but I'm disappointed by the performance of the Haskell code.
Well, it has been my experience living in Europe and the US.
Ubuntu forums hacked
You are receiving this message because you have an account registered with this address on ubuntuforums.org.

The Ubuntu forums software was compromised by an external attacker. As a result, the attacker has gained access to read your username, email address and an encrypted copy of your password from the forum database.

If you have used this password and email address to authenticate at any other website, you are urged to reset the password on those accounts immediately as the attacker may be able to use the compromised personal information to access these other accounts. It is important to have a distinct password for different accounts.

The ubuntuforums.org website is currently offline and we are working to restore this service. Please take the time to change your ubuntuforums.org account password when service is restored.

We apologize for any inconvenience to the Ubuntu community, thank you for your understanding.

The Canonical Sysadmins.
TL;DR: RTFA.
Since FSF for years has had (and still have) lawyers advising them that this is indeed the case, what is your authority to claim otherwise?

Or, in other words, citation needed.
Considering that you were the reason that Bonwick came to Sun and Bonwick was the reason I came to Sun, I guess that makes me a descendant of sort of Guy Harris...

Also, not sure if you saw it or not, but I gave you a shout-out in my history of SunOS/Solaris/OpenSolaris/illumos[1]. I'm sure I got some of the history slightly wrong from that era (it did, after all, predate me at Sun), so accept my apologies in advance...

[1] http://www.youtube.com/watch?v=-zRN7XLCRhc
ChefSteps Development Kitchen looking for Rails Developer
would have rather read this presentation in Emacs in 1 paragraph than 75 slides.
If the interviewers are worth their salt then they'll figure out quite quickly just what level you're at (which obviously means it serves you to be up front and honest besides the fact that its the right thing to do).

So things can go two ways after they realist your true skillset:

1. They see your potential and offer you the job.

2. They turn you down but you get some solid interview experience.

Either way you have nothing to lose. I've mentored many different graduates and always tell them to take as many interviews as they can - even jobs they're not 100% interested in - because all that experience counts.

If you wanna chat more about this then feel free to shout me over at @modernprogrammr
An old startup analogy with a blue twist
I think it's a tutorial in disguise - about how not to make slideshows.
because it has a cool title
Ubuntuforums.org hacked
Hello,

You are receiving this message because you have an account registered with this address on ubuntuforums.org.

The Ubuntu forums software was compromised by an external attacker. As a result, the attacker has gained access to read your username, email address and an encrypted copy of your password from the forum database.

If you have used this password and email address to authenticate at any other website, you are urged to reset the password on those accounts immediately as the attacker may be able to use the compromised personal information to access these other accounts. It is important to have a distinct password for different accounts.

The ubuntuforums.org website is currently offline and we are working to restore this service. Please take the time to change your ubuntuforums.org account password when service is restored.

We apologize for any inconvenience to the Ubuntu community, thank you for your understanding.

The Canonical Sysadmins.
Interestingly enough I actually I have a rough sketch of an idea which will probably get laid out in a future post. I started to add it to this one but it felt disjointed and crammed to add it so I figured I'd wait till later :)

But you're right something somewhere has to give because nothing is 100%. I hoped to show people that things aren't 100% and just slapping some crypto in there isn't going to give the results they were hoping for.
If I remember the book correctly, Tony Hsieh credits his success to insights gained from going to raves and doing drugs. (Ecstasy, I assume.) So he's probably not looking for Puritans.
What's awesome is how all of us can probably attribute similar life changes to various software discoveries.

Though it's much weaker than saying "emacs influenced the massively adopted programming language I went on to write"...in many ways, having a computer that, as is - was unable to run Doom - led me to understand good old autoexec.bat and config.sys, what extended memory and himem.sys were, mouse drivers, etc, etc.

On the emacs front - emacs lead me to realize how useless the capslock key was, rebind it to Ctrl on all of my computers, and forever make numerous typing mistakes whenever I use someone else's keyboard :) Worth it.

Good little read.
I ask why, if he got 4.5 in investments and it grew to 60, why not just pay back investors the 7% and still pocket some nice earnings?
The growth of MOOCs is clearly massive for the developing world where access to high quality educational resources is limited, but what does it mean for countries like the US? Can a person get the same quality of education from online courses as traditional courses? Can those courses be graded and accredited in a way which means something to employers? Or are we forever stuck in a model of higher education where graduating from a prestigious university is the only thing that matters, and you pay more for the prestige than the actual education itself?
Thank you. I still had time to edit correction.
LD_PRELOAD Hack to try and make latest ssh-agent auth socket always available. 
For all those screen and ssh agent forwarding problems.
What about the ubiquitous (and growing) availability of pornography (I mean, there are mobile porn sites now. Clearly demand is huge)? That could be a real factor.
Apologies for hijacking your top comment but I have some additions for Microsoft signing:

An organisation I am familiar with enabled "AllSigned" via group policy. For those who don't know about PowerShell, this forces every script that runs on the system to be signed with a trusted* certificate.

This immediately meant that developers had trouble using NuGet in Visual Studio (lots of packages run init.ps1 to do setup and move files around, but few are signed). You can't even accept the prompt for signed packages (Do you want to run this script signed by "Microsoft Corporation"? [Y] [N]) because the prompt isn't interactive while NuGet is installing packages.

That kind of setup also precludes the use of Choclatey or any other solution that might be using Powershell without the correct signatures.

Finally, if you can run Powershell interactively, you can still just write code or use Invoke-Expression (eval).

Wargh.

*Trusted in this case still means you'll get a prompt the first time you run the script, and a Visual Studio extension installer still runs with enough permissions to install its own certificate into the right store, so I can still be evil if I want. That's assuming the admins haven't accidentally enabled the proxy MITM certificate for code signing (I'll just export and use that instead).
Here's a transcript for you! (Made with Emacs, appropriately).

How Emacs changed my Life Yukihiro "Matz" Matsumoto @yukihiro_matz
1980
I started programming
BASIC
400 steps
1988
I met Emacs
on Sun-3
shared by 200 undergraduates
I tried Emacs
but I never used
Emacs was prohibited
It consumed too much precious memory
We are free to download free software
We are free to read the source code
I downloaded Emacs source code
and investigated
Emacs was my ﬁrst Lisp interpreter
I learned a lot about language implementation from Emacs
Embedding integers in pointers
Mark and sweep garbage collection
Calling convention between Lisp and C
I really understood how Lisp work
I was fascinated by Lisp objects
Lisp objects implemented by C
Then I got a Sparc Station
I started to use Emacs
Emacs become part of me
If I didnt like anything in Emacs, I could change it
Emacs is totally configurable
Emacs made me realize anything can be changed by a programmer
It is total freedom
I could edit without thinking key binding
I didnt want to write anything without Emacs
Programs, Documents and Mails
so I wrote my own mail client
named "cmail"
in Emacs lisp
It was my ﬁrst non-trivial (Emacs) Lisp program
I used it everyday
1993
I started Ruby development
with inﬂuence from Emacs implementation
Integers are coded in tagged pointers
It uses simple mark andsweep garbage collector
It uses similar object model to Lisp
Then I put Smalltalk-like OO system on top
For syntax, I wanted Algol/Ada/ Eiffel like one
But as an Emacs addict, I needed a language mode
auto-indent was a must
Back in 1993, there was no auto-indenting language mode for a language with such syntax
So I tried to write experimental ruby-mode.el
fighting with emacs lisp and regular expression,
for almost whole week
I somehow succeeded to implement auto-indentation
for a language with "end" delimiters
If I couldnt make ruby-mode to work
the syntax of Ruby would have changed
to more C-like one
too similar to other scripting languages
as a result, Ruby would nothave gained current popularity
Summary
1. Emacs taught me freedom for software
2. Emacs taught me how to read code
3. Emacs taught me power of Lisp
4. Emacs taught me how to implement a language core
5. Emacs taught me how to implement a garbage collector
6. Emacs helped me to code and debug
7. Emacs helped me to writeand edit text/mails/documents
8. Emacs helped me to be a effective programmer
9. Emacs made me a hacker
10. Emacs has changed my life
forever
Thank you
Ad Campaign of Calvin Klein Underwear AW 2013
Calvin Klein unveils its underwear ad campaign of aw 2013. Calvin Klein always expresses the idea of “Less is More”. No fussy decoration, no complicate colors, Calvin Klein attracts us with the noble and simple elegance. You can’t help yourself falling in love with it.
Even Powering Down A Cell Phone Can't Keep The NSA From Tracking Its Location
The dmd middle- and backend got little attention over the last years. Especially, when compared to GCC and LLVM. No wonder it produces slower code.

With D it is not a bad idea to use dmd for development and GDC/LDC for release builds.
The drug store was kind of like that in Endicott when I was a kid, when the druggist was out for lunch the sign asked you to put what you owed in the basket next to the register. I asked my Grandmother why people didn't just take stuff out of the store and she said, "Oh no, everyone likes the druggist, no one would want to inconvenience him like that." and so the community was small enough that the trust metric was simply we like the guy behind the counter.

It isn't like that today, and Endicott is quite a bit larger than it was then, and people are sadly a lot less neighborly than they were when I was a kid (could be nostalgia though).

I believe the trust issue was "resolved" by locking the store when the pharmacist was out, and eventually raising prices so that they could pay the salary of someone to be there to help.

And so it is with the PyPI community, everyone is trusting everyone not to do anything bad. And that is a perfectly reasonable strategy, you just have to accept the risk that comes along with it. Sometime in the future something bad could happen if someone chooses to violate that trust.

Now in a classic vulnerability analysis you'd ask "What is the motive or payoff?" You don't put a steel vault door on your home because chances are if somebody wants into your house that badly they are going to come through the window. You accept a certain amount of risk, perhaps you have a home safe for really valuable stuff and insurance for the rest.
That said, LOL!