skysight-inc/HackerNews huggingface dataset:
By comparison, Windows 8 app packages (.appx) signatures involve signing hashes of the entire zip file minus the signature file itself. http://blogs.msdn.com/b/windowsappdev/archive/2012/12/04/des...

If anyone knows how iOS .ipa packages are signed, I'd love to hear it.
I don't understand one thing: how will this filter actually work?

Say I use Google or Bing or whatever over SSL. All traffic is encrypted end-to-end. How will the ISPs know I am searching for a forbidden term? Are they going to request a CA to issue certificates for google.com to ISPs?
It's not just that, but they use information in your accounts to recommend other companies' products. Today I got a notification that I was paying more than average for car insurance, with a link to a competing product.
no its not just you, I wrote a similar comment. This guy who calls himself a hacker actually fits the bill, most of the time criminals exhibit schizophrenic characteristics and to no surprise he wrote a self serving article making himself look good...now I guess I need to get back to my startup before I turn into startup guy walking around coffee shops seeking funding.
What is incorrect about it?
Static Code Analyzer for C/C++/C++11
This is the same bullshit that was thrown around when IBM sold off their PCs to Lenovo.

A British spy agency coming out with information like this but not in public? Sounds like bullshit to me.

Britain would be well advised to steer clear of US branded computers as the NSA might have access.
"Any IT group needs strict procedures on what to do when something like that happen, and the right balance must be maintained between reacting quickly, and not doing things that are either useless or worsens the problem."

The problem here is that the people who would write the procedure are likely to be the ones who acted so ridiculously in the first place. Even if the policy was written, it would likely be so ridiculously detailed (probably indicating which exact software to use to scan for example) that it would be harmful. It would cripple the ability of the organization to respond to newer threats which might not be considered by the authors of the policy, and it would be used as a shield in a future event where an obvious, but not stipulated, response could have solved a problem but went unimplemented.

Like most of the government's problems this could be cured by making the job space in federal employment competitive (and firing uncompetitive employees), however the myriad failed attempts at this in various corners of government seem to indicate that this may be currently impossible.
I actually just don't understand why one person picking up 10 loads of different people's laundry, doing the laundry, and delivering back the folded loads requires less total minutes of work than 10 people doing 10 loads of laundry at home. Yes, it takes less people, but those people spend their lives doing laundry. Yes, servants are specialized workers.

I think there may be marginal efficiencies over people taking their clothes to a laundromat in some cases. But I've never heard of anybody with washer and dryer at home using a laundry service. Typically they'll just hire a maid to do their laundry if they really need it.
Jonathan Brossard gave a great talk about this at defcon last year. Around the 2:30 mark in the video he talks a bit about the idea of China backdooring hardware.

http://www.youtube.com/watch?v=yRxDvkKBMTc

http://www.slideshare.net/endrazine/defcon-hardware-backdoor...

http://www.scribd.com/doc/101181012/Rakshasa-Whitepaper
Look Error Base (errors detected in open-source projects) http://www.viva64.com/en/examples/
The domain paymentiexpress.com was just registered a few days ago ... And is currently live and not blacklisted by anyone

I'm guessing not for long....
you really don't HAVE to know this to be a good "hacker"

That being said, some people are new to the game. No reason to be elitist.
> but there's no real way of knowing what secrets the silicon holds.

Technically, some places do melt down the chips with acid layer by layer and dissect what is actually in them. It isn't easy, and tough to miss things, though, I imagine.

Will be interesting if we go back to the days when stories like the US managing to get back doored chips into Russia which blew up pipelines and stuff are actually happening.
How to Make Money on the Internet, 2013
'One' may be a good choice also, although singular they also works.

"Maybe one mentors a child in one's spare time."
They're back!
I would say that the difference is that the Web is almost entirely about I/O, which Haskell treats as an unfortunate aspect of programming that is to be made as unpleasant as possible so it will be avoided except where unavoidable.

There are many programs that run on servers, grinding away on deep questions for extended periods with no more than the bare minimum of communication with the rest of the universe---maybe just a terse "42" at the end of a long run.

But the Web is about talking to users thousands of times per second, sending it all in a hurricane of streams to a database, fetching data for each of them from various databases, streaming it out to a third-party credit card processor, sending the results back to the users....

Haskell's ideal of minimal I/O isolated in a ghetto so the "real" work of the program can remain unpolluted doesn't seem an ideal match for the case where the real work is almost entirely about routing I/O streams.
I like how on error he redirects to the application to serve custom urls giving a dual meaning to crash mapping.
It looked like they did. If you watch the video, it starts with "1234" then goes to "0000" and others with no discernible order, other than the fact that they are common choices.
I honestly cannot figure out which guy (PIH or SG) this article is "making fun of" (maybe it's both?). I've read it twice now, and it can kind of go both ways.

Maybe that's the point.
Unfortunately when defaults are inherently insecure, they lead to people building insecure systems. If every single parameterized SQL command needs to include (possibly multiple) escapes then it'll be missed in some places.

It's unnecessary anyway. It would be way better would be if the parameters were bound as named parameters. Ex:

location ~ /articles/(?<id>\d+) {
postgres_pass database;
rds_json on;

postgres_query HEAD GET "SELECT * FROM articles WHERE id = $id";
postgres_rewrite HEAD GET no_rows 410;
}

See how $id has no quotes around it? The DB driver should parse the parameter and bind it as a string in that position. If you need to use it as a different data type (ex: integer) then you can do an explicit type conversion. That's how you prevent SQL injection.
Maybe the OP refer to freelancing. I know some freelancers getting around that. I assume if you're good, you will get paid a lot.
I used to use rsnapshot with command= set to a custom script that would let a few things through (rsync being one of them), by instrospecting `$SSH_ORIGINAL_COMMAND`.
Place IKEA furniture in your home with augmented reality
Well, but my Haskell code does not have to beat the best possible c code but only my best c code ;)
How about actually coding on the go? Has anybody ever tried to do semi-serious Ruby or Rails coding on an iPad?
I'd answer this by saying "I work from home so that I can save those expenses such that my business is profitable"
Unfortunately your economic rationale makes little sense to most people, even quite a few economists.
30x to 50x claims are the result of a terrible CPU implementation. When normalized by power consumption (e.g., TDP) or by acquisition cost (assume high-end rather than consumer versions, as with all supercomputing centers), you'll find about a 2x advantage for operations like DGEMM and much less for other operations. Strong scaling is important for many super-computing applications and accelerators like GPUS and Intel MIC are much slower for that purpose.

For examples, look at the MKL benchmarks for Xeon Phi (http://software.intel.com/en-us/intel-mkl/) and normalize as 3 Sandy Bridge sockets per Xeon Phi (common configurations pair one SB socket with one Xeon Phi, the Phi has more than twice the TDP and costs more than twice as much). Don't forget to look at QR and Cholesky, for which the Phi at best breaks even, but only for enormous matrix sizes.
Dreamliner Grounded for Days Amidst Reports of New Electrical Problems
Changing the world is the new blinking text, or rounded corners.
Humble Bundle responsible for over half of Sword & Sworcery sales
When I think of "Dead End Job", I think of a clerk at a convenience store or fast food joint, the guy who drives a tractor for the company that won the contract to cut the grass on the side of the highway, or the janitor comes to clean our offices at night.

It's hard to imagine a working programmer making $80K at a stable company as being in a dead-end job. Maybe in the strictest sense of the word it's a dead-end if they don't have the opportunity to advance, but if that is the end, then they didn't do so bad - and if you're in that situation and you do think that way, ask the janitor who empties your trash at 8pm how he feels about your dead end job.

If you feel like you're not reaching your potential, then yeah, I know what you mean. I feel the same way. But me not reaching my potential is different than having a dead end job.
Show HN: Gray Rank - Amazon product ranking data
When 'Smart Homes' Get Hacked
Their slogan is to target jingoists who look at 'made in america' as something special.

The slogan is "Designed by Apple in California." The new MacPro will be able to add 'Assembled in the US' if they wish, and I expect that they will.

It's still all made in China, but flag wavers get to ignore that. Apple is not the only company that does this.
Off-topic, but
> I never supported the 'Occupy' protests mainly because you can't influence a corporation by yelling at it. Sitting in front of those banks in NYC or wherever didn't actually change shit. You know why? Because businesses are not in the business of making people happy.

I don't think a single Occupy protester on Wall Street believed that they would get one of these too-big-to-fail financial institutions to change voluntarily by them "yelling at it." They were trying to shine the spotlight on what they felt the real problem was, and change the national discourse, probably with the long term political goal of changing the laws to change the incentive structures of those businesses.
This is really useful for artists like musicians and so on... How do you plan to market it? What is the core audience?
The Art of Irresistible Email
ymmv; I hate web development but maintainability is the least of my concerns. I have frameworks for that.
In France we have a saying about politicians' promises: "Les promesses n'engagent que ceux qui les écoutent.", ie. " Promises are binding only to those who listen to them.". It must be a good thing they try to erase them from the web.

LOL
You should join my startup as chief growth hacker. We'll pay you less than you're currently making, but you'll change the way people are changing the world.
There is http://wiki.nginx.org/HttpMemcachedModule, but it's not really the same thing.... Cool though.
I think if you’ve got an example of an open-ended read loop, and it collects numbers, and you’re printing something that says “Total:”, it’s reasonable to ask whether the intent was to print the total of the numbers collected by the loop so far.

That this side discussion has happened almost makes my point for me. If the Haskell code had described what the mutable state actually was (the total to date or the previous entered value) rather than getting hung up on the fact that it was mutable state at all (even as written, the term “state” appears five times in this trivial algorithm) then we wouldn’t be having this conversation.
The correct link to the Reuters article is
http://www.reuters.com/article/2013/07/26/net-us-hacker-deat...
Vagrant 1.2.5 released
C++ & π
The thread op assumed that the code was supposed to accumulate the amounts ever entered. The Haskell code doesn't accumulate, it adds you input to the prior state, prints that sum, then stores your input, not the sum as the next state.

Of course, that's just a (likely true) assumption of what the behavior was supposed to be and it extrapolates far from the point. The example didn't really intend to show off a particular behavior but instead the interweaving of effects.
Apple buys HopStop.com for $1B
Wouldn't you be throwing away your ability to add a caching layer. I guess their are ngx modules for Memcache/Redis but coding even a simple api in nginx.conf can get difficult?

I still like the idea of nginx being able to communicate with different datastores. For example, let's say you want to serve a file but it requires authentication, you can pass some signed request via query string and cross check it in session in redis/postgres wherever.
Personally, I don't advance solely because of the money. My main motivation is facing and overcoming new challenges. I've worked for a couple startups and another small company. In my experience I face challenges at the start and overcome them while leaving my imprint. Soon after, things are better then when I showed up and the place starts feeling stale. I suppose I just hunger for more punishment. :p The increases in pay are just an added bonus that makes the other stuff in life slightly easier.
Doesn't couchdb accomplish this? (out of box REST API with little config)
The story about the text-only website made me smile.. would have loved to see the numbers!

Going to give adwords another shot.
And their statement says that what they got was not what they expected.
Looks a bit like a bat when they are on the ground, pretty interesting stuff.
Halliburton pleads guilty to destroying simulations related to the gulf spill
The mental load of using a single language as a bilingual
I would implore blog writers to not do this. I realize it makes the code easier to read, but even if you loudly disclaim "THIS CODE IS INSECURE DO NOT USE IT AS-IS" there are plenty of copy/paste coders in the world who will do exactly that, perhaps even intending to come back later and add in the protections, but never actually get around to it.
What are the Dangers of Method Swizzling in Objective C?
Windows Phone 8 locks for 1 minute after 5 wrong guesses and then doubles every wrong guess after that. So the 6th wrong guess is 2 minutes, the 7th is 4 minutes, etc.
"Total: " implies that it's meant to be summing the input values. It's actually only summing the current and the previous, because it puts back val not (val + state).
Huh, are there actually Startup Guys who want to "make the world a better place through technology?" I thought the basic plan was "build and maintain an amazing, indispensable service for exactly long enough to get bought out by Google/Microsoft/Yahoo/Apple, then retire to Tahiti while the new owners fire everyone and ruin the product."

e.g. Siri before Apple: http://www.huffingtonpost.com/2013/01/22/siri-do-engine-appl...
It's evidence that it's viable, whereas now it might be great in theory, but there's no direct evidence that it works in practice for large-scale projects.
New edX courses
for a second i thought this was mapping ethernet packet collisions and i thought it was cool but couldn't figure out why we would need a heatmap
>...as the NSA might have access

Might?

Anyone recall how the USG was requiring backdoors into all routers/switches? I was told about this in 1997 from a Cisco employee who told me they were required to provide a method for the USG to be able to log into all devices they make.
Legal Weed is Hurting San Francisco's Hippies
http://en.wikipedia.org/wiki/Karen_Silkwood
Apparently it's rsh, not telnet. The telnet manual does mention it though, since you can put telnet in a rsh-like mode where ~ does work. (May depend on telnet version.)
It might actually make sense to Snowden to get some level of guarantees of good treatment and fair trial from Holder, and then take a commercial flight to US of his free will

What an arrival it would be!

If he got to decide the choice of jurisdiction (or Hawaii), civil trial with a jury, fair treatment and legal advisory, he would even have a chance of getting the jury to nullify - and worst case of 10 years (?) would not be unbearable compared to a lifetime of exile

As a side note, I don't really know how Holder can state that US does not torture with a straight face
They'll "memorialize" an account which stops it from showing up in friend lists and what not.

Honestly, I kind of like the way that's handled. Whatever I put on facebook is private to me (and me alone, not whoever survives me) plus whatever I allowed that information to be shared with either on site or with legal documents.

No pre authoriation, no sharing.
I interpreted your original comment, "Uptime has never really been Heroku's strong suit", to refer to application uptime. I guess you're actually referring to something different.

AFAIK, when any other provider speaks about "uptime", they're referring to whether or not the service they're selling is up and running. For AWS, that'd be whether your instance or ELB is up and running as expected. For Heroku, it's whether your app is up and running.

Issues in the control plane that affect your ability to make changes to your resources are generally outside the scope of any "service uptime" numbers you see published (unless that uptime is specific to the API/control plane).

Edit: We do our best to publish info for both the service, and for its control plane. I would agree that our status site categories ("production" vs. "development") might not be the best way to label this split. Previously we used "app operations" and "tools". We may yet change it again.
Great for a quick little hack, but I wouldn't want to maintain that conf file once the project grows.
The code they have right now is slower with respect to method calls than all previous implementations. The C code worked. The low-memory Java that replaced it worked. The Java version that used less method calls worked. It was the person who then came in later whose job was not optimization that broke the reader while trying to fix a correctness bug.

One argument is that the code was now sufficiently complex due to the optimization that it was bound to confuse him. Another is that the other bug (the CRC one) was caused during the optimization sweeps that could have been handled elsewhere. (So your point to me largely stands, but I wanted to correct the timeline. I agree that spending time fixing inlining to help the entire codebase would have stopped the timeline of events that led to here, possibly not just on accident.)
making the world a better place... mostly for themself, though...
Overdue Starter League Review
Ensuring that those documents are valid is considered "discretion"...
Your summary does not describe the story of Siri in the linked article accurately at all.
Agreed. Accelerators can certainly lead to speedups, but it's hard to overemphasize how important it is to also have an optimized vanilla pure-MPI implementation (if nothing else, to compare the 'accelerated' version to).
Last I checked User based analytics is directly against the Google TOS. You are not supposed to store any identifying information about specific users, probably because Google has been under privacy scrutiny. So not only is google not for user based tracking they prohibit it, making them a real non-starter in any case.
Same developer made this:

https://github.com/agentzh/redis2-nginx-module
USG? I've seen that show up quite often the last couple of days, but never explained. Google says it's USG Corporation or University System of Georgia.
HDMI does provide power [0], but a very small amount (elsewhere on this thread someone said 50mA). MHL provides more.

[0] http://www.hdmi.org/installers/insidehdmicable.aspx
One is too many?
Correct. In fact, in my section "Serious Limitations", I directly reference the article from Android Police and quote from its at-the-time understanding of the vulnerability.
Imagine this being used on commercial aircrafts...

Captain: We have now landed at SFO. We will now taxi to gate A3.

Passengers: OH CRAP. bumps up and down

But in all seriousness, this could be a precursor to a more fluid form of wing morphing, i.e. without joints. Sort of like Eddy in Stealth, which morph its wings to direct jet exhaust downwards to create vertical lift.
The connection between criticizing targeting certain demographics with disposable income for completing a chore vs not catering to him (your original charge) is not made, despite your clarifications.

The original commenter was neither complaining about the world's startups, nor about lack of personal catering.

I suppose I read your comment as far more specific than you intended.
I think you probably missed what I said higher up.

> I'm thinking of a third robot that interacts with our existing and totally fabulous washing machine and dryer robots instead of a human.
Interesting, I wonder if this will lead to boycotts of Chevron? It does appear to be a pretty large human rights violation.
IMO the very nature of the centralization of power works against individual rights, one of which is (arguably) privacy. As corporations grow they tend to lose a sense of the customer as a means, and instead choose which type of customer they need in order to maximize profits (or other goals).

Corporations (or any large centralized power base) will optimize for the most exploitable customer or user base, culturing this base if possible. To help broaden a target user base corporations need strong centralized governments more than they need even sizable (but less "culturable") segments of their market base.

Upshot: mature corporations (political parties / religions / etc) will not typically stand up to a centralized government on behalf of a rights-demanding fraction of their market... indeed, typically, they will do the opposite.
It is good it is fixed. Show it how it was filmed and framed. Still goofy for people to rage out hard on. Netflix is a great value and provides a great service cropping or not.
We can't assume that GP's CIO is not title-inflated.
I was a TA at this one (and the last). It was really great to see the high turnout and how passionate the organizers are. Many thanks to all involved.

If you want to improve your people skills and ability to explain technical concepts (I'll be honest, I'm not very good at either, which is why I do this as practice), I really recommend answering beginner questions from people of a different background than your own. Apart from getting better at teaching (you work in a team, right? You need to explain your code) you can get a lot of insight into how programming language design is user interface. Users are a diverse group.
"But certainly any threats, no matter how minor, need to be eliminated.”

-Barnaby Jack
United States Government in this context I think.
To chime in with another viewpoint: I've just written a sort of remote-control solution that can use WebSockets and fall back to SSE (Server-Sent Events) + HTTP POST if necessary. I wrote it in node.js, which I hadn't used before, because it had (has) great libraries for both WebSockets and Server-Sent Events. So I though I would put to use the adagio "best tool for the job". I don't regret it because I was able to write this thing in about 5 days and together with runit restarting it when it throws an exception I have a solution that hasn't failed me yet.

But... I really kinda hated the callback spaghetti, and no matter what library I tried (Step, Async, ...), I couldn't get myself to feel more comfortable with it. So I decided I would only use node.js when the libraries make it too hard to pass up.