skysight-inc/HackerNews huggingface dataset:
Ok, that is a pretty compelling argument in favor of non-open source software.

I read it to say that GCC is so open source that it cannot converge on a stable release. Further there isn't a non-commercial (aka free) incentive for making it stable, so it doesn't converge. Rather it trundles along from new optimization strategy to the next constantly in a state of minor bugginess. The economics of 'sold' products uses the loss of revenue as the incentive to maintain quality, without that incentive its hard.

Google has (had?) a pretty good sized team that did nothing but maintain GCC. I'm sure it cost them easily $1M/year to keep that team going. There is no incentive for them to fund a team like that in a third party such that everyone else benefits from their work. Sure they offer the changes back into the base product, and somewhere else there is another team working for company Y that is taking those, porting them into their effort. In this article from Marc he mentions himself and 5 other developers who are the "compiler people". 5 developers, $120K each, that is .6M/year before you add insurance and office space.

And those 5 have their lives made more difficult by the dozen or so folks who are committing in changes that destabilize parts of the code or require side ports.

It makes me wonder how many people there are like me who would be willing to pay $100/year for a bespoke C compiler that was supported by a single source and stable.
Oh, absolutely. I measure virtually everything I do in my life in terms of the opportunity cost of other things I won't get to do. And the more interesting my life and work gets, the more people want from me.

Before I started working on my startup, I had a solid reputation as a photographer in the local burlesque community. I quit photography almost entirely in order to focus on my company, much to the disappointment of many performers. But that no is buying me so much time!
Show HN: A lightweight frontend to the Spreedly API
In my opinion, this is the best example of a selfless action that turns itself into positive a valuable marketing. Volvo gave up profiting millions (billions?) for "the sake of mankind" which gave them an image of a company that cares, not only for their customers, but one that cares for everyone.

Well done.
I prefer not hitting tab at all because my editor already knows how far to indent. But when it does indent, I like it to use tab characters as a way to distinguish semantic indentation from alignment indentation.

And because emacs and vim are still "dumb" editors in some ways: They still conflate the arrow keys with "move one character", when they should really mean "move one character, unless you are in non-alignment indentation, in which case move one level of indentation, which happens to correspond to four spaces since this particular file is python." They have similar problems with backspace and delete, regexes and search/replace, etc.

Further, what if you prefer 2 or 3 space indentation? If you use semantic tabs, you can have that simply by changing the display width of the tab character. It needn't be equivalent in width to 8 characters. To my knowledge, emacs and vim are both too dumb to display code indented with spaces at a different indentation width than saved in the file.

Note that when using semantic tabs, tabs only represent semantic indentation. A new block adds a tab. Further indentation for the purpose of aligning multi-line statements must be done with spaces. Tabs following spaces on a line are always wrong. Tabs are not to be used to align to columns. If you want to do that, use spaces.

For example:

def foo():
--->if (long_named_function_that_returns_a_boolean() and
--->....thing2() and thing3()):
--->--->do_stuff()

And again, with your editor reconfigured to display tabs as two characters wide:

def foo():
->if (long_named_function_that_returns_a_boolean() and
->....thing2() and thing3()):
->->do_stuff()

Basically, tabs get you several niceties with partially-dumb editors like emacs or vim. Indenting with spaces gives that all up and all you get in return is the ability to view code with notepad.exe.
There is another huge step missing here - proof of causation. How do they know it was their web searches that caused the visit?
Working Demo at http://bitmonet.com/demo.html.
In many web application frameworks, CSRF tokens are session scoped. So an attack might look like this:

1. User logs in to target web app (e.g. hapless.com).
2. User visits your malicious content (e.g. evil.com).
3. Your page does a BREACH attack, issuing tons of HTTPS GET requests (by creating images in JavaScript, maybe) to hapless.com with query string parameters that manipulate the response.
4. You observe the responses and recover the CSRF token.
5. You attack the user with a standard CSRF attack on evil.com or elsewhere.

Note that this attack requires the user to interact with attacker-controlled content via a MITM'd connection.

> I imagine tons of applications do this, but it's nowhere near as far reaching as CRIME.

This is very common in web applications. Echoing query string parameters in the server response is the basis for reflected cross-site scripting, for example. And in a complex web application, tons of pages will have CSRF tokens embedded somewhere.

I do agree that CRIME is a much more dangerous attack.
Snapchat Founder Discovered He Had No Equity In The Company
> even a fully nude one isn't NSFW until some person's reaction to it negatively affects themselves or their co-workers, and even then, it isn't really the image that is to blame.

I can understand this notion, but I feel that there is more to consider. I take NSFW to mean "would you read this at work". That is something I wouldn't think of opening at work, just to avoid things that MAY happen. For example:

- My computer isn't in an office, anyone can look and see what I'm doing when walking past. Someone to my boss, "I saw X looking at Y on his computer, I was offended" (in fact I didn't even open your link so that this or something similar doesn't occur)

Why even risk this sort of situation?

I think this is at the very heart of the phrase "NSFW". I'm on a news website, I don't want this to negatively affect me in any way, it's a "safe for work" site.

Back to the breastfeeding image. I will agree that on the whole, a good chunk of people would say that this is a safe for work picture. But because of workplace culture at certain businesses, I feel that this is on the boarder at best.
Anything "growth hacking" and "social media" are literally jobs where you're paid to shill and spam.
Seems like ad networks should be liable for the javascript they serve up. There has to be an incentive for them to check it out, and they should strongly prefer that their clients NOT have any javascript.
Who would the JTTF be made up of?
Moto X phone specifications
People seeing the value of correctness. Proofs >> Tests.
I don't want to put down either Windows Phone or the markets in which it is selling well, but a big factor in Windows Phone's market share is Nokia's historic dominance in a few markets, like Russia.

That's qualitatively different than Apple's stronghold markets. It will be hard to defend from big OEMs like Yulong/Coolpad that focus on developing markets. Yulong is muscling in to the top 10 which means either Blackberry or Nokia will fall out. The fate of Windows Phone and Nokia are inseparable. No other OEM will pick up that ball.
Google's caja is that software:

https://developers.google.com/caja/
Most likely, if this became a common thing, you would have your ISP take action because you are running a "server".
I have this problem too. Am I supposed to be able to derive a date from the calendar? Am I missing some element on the page?

I generally don't have a lot of interest in time, so I don't have whatever relevant knowledge this might require (if any).
This is a poor response - I had posited "every few years"
People's beliefs are simply not prima facie evidence of what is actually happening though.

Many people believe the Earth is 6000 years old.
Many people believe it's impossible for humans to have evolved from apes.
Many people believe gay people simply chose to be gay.
Many people believed that Sunil was the Boston bomber, right up until it was proved it wasn't him at all.
Many people believe that God will heal their child of disease modern medicine eradicated 100 years ago.
Many people believe that vaccines cause autism.

In short, many people believe the dumbest things.

To the extent that these things are inaccurate they must be opposed; otherwise you can incite public panic by fearmongering and worse, the people who perceive accurate problems get lost in the noise of the crazies.

To the extent that these accusions are accurate, reason and logic are certainly the way to make that clear. You may get more followers with FUD and rhetoric but those tactics are still just as distasteful when used by us as it is when used against us.
Really asserting your rights gets you even more screwed by the police. You usually catch a charge relating to resisting arrest, or even obstruction of justice.

What I've often wondered is if we could just troll them somehow. Something to the effect of, if at every traffic stop everyone said, "I'm not sure, but I think it's possible there's a kilo of heroin in my trunk."

Obviously more thought is necessary for the idea, and you'd need a big campaign, but for non-terrorism related issues (nth disclaimer, my view differs from much of HN on that subject) it's time for the government to stop searching citizens on a regular basis.

I literally can't believe we have roadside checkpoints, which we all know aren't simply for DUIs, and "stop-and-frisk" as fully condoned policy in American cities.
And people's birthdays wouldn't rotate around the days of the week, which would be lame for 5/7 of the population.

Edit: back to Forebruary, I think it's quite nice looking. and the timeline at the bottom is awesome. Reminiscent of the timeline in "Rock Me Amadeus". one of these things is not like the others...
"And with respect to DDoS, NoScript wouldn’t help because we could have done it all with HTML,"

"RequestPolicy" on the other hand does work against this. For example, when I visit threatpost.com, it wants to pull in content from the following external domains:

kasperskycontenthub.com
addthis.com
gravatar.com
wordpress.com
google.com
twitter.com
google-analytics.com
cloudfront.net
fonts.googleapis.com

RequestPolicy blocks all of this by default, and the site and content is still perfectly readable.

In my browser it takes 39 http requests and 1MB of data transfer to view the page. If I were to disable RequestPolicy however, due to all the extra pointless crap the site wants to load those numbers would increase to 86 requests and 2.3MB.
They don't need a search engine's cooperation for this. They need to intercept the http request between a user and the search engine. It might look something like 'GET /search?hl=en&q=pressure_cooker.....'

See the recently leaked slides on X-Keyscore.
Well that pretty much was the case, right up until 9/11. ;)
"Are the days of question headlines on HN over?"
Mr Bylund's article has some points, but I rather read scientific critisism than political.
The Guardian quote is incredibly weaselly (when ellipses appear in a quote it's a good sign that liberties are being taken). The same person stated that no one from the JTTF visited her house in any capacity, which includes police involved in the same.

So thus far -- assuming that the police aren't lying -- we've gone from terrorism task force visit caused by Google searches (that they do "100s of", apparently), to maybe, possibly, some local police visited her for some reason.
This is very interesting. It makes me wonder how it could be countered.

If I understood the points of the article correctly (but, to my shame, I haven't read it very thoroughly -- I'm posting this more under the excitement of the moment), one could get some basic success by inserting small, random jitter into the timestamp it sticks on the packets. However, this isn't exactly stellar because, if the attacker can collect enough data, averaging out the random jitter to isolate a constant (or constantly-changing, which is a good approximation for most hardware clocks over the period of time we're considering) skew.

So perhaps a better option would be to add a biased jitter that gets changed at some more or less random, but short enough interval?
What do you think "Joint" in "Joint Terrorism Task Force" stands for? It's FBI working with local Police Departments, which in this case sounds like tipping off the PD to go check her out.
Also, the cockpit doors are reinforced.
someone did a little twitter campaign to get brad feld's name some support and brad retweeted it, so looks like he's okay with the idea :)
Ooh, which companies? I haven't come across any yet.
https, now I've just got to remember not to otherwise search for backpacks and pressure cookers!
Hootsuite is quite useful. Unlike Twitter, you can schedule tweets and view your past scheduled tweets. They also provide a lot of different metrics (which I have yet to its full potential). The navigation is pretty good though I think some features could be added/moved around (for example, being able to schedule Instagram photos). But other than that, I give Hootsuite two thumbs up. Congratulations!!
Some more reasons for not using medium.com though I don’t care them
> what exactly generates the distinction between Americans and non-Americans.

It is generally assumed, that a country's law applies to two groups of people: those in its territory, and citizens of the country. The Constitution is American law, therefore it applies to two groups of people: those in the U.S., and citizens of the U.S. abroad.
What are percentiles and why do they matter?
While that's what vodka is often thought of, most people (of people I know, 100%) who have tried vodka at least once will say that they dislike the taste of either some or all vodkas. And there are certainly vodkas that I like the taste of (though admittedly, not enough that it's a drink of choice for me). Most of the time that I drink vodka now it would be with an energy drink, and in that mix I can still like or dislike the vodka. But generally I won't care too much after a few drinks, and if I'm drinking vodka redbulls then chances are the first few drinks will flow quickly.

Whisky, like vodka, if mixed (say a whisky and coke) is very noticeable what the taste is - though I'm not a fan of this at all, as I consider it a waste of whisky if it's good, and an inferior drink to other mixers if it isn't.

Have to say that when drinking cocktails (as opposed to mixers) I've never paid too much attention to the specifics of the spirits in them.
I've got some links about Barbara Streisand.
It's by design to provide as much exhibition space as possible.

At least in the Ikea stores in my region they started to provide shortcuts. When using all of them, it's hardly 5 minutes to get through the entire shop from entry to cashier, where it otherwise takes half an hour. (but then you see practically nothing).
This is a great writeup. Any time we can bring subconscious "gut feel" into the conscious is a win for everyone, and uncovering these kernels of truth has got to be enjoyable from a CEO standpoint.
Seems like site owners should be liable for the arbitrary third party content they allow ad networks to inject into their pages.

If you don't want your sites security to depend on a third party, don't allow that third party to run code on it.
Does anyone see a full spec list? What sensors does it have? The page linked seems to only list some features.

Edit: "People are skydiving out of space ships." [Citation needed]! What ship has gone to space and also let someone skydive?!
No one has even asked them! she should also FOIA this incident. My point is that it's all speculative at the moment.
Six strangers with guns coming to your home and demanding to conduct a search is hardly a friendly visit. And however cordial they are, they have the right to use any violence against you - including lethal - at any moment they decide there's anything suspicious, and the experience suggests even if they are completely wrong worst thing that would happen to them is suspension with pay. As for you, anything you say to them can and will be used against you, and any factually incorrect statements, however trivial and minute the incorrect part is, that you make to them can be grounds to a felony prosecution if they so desire.

So I don't think it can be dismissed as a friendly encounter. I would certainly feel extremely discomforted by such a visit.
I hope they are enjoying all the porn I've been watching.
God forbids you ever get raided in the middle of the night by a swat team because of an administrative error, or minor offense.

With a knee on your back, your face pressed against the ground, barely able to breath and watching your wife going through the same thing. You then might re-evaluate the hyperbole, but you most likely won't because of the feral panic state you would be in.
I really don't like this sort of intentionally-dense argument by definition. Certainly the police could be called a "gang" under some definitions of the word, but we all know that the implication of "armed gang" in this context is very different. Words have nuance.
My thought exactly: Is it now very dangerous to combine compression with encryption? Is there a general mitigation strategy or are the two mutually exclusive?
I thought that clang was open source?
I don't pay a single penny to use clang & llvm.
I've been using clang in FreeBSD for a few months now and it seems to build faster than gcc.
I was annoyed at the condescension of "internet meme", and was commenting on that.

When the clear potential for abuse has been thoroughly documented, getting nitpicky on actual abuse seems like a waste of time.

Of course, were I to get nitpicky, I'd say there is documented evidence of abuse (with NYTimes reporting going back years): http://www.techdirt.com/articles/20130731/16193324027/nsa-bo...

--

EDIT: I do believe there's a difference between the potential for abuse and actual abuse. But I further believe the potential for abuse from global surveillance is so significant that even the potential is a dire problem in its own right. I was a bit too flippant about that distinction above.
Using laws as a basis for morality is deeply, deeply confused.
Docker: A 'Shipping Container' for Linux Code
There is only one solution to this. It is fairly low tech, and it's not a popular one around here.

Get involved in politics.

It's tempting to believe you can enact change from your desk chair, writing smart code and angry tweets to outwit the spies and inform the people. Well, we're not there just yet.

The people making the decisions that lead to these events - the most powerful people in the world - grew up in an age where, to produce change, you would get out into the streets and stir things up. Step out of your comfort zone, address the public and bring them to your side. Many people don't see the harm in a surveillance state. To prevent one, you must show the public why it is a bad thing and how they can speak out.

Democracy only works when your views are heard by those with the power to bring change. Not the background rumble of a subjugated people, but the articulate demands of an informed electorate with high-profile spokespeople and popular support.
It is possible to get (and fight) and charge like Obstruction of Legal Process, but it is /not/ true that asserting your rights often gets you more screwed. It can, but it is more likely that the cops will back off and let you go. A simple youtube search for videos of people insisting on their rights shows this. Perpetuating the "you'll be fucked if you try to demand that police act legally" meme is dangerous for all of us, as it makes it more likely people will simply acquiesce to illegal searches (which makes them legal) etc.

I don't judge anyone who because of fear, history, immigration status, responsibilities, etc doesn't want to go toe to toe with a cop, but it's simply not true that the cops will usually just arrest you. Usually they back down, and occasionally escalate the situation.

I would not joke about having a kilo of heroin in your trunk as that gives probable cause for the search.
It was implied in the story that the husband was looking up how to create a pressure cooker bomb as well out of curiosity. Even that might not be enough though. If FBI are smart they just classify each user into brackets of suspicious activity. The top N% get investigated, where N depends on the current available resource/budget. Not hard to believe at all.
In economic terms, the purpose of patents is to protect capital investment, not reward talent or inspiration or luck. So if you're a super-genius that invents relational databases in an afternoon, it doesn't serve the economic purpose of patents to give you a patent on that invention. The reasoning is that because it cost you almost nothing to come up with that invention, you're not disincentivized from inventing by someone's copying your technology.
What's my device user-agent & ip?
What about polls?

^ They're crap

^ I like them
I expect that it's because in twos complement representation -1 is represented as all bits set.
That's certainly better than setting it all out to float in the ocean as new garbage islands.
Mixee Labs Launches 3D Printed Snap Wallet Creator
An introduction into Qt - Part III
I had five customers sign up on my first day. Healthcare startup
Last week I launched my healthcare startup and had five customers sign up on the first day. I posted ads on craigslist that led to the site along with Google Adwords (one signup from Adwords and four from craigslist). I like the ROI on craigslist a lot more :).<p>I'm currently mechanical "turking" the backend of the site and finding imaging providers for the patients myself (along with getting a discount for an available slot).<p>Long of the short, I'm running into this problem.
I've plateaued on my customer signups. Does anyone have any good thoughts on how I can find more patients to sign up for this service. If I can prove my hypothesis that patients come to me for high priced medical scans, I'm in business.

Here's the link to my site: www.opendoorio.com
I'm curious why compiler testing appears to be so hard. It seems to me that: Given this C input, this AST should be built, and on this platform, this code should be generated. This should be testable through automated scripts and numerous test cases could be created for new features resulting in huge regression suites. Am I missing something, or is it the effort of putting together such tests that's the problem?
Hello Moto X
Hey, Bing even suggests "pressure cooker bomb". Let's see...
You also have the right not to disclose your immigration status to ICE without speaking with a lawyer first, you have the right to have your consulate notified if you get arrested, and generally cops aren't allowed to just randomly ask people for their immigration status.

Note: at the border none if this applies. It is pretty much a "rights free zone"
Simply awesome work.
Google Analytics adds a Real Time API
Really wish this would have made the front page.

It's a serious bit of introspection from someone who came very close to the top of her field, works in a creative space, and has to make and prove herself every day.

There are a lot of lessons in here, especially for the younger HN crowd (though us old farts might also pick up a tip or two).
Oh, neat! I don't have to feel dirty now.
Fuck this. I never want to live in the usa.
For example: Detroit

http://www.epa.gov/region07/air/title5/petitiondb/petitions/...