skysight-inc/HackerNews huggingface dataset:
... and thousands of HN readers get infected by a zero-day exploit. Maybe. If you're thinking of submitting a known compromised site to HN, consider instead submitting a third-party site which explains/documents the compromise. Ideally from a respected security research company. This has several benefits:

1. You're not subjecting HN readers to a site under the control of a malicious party who may have done more than just deface it. Even if you verify that you only receive plain boring text with no scripts, iframes, plugins, etc. it's impossible to verify that someone else won't get served different content. For example, malware that only gets served to people in Israel.

2. Once the compromised site is restored, people visiting the link won't see what happened. When you link to a third-party article, that article will persist even after the hack is long since gone.

3. Linking to a security research company will probably give better insight into the technical details how the attack happened, gratifying our intellectual curiosity, instead of just being a dumbed-down piece from some mass-market tech blog.
Totally agreed here. We love the name.
I think you're going to find that even with no attention to allocation at all, your Golang programs are going to outperform their Ruby and Python equivalents.

That's a dicier assertion to make versus other languages, notably Java, but if you're coming to Golang from a high level language like Python, you're probably going to be happy with the performance you get out of naive code.
Anything extensively on 1base when you should be on 2base. If 1basing, your limited resources all go towards one attack, or one attack with a small follow up.

If you defend against it, you pretty much win as they sunk all their resources into early low tier army, instead of economic balanced expansion.
"I'm an expert..." Lacks taste.

You may say substance not style, but I prefer style & substance.
My biggest project probably takes about 5-7 minutes to compile in dev mode (no optimizations), and about 15-20 minutes with -fllvm and -O2 on a not-super-beefy i7 laptop (I haven't really timed it recently.)

It's not noticeable in general, since only the Types.hs affect many different files, and they're rarely changed. Also, 99% of the compiles are partial, i.e. only the files that have changed (or dependencies of them) are recompiled. Partial compiles don't feel slower than ones on my smaller Haskell projects.

Is it annoying compared to e.g. Go? Definitely. But it isn't ruining my life. And there's a lot of optimization, fusion particularly, that goes on in the background.
The point is not that it looks the same (although it does). The point is that videos load much, much faster than gifs. I've seen gifs converted to videos, with the video loading 30 times faster than the gif.
I got one too, for development purposes. Wont be able to use it as my primary phone until it has OpenVPN and OpenPGP support though. Suspect I'll be waiting a while.
Determining the fixed salt by using brute force is not feasible if some modern hash function is used. The fixed salt can be easily quite long, think about something like 200+ bits.
Maybe I didn't read the code right but where does it check whether a retrieved buffer is the right size? The makebuffer() routine appears to generate random size buffers but that length then doesn't get checked.

My experience from embedded systems is that buffer rings are great if you can predict two or three common sizes that cover your typical allocation needs.

I think even for people that work mostly in GC environments it's a good idea to read through the basic mechanism of heap management and allocation strategies. This article is a good intro to the basic idea and I like the charting and analysis being done.
Aren't we seeing a lot of DNS based attacks in the recent past? I remember .pk TLD was hacked not too long ago.

Considering that most of the big sites run local variants of their services using these TLDs is it fair to assume that one of these next ones could be of the phishing kind?
What's the best thing to do - always use the .com hoping that it is safer?
Still kicking myself for not buying the stock when it was $27 :)
As the dateline "by Tony H. CEO on Mar 3, 2008" points out, this was over 5 years ago.

That's nothing good or bad about the company, only that I was expecting something more recent.
What are the downgrades for? Better gas mileage?
You are using these words, but I don't think you know what they mean.

The SOA record is almost irrelevant in this case, unless you are seeing some trickery where they set high TTLs or something to keep the "hack" around longer after it has been corrected.

There is only one root (which is kinda what makes it a root) - and in this case the root servers are doing their job just fine. DNS is hardly even involved. As far as I can tell this was simply a compromise of the web UI that allows for the management of domains under the .ps ccTLD. Probably just another sloppy front end developer.
Feedly dominating the post-Reader world
Ask HN: Where to find customer service folks? 
I need someone to handle customer service - an in-office person, to be specific. I'm in Texas also - any suggestions for which job boards to target? I used Monster last year and had only 2-3 viable candidates out of 10+ replies.

Thanks
I find it odd that we can exist as a community here at HN- with reasonable dialog and exchange of ideas, but yet we can have people like you who wholesale swallow these scanners as reasonable and worth accepting.

The TSA has a history of mismanaging the use of these scanners. This includes the actual operation of the devices as well as the maintenance of the devices. They don't provide meaningful security. All encroachments into our privacy should be fought on principle.

Stop moralizing so I don't have to copy your writing style to make a point. We can disagree on topics. There shouldn't be anything off limits at Hacker News.

The tactics you are employing in your writing style are obvious to any critical reader. Do not embarrass yourself by attempting to shame the community be association. We're all above average intelligent here. Reasonable people can disagree. Unreasonable people try to leverage shame. The community of opt-outers at HN is actually a reflection of the thoughtfulness of the average Hacker News Reader. Thoughtful people can disagree about Nginx vs. Apache, just the same as they can disagree about the value of TSA's naked body scanne^d^d privacy disintermediation proxies.
Yes I want to cut off. Yes I want to be gone 6 months to a year with no connection to my current world.

Algonquin canoeing, I can do that, but for a few months at the very least. I want a unique experience. I want to be so out of my comfort zone I question all life as I know it.

Actually the canoeing/water idea is incredible. It'd be great to travel by water for a few months on a boat.
Pleasure! Let me know if you find any issues. You're probably the first person to use it!
>>In any risk assessment, you have to balance impact with likelihood. Yes, it could have happened, but the likelihood is so rare that it's not worth the premium.

What makes healthcare dramatically different is that, as a layperson, you cannot accurately assess the likelihood variable. You may have some very rough ideas - for example, a professional snowboarder is more likely to get a sports-related injury - but stuff that tends to be extremely expensive is also stuff that can happen to anyone at any time.

This differs from, say, car insurance, where a lot of the factors such as the value of your car, the frequency of driving, your driving habits, etc. are known. As such, you can optimize it much more effectively.
"One quality that's a really bad indication is a CEO with a strong foreign accent...they must just be clueless if they haven't gotten rid of their strong accent."

I'm curious to learn more about this. I'm certainly not accusing YC/PG of being racist in the least, but although I don't have an accent, I feel like I know numerously brilliantly smart people with heavy accents, many of whom happen to be Indian-born Stanford students or Google employees. I think we all know that "brilliantly smart" doesn't necessarily correlate with "great CEO", but it has to suck that something like your own accent puts you at a huge disadvantage applying to YC.
This seems like such a weird statement by them. I mean, so many people live for the offline experience. And I guess, you can make a case that connectedness offers awesome ways to improve your experience, but that certainly should not be required of ALL games, right?
yeah right. because a young man or woman knows more about it.
We're trying out Postgres as a partially schema-less store.

We store arbitrary JSON in some fields, and even build indexes on that data. It's been remarkably fast so far, and other than a few small gotchas relating to type conversions and indexing, is really easy to use.
is it fair to compare Tesla sales to Porsche, Jaguar ? aren't these from a different class ?
Our infrastructure is built as a service. I totally understand that many people want to run their forum on their own network and that's totally ok. There's plenty of products out there servicing that market.

If you were to compare us to blogging companies we're more inline with tumblr than wordpress. We're a service that makes it simple for anyone to add forums and commenting.

Our service obviously isn't for everyone, but we feel like there is a large market for simple to set up and manage forums that can integrate with little to no technical knowledge or expertise.
Not all registries are created equal. I'm a heavy Internet user and I'd get along just fine without the .ps nameservers.
Google's incident response team deals with far bigger issues on a daily basis. This is hardly more than a few kids playing around.
Also, C++, which is the king of mutability, also implements map as a tree instead of a hash table, probably trying to avoid the worst-case linear search.
so what's the idea? oh, you won't tell us...
Startup Founder Mocks TSA Employees For Having Shitty Non-Tech Jobs on HN
I'm still surprised that Telefónica is not selling them in Mexico... I'll have to wait more to get one.
Me too! I would have thought there could be so many things in the number 1 spot ... and then this :)
>>> Higher interchange fees would necessarily "end up resulting in higher costs for consumers" only if the interest rates didn't also decrease.

Businesses do not pass on interchange fees directly to the customer. It is not a line item that appears on your receipt after you make a purchase. This is largely because credit card companies forbid merchants from charging an additional fee to customers for using credit cards.

This means the only way for merchants to recoup interchange fees is to raise the prices of their goods across the board. This means prices go up for everyone, even those without credit cards. So a non-credit card user would see their prices go up as a whole, without the potential offset of reduced interest costs.
Just wait. It takes time.
FWIW: Node.js uses a buffer cache like this by default: https://github.com/joyent/node/blob/master/lib/buffer.js
An OBE can range from a feeling of being located somewhere else, as in this study, or, in my experience, a full-on alternate reality that is every bit as real (albeit different) than this reality. I've learned that our brains (if these experiences are truly contained within it) have the ability to imagine a full reality that is indistinguishable in its "realness" than the one you're experiencing now as you read this.
I feel Dota 2 and probably other MOBA games have a similar effect too. The game is incredibly fast paced. It's like the hunting party edition of RTS games.
... because other people will bear the costs of those effects.

Yup.

Environmental protection is an accounting problem. Convert those externalities into line items on a company's profit & loss statement, voila, no more exploitation.
the draft was used in Vietnam, and since then? not like the US ran out of wars. what the hell are you trying to prove?

and for the record, I am European, Austrian in fact.

and the US is now requiring it's own citizens to use the biometric passport?
http://en.wikipedia.org/wiki/Biometric_passport#Countries_us...

now how about that.

"NL Passports issued from 21 September 2009 include fingerprints. Dutch identity cards are lookalike versions of the holder's page of the passport and contain the same biometric information."

You're misinformed and wrong, but you'll never admit it. Whatever.
Porsche is owned by the Volkswagen Group who has a completely different strategy than Tesla. Volkswagen already makes money off makes and models marketed across the spectrum of consumers (from Skoda to SEAT, VW, Audi, Porsche, Bentley, Lamborghini, Buggati) -- all of which are owned by VW.

The Volkswagen Group doesn't get nearly as much press as it should, but I suppose the incumbent doesn't need it -- they already sell hundreds of thousands of vehicles world wide every year.

That being said, Tesla certainly has a long ways to go, but I think they have a good strategy going forward. Not to mention, I think the Model S is a beautiful car.
This was my initial thought given the dealership limitations in North Carolina, Virginia, Texas, Minnesota, and New York, but do you know for sure how out-of-state sales work?

I'm asking because the report seems to use registrations and not just sales figures to describe the numbers in California[1]. To my knowledge a registration only occurs in the state where you're going to use the vehicle, but I don't know if the process varies for these trouble states.

[1] http://www.cncda.org/secure/GetFile.aspx?ID=2583
Stopped using reader since Flipboard. But after the death of Reader, I find myself using Digg reader instead of Flipboard. I love that popularity dots.

So I guess I'm glad Google off'ed Reader, at least for me.
I agree. This also shows up in Stratego on some levels, with the interesting twist that you can't understand the size of the force in each area.
Forgive me, it has been several years since I dealt with DNS authority, however it still does not change the argument that it was not google who was 'hacked'...the title of this post is just blatantly wrong.
Usually one bad apple won't kill the area rating, they filter for that.

Image search for "schuldneratlas" (a detailed map of private households in distress) to get some impressions.

Or see there: http://www.boniversum.de/schuldneratlas/
It was. Musk stated exactly that in 2006: http://www.teslamotors.com/fr_CH/blog/secret-tesla-motors-ma...
This isn't a DNS issue, it's a SQL injection attack.

ICANN needs to mandate stronger requirements for best practices with web based management UIs. Unfortunately they have little in the way of real control over ccTLDs.

You'd be best served registering ccTLDs and redirecting them to your gTLD of choice (say, .com) and not trying to serve localized content from them.
Example: I recommend a client to hire a specific 3rd party consulting firm that will work side by side with my team from the product vendor. The firm's salesman agrees to my methodology and deliverables. The project starts, and their project team starts making up their own methodology, and staffs it with underskilled resources. I raise this to the salesman, who raises it to the PM, who digs in. So I gather an email chain of all the mistakes his team has made. And their PM digs in even more. The client is getting antsy about missed deadlines all around. So I get an extremely detailed report on every failure their team has made, and send it to the PM, the salesman, the senior partner responsible for the client and senior partner responsible for the practice area. The PM has to save face, so all he can say is, "You're not there day to day to understand." The client meanwhile gets hosed.

In hindsight, once I humiliated the PM, he couldn't turn things around. I should have set it up that they were reporting to me, and pushed them with a "Here's how you can succeed in making the client love you guys" message rather than being confrontational. If they didn't react to that, I could have then replaced them.
Claims for mental disabilities aren't uncommon.
Probably just Kids. Nothing very sophisticated.
Shame that pretty much all of the basic internet infrastructure is so utterly broken.
XBox One details in pictures
Added my 2 cents..
I toured the Ford factory in Detroit where the F-150 is made a couple of years ago and at the time the assembly line was completely shut down because the mirrors (and only the mirrors) were out of stock and they couldn't resume assembly until they were restocked. Who doesn't think operations are important at a multibillion dollar manufacturing company?
... and manifest != manifesto.
Thank you for responding. I just feel that "racial segregation" are the wrong words to use when describing this map. and yes the reasons you have posted are for the most part true. They are now a little outdated but they were things that happened in the past that have contributed to our present. I would like to believe that chicgoans have made many strides in certain areas of the city to become more diverse. But who knows. If we continue to try we can hopefully change our present to a better future.
> I don't understand this animosity towards Google, it's like every little change to the status quo triggers a hate-fest here on HN accompanied with wild accusations

It’s not just Google, we like drama around here.
How to Ease Your Customer’s Natural Resistence
The olden days are not that old. I find myself using static arrays, free lists, malloc and its OO brethren as well as GC when available. All of those things have been around for as long as I can remember.

It's nice not to have to worry about freeing allocated memory but if you write a lot of low-level code there's a certain level of unease about letting the language or OS take on something that can have such a large performance impact.
The article refers to "registrations" in CA. Presumably Teslas sold to out-of-state buyers do not count towards that number.

Anecdotally, whenever I am in the Brentwood/Santa Monica/other nice areas of West LA, Tesla sightings are getting very common. It's like the next Prius around here.
The sample code does not check the buffer size. This is a slightly artificial example to show the technique and have some interesting graphs to back it up.
1pxdeep v1.0 released: Now a Bootstrap 3 theme
>Yes, this is a "map of America's racial distribution". Calling it a "map of America's racial segregation" means someone is pushing a political agenda.

isn't racial segregation is a very significantly skewed racial distribution?

>This doesn't mean that there is no race-based component in deciding where to live. It just means that, as the Schelling model demonstrates, you can't tell how much there is by looking at how much clustering there is on a map.

you very well described why race may be not a direct (or a reliably traceable at all) cause of observed segregation. And i'd agree that claiming strong causation here would require more strong arguments than just a map which to me clearly shows correlation.
Painful Samsung SSD Ad
5 Things Product Mangers Wish They Could Tell Developers
If you want to kick yourself for not buying anything, which is not a wise thing to do considering there's always something growing faster than you'd expect, kick yourself for not buying TSLA options, not the stock. That's where the real money was.
You're right (except for some cases like crypto and regex where other languages "cheat" by using C bindings or unstable versions), but that isn't where it has bit me. In general all my Go programs have been more than fast enough, but on several occasions I've had memory starvation problems that I would not be having in other languages (even if there is a way to do it without doing a lot of allocation and fragmentation in Go.)

I love Go, but "it's fast" isn't a good reason not to improve a subpar GC. (Which fortunately isn't a position the Go team is taking. I know everyone there would like to see a lot of interesting things happen with the GC. It just hasn't been one of the more pressing issues so far, and I've agreed. It's also a very difficult and "boring" thing to work on for most people, so it's not surprising that somebody hasn't just added an Azul C4-style concurrent GC in their spare time.)
We already had an arstechnica article about the same news here:

https://news.ycombinator.com/item?id=6267478
I remember that, and the No2ID campaign. Later on, randomly, I met one of its founders at a conference in Cambridge and congratulated them on their work: regular people objecting to irregular government - that's what it takes.
It is always interesting to see how individuals come at the process of creating something like this. When you combine this with the guy who created a game for his kid using paper and refrigerator magnets to cover up undiscovered parts you can really see the difference.

One of the coolest game developers I met was working at Maxis but also working on their own game, but hadn't written any code. They had a notebook with sketches of things and notes about mechanics and small essays on conflict and resolution, risk and reward. All of the parts that are essentially a game but not the six-sided die, the game board, the art assets, or the code. It struck me how important it was to design the core of something before designing the moving bits.

That said he also had about a zillion little hacks, one page programs that would do some thing he was imagining and trying to see what that would look like.
It really bothers me that auto makers are building pickup trucks to be more mass-market than they already are. The last thing we need is more people driving pickups. If any car should be a niche product, it's a truck.
I assume you meant health insurance, not life insurance.

It doesn't make much sense to me that hitting the limits would be so rare. Why have the limits in the first place if that's the case? If they didn't make a difference, then they'd just be bad propaganda for the insurer.

This random web page I looked up indicates that about 20,000 people are impacted by lifetime limits:

http://www.pwc.com/us/en/healthcare/publications/lifetime-li...

This is not a huge number, but it's not completely irrelevant either. The pool it draws from will exclude the elderly, the study only looks at the people with employer-provided health insurance, and the 20,000 is from the 55% of those who have lifetime limits.

The Census Bureau says that about 170 million people have employer-provided health insurance: http://www.census.gov/prod/2011pubs/p60-239.pdf

So we get about 93.5 million with employer-provided insurance with lifetime caps, and that in turn gives about a 0.02% chance of hitting a cap.

Whether that qualifies as "exceedingly rare", I'm not sure.

In any case, "$100,000 hospital bill" is probably a decent substitute for most people, although the odds of being bankrupted by that are probably considerably lower among the HN readership, at least.
Most of their projects are free licenses.
> The ChromeCast at least notionally supports an open protocol (DIAL). Only it doesn't, because if you try to use it with software other than Google's, it breaks.

I believe that's just called "it doesn't support that protocol".
That shouldn't usually require any explicit support from the runtime; it can exist as library code (and does - for instance Apache Commons: http://commons.apache.org/proper/commons-pool/ ).
wtf? If the person can't be bothered with keeping track of their charges, they deserve a penalty.
Whats up with all the whine about Tesla all the time? There is no news on hacker news when BMW outsells them all?
> Of course, the database isn't actually fully copied.

You mean, Hickey just fakes it? Now I'm deeply disappointed.