skysight-inc/HackerNews huggingface dataset:
Yes, you are right - if dropbox doesn't have it then it won't work. But you imply that it most likely won't have it. And what myself and perhaps others are saying is it most likely will.

The DLL in the blog post is listed as 128KB, out of interest I looked at it separately and I see a .text section with a size of 0x132df bytes. That section will be mapped as executable and every byte in it is potentially useful. Intel doesn't require instruction alignment, has variable length instructions, and several different opcodes map to the same instruction in some cases. The probability of not finding the instruction sequences you need to successfully land an exploit is almost nil.

Additionally, this is loaded in a browser. The hardest part about browser exploits these days is defeating ASLR. Finding DLLs that aren't compatible with ASLR that can be loaded has been one of the main methods of defeating it.

Successful exploitation often requires chaining several vulnerabilities together to get what a single vulnerability would even a few years ago. Anything that can easily be leveraged in that chain is a problem and needs to be addressed.
Or, I suppose, if you're trying to decide which square kilometer of dirt to build apartment complexes on based on projected property value trends (where crime is always a large factor.) These tend to be the people who pay for this sort of data (and thus incentivize its collection), which is why it's put in their terms.
If you're running the browser think you might want this instead: https://chrome.google.com/webstore/detail/secure-shell/pnhec...
> Medical technology has not really moved forward too much for basic care from 1986

This really depends on your definition of 'basic care', and, therefore, isn't a very interesting statement.

My immediate counter-example is this: If someone in that family gets gallstones, they'll want laparoscopic surgery as opposed to the "open 'em up all the way" technique that was actually common for cholecystectomies (gallbladder removals) in 1986.

Also, MRSA existed in 1986, but if it's resistant to the first-line choice of vancomycin, linezolid and other drugs that can cure vancomycin-resistant MRSA didn't exist then (and being in trials doesn't really count as 'existing' because, really, how many people can count on getting in on a drug trial?).
Yeah, I was assuming that you'd want power and water to the property.

That Montana property is beautiful though. Sometimes I'm jealous of you folks in the US; not only do you get rain, you're allowed modern firearms as well.
We got cable in my rural community in the late 1970's so I don't see why they've shunned cable while claiming that they won't use technology from 1986 and later...

Looking back, I wish that we'd had the internet when I was growing up, as well as personal computers, for I would like to think that my life would have turned out differently had I been exposed to programming while still in secondary school rather than during my mid twenties.

I kick myself for not joining the Air Force, because my test scores were high, but in my youthful indiscretion I chose the Army because it seemed more "manly."
(hindsight is 20/20)
Strange, I'm seeing italics in Sublime Text 3 for Source Code Pro.

You're right that the font seems to lack italics, anyone know whether this is just Sublime faking it?
To put it another way: if you live alone, statistics measured per-person are directly applicable to the chance something will happen to you. If you have a family who lives with you, though, the combined probability distribution of something happening to someone in your household changes quite dramatically.
Okay, so I have a question: how can open source geocoding services sustain themselves? Doesn't it cost money to gather all of that data? Where does that money come from if the service is free? I would expect an OSS geocoding service to be a) seeded with data that is out of copyright (basic geography and placenames, b) spruced up with any well-regarded modern free datasources (probably government funded), c) spruced up even more from volunteers donating GPS data.

Would a geocoding service be a good candidate for a state-run utility?
Even if RMS started from a pragmatic standpoint, his position has clearly moved far beyond pragmatism.
Drone's eye view of Burning Man 2013
Did the student tell the teacher? Did the parent tell the teacher? From the story I get the impression that no one actually brought this issue to the teachers attention. The only context we have is that the parent offered to talk to the teacher for the daugher. The daughter declined and just put up with it for the rest of the year and avoided her classmates.

Kids are really good at hiding what they're doing, especially in high school. It's easy enough to not get caught by a distracted teacher that has 20 or 30 other students to assist. If this was happening in the open and the teacher was aware of it then there's an issue, it's very possible that's not the case. Unfortunately I saw the behavior described in this article in a number of classes during my own time in high school and none of them were CS classes. There are people that will be cruel regardless of the context.
I agree with you that it's logically insensible to consider them "errors" because the resolution of the current constraint may change the downstream interpretation.

However it's a tremendously useful development tool.
You have no idea how mobile advertising works. Unlike what you may think, mobile advertising is not a magic wand where you integrate an SDK and viola you make shit ton of money. In your post you are criticizing Mopub for not making you money when the problem may be in your app and its popularity.

A lot of premium pubs use direct sold advertising - sign ads directly with large brands (such as P&G, King.com) at a guaranteed CPMs. Also, they sign exclusive deals with ad networks where they promise exposing a portion of their ad inventory in exchange of guaranteed CPMs. Publishers also setup various network waterfalls - stack ranking networks in various countries to determine which network should take a crack at your inventory first, which second and there on. In addition, for remnant inventory (which has no ad network or direct ad sales opportunity), Mopub exposes those to their RTB exchange to get a decent rate for them. Mopub makes all these different types of interactions possible through their product.

Now, in your case, the problem is that you are so small that no advertiser is willing to do a direct deal with you (it is not worth their time considering you are so small). Additionally, no network will do an exclusive contract with you. So your best bet is to mediate between various ad networks and let Mopub exchange take a crack at your inventory while you hope for better CPMs.

Mopub is a great product built by a brilliant team of people. Just because your app is not making money doesn't mean it is bad. If you become big, Mopub CS team will actually contact you to hand hold you to configure your networks in an optimum manner.
Hey author or daughter, if you're reading this, try a hackerspace! Far more convivial environments for intelligent experimentation and learning than a classroom. Mother: Seriously? It was your fault to clinging to out of date notions of formalistic teaching.
>The probability of not finding the instruction sequences you need to successfully land an exploit is almost nil.

I don't know about that. Ignoring the mapping of opcodes for a moment, 128K random bytes will probably not have any particular three-byte sequence, and almost definitely won't have anything longer. And opening the DLL it appears to have vast quantities of 00, FF, and CC. There is a lot of repetition, lowering the attack surface.

I'm willing to bet that if you restrict yourself to attacks that need specific instruction sequences, and not just a return opcode, a healthy majority will fail on this dll.

I agree that this is a problem, but that's largely because some attacks can work with nearly any function. It's still a lot less of a problem than turning off ASLR entirely.
http://en.wikipedia.org/wiki/Bitcoin#Theft_and_technical_vul... has quite a few startups going down due to security issues.
*edit; it was lower keying time not lower error rate on I-C, but the point remains. I-C is the only layout with more than one special attribute.
> It's also not clear to me why you're any more secure with a signed browser extension or native app. Just because it's signed doesn't mean you can trust it any more than you can trust JS that you download via HTTPS from a server.

For one, one would hope that a team takes more care to manage their private (code) signing key, than their ssl private key. The signing key should probably be on an air gapped system. That isn't feasible with the key use for https/tls.

You could compromise ftp-servers all day without being able to generate a valid signature for your bad code.

Now, on the subject of: Wouldn't it be possible, in the future, to create mechanism where we could deliver signed js code in a more secure manner than we do today? Absolutely. But it that future doesn't seem to be arriving any time soon.
Are we close to making human ‘mind control’ a reality?
Love the synchronized scrolling (and the fact internal links work - `#foo` scrolls both panes to the `# Foo` heading)!

The source is a simple textarea, right? Nice, I didn't realize you could reliably scroll one.
[https://github.com/benweet/stackedit/blob/master/res/extensi... seems to do the magic.]
Yes I am, thank you for the link!
To the first, IF as you say it's 2/3 women, and IF as one short Google search suggested to me it has around 13M viewers, and IF we agree that those are all in the US and the US has around, what, 100M adult women?... then that's 8% of those adult women watching it. If those 13M include people outside the US, then it's lower than 8%. Apparently 92% of women do not watch DWTS.

In response to the second, I don't understand your point at all. Help me out here?

As to the third, I agree that there certainly exist some fools, most of them white and liberal (and maybe prigs?), who have a mental pattern wherein they make knee-jerk complaints about certain behaviour being offensive, without having a well-considered ethical system that justifies this complaint, instead using these complaints to signal their belonging to a certain social clique. If that's what you mean by political correctness, I agree that it exists, and is odious. Whether or not such fools object to your remarks should be entirely beneath you, however. So raising the potential political incorrectness of your remark appears, to me, to be saying "I'm going to use this straw-man argument to attack those who disagree with me". And this is why I brought up the fact that it's a lowbrow dismissal, and suggested that on those rare occasions when the label does fit, you can instead construct an independent explanation of what's wrong with the political correctness.
>> And from Korea: http://i.imgur.com/7CUoaaQ.jpg

#2deep4me
Personally I bought Pragmata Pro once and I'm still delighted to use it as my favorite fixed-width font.
¿Como buscar radiaciones y geopatías en tu cama?
That's nice that your compiler works that way but that's not the way most do.

More importantly the salient point was about comparing the binary output of different compilers.

While it's certainly possible to create tools which make it make it possible to determine if the binary output of different compilers are effectively the same such tools are very non-trivial to create. The idea that different compilers are likely to produce exactly identical output is sheer fantasy.
I contracted for over a decade and I think this is pretty spot on.

I'd also note that there is no career progression. You can contract and grab lucrative low hanging fruit immediately, or work perm and build a career that may be more rewarding in the future.
Not enjoying startup life, what now?
Hi,

After working as Software Engineer for a big company (lets call it G) for four year, I left and decided to join a small startup <10 employees. (lets call it A). Things were good at G but I decided to try out something new and joined this startup. I have spent ~5 months at A and am having a bit of hard time with the team. Also, it seems to be going no where. Given the situation, I don't see myself continuing here for even 2 years and am thinking of moving out.

Should I move out to a safer option (return to G or try some other big company) or another challenging one (some other startup B).
How do people who end up in similar situation decide?
Also, what factors should I keep in my mind for my next venture.
A tablet that could run x86 applications as needed but wasn't optimized for them.
If your exploit needs a certain sequence of code, and the little dropbox hook doesn't have it, then the exploit's not going to work.

This is true, but meaningless, because an attacker is going to craft an exploit that targets the Dropbox DLL specifically.

I think you're thinking an exploit is something which is tried against different processes until one of them turns out to be vulnerable. That's true for some kinds of exploits. But in this case, we're trying to point out that an attacker is going to exploit the Dropbox DLL's certain sequence of code.
No reason to be downvoted - I think some may be missing that you're correcting yourself.
Thank you, I will look into this. What is your PG version if I may ask?
Justin's last company, Justin.tv started off as a general purpose streaming video company, then found out the video game streaming was the bigger opportunity and spun off Twitch.tv which has become a much larger and more important company.

Exec started as a general purpose errand company, perhaps they found that cleaning held an opportunity to build an important company, so they're trimming the fat to focus.
> You would just need to make sure to send your private posts only to others that use trustworthy clients.

And how would you make sure of that? Is there a field in the user data that says: "419 I speak the protocol, but I don't give security grantees - fool you for talking with me?". Is there planned an easy UI for showing you which of your contacts are part of the secure network, and which ones are backdoors into the network?
Interesting. The option /DYNAMICBASE seems to be the default (to support ASLR). Which means they explicitly disabled it. Wonder why? Are they doing something that needed ASLR to be off?
i remember someone who did a lot of aid work in africa said something similar - various ngo's would come to a village and build stuff and the locals weren't interested - have heard similar in the amazon.

for instance someone had built communal latrines which were unused.

his starting point was asking the villagers what they wanted to do

they said "the chiefs house is a mess" - so they worked on that first, then built individual latrines for each house and made other improvements - they were able to do this by finding out what the locals wanted and working on that, if he'd just gone and built a bunch of stuff that he wanted to he would have been much less successful.
Where can I sign it? (Would love to, although I am a mere non-US programmer. He should turn this to a petition.)
I thought I read somewhere that their most popular service was furniture assembling. Was that not the case?
Not currently, but that may change.
I think Exec and TaskRabbit share(d) a similar problem in that they are so broad that consumers aren't sure what to use the platform for. Renewed focus on a single service makes sense, but they face competition from Handybook and Homejoy. It's probably also difficult to differentiate in this market since the maids are all likely independent contractors.
Consider Zarly was originally exploring this model, before they pivoted elsewhere.

I'm interested to see if TaskRabbit and Postmates stick with it, or eventually pivot away.
CDATA disallows null bytes, so it's even worse than non-support: illusory support

XML doesn't even allow escaped null bytes, so you're basically forced to use base64 or weird custom app-internal escapes.

JSON never tracked javascript. It has one version, period. But you could get people to adopt a superset with a new data type, if you kept it simple.
The network of observers are moving inertially (i.e. unpowered, freely falling), moving with the rocket for only a moment, so they're not accelerating like the rocket is. That's how those observers can make good measurements, in that moment. For more info search for "momentarily comoving inertial frame" at http://math.ucr.edu/home/baez/physics/Relativity/SR/clock.ht.... Each inertial clock can measure the passage of time accurately.
Why not just run a VM, and use the saved die area for more cache?
I already had Timex tweet out the site! https://twitter.com/timex/status/369505126752346112
I am wondering why author is not offering to volunteer to teach or help the teacher recruit students and do other things she is recommending. I guess it is easier to criticize than do something to make a difference.

When I was in college and a class that I wanted to take kept getting cancelled due to low enrollment, I went out recruited students for the class.

Did daughter report the bullying? Did the author report the bullying? Teachers and school admins are not mind readers and not tagging along with all students all the time.

The whole article displays nothing but the arrogance and superior ego of the author. If you have a problem, get off your butt and do something instead of whining.
You are not building equity when renting.

If the net cost of renting is lower than the net cost of renting money to own a mortgage, then you've still got the option of investing in other assets which may appreciate over time. Say, a business. Which represents real net economic growth, not merely asset inflation.

If you plan to be in a location for more than a year, it's worth buying a home.

Stating that as a blanket recommendation is so false it's not even wrong.

A buy-vs-rent decision depends on a great many factors, including transaction costs (high for real estate sales), moving costs, appreciation risks, etc. There are many areas where even a 10-15 year tenancy may favor renting over buying.

Mortgage payments (minus interest) are then just going back into your own pocket.

Not if your property's under water. Haven't we learned anything?
Wireless Charging at 30 feet
http://techcrunch.com/2013/09/09/cota-by-ossia-wireless-power/ I am impressed. If they can deploy this device city wide, then we don't need any more chargers. It also means future wearable devices can be designed in much powerful chips without worrying about battery life. This is the most inspiring demo I have seen so far in this disrupt.
That seems to be the case. You see it a lot on 4chan as of late.
Can a vim nerd respond with how to display-time-remap a normal tilde to another unicode codepoint? There are at least four tilde-like glyphs that may be cast by any middling magician of the Unicode elements: ~⁓〜˜
I'm pretty sure the general consensus is that if you're female and you want to speak up about feeling belittled or harassed, the problem is in you, and we will gladly tell you that you need to stop bringing this subject up because we are so darn tired of hearing people like you try to bring us down.

If, however, you are male and you are feeling belittled or harassed, we're pretty interested in having a serious discussion about your experience. We may not agree with you and we may tell you that we don't think you should feel that way at all, but we won't tell you not to have the discussion.

If you're a woman, though? You're not allowed to have that discussion. Leave it to the menfolk.

Does that clear it up for you?
Not at all! My goal is to respond to someone who is unkind with something close to kindness. If he goes on the way he has been, he'll do himself as much damage as he does to the people around him. The reasonable response to that sort of privileged blindness is anger; I was aiming for something a little more compassionate.

You, however, don't get the same consideration, because I strongly suspect you're a pillock.
This is extremely optimistic. It's usually more like if you are going to stay in a place for 3-5 years then maybe it's worth buying. The first few years you are paying almost all interest and not much principle. In addition you need to factor in transaction costs (realtor fees, lending fees, etc.). Plus it can often take close to a year to go through the full cycle of buying and then selling a home. Using your one year rule just isn't realistic.
Bought. Nice. One thing: the icon has ended up as the far-left icon in my menu bar, and vanishes at anything less than full resolution. I might need to get BarTender, to help deal with that, but perhaps you can do something to help. Maybe I just need to learn how to arrange my icons in a particular order.
There is a Islamic leadership centers in most cities. You should send them mail or call them up.
While it's arguable that there haven't many major advancements in surgical techniques since 1986 aside from a few notable exceptions, medical diagnostic tools have seen significant improvement and now allow us to diagnose many life threatening diseases long before the become incurable.

Our ability to catch diseases is almost as, if not more, important than our ability to cure them and this ability has increased manifold in the past thirty years.
Stanford may now have more students on scholarship than off. But I know many of the Ivies have 40%+ of their students receiving no scholarship money, and it takes a family income of 150k+ (often more like 200k+) to not receive scholarship or loans. That means more than 40% of these schools' students come from families earning in the top 5% of household income (the 95th percentile is ~$190k). That is to say, the schools that offer the best aid, that have the potential to be the most affordable, aren't typically serving those who could most take advantage of the lower prices. Instead, private universities that do not guarantee to meet a student's need, state schools and for-profits tend to serve those students. Those are the schools where the sticker price is more likely to be the real price.
That is true. However, a Retina display has such a high pixel density that many of the scaled resolutions are very usable. In fact, OS X does not even give you an option of using the maximum (native) resolution (2880x1800 on a 15" RMBP). EasyRes does, of course.
thank you for that
> In CL, I must do ugly things like provide equality predicates to functions, as opposed to having them associated to the data structure itself.

> Immutable/persistent data structures: Clojure has this pretty covered. It is possible to implement these data structures in other Lisps, like Common Lisp, but they're not bound to be very efficient.

You really should take a look at FSet[0]. Not only does it provide fairly efficient persistent implementations of functional datatypes -- not as fast as Clojure's, perhaps, but not bad -- but it allows you to associate your equality predicates with your datatypes rather than passing them to every operation explicitly. (In fact, FSet currently provides no way to pass the predicate explicitly. Some people, including Faré, think this is an unfortunate omission, but I've never needed to do that.)

[0] http://common-lisp.net/project/fset
'cause cross-platform VM means emulation, and emulation is as a rule 10x slowdown at best?
We have an application that builds with a variety of misconfigured options (by modern standards). We fix 'em when we see 'em.

It's a result of upgrading from VC++4, to VC++5, to VC++6, to VS2003, to VS2005, to VS2008. They're set by the project upgrade wizard, for compatibility reasons.

Which is not to say that Dropbox didn't manually set the flag, I'm unsure if /DYNAMICBASE is set or unset for the sake of compatibility.
congratz moPub
Tiny Inconspicuous Handcuff Key
Religious curiosity, although I am not Christian. I certainly will pray for understanding. Thanks J..