skysight-inc/HackerNews huggingface dataset:
12 Tesla crashes. 1 fire. The fire was contained, the driver was alerted, and the car was stopped safety and evacuated. If I had money I would buy Tesla stock. And a Tesla.
1. Launch the app.
2. Click the host. This apparently selects it.
3,4. Double click the host to force it to connect.
5. Click OK on the login screen even though it's set to "Store Password".
6. Click to select the proper database.
7. Click to magnifying glass.
8. Find the query window, which has a tendency to show up in really awkward places if you remove your second screen, click to drag it back somewhere useful, such as visible on your screen.

It feels like ten because of all the steps that are totally unnecessary. Sequel Pro, by contrast, doesn't have a separate query window, you never need to find it, and will connect automatically.

PgAdmin seems to ask an awful lot of stupid questions, and there's no way to turn them off. The "Don't show this dialog again" setting for each, as you mention, would help a lot in this department.
How would this work? (This is a serious question.)

Would each of us set up each other's internal IP addresses (192.168.0.101, etc) as remote repositories? Would each of us run a git repository on our own boxes? Or would we set one up on our own AWS box or something?
Obvious usage: Google is lagging behind their competition in the TV space. Apple's iTV, Ouya is taking Android into set-top space with their own ecosystem, Sony is bringing out the VitaStation... and then Microsoft and Valve have their higher-end devices that threaten to become general-purpose living-room computing/media machines beyond the hardcore gaming crowd.

The non-hardcore-gamer set-top space is getting crowded and Google TV flopped.

TV is the natural space for gestures, where a mouse and keyboard aren't practical. Microsoft knows this, Sony knows this - that's why Sony planned the camera as a standard feature for PS4 and only gutted it after cost concerns overwhelmed them.
Highlight 'Layout Boundaries' in your app with Boundarizr
Although to be fair, Compute! magazine at least had a checksum calculator to help you make sure you entered each line properly.
> curl doesn't validate SSL certificates

Curl has an option to explicitly disable cert validation:

-k, --insecure
(SSL) This option explicitly allows curl to perform "insecure" SSL connections and transfers. All SSL connections are attempted to be made secure
by using the CA certificate bundle installed by default. This makes all connections considered "insecure" fail unless -k, --insecure is used.

Maybe you're thinking of an older version?

(edited for formatting)
Good result. Yahoo come out of this looking human and responsible. High-Tech Bridge have helped raise security standards.
What about linking to the lmctfy so instead of shelling out to LXC as Docker currently does? There's a lot of promise in such an approach, should lmctfy solidify further.
Give it another go, it's not quite recovered yet :P
I just felt the first bit of positive goodwill towards Yahoo I have felt in a while. It is important to recognize that behind more company actions and policies, there are people. Sometimes doing the best they can.
Yeah, this isn't reddit. We don't care if people are trying to promote their work on this site. We all have projects that need promotion.
Regarding http://reddit.com/r/startups and http://reddit.com/r/entrepreneur

One word of caution: take the comments on Reddit with a grain of salt.

For every decent point, you'll see tonnes of comments like:

It costs too much, charge $0.99/month instead!

Or

I hate it, change x, y, z and make it free and I'll consider it

Which can be safely discarded.

Definitely don't take any criticism received to heart!
The tatoo was a short bit of Perl code implementing RSA. Details here: http://www.cypherspace.org/rsa/
If you need microsecond or nanosecond-level control of I/O, you're probably a little too advanced for an Arduino-type environment.

If you do, the AM335x offers a subsystem called the PRU that lets you program I/O that runs independently from the core. Kind of like, hmm, a bunch of Little Arduinos inside the Big Arduino.

http://www.ti.com/lit/wp/spry136a/spry136a.pdf
CONFIG_PREEMPT_RT

Oh, and Debian has a ready made one in the repositories so you don't even have to compile it yourself.
No, it is not available yet. The site does allow pre-orders "shipping by end of November".
Why is that a problem? Wouldn't the burden of proof fall on the employer to give evidence that something in the encrypted partition belongs to the business?
Because of your comment, HN will have a dozen "I am so disappointed in all of you" posts in the coming week declaring how mean everyone here is, and how it is no longer like it "once was".

I hope you are happy.
SO logs all changes permanently. All message edits, name changes, email changes.
and to ensure the bug gets to the vendor and isn't sold elsewhere.
Yep, you set up each developers machine as a remote, but you pull from them (rather than push). Helps to pull to a separate branch though.
No. In a civil case, often a defendant will compare the cost to defend themselves to the cost of settling, and will opt for the latter, including in the settlement documentation that the settlement is not an admission of wrongdoing.
Interesting idea, but not impressed that even in the teaser video there is a visible typo made ("Thouchless") in the single sentence.
Now the simple has been made incredibly complicated and it's virtually impossible to take a design based on these to production for the amateur!
I'm a rookie so how does Github being down for a few hours cause problems? I push to Github a few times a day, but if I don't, I just push to Github the next day.

Are there teams that need to be in constant sync pushing and pulling multiple times an hour?
noprocrsted out of my edit window, but I stand corrected: https://news.ycombinator.com/item?id=6488339
That's not actually true, at least with regards to LLVM. The vast majority of the time in LLVM is spent in instruction selection. LLVM spends a lot of time on instruction selection/legalization, which you can't just turn off.
I Google or Yahoo rewarded minor bugs. They should care about 404s or a tool tip bubble with no tip. I find minor bugs on all major websites all the time.
Isn't the key this sentence: "Wired reported the government as complaining that a Lavabit representative indicated that Lavabit had the technical capability to decrypt the information, but that Lavabit did not want to ‘defeat [its] own system."?

If they used something like Perfect Forward Secrecy, could they not legitimately have claimed to be unable to defeat their own system (as it is currently configured)?
I'm waiting for 170.
Why would a manufacturer do that? I understand it's profitable from your end, but if the customer is already saving up for an item and has obviously decided it wants to pay the price it's reserved, why would the manufacturer want to lower the price? It would be like shooting yourself in the foot...
My bad. I thought we were talking about what was written in the court order that Lavabit defied. I wasn't interested in talking about admissions made after the fact.

Oddly... I'm not even sure how I got into this HN topic. I replied to a comment in another topic and ended up here. Thinking I was in the other topic about a different story, I commented based on that story. I have no idea where this FBI admission is. I didn't see it.
If you're running a Bitcoin site and you're using off-the-shelf PHP, you're probably going to have a bad day.
Macbook Wheel is much easier to use.
http://www.theonion.com/video/apple-introduces-revolutionary...
Setup internal dev box, push code there and from there to github...
It's not their fault, we were in the middle of provisioning and service validation with them but it wasn't completed. We're had to work through some issues on the fly that we were trying to do non-disruptively, but they're mitigating well for us now that we've got it dialed in.
chuyên gia tư vấn du học hàng đầu http://kenhduhoc.vn
Teaching composition using Interactive Fiction
We switched from Bitbucket to Github because of Bitbucket's reliability issues. YMMV.
AFAIK, you can manually specify all of the optimizations done by LLVM during JIT compilation. I think it's not hard to disable most of them for fast compilation, but yes, it still may be too heavy for an instant use.
Show HN: Disctrail, a binary-determination logic puzzle
"Sorry, but I don't get this mindset. It would have been better to give them nothing rather than a "cheap" gift?"

Standard practice to deliberately insult a waitress is to leave a short tip. That's more insulting than leaving nothing.
What are your qualifications with regards to battery chemistry and energy management system engineering? I ask only because you said this is your opinion.
Because they weren't sending out T-shirts; they were sending out gift certificates for $12. When it's presented that way, it feels like Yahoo is trying to say that's all the report was worth to them.
Loading 3D Models using Assimp.Net and SlimDX
I recently was talking to a small business advisor regarding combating risk associated with something happening to the CEO. In a single founder organization especially at early stages a broken leg or better yet broke arm can really freeze up production. Its so important for companies to have plans in place for the death or unavailability of a partner, ie. Life insurance buyouts for the partners estate. With a single founder if the plan for implementation isn't documented and/or if the technical capabilities are the sole responsibility of the sole founder an accident could equal the death of a company.
Yahoo is free to do whatever they want. I think that's obvious. My opinion from the sidelines reflects what I think it looks like. Certain things become the norm, for e.g. someone finds $100K and returns it, the norm is to pay them a nice reward for doing so. There is absolutely no agreement or law in place that says they have to get anything in return. In fact, neither I nor most people I know expect anything in return for doing the right thing. What would your reaction be if the finder received nothing?

Just in case you want to know where I stand: if I find $100K in cash and there is no way to trace it back to me I'm not returning it. However, that is different to finding a bug and selling it for monetary gain.
Could there be a histogram at the end that shows distribution of finishing times? Or at least a leaderboard... I did pretty well [obviously ;)] but I'd like to see where my time falls in relationship to others.

I've confirmed that I can, in fact, code under pressure, but to what degree?

Other than that, fantastically fun game. My only regret is that it's a one-time game by nature, since obviously the second time around you'd simply be remembering what you did the first time instead of creating it.
Twitter is Testing live-tweeting with the MLB
What's everyone's times? I did 7 minutes
No, that is what I contend: a better genotype makes no sense because there is no such thing as a "better" person from the physical standpoint. That is what I contend and that is why I take the natural conclusion: if you can "choose" between people based on their genotype, then you are treating them as 'things', not as 'people'.

Which is what leads to eugenics, for example, with people with Down syndrome. (http://www.ncbi.nlm.nih.gov/pubmed/21555947).

"It is worse than irrelevant," I do not know why: I assumed the Parent was against eugenics, that is why I tried to make him realize it.
I agree: the talking head against a white background is overdone.

That said, I've always thought this is a product/project opportunity: the reason most startups rely on talking head videos is because anything else gets more costly and time consuming. Making it easier to produce a product demo would be a huge help.

Edit: cleaned up grammar. I can has words.
Iglo was given life from our internal need and requirements
So this is like Swagger?
Better advice would be better to find out where your customers are and go there.

So, yeah, go ahead and post to HN but only if your target market is actually on HN otherwise you'll get a lot of tyre-kickers and no actual customers.

Addendum: if you don't know how to reach your customers. Stop what you're doing and find out
Really? I have harmony enabled in chrome://flags, but no arrow function syntax?
Not in the UK, you may have to declare yourself bankrupt or sell your house or whatever, but nothing required up front.

On the flip side, if you can't afford your defence the you can claim legal aid: https://www.gov.uk/legal-aid/overview
awesome, will post http://www.konfect.com soon
Hmmm, how bizarre. When we had trouble with a contractor, the police knocked on her door and told her a complaint had been filed. Nothing more was required to stop the trouble. When my kid was ill in the car and I stopped (illegally) on the hard shoulder, the police car that investigated pulled back a bit with it's lights flashing until we could continue. My kids have set in police cars many times when they've been monitoring events. I've worked with the police a number of time when organising events.

Where do you live? I want to make sure I never visit there.
That's a wrong way of looking at the situation.
Yet there have been dozens upon dozens of threads in this same forum of people making up all kinds of explanations of why they don't want to pay $15 for a music cd they will listen to possibly dozens of times over their lifetime. Ironic...
You get the idea. That is what I think, definitely.
> It would have been better to give them nothing rather than a "cheap" gift?

YES!

There seem to be two camps here, neither of which can even fathom the other's position.

On your side, we have people who do a purely logical comparison that non-zero is greater than zero, so this is better.

On my side, we have people who inherently separate tasks done for free for fun or just to be nice, from tasks done for money. For these people, getting paid a pittance is a grave insult, while not getting paid at all (when nothing is owed) is just fine.

I don't really know how to explain it any further. I think the people in your camp just need to understand that the other camp exists and contains a lot of people, and that regardless of logic, giving someone a $12.50 gift card is a massive insult, far worse than giving them nothing. You don't have to understand why, but you have to know that this is how it is for a lot of people.
I used Greplin quite a few times to find where I had heard something or seen a link. It was useful in that respect. But not useful enough to pay for. I never saw much of a monetization model going for them.
Yeah obviously, but my main point is that the world would be better if we were less apathetic.

I don't trust any government, but I don't trust my group of fellows citizens either. Check out Gustave LeBon :)
http://en.wikipedia.org/wiki/The_Crowd:_A_Study_of_the_Popul...
Pretty mercenary. What you propose is not ethically neutral... it is akin to blackmail.

It saddens me to see so many who feel this way.
Fully working example in different programming languages on github https://developers.prismic.io/examples/UjBmm8uvzeMJvE5V/les-...
Why do you think a company anywhere would have more luck than Lavabit when presented with a legal search order?
>To be honest, how is it any different from downloading a random executable and running it?

It isn't, really. Both are creepy.
No joke. What an unmitigated douchebag.

I work with so many people who have no hustle. No compulsion to go above and beyond the constraints of the situation.

This position openly advocates that employees should only be workerbee drones who stay within the rules of their corporate overlords

and/or

Only succeed, never make mistakes.

Both are fatally toxic attitudes. Fuck Matthew Shapiro.
Because it's pretty much an industry standard now, for those with a prominent web presence, to have an official bug bounty program[1]. Google, though likely not the first, is one of the more prominent companies to offer this -- and has been for several years -- to the tune of $100-$20,000[2]. A $10 t-shirt is laughable compared to that, to the point of almost being insulting.

Was it poor form to expect grandiose payouts from a company without a bona fide bug bounty program? I think so.

Is it even sadder that, up until publicly shamed, Yahoo had no bug bounty program whatsoever? Definitely.

1. https://bugcrowd.com/list-of-bug-bounty-programs/

2. http://www.google.com/about/appsecurity/reward-program/
Neutron Networking: The Building Blocks of an OpenStack Cloud
My guess is it is accidental.
I get what you mean re: letting users add their own tools, but I think there's some utility from providing/suggesting things people don't already know.

Eg: a cable gets pulled:

- syslog, which is well known, might show a NIC event.

- ethtool and openlldp will tell you your were connected to row 4 port 26 of MySwitch and now you're not. Which is super useful when you need a NOC person to go investigate.
That's fantastic. Great idea and execution...
You could just state that I'm wrong, or you could explain why you think that. The second is valuable, the first is a waste of a comment.

Edit: why would anyone downvote this? Other than the owner of the useless comment anyway... For the record, comments on HN should have substance, it's in the guidelines when you signed up.
HN is not a place for your political propaganda.
How can we be sure that the package that's being installed is the one that you intended to be installed?

How can I be sure that the install will be identical across all of my servers?

How can I pin a version that I've vetted for security holes?

How can I distribute this to servers that don't have arbitrary internet access?

How do I configure selinux/apparmor to work with your tool?

How can I uninstall this cleanly?

Curling into a elevated shell is a terrible way to do installs. Packages are cleaner, more secure, and more capable of being trusted. You're making the assumption that your s3 buckets will never be hacked, that your own webservers can never be hacked, and that experienced sysadmins are going to ignore your tool because of the amateur install method.
Perfect reply, reframing the situation nicely.
THE POLICE HAVE REQUESTED ALL FILES UNDER DIRECTORY TITLE RAND.

"Dump it for them at 300 baud."

"Art! Are you sure?"

"We cleaned Rand's directory first thing. Took out everything not routine, then we added a few files. Old engineering catalogs. Maintenance schedules. Ratings of TV shows. Makes a pretty big file---" MILLIE, what is the total stored in Rand's directory?

23,567,892 BYTES

"Good Lord. Art, that will take hours to print out---"

"Yeah, that gives the cops a hobby." [1]

[1] Larry Niven and Jerry Pournelle. Oath of Fealty. New York: Pocket Books, 1981. ISBN 0-671-82802-9, pp. 287--8.
As a security researcher and someone who regularly participates in bug bounties, thank you. You didn't have to do what you did, but you did it anyway, just to be nice; that should be applauded, not criticized.

Remember everyone: if there's no bounty program in place, reporting bugs means that your expected value for those bugs is $0. If you get more than that, that's awesome, but don't expect it, or act like it's deserved; it's not. Enjoy your Yahoo swag and go on with life.
You mean watching him type in the password?
How do you actually submit to bootstrappist though?
4 minutes, 56 seconds for all 5 levels. Well done!
It's worth remembering that airplanes are only the safest way to travel because they put black boxes in the backs of planes to figure out why they were crashing constantly.

Trillions of miles later, we freak out if a plane's landing gear fails and the plane has to skid to an otherwise uneventful landing.
http://www.octopus.org - Marketing apps only
I think one could be entrapped into a murder-for-hire.

Certain government authorities know you're acquainted with someone who's previously been fingered for murder-for-hire but never convicted.

The "authorities" call you and threaten to murder your family; you naturally seek back-up from your erstwhile acquaintance. The police ensure they give you just enough information to track their threat back to a "person" of their construction.

Boom. You're up on a rap of "conspiracy to commit first degree murder" (or whatever it's actually called in your jurisdiction).

Doesn't seem so impossibly far-fetched does it?
This was the reason we didn't try to get on Shark Tank, maybe well apply now :)
[ecom] Thinking of outsourcing fulfillment? Here's how not to fail.
It implicitly meant they don't really value security.
Fruumo for chrome - a Minimalistic New Tab Page
You're implying malicious intent, but he may have simply wanted to buy some time. The number of options to defer punitive measures will have been very limited and this one seems pretty straight-forward.
No NoScript?
I don't know what the T-Shirt looked like, but I am imagining it is a "I reported a critical bug that affected millions of users and all I got was this stupid T-Shirt" kind of thing.

Which, frankly, was a pretty cool gesture of thanks from the person writing. In a way I'd like them to keep the T-Shirts regardless of adding the monetary bounty.
Just under 3 minutes!
Ugh, I'm not a fan of the idea of a whole bunch of people spamming crunchbase and angel.co with a side project that goes nowhere. It will make crunchbase useless as the dead links and dead projects pile up like so many abandoned github projects.

Oh sorry downvoters for quashing your dreams of wealth and fame with your bootstrap styled 10 hour project consisting of largely code copy and pasted from stackoverflow that will revolutionize everything everywhere. Yes please submit that to all the places. We all want to try it out.
Facebook Pushes Passwords One Step Closer to Death
This is way better than downloading a random executable and running it. (I assume you mean running it as root.) With this, you can grab the install script and see exactly what it uses root for. It only takes a couple minutes. You could even modify the install script to comply to whatever installation scheme you wanted, and probably even make a version that runs without root privs if you're willing to do a few things manually. This mechanism is WAY better than a binary executable installer.

As for the product, it looks really good to me. No mention of encryption of stored data in the privacy statement, which might be a concern for some.

Also it wouldn't hurt to make checksums available for the installer and downloaded tar, for more paranoid folks like me.
It's funny with ShowHN - I know it can be quite useful, but I'm so paranoid to do it. It's a one time shot (I don't want to spam it over again), and if you don't get any feedback, your shot is lost.
Not in US law as far as I know, though there was a brief moment where that seems to have been the case in English law (between the Criminal Law Act of 1977 -- or at least, its application in DPP v. Nock, 1978 -- and the amendment to that act in the Criminal Attempts Act of 1981.)

An agreement between two or more people to commit an act which would be unlawful if the agreed-to end was realized and any one of those people taking even one concrete step toward putting the agreement into effect makes a conspiracy. (Except under the separate US federal narcotics conspiracy law, where, IIRC, the concrete act is not required.)
What sets this apart from other broken link detectors?
This was awesome. 5:48. I actually turned my sound on for the end.
My JS is somewhat rusty, glad I had a .map() to work with. 9 minutes something, I did 'cheat' by looking up some typeof returns.