skysight-inc/HackerNews huggingface dataset:
Yeah, but it does tend to highlight to anyone reading the code that this code should work, but to look at the comment before the if statement.

I'd very rarely use this sort of thing, but in this case I'd say it's OK.
Is most of this even necessary?

Couldn't you get away with:

function IV( $size, $ssl = false ) {
if ( $ssl && function_exists( 'openssl_random_pseudo_bytes' ) ) {
return openssl_random_pseudo_bytes( $size, true );
}
return mcrypt_create_iv( $size, MCRYPT_DEV_URANDOM );
}

From the docs: http://it.php.net/manual/en/function.mcrypt-create-iv.php

5.3.0 MCRYPT_DEV_RANDOM and MCRYPT_DEV_URANDOM became available on Windows platforms.
Actually, that's really really not true, outside of the USA.

It's trivially easy to set up a USA corporation that is: managed by a laywer, that is is owned by a trust in the Caymans, or a similar secrecy jurisdiction, where the beneficiaries of that trust, a.k.a. the owners, are unknown - protected by client-attorney privilege. For an added layer of security, this trust's beneficiaries could be another trust that is governed by bearer bonds. That is, whoever owns the bond, an actual piece of paper, is entitled to the benefits of that trust. They are only legal in some countries.

Make this harder to follow, and you have a series of shell companies in many countries, all with secrecy jurisdictions, and I've just described how organized crime can own lots of very legal and real looking USA companies, with almost 100% chance that you'll never find out who is controlling them. Ones that make large political donations to lobby groups and politicians - not bribes you understand.

EDIT: I think you're all missing the point that this can be done today with the right lawyers and enough USD, but bitcoin just makes it easier. Though the fact that bitcoins can be traced MUCH easier than the flow of USD, is somewhat of a downside.
High-school student finds trumpet-headed dinosaur
How to Talk to People About Complementary and Alternative Medicine
Please take your obvious trolling somewhere else. Not all software that runs in web browsers was written in the last year or two, after HTML5 and CSS3 and all the related new technologies became viable options for doing heavily interactive graphics on web sites. For many years before that, tools like Flash and Java applets were the only games in town, and a lot of production software with many years of development behind it that is still widely useful was built using those tools.
I think for stuff like your Rails app, you'd want to wait until there is support lower level in your stack.

But imagine that you're writing a commenting system, and want to sanitise stuff received from a user. Sanitising data is error prone, so you isolate the code in a new zerovm. If someone finds a way to exploit anything in your sanitising code, they might be able to write broken sanitised HTML out, but they won't be able to e.g. send queries to your database, or write to your disk, because the zerovm simply doesn't have permission.

And imagine the web server spawning a new zerovm for every request, that only has permission to talk to the inbound network connection and pass messages between that and a Rails zerovm for that request. If there's an exploit in the HTTP parser, that vm could be exploited, but it'd die at the end of the request, and would have no permissions to talk to the database server or write to disk.

And imagine the Rails zerovm similarly being split into pieces: Request handling might be done in one; authentication might be done in one.

The lower the startup costs, the more you can afford to chop the app into pieces and the more you can leverage that to benefit in terms of security (by reducing the privileges of each individual component) and scalability (by allowing distribution of the VMs across CPUs and across servers)
I fixed it with a PR.
To add to this, aerospace companies contribute plenty to the economy, in jobs, scientific research - much more than most other corporations that are of a similar size.

And speaking as a Canadian, it's nice that we still do have Bombardier, otherwise those jobs would simply go down south (probably the actual talent too). Canada needs to invest in industries other than resources... And of course Bombardier IS profitable (forward P/E of 9.71 on the stock).
I like it when the expression in the "if" is clear.
Looking more like a trend ... PHP biggest culprit

- PHP 2,333,198
- JavaScript 491,084
- C 306,891
- C++ 198,900
- Java 169,748
- Python 106,708
- HTML 85,903
- Ruby 57,830
- Smalltalk 28,647
- C# 24,813
It's nice, but did that page really need 30 seconds for the text and images to render at all?
> your obvious trolling

You're not helping your case at all.

Accept responsibility for supporting your customers, and stop lashing out at others for not doing it for you.
This doesn't seem worlds away from LiveSheets.

http://livesheets.com/
Wikipedia wants to erase propaganda and bias from its pages
The problem is just that unless the US dumps their patent system, no one has any incentive to use FOSS codecs.

Hardware/SoC providers will focus on the "licensed" stuff because buying a license will protect you from IP lawsuits, and the content providers will also use the "licensed" codecs because the support is far more widespread (and well, for mobile you need HW acceleration if you don't mind burning through the battery for a 2-minute cat video).

Long story short, as a manager of a company selling mobile handhelds, I would not give a dime about the "open" codecs because the risk of stepping on a patent mine is too high.
Yep, you can also check the original email and download the image directly.
From the sounds of it, you'd want to split up your workload and run each subset in a separate zerovm
Sure (if the code shouldn't just be deleted at all and kept in version control), but I'd rather shove the magic constant and it's explanation into a variable at the top of the file:

// PHP has a bug that prevents you from creating a byte array via variants
PHP_BUG_123_RESOLVED = false;
Is it universally true that being shown wrong in an argument leads to resentment, preventing learning? Surely that happens sometimes. But always?

It's just methodologically unconstrained anecdotes, but if I look back at my personal history of changing my mind on things, occasions where I was shown by others to be an idiot, and the associated shame and humiliation, have been powerful forces for me to rethink and improve my position.
Maybe there are different kinds of personality: those who react to a good argument by learning, and those that react by ressentiment and aggression. This has been thematised in social though as the distinction between a normative and a cognitive learning style.
Official Instagram Windows Phone app arriving in the 'coming weeks'
Depends what is meant by being "fiat". Most people consider fiat to be government/state created money rather than just having no intrinsic value. 3 definitions listed here: http://en.wikipedia.org/wiki/Fiat_money

I think the intrinsic value argument is pointless. Gold for example, has some value outside of it being a medium of exchange, but the price of gold is very divorced from its usefulness in industry or its attractiveness so the fact that it has "intrinsic" value doesn't mean much.
Because those agencies may eventually leak out that information. If their never delete stuff, everything they have will eventually be published in zeta-byte level leak.
Does anyone want to write a user-friendly walk-through to help normal users get Java running? I may have the time to assist, though I'm doubtful I could do the whole thing.

ScreenLeap has a good start: http://www.screenleap.com/troubleshooting-java

The advice they give varies based on the detected browser and OS (as it must) but it's somewhat out of date, and isn't intended for a general audience.

The applets on my educational site are signed JARs (a wasted expense, it seems), and they are explicitly run within the sandbox, but every few months it gets harder and harder for students and their parents to get Java to run.

And now in Firefox my interactive components have just become scary-looking blocks of DO-NOT-ENTER signs and warnings that are totally unwarranted for my site. If you work up the courage to click through the browser's warnings, then of course you get round 2, the warnings that the plugin itself pops up.

I dearly wish to see some of the details on the evil that's being done with Java applets, and if all of these aggressive measures are actually doing anything to stop real risks, or if the main effect is to kill sites like mine.

These do not seem to be actions based on data anymore.
Furthermore, it's not even created by Google directly:

> "uProxy has been developed at the University of Washington, with help from Brave New Software. The project was seeded by Google Ideas."
While I agree with these fine principles, it's worthwhile to realise that they have only limited applicability in daily life for a simple reason: they are time-consuming. Hence they are difficult to apply when time is scarce or when little is to be gained from the outcome of a disagreement. A resource-intensive strategy like the one outlined is most appropriate in high-stakes disagreement.
Maybe you are unaware of git pickaxe. See the -S option of git log: https://www.kernel.org/pub/software/scm/git/docs/git-log.htm...
ECL0WN - an ePassport utility
Automaticly document your API with Swagger
1. Those are all allegations. In fact, the whole DSK mess is extremely unclear and the case presented against him is highly suspicious, although it is clear that he is a bit seedy. Some believe it to be a political machination for a number of reasons.

2. One politician's behavior means ALL politicians of that country behave wrongly?
In Common Lisp there's a special syntax to make the reader ignore an expression, for example #+feature(code here) is executed only if feature is present. It's common to see code commented out with "#+(and)(code here)" or "#-(or)(code here)". In fact there are proponents for either one of these idioms. I guess in Algol-style languages it's rarer to see code commented out like that?
Nokia unveils 10.1″ Lumia 2520, a $499 Windows RT 8.1 tablet
Really sorry about this. I've the IP for my DSL on the Chrome Bookmark bar next to News.YC bookmarklet.. then I loaned my laptop to a friend..
> A new HTML5 Admin Teamplate

And I thought this is a new way of collaborative ("Team") template creation. :)
If you have to run a single database for multi-tenant application you're in for some real pain. For example: how will you shard it? How will you load-balance it?
ZeroVM approach to cloud is that "cloud is the database". ZeroVM sessions have transactional qualities: deterministic, isolated, can be rolled back, etc. Essentially we integrate distributed storage with "stored procedures" and "triggers", this is what ZeroVM cloud looks like.
Seems like an interesting concept. It's easy to complain about the ability to screenshot/save the .GIF file; any application that tries to do this, such as SnapChat, will suffer from the same problem as there is always a way to circumvent services like this. They appeal because of their fun factor, and not a supposed ability to be ethereally secure.
There are a few plugins for FF available that capture the whole screen. Not sure of any quirks though.
+1

I still remember the day when my ipod broke down. Before jumping to the apple store I asked myself if I can't use my old Android phone instead (that I took over from my girlfriend when she got a new shiny iphone).

I plugged it in. It became immediately available as an external drive. I copied my mp3s over. I was done.

Please don't take this away from me...
BBM: 5M users - 8 hours since release
I went through this routine yesterday. Updated Java and restarted Firefox. I can 100% vouch for seeing a warning about Java being outdated. The warning was still there. I stand by it and I wont delete or edit my comment.

As a dedicated Firefox-user who dislikes the direction Chrome is taking, I still say Firefox has a problem here. This is something real users are experiencing.

I believe this as a whole will have a very negative impact on Firefox's perception in the java-heavier regions of the internet.

And damage done is hard to repair. Mozilla should think carefully and very quickly about what they just have done.

Edit: My bank's facebook page is already filling up with customers saying they can't log in. When the bank's reply is "Dont use Firefox. Firefox is broken" and the customer indeed can log in with other browsers, what chance do you think there is for the user going back to Firefox?

Mozilla needs to get 24.1 java-enabled-edition out there now, until it gets its UI/UX story straight.

Edit 2: Down-vote as you like. If you don't think this will affect Firefox's perception, you are a tad more optimistic than I am.
Because it appears to be open source and peer to peer, so you don't need to trust Google at all?
Because you (well, maybe not you, certainly not me, but perhaps some people) should be able to deduce the voltage from chemistry of the battery. So all LiIon LiMnO2 chemistry batteries have 3 V, LiFePO4 chemistry has 3.2 V.

Then you can just multiply the voltage by mAh and you have energy in mWh
It's also going to return random numbers with a binomial distribution, which might be surprising since most generators are uniform.

How is this "improved security"?
I agree, it actually hurts my eyes to look at it. There's probably some science behind this...
Functional Programming hurdle: world is uninteresting
Show HN: Dynamic Audio Generation In the Browser - Javascript Synthesizer
Now can we mark JavaScript as unsafe as well?
fades away via direct url (http://content.fade.li/selcouth/119a1902d...) too? but still if people can save it, they need new slogan and/or new algos because it's still being on the record.
Indeed I was, yet still this forces me to remember a part of the string of the code I deleted... which may not be the case if the commit was a month or two (or more!) ago. I mostly remember just "ah, this was in class XYZ"... open it, quickly scan the file for the comment blocks and voila, there's my code.
That's a nice theory, but Mozilla's idea of "long term" support is still forcing an upgrade more than once a year just to maintain security patches, and with only a 12-week overlap between a new version starting testing and the complete end of support for the previous version.

That sounds like a long time if you're reading this in Firefox on your home PC, but if you're responsible for a large corporate network with thousands of users and a hundred critical intranet applications to keep working, many of which have a measurable dollar amount attached for every hour of downtime, different rules apply.

There is a reason so many large organisations stuck with IE6 for so long: having tried and tested, stable software is far more valuable in that kind of environment than having the latest shiny features that none of the in-house applications you're actually providing the computers/browsers to use need anyway.
Like a giant browser history?
It's a tablet. And its a post iPad tablet.

I fail to see what is so impressive about it.
I also hate it when people comment out code without commenting on why is it removed, why doesn't it work, what to do to make it work, who has done it, who is going to make it work and so on...
I've actually used Currency Fair to exchange between dollars and euros (and I'm completely un-associated with the company or anyone there). My experience was positive - it was actually fun, with a bit of drama to see if someone would take my offers. It took a bit of time to set up my transfers, etc, but it was significantly cheaper than I would have paid using a regular retail bank's foreign exchange offerings. Nice work!
Weird.
It appears to be working as claimed in my Firefox build from yesterday (26.0a2 (2013-10-21)). Most likely a bug then, and should be treated as such, instead of assuming Mozilla is lying about updates being available, or not.
All Smalltalk ones are valid code that will be executed though.

#ifFalse: is a message that is sent to a boolean and takes a closure as an argument.
I've tried that, as well as different addresses, but now it appears I am tainted for life in Amazon's eyes, as is my gf. Honestly it's really annoying.
Have you read the comment? This disabled part of code is used for communication: "If someone is able to circumvent this problem, please email me". When someone reads the code to discover why it works in a certain way, they'll instantly learn that the developer thought about this, and tried to do something, but discovered that an external bug prevents him from enabling this code.

It's also common to include TODO, FIXME, or BUG comments into code. Sure, you can put them into issue tracker, but having them directly in code gives more context.
I've tried many beautiful admin templates, all of them are visually nice, quite suitable for integrating as dashboards and "read-only" panels. But very few of them actually tries to solve the "hard" problem: how to transform "rational" row based data into read-writable web forms.

Server-side & client side interactions, validations, cascading events, descriptive forms, etc. Given two or three slightly sophisticated m2m models you get stuck either to re-write from scratch or re-invent your own.
In C, at least, compared to the commented out version or removed (when using versionning) variant, the code is still present and builds (and will break upon API change, guaranteeing it to be up-to-date), is present when re-factoring (not necessarily easy with all version control systems), and has no impact over performances (might not be true with PHP). So this can be seen as a feature, actually.
It's a valid issue, in that it's vile the way the US Government sometimes behaves, but that is not a realistic concern for 99.999999% of the world population.
I don't know if you're being sarcastic or not (I'm not!) but this is the same as putting on spectacles of the wrong prescription. Everything is fuzzy and your eyes try to compensate for the lack of focus.
It looks like a laptop, does the word "tablet" not mean anything anymore?
Yet they're fine with letting me buy stuff from them...
Totally agree. You should not have too much noise.
Why not start with the simpler option of a cease-and-desist letter? Sounds like there should be a legal mechanism for a U.S. website wanting a U.S. company to stop editing its user-generated content.
As I say, I am not a unity dev, but just guessing from what little I know about it, I would say that mono is merely a language runtime that still depends on the underlying platform for things such as networking. Unity, which allows C# and Javascript, needs to have the same API for both languages, which is ultimately implemented via npapi, activeX or pnaci, or you know, the other platforms it runs on. So far as I know, mono doesn't have networking libraries for all those different apis.
How I went from PHP to Rails
they arent identical IMO, similar styles sure. plus so many of these admin themes share elements/styles.
It is perfectly sane idea for switching code with macros (though for(;0;) is better) and for making compiler do some tests without polluting the code.
Sales Are Colossal, Shares Are Soaring. All Amazon Is Missing Is a Profit
I don't think I could trust Google enough to build anything serious with this, going by their recent track record it could be shuttered in under a year.
I think you just found out that PHP is a very widely used programming language. To make a more meaningful comparison, divide by the total lines of code.
Interesting point. How would you rephrase the warning?
Each part of your application needs access to some sub-part of your data, but if you isolate your app at the OS level and run a whole app server inside a VM, every part of your application can at least in theory access all your data.

If you sub-divide your app in separate zerovms, whether per-request, or split it up further into functional responsibilities, then you substantially reduce the attack surface by ensuring that an exploit against any one part of your application can only exploit the specific subsets of data it is allowed to work on.

You can do this without zerovm too, but the more you reduce the cost and difficulty of spawning a new vm or container, the more finely grained you can subdivide your application, and hence the fewer privileges each subset of your app will have.
It's not a Google product.
If you do see that, please file a bug with details on the steps to trigger this:
https://bugzilla.mozilla.org/enter_bug.cgi?product=Core&comp...
I'm unsure of how you classify this as a 'clone'? They are both admin templates. That's the only similarity is it not?
'Finding' a file has been solved by search tools. If you want to get the app experience, you can just drop everything into the same folder, and access files through the search index on your computer. Music, Movies, Photos, Documents, etc. can all be drilled down to. If you're using a specific app, chances are that they have their own filename extension.
Do I need to search? Blame HN did not stop me from posting.
Yes! Yesterday we released the application for tipping people for their commits to open source projects http://tip4commit.com/
Cool idea, well executed. Has obvious flaws & security issues but it could be a bit of fun.

Anyone else find the landing page a little bit overwhelming for such a small app? All the pictures of people having a great time seem a little over the top?
Yeah, but what are you going to see in the real world? You are going to see OS X on Apple hardware and Windows on whatever random box the person had handy. Sounds pretty much like what they tested.
> Java applets are extremely rare these days.

Yes, but unfortunately when they do occur they tend to be rather important; Eurocontrol's air-traffic flow management site, for example. If you need to file or change a flight-plan...
Working with Remote Software Teams
Not one of the best designs, especially at that price.
Show HN: Mapping Tornadoes w/ D3
I only delete code I know I'm not going to use later.
Refactoring, especially renaming files, WILL make it next to impossible to find ...

It won't, if you use proper commit messages. Once you start doing that, you'll soon discover it will make everything much more discoverable. Apart from that, death to dead code! Having worked on a project where about 10 to 20% of the code was effectively dead (either simply unused, commented out, #ifdef'ed away of if( 0 )'d away) I can assure you I never ever want that again, mainly since the dead parts still turn up in every search/grep/find reference.
Maybe its a place holder for future implementations
The base unit is a flat tablet that looks essentially like a Lumia phone stretched out to a 10" diagonal.

The keyboard cover is an optional add-on. It seems more useful than most tablet keyboards because it also has an extra battery, bringing the unit's total battery life to 16 hours.
that reminds me of Monty Python's arguing clinic sketch
You obviously don't understand my comment at all. If Wikipedia has proof then there isn't any longer "a particular position", but a fact that can and should be stated. Wikipedia writes "Lee Harvey Oswald (October 18, 1939 – November 24, 1963) was, according to four government investigations,[citation needed][n 1] the sniper who assassinated John F. Kennedy". Note the "according to" and "citation needed". But it also writes "On November 24, 1963, Ruby shot and killed Lee Harvey Oswald". No "according to" and no citations.
I expected something about Palm or Epoc32 system tables.

Files are not going away because they mean control. The moment user loads his data into proprietary app, some company tries to squeeze money out of him. Than you loose all your data because payment failed, or hacker got your credit card number.

We (computer industry) are still educating users how important backups are and this article is not helping.
Could you consider contributing this to
http://support.mozilla.org
?
This sounds good. But how is it better than just installing Tor?
Genius Admin