skysight-inc/HackerNews huggingface dataset:
Pwn2Own has a whole ceremony where they very "securely" take the exploit directly to the vendor so that the vendor can address the issue.

ZDI is built around Intrusion Detection/Prevention, so they are effectively buying the newest and greatest exploits, ostensibly for the purpose of writing new IDS/IPS detection rules.

The consequence is that you probably won't get a better write up of the exploit for some time. To be eligible for the award, you agree to withhold publicly disclosing the details of your exploit for some time.

The secrecy around handling the exploits may be a contributing factor to Dragos' weirdness on the #badbios thing. The Pwn2Own contest would be the reason he's got a legitimate possibility of being targeted by something as strange as he's been describing.
Reasoning from first principles is ahistorical, and that is why it so rarely works in the real world.

No. Reasoning from first principles is hard, and that is why it so rarely works in the real world. It's not enough to be contrarian, you have to be contrarian and right, and that's really, really, really hard. Most people reason from first principles, come up with a bunch of bad ideas, and then blame it on inertia and establishment. 99% of the time, the reality is that they're being contrarian and wrong, they just can't accept the latter part.

Consider chess. I know the first principles with 100% certainty, but that doesn't help me predict an outcome of a game. I can barely even analyze a single move to any serious degree, let alone two moves ahead. It's because I'm a bad chess player, and most people are bad at reasoning from first principles. Elon Musk is one of may be five people in the world who can actually pull it off.

Learning to blame failures on my own ineptitude rather than on the establishment has gotten me an epsilon closer to Musk's awesomeness. I'm still lightyears away, though.
I do know their most promising findings don't get reflected in clinical trials well. But "The Drug Companies aren't there" isn't addressed by a small drug company specializing in ID getting bought about by another drug company that has tons of ID products for half a billion dollars.
Html5 Drumbox using angular.js
Reasons Go will Kick Ass in Your Next Project
This is similar to Matttheatheist's answer but I found this to be much more clear:

https://www.quora.com/Computer-Science/How-do-computers-work...
And 0.10 popped into my head as well. However, the fact that this was even asked as a question would cause someone to stop and think a bit more analytically I would think.
Show HN: Scenario.js: Crazy Simple A/B Testing with MixPanel
What if I helped build Glen's dam, because Glen convinced me that without the dam, the river would dry up before it got to me, and I'd be out of water?

What if Glen tricked everyone into not building dams of their own, because Glen promised to let other people use his water too, but then didn't actually honor his promise?
> That's because you need Royal Assent in order to be a bank in Canada. Unlike the US that has hundreds (if not thousands) of banks, Canada only has 5 (or is it 6 now?) massive banks.

This isn't really accurate, in that creating a bank nowadays requires only conformation to The Bank Act, not any royal (or by-proxy Governor General) consent. There are 44 domestic or domestic-subsidiary-of-foreign-corporation Schedule 1 banks in Canada, and 600+ credit unions. The big 5 dominate, but more for historical reasons than anything else.

The long prevalence of things like chip-and-pin and email money transfers and other modern amenities that are just starting to show up in the US has more to do with a marked preference for standardization governed by industry consortiums like Interac in Canada, rather than multiple competing, incompatible credit networks that debit piggybacks on top of, I suspect.
for me this would be worth it just to have as a bluetooth security device when i lose/forget my wallet.
>I don't need to learn assembly to use C. I don't need to learn the JVM bytecode to use Java.

But you DO need to learn Javascript to use Dart on web apps, so the comparison is irrelevant.
Somebody needs to do the management work, but they don't need to be "higher" in the org chart than the people they're working with.

The best managers I've had are more like facilitators than bosses.
You can create dumps of remote subversion repositories, which can be used to recreate the repository. (Google suggests that this is called svnrdump; it's been a while since I seriously used svn.)

I admit that this isn't widely known, and that many people will actually be in trouble; but if you're prepared, you don't have to be.
"Boy I'd sure love to see the pictures from Dan's wedding, but his desktop got a virus so he's offline."

You could use a little Pogoplug-style appliance, but you're still placing usability at the mercy of Comcast, clueless users, and curious cable-pulling children.
> What am I missing?

So there is a few reasons.

Flying is serious business. You don't want to take any risks having your metal box carrying a few hundred people fall down. You really do not.

Aircrafts are also pretty complex, and the parts, electronics, engines, wires and so on are undergoing heavy testing and verification before you use that part to build an aircraft. This is quite unlike consumer devices such as mobile phones, which just have to pass the minimum government tests to be sold to common people.

As there's numerous different mobile phones, with all sorts of radios in them, it's too hard to test/verify that none of them interfers with any of the electronics your airplane has. (I'm sure you've heard the recognizable sounds in a nearby speaker on an incoming call/SMS on a GSM phone - these devices really do influence other electronic.)

The easy solution is to just ban them, and require them to be turned off, because even if the chance is ever so small, you don't want to risk your plane full of people to fall down.

Once that policy was in place, many many years ago, it takes a lot of inertia to change. No executive wants to be the one making the decision and a few days later learn that something quite bad happened.

Add in the bonus of not having passengers be annoyed at the neighbour chatting away at the phone, and the passengers being more attentive during takeoff/landing.
No, my denunciation is based on the entire concept. It makes a very small problem marginally easier to deal with.
Exactly. Most of the merchants/ shops out there have no idea what my card should look like.
hey who downvoted this without replying?!

Last time I badmouthed Heroku on here I got a reply from one of their employees asking me to fill out support tickets for errors I was getting in their apps......

O_o they're watching.
I think this is the deal breaker for me. I cannot imagine paying 50 a year to manage a few cc cards.
http://www.amazon.com/Haribo-Gummy-Candy-Sugarless-5-Pound/p...
Here's a better direct link to the job: http://www.jobscore.com/jobs/benetech/engineering-leader-to-...
True, I never read the parent comment, sorry.

The CLR is definitely not full of design mistakes, it's actually quite awesome. But in terms of technical arguments, the JVM is better for dynamic languages, as it can do all sorts of optimizations at runtime that the CLR is not capable of. It's not that Microsoft couldn't improve it, but C# would have nothing to gain as it was designed to not need runtime optimizations (e.g. on the JVM, AOT compiler optimizations can actually get in the way, whereas the C# engineers focus on optimizing the compiler). And the new InvokeDynamic from JDK 7 is amazing. Starting with Java 8, it will even have benefits for static languages, like Scala. Scala for example has the notion of "lazy val", which are final references initialized on first access. In the current implementation, lazy vals have a performance penalty on access, as the generated code implies synchronization on the underlying reference, however Java 8 will make it possible to declare the generated values as being effectively constants.

The JVM also has a more capable garbage collector(s) for more wasteful languages. It makes a world of difference for languages like Scala or Clojure (e.g. functional languages use a lot of persistent immutable data-structures which generate a lot more junk than their imperative counterparts).

On the community side, for the JVM there are more capable libraries for generating bytecode. Also the ECMA standard has been kind of incomplete. For example Mono had to use for a long time their own format for the debugging symbols, while slowly reverse-engineering Microsoft's format. The debugging symbols on the JVM are documented and directly a part of the generated bytecode. Sun made many good choices here too. A JAR is just a zip containing .class files and other resources. It's definitely easier to generate JARs than it is to generate DLLs. I think language developers have a much easier time generating code for the JVM.

There is one feature of the CLR that stands in the way of dynamic languages and that is the reified generics support. The JVM has fewer restrictions, although in truth both suck for languages that are not Java or C#.
No, I can't see comments on old videos that I'm 90% sure had comments before. Though it seems it's only on a couple channels, so maybe they have retroactively disabled comments on all their videos.
>Isn't this a fundamental piece of the US court system? You take the stand and swear to tell the truth.

That's totally different than a polygraph test.
I love mine and get comments all the time about how cool or smart it is.

I carry Discover, MC (as backup) a bank debit for Mom's care, business debit, DL, Work ID card, medical, dental, and a couple paper cards like voter registration. No vendor loyalty cards, I give 'em my phone number and if that's not good enough, they can't track my purchases. Business should recognize ME when I walk in. Not the other way around.
The Darkside of Social Media Marketing
Ok you can be deliberately dense if you like. Its pretty apparent to me that a maneuverable drone that can navigate urban environments, hover, identify a target then decide to act is quite different from the blunt-instrument mortars and million-dollar airplane drones we use now.

Science-fiction? You just watched the video, and you dismiss it somehow as fantasy?

For instance, for assassination, intimidation, even spying (look in a 30th-floor window, relay audio and video) a rotored drone has no equal.

It'll be amusing to see the expression on your face the first time a quad-rotor drone peers in your window. "Hey! That can't be! It's impractical in the scenarios I've imagined!"
To support Android the Go team needs to accept dynamic loading, at least for the current NDK toolchain as you can only have shared objects as binaries.
How many cores, how much RAM, how much HDFS storage?
Absolutely.

Not only this but they're entire FAQ is vague and doesn't offer any concrete answers whatsoever. It's a half ass job.

Surprised (sort of) that this is a YC company with all the vetting, mentoring, perfecting and whatever else happens there. They have a lot of problems and a lot of holes.

Payments are HARD but this doesn't make them any easier. Quite the contrary.
Amazon launches AppStream cloud service to deliver heavy-duty mobile apps
Can someone with enough knowledge give a high level comparison to Kinesis compared with something like Storm or Kafka?
The reference is to even spiritual people who don't regularly attend an organized church being referred to as 'godless.'

And I will grant you it is difficult to pull statistics from the people who choose to comment on web sites. So it would more accurate to say 'of that group of people who comment on web sites' various themes pop up regularly with regard to stories of tech billionaires, festivals like Burning Man, and current trends in technology.

But now you've got me curious so its off to run a couple of surveys...
Nop, it does not. They're walling their garden. Many thanks Mr Job.

Youtube comment only available if you're logged in for instance.

Actually, nothing that new here. They wanted to build the Google distributed "computer" since early on. Except some of us thought it would be open like the PC. It's now all closed like a Mac
Probably related to this: http://www.bestbuy.com/site/stereo-cassette-adapter-for-most...
practically no one has up to date information about bands etc., certainly not Freebase or similar.

Hmm.. that leads to a couple of random thoughts:

1. How up-to-date and comprehensive does it need to be? What kinds of queries will people need to access (either directly or indirectly) about music, to serve their purposes?

2. DBPedia, through Wikpedia, actually does have a lot of information about bands and musicians and music. For example, see:

http://dbpedia.org/snorql/?query=PREFIX+dbo%3A+%3Chttp%3A%2F...

3. But Wikipedia will never be comprehensive exactly because of their notability guidelines. All the latest new super-underground Norwegian Black Metal bands that are recording in a wood shack in somebody's backyard, are not going to have Wikipedia entries.

4. On the other hand, musicbrainz.com seems to have an awfully comprehensive set of listings. And their data is part of the semantic web / linked data cloud, as well.

By way of example, Verminous are something of an underground act, and are not on Wikipedia, but their info is in Musicbrainz.

Anyway... just thinking out loud here.
I've been to a bar recently where they didn't have to hold my card to keep a tab open. So much more convenient!
I've been following these guys for a while and I can definitely say really cool technology! Backed!
What really sets GitHub and to a lesser extent 37signals apart is that they are making a product for themselves. That's how they manage to only hire doers. They don't need marketing or usability testing or operations or acquisitions beyond what the doers provide because the feedback loop to the target market is near direct. That's not to say it's easy to do what they've done, but rather it's much less likely those principles could be held as the staple of companies in other markets where engineers and designers will not be as naturally adept at nailing product/market fit by themselves.
Are you kidding?

Of course a professor has control over the admission process. If he wants you on his team, you're in, unless you have a criminal record, or GPA below 3.0 (or whatever is absolute minimum for that particular grad school).

Think of it as a hiring process, with the professor as a hiring manager.
Which one? It's confusing to have 2 teams with the same name, github:[redacted].
what kind of research are you interested in for Ph.D.? i can't seem to find your academic info from your HN profile. email me if you want to chat more.
Cloud Computing: The New-Fangled Paradigm in the IT Infrastructure Solution
5 Maps That Could Help Solve Some of the World’s Most Daunting Problems
Dot shabaka (Top-Level Domain program)
Hi. Thanks for your feedback. We need to improve the site to make these things clearer.

We save you time by configuring servers initially, doing reconfiguration tasks for you, setting up and handling monitoring (e.g. of disk space, cpu, application errors), and taking care of steps that many developers forget. In general, you can take a fresh server, connect it to ServerPilot, do "create an app" through our interface, and then have a production-ready server configured for running your app.

On new servers, ServerPilot installs and configures necessary services for running your apps (nginx, apache, php, mysql), configures a firewall, automates package updates, sets up monitoring, and does a handful of other things like ensuring the system clock is updated and stays updated.

After initial server setup, we provide a web interface and APIs to create and manage apps and databases (which behind the scenes means we reconfigure services), make it easy to deploy SSL certs, and provide ways to monitor your servers and apps.

We've got many more features coming. So, if there's something that you'd like to see us do that we don't do currently, please let us know.
But that's fine. I don't care if there's a multitude of services that I never use anyway, and they require facebook login.

I care when services that I do use, purely by virtue of being bought/owned by google, are claimed by a social site I don't use.
Ask HN: When is a programmer good enough to freelance?
I started coding about two years ago (Python/Django). I've been employed as a web developer with varying success. I built my own personal website as a learning exercise and it's about to be deployed. I'd like to freelance to earn some extra income, but the last thing I want is to take on a job I'm not ready for and deliver a substandard product. This profession doesn't seem to have established benchmarks--how do I know when I'm ready to take on a project on my own?
Efficient Text Editing in Vim [video]
Ask HN: Would you contribute to a community around reviewing repos on Github?
Basically, it's nice to talk to people who have used certain libraries or repositories of code before. Maybe they liked it for a certain use-case, but it didn't fit another use-case similar to yours. It would be nice to read about that to trim down research time on open source repositories. Basically a hacker-news of github repos. I want this. Is this something you would find useful and/or contribute to?
Possibility that Dart will power Android in the future?
No salary, no revenue, no real funding, out sourced product to work from? I'd say 10% is crap. The company is nearly at ground zero and you're probably the most important contributor this early on. You should have an equal share with your co-founder, whatever is left after the investor takes a cut. Both of you should vest.
Shelby.tv attempts comeback with new social video iPhone app
Thanks for the additional details on why the slowness might have been experienced.
Good question. It's really a personal decision based on risk. Technically, I think consumers can go after anyone in the supply chain so, even retailers or stores. So it's not a bad idea to have.

That being said, I'd say the majority of stores don't have it....
Well, the place in Brussels is the only place i know where they sell this.

And even then, it's a friend of mine who brings it along (they know i like spicey stuff :) ).

But none the less, Belgium isn't an easy market for anyone. Dutch, french and even German language.
In Brussels, there would probably be a lot of English speaking persons to ;-). So i wouldn't generalise my experience to anyone (every webapp requires localization here :-) )
Really. Identical error and debugging messages that might as well have all said "Foo!" across a 300,000+ LOC subsystem.
C++ has automatic memory management, but it also supports manual as an option and for some reason people keep using it.

Of course it appears Rust will be much better in this regard.
It's because I'm a bad chess player, and most people are bad at reasoning from first principles. Elon Musk is one of may be five people in the world who can actually pull it off.

Hero worship is mistaken. The reason you're bad at chess is because you believe you're bad at chess, so you don't practice. Similarly, most people don't believe they can be Musk, so they don't even try.
It's less than 19, but perhaps the coolest card wallet on the market. Their kickstarter was a HUGE success. Maybe get two of them?

http://www.ridgewallet.com/
http://www.kickstarter.com/projects/124039987/the-bridge-fro...
Which will fuck things up? I can't tell if you're saying Chip+Signature will avoid the problems or make them worse.
I'll give you your second point. I bought one because I thought it was neat. If I can reduce the size of my wallet, then sure, that's great, but the biggest draw for me is "OOh. That's neat tech, how did they fit it in a credit card?"
That begs the question: searching those documents is only possible, because someone did all of the tedious OWL/RDF/etc. markup beforehand. Basically, that’s the problem with how the semantic web is perceived generally: sprinkling hints for machines into ambiguous, man-written documents (e.g. Google’s schema.org).

Well, some work is underway to automate a certain level of semantic extraction from works that were not explicitly marked up as such by a human.

That said, I get what you're saying about the law thing, and I think we're still a decent ways off from a computer that can truly understand the legal code. :-(
Abstract algebra, number theory, geometry, logic, topology, graph theory - off the top of my head.
Creating the Kinesis demo at AWS re:Invent 2013
Shameless referral: https://onlycoin.com/?referral=HcQJJEjl
Ask HN: What AWS topics would you like more information on?
I'm currently writing a book about AWS best practices. With Amazon's re:invent conference going on, this seemed like a good time to ask for feedback on content. What AWS topics are you interested in learning more about? Are there any areas that have particularly painful learning curves you would like to see addressed in a book?
Match? How? With OCR and image processing?

Currently, one assumes you can take a picture of any card and store it for visual purposes. There's zero explanation of how they authenticate a physical card (photo) with the swipe data.
For appropriate reasons, I know the 'ghost' ban thresholds are secret (otherwise it would be incredibly easy for script kiddies to simply game).

However, the hacker in me is almost curious enough to see how far I could "poke the lion with a stick". If I had more time, creating a few dozen accounts ... etc

Then I think about how I would engineer such a system and try and keep it as automated as possible. I'm sure its well written enough to threshold on some dynamic curve based on incoming traffic.

And, whilst variety is the spice of life and all that, if you are a prolific (and popular) poster, should people care if you self promote. If each of your posts is a winner, generates great readership figures and 'likes' and spikes conversation, why not allow this? So, I'd want to deviate down a score based on popularity. Then there is frequency of posting, and comment karma ...

At the end of the day whenever there is a threshold, there will be edge cases where people are the wrong side of judgment line. Banning is a digital thing, and reputation is analog. I'm glad that hn seems to have a response appeal system.
More than a Mouse: Gesture and Gaze
These are some very solid counter-arguments to the awesomeness of what Coin could be, and I really hope you're wrong... but you make some very solid points, with the experience to back it up.
As a team member helped built the service, I would like to offer some of my personal understanding. I am not with Amazon now, and all my views are based on public information on the website.

Like all AWS offerings, Kinesis is a platform. It looks like kafka + storm, with fully integrated ecosystem with other AWS services. From the very beginning, the reliability, real-time processing, and transparent elasticity are built in. That's all I can say.
Cryptolocker launches Customer Service Site
No, we've still been concentrating on getting the underlying bits-n-pieces of a platform together. Hell, we still lack some little things like, oh, um, i18n ... text formatting ... transactions. Little things like that. Ahem.

There's at least two live attempts to build a web framework for Ceylon, so if you're interested in contributing, I know for sure that Julien Viet or Daniel Rochetti would appreciate the help. Join us on IRC or ceylon-dev. :-)
I got one for free for a demo and while it was interesting, I can't think of a good use case. A single lead ECG is not useful for much more than heart rate, and there are already many interesting ways to get that ( light sensor on phone ) that i dont know if it has much more utility from extra hardware. Perhaps if you have lqts, it can flag it but otherwise very very few usecases.
This looks like one of those game changers that everyone says will never work. But then somehow they figure it out and change the world. VCs should be all over this.