skysight-inc/HackerNews huggingface dataset:
This is a fascinating discussion because it betrays two fundamental attitudes of society to risk.

RyanZAG is "correct". If someone breaks into my house and steals my TV, then my security was a failure.

This leads to the next problem - its not a catastrophic failure in today's (western) society. I am probably out at work, and I am insured, and the burglar is unlikely to be waiting when I get home to murder me.

However, there have been plenty of societies in the past, and are many now, where the expectation of loss would be almost total - someone breaches your security, they take the tv, kill you and your family and burn the house down on the way out.

So its not a judgement on the resources of the attacker that matters, it is the expected consequences of the breach - the expected value of damage.

Which side of the argument you come down on depends on whether you see the Internet as basically a nice London suburb with a few bad eggs in it, or a violent amalgam of Feudal Middle England and Mogadishu on a bad day.
I didn't know about u-op and just looked it up. Could you explain it into more details? How does it involve in this case?
The upgrade price is cheaper. If you bought a personal license, the upgrade price is $99 and not $199. If you bought a commercial license the upgrade price is $299 rather than $499. I'm guessing you purchased a personal license because I believe that was what was on sale last year. So, $99 bucks is freakin' cheap. I have purchased every version of IntelliJ IDEA since version 2. Never regretted it. I can tell you it has definitely accelerated my development and my career.

As for profiling and heap analysis, you are going to have to spend some cash somewhere else. I would suggest YourKit (http://www.yourkit.com). Sure, you can use VisualVM but that will only get you so far. Since you are using Scala, perhaps you could look into Takipi (http://www.takipi.com/) for profiling and monitoring.
That's an understandable reaction. We need to build trust with our users and with the city. That comes with time and we'll get there.

For your peace of mind, our entire delivery fleet is background checked, interviewed and held to very high standards. We log every package that comes to us in great detail for any claims that could be made.

Give us a try, we think you'll like it. Your first delivery is free so you really have nothing to lose!

Thanks for your comment and for your edit.
Thoughts from Open Stack insider on fragmentation and politics
Also, my email is zack@useluna.com if you'd like to get in touch/ask questions/learn more
No, security is about trade-offs. If you throw absurd resources toward protecting against entirely unrealistic threats and your company goes out of business, you've failed. If you have legitimately made the risks small enough, for the resources and threat model (and that threat model sufficiently matches reality), you've succeeded. There are of course some legitimate caveats, including talk of externalities and questions about how one would measure things, but I still assert my basic model is more correct than yours.

Recognition that security is only as strong as the weak link does not imply that all links must be infinitely strong.
Wormholes and Quantum Entanglement May Be Linked
That'd be even worse. Now I have yet another variable to deal with when tracking down performance issues in my code. One that would be non-obvious to anyone not terribly familiar with how things are working behind the scenes.

Better would be to introduce a methods that explicitly exposes the type of substring method being used.
So, do you own your apartment or are you cool paying out your deposit for a wardrobe door?
SES-8 – Falcon 9 GEO Transfer Mission
Always worth to keep an eye on: https://twitter.com/elonmusk
The Only Way to Grow Huge
As long as you use spotify to at least the amount of an average spotify user, your two artists will get the equivalent amount of money, since all of the other spotify listeners will be paying that sliver for your artists.
Not very many NASCAR tracks are road tracks, looks like 5 out of 29. I don't believe NASCAR has ever (or at least in the past decade or so) raced an actual street course though. E.g. similar to the Monaco GP, Montreal GP or for ALMS, Baltimore GP.

Isn't the lack of fuel gauges more due to them being inaccurate if you are at a 30 degree slant and back to level? I believe they use fuel pressure gauges to indicate if they are running out of fuel.
So...I haven't been able to reach the server for the last 20 minutes. Not exactly the result I want to see from my server software.
Anonymous donations are bullshit
Just FYI: The "About" page is 404'ing https://www.bitrated.com/about.html
Refurbished Late 2013 21.5 and 27-Inch iMac Debuts in Apple’s Online Store
Yes. But the millions of people who don't listen to those two artists are also paying them $0.00007. If you assume everyone listens to the same amount of music, then the two system are equivalent. If you listen to more music than the average person, then your 2 artists get paid more using the current system. If you listen to less music than the average person, then your 2 artists get paid less using the current system.
What kind of a person even idolizes someone for writing great code? Steve Jobs couldn't code at all. Facebook was written in PHP. GroupOn started on WordPress. According to this Slashdot article, Sergey and Larry aren't great programmers.

http://tech-beta.slashdot.org/story/13/11/01/1324209/larry-p...

The Instagram founders didn't have a programming background:

http://thenextweb.com/2012/04/10/instagrams-ceo-had-no-forma...

My take away is that beyond getting the job done, joining the priesthood of programmers is pretty low on what's important.

If you want to be successful, focus on the other things then hire a bunch of programmers to continue your dream once you hit it big. By the way, make sure the interviews are insanely difficult and keep your geeks out of the weeds (e.g. HN). Geeks love to play in the weeds!
You're conflating two things, inappropriately in my opinion:

> If you offer a bug bounty to improve security, make sure you give a reward for any possible breach that could cause you to get hacked, regardless of whose 'fault' the vulnerability is.

This is true. There's no upside for rejecting this as "out of bounds" except for a relatively tiny sum of cash.

> If you know of a way to increase security, then you should increase it.

This I disagree with completely. If there's anything you can do with negligible cost you should do it, however there are all kinds of costs. There are usability costs, operational costs, training costs, etc, etc.

You can't hand-wave these away by declaring that any breach is failure without recognizing the fact that there is no such thing as perfect security. In fact all security is gambling, and it should be a gamble based on the best odds we can come up with professionally against the cost of failure. If something requires 100% perfect security then that thing should not be done, period.
The liberal arts mechanism for ordering arguments is democracy!

The idea of liberal arts is that their study enables one to participate as a full-fledged member of society. Thinking critically about arguments that concern society requires not just checking the validity but also the soundness of an argument. I suppose you really need some understanding of culture and history to make up your mind about many issues of importance to the society in which you live.
As if fiat currency were so much more stable; as if "modern" currencies such as the euro hasn't been a complete fiasco. I don't see your point here, although, it does actually answer the question in some way, at least if you are part of the group of people mentioned in the topic.
A response [1] by Pete Zaitcev, another insider

[1] http://zaitcev.livejournal.com/220213.html
JackDB – Query and analyze any database in the cloud, right in your web browser
Start, a revamped new tab for Chrome
Oh, oops, I was delaying that for the last moment and completely forgot about it! I'll set it up right now.
Almost all careers are either certification-based or they create an arms race of education. When you have an arms race everyone has an incentive to get a degree but perhaps not everyone with said degree will get a job. Resources are wasted, but there isn't any incentive to stop the system from perpetuating itself. When you have a surplus of unemployed-educated people, why not hire over-educated workers? This reenforces the need for a degree.

Every time I see people saying "not everyone should go to college" during a non-economic-boom I wish they would start teaching game theory to high schoolers.
DissidentX – Censorship resistance tool by Bram Cohen
Am I the only one that wants pictures of these mice flying down in their cardboard and tissue paper parachutes?
"While we have obtained some external funding, this mission may never happen without your help."

I suppose I get it, but I thought Kickstarter campaigns required a deliverable end result as a result of contributions?
Kind of interesting, considering that PageMaker got killed by QuarkXPress, and Aldus is no longer with us.
Pisa 2012 results: which country does best at reading, maths and science?
"Now I think Prezi should probably have paid him anyway because that's a pretty boneheaded error and I'd be very grateful if someone politely pointed it out to me"

But Shubham did one additional thing, he unintentionally embarrassed a founder. That's the real reason he's not getting paid, everything else is a technicality...
OP Here. I'm happy to answer questions from people here in the comments.
Wage restrictions in Premier League would act similar to NFL salary caps: http://www.dailymail.co.uk/sport/football/article-2274957/Fi.... Also, the foreign player rule: http://www.premierleague.com/en-gb/fans/faqs/home-grown-play...
Would it be possible to use bitcoin for digital voting?
Once a vote is in the blockchain it can't be altered anymore, greatly reducing the change of election fraud.
Or am I missing something?
Another interesting point is that, only gcc produced binary has that behavior. clang generated is the opposite. Check this comment about testing on Sandy Bridge with gcc and clang: http://eli.thegreenplace.net/2013/12/03/intel-i7-loop-perfor...
True story: Before Intellij, I was working for a client whose IDE standard was VisualCafe. I hated it so much and kept interfering with what I was doing that I actually reverted to Notepad and building/testing via command line.

Not all IDEs can make you more productive.
Often this is to keep from having to pay out for bugs you can't fix (the most common things to be out of scope are third party services). In this case the problem was actually on Prezi, but I imagine the rule was written to exclude bugs in their version control system from the bounty program.
Right and the guy of the last comment of the issue is proposing also an solution for it:

https://github.com/soveran/cargo
One thing that jumped out at me in the FAQ:

You tell Luna when you'll be home, and the delivery will happen between that time and midnight.

I'm sure there are a ton of folks who wouldn't mind a midnight delivery -- I used to be one of them -- but there are probably a fair amount who would like to get a package at 7 p.m. but would definitely not like to get a package at 12 a.m.

Perhaps as Luna expands, it might consider shifting to a model that allows a smaller time window for the folks who get home earlier. For instance, it might use a two-hour window, so people who get home at 7 will receive their delivery by 9 and people who get home at 10 will receive their delivery by midnight.
to roll a d6, flip five pennies, count heads and add 1

Fail. It is a good thing you didn't write the actual code since it would be wrong. You're in luck, click on the link provided above and Learn.
Commendable, though you probably need to redact the bitbucket link in the screenshot too as that has Adam <redacted>'s full name as owner of the repo.

Where does it end?!
Just to be clear, I tried it with 64-byte alignment
Devil's Advocate (from an uninformed newbie): What's the benefit of this when no one uses chrome for mobile? All android devices come with "Internet" and all iOS devices come with Mobile Safari. This doesn't help me resolve issues on the browsers that people actually use on mobile devices.
Minimum Viable Product.

The idea behind an MVP is that you build the bare minimum of what it takes to prove their is demand, and then you build out the rest of the features to make it awesome.

If you don't build an MVP you might never ship anything, and that makes VC's unhappy.
I think most people would argue that items with uses other than exchange medium generally have some intrinsic value. A dollar has no intrinsic value, but a dollar bill can be used as kindling. Even if no one values it, you can drink water, etc.
> They are a way for the management class to divest liability or responsibility for decisions

I'd also say they are a way for bureaucrats to blame the victim. Someone's complaining that they were attacked? Kick them out of school for being in a fight. That will shut up the people who want to fix things.
Most engineers don't work on projects with as straightforward outcomes as "flies" or "doesn't fly", even in college. Even if they did, not everything that falls in the "flies" category is equally good. Deciding which is the most good for a given application can often be as qualitative as you perceive liberal arts. Furthermore, there are many engineers who have made careers out of doing little more than "criticizing without a mechanism for determining the correct way".

To argue from the other side, the point of liberal arts isn't to make you argue both sides of an issue equally. And telling a good essay from a bad essay can often be easier than telling a good airplane design from a bad one.

(Full disclosure: I'm an engineer and I only took 2 semesters of humanities classes in college.)
I think this line of thought is a big problem in the development community.

There is a clear separation between code quality and shipping a successful products. Ideally you would want both if possible, but a product is not just code.
How is that dishonest? It sounds like a great way to improve security and get bounties.
IPOs and Candlesticks
I agree 100%. If I knew there was a music service that would target my dollars more directly I'd be much happier to subscribe.
Libertarian legal scholar, design nerd and native English speaker here. There's a few basic errors I notice right away like:

>Give your customers a peace of mind.

There should be no 'a' and just be 'give your customers peace of mind'.

The homepage really isn't that great in presentation but the secondary pages are very "squashed":https://www.bitrated.com/faq.html#is-this-an-escrow-

You need to add some spacing/padding around these list items and titles otherwise it looks pretty crappy.
This seems pretty cool (actually very similar to at least the port-forwarding part of OP's article - except for iOS), but I imagine on Linux you'd still need a device. On a Mac you could just use the Xcode's iOS simulator.
Nice.

Isn't it a bit odd that "C/C++" is a single category? That works in certain contexts, but certainly (1) C is a much more common compilation target than C++, and (2) C is much easier to handle as a source language than C++. So in this table it does not make sense to think of the two as one thing.
A terrible terrible coder? That's a really insulting negative tone. Maybe he is not the best but he is clearly not terrible. Out of all the programmers in the world my guess would be that he is easily in the top 1-5% even if he leaves messy code behind.
Everything Is Becoming a Branch of Computer Science
4D printing is coming.
If you mean it took less time for CentOS to push out 6.5 from when Red Hat released their 6.5, this may be because of sponsorship allowing the maintainers to spend more time, and because of improved build processes.

CentOS Devel archives worth a look sometimes as is Karanbir Singh's blog.

I use CentOS stock desktop on a recycled laptop as a writing machine. Just the Fluendo mp3 decoder, Adobe Flash installed from RPM and the ntfs-3g package from RPMFusion downloaded and installed so I can read NTFS external hard drives. It all just works on the X200s, including hard drive encryption as I get email on this machine and don't want data accessed if it gets stolen or lost.

The 6.5 update just came through as a regular update although much larger than usual (350Mb of download) this morning UK time. All solid, no problems. I always find it amusing that Linux based OSes can run an upgrade like this while I carry on typing in homework questions!
Was minecraft supposed to be modable from day 1?
I know from my own experience that if you design a large monolithic application and then decide afterwards that you want a pluggable system, it's never easy if you don't have time to refactor the whole thing.

Also network programming and game/graphics programming are different disciplines with their own challenges. Big studios might assign different people to these tasks, so I wouldn't expect somebody to be amazing at both.
JVM has a garbage collector, so if we are talking about modifying JVM itself, we wouldn't need anything that works online: you could determine which parts are referenced in a simpler way during each GC.
>>> You can make guesses as to the expected resources of the attacker, but if you're wrong and the attacker has more resources, then you might as well have not even bothered.

This statement is dead on.

From the Wired article about Max Butler:
http://www.wired.com/techbiz/people/magazine/17-01/ff_max_bu...

"Butler spent months plotting to infiltrate and overtake his four competitors, culminating in the two-day hackfest in his overheated safe house high above the Tenderloin. The sites blinked out of existence, their thousands of forum posts later rematerializing on CardersMarket. Iceman now had upwards of 6,000 users on his site, making it by far the biggest carder site on the Internet."

Your security people work 8-5 and go home and leave their work at their office. Most hackers have the ability go days or weeks at a time banging away on your system until they find a crack wide enough to get in and then its game over.
Maybe I'm dense, but why not the same way a compiler implements it? In a recursive function, at the point of recursion, flag the call to have codegen not setup a new stackframe and just reuse the current frame.

But you may be right that this might not be viable to run fast enough for JIT on a large codebase. Obviously you could tail-call enable every call that's eligible, but that probably doesn't generate optimal code. OTOH, they have tracing in the JIT for hotspot stuff, right? So if the tracing part counted how many call loops it had hit, it could decide to implement tailcalls in that path. Or perhaps it invokes analysis when the stack gets to be 75% full.
Weird, I was thinking about this kind of application for the last few days (unfortunately many good domains are squatted, e.g cointract)

I imagined being able to set the arbiter via an email address however, making it a little easier to use, but that obviously has some security implications.

Great execution, very excited to see this part of Bitcoin develop.

btw the about page 404's
Well another scenario is to disable any civilian vehicles in range for a quick temporary road block.
One under-discussed problem with "zero tolerance" is the application of the (misguided) principle to that which doesn't even constitute a relevant offense. Suspending a kid for pointing a finger and saying "bang!" under "zero tolerance weapons policies", or for having mundane analgesic for menstrual pain under "zero tolerance drug policies", or for wearing a religious-themed T-shirt under "zero tolerance hate speech policies", etc. is not equal reprimand for violations, it's arbitrary abuse born of sociopolitical bigotry doled out by people suffering a tenuous grasp on reality - demonstrating exactly why they should not be empowered as in loco parentis. Alas, most parents defer to "the severity of the charges" and alleged authority, rather than retorting "you're NUTS" and press child abuse charges.
It's not all fun an games when your issue requiring attention is dismissed with a WorksForMe...
If you liked this article, you should also check out his hour-long talk at Stanford (March 2011) which touches on many of the same topics while going into a bit more depth:

http://ecorner.stanford.edu/authorMaterialInfo.html?mid=2669
Stealing from a post I made on the same subject 932 days ago:

I've read some reports from people who are tired all the time because they haven't "adjusted" - and the punchline is they never will. I think Pavlina's and others are in denial; while the social aspect is obviously negative, it gives them a convenient excuse. If the only downside was not having a schedule that worked with the rest of society, there would be someone, somewhere who would not have done it, but would being doing it. But there isn't, because that's not how sleep, for us, works.
Why the fck are you downvoting this? It was just a fcking opinion, if a tool makes you productive use it! A bunch of narrow minded people...
KDE Free Qt Foundation Agreement Amended to Cover Qt for Android Port
Please note these contain security fixes for XSS in `number_to_currency`, `simple_format`, and `i18n`, and a denial of service exploit in `ActionView`.
Twist. Rights holders are actually the owners of spotify in 90% of the cases.
>He is a terrible, terrible coder. Minecraft was (and still is) an unoptimized, poorly designed piece of crap when he handed it off to the rest of Mojang. The DCPU-16 he designed had many flaws and his assembler for it threw out assembly convention. He makes very basic mistakes very frequently and his core designs are flawed.

So, he's a pragmatic programmer that gets shit done -- to the point of being able to design his own toy CPU architecture (which already puts him above 90% of the programmers out there, including people that HAD hardware architecture classes at university).

Sorry if he doesn't live up to your standards...
Just as a counterpoint, I think the naysayers are completely wrong (other than the price and availability comments). The first sentence told me a ton about the device, and I began getting a good sense of what it did on each "page" / scroll section.
Trace cache shouldn't be the issue because the loop is simply executing too slowly. Even with very pessimistic alignment, HSW should get well more than one instruction per clock from that loop.

The culprit is probably store-to-load forwarding. Memory ops cannot wait until the coast is clear like data ops do because the addresses are not known early enough in the pipeline, so they are dispatched well before it's even known that there will be a store-to-load hit. The system to maintain the memory model is very complex, not well understood outside Intel, and might conceivably include optimistic optimizations. In such cases, it's completely feasible that issuing another store in the pipeline might reduce the amount of work that is rolled back and needs to be redone.
The Second Machine Age Shows How To Race With The Machine
The Most Valuable Thing I Ever Made, A Button
Yes, I'm sure that cannot possibly have anything to do with the pipes rather than the software.
To a far greater extent, this addresses the limitations of classical payment networks - the arbiter never has access to the funds!
No, he really is terrible. I'm dead serious. I am responsible for working with his crap all the time, and I probably know more about the technical workings of Minecraft than even he does.

Notch writes terrible code.