skysight-inc/HackerNews huggingface dataset:
I sense increasingly shrill sounds emanating from the OpenBSD camp.

Monday: Theo De Raadt, complaining about FreeBSD security, after giving commit access to NSA/FBI contractors to install backdoors in OpenBSD back in 2003.

http://www.itwire.com/business-it-news/open-source/62641-cry...

Pull quote:
—
"Now we all discover that FreeBSD has been doing it wrong. It's not as if they operate in a closed source world, and couldn't have looked at what others did. They must have chosen a few years ago to do this wrong, intentionally.

"Perhaps that decision was made by their Californian developers, the ones who work fairly close to that NSA building.
—

And his presentation from ruBSD 2013 last week (http://tech.yandex.ru/events/yagosti/ruBSD/)

http://www.openbsd.org/papers/ru13-deraadt/

In which our friend Theo de Raadt talks about measures in OpenBSD that make attackers life harder: memory allocation randomization, W^X pages and stack protectors.

Of course it’s served with a side dish of invective at FreeBSD, as the project does not use all his cool stuff, and how could it then claim to be called a secure system, hmm?

Dear Theo,

Playing the game called 'guess my memory address' with attackers might be fun, but better to actually isolate them via cap_enter(2), and guarantee success
rather than attempting to make a successful attack less probable. Security isn't a game.

Your friend,

FreeBSD

After Theo came Henning Brauer speaking about OpenBSD’s variant of pf.

Seems they have made yet another syntax change recently, and that pf performance is up, (but no numbers were reported).

Since Gleb (who re-engineered pf to be multi-threaded for FreeBSD 10) had presented earlier in the day, with actual results:
http://image.slidesharecdn.com/rubsdsmirnov-131214051554-php...

Henning was, of course, queried. Gleb reports that Henning responded, "'in FreeBSD pf is faster than in OpenBSD' is actually a lie, and that if you pick a proper uniprocessor hardware you will see, that in OpenBSD pf can forward 3 times more than in FreeBSD."

Unfortunately, he didn't give any hint on the model of hardware he used to generate this result, so reproducing his results becomes… difficult.

Then yesterday we get the tight-lipped email from asking for someone to pay the power bill for OpenBSD.

I hope he doesn’t get someone in trouble for the obvious tax dodge.

Someone else pointed out the rack pic from 2009. Note Theo standing in-front of the same rack in the itwire piece above, and the same photo is used in his speaker page for ruBSD (http://tech.yandex.ru/events/yagosti/ruBSD/talks/1487/).

So I doubt it's changed much in the past 5 years.
Running iOS 7 on my partners iPad 2 is fine. The biggest performance issues with it are websites that are more and more complex than just a few years ago when she got the iPad. They lag like hell.

I understand why Apple makes downgrading so difficult but I agree it is a real pain in the ass and wish it was simple to do.
Making Angular 70% faster or 450% slower with Facebook React
Any proposition, where A is the thing you want to believe and B/not-B are observations - it's a slightly tongue-in-cheek attempt to mathematically represent the idea that no matter what you see it confirms that you're right.
Credit card thefts can be reversed.

If they can't detect which of the admins did it then what are they going to do?
>>>despite the fact that inflation is running at the lowest level in decades.

Here is someone who does not do his own food shopping. Food prices have exploded since 2008, when the house of cards first collapsed. I used to be able to buy 5 cans of store-brand chunk tuna for $3.00. Now the store brand is gone, replaced by a national brand, and it's $1.29 per can (up from $1.00 per can at the start of this year). And that's just the most egregious example from my own experience. Food packaging has also shrunk dramatically, another way prices actually rise while the "store price" remains almost the same.
I was talking to my father in law (head of particle research for P&G) about particle simulation for research purposes and he was explaining the complex challenges with behaviour of interactions. It amazes me that even at the mathematical level, a post-doctorate doctor of chemical engineering with a team of physicists/computer scientists/mathematicians/chemists are still facing challenges which Disney seem to have solved - glad to see they are properly releasing this research!
Yep, and obviously I figured you wouldn't actually go punch someone in the face. It's just that I'd like to see that declaration made less often :)
Piwik 2.0 release
Planet Labs Raises $52 Million From Yuri Milner
Assuming that you live in a city and you’re a tad paranoid about all these stuff. What practical advice could be given? What could we do in an individual level?
Amazon AWS in China early 2014
I have a django project that swapped out the django templates for mako. Mako templates are awesome to use. The problem is it becomes extremely difficult to use packages that have bundled templates of their own. I would think it'd be the same with flask, no?

Making assumptions about the available ORM and templating package allows 3rd party modules to do more of the work for you.
Acceptance Tests as Specifications
use of contenteditable is worth its own project and newsworthy?
Check out my reply on another comment: https://news.ycombinator.com/item?id=6927170.

That being said, I do miss solo work, because I could get into the zone, and even if I was going down the wrong path, it was ME doing it, master of my own domain. It feels like I'm alone on my boat sailing into uncharted waters, an adventure.

At its best, pairing feels like being part of a tactical response team, at its worst: like there is a machine that turns my brain cycles into money, and they let me keep some of the money at the end.

Edit: Rereading both comments, apparently pairing makes me wax with metaphors, like a... nah
San Jose State U. and Udacity Resume Online-Learning Trials
Also, credit card numbers do expire. You could just make a backup copy of somebody's private key and wait a year or two before transferring all their funds to your account, unless they move the money away to a different address themselves.
Can this not be achieved by just using a contenteditable attribute?

Edit: I'm an idiot, just looked at source.
Unless you're very paranoid then a single pass of zeroes should be sufficient.

The bigger problem is what to to with a dead hard disk. It's usually easier to buy a new one rather than replace it, but an attacker could perhaps repair the disk to steal the data.
At work we send any non-wipable disk to be physically shredded. At home I think I'd just hold on to all disks indefinitely.
"OpenBSD’s variant of pf"

The OpenBSD devs wrote pf from scratch. Mac OS X, FreeBSD and NetBSD took it and now use it and have variants of it. OpenBSD has the original, standard pf that they wrote from scratch and gave to the world as free software. OpenBSD's pf is not a variant of pf. It is the original. And it's insulting and incorrect of you to suggest otherwise.
Dancing with Steve Wozniak
I for one don't really care about the motivations of these companies. Im just glad they are doing something about it.

This NSA debacle is just one more nail In the coffin of American Emperialism. And America better wake up and change her ways if she wants to continue to enjoyed the privllaged global position she has had for so many years.
So I read the actual publication[1], and it appears to be mostly a lot of conjecture, at best. The only actual risk assessment is in the appendix and matches the linked article. The 10% number cited by the article is the risk that this happens within 10 years using those numbers. However even the paper notes that the odds are time-invariant. This is quite unrealistic (which the paper fails to note) given that the geopolitical landscape has changed so much since the sample data used in the risk analysis. Instead we are asked to believe that US-Russian relations have not drastically changed since the sample data was taken. Indeed, "It also assumes that the ex- perience of the first 50 years of deterrence can be extended into the future." Given that the last sample point was 1984, this is, to put it mildly, ludicrous. It's more realistic to say that between 1945 and 1991 the risk of a Cuban Missile Crisis-type crisis causing a nuclear war was 6.5%33%10-50% per year, and since then it's been 0, than it is to say that (as of 2013) it's 3/(2013-1945)33%10-50% per year, let alone that it's .19-99% per year that the publication asserts.

Similarly, the author laments reduced public interest in disarmament because the perceived risk has gone down, but has done nothing at all to show that the perceived risk does not correlate with actual risk!

So what's the takeaway? It looks to me like the call for an in-depth risk analysis is warranted, but that the author is using sensational, cherry-picked, and unrealistic data to try to bolster support for it.

[1] http://www.nuclearrisk.org/paper.pdf
The Blame Game: Don't play it
From what I can tell, "minimal" == "makes code hipsters' pants tight". YMMV.
That's interesting. I found this very comprehensive chart of state laws:

http://drinkingage.procon.org/view.resource.php?resourceID=0...
Of course not, its only a simulation of a model. The data necessary to store all physical attributes including every atom and sub-atomar particles would not fit on any hard disk in the world. The result is nonetheless pretty amazing.
Is there any tool to brute force/run password lists against wallet.dats?
I have one around that I am adding coins to but just can't remember my own password.
If the hardrive wont power on but the filesystem is ok you can still send it to a recovery company for something like a few hundred bucks.
-Hi i've just received the data you recovered from my hard disk, thanks, but I can't find my wallet ...
-Dont know what you are talking about.
As far as I can tell, Blablacar was a successful company that after half a decade raised funding to expand, not to exist.
Well, the link I supplied quotes the law.

> Under the Road Traffic Act 1988, the police can require a person to take a screening breath test if
they have a reasonable cause to suspect that:

> ● the person is or has been driving or attempting to drive or is in charge of a motor vehicle on a
road or other public place with alcohol in their body (section 6(2) and 6(3));

> ● has committed a moving traffic offence (section 6(4)); or

> ● has been involved in an accident (section 6(5)).

> The subsequent evidential test carried out at the police station can be submitted as evidence in court.

> The prescribed alcohol limit is 35 micrograms of alcohol per 100ml of breath, which equates with 80 milligrams of alcohol in 100ml of blood.

> It is an offence to refuse to take a breath test when required to do so by a police officer unless there is a reasonable excuse. Court penalties for refusing an evidential test are the same as being above the prescribed limit.
Oh, and of course you need that google analytics stuff in there.
There's more than just antibiotics in wastewater, google for studies relating to the feminization of fish due to the residual levels of anti depressants in wastewater. The processes used determine what gets removed from the water. Most facilities use aerobic breeding zones, forcing extremely high volumes of air into the water to allow from friendly microbes that actually end up doing most of the real work digesting the waste. Microbes don't eat everything, so expecting them to eat the all of the unwanted products in the sewage is not going to happen. To get everything, you would need first research to identify bugs that eat the particular thing your wanted disposed of, and then a new zone at treatment plants for that process. Its real easy to say yeah they should remove this, but when you get into the details to understand why its not happening you begin to see this is a massive undertaking.
I'm typing this on a windows PC with 192GB ram.

64GB RAM LIMIT? WHY OH WHY?

it is 2013. 64GB is not enough for many serious tasks.
I considered having this displayed on a spare monitor I have but ultimately decided against it as the animation uses too much CPU for the rendering.

Maybe I'll port it over to C++ if I find some time.
Another way to look at AI climbing hills is "causal entropic forces" [1], which can make the AI spontaneously want to climb, because it maximizes entropy — it gives more future opportunities than going down.

On an unrelated note, your certificate is for .squarespace.com which does not include www.iamtrask.squarespace.com and triggers an SSL exception.

[1] Wissner-Gross and Freer. "Causal Entropic Forces", in PhysRL* 110 (2013) — http://www.alexwg.org/publications/PhysRevLett_110-168702.pd...
MP3 Bit Rates, File Size And Audio Quality
Except that it's not just 'a link' is it? It's billions of miles of copper, fibre optics, routers, switches, media converters, legal agreements, large buildings, nuclear power stations...
Great features. Now it really makes me to think about upgrading my rails 3 apps to 4.1
'Cos Bill said that 64k would be enough for anyone a while back.

(Out of interest what serious tasks do you find require that much RAM? )
Last time I checked it was more in the thousands bucks range than in the hundreds unless you are only talking about damage controller.
24 hour Tesco not being open after 4pm on Sunday is the bane of my life.
"I can see this happening with custom enterprise type apps that have a tablet component. Take a sub-$100 tablet, get your brand on it and have it load into your app by default or something."

Given how much "custom enterprise-type apps" cost to make, I can't imagine anybody squealing about the price of decent tablets to put them on. Picking the $38/unit El Cheapos is like deciding to use only bargain-basement folding chairs at your $200/plate restaurant...
What I see is most Mac owners that buy out of their own pocket have the basic models. And the team-leaders / management types always bight the overpriced stuff because the company is paying. (It mildly hacks me off when I see this in academia, where most research is publicly funded.)
Indeed. It seems reasonable to postulate that a more 'unconventional' use of a nuclear weapon is the more likely scenario today. The documentary 'Count Down to Zero' discusses such scenarios (http://www.imdb.com/title/tt1572769/) at length and the impression left is somewhat terrifying. The solution? I haven't the foggiest as global disarmament seems unrealistic but the aspiration to progress beyond these ghastly devices as a global community is surely a sensible and just one.
This got no love before https://news.ycombinator.com/item?id=6780984 oddly
"while remaining in compliance with China's legal and regulatory requirements."
It could mean Chinese Government will start blocking main AWS services outside of China to avoid noncompliance's just like what it did with Google search.
Just for clarification, in England we have "Guilty" and "Not Guilty", there is no "innocent" here. The closest to an "innocent" verdict is probably the dismissal of charges by a judge.
Here's one for xmas, RFC 968.

Twas the night before start-up and all through the net,
not a packet was moving; no bit nor octet.
The engineers rattled their cards in despair,
hoping a bad chip would blow with a flare.
The salesmen were nestled all snug in their beds,
while visions of data nets danced in their heads.
And I with my datascope tracings and dumps
prepared for some pretty bad bruises and lumps.
When out in the hall there arose such a clatter,
I sprang from my desk to see what was the matter.

There stood at the threshold with PC in tow,
An ARPANET hacker, all ready to go.
I could see from the creases that covered his brow,
he'd conquer the crisis confronting him now.
More rapid than eagles, he checked each alarm
and scrutinized each for its potential harm.

On LAPB, on OSI, X.25!
TCP, SNA, V.35!

His eyes were afire with the strength of his gaze;
no bug could hide long; not for hours or days.
A wink of his eye and a twitch of his head,
soon gave me to know I had little to dread.
He spoke not a word, but went straight to his work,
fixing a net that had gone plumb berserk;
And laying a finger on one suspect line,
he entered a patch and the net came up fine!

The packets flowed neatly and protocols matched;
the hosts interfaced and shift-registers latched.
He tested the system from Gateway to PAD;
not one bit was dropped; no checksum was bad.
At last he was finished and wearily sighed
and turned to explain why the system had died.
I twisted my fingers and counted to ten;
an off-by-one index had done it again...
I imagine that knocking someone off their bike counts as "erratic driving".
Actually, I had to answer a question in order to see it, having Googled the article. Weird question too, about what kind of accomodation I'd use if I was on holiday in Tanzania!
Gunning fog index
Blunt force trauma?
The requirements for a visual simulation and industrial process simulations are quite different.
I'm surprised that giving "free electricity" isn't seen as a donation.
No one anywhere can legally or illegally drink "champaign" as there is no such thing. The word is champagne.
> Unpack this? I had thought that if you sent coins to a fresh wallet ID, it becomes effectively anonymous.

Not really, you can see where the money came from, and assume the same owner (or a relationship between the owners).

To anonymize bitcoins you have to 'mix' them - take X bitcoins from N people, send them to a single address, then send X to new addresses for each of the N people. Because any persons bitcoins might end up going to someone else, you cannot assume it's the same person or a transaction any more.
I'm stitching and rendering very large gigapixel images:

http://360gigapixels.com/tokyo-tower-panorama-photo/

http://360gigapixels.com/tokyo-gigapixel-roppongi-hills-mori...

http://360gigapixels.com/london-320-gigapixel-panorama/

http://www.360cities.net/gigapixel/strahov-library.html

Both in the rendering of the files and in the post production using Photoshop, I utilize all the RAM, and regularly use up to 1 terabyte of scratch disk.

I guess video editing, 3d work, and other image manipulation stuff also can benefit from this much RAM.
Excellent, can't wait to get started! I'll send you an email tonight to connect.
>> Ultimately, I am not even sure it really makes sense to compare the two sorts of abstractions.

So you're saying that this particular abstraction of abstractions is leaky? ;)
You are limited in how much RMB you can buy just as you are in selling. You are right that most RMB investments suck, beyond opening a massage parlor or dealing drugs in the tun or something. Real estate is the worst investment right now, hukou not withstanding. You can buy A shares now as long as you have RMB, but the stock exchange is insider trader driven.

Honestly, I don't know what the reason for incoming hot flows are, just that they have been a problem in the past. There are obviously good investments to be had here if you are well connected.
That release looks awesome, congratulations to all involved.
Happy I got it right!

This was generalized by A. Einstein in something along the lines of "a problem cannot be solved with the same state of mind it was created in". I like to understand that as:

1. You have a problem.

2. You have a situation that cannot be solved.

3. You have a situation you think cannot be solved.

4. You have a reasoning process concluding that the situation cannot be solved.

5. You have a state of mind which implies, as a logical outcome, that the situation cannot be solved.
I thought the strange relationship with guns and the total mayhem that occurs when a woman accidentaly shows a nipple rather than the whole rest of her body would be in the list.
BTW I love the US, maybe a little because of its contradictions (we french have a bunch of them either).
Producing a stronger, smaller and more unified Time Warner
> Less dependencies, as more is included out of the box.

Or... more unnecessary dependencies you're forced to code around if you happen not to want or need them.
OCR an RSA key fob (2009)
Newegg has 16GB and a 4GB sticks for $209.99 and $72.99 respectively. I have no idea if they would work with the Mac Pro though.

http://www.newegg.com/Product/Product.aspx?Item=N82E16820239...

http://www.newegg.com/Product/Product.aspx?Item=N82E16820148...
If you split it into little parts, and those parts have no sensible meaning on their own or no sensible interface and semantics -- then you're absolutely right. Testing such parts will be difficult, too, because of this.

But if instead of a monolith, you have a set of components with well defined interfaces that have simple semantics (that do not leak abstractions) -- whether or not these parts are re-usable in other contexts -- then you almost automatically have higher quality software:

* Easier to test means it will likely be better tested

* Well-defined interface and abstraction and a small implementation means that reviewing/correctness becomes easy. You only need to understand a small component to review it. "Obviously no bugs" rather than "no obvious bugs"

* Easier to split the work across developers

* Easier to comprehend the whole as a collection of its parts

The total number of lines of code, or even the total complexity may increase relatively to a monolithic design. But correctness becomes so much easier.

You mention refactoring, too, and IME, refactoring can be both easier or more difficult, depending on whether it is within a single small component or across multiple ones.

If you add architectural/design changes -- then it is night and day. A monolith will likely have to be rewritten to make an architectural change reliably.

A set of components can easily be split, for example, so that a few components are moved to run on a different system with a network protocol between them.
This bit of cultural knowledge is important.

I was thinking of dirtbikes as their UK equivalent. Here, youth ride scooters / mopeds and some of them are styled as like dirtbikes. And there are probably road legal dirt bikes of more than 125 cc.

The gang context is also really important.
Why would you put someone in prison for a first time non violent offence?
If you find a stream in the champaign or drill a well, you could probably drink.
I expect to be able to actually run the game instead of it crashing as soon as I double click on the icon. I'd probably have no issue with it, if I could actually get it to run. Then there is the whole no refund issue with Steam.
And nothing of that matters to the person writing the content or the person reading it - which is why it's beautiful.
> All this is possible without wasting police time

How many police officers are there in New York city? How many people do they arrest or otherwise spend time on every single day? How many hours did his case take out of the total hours spent? 0.001% ?

That's not "waste" in any meaningful way of the word, and not even an argument in this discussion.
I would hope that tuna prices are rising. Supply and demand.

https://www.google.com/search?q=tuna+population&client=firef...
https://en.bitcoin.it/wiki/Wallet_encryption

It would be pretty unfeasible to attempt a brute-force, due to the number of encryption rounds.
This process yields fantastic, realistic visuals, but I bet you'd find it does not yield the scientific information they're chasing. It's sort of like how the 'standard' linear static finite element method assumes insignificant displacements and no plastic yielding of materials - as soon as you need to deal with any sort of significant level of displacement or distorsion of the material in question, a linear static solver isn't capable of giving you accurate results.

With displacement, it tries to fake it by extrapolating the linear displacement and assumes that applies over the entirety of it, when in actual fact as soon as it displaces, the strain field in the material will change and it needs re-solving.

It's a good tool, but it has its limitations.