skysight-inc/HackerNews huggingface dataset:
Well, if the algorithm is so broken then it should be
trivial to break it even with their limitations.

Well, if the house is so badly protected, it should be trivial to break in, even with their limitations[1].

[1] Limitations include: not being allowed within 200m of the house.
Why Bank of America, why?
I want to master iOS development design process.
Also make more coding on Rails to polish my knowledge.
Start designing for the Android also is one of the things I want to master too.
The bias of the police against leftwing issues is part and parcel of the power structure that makes life pretty sweet for mildly affluent white males.

Look into the history of gun control. When the Black Panthers were talking about the second amendment, Ronald Reagan, et al, were for control.
The Seven Phases of PaaS
A quick scan of jigneshg's past comments reveals that they are definitely not a native English speaker, and as was pointed out above, in Indian culture, this is a perfectly polite way to empathize with another's suffering. The irony that this apparent cultural misunderstanding has caused jigneshg's karma to plummet gives me no end of mirth, but the clearly anglophile Western (and perhaps white male) reaction to jigneshg's statement is no more accurate for it. There's plenty of self-righteous indignation to go around this holiday season, so maybe a little forgiveness is in order, after examining the situation?
Addressing Silicon Valley’s Race Problem
No, Openreach provide a bitpipe between the customer and ISP. The Internet gateway is with A&A.

http://aa.net.uk/kb-broadband-realinternet.html
This is and, not or.

But it did sound like check in growth was tapering.
Easy to read explanation of convergent replicated data types
I could never understand how they managed to be around as long as they have. I was constantly assured that they had high untold value in IP.

Really sad to see this happen. Some really great people working there, with great potential.
I agree with what you say and I find it quite orthogonal to what I said :)

You also gave an interesting example. Dancing is a specialized activity. Thus specialized
talent and/or quality experience is required. But not all people go dancing. So I wouldn't
quite include it in the set of common experiences that most people will go through
in their lives.
but how do you know if all those Zeitgeist, Russia TV, and other revelations (Greenpeace) aren't just paid and orchestrated by Russia to destabilize US. I know they are.
>> If this extension violates any law in UK, please send me an email at hello@goawaycameron.co.uk and I will be more than willing to comply.

Is this how the law works?

Citizen: "…um…sorry officer, I didn't know that this is illegal"

Police Officer: "…well, if you didn't know…off you go then"
If the world wrote perfect code, nobody would have ever needed to replace strcpy. Water is wet.

Yet somehow, even you admit that they have some use because "almost no value" is infinitely more value than "no value". The benefit you describe is exactly what's beneficial. strlcpy does the length calculation, and prevents overflowing the buffer, which is a reasonable improvement over calling strcpy and trusting that previous checks (if they exist at all) are correct.
Truncation (unless intended) can never occur when the program is correct, it merely exchanges one vulnerability for another one, which rarely can be exploited.

That noone checks for the return value is trivially false. That Theo only cares about usage and not about correct usage is also false. Just because something isn't in a mail doesn't mean you can come to the reverse conclusion and claim the person doesn't care about a topic not mentioned. Most people tackle bigger problems first, before getting into discussions about writing "perfect" code.

Given you are a perfect programmer (I assume), why don't you check the openssh code you quoted and let us know how you would've handled it? I looked at it, it's part of (portable) utmp logging and will truncate the username from passwd(5) to fit into the utmp structure. Nothing much can be done about it, because the two structures do not agree on common size limits.

Demanding perfection while being unwilling to improve the status quo is hypocritical.
Last time it bubbled, it followed this exact chart, but on a smaller scale.
Why do you need to login? Sounds suspicious to me.
Astronaut food: Can you cook fries in space?
strl(cpy|cat)() is quite dangerous to just use blindly as a full replacement for other (mem|str)*(cpy|cat) functions. strlcpy's return value is the length of the source string. So say you have a big 20MB XML document, and as you are scanning along, you use strlcpy() to store a node name or value into another string. Even though you only ask it to copy five bytes, it goes ahead and runs over the rest of the 20MB document simply for a return value you don't (in this case) care about. If you keep doing this over the entire document, your parser will end up with quadratic overhead.

strlcat() has the same overhead issue, and its return value is downright cryptic: it is strlen(source) + min(length, strlen(target)).

When it tries to compute strlen(), ignoring your requested length parameter, this means it will access out-of-bounds memory if that string is not properly null-terminated.

And if you're absolutely paranoid about security, these functions not having both source size and target size parameters gives you a second way to go out-of-bounds.

Overall, they're okay functions, but you can easily do a lot better. And since these aren't universally available, if you're going to declare your own cpy/cat functions, you may as well use a better implementation than strl.
Startups out-doing each other to be transparent e.g., Buffer
Yeah, I'm aware its opt out for new customers, but its opt in for current customers. I would like to think that the reasons you gave are all mistakes with the blocker that would get ironed out over the coming weeks, especially more likely with the press attention it has got.

Ulterior motives aside, if this saves even a handful of kids from growing up with porn addiction, its probably worth it, right?
I am always amazed at what length people are ready to go to criticize something, obviously this discussion is going nowhere.
An expert on trees:

This oak is probably diseased. It has discolorations on
some of the leaves and the bark is much looser than
normal. I think it should be thoroughly investigated or
perhaps just cut it down to be safe.

kayoone, knowing nothing of trees: "some strong claims in there for not really proving that the tree is indeed diseased."
It may even be possible to factor the RSA Key

More to the point, KPA,CPA, etc are very important, and systems should be definitely tested against them, but in real attacks, they may not be available
That's why when i see "terrorists were arrested" in the news i think yea right... you mean people who don't share the powers views and may or may not be violent.

The word "terrorist" has lost its meaning to me since just about everyone not doing as they're told are classified as a terrorist now.

It's just another buzzword that has lost all its original meaning.
You can't beat politics with technology http://www.wired.co.uk/news/archive/2013-11/18/peter-sunde-h...
I hope Amazon crushes Ebay/Paypal

Ebay/Paypal has a long history of screwing sellers and buyers and users of Paypal, just search the internet for horror stories. Their support is staffed by drones (ha) unlike Amazon support who are swift and efficient and seem to go out of their way to make me feel good as a customer.

What is more surprising is that Ebay hasnt been brought to court here in Europe, its quite obvious majority of sellers are not charging or paying sales taxes (VAT) which are as high as 20 to 30% here depending on state.
Pincus sat down with the most powerful man on earth and told him to his face that he should pardon the whisteleblower who has most embarrassed him. That takes real guts, no matter what else he's done.
Since the inception of radio and TV the democracy is gone.
http://en.wikipedia.org/wiki/Inverted_totalitarianism
Well it appears I was a little misguided, I have a friend who uses them as a second ISP purely for office stuff.

He should me 24 hour ping latency graphs once, the network quality looked great.
Jack Dorsey gives up 10% of his Square shares for the option pool
This year I switched to JVM/Scala programming so next year I would like to improve my Functional Programming skills in Scala, and learn more about JVM internals and low level concurrency

I also want to have something lightweight for playing and prototyping so I think I should improve my Clojure/WebStack or Python/Flask, I haven't decided yet.

I wish to continue with learning more Computer Science / Maths stuff like Statistics.

And I finally would like to adopt Emacs, I got inspired by recent talks about its power at HN. Lots of plans :)
I've read over several of your answers, and what your arguments boil down to (as far as I can tell) is that people use these functions wrong. While true, incorrect use can lead to an incorrect program, and that people's opinions of these functions thus need to change, does this mean that we shouldn't use this functions? If the goal is to reduce the possibilities of buffer overflows, wouldn't it be better to use these functions? Isn't it actually easier to find bugs involving strings, than bugs involving overflows?

These functions do solve a real issue. Of course, people not using the functions correctly should be made aware of that fact, but still, avoiding buffer overflows > bugs due to short strings.
Equipaciones de futbol baratas
Too much RussiaTV (a.k.a. KGB-TV) too little your own brain usage.
It always surprises me that people need such an event to rethink their life. I put my life and goals in question around every month, if not every week. Could you tell more about why you didn't do that before? Would be interesting for me to read.
ignorance does not imply malice.

I don't think it'd stand up in court though.
> Ah, there's some classic Drepper.

I think it's actually quite appropriate that the maintainer of the software that (in one form or the other) is present on hundreds of millions of devices is a bit conservative.
That isn't really an example of market manipulation. Market manipulation is an intentional manipulation of the market. (http://en.wikipedia.org/wiki/Market_manipulation) The Knight Capital incident was an example of a firm performing bad trades due to an error in their systems. Their behavior certainly wasn't intentional or profitable.

HFT isn't based on market manipulation. Some HFT firms perform market manipulation, as do some non HFT firms, but this practice is illegal. (For example, newedge was recently fined for market manipulation)
This is interesting and cool, but would be much more interesting and cool if the source code for the extension was available somewhere so it can be easily reviewed.

Is the code up on github or somewhere else?
Yep. So far it was more like "Please please don't use Telegram. Please please use TextSecure.".
Zynga's Founder Asks Obama To Pardon Snowden
like another orchestrated terrorist attack similar to 9/11 this time created by left/right wing domestic "terrorists" ?

If they could pull off 9/11, I'm sure they can do that again with domestic "enemy". But then what's the purpose? Why to do that? Usually, not to loose power. But they are in the power all the time anyway (military/industrial complex). So, what gives?
How are you going to handle the eventual addition of your proxies IP addresses to the block list?

It feels like this will quickly become a game of cat and mouse with the block list managers.
Addyosmani/es6-tools
That's morbid, nobody would sign up for that.
As long as it's a minority market, their efforts will be half-hearted.

That said, the only PC I ever owned, an HP, had things break after an update of Windows - the graphics card and audio drivers. never quite got them working right again, so I don't exactly have a favorable opinion of that famed easy usability of that OS either.
Yeah, it's like saying "oh but the attack possibilities are so limited" to then proceed to mention how all the components can't bear the load of the bridge.

Well, if that piece of steel can so obviously not hold those 10000 tons of concrete given the corrosion over the next 30 years, it should be trivial to break it even with their limitations.

It has been shown that SHA1 is broken - it's just that experts in the field tend to be able to know such things before the bridge has collapsed, but that does not mean that they can demonstrate it to anyone who doesn't want to study the theories behind their assessment without building the bridge and waiting 30 years.
Why you should invest in altcoins
A Battle That Snowden Is Not Winning
I disagree

You are allowed access to the encrypted data.

In a real attack you may, depending on the circumstances, only have access to that (at first, at least).

Probably more like "you aren't allowed to destroy any locks or doors to enter the house". Hard, but much different than staying 200m from the house.
Details from the drunken Moscow bender that got an Air Force general fired
Automate conversion SVG files to icon bitmaps - scripting Inkscape
There are plenty of people already aware of their coworker's salaries; government employees, including military. It isn't like you don't know some salary info, you know your boss gets paid more for example.

>You should, as the potential employee, be well aware of the market pay and what you are willing to be paid to perform the job that you're applying for.

And when you know what everyone makes you have a much better grasp of the market pay, and if what you were offered was fair. If they tell you "we only pay x" you can only take their word on it if they are keeping their salary data private. If not you have more room for negotiations.

And your example of unfair pay doesn't jive well with me. It is still wrong to take advantage of someone just because they let you take advantage of them. I think a lot of cases of grossly unfair pay fall into that category.

We are dealing with adults here.

http://www.cbsnews.com/news/my-boss-revealed-everyones-salar...

http://www.cbsnews.com/news/what-if-you-knew-everyones-salar...

http://www.cbsnews.com/news/why-are-salary-ranges-secret/
with all the varied experience that you have, why would you want to focus on a programming job. If you are good at sales, evangelizing tech, there are plenty of non programming opportunities where you can add significant value. Look at all the tech companies that want a community manager. There are lots of international tech companies that have good products that are dying to get a foothold in the US market. get in touch with them; tell them you help market, evangelize their product; you can help support their US customers. having a holistic business perspective is an extremely valuable skill.
There is no law mandating this filter. It's put in place through the threat of much more extensive regulation, with no democratic oversight.
I haven't shared your experience with efficient civil service. In the US, everything without market pressure fills with bloat.
Moving houses, I found a t-shirt I kept meaning to give back to an intern I had had a few years before. We were close in age when I was at that job and we spent a lot of time together outside of work. I looked him up and found his Facebook page, where the last post was a year old, a memorial post from one of his family members. No information on how he died. It hit me a lot harder than I expected.

Holy crap, it's been a couple of years since I even learned he died and it still breaks me up a little.
Now I really want to try building a project with Om and React.
In general with these things there's a time lag of approximately one or two Daily Mail articles.
I think the EXTREME branding hurt corporate adoption.
People having more power over their wealth does not necessarily mean the end of government. It increases the incentive for government to convince people to pay voluntarily.

I also agree that cryptography alone is not enough to eliminate the distinction between data and currency, but the consensus mechanism of Bitcoin could have been the missing piece of the puzzle.
Because now you're older. Don't worry, the older, the more conservative.
That sounds a good idea about re-evaluating your life. I was working at a place where many did unpaid overtime and you could see the strain it was having on them and their families. Company's typically do not thank you for extra work.

Buy a VW Bug - "all show and no go" but you will enjoy tootling from A to B with a noisy engine in what is essentially a glorified basic go-kart.
wow thats cruel, the guy could maybe have lived if the ambulance would have been there quickly, a heart attack doesn't necessarily kill you when you react fast enough.
Lego Nativity in 6 seconds
i suppose looking at what people do in china is an idea - iirc the filtering equipment is going to be supplied by huawei who also make the chinese great firewall stuff
It looks to me the SHA1 part is the least of their worries.

Yes, the pillar may corrode in 30 years, but the load is actually on a smaller and frailer pillar
Guess its not fun to find out how bad it is to express a point of view. Go look at all the hoops abortion protestors have to jump through. They wouldn't even dare cross the threshold of the business because by law most can't even come within shouting distance of their targets.

So yeah, welcome to the club. Business and government use the power of the later to enforce their will. The sad part is, people will cheer this type of behavior on provided its exercised against people they don't like but suddenly they are all aghast of when it hits them.

As with all other forms of freedom of speech, asking the government to silence people you do not like is akin to allowing government to silence you when someone else does not like your speech.
The incredibly low-power usage of the chip is interesting, as is his perspective of counting the energy of each operation.

You can run the chip full-throttle with a solar panel the size of your hand, but where it shines is when it's not fully utilized. This is for (odd) general-purpose computation, not ASICs.
24 Days of Hackage: websockets
Fast food for search engines
S.&P. Cuts European Union’s Credit Rating
Not only at (very) high-level play, but also at normal time control. I seriously doubt if a typical player would play Chess 2 taking 1.5 hour for his first 40 moves, as professional chess players do... In speed chess there's obviously more mistakes, and thus considerably less draws, even among grandmasters.
Generally, HFT firms end up decreasing volatility. They price stock more accurately, which makes them money and decreases volatility. If they were increasing volatility, they would make infinite money, since the source of their profit is the volatility.

The main scenario where HFT firms increase volatility is when their algorithms break (either due to a programming error, or because they cease to accurately model the market due to a change in market conditions). In that case, the misfiring algorithm will increase the market volatility, and lose the HFT firm money.

You absolutely right that firms without co-located data centers are at a disadvantage. Thankfully, this only really matters if you are trying to compete with HFT firms. So it's not a big issue for people who trade on a longer time scales. The HFT firms do make some money off of these long term investors, and in exchange provide increased liquidity, decreased spreads, and decreased volatility. (if the HFT firms weren't offering the best prices for the stocks, then the long term investors wouldn't be buying from them)
I'm sure many would disagree.
strlcpy is better because strncpy doesn't indicate an error (and strcpy, well, we know what that does), not because it prevents a crash. I'd rather debug a crash because in that case, I get a nice stack trace and core dump to gaze at.

Also, I disagree C is a tradeoff for speed an efficiency. Runtime speed and efficiency? Development time perhaps? I can easily write parallel code in scala that defeats idiomatic C on both. I use C when I want something portable. I can't use the scala code on a tiny mips device, but I can port the C code if it's reasonably well written. Same goes for any other target, there's nothing so pervasive as C.
Zuckerberg to sell $3.85bn worth of Facebook shares
The BBC putting Anjem Choudary on the Today programme isn't 'free speech'
There isn't a law, it's just pressure on the ISPs to 'voluntarily' add the filter.
Alcohol Looks Like Under a Microscope
Yeah, that's wrong and I'll fix it. Impact: if your username is > 511 characters long and truncates to another valid username that is exactly 511 characters long then you will see their "last logged in" date instead of yours.

Meanwhile, how many overflows have even the naive conversions of strc=>strl saved?
Russia Frees Oil Tycoon Mikhail Khodorkovsky
This UK filter is explicitly not about blocking illegal material, but to block legal website which are deemed by the government as inappropriate for watching. Its an requirement put on ISP by the government, and covers porn, music videos, magazines and newspapers. For now, the focus seems to be on the first item, but the Bailey Review want much much more.

Illegal material has been blocked since 2004 and onward by most UK ISP's, mostly under the umbrella argument of stopping child pornography. The Wikipedia page https://en.wikipedia.org/wiki/Internet_censorship_in_the_Uni... can provide much more details, like the desire to block content ranging from Fashion sites to those describing Alcohol.
Thats the initial first load of IE causing that traffic, then the user goes to their next journey. You really need analysis on 'http://www.bing.com/search?q='
Back side of the card contains CVV2 code, I'm pretty sure that it's not recorded on magnetic tape. Probably, in the original article should be mentioned that difference.
> the EU convention lists internet access as a human right.

They're not stopping you from accessing the internet, they're essentially just giving people access to filtering software.
Cycling Gloves - How Important are they?
Although Starcraft 2 comes close, Blizzard still has not solved the problem of realtime strategy games being too hard to control to allow it to really be about strategy and tactics, and perhaps they don't want to either.
@nubela: if this service can be used to bypass BBC content restrictions, you're going to have a bad time. A lot of BBC content can only be viewed within the UK, so if you can use GAC to access this content abroad, the following will happen:

- they can contact nominet to get your personal data

- you will likely get a letter from their lawyer

- you may get your .co.uk domain taken away

- you may be asked to hand over your entire database of users

- you may be sued for damages.

IANAL, just FYI.
Political change is often forshadowed by technological revolutions. The mechanisation of agriculture, for instance, had a major influence on the decline of serfdom.

Also, certain technologies have an obviously direct form of political influence, like the AK-47.
GnuPG - 16 Years of protecting privacy
KDE's Akademy 2014 will take place from 6–12 September in Brno, Czech Republic
The author of this post drops enough hints. Also, Worm is enjoying a large surge of popularity right now, as it was just completed.
Salted Peanut Brittle Recipe