skysight-inc/HackerNews huggingface dataset:
OKRs for VCs and for startups
https://en.wikipedia.org/wiki/Defensive_driving

https://en.wikipedia.org/wiki/Roadcraft
Eh, I think you are too wound up about it.
Ah, I see. Thanks for the pointer. The docs on connections pane list only JavaScript, CSS and HTML can be evaluated, so I did not try with ClojureScript. I however did try to connect from LT to nREPL which had a running bREPL to external browser. That did not work (no connection), though I have no idea if it even should... ;)

I'll see how it goes and will post to the LT group if I stumble on something.
My feeling everytime I read a paper about btc: everybody watches with interest but nobody has the slightest clue of what this will become in the mid & long run
This has nothing to do with growing up. I feel uncomfortable seeing someone with such condition. I also cannot watch America's Funniest Home Videos where people get hurt constantly.
If you are going to do that check, there is almost no value to using this function as you can do a similar check before copying the string. (The only benefit you get is that if you don't know the length of the source string you save having to first calculate it; but that's a performance optimization, not a fundamentally different paradigm.)

The thing is, though: no one actually checks that return value, as this idea that using this API is what makes things secure has become zeitgeist. This post from OpenBSD is even making this mistake: they care only that people are using the API, not that they are using it correctly (despite pointing out the truncation issue at the end, they are just analyzing the usage, not the correctness). Just using this API is not a magic bullet: if you are using the API incorrectly, your program is still incorrect, and if you are using it correctly you can just use strcpy correctly.

If you don't believe me, this is a really depressing search to perform:

site:opensource.apple.com "strlcpy" -"strlcpy.c" -"strlcpy.s" -"strlcpy.3" -"strlcpy.h"

OpenSSH doesn't even check strlcpy correctly...

317 /* No MIN_SIZEOF here - we absolutely *must not* truncate the
318 * username (XXX - so check for trunc!) */
319 strlcpy(li->username, pw->pw_name, sizeof(li->username));

Yeah, that's great: we "absolutely must not" do something, but it's marked as a XXX?!?!?
Khodorkovsky freed from prison after Putin pardon
The image IS disturbing to me. You cannot project your own feelings on me. She looks very alien, like sun-burnt at a high degree and it made me queasy. I am not ashamed of my weakness here but I wanted to warn others.
You are making the assumption that scenario one does not lead to an exploitable vulnerability... the whole point of this complaint is that randomly truncating strings because they don't fit in buffers because you believe "strlcpy is magically better than strcpy" actually causes a different class of potentially-exploitable vulnerability... it doesn't, as the person I responded to claimed, "fail safe".
> They use the broken SHA1 hash function

They answer this point on the website:
"Q: Why do you use SHA-1 in the place of a MAC?
[...] since this means still requiring at least 2^128 operations (instead of 2^256 with, say, SHA-2) to even begin trying to break this scheme, the trade-off seems fair."

Why not break the crypto (and take the money) if it's so amateurish?
Hah, this is weird. I created GAC, and submitted this a few hours ago, but got not much love. And now you have some :) Anyways, the server is having a serious hug of love. Things are slowed down now.

Anyways, AMA!
$this->app['component']->function() gives me an instant headache. Which is why I always wind up giving up on Symfony/Silex after trying it out every now and then.

OTOH, I had a much easier time with Laravel, though it uses some of the same Symfony components under the hood.
A lot of people are perfectly happy with the games that their phones and cheap tablets play, and the Ouya will be capable of handling everything they can. It will be less powerful than the higher end phones and tablets, but most game producers target the larger market so, aside from maybe turning some visual sparkle off on less powerful targets, almost everything should work well enough on the Ouya's design.

I see the Ouya mainly being appealing to gamers who are mostly interested in casual and retro titles, which it is no doubt more than capable of handling. The point is that they are not trying to be a traditional powerful console, they are trying to be what a large group of people (who have traditionally been interested but not interested enough to shell out for a traditional console and its expensive games) are wanting. The fact it also doubles up as a media centre machine, aims to work out of the box (the cheap devices imported from out east are sold as basic Android units with little care for polishing the software install so the user needs a little technical knowlege to get things like XMBC and its ilk to work), and is fairly cheap, makes it quite an attractive package unless you need/want more power (in which case there are better solutions for you out there already).

EDIT: I've just checked and the Ouya runs off the Tegra3 and has 1Gb RAM, so it has oumpf than I thought when writing the above. That is essentially the same chipset choice made for the G1 Nexus 7 so noticeably more powerful than any cheap tablets and phones. It won't match the high power shiny now consoles and play their graphically demanding titles of course, but again I don't think that is the aim and it should be be able to deal with some relatively demanding games (and they'll be very inexpensive compared to the AAA console/PC titles).
It's pretty much worth reading. It teaches you the lean approach and how you can profit by applying it to your projects, startup and other things in life, why not. I'm right now in a lean startup and it went much better than the others non-lean.
The reality is that both strcpy and strlcpy require the person using the API to use it correctly in order to not end up with a buggy program; but, in the real world, people hype strlcpy as being fundamentally safer than strcpy, and so if you actually look into how people use strlcpy no one ever checks its return value (even projects like OpenSSH).

For more on this (and a specific ludicrous example from OpenSSH where someone spent the time to write a comment above the strlcpy about truncation and yet still didn't actually bother to check the return value of the function), please see this response I made to someone else:

https://news.ycombinator.com/item?id=6940724
SmashRun Pro Launched - Understand your running, by visualizing your data
Of course typical weak response attacking form and not the content. I didn't expect much more.

One of the reasons left is not at all that popular when it should be, for example in Greece, is that it forgot about its ideology and sold out to the capital. Hence feminist parties in Europe never above 1% vote. Hence Greek left is done and neo-nazis topping the polls. Once you sold your soul to the devil there is no coming back Mr. let's get CEO jobs for women.

So if you want political advise it would be don't be a whore sold to the capital. The age of conformism and technocrats in politics is over. It is all about the ground work, grassroots and standing for something in life nowadays. And I don't see feminists there. I see them in 100 richest and most powerful capitalist club instead. You are a fake.
There is an old saying: a country gets the government it deserves.

Especially in a democracy.
I don't understand your argument. You will have problems finding Erlang devs, especially if you are not located in the SV. You will find it difficult and/or prohibitively expensive to even get Erlang training for your devs. And yes, Erlang is pretty new in terms of having made the jump from total obscurity to near total obscurity less than ten years ago.

If you are lucky to have a team with the skills by any means go for it. But introducing Erlang to an average project with average requirements, staffed by average developers is a recipe for disaster.
I wonder if this approach would work with visual XML (Docbook) and HTML editing, where resulting DOM can be complex and large. Competent writer might generate loads of input (writing 100 letters per minute, copy-paste). If my writing tool has latencies, that annoys me far more than game latency.

Other approach I have been testing is contenteditable, but this won't work with virtual DOM at all. Though how you parse an existing XML document to React's virtual DOM is beyond me. Perhaps you have to generate function calls SAX style.
Why not just opt out of the filter? Or use one of the many smaller ISPs who don't implement the filter in the first place? You don't need plugins/extensions.
Connecting People of Opposing Views[paper]
A great way to ensure we live outside the Filter Bubble
The easiest to understand response to this question that I've seen so far is from this comment [0]:

The contest limitations rule out most of the likely attack vectors for breaking the protocol in the real world. It's like saying "Our bank vans are 100% secure. Just try stealing money from them without puncturing our tires or bribing one of our employees."

[0] - https://news.ycombinator.com/item?id=6936949
HHVM 2.3.0 and Travis CI
I saw a smaller Rama buried under Seattle
http://www.redblobgames.com/grids/hexagons/
Seven Big Data Trends for 2014
It's a big deal to everyone who is not a "professional" trader. Oh and by the way, HFT mostly trade low volume at high speed. In other words, trading 5 shares of Apple 5 million times an hour. That makes money. It's not about the big pay-off. It's about the pennies all adding up. And also explain why the stock was wildly moving all over the place.

Personally I think this type of trading should be illegal. Right now, unless you have a data center right next to the exchange you are trading at a disadvantage. And it just adds to the many reason why I think the game is rigged. To favor the big houses. You're almost better off at Vegas.
I think you have to shift the graph: what you have under info- rss atom etc, should move up to the data position.

Then what? You could do something simple like keyword grouping - '500 news events including the word "drone"' but I feel that is not enough. Take it further and use semantics to do sentiment analysis maybe? '50 data point talking positively about airbnb today'

But I still think there is something missing. I'm interested in any other thoughts you may have, especially after shifting info-now down to data, what would be 'new' knowledge or wisdom?
But, THIS time everything is going to be different! Because of Bitcoin's paradigm-shifting, gravity-defying, game-changing properties, the normal rules of bubble economics and financial regulation no longer apply! The Brave New World has arrived! /sarcasm

Seriously though, Bitcoin is going to enjoy its glorious rise for only as long as the politicians/regulators/law enforcement fail to realize the true extent of the threat to their power, IF Bitcoin's intended properties are allowed to continue unrestricted. Once all these players wake up, the crackdown will be a lot fiercer than anything ever done against P2P file-sharers. Napster threatened just one industry, Bitcoin is taking a swing at our entire political and economic system.

It is just a matter of time before every Bitcoin exchange is forced to turn in all their records to IRS, the transaction histories are fully outed and the main benefits of using Bitcoin are minimized. The regulators have no reason to leave alternative currencies alone vs. crack down like they've done to the likes of the Liberty Dollar ( http://en.wikipedia.org/wiki/Liberty_Dollar )

At the end of the day, any currency is only as viable as the enforcement power behind it, which ultimately means "people with guns". Bitcoin has none of it and US Dollar has the largest world power behind it...
Indeed, this is a bit of a non-story.

Lower volume customers have lower fixed costs, they generally get much worse quotes (higher spreads) too. The fact is whilst $56k might sound like a lot to some person day trader, it is nothing compared to the actual market cap of the stock.

It also has absolutely nothing to do with the use of HFT. HFT only competes against other HFT. There is nothing here to suggest it has been effecting the price for the small customers (normally this is what HFT is credited at doing well, providing liquidity and removing pricing inefficencies) People hate HFT because it can go 'screwy'.
I can't flag anymore but please don't give this clickbait Forbes rubbish any traffic.
In particular none of the attacks described in TFA (Known Plaintext, Chosen Plaintext and Chosen Ciphertext) are possible within the frame of their contest (since Telegram controls all inputs).

Yesterday someone blogged an example of a completely broken cryptosystem that would still pass Telegram's challenge with the same limitations: http://www.thoughtcrime.org/blog/telegram-crypto-challenge/
Steps to writing an effective discussion section
Actually HFT does manipulate the overall price of the share. In the public markets. And that's the problem.
I probably missed something obvious here. But what happens if you mistype a bitcoin address (or worse : someone intercepts your mail and gives a different address).
Ironically, my work filters mean I can't access the site. But if it does bypass censorship then it makes a good political point. How much has this cost? How much publicity has it got Cameron? If it can be bypassed without any trouble then it is pure theatre.
So, maybe i'm misunderstanding, but, the perf advantage is that react waits until the next RAF and then only updates the parts of the DOM that actually changed? So, now i'm wondering: why can't the browser do that? Isn't this whole middle-man approach something to eventually be optimized out?
"Are you fighting a tool addiction?"

I think you've given my wife a name to my problem :D
Opting out of a porn filter would probably see you added to some sex offender list within a few years. This is probably a better option if you're stuck on some ISP for some reason.
If you're investing over anything approaching the short term then it is exactly like playing at Vegas, except the card counters aren't banned.

If you invest, i.e. over 10+ years then HFT doesn't matter other than giving you better liquidity and lower spreads. There is much, much less competition in that space, no computer trading and you are capable of actually doing research.

Investing and watching daily stock moves is a sure fire way of losing your hair and becoming miserable.
First sentence of the story:

"A young Indonesian copywriter"

Fix the headline.
Why hassle with red tape if you can just sidestep the entire issue?
What’s really cool about this idea is that it passes boundary tests - asking questions like "What if all of humanity acted like this?”

If the whole planet was a little more conscious - and able - to sort themselves into a fitting situation, the ‘system’ as a whole would churn out awesome results.
Their feed was a lot more relevant last year. Also, it seems they're leaning towards iOS mobile app since there were lots of releases for it and none for Android. Pretty big bummer for me since I was expecting the Android one (though might not be so significant now that I found BaconReader for reddit)
>> Mikhail Khodorkovsky, Russia's most famous prisoner, is now a free man.

>> The former oil tycoon, who spent more than a decade behind bars, left the Segezha prison colony on Friday morning, Russia's federal penitentiary system reported, hours after President Vladimir Putin signed a decree authorising Mr Khodorkovsky's release., the FT's Courtney Weaver has confirmed.

>> In the two-sentence decree, Mr Putin said his decision to grant Mr Khodorkovsky clemency was "guided by the principles of humanity". The decree did not say whether the pardon had been conditional on Mr Khodorkovsky admitting guilt.

>> Once Russia's richest man, Mr Khodorkovsky was arrested in 2003 on allegations of tax evasion and fraud at his oil company Yukos, yet his arrest was widely seen as politically motivated as it came soon after he challenged Mr Putin over top-level corruption.

>> Full story to come on ft.com
> he can find (and patch himself!) the subtle race condition created by minor JVM differences on your particular version of the Linux kernel

He can do this, but is terrible programmer?
Astronaut holds first chat with robot Kirobo on ISS
Why credit hacks will keep happening
Women who are interested in IT jobs get them. So why all the fuss?

Because according to the feminist ideology not enough women are interested. You see, it's exactly what the story is about. Feminism is Marxism ideology that wants to change society where we - both sexes - understand that women can be as good as men in all the jobs. So, I'd ask you and others to do the same for men. To understand that they can be as a good parent as a mother can.

Now, you see a little bit clearer the idiocy of that movement?

It's about changing us all, our societies to ones that even women who didn't want to go to IT, will go due to the social pressure.

Women are under tremendous pressure nowadays to compete with men in all these industries. It's like men would be expected now to take 50% of all the kids in divorce cases. Feminism like all left ideologies wants good by in reality it doesn't work. And people who are affected by their social experiments are the real victims here.
I doubt it. Or I'm going to have some trouble. I reckon a large proportion of people will opt out and I wouldn't be surprised if they try to remove the opt out option in the future.
Hmm, I use to try that kind of stuff, but it gets kind of unmanageable pretty quickly. And sometimes it just plain breaks down. For example, with the same form field example. We use the idea of `Field-label` and `Field-legend` across multiple field types. Checkboxes end up having the `Field-label` be the second child instead of the first.

Generally trying to tie it to order in the DOM just becomes very fragile, when really a classname is actually more semantic in terms of the meaning sticking with the element and being able to use it anywhere.

I think trying to separate JS hooks from CSS hooks is an anti-pattern actually. Like having `js-` prefixed classes. Because realistically you aren't changing the class names enough for it to be a problem. And if you do change the class names there's a good chance you'd want to change the `js-` prefixed one too and eliminate any benefit they were giving you in the first place.

You might be able to get it to work for simple components though. But I'd be weary since there are only so many HTML different elements, and the special pseudo-selectors can only get you so far.
If unconstrained for resources, what would you passionately make?
Dell does sell computers with Linux pre-installed. Personally, I'd love to one of their developer ultrabooks, but they are still subject to having things break after an upgrade.
Yes, it might lead to an exploitable bug, but it seems to me that it's a much lower probability than a buffer overflow leads to an exploitable bug. Surely an API that lowers the percentage of exploitable bugs isn't all bad (even if it's not perfect)?

Until about 2 years ago there wasn't really a better solution around...
Amazing that they managed to fill two whole pages of speculation about what might be under that bit of Seattle without once mentioning the giant underground city that actually is under that bit of Seattle. Or at most a few blocks away:

http://en.wikipedia.org/wiki/Seattle_Underground

They talked to the local city librarian, so clearly she must have mentioned the tourist attraction where you can go down and see all the buildings that sank into the mud before they decided to raise the street level, oh, around 45 feet.

So now when they're digging a new tunnel 45 feet under that spot, it's tough to understand why they're in any way surprised that they hit something building-ish.
I thought that "Aurora" would be something like OM :)
`Chess 1` has been tweaked over the centuries as well: castling and en-passant are quite recent.

As to memorization of openings, the current world champion Magnus Carlsen thinks the attention to opening theory is overrated.

The only thing that really bothers me is that an opponent can continue to play a position that's obviously lost for a number of hours.
I think adding the concept of a doubling cube (like in Backgammon) might address this.
How? Can you explain the specific mechanism (i.e., what orders are placed by which party and when) and the role that "high frequency" plays in the mechanism?
Yeah. "Opposite" would be Tor outing you as the source of the bomb threat. In this case, it was simply ineffective because it was used incorrectly. Tor doesn't claim to hide the fact that you are using it.
The Bitcoin 40,000 comment by the Winklevoss twin (http://mashable.com/2013/12/16/cameron-winklevoss-bitcoin/) is actually similar to the 1999 book "Dow 40,000: Strategies for Profiting from the Greatest Bull Market in History"
> t's not like feminist fight to make sure that in 50% of divorce cases children go to fathers

But they do!
I wonder if it's coded using the mbed, since the controller might be going to be sold in volumes?
Narcolepsy confirmed as autoimmune disease
One opt out I've seen requires a credit card. One might not have one. Before you ask, me. I have an internet connection, but no credit cards.

Not all ISP cover all of the UK.

You also assume that the person wanting to bypass the ISP filter is the same person controlling the connection. So, say a 16yo wants to explore homosexuality, but is not ready to discuss this with parents who simply didn't bother opting out because they simply didn't think it was necessary.

Plenty of cases for using this extension, especially in the UK when we are routinely lied to about the scope of laws, and mission creep is universally denied, while it happens. For example, anti terror laws used by local councils to investigate fly tipping. We know that sooner or later other subject areas will be blocked by this distopian nut job government. Anything they feel is not in the public good will be considered and possibly censored. Make no mistake, this is the thin end of the wedge. We also know that it was originally dreamed up by the previous Labour government, so we wont get any changed even if we boot this lot out. Anything that bypasses these vile thought control freak nanny filters, and exposes the technical impotence of them is welcome. Remember, we dont have freedom enshrined in fundamental law. Its a granted privilege here, not a right. Oh, Human Rights act. Yup, this government wants rid of it. If Americans think their freedoms are under threat, the threat in the UK is many factors higher.
IIRC even the small providers have to implement filtering with the IWF blacklist, so there's no way to get a filter-free experience.
> I reckon a large proportion of people will opt out

HAH! I had a friend one day in tears because her bf had some porn on his laptop. She was shocked, outraged etc.

She owned a dildo.

Some people have horrific double standards, unless people make a stand against censorship (unlikely) or their desire for porn (even less likely). This is only going to get worse.
How long before the censorship is extended to sites which help you bypass censorship?
"Investing and watching daily stock moves is a sure fire way of losing your hair and becoming miserable."

Agreed.
Ask HN: Alternative trust model for TLS for private uses
There are quite some knowledgeable crypto people on this board and the subject came up a couple of times in the past: Are there alternative trust models for https/TLS, with no CA?

I'm looking into some 'just me and my family' kind of services. For various reasons the 'get a certificate' is not an option, so it's either self-signed or .. whatever else I could look into.

"Not supported in the wild" might not be a big constraint, since I have reasonably good control over all clients here. What, other than running with a self-signed cert and looking into ways to pin that cert on the client maybe, are my options?