skysight-inc/HackerNews huggingface dataset:
This makes sense then for sure.

You are giving people that you have helped an opportunity to pay you without having any kind of contract with them.

Nothing wrong with that at all.
So what, specifically, will prevent whatever you think happened re central banks from happening again in this case?
This is why all the functioning welfare states have healthcare systems that are in large part state-run. I'd go as far as to say that privatization of health care and bundling health care with employment only ever make things worse.

Health care is an issue where you _cannot_ ignore the low-probability worst case scenarios but instead must always be ready to respond to them. So the bigger the group of people that are insured together, the better, which obvious leaves one scenario as best: Every citizen of a state pays into and recieves from one single health care pool.

Anyway, I wish you best of luck. I hope you find a way to make things work.
FTC Approves Final Order Settling Charges Against TRENDnet, Inc.
They appear in that order, but with many other words between.
Why's it have to come out as profits? Couldn't they just be a big lumbering bureaucracy that never gets cut because they never have pricing pressure?

Sure, but that would show up in the CMS numbers, and it doesn't.

Insurers are absolutely price-conscious, both of what they pay for and what they charge. It's not as if businesses will accept year after year double digit increases without shopping around. If there were big money to be made undercutting existing insurers, someone would go after that market, but there isn't: Health insurance profit margins are low single digits at best.
It offers a variety of them, simplest of which is lock_guard:

http://en.cppreference.com/w/cpp/thread/lock_guard
Thanks for writing this up. It's interesting to see how rapidly the traffic trails off these days.
Programming is difficult because people are profiting from the difficultability of it. For as long as you can give someone a money-making machine, but say that it will be 'a lot of esoteric work' to make it, grease it, keep it clean .. there will be development work.

By the very nature of the business, if you are not improving something, some human-describable human activity, by using esoteric magic, you're probably not that good. If you're making it indescribable in the process of making improvement, perhaps you've been in the business a long enough time to know, the only difference is whether the customer can be bothered to learn the language, or not. Anyone can 'program computers'; computers are a universal language.
This kind of thing is one area I'm excited to see work in Rust: you can use Rust's safety guarantees to ensure that all access goes through the lock.
> If the music tugged at all the right heartstrings, but you knew it wasn't made by a human, could you feel that depth of connection?

I do think this is a false dichotomy of sorts. (Right turn of phrase?) The music may have been made by a machine, but humans made the machine. What ultimately is the difference between music “made” by a violin being directly played, verses a synthesizer reconstructing songs based on what a programmer did beforehand? It’s just a matter of degree. It might be more productive in discussions to look at the “artist” verses “committee” angle instead.
Thanks for this saraid216 :)

It's always good to know things like this.

Thanks again!
Why do you sensationalize the linked article title?

Personally, I'd prefer an electric car because it's more efficient, better torque, and no evaporative emissions. The environmental angle is just another benefit. All the same concern trolling was hashed out 8-10 years ago when Prius hit the mainstream.
Love the idea - solving an important problem
abfiloprtx.com
A few thoughts based on the above:

* There doesn't appear to be any requirement that the phone can be remotely disabled. One interpretation of this is that the only change from the status quo where practically every phone has a PIN is that the PIN withstand a hard reset.

* The bill defines “hard reset” as "the restoration of an advanced mobile communications device to the state it was in when it left the factory, and refers to any act of returning a device to that state, including processes commonly termed a factory reset or master reset." This is sort of dumb. When a device leaves the factory, it obviously doesn't have any knowledge of whom its proper owner is. A hard reset, by definition, has to nullify any owner-verification system and no technological solution can withstand it.

* The fact that the kill switch can be disabled is encouraging.

* A lot would also depend on how determination of the "rightful owner" goes. That is, is it sufficient for someone who knows the PIN to be considered a "rightful owner"? This is fine 99% of the time, but there are obviously scenarios where that isn't true. If we wanted to take this to the other extreme, we might say this would require every seller and re-seller of mobile phones to check the ID of anyone buying a phone and to record this in some sort of master ownership index. Note that this would effectively outlaw burner phones.
This is ridiculous. You can't count modern clock speeds in 1991 dollars.

Also, "massively underestimates the true pace of innovation?" Seriously? It's already too fast! People have such hard-ons for change and shiny things now that they don't even remember why they wanted it in the first place!
The problem with setting very concrete goals like this, is that whenever you don't precisely meet them, they can be made to be a knock against you. As a result, it's then in your interest to set goals that are as easy to achieve as possible. I can't imagine that aiming for mediocrity serves the company or the employee well.
Like a lot of other things, practice matters. OWASP has some deliberately insecure webapps which are meant to give people practice spotting and exploiting vulnerabilities (WebGoat, RailsGoat, PyGoat, probably others). There are also "capture the flag" competitions of the sort run every so often by Stripe; Matasano currently has one going as well, focused on embedded systems:

http://www.matasano.com/matasano-square-microcontroller-ctf/
How do you find all this stuff? Where do you even start?
Curious as to why you didn't jut say "you can directly buy Dogecoin for $100 USD on a website called Vault of Satoshi." Instead, you opened up your longwinded response with "doing a bit of work" and other mumbo jumbo, leaving the direct answer as a marginal note at the end (just "another option" in your words.)

Edit: the most challenging part would be going to a bank to deposit the physical Franklin, if the end user didn't have a fiat in an account already.
I have a question for you! Roughly how many hours do you think you've spent looking for bugs on github before you found these stream of exploits?
also known as Oppositional Conversation Style http://www.gretchenrubin.com/happiness_project/2013/09/ever-...
I would describe it more as a numb apathy.
Github uses ruby on rails, which is a pretty mature framework, perhaps covering most of the common security pitfalls. Additionally, I assume github has excellent programmers because of the nature of their job.

Could someone explain in simple english, how did they overlook known & well documented bugs that got them hacked (e.g. Bug 3 about cross domain injection). I'm wondering if someone of Github's caliber can be hacked so easily, what about the rest of the masses developing web apps. Especially all those new crypto-currency exchanges popping up left & right.

I've been toying with Django. Reading through the docs makes me feel that as long as I follow the safety guidelines, my app should be safe. It feels as if they've got you covered. But this post rattles my confidence.
if you can rely on gcc, cleanup attribute is probably the best you can do. The solution in original post doesn't cope with "break", "continue", "return" (and of course, "goto", but I don't remember if cleanup attribute handles that either).

Looks like their project already uses C++ though, so why don't they just use C++ for this is beyond me.
LEDs Change Thinking About The Light Bulb
Apple theft exploit:

- steal phone
- break phone
- return to Apple store for warranty replacement (minor social engineering may be required here)

Theif gets a working phone with a different IMEI. The worst part is, the friend of mine who this happened to found out about it because it invalidated her theft insurance.
@homakov, have you thought about selling screencasts ?
Here's why I think programming will never get much simpler than it is now...as our stacks and applications become more sophisticated and powerful, so do the relations between the systems...Apple has managed to make things simpler on iOS by clamping down on what developers and users can do, which is one possibility for a "simpler" future. But for those who do want to be developers and have flexibility...complexity will just have to be a way of life.

As an example, I recently tried my hand at making a Chrome extension using the Yeoman build tool. It was a simple plugin to allow you, on Reddit IAMA pages, to hide all comments except those from the IAMA subject and their direct questioners, and to also auto-load all comments:

https://github.com/dannguyen/iama-highlights-chrome-extensio...

Figuring out how to use the yeoman build tool took about 30 minutes (it's not quite fully developed)...it took about 30 minutes to browse through the Chrome extension documentation and then think of what I wanted to do. About 10 minutes to write the actual jQuery.

...And then about 3 - 4 hours figuring out why the comment auto-loader wasn't working. I thought I could simply just have my jquery activate the "click" event on all "load more comments" links...but a recent Chrome upgrade clamped down on security, effectively sandboxing all extension code and preventing it from executing existing inline JavaScript.

IMHO, this is a good security measure. But it just goes to show you that when things are made "easier" (the scaffolding of the extension, the jQuery to do DOM/AJAX work), there are still intractable tradeoffs and details that have to be dealt with...in this case, security.
Giving advice like this is awfully tempting. But I've learned that even if I am right, which I probably am not, it doesn't do any good. When I take my hard-won rule and follow it to a good outcome, it generally works not because of the rule, but because of all the thinking and experimenting I took to get to the rule.

What I try to do now is to ask good questions. If I suspect something is wrong with their business model, instead of saying, "You should do X", I'll try to ask questions that help them uncover the flaw in their thinking. Sometimes that actually happens. Sometimes they just aren't ready to learn the lesson, which is fine; maybe they'll remember the question. And sometimes I uncover a flaw in my thinking. That's valuable twice over: not only did I learn something about the domain, but I learned to be a little more humble.
It's striking to me that I've never seen or heard of a performance review process that allows for employees to provide feedback on how well their manager is doing. Sometimes a manager is just not a good fit for the group that they're managing, and like all people they too make mistakes, but all the efforts to "measure" things does not apply to them, which I can't imagine should exist in a universe that has the word "fair" in it's vocabulary.
If you live in the state of CA and think this bill is a bad idea, you can look up your representative senator and send them an email asking that they vote against the bill. http://findyourrep.legislature.ca.gov/
I think "bad environment" is the worst of all the problems.

At first we had no environment, so we had to make it ourselves. A few companies did this, and turned into monopolies.

Then we started trying to make free/open-source environments to combat this problem, but they ended up so incredibly scatterbrained that compatibility is a very real and current nightmare.

The monopolies are trying really hard to give us good environments, but first of all they come at a cost, which isn't accessible to many (Apple's hardware, MS's software, etc). And secondly they are not community-driven efforts, so we have little control over them.

So the battle rages on between the plethora of options I have for a programming environment. Meanwhile I'm just trying to write some simple apps that help me pay the bills (we get dangerously close to not being able to each month) and the competition between environments only slows me down.
I fail to see the point of using a macro (ew) to accomplish something that's included, with several different implementations, in the c++11 standard library
Why The Video Game Industry Needs Nintendo To Succeed
I feel the same way, only I usually end up packing up those nice refactorings and tucking them away. I do not want to introduce a live site bug while trying to make things "nicer."
Is this not being overblown since it only really pertains to BTC on MT. Gox? Since yesterday the Coinbase price has gone from $800 to $670 to $750. Given the typical volatility of BTC and the apparent rebound in price on Coinbase, I'd hardly consider "Bitcoin sinks" as being accurate. Perhaps the title should read "Bitcoin on Mt. Gox sinks..." or "Bitcoin lists as Mt. Gox pauses withdrawals".
Can we create digital logic circuitry that embodies ALL the functionality of a neuron, including interconnections (and here you have to compensate circuitry limitations that the neurons don't have) in the same size? I think you can start from there to understand current technology's limitations.

I agree we will likely not be calling these things "computers", if we ever invent them.
And thought that i was the only one.
Hmm. What happens to this with jailbroken phones? I can see it going two ways:

- killswitch is in the OS, and can be removed by jailbreak. Good for user, but means you just have to jailbreak a stolen phone to recover it / prevent it being killed.

- killswitch is in the baseband, and cannot be removed. Uhoh.
Four Gay Activists Arrested as Sochi Games Open
The psychology of people on a firing squad is a real problem. To address this in real life, usually there is a "blank" round randomly placed into one of the guns. This tiny probability helps them, because they can tell themselves that maybe they didn't really participate in the killing. But they all have to fire at once, otherwise whoever fires first will be more worried that they fired the killing shot.
many people/businesses are relying up cloud services to work - letting people to search across different services and with multiple accounts on each service would be helpful.
What setup did you use for live updating in Sublime Text?
TIME’s cover story on D-Wave
Don't do this. The whole thing gave off a bad smell on first reading so I would never have done this.

Thank you vinkelhake for nailing the the real problem (exceptions) and bothering to check whether the stack overhead really exists.

Just wanted to chime in with a comment because HN doesn't show vote counts, so future readers will "see" my upvote on vinkelhake's comment.
Signup for Free Early Access at Coinalytics – Bitcoin Analytics
Coinalytics aims to enlighten the Bitcoin ecosystem by building a cutting-edge analytics framework, making it easy for everyone to understand big data. By identifying the relevant events and extracting the value from the gathered data, our users will greatly benefit from the obtained insights.
While that exploit may work - it doesn't scale too well.
Programing is the easy part of the job - getting the customer to agree exactly what is they want is "hard"
Google Launches Their Own Videoconferencing Gear
You're also consuming the variable name i, which everyone else is probably using.

Speaking of which, this means you can't have one of your locks scoped inside another one.
> There's no doubt about the documents that they released to the Poles confirming the Soviet orders?

Are you so brainwashed that you cannot even read? How there cannot be doubt after http://katynmassakern.blogspot.com/2010/07/katyn-ilyukhins-v... and me talking "the fact that burgeose Russian governemnt manufactures documents to support this Goebbels lie cannot deny the evidence". Do you think that I will believe that those documents happened to be stored in the Yeltsin's personal safe, when he organized the trial against the Communist Party, http://katynmassakern.blogspot.com/2011/01/katyn-mysterious-...? Do you mean that there was nothing more to store in the "closed package no. 1" (google it) in the whole 1000-year Russian history than the "Katyn affair"? What do you think I mean by "burgeose Russian governemnt manufactures documents"? Do you think I mean that _there is no doubt_? Are you crazy?

It would be interesting to investigate what happened in the Western Ukrane in 1941. But, instead of investigation, you demand the russians to be balmed guilty and hide the reason why the Polish intelligence appeared on the Soviet territory in the first place.
Nice work Egor. I hope to see a GitHub client testimonial on sakurity.com sometime soon.
And for the record, I started out writing that very comment in advice mode. I've been trying to correct that habit for maybe 3 years at this point. Changing behavior is hard. Especially behaviors with a short-term win (asserting status, getting to feel smart) and a long-term loss (irritating people, not helping them as much as I'd like, feeling like an asshole when I think back on my blowhard behavior). But given that I spent 30 years building the habit, as long as I break it in less than that I'll count it as a win.
Ya I didn't know that. I thought his question was € vs $, which is why I didn't quite understood it. Thanks for picking up my mistake.
it's probably a better idea for the browser to handle the scrolling.
Ah, the velvet glove. It rises to view again. Shall I buy? Shall I not? 'tis but an upvote away ..
If you give me bitcoins, and I give you virtual magic mushrooms, and then I go and list the trade for the mushrooms online. Would say that, the assessment is true that this is USD trades?
edit: lol im banned, wonderful, thanks HN
The newsonomics of The Guardian’s new “Known” strategy
Have there been any reports on how iOS7 affects thefts?
Cross-posting from the other discussion on this topic (https://news.ycombinator.com/item?id=7197416):

Actual draft of the bill is here: http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?...

Relevant portions:

(1) Any advanced mobile communications device that is sold in California on or after January 1, 2015, shall include a technological solution that can render the essential features of the device inoperable when the device is not in the possession of the rightful owner. A technological solution may consist of software, hardware, or a combination of both software and hardware, but shall be able to withstand a hard reset. No advanced mobile communications device may be sold in California without the technological solution enabled.

(2) The rightful owner of an advanced mobile communications device may affirmatively elect to disable the technological solution after sale. However, the physical acts necessary to disable the technological solution may only be performed by the end-use consumer or a person specifically selected by the end-use consumer to disable the technological solution and shall not be physically performed by any retail seller of the advanced mobile communications device.

Hard reset is defined as "the restoration of an advanced mobile communications device to the state it was in when it left the factory, and refers to any act of returning a device to that state, including processes commonly termed a factory reset or master reset."

Some thoughts:

* There doesn't appear to be any requirement that the phone can be remotely disabled. One interpretation of this is that the only change from the status quo where practically every phone has a PIN is that the PIN withstand a hard reset.

* The hard reset definition is sort of dumb. When a device leaves the factory, it obviously doesn't have any knowledge of whom its proper owner is. A hard reset, by definition, has to nullify any owner-verification system and no technological solution can withstand it.

* The fact that the kill switch can be disabled is encouraging.

* A lot would also depend on how determination of the "rightful owner" goes. That is, is it sufficient for someone who knows the PIN to be considered a "rightful owner"? This is fine 99% of the time, but there are obviously scenarios where that isn't true. If we wanted to take this to the other extreme, we might say this would require every seller and re-seller of mobile phones to check the ID of anyone buying a phone and to record this in some sort of master ownership index. Note that this would effectively outlaw burner phones.
"Dayton Police Chief Richard Biehl, a supporter of McNutt’s efforts, has proposed inviting the public to visit the operations center to get a glimpse of the technology in action.

“I want them to be worried that we’re watching,” Biehl said. “I want them to be worried that they never know when we’re overhead.”"

These folks want nothing short of terror in everyone, a panopticon.

Imagine a boot stomping on a human face, forever.
Are you sure about that? The TOP500 list uses the linpack benchmark to measure double-precision FLOPS. The numbers you cite for your machine sound more like those you would get with single-precision.

For comparision, the GTX Titan can do about 1.5 TFLOPS in double-precision and about 3.2 TFLOPS in single-precision doing GEMM.
> This is in part why it is irresponsible for exchanges such as mtGox to report a single "price" for bitcoin

No, it's not. They are reporting the price of an actual trade, where buyer met the seller. At that point the spread is effectively zero.
"What they really need is to turn on the GPS find where the phone is and start arresting folk."

You really want to give the government permission to remotely enable GPS?
My latest addition to the never-ending TODO list : stalled project refactorings.
OK. Dear vast majority....

Actually I'm in that boat, too, but of my own doing. At where I work (a large utility in the midwest), we match 75 cents on the dollar up to 6%, so essentially 4.5%. I stopped contributing a few years back to try to get out of debt faster, but kept finding creative ways to add new expenses: wife, new daughter, another new daughter, repair that leaky roof, etc.

Still, my point was obvious: 3% is free money that shouldn't be turned down if it's available, but to laud it as something to brag on is really grasping at straws. 6% was the industry standard in my area... and I once worked for a company AOL bought out.
Thanks Avlok, we feel sendwithus is an important building block in any modern web app.
0. I spent less than an hour last year because there was no proper motivation.
This would be a great case study if expanded on and edited. Igor should write a book!
Perhaps you could clarify that part in your future posts, to appease the Internet haters on both sides. "I do paid contract work. However I also spend lots of time fixing open source stuff for free. If you want to encourage me to keep doing the latter, here's how to donate."
I agree.

However, "You know it's dirty back there, but it's not stopping the fridge from keeping your food cold."

If you don't properly maintain your fridge and allow too much dust to build up you could end up burning out the compressor.

Everything needs to be done thoughtfully, in moderation, and with purpose.
So true, then there is also the fact that some conversations aren't even worth having....
Firstly, well done. It is good to see well done security eval.

But github, seriously? Why do you guys fail so hard at security?

Too much Brogrammer rather than programmer methinks.