skysight-inc/HackerNews huggingface dataset:
Do you really need a mentor? Or just a list of good books and path to take? What is your experience with other programming languages?

On the mentor charge, I think trying to get a mentor and pay a per hour thing maybe wrong. I mean, I can charge you for an hour for a skype 'lesson' but what about all the other work a mentor/teacher would have to do (checking code you wrote, writing notes, writing assignments or doing 'lesson plans')?

If you are interested, you can email me (info on profile) and we can discuss it further (for reference, I've wrote a book about C++ and having using it for more than 10 years as a developer).
There are other patents involved. That is just the poster-boy for it.

I know an ex-J++ team member. The objective was to produce a Java IDE that didn't suck (do you remember 1996 Java)? Sun wouldn't license them the runtime, name and class libraries so they cloned it much like GCJ and GNU classpath did. Absolutely no one moans about that..

Despite being an ex Solaris cert guy, Sun screwed up literally everything from 1995 on. This was another thing.
Emerging tools such as gofmt and clang-format are able to automatically re-format your code based on the language rules rather than the human behind the monitor.
Using those tools this specific category of issues should at least be visible in the formating diff.

Interesting. Never thought about it that way before.
> I got my Beeb at the age of 10 and because of it (and without any formal CS education) my entire professional life has been in software.

Exact same story and age here. I always thought there were two reasons why the BBC Micro created so many developers. One is the TV programme, the second is the manual. Pretty much the first page introduces programming, and within a dozen pages you're making a rocket fly up the screen. As a kid that was enough to make me think "I can make a game", and I was hooked.

EDIT Found a PDF of the manual:
http://bbc.nvg.org/doc/BBCUserGuide-1.00.pdf
Not at all: that's the bug. It's not properly verifying that the other-end of a TLS session is the entity able to sign with the certificate-declared private-key.
How much experience do you have in game designing and developing?
If I recall correctly Bitcoin already provides this out of the box: a wallet is already a collection of public/private keypairs (and not a single public address). You could at any point divide your money over an arbitrary amount of addresses that you own(maybe at a small transaction cost). This does not mean people could still try to understand what's really happening by analysing the full graph.
Bill Gates should be in a "great American humanitarians" series.

Why exactly should Steve Jobs be on a stamp?

This gives me an idea, Post Office should sell application fees for stamp ideas like license plates to fund their insane retirement plan requirements.

But then we might end up with confederate flag stamps like Georgia plates.

Of course you can print almost anything as your own stamps legally now. And in the end I think people spend a whole second if any time at all looking at a stamp.
Mobile App Privacy Policy: Do You Have One?
My gut says the probability of a random typo executing without raising an error or exception is rather low. The probability of it doing so in a way that well aligns with the interests of nation states, large corporations, and/or criminal enterprise is even lower.

This might explain DROPOUTJEEP particularly considering how much more efficient it is than breaking messages after they are encrypted.

http://mobile.eweek.com/security/nsa-spying-on-apple-iphones...
I think this could be shortened to 'Never judge a programmer'.

Seriously though, outside of an interview environment or training, why are we trying to assess people's capabilities anyway?

This kind of penis-measuring contest is so prevalent in our industry; it makes people incredibly afraid of actually putting themselves out there and helping to create. Judging other people is a bad trait. Simple as that.
Startup using Lisp [2005]
That's what I first thought too.
The only situation where braces can be safely left out is when the single statement is on the same line as the "if".
He touches on it at the end with Singular Value Decomposition, but didn't mention that you can use SVD to get eigenvectors/values. He also doesn't cover how to do SVD. This could definitely be covered more in depth, but maybe not in a single semester undergraduate course. I think a follow on set of notes that starts with eigenvectors/values and continues into the more fun parts of linear algebra would be very useful.
> If I can't judge you by your code, how should I judge you?

I judge a programmer by the contributions he or she has made to various open source projects. Now that sounds like judging by code, right? Well only partly. Other things that matter is how many projects someone has committed to, what the people of the project teams say, etc.

The thing is I can't know the context looking at the code. What I can do is look at how successful the open source projects are and what their co-committers have to say. Now, usually the co-committers will say something positive, but what they say is important.
The dev team has 9 years of developing experience. One of us has 4 years of experience in gaming development.
In America you're up against a great wall of silence. Our culture makes death taboo and few overcome it.

So perhaps you should focus on communicating with the few who are comfortable with talking about death and consider them your target market.

By communicating naturally and openly with those who are receptive you'll also participate in an ongoing cultural change. Eventually, maybe even in your business's lifetime, culture will change and the taboo will fade.

Until the taboo fades at the cultural level you're not going to be successful at changing people's minds. As a business you won't have the time and exposure to others to remove the taboo.

Here's why - individuals react to strong taboos without reason. You want to persuade people with reason. But it's too late, they've already turned that off as soon as you say the word "death". (It similar to the saying that no one ever changed their mind by losing an argument. But taboo is even stronger.)

But there are people who are not uncomfortable. Find them, start with them, and just talk about it. Don't worry about others, they are not your market anyway. You can find the "embracers" in spiritual sub-cultures, pop self help bookstores, health care workers, and elsewhere. It's a disorganized group, and not a community.

If you want to be an activist (instead of a business) then you might take a personal one-on-one approach. Talk, listen, repeat. The more an individual considers death and talks about it, the more comfortable they will become. In years, the individual may lose the taboo altogether.
Sorry, yes, its Albert Heijn. A huge (as in they have a location on every corner) grocery store.
So how would you judge someone like me who has no open source projects? Work stuff is in house, and I don't have the time outside of work to contribute anything meaningful.
The situation is slightly more complex: Programmers write bad code for many different reasons, but good code only gets written by good programmers. So I think it's fine to judge someone on their commit history, as long as one is understanding of the bad code that inevitably happens. The good code doesn't happen by accident.
Why would you need to regenerate keys? How does mitm ssl attacks compromise keys?
The multisig vault makes sense for relatively large stash which would take a lot of $50 transactions to brake down into. Also, as you ask your friends to sign off $50 redeeming txs, they'd see how much did you have previously. Not ideal.

In my paper I propose using sequential generation of parameters so you can break down your funds into multiple transactions, but it's only for convenience, your privacy vis-a-vis your friends is still absolute.
Yeah, bro, because getting your picture on a postage stamp totally makes up for 40+ years of systematic racial vilification.
Thank you for correcting me, I skimmed the article quickly after realizing it wasn't really about Jobs and clearly misread something.
What the hell is behaviour driven development? Everyone has some sort of behaviour, so it sounds as if everyone must be practising it.

Recently I spotted a new one, domain driven development. I decided to read up on it and realised this is how I had been taught to design code, and how I generally go about doing things. Its got a name now.
Related: I picked up a couple of Neoware CA21 thin clients on eBay real cheap recently. 800 MHz, 512 MB RAM, and 1 GB disk-on-module. I built customized (NanoBSD) images and run them read-only off of a flash drive. I connected a Garmin GPS 18 LVC to one and have my own stratum 1 NTP server for < $100.
The scheme allows never holding all secret pieces in one place to make a transaction. Otherwise, if your machine is compromised, someone can send your money elsewhere. I don't quite understand your proposal, but it requires having all chunks in one place to make a transaction.
Interesting that, if there was a source code formatting tool (like gofmt for go), it would've made the bug easier to spot because the 2nd goto would lose it's misleading indentation.
like who? curious if you have a few examples.
yep. I look back at some bits of my own code and realise they are a mess. If it needs changed anyway, and I have time, I'll use the "fresh look" at my code to decide what is wrong with it, and what could be better. Refactor from there.

Another one would be constantly changing requirements. So you start with something nice. Add a quick hack to do a little more. Rinse, repeat, until it becomes an unmaintainable mess.
UBNT's numbers are using the hardware fast path, which presumably is not supported by this project.
Worth noting that static analysis finds bugs like this immediately. TLS code seems like the perfect candidate to run through static analysis on every checkin. There are products such as Coverity and PVS-Studio that would have immediately flagged this and probably some open-source ones built around LLVM as well (unsure about this one, though). I personally use Coverity and have it hooked up in the same way everyone connects Travis CI.
GDS's End User Devices Security and Configuration Guidance
>Preemption is still checked only on function entry.

And I believe also heap allocation... the two cases together make what is still "partial preemption" pretty damn effective.
Those kinds of tools aren't new or emerging. The "indent" utility for C has been around for decades. I first remember using it on 4.3BSD, but it may have been around before that.
Who cares how friendly an event ticket is? Is that really a concern anyone has.
Ga.me – new 'online game console' now in open beta
Compromise system (via update mechanism or other things secured with SSL, VPN software clients, ...); use that to steal keys.

I don't believe I've been a victim, and most of the ways you'd exploit this would leave enough traces to be high-risk-of-detection, I think.

But, it's hard to prove a negative, so it's safer to act as if it had been compromised.

(I'm also updating keys anyway, so this is just a matter of waiting a day or two to do so.)
Dijkstra always contended GOTOs were harmful!

In all seriousness it's unfortunate the C family of languages even allow this kind of bug - we've all been bitten by it at one time or another.
Good luck! This is a tough problem. Many have tried, and they all failed.

http://www.freehackers.org/VimIntegration
>so it is not really being blocked on select like Go.

Select in Go only blocks if you don't feel out the "default:" case...

select {
case: foo := <-fooCh
fmt.Printf("got %v\n", foo)
default:
fmt.Println("got nothing")
}
This could not have happened with C++ exceptions and RAII instead of manual error checking and goto for cleanup ;)
Assuming UBNT is correct and the device supports line-rate throughput, I don't think there's any reason why FreeBSD couldn't easily support that.

The freebsd-mips mailing list already has a few threads discussing this; if you want to know why the router isn't achieving line-rate speeds "out of the box", you'll probably get the best answer there (and maybe even someone who knows how to fix the problem):

* http://lists.freebsd.org/pipermail/freebsd-mips/2014-January...

* http://lists.freebsd.org/pipermail/freebsd-mips/2014-Februar...

If you don't get a suitable answer there, you can also try freebsd-net:

* http://lists.freebsd.org/pipermail/freebsd-net/
The idea is less about losing coin, and more about concealing wallet size from people that don't need to know about how much money is in a bitcoin wallet.

My idea is more along the lines of instead of pulling out a wad of money you're only pulling out $50 at a time.

Me personally, I don't mind the wallet amount being public because for things lie fundraising it keeps people honest.
So if people are continuously creating unmaintainable messes and technical debt we should just throw up our hands and say "oh well, we shouldn't judge"? Assessing capabilities is required for improvement. If someone is creating poor quality work we can either replace them or train them to do better. But if we can't assess them then we won't know when to do either one.
As an easier to obtain alternative to minicom, screen can also handle serial port communications quite happily for basic usecases (like this one).

screen /dev/ttyUSB0 115200 # Linux-centric example
From the article: Khalil Gibran.
Belgium has 36 dial-up Internet users left
Regarding Adam Langley's comment about -Wall in gcc: -Wextra is what you want to have many more tests analysing your code. I wonder if this would have caught it.
I just made this - it'll tell you if you're vulnerable.

https://gotofail.com/

Not very well tested, please let me know if it works for you. If you're on OS X Mavericks or on iOS 7 and haven't patched you should get big scary red text.
There's a difference between "can code" as in understands the challenges and opportunities well enough to create a good business plan, and "can code" as in knows how to implement a floppy disk controller in software (yes, that's a reference to Steve and Steve of Apple).
UBNT is correct, but only for the hardware fast path. The driver for that appears to be proprietary.
I just made this - it'll tell you if you're vulnerable.

https://gotofail.com/

Not very well tested, please let me know if it works for you. If you're on OS X Mavericks or on iOS 7 and haven't patched you should get big scary red text.

Edit: posted here https://news.ycombinator.com/item?id=7282164
PVS-Studio might be a bit unlikely however in this particular case.
indent - indent and format C program source

HISTORY
The indent command appeared in 4.2BSD.

And for context, 4.2BSD was released in 1983.
The Go situation is changing:

runtime: concurrent GC sweep
Moves sweep phase out of stoptheworld by adding
background sweeper goroutine and lazy on-demand sweeping.

https://codereview.appspot.com/46430043/
Thank you for all the suggestions - all good ones. I have been reaching out to those who are comfortable talking about death (e.g. The Order of the Good Death). It has been empowering to be in the forefront of bringing the topic of death into life and making people embrace it. It is easier to talk about death with like-minded people.
How The Facebook News Feed Works
A good example of Docbook is basically all recent Red Hat/Fedora documentation.
Thank you. It is a very good one.
The ending, especially.
Security And Privacy Are Entrepreneur Opportunities
Fair comment. I actually do that very often (e.g. CI and CD in http://www.mehdi-khalili.com/continuous-integration-delivery...).

I guess the reason I didn't do it for BDD was that I have written a lot of posts about Behavior/Test Driven Development and incorrectly assumed that my readers know about that. My mistake. It's fixed now. Thanks.
Implementation would have to be along the lines of a proxy, decentralizing ownership is a nice way to lose some friends.
Whether it was intentional backdoor or not, NSA must've had a field day with it by now.
Bandwidth and latency are two seperate concepts, that 10TB bandwidth is probably around 100MB/second if you need truly random access to individual bytes of 16GB of ram and need to read each byte to find out which byte you need next. It's a speed of light issue where the round trip time back and forth to the individual RAM chips adds an inherent delay so RAM designers don't really focious on reducing latency as your stuck with a farly high latency anyway so bandwidth is generally more useful.
Have you tried to calculate whether you make more money from mining than you would save by switching to a more cost effective way of heating your home, without electricity?
Clearly sarcasm. With open source, it is not a matter of whether these mistakes (or whatever this one was) happen or not, it is a matter of likelihood of these mistakes being spotted. It's a statistical thing. It's unfortunate this has to be explained.
I never gave them password to my gmail account, and yet they somehow harvested an email I never used for anything. I wrote about it here: https://news.ycombinator.com/item?id=6935606 . I suspect they stole it from my phone when I installed LinkedIn app (never do it).
I'm going with accident either through a merge or a double paste. I'm guessing that if they were running some kind of static analysis tool that it probably would have flagged this one as a duplicated line and someone would have caught it earlier.
That was in the MVP (minimum viable product) section. I also referred to an old post of mine, on bad code http://www.mehdi-khalili.com/bad-code, where I explain that in great details. I hope you find that useful.
Looks impressive, can't wait to play it !
expected, a post about irrational hatred generates even more irrational hatred. But that's what you get when open source is your religion of choice. Since HN does not let me comment too frequently, I'll just address these points in a single post:

1. "Open source Bing/Windows": Yes, please, give away the things that took thousands of engineers and billions of dollars and decades to build. Look, I like open source and use entirely open source stuff at my day job and hobby projects, and even have open sourced my piddly crap that nobody uses on Github... but nobody is entitled to somebody else's work for free. And damning somebody else for not espousing your beliefs is simply being a religious fanatic.

2. "Antitrust/Monopoly": They were dinged by the US and the EU for essentially trying to turn their OS into a browser while having an OS desktop monopoly. They were trying to be ChromeOS before Google even existed. They were accused of leveraging their monopoly to enter another market but, as is obvious now, is that the desktop and browser market were one and the same. And then people insist that they "missed the web"! And after almost being dismantled by the US government for going that route, people are angry that they let IE stagnate!

3. "Android patent trolling" - They have an impressive patent portfolio (well, by the standards of most patents out there) and have every right to monetize it, which is how things typically happen in all industries. And as an early incumbent in mobile OSs, they did do a lot of work that modern smartphones still use, so it's not like Android isn't standing on the shoulders of WinMobile in addition to iOS.

4. "API copyrightability": It's not so much that Microsoft and Oracle are right on this, it's Google that's wrong. Google's arguments as to why why APIs should not be copyrightable, taken to their logical conclusion, mean no code ever can be copyrightable. My take is they would be found copyrightable, but Google may probably prevail on fair use.

5. "Scroogled": It's based on surveys that shows people are not aware that gmail scans their email contents, and when told of this, most of them disapprove. And if the surveys don't convince you, the class action "wiretap" lawsuits recently filed against Google are a clear indication that there are those who don't like this. It's perfectly fine to make consumers aware of their product choices, especially if it's also in your business interests.

6. "WebGL": There were actual security holes (DOS was just one hole -- the screencap exploit was much worse), and what Microsoft had said then was "WebGL in its current form is not safe". However, as the standard was redesigned to address such issues (http://www.techradar.com/news/software/applications/why-micr..., search for "CORS"), MS has gone ahead and included it in IE 11.
Cafe chồn, cafe trinh nữ, cafe truyền thống – Trung tâm thương mại online 301
Show HN: Check if your browser is vulnerable to the Apple SSL bug
I remember my theoretical stats teacher showing us this problem. It's used all the time in ecology. His example used it to estimate the number of alligators in Louisiana swamps. They tag the alligators, release, and then using the tags they re-capture over subsequent years, they can get an estimate of how many alligators exist in the wild!
Show HN: I'm building a Series Tracker Chrome Extension in Angular.js
If you lived in Europe you'd see an obvious truth : people are blamed for what their grandparents did, if it's about WWII and nazis. Forget about joining the military, politics, judicial system or police. Well police is a special case. There's a few regions where you won't be able to enter the police if you're not a nazi (despite everything they still exist), but the vast majority the reverse is true. Anything reeking faintly of nazism, like a wrong last name, and you're locked out. It also definitely affects your job prospects in the private sector.
Judging code is fine though, isn't?
Reminiscent of the "Linux Backdoor Attempt of 2003"
https://freedom-to-tinker.com/blog/felten/the-linux-backdoor...
CAFE 301 LÀ CAFE THƯƠNG MẠI LÀ CAFE SẠCH NGUYÊN CHẤT ĐEM SỨC KHỎE ĐẾN CHO MỌI NGƯỜI WWW.CAFE301.COM.VN
Agree, it's hard to look at this [1] and say with a straight face that "coriander" was "convincingly identified". Short googling leads to half a dozen of alternative identifications.

[1] http://www.edithsherwood.com/voynich_botanical_plants/plant....
Safari/iOS 4.3.3: not vulnerable
Safari/i0S 7.0.4: VULNERABLE
Chrome/iOS 7.0.4: not vulnerable

Looks like using Chrome instead of Safari may help; I'd say it would be more interesting if standard mail client can be fooled.
So we've gone from "Don't judge a book by its' cover" to 'Don't judge a book by its' content'?

How about don't judge anyone until having "walked a mile in their shoes"? Or even... "Don't judge".

Ideally, "before you judge...", you at least spend some time getting to know the person to find out a little more about who it is you're judging. And maybe that's really the issue.

http://www.goodreads.com/quotes/tag/judge
300 comments in 24 hours.

nothing better than people word-fighting about writing tools...

-bowerbird
In general, NSA is not my most serious threat (in terms of actual harm; they are the most powerful by far though) -- I agree they overreach, and for some people are a serious threat, but for me my primary concerns are Chinese/other foreign intel (who are documented as going after industrial/economic material much more than NSA) and independent/criminal/etc. types.

The scary thing is the bar is so low; even I could turn this into a nice weaponized thing to go after the long tail of people who don't upgrade, for the next months. The "diode" etc. infrastructure NSA built isn't that different from botnet C&C or the kind of relays people have when hacking.
As someone who's used the Odyssey cluster extensively, I can add that the most nodes I've run consecutively is ~ 500. While there are ~ 4000+ nodes on the cluster there's no way any single user could run that many simultaneously.
i coudn't see any info on your profile
Fitness Tech Services of Texas Fitness Equipment Repair
We are a fitness equipment repair and service company, we service treadmills, ellipticals, steppers, gyms, and we provide preventive maintenance
He was adopted from Egypt that is as arab you can get.