skysight-inc/HackerNews huggingface dataset:
>Things that aren't reversible are the exception

For thousands of years the only way to pay for something was with non-revertible mediums, either cash or bartering for other goods. Reversible transactions are new in the grand scheme of things.

If I ran a bank and didn't bother to lock the doors or keep the money in a safe and someone comes in and steals the money, I don't get to do a chargeback and get the cash back.
Does Roku have any plans of adding youtube support?
That's actually pretty cool. I hope the App Store allows animated gifs and/or videos soon. Some apps really look good when their Core Animation subtleties can shine through.
Somewhere between Jupiter and Saturn, I had to resort to

$(".essay").each(function(i){console.log($(this).text())});

to read the fun little text snippets. I like how it got fairly philosophical—everything eventually turns to philosophy if you are stranded out in space. Thanks for putting this together; it was a nice take on the perspective of our universe.
Well, after entering all of my information (billing address + facebook + email confirmation + credit card details) I am presented with: http://monosnap.com/image/Q8brXxtQsTJEkReseHlSyNolOgf2TX

"call_us_maybe"

Now filled with regret.
Humble Mobile Bundle 4
Oh, totally agreed. What I had difficulty with, specifically, was passing around a struct that contained a multidimensional array of a size determined at runtime.

I'm sure the problems I had could be solved by either a full re-design (not really an option), or accomplished by someone with more C experience.
Totally understandable. We're planning to add other login options soon.
A language exists on its own, with its own syntax and semantics. It may interoperate with other languages, but it usually takes some work to get a language written in one language to talk to a language executing in another language. (Examples include C/OCaml and all the languages that execute on the .NET runtime.)

An embedded domain-specific language is a language with its own semantics that has been grafted onto another language. For instance, Jeeves is embedded in Python. We can use Jeeves as a Python library, but when we're using Jeeves functions, the program behave like Jeeves programs rather than vanilla Python programs. (In this case, it means that the runtime tracks different possible views of sensitive values and computations done on them.) When programmers use the @jeeves decorator and the Jeeves API, the programs look like Python programs and can even use Python built-in functions and libraries, but the Jeeves library is doing work behind the scenes to make the programs behave differently.
From a week ago, a proof of concept of this kind of bug, "Background Monitoring on Non-Jailbroken iOS 7 Devices": http://www.fireeye.com/blog/technical/2014/02/background-mon...

> iOS7 provides settings for "background app refresh". Disabling unnecessary app's background refreshing contributes to preventing the potential background monitoring. However, it can be bypassed. For example, an app can play music in the background without turning on its "background app refresh" switch. Thus a malicious app can disguise itself as a music app to conduct background monitoring.
Great points! I also Like the tips from here:
http://ultralightstartups.com/how-to/name-a-startup/
As someone who spent embarrassingly long trying to log in to a system one afternoon because I was misreading an "l" as an "I", I can say that it does sometimes matter - it doesn't need to be in the same word.

Then again, since you set the challenge - lamb and Iamb

I can see no good reason for us to ever use the same symbol to represent two different letters, that's just silly business.

Edit: for the record, I didn't downvote you. Interestingly enough, I just noticed that it looks as though I can no longer downvote direct replies to my comments. Seems like a reasonable rule to have in place.
Thanks eric. We realize that gifs can get cumbersome and sometimes take a while to load, but it's a good place to start.
> if you are a resident, that is if you have accepted a job in Britain or are a spouse or child of a person who has, you are automatically covered through the NHS. This is based on residence in the country,

I see a contradiction in what you wrote: for all resident; but you have to work, or be the spouse of someone who does? These are different things.

I have personally been in that position, and I was refused coverage when I moved to UK for a new job, and was made redundant after three months. I then went back to Spain where I had work prior, and was refused coverage there, because my previous dues were only good as long as I stayed in Spain.
The metrics that every startup needs to track to be successful
How the Hell Is Sony Selling All These PS4s?
This is yet another nail in the coffin of Eric Raymond's irresponsible and fallacious "many eyes make all bugs shallow" theory.

https://en.wikipedia.org/wiki/Linus's_Law

Linus's Law as described by Raymond is a claim about software development, named in honor of Linus Torvalds and formulated by Raymond in his essay and book "The Cathedral and the Bazaar" (1999). The law states that "given enough eyeballs, all bugs are shallow"; or more formally: "Given a large enough beta-tester and co-developer base, almost every problem will be characterized quickly and the fix will be obvious to someone." Presenting the code to multiple developers with the purpose of reaching consensus about its acceptance is a simple form of software reviewing. Researchers and practitioners have repeatedly shown the effectiveness of various types of reviewing process in finding bugs and security issues, and also that reviews may be more efficient than testing.

In Facts and Fallacies about Software Engineering, Robert Glass refers to the law as a "mantra" of the open source movement, but calls it a fallacy due to the lack of supporting evidence and because research has indicated that the rate at which additional bugs are uncovered does not scale linearly with the number of reviewers; rather, there is a small maximum number of useful reviewers, between two and four, and additional reviewers above this number uncover bugs at a much lower rate. While closed-source practitioners also promote stringent, independent code analysis during a software project's development, they focus on in-depth review by a few and not primarily the number of "eyeballs".
root@teacup:/home/keith# apt-get upgrade
The following packages will be upgraded:
libgnutls26

Not quite 9 hours but fairly quick on gNewSense 3 as well, no doubt pushed through from Debian Squeeze.
"Imagine a baker who was more concerned with building ovens than baking bread."

I'd imagine that at some point, it's hard to make enough bread without considering the ovens.
Thank you for getting rid of the CAPS LOCK key.

Why can't you do that in software like double-tap shift = lock? Having a gigantic button in a prime location that's hardly ever used is a terrible design. At least on OS X you can easily reprogram the purpose of this key.
I agree with the sentiment that the framework "disease" has gotten a little out of hand (it seems like we have a new one every few weeks now...). However, these same people would come up with a dozen ways of routing URLs to handler functions if they weren't given some sort of standard solution to use.

Basically, frameworks are a way to work on a team without everyone reinventing solutions to problems that are almost beneath notice when trying to get dynamic content on the web.

The reason we don't have single CGI scripts for each url, and instead route everything through a single bootup script is to centralize things like session management, database initialization, memcache, configuration... etc. Things that you could do on every page, but that would be too cumbersome, repetitive, and generally don't change often.

When working with django, or zend, or cake, or whatever the framework of the day is I've often just wanted to go back to the simplicity of plain WSGI. But then I see the mess that people still make when everything is done for them and realize that would just create a new hell.

It takes discipline to program at a lower level, and understanding. Both of those qualities are in short supply.
Hey, email me at gareth@tinkercoin.com and I can take a look!

Edit: I had a good chat with sync and he/she successfully got bitcoins.
Science declares this is the funniest joke in the world
Comparing to Chromecast, I find ability to control using my phone/tablet/laptop + integration with android applications much more appealing than Roku. While Roku does have a mobile application but the user experience is much less seamless than Chromecast.
Get Baldify on iPhone FREE now for a limited time (Save $0.99)
How we migrated our assets to S3 without any downtime
A password with any of these characters might give you trouble if they're not easily distinguishable: I1l
They are not identical.

If this [1] is the actual code it looks like it's operating in RGB color space.

Which explains why it extracts the lowest value color component as alpha from every pixel and not just from those with low saturation.

alpha1 = (1 - a1) / (c1);

This is done three times, for each RGB channel once.
c is the selected color (in this case white with c1, c2, c3 = 1)

a are the channels of the current pixel (a1, a2, a3)

Later the highest alpha (lowest transparency) is kept for the output.

Which results in the effect that all highlights, regardless of their saturation, are made transparent.

Meanwhile the core function of KillWhite is executed in HSV color space:

Alpha = 1 - (Value - Saturation)

Here Saturation reduces transparency!
This is not the case in color to alpha.

[1] https://git.gnome.org/browse/gimp/tree/plug-ins/common/color...

[2] http://stackoverflow.com/a/14915403/731179

if there is need for further discussion I would suggest switching to stackexchange.
Adding to

http://superuser.com/questions/348167/how-can-i-remove-all-w...
or
http://graphicdesign.stackexchange.com/questions/13073/alpha...

or open something new
> not only that, but the bug comes from a mismatch between two common C error checking regimes (a zero-return error and a negative-return error)

So, chalk this up as another triumph for security-critical C?
Say what you will about the half dozen mutually incomprehensible error code standards in Win32, at least 0 indicates success in all of them. Well, except for BOOLEAN.

I really don't understand why anyone would return an int and have 0 indicate failure. OpenSSL does this too, and it makes no sense to me. I don't know how far this goes back, but clearly we have a long tradition of programs returning 0 to the OS to indicate no error.
That's not a very funny joke.
That's not what he said at all and your comment dips into "the elite few know more than you do" territory, particularly with the unnecessary dig at Web development. His only mention of TDD was "even if you don't," yet you jumped on the acronym TDD and took him to task for it.

What I read him as saying (and agree with) is that he's surprised that GnuTLS isn't tested against known-bad certificates in a simple integration test that doesn't require a Ph.D. to set up, as you imply.
Site is down for me. Any mirrors?
You've got to credit these guys for going the extra mile to keep you from finding out what their conference is about. Between this site and the conference website it links to, they use the acronym "RSA" twenty six times without ever once defining it.

Note that googling "RSA" gives a dozen contradictory definitions, from various things that call themselves the RSA. The conference here makes the list about halfway down, but again, without any explanation what the acronym stands for or what it is.

And of course, wikipedia just gives a two page list of RSAs for one to choose from:

http://en.wikipedia.org/wiki/RSA
Lean Against: Building an Alternative to Lean In
"Regular"(black car) Uber drivers seem to go through the same thing. Test on the area, background check, have to carry special class insurance, special license. I am unfamiliar with UberX specifics.
You're thinking of TextSecure by Open WhisperSystems.
Given the difficulties people have in converting Bitcoins to dollars, a more useful service would be one that converts Bitcoin to $20, but only once.
Is this an interesting observation? I doubt it a little. What security-conscious developer believes C is a good language in which to write complicated, security-critical code? You write code in C because you have to.
When you stop smoking weed every day you have insanely vivid dreams for a few days, that's the only noticeable side effect I had. Weed can sap motivation if you let it too
I've started noticing different a's recently in typography since it was pointed out to me that people with dyslexia and people with lower literacy skills struggle with the "upright" style lowercase A (as show in this font and a lot of other popular fonts) as opposed to the "italic" style lowercase A that most people hand write.
Well, in 1985 US Spy satellites (declassified in 2011) had a resolution of 2-3 feet[1]. "Keyhole-class" (KH) reconnaissance satellites have been orbiting the Earth for more than 30 years and reportedly have a resolution of 5-6 inches[2].

[1]http://news.yahoo.com/declassified-us-spy-satellites-reveal-...

[2]http://science.howstuffworks.com/question529.htm
I'm American, so I use imperial units in my everyday life. I'm also a (bio)chemist, so I do use metric units about as often as I do imperial units. While I might be slightly biased ("M" is molarity gosh dangit), I don't think I would confuse "M" for "meters (m)" simply because I use imperial units in my everyday life.

I bring this up simply because I've seen a few comments over the past few days to the tone of "imperial sucks" and "imperial is clearly inferior."

To me, I only see using imperial units as an advantage. As Americans, the metric system is already hammered into our heads in grammar school anyways. Some might see it as Americans being uninformed or accustomed to antiquated methods, but I see it as Americans being able to speak two languages (at least the Americans I'm most familiar with).
>Don't you usually exchange public keys?

thatsthejoke.jpg
8 glasses of wine a week, at 250 ml per glass is 2 litres.

Weak 10% ABV wine would be 20 units. Normal 12.5% ABV would be 25 units. Strong 15% ABV wine would be 30 units.

UK advice is no more than 3 to 4 units per day for men, with a couple of days free of alcohol and no "saving up" of units for a binge. (The old advice was 21 units per week for men.)

http://www.nhs.uk/livewell/alcohol/Pages/Alcoholhome.aspx

Drinking above that limit long term has some health consequences

http://www.nhs.uk/Livewell/alcohol/Pages/Effectsofalcohol.as...

Problem drinking has several definitions, but NICE recommend assisted withdrawal at 30 units per day. (15 to 20 per day if there are co morbid severe mental health problems).

I don't care if people use cannabis (and I am strongly in favour of legalisation) but I fucking hate the refusal of many cannabis users to even contemplate any negative effects of cannabis.
How to reboot cable modem via Web UI with Zombie.js
My mother suffered from cluster headaches recently (the worst pain you can endure in life they say).

Apparently mushrooms and LSD are unofficial treatments. When asked, her doctor encouraged her to use mushrooms ...

Apparently a non-psychedelic version of LSD could be made but it's difficult to justify spending millions in research with the official stance regarding drugs.

I'm glad change seems to come, albeit slowly ...
Moral of this story: always develop in an environment that mirrors your production environment.
What "known-bad" certificate? You appear to be suffering from hindsight bias. We know what the bad certs look like now, but they're idiosyncratically related to a very, very specific bug: having the test case that checks for this bug implies that you don't have the bug to begin with.

The fallacy that you could have easily written a test case for this bug appears neatly encapsulates the weakness of "TDD" as a mitigation for programming flaws.
Thanks for the suggestions. Our app uses sensitive data (Customer's name, address, etc., 30k new entries/month) and they don't want that to be leaked. Their biggest concern is accessing the webpage and having that data being served through HTTP (We bought an SSL certificate and all our data goes through HTTPS, but still).
Microsoft Research Reveals 3D Browser SurroundWeb
Should this not be "If the moon were..."?
I use collectd and have found it to work rather well. The documentation could certainly use some work, but once you get figure things out it's pretty easy to configure. CPU usage is almost non-existent for the amount of data monitored. It's also pretty easy to write a custom plugin to collect whatever custom metrics you want. I use a script to expose the current values out as http/json for integration with Circonus for monitoring/alerts of key values. You can use whatever graphing tools you'd like, things are stored in rrd format.

Recently I've been implementing salt stack, and collectd is really easy to automate config of. I've got salt fully configuring collectd, and then using the circonus api to setup monitoring rules automatically per applied states. It's a beautiful thing.
I agree. Their mistake was not swapping it with left control, which is what should be in that spot.
I do too. Note it's https://domai.nr/ though.
How big is the Sun model on that walk?
Google the next Bell Labs? Annotations on Jon Gertner's book about Bell Labs
> what would it take for you to trust an external service to manage your logs?

Well the no-brainers are:

1 - Encrypt everything before living my infrastructure (with my key, not SSL), only decrypt it in my infrastructure when generating reports.
2 - Anything that runs on my infrastructure is open source, and widely distributed. Bonus points for a simple protocol that I can write plugins for.
3 - Make it possible for me to back everything up, and restart everything in case you go out of business.

Those are the must have "I won't even let you get through security otherwise" features. Now that I think about it, #3 alone makes anything you can offer worst than doing it in-house.

But none of those are features that'll make your system look any good in my eyes, they are just enough for your system to not look like an enemy.
Image Recognition Startup Slyce Raises $10.75M
Go Continuous Delivery Platform Now Free Open Source
Just checked my Ubuntu boxes. Update has been pushed and is ready to apt-get.
Pluto but not Ceres? That's just discrimination based on historical inequity!
Sensitive-Data Email Header (a proposal/question)
Using zero for errors means you can express error checking directly with C expressions that appear boolean. It's not as safe or rigorous, but is more readable.
That is precisely why I mentioned modern, in particular would be interesting to know if given a good angle they can resolve phone number being entered on a cell phone with physical keyboard (nokia 3390 for example).
I do have something - but it is not very far along. Was wondering how far along it needs to be - we just have a rough working wireframe and an early prototype, but no customers. The impression I got from the article is that they did not have any/many customers either. So how important is to already have actual paying customers and users.
You're absolutely right. We're in that process now but I wanted to hear some concrete opinions or alternatives we could offer.
I use TLS encrypted connections when fetching and sending e-mail (I use Evolution with a pop mail connection and a roving SMTP for sending).
Do you have any idea the amount of engineering effort required to handle the scale of Twitter's service?
It is true that LSD can mess you up if taken under certain circumstances, however, you shouldn't intimidate the inexperience. If all you ever heard about LSD is that it could mess you up, then there is a higher probably that it will harm you. Instead, I would recommend the following to all those who are inexperienced: Make sure you understand it's effects and try to find someone who has experience with LSD to guide you through your first trip.
You might want to up the frame rate of the gifs, right now they seem kinda laggy and don't show off animations very smoothly. Cool idea though, people would use this if its easy to make them.
It is legitimate to be more concerned about the Apple bug than this bug since the Apple bug affects several orders of magnitudes more people.

Conspiracy theorists would postulate that the iPhone is a much more enticing target for the NSA.
The line isn't as clear as you might imagine: what if a journalist secretly captures the Lord's Resistance Army pillaging a village in the Congo? Certainly, the images might depict real children being raped/killed in the most brutal fashion.

But would it not be worse to censor that material to thwart the few perverts that may get off on it, all the while preventing the public from knowing and feeling the truth so viscerally that they may actually deign to do something about it?
IPFreely?
The Evolution [or Revolution] of Data and Databases
Goto is an acceptable and idiomatic way to implement error handling. If something goes wrong in an inner loop, you can just break out of all the loops and go to the failure state.

e.g. https://stackoverflow.com/questions/788903/valid-use-of-goto...
I found the actor that plays the lead engineer in the video. http://nelsoncheng.com/acting
Yes, I agree: that is what conspiracy theorists do regardless of the facts on the ground. But that's tangential to my point. People on HN found the "goto fail" bug damning because of the specific form it took (among other reasons), and I'm happy to point out how damning that form turns out not to be.

The fact that GnuTLS is extraordinarily unlikely to host an NSA backdoor helps my point, which is why I brought it up.
Statistician on a Plane
Since C has neither garbage collection nor the RAII pattern of C++, it is very common for C functions to have a cleanup section at the end, where allocated memory and other resources are freed again. In many C projects (including the Linux kernel) it is a common and accepted pattern to jump into the right position of the cleanup sequence using a goto.
A Plea
> 0. Not offered it as an option 1. Priced the option off the table (i.e. 10-100 x the next closest option)

Really overpricing it is something I didn't think of. We were just thinking of charging the man-hours and a little extra.

> 1. Why do you not want to do it?

Costs of maintenance, portability issues, etc.

> 2. Why do they want to do it that way?

Privacy concerns.

Oh, and, thanks!
>You could just Google it.

Thanks. I'd never heard of Google. What a fantastic invention!

Sadly, though, it doesn't appear to help as much with vague recollections, and certainly doesn't seem to pass the Turing test where actual discussion is concerned.

In any event, it appears that I've mixed it up with Silk Road, where actual bitcoin was seized.

Turns out that it takes a bit more "Googling" (I think I've coined a new verb for this new Google thing) to determine that you have something wrong vs. corroborating that something is true.

This all gives me a new idea. I haven't quite fleshed it out yet, but I am tentatively calling it a "discussion forum".
Exactly, that is the issue here.
>> You may as well ask what's interesting about the latest IOS point release, what's interesting about the latest nginx release, what's interesting about the latest Haskell / Erlang / Dart / Oberon / Clojure release.

Yes, exactly so! You should ask that question. That's the question I'm asking, and not getting an answer to. The latest iOS release fixed a massive security flaw in TLS/SSL.

This Go release? According to the guy who released it, contains minor bug fixes they had been sitting on for 3 months and decided to make a point release just because it had been a while. A total non-story.

>> I don't see the point in expending emotion and energy getting angry

The name I chose is "bsdetector" and you're asking me why I would get upset at bullshit such as this Go story.