skysight-inc/HackerNews huggingface dataset:
Some of the exploits that target applets also affect running servers. Tomcat or Jetty or WebLogic from two years ago are likely compromisable pretty easily.

Any web server has the same issue, and most people are more than fine if they update somewhat regularly. Whether node or rails or whathaveyou, you need to keep updating.

My code on github from two years ago is as secure now as it was then, because someone else has taken on the onus of playing security-update wack-a-mole for me. That's all I meant; I didn't mean to imply java was less secure by default than any other thing listening for connections on the internet.
84 pages to cover 11 points, insane.
I want to see a new contest. I want to see if Firefox can be cracked if JavaScript is disabled.

Right now I'm using NoScript and I have exactly 10 sites whitelisted. That list doesn't include common sites such as Google or Yahoo.

IMO Google search is eminently usable w/o JavaScript, as is Gmail. But I don't really care about frills like search suggestions.

Oh, and get off my lawn.
It was never about a long, entertaining performance. In Ye Olden Dayes, it was about seeing as many up and coming bands as possible in a few days time. Exposing bands to audiences and audiences to bands.

I don't know if that's even needed now in the age of youtube.

If it is of any value still, it needs to be as well-curated as it was back when. It doesn't seem to be any more.
The content is worth not having ads.

I'm having trouble parsing that sentence. What do you mean?

Do you mean that the content is so important that you are happy to subsidise the publication? Or the content isn't worth bothering with ads for?
...The advances that he would not have made if she were not a woman. So you're saying a man sexually harassing a woman isn't sexist?
They're in geosynchronous orbit, so they rotate with the earth, are always over the same spot on earth at the equator.

Don't know which satellite series is used for this service, but the Inmarsat constellations aren't particularly large: http://en.wikipedia.org/wiki/Inmarsat#Satellites, so it could be they only got solid data---and it's not very specific---from one satellite.

I also wouldn't put much confidence in mass media reports saying "satellites", and the Wikipedia plural use is probably based on them.
A decade or two ago, if you were a band playing the bar circuit, SXSW was something you aspired to. It was a big deal for a long while.
This is my point exactly. Self hosting is maintenance. In the time you got 502s, my github pages stayed up. It is grossly inefficient to host your own source control.

Libraries and third party services exist for a reason.
If instead of containing Fukushima we bombarded the area with nuclear bombs, it still wouldn't leave the planet uninhabitable.

Even on years with major nuclear disasters, coal energy production kills more people than nuclear plants. Proper nuclear plants are the second safest option after hydro, and we can't get all our energy from hydro unless we start using much, much less energy.
I thought the rule with private trackers was to try not to name them in public?
Won't happen. No amount of VR wizardry will ever replace massive arrays of 12" woofers driven by vacuum tubes.
> Chinese malls in particular have a lot of made-up Chinese-owned store brands with foreign sounding names, selling utter rubbish at wildly inflated prices.

I find this comical whenever I see it in China - especially brand names with western geographies on their merchandise. "California 1973", "Cambridge".
One of Amazon's leadership principles says:

Have Backbone; Disagree and Commit

Leaders are obligated to respectfully challenge decisions when they disagree,
even when doing so is uncomfortable or exhausting.
Leaders have conviction and are tenacious.
They do not compromise for the sake of social cohesion.
Once a decision is determined, they commit wholly.

Yes I admit it does look as the usual corporate mumbo jumbo, but Amazon really believes in it. While working there I managed to successfully steer projects course by challenging the decisions and the various assumptions those decisions were based on, just by presenting data.

When I'm interviewing I appreciate when the candidate challenges something I've said and provides information on why she/he doesn't agree with me. It really helps the candidate to showcase her/his knowledge and it helps me in probing his thought process, which is ultimately what I'm really interested in.
Same. It really hurts my eyes.
Really? I guess I won't do that anymore. Sorry about that.
I guess we have it easier than someone who's colorblind, I guess.
Funny thing. I looked at my logs, and only today there were 6 attempts of getting into my computer, originating in different countries. And that's because the lamer ones don't get far enough to go into the logs.
At this point it really doesn't matter what title is given to who. What is important is that both of you try to understand if you can actually work together without having conflicting values. What's the first conversation you need to have?

Think about the idea by yourself for some time. Ask him to do the same. Time should be a week. You should be thinking of the future, the values of the company (this is super important), what are the unbreakable laws, along what vision (the one liner vision) does the company guide itself.

Both of you should be willing to think about this. If either you or your buddy are not, then I can tell you now it won't work out. Not as founders. Assume you get past the thinking stage. Put your ideas on the table. My general gut feel rule here is that both of you should be able to agree on each of the points. However, if there's a tinge of saying yes for the sake of it, then it isn't going to work out either. Confounding is marriage and the best of marriages will always have arguments in it because that's what truly helps the relationship grow. But the arguments also end in a common agreement with lessons learnt. In a cofounder relationship, agreeing to disagree will simply compound problems that will one day kill the entire thing.

The second part of the discussion should be that in the future you'd like to be CEO and if starting on the idea, you want to have it signed. This will test both of you. Especially you in your ability to carry out a strong decision while negotiating. If you can't do it, you are either not cut out for being CEO or your cofounder relationship was just never meant to be.

Hope that helped. If you want to get in touch, even if it's for idea validation, feel free to do so

PS - apologies for grammar errors and typos. Typed on mobile.
My school is still running XP for all of its desktops.
Is that what they say?
Well done. What language did you use to write it?
From all the posts here, it doesn't like a sysadmin. It sounds like an underpaid C++ DevOps engineer role.
Going to hydro is exactly what the parent poster says - gradual powerdown and/or population reduction. There's just so much hydro potential around, we're already using almost all of the good spots, and there's not nearly enough capacity on this planet for our current use.
Well, I was told by an astrophysicist on /r/askscience, that inside of 1.5x of the event horizon, there are no more stable orbits (you either go hyperbolic, or fall in). Outside of that distance, you can absolutely orbit a black hole just like any other body, with the same chances of outside forces influencing your orbit.
That was "our" mall in the 90's/very early 2000's. You're spot on the description. "The walmart's moving to the mall!?" was the death rattle of 'assas.

I used to work in that little business park across from where they put the UNO's up on the north end.
Life is built of tradeoffs and compromises. For you, github pages makes total sense. For me, not so much. Saying that my little VPS is "grossly inefficient" compared to your GitHub repositories is like comparing apples to... I dunno, like a rock? or a monkey? Something else entirely, that's for sure.
very nicely done indeed.
Thanks for the comment. To clarify: We have several ideas we are vetting. We are at different stages with different ideas. Some have prototypes. Some are just ideas.
Okay why are we still using a centralized domain name system with authorities? Do we enjoy the crazy keyholders from various countries meeting in secret thing?

We can have many decentralized ways of registering and transferring domains. Namecoin is one, but how hard is it to decentralize the DNS database?
Carl Sagan – 4th Dimension (Cosmos)
I'm glad more efforts are being taken to get these things in front of younger audiences, but I must say, in high school I would've refused to join something meant exclusively for high schoolers. "Let me work with college students, damn it!"
I did this once in a gist by mistake - meant to remove them before submitting it. Luckily someone spotted it and let me know so I could kill the access key.
Seeing as we don't know his sexual orientation, you don't know whether he would have made those advances if she were not a woman.

And no, a man sexually harassing a woman isn't always sexist (even though I'd imagine that in the large majority of cases sexism plays a role).

Sexual harassment ≠ Sexism

What's important to discern is the reason behind the harassment. If a man is harassing a woman because he views his gender as superior to hers, or that she's nothing more than a sexual object, then that's a pretty clear-cut case of sexism. But if a man acts inappropriately towards someone because he lacks self control/tact, has poor social skills, etc. and is only targeting that person because he's attracted to them, then it's sexual harassment.
Out of the box it is not great, but it can be tweaked to get more. Mine is plugged in most of the time, so it's not a big deal for me (and is still much more than I get on most PCs).
I was listening to this song while reading the page, goes good with the flashing background: http://www.youtube.com/watch?v=RBb8e7G4dBk
"Some of the exploits that target applets also affect running servers."

This would make sense. It's the same reason why php makes apache or ngnix insecure. They are front facing and have access to the OS filesystem and such.

"I didn't mean to imply java was less secure by default"

Okay gotcha. I work with Java quite a bit and was confused by your statement as I thought I missed some major security news.
> but how hard is it to decentralize the DNS database

Its an interesting question; how do you decide who to trust?
The Haskell language is described in The Haskell Report via an informal presentation of its denotational semantics. Its types are all "lifted" from Sets to something like Scott Domains to account for partiality and non-termination, which are denoted by the value called "bottom" or _|_.

So, they are not strictly functions in the normal set-theoretic sense, but they are (mostly?) mathematically accurate continuous functions between Scott Domains. As the semantics are not formally defined, there is a limit to what you can say about them, but there is an interesting paper entitled "Fast and Loose Reasoning is Morally Correct" that shows that treating Haskell as if it worked in terms of total set-theoretic functions is a reasonable thing to do in some practical circumstances in the use of Haskell.

If you want really pure, total set-theoretic functions in a programming language, you will have to go to a total functional language such as Coq or Agda. You lose Turing-completeness when you stick to total functions, though, and most people only type-check their functions rather than actually running them (this is not as crazy as it sounds--these languages are primarily used to help formulate formal proofs, which are finished when they pass the type-checker).

In any case, the bit in the blog about FORTRAN and everything conflating procedures and algebraic functions strikes me as nonsense, at least without further explanation to clarify/justify it.
Yes, I have gotten physical mail with exactly that pitch.
Thanks for the insight nonetheless.
What about simply having different experiences?

Stupid analogy: I hate it that only tall people seem to design store displays of pants. Remarkably, tall people don't seem to notice that putting the small sizes on the top shelves and the larger sizes lower does not make sense. It's because they have a different experience of reaching for things on shelves. Height diversity, though, makes for a better user experience.

It is true in my stupid analogy that tall people and short people do have genetic differences, as on average they innately differ in height. But it is not their innate genetic traits that makes these tall people ignorant both on the social and analytical axes when designing store displays.

Or is it? Hm....
For anyone college-age or younger.

Welcome to the Cold War, kids. It was an interesting time.

The Soviet Union collapsed December, 1991 -- 22 years ago. Hard to believe.
The Villagio in Doha is a good example of little differences, like an ice skating rink located in the middle of the food court and a knock-off of the Venetian's canal running through it.
Yes, it is more informative. Does Wired just steal the content by adding the words, "according to Aviation Week and Space Technology", to their own article. Or do they pay a fee to Aviation Week to license the content? If it's the latter, why don't they just reprint the original and better article? Can anyone familiar with the magazine business explain this?
Despite people's advice to the contrary I tend to agree. I doubt I will ever send a thank you note unless it is somehow warranted.
Thank you for the follow up. I will check out the site and I hope donations flow, though I'm not a Bitcoin user myself.
I do not know how much bandwidth you would need to track the entire fleet of all major airlines (even if you, say, limited yourself to international and/or flights longer than X hours/km), but worldwide tracking of automated instrumentation (I'm an earth scientist) is done regularly. A few examples:

- The iridium satellite network, which provides phone service, also provides a Short Burst Data service, which I suspect could be used for this purpose.

- The Argo network tracks thousands of ocean drifters (http://www.argos-system.org/?nocache=0.9626778103411198). Some of those drifters are using the Iridium network now.
If it's any consolation, I'd like to present you both with these trophies, and perhaps jwz could throw in a voucher for a free pizza.

http://mlkshk.com/p/JE0A
Update on Julie Horvath's Departure
> Build almost everything on top of the STL and Boost, which are safe.

this is not really true, you can have temporal memory safety issues using STL and boost.
> God, I hate that "link expired" stuff.

Heh, I use tor, and it just took me over 10 tries to login to reply to you (changing exit nodes to find one that isn't blocked, etc).

If you don't like Haskell for some reason, replace it with something else. Heck, a browser in pure JS would be preferable to a browser in C (note: it doesn't count if you have 50 libraries implementing audio/visual/crypto/compression written in C and linked into the same address space as the JS).

But it takes huge capital to implement a browser, and you'll still have the other issues like CSRF, clickjacking, phishing (each of which have been solved ages ago by waterken btw: http://waterken.sourceforge.net/web-key/), X.509 (which has been solved by tor hidden addresses and other systems like it), and other mystical issues that arise because of how incoherently-designed the web is.

Anyways, why do you think C would be any better for implementing a browser than any of these languages?
It would be great if it had a 3DS remake, since the 3DS has an analog stick.
Having not yet had the opportunity to attend, what's the corporate schtick you're noticing?
You've gotta love Zed A. Shaw, he is an entertaining truth cannon (and a great programmer).
Yes, but then what's the point of having the larger monitor?
This is the best possible response GitHub could have done given the circumstances.
Meritocracy as an ideal may not be intrinsically sexist or racist, but declaring an organization a meritocracy doesn’t automatically eliminate existing sexism, racism, etc, and instead masks it. That’s the problem. It’s not unlike the “structureless organization”. It’s not really structureless — there are always informal social dynamics in play — and acting as if it is structureless results in avoiding problems instead of confronting them. Everything was all rainbows and unicorns at GitHub until the informal structure apparently resulted in an institutional inability to deal with certain issues. Valve has seen similar problems.

Organizing people is the fourth hard problem.
Personally, I prefer when people just say they are co-founders when there are no employees at the company. Kind of pretentious to introduce yourself as the Chief Executive Officer of no one.
Question to anyone who uses this or torrents directly to their PC (rather then via Seedbox). Has anyone heard of anyone that has received notice from their ISP yet for the "6 strikes" changes that went into play?

As soon as I heard about those I transitioned completely to a seedbox setup. It is actually great for media because I can stream directly from my seedbox to my chromecast, but for some things like software / games it would be more convenient to just torrent it directly.

I am basically curious if maintaining an up to date IP block list via peerblock and using only private trackers is enough to keep you off the radar?
I am using Cloud9 https://c9.io for Node.js and they are the people behind Ace which is the editor that cloud 9 uses. You can check out Ace on GitHub here: https://github.com/ajaxorg/ace/ or here http://ace.c9.io/
In my experience, Apple stores are freestanding in dense urban centers, and located in shopping malls in suburban areas. I haven't seen any exceptions to this rule so far.
http://en.wikipedia.org/wiki/GFAJ-1#Criticism
Hopefully not since 2003 when the FTC had a court enjoin that specific company from making misleading statements about renewals in their postal mail.

The mails they send out now look like this:

"As a courtesy to domain name holders, we are sending you this notification of the domain name registration that is due to expire in the next few months. When you switch to Domain Registry of America, you can take advantage of our best savings. Your registration for _______ will expire on _____.

You must renew your domain to retain exclusive rights to it on the web, and now is the time to transfer and renew your domain from your current registrar to the Domain Registry of America.

...

This notice is not a bill. (bold) It is rather an easy means of payment should you decide to switch your domain name registration to Domain Registry of America."

Followed by the pricing table and write-in order form. Still junk mail, but not falsely representing themselves as your current registrar.

I get these mails all the time too, and unfortunately I actually have to pay one of them. Some 12 years ago or so, I helped a neighbor who runs a local charity by creating a website for her annual event, pro bono. Even though she paid for the domain, the billing contact info was changed to my address (perhaps by her, when someone asked for a technical contact), and transferred to DROA. I don't live in that area anymore or have contact with this neighbor, and I'd rather not track her down with a bill nor let the domain of her charity expire, so I've been dutifully paying the marked-up DROA renewal every year.
I think he means that he values the content so highly that he'd rather not tarnish it with advertisement.
How is this different from all the other online services that require you to click a link in an email in order to verify it, and refuse to give you full membership until you do so?

Some of the registrars I use have implemented this policy lately. Turns out it's a non-issue as long as your contact info is valid and up to date (which it should already be).

It doesn't conflict with whois privacy, either, contrary to all the FUD that gets spread around. Any whois privacy service that is worth the cost will forward the verification request to your real email address, and if it doesn't, you should switch to a better service. Using a crappy whois privacy service with no email forwarding is a surefire way to lose your domain anyway.
I think ISPs gave that up...
Awesome response from GitHub. Professional response, apologises and thanks the complainant rather than being defensive ... I think their new HR hire in January is already paying dividends ;)
On Apple devices, Safari's reader mode can fix that.
It's good to see this statement out of Github. The general tone and specifically the mention of the founder's wife in this post gives a huge amount of credence to Julie's claims. I hope Github follows through on this with as much sincerity and determination as this post implies.
Getting from a research compiler to "something that can actually be deployed in the harsh environment of the real world" seems to be an order of magnitude simpler and quicker than gaining a critical amount of developers and a competitive ecosystem of libraries, tools, tutorials, mindshare and ubiquitous (commoditized?) hireable employees for that language.
Is it the word "lesbian"? I apologize if that is considered offensive. I spent some time trying to think of what the most appropriate term would be, and I really couldn't think of anything better. What is the politically correct term to use?
This is the first thing I thought. Given the mild but noticeable hassle of converting USD to BTC, and the position of BTC in the eyes of many ("hang on to all of it, the value will keep going up!"), there may be potential impulse donators who just won't do it in Bitcoin.

Actually, I wonder what sort of income there'd be with a "joke money" cryptocurrency with an associated tipping culture, like Dogecoin.
That was also my first reaction. I don't know enough about crisis-management-style PR to second-guess their response. I often have the suspicion that founders are not taking the best course of action, but this response seems to avoid the obvious pitfalls.
"I'm waiting for a hip rebranding of the term 'management'..."

Easy, just start calling managers "people hackers" and launch a people hacking tips blog next week.
something unexpected will happen long before 202 million years from now.
You should never use a contact email that is on the domain for the DNS record in question. Only bad things can result. I use my most basic fastmail.fm email for that purpose.
This and: (electrical faults, interference with airport radars, safety of maintenance technicians).

Sound like utter BS.

Show me a case where an IN-FLIGHT transponder shutdown is a needed issue, or where this does not need a better engineered solution.

Also - Don't tell me why this is not done (based on past issues) - tell me why this is impossible to fix.

I challenge you to give me any reason in the universe which is acceptable for not tracking, in real time - uninterrupted streams, flying packages of hundreds of humans.

Give me any reasonable response to why this is not something that should be fixed.
Probably couldn't say til they finish looking into the details and some dust settles. Otherwise, solid apology, good on them.
The U.S. defense department took a chemical (aka
Agent Orange) that had been used safely for clearing brush from ditches for decades and started spraying it from helicopters without any research being done on its safety.

Sure Dow and Monsanto took the money. But they learned their lesson and when the DEA started spraying Paraquat onto cocaine plants in South America Dow sued them to stop. I believe they even threatened to take Paraquat off the market if they lost their lawsuit.
True, now that you point it out it does seem like legalese.

I think if he said "should" it would imply fault, which would be a premature stance for him at this point.