skysight-inc/HackerNews huggingface dataset:
I don't get it. If someone capture the SSL cert, they could be MITMing the server. Which means they could be serving poisoned JavaScript code to everyone who was using the website or the bookmarklets, code that could send the master password to the attacker's servers.

How is this not vulnerable?

EDIT: and more, what guarantees can they offer that the plugins downloaded from their site ever since their were vulnerable are not themselves trojanized? OpenSSL has been vulnerable since March 2012, how many downloads did they have since then?
Unfortunately IE10 is the first browser to start auto updating silently by default.
http://growth.userium.com
We have the same version of OpenSSL on 2 different test nodes.

OpenSSL 1.0.1e-fips

One came up positive, One negative. Shouldn't it be negative for both?
Follow the player left right, and move mirrored on a line. Works pretty much unmodified for 12 and 13. https://gist.github.com/anonymous/f59ea23c9a421d93c2c1
Any tips for level 17? I can't seem to figure out a solution for the teleporters using the getObjectCoords hint that was given
Yahoo mail appears to be vulnerable
I've had really mixed experiences with support from them, ranging from this to awesome. Mostly it's been ok - except for their more legacy products. Sucks you wasted your time, but I'm glad it's fixed!
Not quite a burger but Tournedos Rossini [1] exists. This
is a fillet steak topped with foie gras and served with black truffles.

[1] http://en.wikipedia.org/wiki/Tournedos_Rossini
Was that an ironic pointer to the Italian government, I’d laugh. Otherwise…
All the Things "Silicon Valley" gets wrong about Silicon Valley.
Negotiating tip: Whenever possible, let the other guy name the price first. Let him say a number first. To you, "reasonable" may be $1000, but he might think reasonable is $10k.

You have a strong negotiating position, because no deal is fine with you.

You can use escrow agents and do the deal via a lawyer, if the money is big enough, if you're concerned he'll peek at your source code and then back out of the deal.
Myths About Adblockers Busted By Research
You're fighting the good fight, sir or madam.
shrug I've never had any particular issues with it, but admittedly it's all I've ever used since it's what most shared hosting providers have. And before anyone suggests it, I don't have the money/desire/need to move off of shared hosting for anything I do.
Well, Here we go... https://twitter.com/WarrenGuy/status/453510021930680320

pikachu@BATTLEGYM ~/heartbleeder $ date

Tue Apr 8 08:37:08 PDT 2014

pikachu@BATTLEGYM ~/heartbleeder $ ./heartbleeder mail.yahoo.com

INSECURE - mail.yahoo.com:443 has the heartbeat extension enabled and is vulnerable

pikachu@BATTLEGYM ~/heartbleeder $
If you're seeing a situation where you need vastly more memory with JRuby, please file it. While there is a higher base memory footprint due to the JVM being booted, I've found in practice it's much better on RAM than MRI. We saved a lot of money on EC2 by switching to JRuby because servicing a new request with a thread was a lot cheaper than forking a process running Rails.
You get 3 years to implement this or financial penalties will follow...

Want proof?

http://europa.eu/rapid/press-release_IP-12-530_en.htm

If it wouldn't have been invalidated, Germany would have received financial penalties.
Thank you, this really had to be said. You can do C in C++ (and if you do that, chances are that you're doing it wrong), but you can't do C++ in C. The ugliest and unsafe parts of C++ are invariably those coming almost untouched from C (raw pointers, casts from/to void ptrs, etc). C is close to the machine, but C++ is largely a vertical language where you can do things low-level or high-level (and yes, you can do a lot of interesting things with templates, no matter the bad rap they've got); and most of the current C++ community vastly prefers high-level-like code, for good reasons (for starters, it may be even more performant). A LOT of the sources of unsafe code go away by two simple techniques: use RAII-managed smart pointers instead of raw ones (some of them are as lightweight as a raw pointer), and prefer vector (or other container) to array.

I love C and C++, and each one has its place, but really, they're very different. Almost as much as C++ is to Java, for example.
Whether you decide to actually sell it or not, I would recommend asking this person what is that "reasonable amount" that they are willing to offer ? They contacted you which means they are more interested in buying it than you are in selling it at the moment. So even before you get to the point of valuing your code, just ask them "what are you willing to pay" ? If they ask you back "what will you sell it for", you tell them "I am not really looking to sell but willing to hear your offer and I might consider it depending on what you offer". Don't give them anything more than that. Remember that "reasonable" is very subjective. When it comes to buying/selling/negotiating, don't work with subjective stuff. Ask for specifics. If they don't want to specify, then they are wasting your time. Put pressure on them to come up with a number first.

Again, they want to buy it rather than you wanting to sell it. Big difference. Make them do the dirty work. Let them talk more. Let them give you a number. Until then, sit back, relax.

If they do come back with a number, then you have a different set of things to think about. For now, let's not worry about that.
In response to our previous articles, many adblockers claimed they would much rather pay a small fee for content in lieu of viewing ads. Our research reveals otherwise.
The messaging on the site reiterates that you can accept payments and sell product any time "day or night". Is this a problem with existing solutions? Or is this geared towards people who currently have a fully manual fulfillment process?
To me the biggest issue is the lack of CSS3 selectors, which makes developing even with preprocessors a hassle that entails lots of unnecessary markup classes and other stuff.
We could argue about what's a "typical" SaaS monthly fee, but I'm pretty sure your $50/mo is for the SMB/Enterprise space where my $5/mo is for consumer.
Six things I want to teach my dog about work
mmap does complicate things. A traditional database often works using write ahead logs. The log holds changes made to the database over time - so when you want to write a change to your DB, you put 'I'm changing value x.y to 50' in your WAL. Sometime later the actual data pages holding the modified x data structure can be written out to disk. If you have a crash before the data pages get written out, you can 'replay' your WAL file to redo all the lost changes.

Unfortunately, a central requirement of a write ahead log is that the data pages must not get written before the WAL. If that were to occur, and there were a crash, the system wouldn't know that it had to undo the changes to the data pages, leaving you with corrupt data. mmap generally doesn't provide the ability to pin your dirty pages in memory - they're subject to getting flushed any time the system is under memory pressure - so it makes logging a lot more complicated to get right.
Also there shouldn't be pressure on boys or girls to be anything in particular. Parents should encourgae their children to find what they like and encourgae and nuture that.
Thats very true. The plan was to give the user heavy asynchronous IO functionality that appear to the user as making a simple ajax call with a callback function. Provides the developer asynchronous functionality on the server side. Scope variables and so on are all handled behind the scenes.
What was the point of this hack? Yay they hacked Disney in Israel... They're just hacking random websites that are hosted in Israel. They have minorly inconveinced random Israeli citizens, shouldn't they have gone after the government?
Also... Time for HN to debate the Israeli/Palestinian conflict(?)
Because "society" is more important than your greedy individualistic exploitative capitalistic contracts.
Having used these services, here's some advice/traps for young players:

1) Silkscreen isn't that important unless you're going into production - and are you really going to stiff your customers with crappy boards? The only other place it might matter is if you're dealing with particularly sensitive layouts where you don't want gunge on your traces, but again - why are you using a $10 manufacturer?

2) Etch quality is normally fine with these boards, pushing the fab minimums is asking for trouble, but standard 6/8mil is never normally a problem.

3) Shipping is a lottery, sometimes stuff arrives very fast, sometimes it doesn't, that's just HK mail.

4) Drill quality is where you might start to get worried because if the holes are sloppy, you might end up with messed up vias or holes in traces where they shouldn't be. (see https://www.sparkfun.com/tutorials/115) This is something that the cheaper houses tend to fall over on, but you can get round this by making the via rings larger to allow for their mistakes.

5) Panelising is an interesting case here, as someone mentioned. DirtyPCB specifically mentions V-cuts in the fab specification so presumably they're allowed. There's no good reason why any middle-man should prevent you from making a design if the fab wouldn't make it for the same price.

6) Cost per board - there's a fixed cost here which seems to imply that if possible and allowed, you should panelise your boards or at least put multiple copies into a single 5x5 or 10x10 shape.

If you want an alternative, look at OSHPark, http://oshpark.com. They offer $1/sqin for 3 boards shipped anywhere - this scales to 9 boards for $12 so fairly similar to dirty PCB and often cheaper because often you only want one or two revisions of a prototype board.

The quality is excellent, you get ENIG (gold tinned) plating and they're made in the US which should mean fast shipping. For us in Europe, shipping is still a gamble. For more advanced designs you can get 4 layer boards and there are cheaper options for large orders. You can only get purple boards, which look cool, but aren't for everyone.

Critically the price is per square inch rounded down to the hundredths or thousandths. So if I want to make an LED breakout board that's only 0.5 square inches, I only pay $0.50 for 3 (and I've done this).

There's also BatchPCB, but as they lost my order and are no longer price competitive I'd have to say they're not worth it any more.
What do you guys think about OVH? I believe they stood by Wikileaks in the past. But their servers are listed in the top 10 spamming hosts.
Well, they're not valuable if the ROI is negative.
I just see it as removing a layer of complexity... I don't really care for having PayPal functionality, and not having to worry about the monthly fee paid to you makes it easier on me and you. You get paid quickly, and I don't have to account for another fee. The 50 cents just becomes part of COGS.
ITherm, smart armband thermometer for kids
Does it support GPG yet? I use squirrelmail simply for the vast array of plugins, but the GPG squirrelmail hasn't been updated since 07.
Also, I'm interested to hear what you "other reasons" are. Please share.
Nope; package maintainers said they didn't get notified, and OpenSSL explicitly has no notification mechanism for such things. CF found out because the private entities which found the bug warned them a priori with a request to not disclose it to anyone else. See also: https://news.ycombinator.com/item?id=7549986
Samsung Galaxy S 5 Review | AnandTech
Uh, no. There were once 15,000 ISPs! They were killed off when incumbents flexed their monopoly power. Instead of disrupting telecom, the new ISPs were forced into the old ways of state utility commissions. When the war was over, the incumbents picked up infrastructure for cents on the dollar. The 1996 Telecom Deregulation Act totally failed.
We don't have extra parts, but the service team does and the machines themselves are getting hard to come by. I tried shopping for a computer with more than one PCI slot recently, and spent days just trying to figure out what is in computers from Lenovo, HP and DELL. That is not an important spec to list anymore.

I will do the math with my boss; a duplicate machine might be a good idea while they are still around.
Isn't that supposed to be the ideal use case for Mongo though?
Prototypo, a webapp that offers a new approach to type design
A comparison of scoping rules in Tcl, JavaScript, Perl, C and Python
Show HN: A command line batched domain Heartbleed scanner
Thanks for the earnest comments, I made the site as a joke cause I live in China and you have no clue what the markup on your boards are... But I think you missed the joke...

A. Get your head outta the sand and take a look around, our prices copy existing services just without all the bull.

1. The top header has that info, not sure how you missed it...

2. Yeah, we like it dirty and we don't want your business. Don't put up with it, go somewhere else...

3. Finish the quote, don't select the random bit that proves your point. This is for open source hardware, we WANT to share and propagate. Take our stuff China, please!

4. We don't care. Pay a ton of handling fees or do the environment a favor and go local. We want to drop stuff off to xiao dou (Mr. Little Bean) at espeed in Huaqiangbei and be done with it. Can't be assed to do more at these prices...

Thanks for the compliments on the site. It's amazing what 12 hours of PHP/Javascript/MYSQL coding and a case of Tsing Tao can get you.

:P
NETmundial Executive Stakeholder Committee (EMC) Outcome Document
Weasels.com – A Typical Premium Domain Name Inquiry
"But I have no interest in these pink building toys."

They're not for you, dogg.
Embarcadero’s Acquisition of CA ERwin: Where Do We Go From Here?
Traffic can be both pedestrian and foot based also regular car traffic will impact your deliveries.

I'm pretty sure people downvoting me have no clue about NYC and never you walked through Korea town during rush hour.
> I don't care what Mozilla's CEO thinks, I care what the public thinks he thinks

This is the kind of thinking that leads to "gay propaganda ban" in Russia. Government doesn't care whom you love, it only cares what "children" think about you.

Disliking some group of people is pretty much ok, as long as you manage to keep your behavior civilized.
That's why people are talking about tolerance and not obligatory love towards all other people.
While I commend you for finding a way to communicate to your clients in a way that allows you to not develop for IE8, you're not really being truthful. You can use "HTML5" with IE8 as part of html5shiv.js of course and IE8 doesn't need to be responsive - its a desktop browser. In most cases you can almost certainly deliver an IE8 solution without a lot of extra work.
Thanks, that's a good place to start. Coming up with a number out of nowhere was stressing me out, but if he initiated the discussion I'm sure he has something in mind.
This is completely off topic, but I was thinking about this statement just the other day -- "Don't you think the world would be a little better off if more people spent more time studying math and science?" -- in the context of this abominable new educational policy that we have here in the US called the "Common Core Curriculum".

I don't understand the Common Core well enough to really come up with policy ideas about it, but the gist of the idea is that our children here in America are not as good at Math and Science as other countries, and that we should be very alarmed by that supposed fact. The response has been to cut back on arts, music programs, physical education in order to spend more time "teaching" kids to get better grades on test about Math and Science. I had this thought, and I wonder if it's controversial.

Might it be okay that some kids in other countries are better at math and science than our kids supposedly are here? Is that the only set of skills that America is going to need in the 21st century, to the detriment of pretty much everything else? I don't think so, personally. I think it's more important that kids get a well rounded experience, even if that means lower scores on some tests that couldn't possibly be an accurate measure across global cultures.

I'm sorry, I'd have made this shorter but I didn't have the time.
I think I will start with just pulling it off the network. People like to be able to easily move the data, but it is probably worth making them use thumb drives now.
Charges against Michael Schwern were dropped and not pursued by the DA, but this is not the same as an exoneration. That fact is not a statement on guilt or non guilt. If organizations don't want to be associated with him because of that, they do not have to.

> The Ada Initiative continues to host a page devoted to the charges which have been fully dropped against the man in question.

Wouldn't we expect them to keep their pledge not to work with him up and public? What the charges were factored in to their decision, and those factors should be listed.

> There are courts and a justice system for a purpose, and while they may be imperfect, taking the law and justice into your own hands, publicly, in what is almost always a very, very messy situation, is crossing a line I cannot countenance.

Are you serious? The rates of successful prosecution for domestic violence and rape are laughable, people have a right to protect themselves though other means if that's all they have available (that includes rumors).
Usually, people use dedicated apps to access mails from mobile, connecting directly to the IMAP server. Which is much more mobile-convenient.
Deleting files from a Git repo permanently
OpenSSL.org is affected by the OpenSSL Heartbleed bug
The best part of Gmail was never the interface, it was search, tagging, and spam filtering.
Thanks. That lines up with what I've seen elsewhere too. I think the main thing I was missing was that this is not a sniffing attack, but rather an active attack where you talk to a peer over SSL and basically trick it into sending you some content from its memory.
I like people who focus on the main selling point and who don't try to hide any possible negatives.

This company have very cheap proces but have set expectation for quality low - so when the customer actually gets the boards they're probably going to be pleased.

But this is just my opinion!
I was worried about that too, especially since there was little other information in the email. No matter how things go I'll be sure to finish the transaction before sending the code.
I am not a native English speaker. Could you elaborate a bit, why those domain suffixes are so valuable in English?
This is good timing, as my dad (a SQL novice) is going to be taking a course on SQL soon and references like would really help, any others I should know about?
We have a network of B2B news and information sites for various industries. I think this is probably pretty standard for sites targeting enterprise users at non-IT companies.

It's actually kinda interesting to see the variations between industries like Healthcare vs Construction vs Utilities. If I get time maybe I'll write up a blog post.
These networks need to be better modularized with respect to security. I'm sure it's expensive, but it has to be cheaper than dealing with big security debacles such as Target's recent one.
Edward Snowden: US government spied on human rights workers
As you say, I see SaaS as primarily a B2B product. I have trouble naming successful B2C SaaS products, outside of perhaps Dropbox (although I still think Dropbox is primarily B2B, at least in terms of revenue).

But we probably agree on this: if you charge $5/month, this product is not for you. If you charge $50/month, the fees are negligible.
Swapping out the bump sensors for IR is something that we really want to do, we just have to finalise the manufacturing details.

The robot shown is just a prototype, the shipped product will have at least the functionality we have stated - and probably a lot more.
This is definitely a case where the rule of taking the headline verbatim is annoying - like most of CNN, it seems to communicate very little actual information.
Machine learning resources
was about to say the same thing..
I will never bother myself to worry about the livelihood of someone who was at once the CEO of a large company. Judge him or don't judge him for what he did, but I think his "livelihood" will likely survive this ordeal.
Can someone with more MongoDB experience give me your thoughts on the upgrade difficulty here? Worth doing soon, or waiting for a point release? Does this require a data rebuild/update process (coming from 2.4)?
They're great against a low-tech adversary, but against serious ballistic or (some) cruise missiles, they're just slowly-moving seaborne apartment blocks. Good writeup here:

http://exiledonline.com/the-war-nerd-this-is-how-the-carrier...
Sure!

I would like to see:

- hosted downloads (not my Dropbox)
- hosted checkout pages (not lightbox)
- what the dunning emails look like, and if I can edit them
- the docs for the API
- more information in general (the site is only 1 page, hard to trust)

Those are the big things.
Nombres de los equipos de béisbol de grandes ligas
http://oshpark.com is comparable.

$1 per square inch rounded to some fraction. You get three boards shipped anywhere in the world (see my other post for my thoughts). A 5x5 board is roughly 4 square inches, so would cost you $4 for three or $12 for 9. If it's smaller, you pay less.

Turn around time is around 10 days + shipping from the US so either a blessing or a curse.

Seeed used to be cheaper for massive orders, but now OSH has a medium run order it's about the same.
The OpenSSL heartbleed bug
How we doubled our email sign-up rate by reducing friction
__ methods are private and not meant to be called outside of the class

The @ decorator vs @ MMUL seems pretty syntactically clear though.

@decorator()

def function():

variable @ variable
It's a user interface instead of a semantic interface—you're stuck with clicking around to maintain your site and your hands are tied with your ability to actually change something about it.
A possible solution:

- Block all machines from accessing the web, let them access only the intranet;

- Install a lightweight VM with a browser on every machine and use this to access the Internet (for e.g. you could use a VM with a small Linux distro only for browsing the net).

The second solution is probably a good compromise. This will let you browse the Internet if necessary without compromising the physical machine security.

It should be possible that on the same physical machine to allow external network access for a VM and block the other apps from accessing the Internet. You can probably do it from the firewall or use a separate IP for the VM and block all IPs from your router except the IPs of the VMs.

The VM should be used only for browsing the internet.
How to beat Google analystics?
I am looking for idea to work on it. And I come up with it. So is it possible or even worth to work on this area with hope to beat google analytics(maybe I am dreaming but it's nore for motivation). The idea behind this is to be able to master his data without sending them to google and more.
The first step will be to have a simple tool/framework to build newsletters/campaign and get metrics to analyze and see what we reached (by segmentation, by color .....).
What do you thing about this idea? am I crazy to jump myself on it.
Yes, the "social contract" is a very vague term indeed, & has been applied in bad ways in the past.

Here, I'm applying that there is social give & take & expectations/norms throughout our society. Yes, any social norm/contract/expectation is, by definition, constraining/conservative & thus counter to any progress/disruption.

These are not absolutes, as any difficult moral argument is usually balancing competing, legitimate concerns.

We do have an American social "contract" that is eroding: Things like "If you're born poor, and good in school, study hard, work hard your whole life, stay clean, then you have a great chance of getting out of poverty".