skysight-inc/HackerNews huggingface dataset:
This is basically what VxWorks (real-time OS) started doing in their 6.x series - the MMU is active and all memory addresses are virtual, but no two processes get access to the same virtual address range. That way you can debug with virtual addresses turned on and see page faults instead of whatever hilarity ensues from overwriting the operating system itself, then turn the MMU off and stop taking the execution speed hit of translating addresses. It turns out that almost everyone just leaves memory protection on all the time anyway, since duh, it's the only sane thing to do.

Fun fact, the most reliable indicator that you have this kind of setup is whether the Unix emulation layer (if present) offers fork() - if only one process can access a given address then you obviously can't create a copy of a process that uses pointers.
Sorry if this is a stupid question (I don't fully understand SASOS), but would an OS that does this make ROP chain exploitation easier?
CIA is not under DoS. It is an independent executive agency that reports directly to the President.
You know, because there can never be a backdoor or unknown security flaw in OpenWRT, PFSense or some other modern firmware.
Seems like once you rent and move enough beds, linens, tables, chairs, etc you'd have cut into your profit margin significantly.
No, that's a problem with firms where the voting power is distributed among people whose only shared interest is making money.

The corporate form is pretty much tangential to this, relevant only in that that form is often attractive to widely held (in terms of equity distribution) firms regardless of distribution of authority, and the more widely distributed authority is (which often roughly parallels equity distribution), the more likely that the only shared interest (or at least, the most salient shared interest) is financial profit. But, conceptually, you can get the same issue with big partnerships, LLCs, etc. -- or even small (in number of partners/members) ones and sole proprietorships, where that's all the partners/members/owners care about.
Yeah, pretty much.

There's an interesting observation about audience selection in here somewhere. Your typical hacker tends towards progressive politics and attitudes, and would be likely to condemn price gouging. "Hacker News," though, is associated with Y-Combinator and disproportionately attracts the Valley-startup/venture-capital/exit-strategy subset of hackers, who tend a lot more towards Objectivist-libertarian profit-obsession, so you get what you see here.
This bookmarklet works for me:

javascript:void(open('http://filippo.io/Heartbleed/#'+document.location.hostname))
Lightroom released on iPad
Comcast reportedly considering Wi-Fi mobile phone service
Spark for Data Analysis: A Case Study
I upvoted your comment for the first two paragraphs, but I disagree with the third. The hospitality industry is big, they have lobbyists, and I would be surprised if they are not lobbying against AirBnB in some way. A quick Google search indicates that they are.
If what's needed is speed, neither Java nor C# are optimal choices.

True, but if you're just trying to get some numerical speed out of some specific routines in a larger .NET application then having access to SSE like this could still be very helpful. Calling into native libraries from .NET isn't necessarily a performant option because of the cost of marshaling data back and forth between the managed and unmanaged memory spaces.

The end result can be pretty significant; from my own experience I'm usually pretty hard-pressed to come up with a C++ implementation that can beat the C# code it intends to replace outside of a microbenchmark. If the C# code now has the option of banging on SSE then I'm not sure it'll even be worth trying to trot out C++.
Modify Windows 8 for people with special needs
Almost everyone thinks Windows 8 particularly challenging, but there are people who, moreover, still face special physical challenges, to support the area of ​​ease of access Control Panel offers several changes...
You can try going nocturnal. I did this for about 6 months. Go to sleep at 10am and wake up about 6pm. I did this because I had night school then coding till morning. I can't say whether it was good or bad, but it worked out with my situation.
Ever wonder how much money has been spent paying you to support IE?
Cosa ha fatto mai il Senato a Renzi?
I didn't mean to imply collusion as I have no evidence of that. (As an aside, just because it's illegal doesn't mean it's not occuring.) Not sure if my terms are the correct here, but in my mind I was thinking collective != collaborative - in that it's possible to act collectively by exchanging public market information without crossing the line of colluding.
What is great for large-sized apps?
It depends. For initial work, AA is a quick hack to get something out there fast. It's akin to django admin. Anything more complicated than batch spreadsheet CRUD will benefit from non-AA, custom admin UIs. One thing that we've encountered is we'd like Disqus style comments, but AA's are flat without an ability to delete them. Yeah we had to use a whole raft of crap to get AA working on 4.1rc including pinning sprockets and sass-rails version. Overall, AA has its place but there's never been, nor will there ever be, a perfect tool for all seasons.
In the case of Mongo, it's the opposite - the upgrades are needed badly enough that it's worth the risk of a major number release.
"D lang" is also valid, google does the rest!
Is anyone else seeing a perpetual "loading" string where the example code is supposed to be?
The pinterest layout is only really good for pinterest (or very similar content). This forces my eyes all over the place when I just want to read down the list.
During emergencies, many brick-and-mortar stores do not raise prices, and will eat the cost to avoid making people upset. People hold grudges. You may gain in the short term, but are likely to lose in the long term.
random question: I have an old EVE account with a few hudred mil ISK and the ability to fly interdictors, HACs, and black ops ships.

Is that worth anything anymore?
Capturing the "intense" battle of this kind of games VS the actual work, Haruhi style:

http://www.youtube.com/watch?v=sfyZwKkokec

Jump to 11 how the game look actually VS 13 to how we wish it look ;)
It certainly would lead to a lot of risk if there wasn't a consensus roadmap; once company A announced 10x, company B might try to one-up them with 30x then fail, etc.
Interesting video for sure.
And if he's only breaking even, isn't that okay?

If he gains net $0 from it, and spends net $0, he'll (eventually) have a land asset.

Illiquid and potentially risky, but still. Getting a mortgage paid for you is a nice deal.
Both Mozilla and Eich publicly claim it was a true resignation and not a constructive dismissal: https://blog.mozilla.org/blog/2014/04/05/faq-on-ceo-resignat... https://brendaneich.com/2014/04/the-next-mission/
Data Visualization and D3.js Newsletter – Issue 73
Yes. I've been using this tool: http://filippo.io/Heartbleed/

It was published in a comment in one of the other heartbleed threads.
Different kind of tagging.

salem is referring to how addresses are compared in the cache: http://en.wikipedia.org/wiki/CPU_cache#Virtual_tags_and_vhin...

you are referring to ASIDs which are the mechanism by which different address spaces can share space in the TLB at the same time: http://www.helenos.org/doc/design/html.chunked/mm.html#id253...
Donate a million (or ten) and apply again.. :)
I wonder whether this was a commercial, cultural or geo-political decision. Does the CCP want to neutralise reactionary activity in Eve Online by controlling the server? Is there some political flavour to any of these alliances?
In large fleet battles like this individual players are doing very little. There's a bit of clicking, a bit of chatting about orders, and a lot of waiting. However, there are people in charge of those people who are doing much more interesting things like coordinating battleship sniper groups, logistics, supply chain harrying raids and so on.
Am I correct when I think of this as a curve/surface fitting tool that tries to automatically find a low complexity equation together with parameters that fits some provided data?
Part of the motivation why we adopted a lib/hacks/ convention

Extracted here:

https://github.com/steakknife/rails41rc_plus_hacks_and_threa...
Are you using ffmpeg? Gstreamer? We are working on a project to put nocturnal streaming robots in a museum in London and we've been trying out various toolchains to get low-latency live streams to clients, each with lots of pros and cons. Would be good to talk if you could. Ping us on twitter @theworkers
Security by obscurity is also, arguably, a good thing by your logic.

Seeing as someone didn't get it... Security by diversity is secure in the same way something is secure by obscurity. In other words, its not, its just harder to find the insecurity.
Top schools are always looking for "leaders" (by which they mostly mean people who go on to be prominently successful in business and/or politics).

Corrected: kids whose parents know how to play the game and have the resources to make sure their kids win it.

For all the complaints people make about the SAT, that's actually the most meritocratic component of the admissions process by far. The "leadership" stuff might give middle-class clueless a warm/fuzzy feeling, but it's designed specifically to keep them out.

Speigel certainly fits this mold

He's a product, not a leader. Someone saw him and said, "he seems like a douchebag". Right now, douchebags are in style in the VC-funded/spider-pooping circuit. If you're looking to produce someone and sell him to your VC friends in order to sway the herd, douchebags are the least risky choice right now.

far more than a math prodigy who'd be more likely to wind up an anonymous quant in some financial firm.

IMO medalists have the talent to do much more. The Spiegels, on the other hand, are useless unless lifted/"produced". They create nothing, but what they are told to make. Of course, some very smart people get lazy and complacent later in life-- it happens to all sorts of people for all kinds of reasons-- but there's no way to forecast that for teenagers.
Wow. I like how you vaulted straight over the defensible middle-ground "hotels charging more during big events isn't actually the same thing as price-gouging" argument and went straight to defending incontrovertible, life-threatening, criminal-in-34-states price-gouging.

> the windfall is only the consequence of making sure that those precious supplies are only consumed by those that absolutely need it.

No. It's it's making sure they're only consumed by those with the most money.
It should not. The exploit cannot access any more libraries or addresses compared to traditional layout.

One bonus not mentioned in the article is context switches no longer need to flush the TLB (the MMU's cache which is indexed by virtual address). Thus you don't lose the cache entries for shared libraries or kernel space.
So, a study by a former corporate Chief Marketing Officer (CMO) published in an outlet marketed to CMOs (cmo.com), consisting of survey completed mostly by CMOs, found that giving broader authority to CMOs is good for firms.

So, marketers marketing to marketers by marketing the value of marketers.
Why Startup Investing Will Blow Up
Spring rails reloader gem. Solved.
Flaw Found in Key Method for Protecting Data on the Internet
What was your issue? I've contemplated consolidating all of my domains/certs with them and have no issues so far but maybe I'm missing something?
Cloudflare also works (you don't have enable routing through cloudflare). They have an api for updating you IP too.
Jsonb: "Wildcard" query
Love to see that you guys are supporting Android from the start. Too many cool Kickstarter projects are iPhone first or iPhone only.
I'm still not seeing the real benefits.

What, specifically, is bad/wrong about the traditional way of doing process isolation, and what does this approach bring to the table ?
Whenever someone says "...but why don't we just implement a security feature which denies access to clients that try to do X?" where X is something extremely vague like "steal money" that is really hard to translate into an algorithm that could conceivably be implemented, I reply by noting that unfortunately their idea won't work since malware authors have such a low rate of RFC 3514 adoption.
I'm getting a certificate warning on Chrome 33.0.1750.152. Is there a security corollary to Muphry's law?[1]

[1] - http://en.wikipedia.org/wiki/Muphry's_law
You did the right thing. I know very little about exploitation- I have to pay someone else to learn about things like this and fix it for me. This makes the time taken to do that much shorter for me and others like me. So thank you thank you thank you! Do you have a "donate" button somewhere?
I seriously wonder what else is hidden in the mess called OpenSSL. And especially how much of the bugs are known by the NSA.

Something like Heartbleed would definitely make a live-injection attack feasible!
Looking at a site with like w3schools browser stats ( http://www.w3schools.com/browsers/browsers_stats.asp ), you would assume mobile is small. If you have a consumer facing mass market web site, those numbers will look totally different. Search advertising gives you a glass window to this. Mobile is dominating the desktop, not by 4% as w3schools reports, but by 50%+ and growing.

The interesting story here, to me, is native app verse website. Which wins?
The key distinction here is that native English speakers speak with whatever dialect that they grow up with. On the other hand, most ESL speakers try to learn a so-called "Prestige" dialect, like RP or General American. Thus, most fluent native speakers have a more prestigious accent and way of writing due to this, than those who speak English as a first language.
I feel lucky to only be owed $649,915.
Some of the numbers on there are horrendous!
Unless you really need to be checking network deliver that much, mailers have long been testable, getting the last email sent from ActionMailer::Base.deliveries.last
Ok that makes sense but then it's not 57% either for all of them since some people would end up getting a shot at the lottery twice.
The depth of the problem – MH370 Search Visualized
Are they literally collecting nothing now, not even enough to link IP addresses with subscriber identities? I love privacy as much as everyone else, but real crimes do happen online, and I wonder about the consequences.
There has been a seemingly endless number of articles the last few years about how "affordable" top tier schools can be for kids coming from lower/middle income families.

This is the natural progression from that.
UWSGI high performance websocket server for Python
The Pitfalls of Bias in A/B Testing
Hi. This looks great. I'm new to rails and this looks like it will be fun to mess around with tomorrow and learn what the commons gems etc are. Seriously - Thanks very much for making this. Anything I should know as a noob or shall I just dive in and have a play around?
Reinvent Shipping – Work at EasyPost
And doesn't this mean also that many students are getting many acceptances and turning most of them down?

That, of course, should lead to higher acceptance rates again so that colleges don't end up with an empty incoming class.
The cert is self-signed, that's why Chrome gives the warning.
As far as I know both Firefox and Chrome link against libnss, not openssl, so they would not be vulnerable to this bug.

More generally, it's my understanding that either end of a TLS connection can send a heartbeat request, so clients using openssl would be vulnerable (assuming they use an affected version, with heartbeat support).
Join our small engineering team at Homejoy – Senior Software Engineer 
Homejoy is a fast growing technology platform revolutionizing the client and service provider experience. We use our platform to provide our clients with on-demand, high quality home services, starting with residential cleaning, at a fraction of the cost of our competitors. In our first year we expanded to more than 30 cities throughout the US and Canada - covering over 100m households. We've delivered double-digit revenue growth every single month, and every new market's growth tracks faster than our first benchmark market.

We're also focused on making homes happier. This includes happy clients and enabling the independent cleaning professionals on our platform the tools to grow their business. This also includes volunteer time and projects by our employees. The Homejoy Foundation takes this one step further through grants for the communities we serve.

We are backed by some of Silicon Valley's best investors — including Google Ventures, Redpoint Ventures, Y Combinator, Andreessen Horowitz, Max Levchin, Paul Buchheit and others.

Job Description:

Cool Things you Get to Do:

* Join a very small engineering team & contribute to scaling Homejoy to millions of users
* Build simple & intuitive web products using Python
* Make decisions on design
* Create matching algorithms to connect our clients with cleaning professionals
* Build systems and code to make operational changes in real-time

Sample projects include:

* We re-assign jobs to cleaning professionals every night in order to maximize efficiency of the schedule.
* Build a phone system that allows clients and cleaning professionals to connect without revealing personal information and without getting our support team involved.

Requirements:

* 2+ years of Python development experience. You’ll contribute to our Python code base on your first day of work
* Built significant web applications in Python and can show us what you shipped and how you made critical product decisions
* Obviously we use Python, but if you’re an experienced web developer in another language we’d still like to talk to you
* Bachelors in CS, or equivalent experience
* Startup DNA a must

Bonus Points:

* Contributed to an open source software project; show us your Github account!
* Experienced a Homejoy cleaning and already know how we work as a client
Could this be retrofitted onto any mainstream OS? I guess the answer is "no" for Unix, because of fork(). But how about Windows?
How would immutability help with performance? (I'm not trying to ask a leading question, just curious) Value types are obviously nice for better cache performance (less pointer chasing, more linear data) but I generally associate immutability with better correctness but worse performance (not much worse, but worse).

edit: On topic, this is really, really cool. I was playing around with SIMD intrinsics in C++ a few days ago (and realized that the compiler was in most cases generating equal or better code with the auto-vectorizer than me using intrinsics) so I have kind of a new-found interest in the topic.
Hogwash. It's perfectly reasonable to make something that would be compatible. It's not even that hard.

There's just no money in doing so.

People used VB6 because it was easy and cheap. They're not going to suddenly turn around and start spending 7 figure sums of money. They'll just hobble along until they don't make a computer that can run VB6 and Windows XP any longer.
Which is an interesting thought because the common perception (from my chair) is exactly the opposite. A matter of skewed perception, etc, etc.
Firefox gives the same warning.
It's also actively driven downward by the colleges themselves—no value in accepting more people!
I don't understand any of this. Every atlassian product I have ever used has been terrible. All their software is full of performance issues, uncountable UI bugs, and every time we upgrade it's impossible to tell whether we lost any data in the process and several times we have lost data. Their continuous integration server, Bamboo, is pretty to look at but unusable except for the lightest of use cases. The message broker between master and slave constantly goes down, publishing artifacts is hit or miss based on various network conditions that are mostly out of my hands because we're in AWS and I think they use chunked encoding to transfer the artifacts.

Honestly, if they're worth $3.3 billion then the software industry is doomed. Maybe that's a bit over the top but the quality of the products based on what I read doesn't add up. How can you do so much R&D and still have a product that's so unstable and can't handle simple network hiccups?
I would assume that the write assumed that "online collaboration tools for businesses" is a single market, and ostensibly both companies can be said to sell products in that space, but yes, I agree that it's less than apt.
Angularstrap left a sour taste in my mouth when their Bootstrap 3 support took so long.

In that respect using bootstrap3 + backbone is a better option.
put the text up in a gist, to get around the dodgy cert.

https://gist.github.com/anonymous/10204608
Yes, well, I expect most browsers would warn on self-signed SSL certs.
I'm going to assume "monkeys" is a poor translation from another language. Maybe it's supposed to say "OpenSSL is written by fuzzy hackers". It's impossible to tell without accepting a self-signed certificate I have no means of validating.

The irony is delicious, much like a banana.
DARPA-Funded Researchers Help You Learn To Hack A Car For A Tenth The Price
Interesting and complex question, that.

Larger apps end up being more SOA than monolithic, I suppose. Rails can usually play a part in these, but in my experience it's usually a win to start fragmenting an app into services once it gets beyond a certain size and complexity.
I wonder if this was better or worse for spies than them using the normal Twitter.
Dropwell – clientside torrent and magnet link generator (our first side-project)
Snowden calls for international deal on data surveillance
Neat. The problem with templates in general they lose an ability to hack on and recreate them because they depend on code generation and manual tweaks that have already been done (and lost). As such, I'm refactoring https://github.com/steakknife/rails41rc_plus_hacks_and_threa... into generators that will add the right things to a bare Rails app. So if you need omniauth + devise + cancan but not X, it's a `rails g` away. Rails has an amazing app generator DSL built-in.
Unity maybe, but honestly no.
"In the case of Michael Hastings, what evidence is available publicly is consistent with a car cyber attack. And the problem with that is you can't prove it."

- Richard Clark, former Counter-Terrorism Czar

While evidence is insufficient to draw conclusions in that specific case, the fact that it is so plausible should be extremely worrying. (Hi, NSA spiders.)
Phone Battery charges in 30 seconds
Also Mailcatcher, which runs a local SMTP server with a nice email-client-style web UI: http://mailcatcher.me
This reminds of another trick on the C64 to multiply two 8 Bit numbers
a*b = [ ((a+b)/2)^2 - ((a-b)/2)^2 ]

more or less:
one 8 bit additon, one 8 bit subtraction, two table lookups for the squares and one 16 bit subtraction.
European 'Data Retention Directive' Struck Down by the Court of Justice
I have used them for years under their free model. I signed up for 2 years instantly after receiving an email regarding this. In my mind, they have earned it: A great service and free for all these years. I think this is a great way to move from free to paid services.
It's javascript that loads the Gist into the page. You may have NoScript or similar that prevents the loader to fetch the code.
The first code is the one from the Wikipedia page (fast inverse square root) and the second is this one:
https://gist.github.com/soravux/9673839
Yes very true.

Number of undergrad applied for Fall 1998: 18,888

Number of undergrad applied for Fall 2012: 37,000

Did it become harder to get into Stanford in 14 years? Yes it's probably harder than before. But not twice as hard as the numbers would suggest.

(Edit: why the down votes? I'm confused. I didn't say anything that is factually incorrect. If you disagree, speak up)