skysight-inc/HackerNews huggingface dataset:
Trust me, this doesn't cover all their issues. Don't get me wrong, we love our AWS stack, but we've had all sorts of weird stuff happen over the years, from zombie ELBs hitting the wrong hosts to invisible SGs... sometimes we see from twitter that others are seeing the same things, but AWS don't ever confirm or deny anything, they just stall then tell you when it's fixed. I guess its support in terms of something to give to your PHB, but when something goes wrong within AWS, it's a very black box - which isn't surprising.
Voorjaarsdetox met aardbeien | Gezond Detoxen
Maybe MITRE should assign proper names to serious CVEs, kind of like hurricanes?
so does sketchfab and it even works with 7z or rar archives
I'm not sure how big a part the name and branding, per se, played in the wide reaction to this vulnerability. I would argue that people reacted because they knew it was incredibly serious, impacting almost every site out there. Further a lot of the reaction was by security and infrastructure people and organizations who themselves were impacted and vulnerable, despite every best practice.

In contrast to OpenSSL, the YAML vulnerability was just a very minor blip of importance.
Now that they're no longer end-user upgradable, you have to buy the top-spec to ensure you don't run out of capability as it gets older. I got the same model you did - with AppleCare warranty and sales tax, it was $3200. The most I've ever spent on a computer. Ouchies.

Check with your accountant to see if you can deduct the cost. Or if you can do a business lease on one.
So here is my 2cents. Having built a startup whose target market was other startups, I would say avoid it. Unless you're building a utility platform like say github or attlassian, who are not startup specific, selling to startups sucks.

Figure out how to make this a product any enterprise middle manager can buy and pay $200+/month. Startups won't pay the same rates that even mid-size companies would.

The volume you need of customers to make it a viable business at $50/month or less is ridiculous, and the number of startups limited.

Also they have high turnover, so your LTV of your customers will get halved potentially vs enterprise customers.
Happy Birthday Started.in: Stats from a year of profiling startups in Seattle
GHC 7.8.1 released
i thought it was going to be in under 30 lines
I think now would be great time to reconsider the OpenBSD ipsec debacle in this kind of new light. Correct me if I'm wrong, but doesn't ssh use openssl libraries and the openbsd guys were heavily involved in openssl's development? A lot of people think the closed audit that found a minor unintentional bug was the last word on this subject, but the orginal guy who made the claim posted in 2012 further explaining how the FBI had made this attempt.

Can't wait to find out SSH is comprimised too!
But you did. What the communication accomplished was getting others who otherwise might not have heard about or cared enough to do something to take measures in fixing it.

That's an enormous win.
My favorite part about the coworking movement in Japan -- and I don't get much exposure to it since it hasn't arrived in force in Ogaki yet -- is that it provides a community and social reinforcement which says "Just because you're not a salaryman doesn't mean you're a homeless vagabond!" to participants.

Japanese young folks, in particular, can really use that message. It is not a particularly popular message in Japan, which is largely organized for the benefit of salarymen and supports a few variants like "stay-at-home mothers" and "retired people" but institutionally is almost entirely unaware that there are exotic options like "freelancing."

I generally work out of cafes in Ogaki when not working from my kitchen table, and have been told three times by well-meaning cafe owners "Don't worry kiddo! If you hang in there I'm sure one of these days you'll find a job! Just keep sending those emails!"
IE6 Is Older Than Your Grandpa
Wasn't there some sort of issue where they were mining user data without our consent? Many of us were having to send emails directly to Quora support requesting that our accounts be deleted.

http://en.wikipedia.org/wiki/Quora#Privacy_concerns
Quora raises war chest of 80 million
OR stated another way... "the average length of one minute of one degree of arc on a great circle".
Anything that makes passwords harder to do right without simultaneously blocking some attack worth caring about is bad for security. Two of the biggest problems in security are that it's hard to do things the right way and that people just don't understand it.

Whether you want to call it a "security flaw" is not obviously an important question.
"I know this is bad... but what exactly is broken... oh."

I think this is a case where the message could have been more concise.
Oh nice. I'll switch over to CanCanCan.
You could even make a constant for 1, 3, and 16 separately, then still add them together in the code. It may seem excessive for such a small case, but in my experience it really helps readability to have kWhateverFieldSize instead of 1.
There's not always a perfect solution, gotta work with what you're given.

If you absolutely can't wait for the updated status message then the solution I gave was the only solution.

If the price of the revocation (which my issuer doesn't charge) is too high for your business then your only option is to wait.
Ask HN: Share your tough FPGA design to improve design tools?
We're a small team of FPGA and software developers applying statistics and machine learning to solve FPGA timing closure and place-n-route problems. After experimenting with synthesis and place-n-route tools, we found that a lot more mileage can be gotten out of current tools.

We'd like to ask the community for help to test these ideas.

Unlike random seed sweeps, our compilation builds are focused and use probability to guide FPGA designs towards desired results. The algorithm learns from past builds and improves itself based on device, design and tool characteristics. Lessons learned are then saved for reference.

To try this out, we've built a software plugin for major FPGA tools, and are making an API so that every FPGA designer can tap a shared database of "best practices" and apply his/her own algorithm to solve problems.

If you have a hard, annoying timing/area/power problem, please share the design with us so that we can improve. (NDAs most welcome)

In return, we'll do our best to improve your design's performance and solve its problems. If you like, we'll gladly give you a license once the tool is ready and be your friend for life!

To share a design, simply:

1) zip your project files;

2) add them into the upload box at http://www.plunify.com/callfordesign/cfd.php

3) tell us what tool version it needs;

4) (if you like) tell us who you are so we can share the results and tool when they're ready.

or just send me a URL (email address in my profile)

After testing designs from github, opencores, etc. we learned some requirements that make a design more "real".

They are:

- above 50% utilization;

- has a real application (logic wasn't randomly generated to fill the FPGA);

- can compile successfully

Please comment, question and most of all, consider sharing a design so we can make a difference!
Yes entirely on name, visual identity and first three paragraphs. More like this for serious vulns, please.

Also, what a great name.

The remaining of the page is a loud reminder of the gap between the sec and dev communities, at least as practiced in lolstartupland. Or at least between offence and defence. The second paragraph tells you the sky is falling, and then it takes them 13 questions to tell you which openssl versions are vulnerable.

(Also, I wish the behind the scenes action was less messy; why not coordinate with Debian and RedHat patches? Why did Cloudflare get advance notice?)
Blogger is notorious for "reimplementing the web experience". Just try opening a Blogger page on an iOS device. You'll get an empty page, then spinning gears, then after a while the page will finally land. Then you'll have a page which won't scroll properly. Because someone just had to reimplement scrolling. Better.

Let's take the horrible Onswipe themes as another example. They not only break functionality and make the page slower, but also break zooming in and show buttons that pretend to be iOS buttons, but aren't.

I could rant about this for hours. It's all the same basic problem: people trying to redefine/hijack basic browsing functionality. I interpret this as extreme hubris ("I know how to design this better!") or arrogance ("this is how you will view my site, period!").
What's next for Square?
I just worry next time when a major incident occurs the author will spend more time working on the design than just announcing the issue.
There are poor and downtrodden in about every country of this world. Yet most residents will more readily question how a neighboring country handles this situation than of their own.

I do not know of any country which does space launches can claim there is no poverty, or need, within their borders.
Which is worse?

a) Leaving your password unchanged on a site because it is still vulnerable.

b) Changing your password on a site that is still vulnerable.
Osaka, hisashiburi desu!

Thanks for sharing. I really couldn't tell if this was in Osaka until I saw the pictures of takoyaki being shared. Yup. Only in Osaka!

My favorite co-working space in Japan is Super-Deluxe [1] coworking in the daytime, bar / event space at night. Wish there were more funky spaces like that in the world!

[1] https://www.super-deluxe.com/2014/04/
Complaining about the coverage of heartbleed (if grandparent is indeed complaining and not just remarking) is sort of like complaining that the NYT had excessive coverage of Pearl Harbor in their issue on December 8th, 1941.
sqlite does not seem less mission critical to me, and definitely relied on funding:

"D. Richard Hipp designed SQLite in the spring of 2000 while working for General Dynamics on contract with the United States Navy.[7] Hipp was designing software used on board guided missile destroyers" -- http://en.wikipedia.org/wiki/Sqlite#History
The announcement isn't for technical folks. If you want to know the in depth details then you likely have no issue referring to bugs as numbers, or reading up on the technical details of the exploit. When you announce something you give the information in a form that the public can understand.

For example if I announce a new processor, I'll announce its clock speed, number of cores. If I feel like getting in depth cache levels, and bus speed. A technical person will still have a million questions. But my announcement isn't for them, its for the lowest common denominator of people who care. Often times who have no clue of every technical aspect. Only the most simplistic understanding of the topic, if any at all.
I'm not on a crusade or something, but they were not for me.

Do better than I did, give them little money and take your time before you expect them to be the right company.

1: Just replied in a different thread, incident is fresh: https://news.ycombinator.com/item?id=7557887
What I learned from creating algorithmic March Madness brackets
I'm Julia, the founder of Zidisha. I'd be happy to respond to questions and comments here.
"We find that Understudy is much more natural than Skype for collaboration (as opposed to for idle chatting). The whiteboard canvas lets you gesture and make visual references, and you can attach PDFs or images."

This is a false analogy. Skype isn't limited to idle chatting and you can also attach PDFs or images into a skype chat. And you can also screen share on Skype so any paint program would double as a whiteboard.

I suspect the use case for Understudy is much better served with Understudy than Skype, but the way the comparison is presented on the site doesn't really help, and may be interpreted as completely disingenuous.
Although one hidden layer suffices theoretically, most of the cutting-edge work involves multilayer networks. Perhaps paradoxically, those become more "auditable" from what I've heard. (I've spoken to people with real-world experience of applying ANNs to unsolved problems, but I am not one.) What I've heard is that, with one layer, you get too much overloading (i.e. different stuff ending up at the same hidden node) to understand what it is doing, but that deeper networks are more legible (with appropriate visualization tools).

UAT says that a solution exists, but it doesn't put a limit on the number of nodes required, so it would have you doing an optimization in a space that is not just large, but of arbitrary finite dimension. It can be pretty nonconstructive (in the sense of proving "there exists" without showing how to find something) insofar as it's often non-trivial to get convergence to a working solution in reasonable time.

As for how sigmoids compose, imagine how bell-shaped curves would compose, just as you can make a painting out of bell-shaped "points" if allowed arbitrary precision/steepness. Now, the difference of two sigmoids can be bell-shaped, e.g.
http://www.wolframalpha.com/input/?i=plot+y+%3D+1%2F%281%2Be... . I don't know how much this means in practice, but it establishes the possibility.
The purpose of the Law was to keep his Covenant separate and in line until Christ came to fulfill (you might see that word in your link) the Law's function. Galatians 5:14 (referencing Matthew 22:38 no doubt): "For the whole law is fulfilled in one word: 'You shall love your neighbor as yourself.'"

Additionally, translation difficulties make a lot of sexual concepts tricky to relate to contemporary cultural English (since our modern conceptualization of sex is thankfully quite a bit different from the ancient world).

And anyway this is all moot, because unless you subscribe to Replacement theology (which I'm not familiar with, so do not have an opinion on), very few Christians are part of Israel.

EDIT: Scratch that last paragraph: now that I think about it, Peter's vision in Acts 10 rendered dietary uncleanness and circumcision---part of the Law---null and void even though he was a Jew and so part of Israel. So maybe even Jewish Christians aren't under the Law? I'm not sure, TBH.
Prototypo: Streamlining font creation
I’m talking to you, Blogger.

Is this the same Blogger that requires JavaScript to view plain text? Or maybe I'm getting it confused with blogspot, I can never keep them all straight. In any case, I don't think it's a coincidence . . .
From Wikipedia:
"The nautical mile is a unit of length that is approximately one minute of arc measured along any meridian."
Yes, it's called NoScript.
At the moment, more trying to make things work well at least _somewhere_. :-)

Would love to do Android, though.
With HealBe, Indiegogo Fails The Crowd
Open source for everyone
Their communication is not impressive. I work with AWS daily and I've been aware of issues LONG before they publicly announce anything on their status pages.
Does linux sshd have this bug ?
This is how much tech consultants make per hour now.
Either its incompetence

Incompetence on the part of the website companies that didn't pay the money to hire people to make sure that a piece of their critical infrastructure was up to the task? Yes, I agree.

(I don't really believe that, BTW. Shit happens.)
The nautical mile is the length of a minute of arc along a great circle on the surface of Earth. I think the 14.4m figure is wrong; that should be 15.4m, which is the distance covered in 30 seconds by a vessel going at 1 nautical mile per hour.
Google+ appears to do the same thing with C-PgUp and C-PgDown; if I had wanted those keys to stop working properly, I would have used some ass-backwards browser like IE. If I've got a Google+ post open and I'm scrolling brisking through tabs, it's like hitting a brick wall.
Hah you should come back. It's still just as tedious and micro-managing intensive as ever. There are supposedly a lot of Chinese players but they are on the other side of the galaxy and I have yet to venture so far (about 16k).
Because Cloudflare is possibly the biggest and most vulnerable target due to the enormous number of websites and businesses relying on it. I would not be surprised if at least FB and Twitter also had early access.

It was clear from the beginning that as soon as the details became public, a race would begin for the script-kiddy-friendliest tool to own sites/users. And the most likely targets of script kiddies should be warned in advance.
Maybe they could start naming them like they name hurricanes in addition to the CVE number.
This is what happens when you pee in the pool
> These are complex to make robust, but they are not hard concepts.

Yes, yes, I didn't quantify my statement with "for production use".

Your sentence I quoted above was exactly my point: they aren't necessarily hard (or at least they don't seem hard), but they are very, very difficult to get right (robust). Getting systems like these to work well in practical production use is more than 80% of the effort.

I wasn't saying that no one should learn how a garbage collector works by implementing one. My point was that no one should implement their own garbage collector for a production system unless they already became an expert in the field of garbage collectors by implementing them for the last 10 years or so. Same goes for memory allocators. If someone thinks these are simple systems, it means they don't know what they don't know.
Still doesn't answer "why." More specifically, why is it more advantageous to measure it this way versus some other way? Why do airplanes measure their speed/distance in knots? Why not cars, trucks, runners, and physicists?
Django CMS 3.0 released
Using that logic, Republicans clearly support gay marriage for seeking the approval of young adults, who overwhelmingly support gay rights.
Sadly Apple no longer makes laptops with 17-inch screens, which is a deal breaker for me.
If he's on a Mac, Arq is a great solution.

http://www.haystacksoftware.com/arq/
Exactly. Except they could have used Springloader or something as a shorthand for it (rather than Spring) and it wouldn't have been as much of an issue.

It reminds me of when Wordpress gave one of their milestone releases the code-name Django. They actually changed it to "Rheinhardt" after the initial release because of the confusion it was causing.

In this case it's even worse. Giving a component of a web framework the same name as a different, in a sense competing, framework is just plain silly.
Easiest and Safest way of Using and Accepting Bitcoin
They don't say that. They say that the strongest growth is coming from larger screens.
I'm impressed by how many people are working on the side. It's not unusual to see 5, 10 people coming in around 6, 7 pm to work on their ventures or open sourced projects. I never got to ask, but I assume they have other day jobs or duties to fulfill.
In theory, one could expand this standard to allow for arbitrary mass-hack information.
One of the April Fool's RFCs this year seems to have considered this issue, roughly:
http://www.rfc-editor.org/rfc/rfc7169.txt
Thanks for sharing your anecdote!

In fact, ISRO's Moon mission Chandrayaan-1 ended prematurely due to overheating of star sensor and power supply unit (inadequate thermal protection!). They underestimated the amount of radiation from the Sun and that reflected by the Moon, at an orbit of 100km from the Moon[1].

For MOM, ISRO has "hardened" their satellite bus with better thermal protection, larger solar panels, redundant subsystems, redundant fuel lines, FDIR system etc.[2] Hoping for the best :)

[1]http://www.brighthub.com/science/space/articles/48921.aspx

[2]http://www.isro.gov.in/pslv-c25/pdf/pslv-c25-brochure.pdf ("Major Challenges" section)
Thank you! Watsi was the first nonprofit at Y Combinator, and the way they have combined the best of Silicon Valley technology expertise with a charitable mission is an inspiration for all of us. Its founder, Chase, has also been incredibly generous in offering advice and help to the other YC nonprofits.
It's just a convenient way to define a unit of length. Look up the original definition of the metre and you'll see that it's basically the same except for some constants.
Am I the only one that suspects Quora's future is more likely to be similar to an About.com (to be sold off for $300m in the future when a great business fails to materialize) than a Wikipedia? It seems like they latched on to the Q&A space originally when it was hot, and are now pivoting because competing with Answers.com et al. has a lot less of a runway than they previously expected.
So I think the 'problem' with Jira is that it's the SAP of todo lists. We used to use it for non-tech teams in our org to manage their tasks, tech team or organise sprints (and somehow coordinate that with designers), and as well as for issue and bug tracking.

In the end we just scrapped it all and went with Trello. Yes, it's 'less powerful', but we've found that you don't really need much more. For all the features that Trello 'lacks', it makes up for in speed, simplicity and ease of use.
Beyond Bitcoin: Crypto-Ownership Companies Hope You're Ready
The negativity is because it's not open source, and HN is against anything that isn't open source.
Why is this interesting? Is there some novel technique used here?
The quality of the site its hosted on certainly isn't great.
Get acquainted with AWS OpsWorks + Tips And Tricks
Seems low.
Who are the UKFast girls and what is their purpose?
Biggest ever hole? Really? Am I the only one that remembers Yahoo placing passwords in the URL of unencrypted pages? I remember having to erase the URL line when people were around for fear of leaking my password.
I can't disagree with this post enough. Security exploitations shouldn't be about marketing. Security exploits should be handled first and then communicated to the public after the fact. The way Heartbleed was handled lead to a media firestorm. Other than Codenomic, who else benefitted from this?

> Marketing Helps Accomplish Legitimate Goals

Are you kidding me? The only goal of a security issue should be fixing it and getting everyone else to update to the fix. Heartbleed will be remembered forever because of the BS marketing.

OpenSSL isn't a startup, it's a security library that is used by over half of the internet.
Improving genomic analysis pipelines with Docker
...WHAT?! Did they use <form method="get"> for their login forms?
I also really dislike their model of making you sign in to see more than one answer. Annoying your potential users is a bad policy.
Well maybe his patch really wasn't in line with how it needed to be. I've always hated openssl but I'm not sure this is a valid case.
2014 Small Business Marketing Trends
I didn't follow them for a while; but that's curious: what happened in the middle of 2013?

https://www.dropbox.com/s/w68v2r2a3xq4c6c/%D0%A1%D0%BA%D1%80...
http://www.backblaze.com/
JavaScript compiles to native code.
What you can do is lower the surface area of vulnerability. Low level byte wrangling is kept in a small subset of generic classes and functions. Application logic then only uses the safe interfaces.
Seevl Releases Music Meta-Data API
Just a couple of weeks ago I got for free a Pentium IV PC with 514MB of RAM and Windows XP.

I changed the cmos battery, the AGP card and did a clean XP reinstall in an SSD drive. The computer is blazing fast. Any newer version of Windows would make the computer slow as shit.

Here in developing countries, we people tend to use our stuff for a LONG time. You see 30yr old cars running around; 20yr old washing machines, which have been re-re-re-re-patched. Buying a new computer just because of some magical limit date, just doesn't cut it. Is it unsafe? maybe, but why throw something away when it is 100% usable!.
It looks like many considered it so didn't it?
The depth of the problem in locating MH-370
Oh, great. Then in a few years we can have minor security issues given names, too. Like how winter storms this past winter were called "Polar Vortexes." This world needs less media sensationalism, not more.