skysight-inc/HackerNews huggingface dataset:
The author has several articles about ATS (http://bluishcoder.co.nz/tags/ats/) and from what I've read, it outputs C code that is proven (for the parts that are in ATS) to be correct. There's a bit more detail in "Safer handling of C memory in ATS" (http://bluishcoder.co.nz/2012/08/30/safer-handling-of-c-memo...) and the end of the article contains some generated C code.
Actually, even "modern" C++ is a step up from plain C. That being said, I am really looking forward for Rust.
Some HP Storage appliances (SAN) like the MSA P2000 G3 is also vulnerable.

Everything is suspect. We are a HP shop and I wonder if the switches are affected too, but we are too stupid to have them configured with SSL.

APC UPS, HVAC, etc.

This all goes to show: make sure that you have a special management network separate from the rest of your infrastructure that is only accessible for sysadmins, through a trusted console server.
I'd guess "general" refers to the trees themselves (labels, arity) and not the platform.
I don't believe I have seen anyone, now or previously, saying anything like "Oh, and talk about business acumen -- look at the way Jobs soaked his old buddy Wozniak out of four and a half grand that one time!"

There's a vast difference between what you call "celebrating lies", and celebrating the life and work of a man who, while every bit as human as anyone else and with feet of clay to match, was nevertheless possessed of the sort of visionary genius which comes along perhaps half a dozen times in a generation. Certainly Steve Jobs could be, and was, a real revolving bastard from time to time. But so can everyone; people are complicated and they don't always behave in ways which others regard as preferable, sensible, or nice. If you're going to require sainthood as a prerequisite for honoring the accomplishments of a historical figure, I suppose that's your prerogative, but I suspect you'll find it a lonely stance to take, and I think it's strange you should utter it in the same breath as a word like "enlightened". Have you heard the one about the blind men and the elephant?
Hi Khangtoh,

That's essentially correct. We do a bit of magic to stream the smallest amount of image data possible (sending mostly-transparent frames if pixel data hasn't changed, etc.). Put simply though: yes, you can think of it as a simulator being streamed to an HTML canvas. But it's taken a long while to get right!
maybe they don't have the money to buy them because it's been all spent for mining gear?
Ask HN: How do you manage your passwords?
With all this heartbleed noise, it now seems like the right time to finally get my passwords in order. So I was wondering what solution do you guys use manage your passwords, SSH keys and misc credentials ?
No, you're not :-). A moped or bicycle is perfect and can be a lot cheaper...
Annapurna travel guide
There will always be a compromise between cost, performance, features, usability and security.

'Safe' programming languages will improve security, presumably at the cost of usability through decreased performance. A bit like how a Ferrari is faster than a Volvo, but not as safe.

Performance has been a major driver in the choices made so far, I'm sure that the heartbleed affair will move the needle towards the 'security' end of the spectrum but I doubt it will move enough to drop C as the main work horse of systems software coding.

Reducing the complexity of the protocols used would seem to me to be a better place to reduce the exposed attack surface. No matter what the language used if you make a system extremely complex bugs are going to be more numerous and due to the interactions between the various parts much harder to detect.
You have to know the "phase" at which to measure the quibit, which you would need to communicate through other means. Here's some more info from a class a took a couple years ago. http://www-inst.eecs.berkeley.edu/~cs191/sp12/notes/chap1&2....
I've been building hybrid apps (HTML/CSS/Javascript) for quite some time now. It's getting better and better, and there are quite a few resources available.

Just follow these simple steps:

- Get Apache Cordova (https://cordova.apache.org/)

- Try Ionic Framework (http://ionicframework.com/)

- Try Ratchet (http://goratchet.com/)

- jQuery Mobile, obviously (http://jquerymobile.com/)

- If you need more help, try Codiqa (https://codiqa.com/)

- Try Trigger.io (http://trigger.io)

Cordova makes it super simple to deploy to app stores, and it's awesome. I make mobile apps all the time. Though not as good as native, it certainly has been improving, especially in the recent years.
Awesome - I've just posted a gig for a bit of junk removal. That's a tough market - most folks won't quote you a price without seeing the goods.
keepass/keepassx with the database syncd through the non-controversial syncing service du jour.
Can that really help? I mean, they could purchase a board outside of China and reverse engineer it there...
That's cool — it nests!

http://jasomill.at/nested_safari.png
I agree that basic income can and should replace a large number of incredibly inefficient welfare programs that we currently have. This, along with the fact that a lot of regulations that are meant to protect workers will become rather unnecessary -- who cares about unions when you can afford to quit? -- is probably what gives basic income a curiously bipartisan appeal. The left can support it because it's welfare on steroids. The right can support it because (they think) it will lead to fewer regulations.

But I couldn't care less about the romanticized ideal of civic culture that this dude pretends existed in America before the welfare state appeared. Especially since his version of civil culture involves neighborhood groups taking charge of nearly everything the government used to do. After all, the government cut them a check. Why can't they just put out their own fires in their spare time?

And why does he think it's okay to deny basic income to everyone under 21, just to make sure that the policy does not influence people's reproductive choices? His far-right libertarian ideology of "minimize the government at all costs" seeps into and not-so-subtly distorts his vision of basic income. Reduction of government size, if any, should be a side effect of basic income, not its very purpose.
Isn't Al Gore on a few boards?

But I get it.

He's okay because he agrees with Your Politics.

And Condi is bad because she agrees with Not Your Politics.
Cool, thanks for the link. Didn't know this was possible.
I sort of find it a little sad that very talented people have this god like image of someone like Steve. Without them he would have been nothing, but still he gets all the glory and fear, and they get little respect.
I think you should read the article again. The language in question isn't higher level really it just has compile time type checking, which has no overhead.
"Nice Rack"
Readings in Databases by Reynold Xin
It is solved - store it somewhere, or use it as a fuel for other reactors.

And the currently used alternatives (coal) produces way more waste (whole mountains of slightly radioactive, and slightly toxic dust leftovers from coal extraction build up near coal mines).
I've used craigslist 4-5 times in the last 8 years (I don't drive, and I move a lot) - and two things stand out for me from my use of them:

#1 - I'm continually amazed at how flakey the drivers/moving services are - they all advertise multiple times a week that they have moving services available, but you have to call about a half dozen of them and leave messages before you eventually get one that will get back to you and commit. You would think they would at least get back to you quickly, and then refer the work to someone else.

#2 - The quality of service that you get varies quite a bit, and doesn't seem to correlate with what you pay as much as you would like - I've paid anywhere from $90 to $150 for moving and sometimes I get two, highly qualified movers, and an enormous truck capable of moving an entire house ($60/hour, 2 hour minimum). Sometimes you get a yahoo with a big uncovered pickup truck ($90/hour).

If there was a service that could solve those two pain points - eliminate the hassle of trying to track down the service, and making sure the person actually showed up when they said the would, and giving me some sense of what I would be getting (Big Truck? how big? Are the movers going to help me move things outside? Do they bring blankets for things like glass desks?) - then I'd be interested in using it.
Would your organisation publish this story about itself?

I think this failed project is the high ups falling for the gee whizzery. In massive IT projects, pro-active management is essential. Coders need the discipline to feedback proper progress. Meaningful milestones with incremental useful output so piecemeal value is added, not just an all or nothing completion target. You need management in place that can read and understand the code to make sure the team isn't drifting off target on some dream, watching out for you inner platform or other non-productive fantasies.
Social Security, Treasury target taxpayers for their parents’ decades-old debts
There's quite a few people into it over on electro-music.com.
While the story is from the BBC, all the anti-D&D sources they cite seem to be in the US. So it looks like this moral panic was more of a US phenomenon.
I'm mostly impressed with Imogen's (and all the others involved) approach:

"It's really exciting to see what people might do with hacking them. The software is going to be open source, so is the hardware."
Ask HN: How do you stay in touch with your team?
I work for a fairly decent-sized company, and the inter-team-communication tools like Hipchat all seem to really stink security-wise. What does the greater HN world use? XMPP? IRC?

I know Microsoft uses their own internal thing (as does Google), but for a company that's spread over 2+ offices, are there any good communication services out there?
The part of the cult of personality I find most fascinating is the attributions of Apple's successes to Jobs personally, but Apple's failures were attributed to the relevant teams, who 'let Jobs down'.
South West Kerry Night Sky Time-lapse, Stars over Ireland
A preview of a small selection of time-lapse sequences of the stunning, coastal night sky over South West Kerry on Ireland's Wild Atlantic Way in the Kerry International Dark Sky Reserve.
Earlier discussion (by about 30 minutes): https://news.ycombinator.com/item?id=7571223

(bbc.co.uk vs bbc.com in the URL)
I remember this - we had to play D&D in secret because of several of our friend's parents.

It's interesting to have seen, first hand, part of our long unbroken chain of freaking out, from rock and roll to instagram; this giant perennial wave of overreaction that's done nothing but persecute innocents and make the world a less beautiful, exploratory, and lively place.

Is there an example of a popular fashion that's been of actual concern? The only example I can think of off-hand is the dancing plague of 1518, and even that was probably worth the casualities.

It's amazing to me that a mode of thinking that has been so consistently incorrect for so long seems to be dominant, whereas the "let kids do whatever it is they're into this week" is considered a fringe hippie thing.
I really don't get why you would invest in mining equipment. If your "mining business model is based on future bitcoin price", it makes a lot more sense to just buy some [BTC] and hold on to them ?

(Edited for clarity)
The Failure of For-Profit Couchsurfing
No sweat. I'm actually one of the developers on the iOS version of the app and was just sort of surprised to see it at the top of the article!
Are there new forms of "legitimate" target.

Like are there algorithms that predict if XYZ could be a legitimate target in 15 yrs and if so, targeting starts now.

If you run the agency and you have this technology & its cheap and easy to execute, would you use this or would you wait for a target to become valuable before putting them on a list.

I say the above cause there is dearth of imagination which leads people to be very complacent on this topic.
>A big problem with mining is that your investment decision is inelastic (not sure if that is the right term).

I think illiquid is the term.
Did Al Gore knowingly lie to force the country into disastrous and ruinous wars?

Did Al Gore approve warrantless wiretaps, illegal detainment of citizens and non-citizens and the use of torture by agents of the American Government?

In her role as National Security Advisor Ms. Rice did both of those things.

Now you might refuse to acknowledge that she is a war criminal, but that earns you the same contempt as someone who denies Climate Change; which incidentally Mr. Gore did his level best to warn us about.

Now I have to tell you that I find your politics reprehensible, your willful denial of reality as disgusting as that of a heroin addict. And think that you and your fellow travelers in the "Conservative" movement are exemplary of the craven habit of bending at the knee for that most unamerican of practices; the unearned aristocracy of inherited wealth.

You disgust me. You have no thoughts of your own, but merely parrot slogans handed to you by your betters.
Here's the image, for anyone curious: http://c0la.s3.amazonaws.com/nice_cup.jpg
Ask HN: Would you do a usability evaluation before user testing?
In theory, would you be willing to pay for an online service, where you could easily order a customised usability research report of your website?

You would get a brief expert usability evaluation, based on research based guidelines and international standards.

Afterwards you could do usability testing with real users and get more meaningful feedback from them, since you already fixed the obvious problems.
Why Criteo's 2nd acquisition is huge: 1) It's French 2) It's search
>'Safe' programming languages will improve security, presumably at the cost of usability through decreased performance. A bit like how a Ferrari is faster than a Volvo, but not as safe.

This is fundamentally untrue. Safeness of the kind described in the article does not come at the cost of performance -- all type checks, invariant conditions and general formal proofs of correctness are determined at compile time. The produced code is to be indistinguishable from a correctly written, efficient C program. You are allowed to play as much as you like with direct memory accesses and use all the dirty tricks you like as longs as you can prove that the resulting program is formally correct.

What could be argued is that price you pay for all this is the difficulty of writing such programs. But definitely not their performance.
Ruby on Rails 作者David Heinemeier Hanssonが語るオンラインでお金を生み出すためのたった１つの方法
Comparison of TLS implementations
It's more than manias and panics (though they played a large part). The legal and institutional framework surrounding it is still in constant flux, and its future value will depend heavily upon that.

Right now the institutional news all looks negative -- e.g. the failure of mt gox and the unfavorable tax treatment in Japan (and now the US).
That's still not my point. At the time of starting openssl I don't believe that ATS was around. In any case my point is that back then C lang was the best choice for performance and still is revered as the "fastest" as `nearly` all other languages are written on top of it either directly or indirectly. In any case I would love to see someone tell all of the openssl community to just drop C and switch to a different language.
> You're talking about a 10000% return on investment.
> There is no investment in human history that works like that.

Sure there is. Just none that is not also extremely likely to fail.

The obvious example would be a lottery ticket.
That's true, but the solution is not to stop talking. The solution is to finish the conversation. The world needs to come to consensus about what Bitcoin is and how its value moves, so that a price can be set and we can move on. The way to get to that point faster is to help the effort to answer those questions.
I can't read the article but it's possibly because there is a LOT of EoL network gear still out there that won't be getting updated software.
> I now write stock market simulations and come up with trading strategies for a living, , so I guess it all worked out okay?

OMG, parents should have intervened!
Yep, that's it. :)
"fractional" isn't a thing and Mt. Gox was not engaged in fractional reserve banking.
Unfortunately, the claim that "Most mining at the moment is being done at a loss." is unsubstantiated and highly debatable. It's nearly impossible to establish the efficiency and USD-production-cost of mining technology being operated in secret - say, coincidentally nearby a 14nm Intel fab.
I am totally facing the same issue which you faced about working only during weekends. Your idea of working everyday seems nice i will try giving it a go :)

Nice post!
And also Congratulations! :)
Hi delackner,

The API documentation is pretty dense! Sorry about that. To see the latency, check out: http://app.io/showcase. That's our technology in action.

We are running iOS in the cloud and streaming back graphics to the client. To get started, users upload a compiled simulator build of their app (http://docs.app.io/uploading/). It takes a few minutes. We automatically generate everything else from there.
The literal meaning of 'lynch mob' is a group of people out to hang an individual. The colloquial meaning of 'lynch mob' is a group of people out to destroy an individual, either socially, professionally, financially; in some way causing a significant downfall.

The shrill mob attacking Eich could be characterised as a lynch mob - they were out for his downfall. It's abundantly clear, given that there has been very little in the way of pro-Mozilla followup to counter the extremely negative points made against them before Eich stepped down. The mob was specifically out for Eich's downfall, not for strengthening Mozilla against unpleasant ethics.

That you demand that 'lynch mob' only be referred to as a mob about to hang an individual is definitely hyperbole on your part. If your significant other says "Sorry about the mess in the kitchen, it's a bit of a disaster area", do you chide them because it's nothing of the sort - no property damage, no maimed or dead people, where are the aid personnel, so on and so forth? If someone describes their new sweater as "itchy as Hell", do you berate them because Hell is not depicted as being an itchy place, referring to the relevant religious dogma about the actualities of Hell?

No, of course not. It's a turn of phrase, not a literal statement, just like 'lynch mob' above. Suggesting that the OP meant in any way a literal lynch mob is your hyperbole.
Interactive Intel Intrinsics Guide
> Are these mostly edge-of-network devices, or are these big switches that tons of traffic run through?

IOS routers and ASA firewalls are on the "not affected" list. Those are what you'd find in most SMBs.

IOS-XR and NX-OS are affected, however. This software runs on the BFRs like you'd see in major ISPs and large networks.

> Does being vulnerable to Heartbleed necessarily mean traffic through these boxes is vulnerable?

I'm speculating but based on what I know about Cisco gear, I'm gonna have to say no. At most, you'd get the same stuff you'd get from a server: the private keys, login credentials, copies of the configuration, etc. -- anything that's handled by the control plane of the routers, basically. The frames/packets passing through them are handled by ASICs and are never copied to the memory used by the CPU, AIUI.

Assuming best practices are followed, a random attacker would never be able to establish a connection (e.g. to 443/TCP) anyways, which would mitigate the risk. In a properly managed network, access to the router itself is highly restricted by ACLs and such.
And before him there was Jack Chick [1].

1: http://www.chick.com/READING/TRACTS/0046/0046_01.ASP
I do not understand why people keep pushing unsafe code when computers keep getting faster and we have more and more headroom (cpu, memory, bandwidth). There is no excuse to keep running unprovable crypto.
I don't buy this at all. If she founded company she would have equity and some sort of agreement(s)/documentation supporting her story.

If she can't product any documentation then she's out-of-luck.

Lesson to all of us: get things in writing.
>They equated the probability-driven game mechanics to gambling, or at least believed that it led to a slippery slope.

The next step in that argument being "Well, no more maths for me then!" She half jests.

I've often wondered whether extremely basic statistical ability could be enhanced by having kids play those sorts of games. Dice and cards and so on.
For this, one could introduce a "quick freeze" scheme: providers don't store anything (or, if needed for billing etc., delete after 7 days).

Only if police knocks up and tells you "we might need the data from IP address x.y.z.a in the foreseeable future", you store the requested data on secure material.

Then, police goes to court and gets a formal warrant for the data, which the provider then needs to provide the data to the police.
ELI7 XCode in 28 Steps: My Daughter's First iOS XCode Project From Scratch
If you are speaking about execution speed, you got the idea wrong. From a quote in the article:

> If you use the high level typing stuff coding is a lot more work and requires more thinking, [...] (but) you can even hope for better performance than C by elision of run time checks otherwise considered mandatory, due to proof of correctness from the type system. Expect over 50% of your code to be such proofs in critical software and probably 90% of your brain power to go into constructing them rather than just implementing the algorithm. It's a paradigm shift.

The idea is to formally prove that the code is not doing unexpected things. The process is relatively simple to understand:

First you define the assumptions you make about the program, its execution environment, and the acceptable/expected results of your program. This is known as "formal specification" of the program. It is a critical part. If your specification is wrong, then the whole approach breaks down. However, this part should be much smaller than your whole codebase, and hence you can be extra careful on it.

Next, using this specification, you write proofs showing that the code can not do anything unintended (such as accessing a buffer out of its valid range). The compiler goes through this proofs and checks that everything is provably correct (according to the specification). Then it can generate code without runtime checks that you would otherwise probably implement, because it is sure that certain things cannot happen. As a result, the code may end up being actually faster.

Although a bit involved, the idea should be pretty intuitive. It is exactly what you are doing in your mind when programming. The main differences are:

1. We humans are pretty comfortable working with inexact and/or incomplete specifications. Then some undefined behavior happens, and our programs bug out. For instance, it is very easy for us to think about the division operator as something that always yields a value, ignoring the "division by zero" edge case. Computers are not, and force you to specify what exactly should happen when you encounter such edge cases.

2. We are also pretty bad at exhaustively checking every possibility, whereas computers excel at it. With the help of human-written proofs, obviously (otherwise verifying a program would involve checking every possible input for it, which is obviously intractable).

TL;DR: The tradeoff here is between development and compilation speed versus correctness, which implies improved security and execution speed.
1Password gets 50% discount following the Heartbleed security flaw discovery
Hasn't this story been told on HN many times?

https://hn.algolia.com/?q=Wozniak+jobs#!/all/forever/0/Wozni...

Maybe we can find a better way rather than create a throwaway account and rehashing the same thread?