skysight-inc/HackerNews huggingface dataset:
One important part as a provider would be to have a way to collect all the dependencies on which a customer depends on. This helps you priorities your maintenance work if the customer doesn't have any requests (auto-pilot mode). Is is also useful as way to sell: "see all the things you depend on". And finally it lets you take decisions on which project maintainer to poach.
Does this apply even on mobile?

I'm interested in a password manager that works seamlessly on Android.
I would think that's a really hard thing to pin down with numbers. I'm guessing if my wife of 17 years is any indication, it is rather difficult for people to get past a certain point because of the high energy and then anxiety that comes up. But there will always be a core group of friends that will stick through the ups and downs because of how empathic and caring the person is.
I didn't have the issue but I dont think I could ever "understand" such a thing. Sounds like a pretty big oversight.
The department that enforces correct payments. Audits.
Market markets (human, mechanical, hydraulic, electronic) are obligated to trade, but they are not obligated to trade at any particular price. They survive by constantly repricing their best bid/ask. They do that by... wait for it... canceling resting limit orders, and replacing them with orders at different prices.
A service that figures out how to create and deliver healthy (meaning not extremely salty, sugary, etc.), same-day-prepared, vegetarian-friendly meals for $10 USD per day or less. The service would make one or two dishes so that they can be prepared in batch (maybe one non-vegetarian, and one vegetarian), and deliver them at a predetermined time. The current services in this industry tend to cost a lot more than this and/or require you to do preparation yourself (i.e., they supply the ingredients only.) Even better: if you can accept the delivery soon after "cook time", you can get your meal warm, assuming it's not a cold dish to start with.

For people who don't, can't, and won't cook, and realize that much restaurant food isn't focused on trying to balance taste and health, this would be a great service. $200/month, 5 days a week. The logistics part seems feasible based on what's current in the marketplace; the economics are an open question.
Here's what an image from the camera described in that paper looks like: http://i.imgur.com/3z8Uae9.png
It's unclear whether the slowdown in US/EU real GDP growth is (a) dysfunction of capitalism, due to what you described, or (b) a "cooling" effect as global inequality of nations (as it should) mean-reverts. The good news is that global GDP growth is quite high: about 4% per year and accelerating (faster than exponential, for now). Obviously, there are severe sustainability concerns (such as the need to move away from planet-baking carbon fuels) that must be addressed. But, if we can address those environmental constraints, the global picture is actually pretty positive.

Worth investigation, however, is what happened in the U.S. in the 1920s. We got really good at agriculture, quickly (i.e. over the course of a few decades). We did a bad job of distributing the wealth generated by that. Commodity prices plummeted as the 1920s wore on. By 1925, there was an epidemic of rural poverty, but those were boom times for the urban rich, so it wasn't called a "depression". In 1927, the economy grew volatile and by 1928 large companies were starting to sweat. The "official" start of the Great Depression was Oct. 1929, and by 1933, the U.S. economy had imploded and the stock market was down almost 90% from its highs.

In the late 1920s, prevailing conservative thought was that poverty was a sort of "moral medicine", because the suffering washed away sin. (It was the same backward, moralistic thinking as was behind Prohibition.) The Depression proved that it's a cancer that spreads relentlessly. If the farmers get poor, the factory workers selling to farmers get poor, and those who have money become risk-averse and hoard it (causing asset crashes) and over time almost everyone ends up losing.

What happened to agricultural commodities in the 1920s is happening to nearly all human labor now. And that's pretty terrifying.
Same thing would apply to a vulnerability in Apache2 or nginx.
Yes, we have retroreflective road marking elements (meaning elements that try to send light directly back to the source) but they sometimes take a little different form.

Specifically, in California, we have plastic ones closely resembling the picture you linked, which are tarred to the road surface, but they have a corner cube molded plastic retroreflective element (like a bicycle reflector) instead of a spherical glass element. However, some signs still feature large diameter glass beads: http://www.aaroads.com/shields/show.php?image=CA19580103

Also, the road paint itself contains high-index glass spheroids that retroreflect headlights back into the driver's eyes, making the paint glow brighter than it would normally. Cat's eyes everywhere!

Actual cat eyes are also retroreflective due to the tapetum lucidum. http://en.wikipedia.org/wiki/Tapetum_lucidum
Hey everybody, and maybe something in particular for the Berliners: We started a meetup exactly about that "IDEATALKS" - this Thursday we are hosting the next event, feel warmly invited to join at

www.techpeople.eventbrite.com

(use fullofideas for a free ticket)
Start screen aside, Win8 is a faster, leaner Win7. No good reason not to use it if you're committed to the Windows platform.
When you write a contract designed to screw the other party, you run the risk of being discovered.
I recently stumbled on something called "view", a concept implemented in the Hope language. For those not familiar with it, it let you define bijections between 2 different datatypes, so that one may pattern match a piece of data from one datatype with the other datatype constructors, and one of the examples in the paper was precisely that correspondence between peano numbers and usual (unsigned) integers (well, really, it's not quite bijective, given the arch limits on integer representation, but for any purposes we can think of yet, it works). So, the question is: is idris using something like that? Or is there another mechanism? Is it a builtin feature of the language? Do you use the proof system to persuade the language kernel it may translate them back and forth (the "software foundation" book for Coq let the reader build a few proofs about that, though Coq use arbitrary precision numbers iirc))? I'm still quite new on dependent typing, so forgive me if this question is silly or weird somehow.
The problem with road paint is that it's exposed to the sun, elements, salt, freeze/thaw cycles, abrasion, etc. Maybe they are using the cheap stuff where I live because what they tend to do is repaint in the summer and it's pretty much gone by the following spring. Making the road paint more expensive with glow-in-the-dark additives would not seem to help the problem of the paint being worn away entirely because it costs too much to repaint often enough.
Has anyone ever used the thinkpad's tpm for anything under linux? Whenever I looked into it the tpm support seemed shoddy especially on my t41. I have not checked the w500 in a long time.
No, the PS3 problem was that the per-message DSA nonce ("k") was repeated (and thus not random). I'm not sure about the rest of your paragraph; if you're referring to deterministic alternatives to standard DSA, yes, they exist. Again, see Bernstein.

Dual_EC isn't a curve standard, it's a random number generator standard. The NIST P- curves are thought to possibly be backdoored. Dual_EC is all but certainly a backdoored.
I don't think the wealthy necessarily represent political power. I think corporate lobbyists are more to blame than the ultra wealthy as individuals.
This book is not about writing your own crypto libraries, it is about using Go's crypto packages.
Saw this awhile back, related:

http://videos.huffingtonpost.com/tech/software-gives-the-ill...
They start by learning to break other systems. That's not my suggestion; it's from a well-known cryptographer people on HN seem to like a lot.
http://getthinglist.com
It's a neat idea, but by way of honest feedback my eyes started glazing over at "create this agent and that agent", and it became clear I don't want to add this complication to my life.

I think this would be vastly more interesting to many more people if the interface were just a line that says: "Tell me when [text field]" and I type something into the text field like "Tesla announces anything."

That is all I want to know, so why do you make me do a ton of stuff to implement a query? (Or more basically, why do i need to set this up on my own server? Isn't it way better if it is a service that you just run?)
What kind of legitimate uses are there for something like this? This is not a sarcastic question. It seems like an obvious spam magnet, but if people are using it legitimately wouldn't their sources already be providing an API or RSS key?
Total disagreement with your premise. Having experienced a place and a culture, it is perfectly reasonable to gain a sense of the uniquely different cultural attitudes and priorities that are prevalent in a society. Trying to relate such impressions to someone who has not been seeing for ten years with the same eyes, inevitably we choose anecdotal stories to illustrate the broad impression it conveys, not just to say 'this one time i saw something and this is my whole dataset'.
Amen. I started to code a bit in OCaml and it's great.
Same difference. Golang provides cryptographic primitives but few fully-implemented constructions; for instance, if you use Golang's CBC, you have to implement your own padding.

Any Golang program that implements crypto will also need to implement an incomplete and poorly-specified version of NaCl.

(That's true of virtually every other programming language as well.)
If I may ask, would you pay for such a service?
This:

> Perhaps Akamai is not actually running this version in production, but another
'super secure' allocator. In either case they should not be sending out
non-functional, bug ridden patches to the OpenSSL community, while claiming
they protected Akamai against the Heartbleed attack. Andy Ellis, CSO of Akamai,
said on Twitter that the 'secure' allocator was written 13 years ago. I'm
happy to provide the results of my 15 minute security review, since it is so
overdue. (To be fair, I found the issue in minutes, but confirmation took
longer.)

Comes across quite passive aggressive indeed. The tone is otherwise fine, except that paragraph which is just one giant jab at Akamai.

I guess it is true what they say: No good deed goes unpunished. I'm sure Akamai has learned their lesson and will keep all future patches private to avoid public criticism and ridicule. But on the positive side at least we all know how smart Willem is, which I'm sure was the real point anyway.
[In all seriousness] I haven't used antivirus software since the 90s.
U.S. Navy Creates Ship Fuel From Seawater
Say that instead. Arguing that it only works in high humidity environments while using 0% humidity as your basis isn't sound.
This is definitely something I would use. I hate messing with date/time. Timezones, zillions of different date formats, etc. all make dates and times a pain. A slick "Stripe-like" way to handle all of that would be awesome.
None, it's good work.

But the whole episode, and this post in particular, highlights the issue that enough review is never enough. When is the the code secure? When it is written by someone with a good track record? When it gets reviewed and committed by knowledgeable parties? When it's been running for several years without incident? When it passes coverity? When Willem has time to review it?

When I just think about the embedded ssh keys I've got in my few toy systems; if I discovered ssh was broken (and it's happened; look at the Debian bug) I'd be sinking a lot of time figuring out just how to change the keys everywhere. I should have designed for this from the start; lesson learnt. I bet there's lots of admins out there who wish they had better ways to update certs on a moments notice over the past week...
Cat's eyes don't work with snow plows.
I'm a few thousand emails back on python-dev, but:

> Meanwhile, there are some large companies that use 2.7 extensively on Windows (e.g. Enthought, Anaconda) and the thinking goes that somebody can probably be found to produce a Windows installer once in awhile, assuming that Python.org will still host a download.

Note that 2.6 had no installers released beyond 2.6.6 (2.6.9 was the eventual last release), so there's a precedent for source-only releases if nobody does want to provide Windows/OS X installers.
Finally looked at your web site. Hmm. I would tone down the "no need to wash" emphasis and focus on the germ killing properties.

Let's be honest. None of us wash our bedding as often as we ideally think we should. So you could change your emphasis to something like "Wash your bedding as often as you do right now, but have confidence that it is germ free / sterile / insert feel-good word here."

That way you aren't giving people the willies thinking about unwashed sheets.

Also having "Awesome" as one of your main three adjectives might not be optimal. Sure, your product might be awesome. But maybe something more concrete - is it long-lasting, robust, durable? Silky? Breathtakingly smooth? Even the vague "dreamy" is better than awesome because it resonates more with the use of the product.

Also you could do a bit more (but please not to the point of over-the-top hype) with the high tech aspects.
The hardest part is putting out a MVP for the 1040, but allow it to be extensible. I believe that it will be very popular and forks will come in very fast.

At the least, it should allow import of data from other providers ( turbotax, etc ) so that data can be stored for as long as one likes.

A big advantage is to allow amended returns ( example I need to amend my 2009 return ) - One just pulls out the 2009 code base, put in the previous data from turbo tax and amend it.
Even if the PoC patch was perfect and is approved by many of the top security folks out there, would Akamai ever share their perfect custom memory allocator with the upstream community.

edit:

okay, whats' wrong with my statement? If they do have a perfect allocator, wouldn't it be nice to know exactly what they did?
Hmm? This sounds like its describing a hacker ("cracker"), not a cryptographer.

One could know all about buffer overflows, memory layout arcana and whatever, but not actually now much about cryptography, primes, et al.
Very few companies can figure out how to provide proper api's. Unless it's part of their core business, it'll always be lacking.
Soft HSM, meet local privilege escalation exploit. #sadtrombone
If this would be a Kickstarter project right now, I would put a month worth of money on the table. Low salt, low sugar food you can't get anywhere.
What, if anything, is epsilon?
and the base station can _disable_ encryption completely without any warning given to the cellphone user.
I'm not surprised at the junk replies to this.

Java has many many more jobs than there are good developers. The three buzz word frameworks will stick you in smaller projects that will ultimately pay less. Don't get sucked into the hype.

If you want to see big projects where you will be able to accelerate your career, I would definitely be looking towards the enterprise and consultancy space.
If you know what enums are, think of algebraic data types as enums on steroid. You define an enum type as a set of unique values. ADT let you do the same, but let you also parameterize the enum values, and even use the enum type itself as a parameter type (a recursive definition). You can also make several ADTs mutually recursive. As other said, that's very handy to represent usual data structures like lists, trees.
Lawrence Lessig argues (I think persuasively) that lobbying should be classified as a form of corruption. It's not as egregious as directly paying someone off, but in the end the influence of lobbying is pernicious and pervasive.

Highly recommend his book about it: http://en.wikipedia.org/wiki/Republic,_Lost
Yeah. Actually, sarcasm aside, there's nothing wrong about using those languages at all.

The only pain point is Pascal's lack of a nice-sized community (and thus libraries, support for modern systems etc) nowadays.
Thank you. I changed it.
Combine it with a count of fresh search engine hits and I think you've got an excellent service for PR firms and marketing departments.
CME gave high-frequency traders peek, lawsuit claims
Unicode works perfectly fine on 2.x.
A heavy caffeine user, I also have occasional seasonal allergies (a week per quarter?) and rather than take simple Loratadine, I always prefer the versions that include Pseudoephedrine. It noticeably gives me a bit of extra pep to push on through the sniffles. I'm honest with myself that caffeine is a drug, and that my occasional consumption of Psuedoephedrine is a step away from being low-grade meth user.

So would I use something with cognitive benefits at concentrations (or consumption rates) that exhibit no harmful effects? I already do.
Absolutely explosive if proven true, should be interesting to follow this story.
Probably too vague a title to have a chance here. I thought it was (kind of) relevant and funny.

Background: http://radar.spacebar.org/f/a/weblog/comment/1/1107
We don't have them in Canada because they prevent us from using snow plows on the road.
Wikipedia says different:

"Cat's eyes are particularly valuable in fog and are largely resistant to damage from snow ploughs."

http://en.wikipedia.org/wiki/Cat%27s_eye_(road)

As does the Reflecting Roadstud's manufacturer's website:

"The final component part of the “Catseye” is the cast iron base. Manufactured from Grey Iron, the cast iron base affords excellent protection to the rubber insert and has been specifically designed to withstand the demands of heavy traffic and effects of snow-ploughing."

http://www.percyshawcatseyes.com/products/the-cats-eyes-road...
Probably by working on and modifying existing code as part of a larger community working with existing experts, in sort of a crypto-apprenticeship.
That's a really neat idea I'd pay for. Not sure about the sustainability of the model though.
If this code was running on the Akamai networks for years, why did they have a copy laying around that didn't call mprotect?

Given the above problems I wonder how Akamai manages to run this in production.

How could you misread a two paragraph email so badly. Here, let me shorten it up for you:

This patch is a _variant_ of what we've been using to help
protect customer keys for a decade.

This should really be considered more of a proof of
concept than something that you want to put directly into
production. Let me restate that: do not just take this
patch and put it into production without careful review.

So to answer your question: this version was never running in production.. and it the initial patch didn't call mprotect because they stripped it out from their version when creating the POC.
openssl was due for a diet.
You are correct: I meant 10x the size of xv6 and 5 times that of PolarSSL. I used wc, so comments and blanks count. xv6 implements a multiuser operating system. This is not an easy undertaking by any means, and far more complex than TLS in terms of conditions to satisfy.

As for the rest of your comment, I have used OpenBSD on the desktop. I have never found the lack of a webserver running, or anything but sshd to be a hindrance to making a machine on which with a browser I can read papers, bank, listen to music, and program. sshd is of course attackable by anyone: good luck getting in though. Other OS's have followed OpenBSD, as do most hardening guides.

One of the features OpenSSL has is support for ciphers that long ago have been disabled, together with out-of-date TLS versions such as SSLv2(!). TLS is a specification, with multiple implementations. The specification is of poor quality, the protocol worse, but OpenSSL is in a class by itself, including implementations of national ciphers no one uses.

While Frankencerts were an issue, there was no realistic way to turn the two incorrect "OKAY" and the one "NOT OKAY" result of PolarSSL into an attack. You would need a CA to issue a cert with a start time in the future. It also does not take an enormous amount of code to fix this issue.
Well, I have been a adsense publisher for over 5 years now and they are pretty clear about their commission rates they give us 68% for content ads - https://support.google.com/adsense/answer/180195?hl=en (earlier it was 70% i think )

and to me it's not unfair as even if someone was to make such a OS system , he still has to manage server cost/support/advertiser acquisition/marketing cost etc. & so wont be able to pay as good as adsense also the ads initially wont be that diverse & so ads might not be in context or even blank spaces , kind of chicken and egg problem !
Magic Numbers for Startups
It goes both ways. While Django's structure and submodules are very good, at times this can get in the way. Flask is more of a ground-up approach; you lose some of the benefits of tight integration but gain flexibility. But, without seeing ways to organize things well in the first place, I could see a newcomer to Flask having trouble assembling the pieces they need appropriately.
Thanks for the tips. I'm working on getting a better landing page together. I'll look into formalizing that bulk discount too.
It takes 500 extra lines of C to write a secure channel abstraction with a server and client on top of NaCl. This is the curvecp implementation.
In July 2012, it was announced that active development on Fortress would cease after a brief winding-down period, citing complications with using Fortress's type system on existing virtual machines.

http://en.wikipedia.org/wiki/Fortress_(programming_language)

https://blogs.oracle.com/projectfortress/

https://java.net/downloads/projectfortress/reference.pdf

I'm just putting this here as Bret Victor's link no longer works.
This is very disappointing.

Given how often 0-day vulnerabilities are discovered in the Java ecosystem I can't see how this is a good choice for a critical piece of infrastructure.

We love using puppet, but one big issue we have is it's lack of consistency, a big part of that is the fact that theres Puppet, Ruby, ERB syntax and ideologies and now you also have thrown Java in the mix?!

When we saw this news several people in our team have already started looking at alternatives.
Wow I've never heard of this but I can definitely see it in myself. I'm pretty much useless on days when I forget my medicine, but usually more productive than others then I do take it.