skysight-inc/HackerNews huggingface dataset:
Can I check if my Linux SSL is affected, without relying on the version number?
Great feedback, thank you.
Working on the fix already..
This is not a TLS stack.
Moore's law "translates" to transistor count. Any other interpretation is your own. I couldn't care less about clock frequency. I care about operations per second, and these are following the numbers I referenced.

See: http://preshing.com/20120208/a-look-back-at-single-threaded-...
Zero Day Vulnerability on OpenSSL: Allows Attackers To Read Memory
Privacy Protections to NSA Phone Surveillance
Who is Hiring? (April 2011)
I don't know what the gp's skills are, but assuming he's not a computer security professional then the 'other people should do this' club is exactly the club he should be in. Would you trust his audit of the code if he wasn't heavily experienced? it's the same case as "don't roll your own crypto".
http://www.haskell.org/haskellwiki/Calling_Haskell_from_C
Thanks, I can look for a CVE myself ;)

My point is that having a proper security page is a good practice and I really appreciate it as user.
I have reversed the blog articles - I think it makes more sense now.

As for the red button - what colors do you suggest?

And the pricing is coming soon. Essentially, 1 hypervisor is free of charger, every other for $10 surcharge. I'll add that info on the website shortly.

Thanks again.
Air Canada mobile case study: part 2
Being FOSS doesn't have to mean relying on volunteers. Linux is mostly written by paid developers; why isn't OpenSSL, considering its reach in the commercial world?
Sexism and Programming
LHCb confirms existence of exotic hadrons
Tougher for bees in summer than spring
SIMPLE NEW SCHOOL WEEK SCHEDULE APP
Shades is a schedule and task organizer which allows you to store everything you need to keep in your mind into one place.

It features:

- Color coded days
- Optional multiple weeks
- Shortcut words to note tasks as fast as possible

With Shades you can create your schedule quickly and start organizing your school life.

iTunes link:
https://itunes.apple.com/tr/app/shades-schedule-task-organizer/id830557703?mt=8

I am just coding for 1 year and I would like to know how you view my new app.
Please be so kind to leave a comment.

Thank you
http://api.rapidshare.com/cgi-bin/rsapi.cgi?sub=getaccountde...

accountid=46048788
firstname=mandeep
lastname=sihag
servertime=1397038309
addtime=1359871506
username=heavenlybeast
directstart=1
country=IN
mailflags=n
language=en
jsconfig=
email=heavenlybeast@live.com
curfiles=36
curspace=1213591844
rapids=0
billeduntil=0
nortuntil=0
maxspacegb=10
additionalspacegb=0
maxdaytrafficmb=100
additionaldaytrafficmb=0
traffictoday=20511350
accounttype=0
valid=1
payabo=0
promocode=0
promotype=0
promovaliduntil=0
maxfilesize=300000000
The TV tells us that we have millions of college-educated people who are eager and engaged but still can't find a sustainable job.

Do high-school dropouts really have a chance in such a competition if they need gamification to become re-engaged?
rapidbleed! search rapidshare for "enc"

http://api.rapidshare.com/cgi-bin/rsapi.cgi?sub=getaccountde....

accountid=46048788 firstname=mandeep lastname=sihag servertime=1397038309 addtime=1359871506 username=heavenlybeast directstart=1 country=IN mailflags=n language=en jsconfig= email=heavenlybeast@live.com curfiles=36 curspace=1213591844 rapids=0 billeduntil=0 nortuntil=0 maxspacegb=10 additionalspacegb=0 maxdaytrafficmb=100 additionaldaytrafficmb=0 traffictoday=20511350 accounttype=0 valid=1 payabo=0 promocode=0 promotype=0 promovaliduntil=0 maxfilesize=300000000
I had some problems expressing what bothers me clearly and edited the comment heavily, perhaps it makes more sense now. You're right it is not that surprising, but it's still disappointing that even the most rudimentary best practices are not adopted. Have a look at sqllite for comparison, also an open source project, also in C, certainly less mission critical, and what a difference:

https://github.com/smparkes/sqlite/tree/master/test

https://github.com/smparkes/sqlite/blob/master/src/rowset.c
These aren't necessarily two extremes - he's not implying that he's not saving for requirement and taking a vacation, just that he's taking a vacation.

He could very well still be saving considerable amounts of money for retirement.
This reminds me of the feud between Cobden-Sanderson and Walker over the Doves font that was used by Kelmscott Press, founded by William Morris. Cobden-Sanderson committed "typocide" in order to prevent others from using this font.

http://www.economist.com/news/christmas-specials/21591793-le...

http://7thsealblog.wordpress.com/2011/09/10/reviving-the-dov...
I would guess that any interesting SIMD hardware would expose shuffles in one form or another since they're so powerful. I would even consider defining "interesting SIMD hardware" as one that exposes shuffles. (Example of the power of shuffles: http://software.intel.com/en-us/articles/using-simd-technolo... which uses shuffles to make super-fast 4x4 matrix multiplies (very common for games).)

Prior art:

- LLVM's shufflevector intrinsic http://llvm.org/docs/LangRef.html#shufflevector-instruction (not meant for human consumption, but is an example of a multi-architecture backend with SIMD shuffle support)

- OpenCL's shuffle https://www.khronos.org/registry/cl/sdk/1.1/docs/man/xhtml/s... (Also note the `.s0123` "swizzle" syntax there.)
Bwa ha ha ha!
Why can't timing be handled external to the scrambling or descrambling operations? Look at the time, do the crypto, then check the time and sleep as necessary so that this particular operation takes about as much time as the worse-case. Something like:

cryptofunc x = do
begintime <- gettime
result <- purecryptofunc x
endtime <- gettime
sleep (worstcase - (endtime - begintime))
return result
It could be. Only a percentage of the documents have been analysed so far.
It looks like the server is slightly misconfigured, it isn't serving the required intermediate certificate[1].

Desktop browsers are smart enough to find the intermediate certificate and then verify the chain, but technically I don't think this is part of the spec.

[1] https://www.ssllabs.com/ssltest/analyze.html?d=blog.afoolish...
I like how he blindly assumes that there was a "system time", or that there was a way to asynchronously poll for keyboard input. At least on the Apple II I grew up with, timekeeping required third-party hardware, and the only way to get user-input without writing assembly was INPUT, which paused the program until the user typed something and hit Return.
OpenSSL was derived from SSLeay. Was SSLeay already that bad?
A fine, curated list.

As with most meta-topical lists, there is virtually
no profit in browsing through it. Time may be wasted
a-plenty, though.

Bring a question about technology X with you, go straight
to section X and then consult with the search engine of
your choice (or a hacker friend, idealy) which book to
actually read.

Hint: some of those have wikipedia-pages, like
https://en.wikipedia.org/wiki/Higher-Order_Perl
and others hide the books behind an email
signup front
(one is a strong signal for quality, the other, perhaps,
not so much).
Consider the following: some languages don't have null. When you need nullable what you really want is an Option/Maybe type. No null pointer exceptions, ever! It just won't compile until you fix the bug.
http://privatekeycheck.com/test/
In Google (search) you can write `cache:` plus the URL and it shows you a static version (regardless if JS is disabled).
https://dns.he.net/ is pretty good ( run by Hurricane Electric )
Agreed. Harper is that most frightening conservative (for liberals), an arch-conservative who recognizes how far his values are from the centre AND can create and execute a strategy for implementing his vision bit-by-bit, piece-by-piece, so that most folks don't appreciate how radical is the gradual change.

Thems of us with memories and a willingness to look forward and back see a very scary voyage to the right.
Do you sponsor visa for international candidate ??
Can't you just check if heartbeat is enabled and poll what version of library is used? If no, could you check by setting the payload size lower than the payload? That way you know the site is vulnerable without receiving anything you shouldn't have received.
Hey Zuckerberg You’re late (2012)
I think the treshold is about 40 comments before it gets pushed down on the frontpage.
get to know about fashion clothing for college you can visit our store

http://www.shopnineteen.com
The main reason for poor windows support is that I didn't own a copy of windows until two months ago. There is a windows fork of ag, but it doesn't compile on *nix: https://github.com/kjk/the_silver_searcher

That said, pt is pretty cool. If that's what works for you, keep using it.
Can you tell me more? Is rekeying a common option for most registrars?
Snowdon might not have known every implementation detail.
What does that have to do with self-signed certificates in general rather than an issue with your particular browser?
Check if sites were previously vulnerable to Heartbleed
PSD to HTML Special Opportunities for Startups and Early Stage Companies
http://www.shopnineteen.com
Another irrelevant xkcd comment...
What would evidence of conspiracy look like? Do we need comments in the code, "this is an NSA back door...", seriously?

>You have to be backwords compatible

we have been making this trade off for years and it wont get any easier in the future, its about time we started a fresh initiative that doesn't make backwords compatibility a priority, except of course in the sense of maintainability moving forward.
Is the food actually healthy though? I've heard bad things about the street food there [1], but I've never been.

[1] http://en.wikipedia.org/wiki/Gutter_oil
I have a hunch that Apple is working on a similar device too (and that is what actually motivated the Facebook deal; Zuck had inside information). Everything about the deal sounded that they don't want 'someone' to beat them to the punch. After all, it doesn't require anything else but strapping an iPod in the housing. A7 runs 2K display already very well on the iPad. There has been rumors of two new large iPhones, because Apple has sourced displays in two new sizes (4.7 and 5.7). Actually, one of them might be for the VR display.
He kept rejecting the contract as the font was improperly kerned and he didn't like the serifs.
Git grep also integrates nicely into Vim with Fugitive. It shows the results exactly like :vimgrep.
Why rewrite C and C++ parts? Just because someone doesn't program properly in one language doesn't mean you need to rewrite everything written in that language. Bit like throwing the baby out with the bathwater.
almost read that as exotic hardons... lol
So, basically, it is the consequence of "quickly adding an implementation" of an extension of the TLS protocol to otherwise mature, more-or-less solid and "slightly" audited (at least by OpenBSD and FreeBSD teams) code base. OK. It happens.

btw, is OpenBSD affected or they did the job well by not blindly adding an unnecessary stuff (extensions) and bumping the versions without auditing the changes?
Citation needed. Probably the best programmer I ever worked with was the acidic guy who shot most suggestions down and at one point almost started a fight with another developer.
very good ollection
Too be fair it is obviously intended to be a talk on what could be happening and not what certainly is.
I was unaware of that. Looking a bit deeper into it, it looks pretty involved as soon as you want to do something non-trivial with it.
UK Barclays is vulnerable.
Experimenting with Threes
I've also suggested the same and posted a feature request to Chromium Bugs (do not do the same, I'm sure they receive more than once this feature request). I hope this gets implemented in all major browser.
will be interesting to see how many have tried it actually. not the fake 9000 one .
Cascade correlation networks are known to be good at solving the spirals problem. They are also very fast to train.
Well until Google breaks this feature you can see most blogger sites without Javascript using the RSS feed (in Firefox at least):

http://coderinaworldofcode.blogspot.com/feeds/posts/default?...

In other browsers it might not render the RSS XML feed as a page, Chrome just shows the raw XML. I use this bookmarklet for the process:

javascript:window.location=window.location.protocol+"//"+window.location.host+"/feeds/posts/default?alt=rss&path="+window.location.pathname;
If this is a consequence of the difficulties with the production of open source software, does that mean there are much more secure proprietary implementations of SSL/TLS? Which ones?
Do you say that because you know of a practical alternative which allows law enforcement to happen with a similar level of effectiveness?
the 700$month was mistyped

what i meant is that the correct price is 700 and not 350 since the 350 pricing doesn't include sharding/clustering
Wikipedia and the Internet language chasm
Any scope here for SSL companies to actually have to make good on warranties they offer here?
Yep, it does.

ROL rotate left

ROR rotate right

ASL arithmetic shift left

LSR logic shift right

But for it to work for all 2-complement coded values we need to ensure that the MSB is copied back into itself to keep the value the same sign, which can be done with another shift.

; Divide a signed 16-bit value by 2

LDA MEM+1 ;Load the MSB

ASL A ;Copy the sign bit into C

ROR MEM+1 ;restore MSB

ROR MEM+0 ;Rotate the LSB

It's a bunch of cycles but nothing compared to a generic division.
http://scholar.google.co.uk/scholar?q=%22timing+attack%22+%2... turns up some papers that consider this. They don't seem to provide much by way of tooling though.

A glance over the modelling doesn't seem to preclude using a model checker like http://www.event-b.org/ for it though.

The challenge comes in when you try to translate. You write your model up and validate your approach, you then try to translate it into C (or whatever) and that point you can be as certain of your design as you like, you still can't be sure that the compiled software will work properly. I haven't seen a convincing solution to that particular problem (and I've done some research on the topic for three separate projects now).
http://www.computerworld.com/s/article/9243873/NSA_spying_pr...
Why all the negativity, everyone? This is an impressive little framework - if you need to have the source code, it's not for you, but as-is, it is already useful for - at the very least - personal image recognition projects.

I love his excitement in his blog post and video about it where he trains a program to recognize his cat: http://petewarden.com/2014/04/08/how-to-add-a-brain-to-your-...
I think there is a bit of merit to this - part of the problem of schools (which i've read about off and on for years) is the expectation that students sit there and absorb lectures without any actual interaction with the information they are supposedly learning. I find this would be a decent bit of solution if it were used in conjunction with other changes. But considering in some places they make a fairly grand issue about whether or not students should learn cursive writing (Indiana has had this) and there are people that think education should go back to "reading, writing, and 'rithmatic", I doubt schools are going to consider this approach, let alone others that try to solve a number of issues with people dropping out of high school.
Why Should Anyone Buy Your App?
'I CAN'T write code myself,' admits woman in charge of teaching our kids to code
There are pruning methods which try to find and remove connections and neurons that don't have much effect on the network, essentially simplifying it.

There are also some methods such as HyperNeat which try to find simple structures that can be expanded into a much larger neural network. By sharing weights and having sections of the network that repeated many times.
A quick search with Google reveals various commercial SSL implementations. I have no idea how good they are.

Most people probably think openssl is good enough and are not willing to pay for something else.
Interview with Ghanaian e-Commerce entrepreneur – ahonya.com
After reading this story it became immediately clear why Facebook bought Oculus: the VR war is in full swing. Virtual reality is a happening thing and before we all know it, every major company will have a VR headset they're selling.

Interesting thoughts below that Apple could be making a VR headset, I doubt they would be entering the market considering the lack of content, but for all we know Apple have been working with developers launch a new VR product with a lot of content.

Microsoft recently said they're not interested in VR, but surely they're not stupid enough to miss out on a potentially new market once more like they did with mobile phones and tablets, are they? I think it is safe to assume most companies are working on a VR product in some way, shape or form.

I think 2015 is going to be a very interesting year for VR. Exciting times ahead.
Not since GHC 7.0: http://www.haskell.org/ghc/docs/7.4.2/html/users_guide/code-...
A very easy-to-use, user-friendly app.
Contrarian to the last? Now you get to find out why almost nobody writes that. Good luck!
TRWTF is how Jira doesn't apparently check if the session id is coming from the same computer (a simple ip address check for example). Pretty sure most sites are secure against cookie (and thus session) takeovers.
Things never to miss when writing your blogpost
Unfortunately, this means giving up the powerful Rust standard library and threads. Fortunately, third-party devs are creating a "zero-runtime" standard library that can be used in situations like this, and in embedded programming:

https://github.com/thestinger/rust-core

Right now, rust-core only provides basic collections and io, but more may be in the works. I suspect rust-core will eventually grow into a small but capable standard library.
This seems pretty crazy, does anyone know much about it? is it a proof of concept or actually designed to be used in production?
"free-programming-books". It's not on the list because it's not (unless you know something I don't).
what Frank answered I didn't know that some people able to make $5229 in four weeks on the internet . see it here
>>>>>>> w­w­­w­.­b­a­y­9­1­.­C­ℴ­M
As soon as high-school dropouts learn marketable skills that do not require credentials or formal education, sure they have a chance. Some of those skills are: coding, design, copywriting, UX/UI design, etc.
Best Dessert Rewind Recipes
I think what you say is true when the entire display is used for each eye, not when half the display is used per eye. (No need need to send a full frame that will be discarded by filtering glasses.)
Everything you need to know about the Heartbleed SSL bug
A number of the OpenSSL team are employed by large tech companies to work on OpenSSL. For example Bodo Möller and Ben Laurie work for Google.
TLS 1.0 and TLS 1.1 support in pure OCaml
How to use Instagram without a Smartphone
This is the first that I've had time to actually sit down and look at code, the RFC, etc, and I'm scratching my head.

The rationale for the payload for DTLS (sent over UDP) is reasonable, but I'm scratching my head over why the payload is even there for TLS. I guess there's some logic in making the protocol the same irrespective of underlying transport, but the payload is completely redundant for reliable protocols, which will handle any retransmission or reordering automatically.

Edit: Upon further (amateur and arguably ill-informed) reflection I'd argue that the heartbeat functionality shouldn't apply to TLS at all. It's needless complexity that can be handled by the underlying reliable transport. That doesn't change that the OpenSSL project clearly has code-quality issues, but it would have averted this particular fiasco, at least.

I am dismayed that a security-oriented protocol isn't focused on minimalast design. That seems very backward to me.
Chip design to make quantum computing more practical
I can't see why C++ would be any safer than C. For example Heartbleed like bugs in C++ are still very much possible.
Eh, it's not great on mobile either. It took me a while to realize as well.
Do you have a link to that income graph? I suspect it'd be interesting and reassuring for a lot of people.
This headset sounds terrible. Resolution is the least important factor in presence (of resolution, persistence, latency, frame rate, tracking). It sounds like they have bubkis for the other areas, and low standards besides.

Oh and what is that higher resolution going to do for latency and frame rate? Hmmmmmm.

It kind of shocks me how uncritically positive this article is. The situation to me reads differently, more like "any joker can plug a higher-res LCD into an Oculus DK1 spray painted white."
> How everything is made, on purpose, needlessly complex to prevent honest developers from working on important things.

Ah, so that's why OpenSSL is not implemented as a RoR web application with REST-API and Cucumber tests in a TDD way so that Johnny Webmonkey can easily contribute. I always assumed it had to do with portability and performance.
retard atheist nigger
So destroying Switzerland is as easy as pretending to invade it. You just have to wait until they blow up their country, then land on their government's parliament building and take over.
Hard disk pioneer Stuart Parkin wins Millennium Prize
I suggest using Wei Dai's http://www.cryptopp.com as a new starting point for all low level crypto.
Commit Template for Better Commit Messages
Social approval, socialization expectations, etc.

As far as capitalists care, your productivity, predictability, and sociability are what's important. HS diplomas are not uniform. Institutions that are permitted to discriminate based on high school attendance do so to an extreme degree. So while legally the diploma is a commodity, in practice it's a highly differentiated good.

If you are lumping in University High School graduates from SF in with graduates from Compton High School, you will be mislead.

Because that $260k figure isn't explained, it should be ignored. 'Cause life's too short to be bamboozled by unexplained numbers. If this author had access to the study, there's no reason that it couldn't be linked to or at least footnoted.
Bitcoin Exchange's SSL More Secure Than Banks
India's Mars mission crosses half the distance.
Bloody brilliant. I have longed for a ML methodology that breaks out of the float vector representation because I don't think it describes naturally occurring problems that well, most ontologies are semi-structured. However, this really gets to the nub of the problem, real, but solvable, problems are manifold complexes. I don't think anyone has really built a learner for complexes though, persistent homology is a stab in the right direction but its not there yet IMHO.