skysight-inc/HackerNews huggingface dataset:
> If we get a response that's longer than the 3 bytes of data we actually sent (as opposed to the 16384 bytes we claimed we sent) then the server is vulnerable and the extra data sent back is part of the contents of the memory of the server.

Not necessarily. The server could run a custom patch that fills the buffer with /dev/urandom. You might still find user secrets in that buffer as well as a full Shakespeare work if you try hard enough.

That said, I don't see why one would do that, except perhaps to waste attackers resources trying to check all the returned garbage for potential private keys.
The theoretical attack there is that one could selectively garble the (decrypted) parts of your storage, and thus destroy the contents of e.g. your configuration files. E.g. they could corrupt your firewall configuration file and thus leave your computer open to outside network connections. I don't think this has been done in practice, and it's probably not very feasible.

Such an attack could not be detected, because the encryption modes commonly used do not provide integrity protection. This is due to the desire to have equal sizes for both the encrypted and plaintext sectors (as far as I understand, that's an efficiency/ease of implementation concern). Incidentally, you can easily see that such a scheme can never provide integrity, since the encryption operation has to be a permutation, and you have to be able to decrypt any ciphertext.
Read Vonnegut's "Harison Bergeron".
Like everyone else here, I've been using ssh -D. Which is awesome especially because I have my hosts organized into my ~/.ssh/config file, so if I need a connection in the USA, I'll just type "ssh -D 4444 us".

I have a similar setup on my Android phone, by using Vx ConnectBot (http://connectbot.vx.sk/) plus ProxyDroid (https://github.com/madeye/proxydroid).

If anyone need some of the advanced features provided by OpenVPN, I can suggest this script: https://github.com/Nyr/openvpn-install
I've successfully used it to install OpenVPN several times, and it's mostly effortless.

As for the VPSs, I can suggest http://lowendspirit.com/, awesome owner and can't beat the 3€/year (yes, year) price. You don't get a public dedicate ipv4, but if you need only a VPN then it's not really needed.
"... hearing that one of my developers is doing something like this would make me question what exactly she is doing and why."

When someone is working on something 'outside' there can be a number of motivations. As a manager I'm thrilled if they are learning new skills or packages, I can't always come up with projects that keep people interested, and side projects can help with people keeping technically alert. I also love to hear about what they have learned "Hey Chuck, Chef does this much better than we do." Or "Hey we can use this new Meteor framework to build cool stuff."

On the other hand if they say "I'm working on an entirely new way to crawl the web, but it isn't at all like our crawler." I'm going to talk to them about switching to our crawler, after all if that is where there interest has taken them, I'd rather it help both of us company and employee. If they don't want to do that because of personality issues, or some other structural issue which has been lingering, as a manager I want to know about that and try to fix it.

Bottom line is if your working off hours to charge your technical batteries, its great. If you're working at those hours because of some problem at work, I want to fix that. If you are working on something because you don't want to work here anymore, I'd like to know that too and make the transition smoother for everyone.
It seems like Airbnb helped out the person, but I can't see this not happening more frequently. It's like an inverse network effect - 10 times the customers, 10 times the wrong things, and 10 times the people who care about bad things happening.

Clearly I'm in the minority - I'm curious how others think.
First: "I'd only purchased 3 cars before in my life. A Toyota Camry, that I drove for 12 years. ... A Honda Odyssey, that we had owned for 6 years. And a Nissan Leaf, that we had owned for 3 years. "

Then: "The RAV4 EV, which we had just purchased, decimated the pack."

These two statements aren't compatible. Or somehow I am repeatedly misreading what he is saying.
Thanks — previous Googling hadn't turned this up for some reason.
As long as he indicates that it's anecdotal (as he did throughout the piece) I don't see an issue with sharing it with the world. It's not like he's selling himself as a car buying consultant; he's just sharing the fruits of his private labors with anyone who it may help. He's a Harvard MBA grad; I'm sure he's proud of his skills. I can see that fostering the desire to make a dedicated website. But then, I tend to see the best in people before considering the worst (which is probably why I'm not a businessman at heart).
I am self-taught (Google) and have had success only with inside doors where the locks are cheaper. I've also just used paper clips which could explain my problem with front door locks. It also still takes me 10 min+. (And I've only done it twice.)
> In another lovely irony, the eye is one of the single most convincing pieces of evidence for the non-existence of god! Why, otherwise, would "he" have bothered to create a blind spot.

So we could learn to trust in Him and stop relying entirely on ourselves.
David Brooks: Should you live for your résumé ... or your eulogy?
Or do the sensible thing and print only printable characters.
Here's a JavaScript example, based on what was in the article.

var b = {c:0};
b.valueOf = function() { this.c++; return this.c; }
b == 1 && b == 2
> true
Show HN: Introduction to Web Fonts and Intro to Web APIs (Tutorials)
Hey everyone.

I wrote a few tutorials using Mozilla's Webmaker (webmaker.org) and was asked by the Webmaker team to convert them into what they call teaching kits and teaching activities for their curriculum.

There's already enough HTML/CSS/JS tutorials for beginners online, which is why I went with something a little more advanced (some basic knowledge of HTML/CSS/JS is necessary to follow). Plus the tutorials have been checked by people working for Mozilla, so they passed some pretty good quality control.

Make Your Own Web Mashup: Introduction to Web APIs

https://fourtonfish.makes.org/thimble/make-your-own-web-mashup-introduction-to-web-apis

Introduction to Web Fonts

https://fourtonfish.makes.org/thimble/make-your-own-about-me-page-part-i-introduction-to-web-fonts

A Web Fonts Exercise

https://fourtonfish.makes.org/thimble/make-your-own-social-media-sharing-buttons

I hope you'll find these useful.
I would have thought so too (and did), but at my previous employer they took over another company which broadened the scope of the products (VFX software) they offered, which then came into conflict with work I'd been doing in my own time.

I ended up signing a specific non-compete and agreeing not to open-source my stuff for a year for the opportunely to work on something I wanted to there, but it turned out that up to that point, the managers' interpretation of the contract that I thought would have prevented working on open-source competitors (i.e. blender or something) meant that they wouldn't have been able or had the right to. Which I found surprising, but I guess wasn't really put to the test.

So I guess it varies.
Taming the Mind
Just to throw some maintenance numbers out there since I happen to own a 2003 Odyssey with over 170k miles and I've kept track of the costs in a spreadsheet. So far I've spent just under $10k in maintenance.

The big annoying charge was ~ $4200 at 110k miles in 2010. The transmission failed, so this charge was for a Honda remanufactured transmission and PCM, plus the 105k maintenance (new timing belt).

The other significant charges are brakes and tires. It's almost $1k to replace the tires and brake rotors, which on this vehicle have been around every 50k miles.

SWAG at fuel costs: 170k / 20 mpg * $3 ~ $25k.
The next line from your clip seems really relevant to this topic

when the invention was conceived or “reduced to practice” (actually created or a patent application filed) it related to the employer’s business or actual or “demonstrably anticipated” research or development, or...

In other words, if it's related to the employer's business it belongs to them. What's related and what is not is up to a judge to decide. There's arguably a spectrum of directly related, somewhat related, tangentially related, unrelated, etc.. Seems like the OP's project though is in the directly related side of the spectrum.
It is a continuation of the story "How Do You Even Do Anything Without Using" EBS? http://highscalability.com/blog/2014/4/14/how-do-you-even-do...
Can Rust code be compiled and debugged on PC, OS X, Linux, iOS, Android, PS4, and XB1? If the answer to any of those platforms is no then the answer to your question is no.
Just to inform your ingonrance. The Eastern and South Ukraine is a Russia. It was attached to the Ukraine be the bloody communist criminals. Look at the map http://13571113.blogspot.com/2014/03/republic-of-novorossiya...

New government of Ukraine is neonazi, installed by the US during this winter. This is done second time. First time it happened in 2004, why american citizen Uschenko has imposed antisoviet propaganda in the school program, the WWII nazi criminal, Stepan Bandera, was made a national hero. It was indoctrinated a neonazi idea that russians are inborn slaves and biogarbage, russian language was banned. Antisoviet/antirussian brainwashing was absolutely successful but economic programme has failed. Therefore Uschenko has lost the office. But, in 2013, US has re-installed its puppet government in the Ukraine again, by force. How do you react?

The new government was much more neonazi (look for "svoboda" party and "far right groups patrolling Kiev"). The first law was to ban the russian language again. They have declared that they will remove the russian fleet (which is located in crimea forever, since Crimea is another Russian land, attached to Ukraine by mistake by Soviet Authority, when ). Now, how do you prove that Russian people (the total population of the Crimea, Doneck, Odessa) should welcome the US-installed russophobic mankurts in Kiev, who chant "slotter the russians" (https://www.google.ee/search?q=москалей+на+ножи) in their fascist marches? You do not bother to prove that. Your propaganda has already put all shit in your head.

1. Russian people in the Ukraine (almost the half of the pouplation) have all the right to run away from your neonazi puppets.
2. They have full right to live with other russians.
3. Russia has all the right to meet the aspirations of frightented people in Ukraine and defend its national interests, which are the Black Sea fleet, russian population united with the rest of the Russia and no NATO in the Ukraine.

You dehumiliate the russian hostages in Ukraine because you want the whole Ukraine to go under Western domination. You want it to separate from the Russia because (as Bzhesinzki puts that) Russia will loose its ability to stand against US Empire only if it looses the Ukraine. You is an imperialist, brainwahsed by the Western propaganda. Crimea has came back home. The "Independent Ukraine" is American, anti-Russia project. The population is russian and feels bad there. It must be ukrainized, turned into ukranians (anti-russians). All russian regions must return back to Russian home, immediately. Start respecting territorial integrity of Sovient Union, not Ukraine. Russia should not let the NATO to expand and install anti-Russian missles in Crimea and Ukraine. Russia did not attach its parts to Ukraine for that. Nato wants the russians to be separated, to live outside the Russia.
For some reason I can't quite put my finger on I have been viewing everything that comes out of Tesla with skepticism and distrust. I think it started with the attempt to confuse people with "creative" financing options.

I know it is a good company. I was waiting for them to revolutionize the SUV market with a true sports-utility electric vehicle. I would have been in line to buy one. Instead they are putting out a bullshit Gucci gull-wing contraption that is a total let-down. That's when I ceased to be interested in Tesla.

For a number of reasons we recently purchased a used two-year-old low-mileage BMW. For a little more money we got extended coverage that takes care of everything for seven years. We even covered the (expensive) tires.

We could have bought more than one fully-covered low-mileage certified-pre-owned BMW for the cost of a single Tesla.

My wife ran over something and punctured a tire a couple of months ago. Being a "run flat" tire, she drove to the nearest BMW dealer. They gave her a loaner car for the day and, for a $50 deductible, replaced the $500 tire and cleaned and washed her car.

So I read an article like this and my first reaction is: Who are they trying to fool?
The default invite code is 'try-huginn'
Regarding the market for resale, look at Roadsters and Model S on eBay. The market for 5 year old EVs seems pretty healthy. The batteries lose ~0.15% capacity per 1000 miles driven; nearly all 5-year-old Roadsters have over 85% of thir original range. Why would that change 5 years from now? Tesla would be shooting itself in the foot to do anything to purposely damage the resale market for their cars; that'd lower the value for new ones.

Why do you think you need to live in an area with a charging network to buy a Tesla car? Its range, equivalent to most gas cars, gives you many days of typical driving between charges. Unlike gas cars, you can "fill up" at home, there are no external dependencies. You'll also never suffer in a fuel shortage, which my area had several times before winter storms this season.
It was recently revealed that instead of CanBus they use Ethernet

If you're referring to the thread on teslamotorsclub.com[1], they are not using Ethernet for any sort of communication aside from infotainment and there is definitely a CAN bus[2].

There's been speculation that UDP broadcasts from the CAN bus are carried over that network as well, but it's almost certainly used for displaying information and informing various non-essential systems.

[1]: http://www.teslamotorsclub.com/showthread.php/28185-Successf...

[2]: https://news.ycombinator.com/item?id=7535589
Not that I'm disputing your point, but I think a lot of people make assumptions about EV batteries that aren't necessarily true. Nobody really knows for sure right now, but I think it's very possible that a Tesla battery pack might last for quite a long time.

I know in the past I've thought "hey, my iPod battery lost most of its capacity after five years, I guess li-ion batteries just don't have that much longevity." What I didn't know at the time was that different types of lithium ion battery chemistries yield drastically different lifespans. Studies have also repeatedly shown that temperature makes an enormous difference to longevity, and the Model S has a pretty fancy HVAC system designed to keep the battery within an optimum temperature range as much as possible.

Again, I agree with you that it's hard to really have any idea what the resale value will be in the future. But if we're guessing blindly, I don't think it's totally unreasonable to make an optimistic guess.
I have mixed feelings about this: any site that has input forms, handles user data, etc. should use the HTTPS protocol.

However, for static content only sites, what is the point?
It depends on the state; in 8 states there are restrictions, most notably California. Such contracts aren't enforceable in CA:

http://www.intellectualpropertylawfirms.com/resources/intell...

But of course, if you use any company resources (including computers)... then they can be.
I can't speak to this specific teacher, but as an art school grad I can say there is a really sad strain among teachers to denigrate anything a) pleasingly figurative, and b) commercially successful. Thomas Kincaid is painted with the same brush, his landscapes are conventionally pretty, if a little kitschy, and wildly lucrative.

A surprising number of fine arts professors in modern art schools couldn't draw a convincing likeness if they tried and fewer make a healthy living so there is a tendency to snipe at those more successful.

"Art School Confidential" is a great movie if you want a picture of what it's like at art schools today.
Fortran's most recent standard (Fortran 2008, adopted as an ISO standard in September 2010) was actually adopted more recently than the 2.7 release of Python, so, arguably, Python 2.x has been static for longer than Fortran.

(Obviously, if you said, e.g., Fortran 77, the story would be different.)
> Which claim is that, exactly? A

"This difference in how syntax is understood actually presents a barrier to programming for modestly trained mathematicians, who would otherwise be expected to excel."

> And are you implying that the author's original solution is more indicative of real programming?

Well, neither is... but yes, overriding == or .equals is somewhat common.

> when accessing the value of "b" for the first check, b is mutated such that the next check will return a different value.

The difference is that you could easily imagine a sane example where x == y != x === y, whereas it's hard to imagine a situation where I would want to override get (or ==) with a method that mutates the requested variable.

> The == vs. === issue is the part that's actually irrelevant, it served as a red herring.

For the claim re: syntax and compatibility with mathematician's expectation, it's exactly the other way around.

FWIW I feel the quoted claim re: syntax claim is interesting, whereas the contents of the article (summarily, "you can override == or .get and cause crazy stuff to happen") is unsurprising and kind of silly to most programmers even moderately experienced with OOP in dynamic languages (for the reasons given in this post and others -- everyone knows about it, it shouldn't take 11 days to figure it out, and in practice no one does purposefully obscure stuff like mutating values when == or .get is called).

edit: grammar
Scanline spacing looks uneven to me. A size multiple of 14 (the original size) would be better.
Escaping is a form of sanitizing.
One of those exceptions is potentially rather significant here, though. From immediately after the part you quoted:

unless:

when the invention was conceived or “reduced to practice” (actually created or a patent application filed) it related to the employer’s business or actual or “demonstrably anticipated” research or development,

That said, the article you linked to seems to be about patents covering inventions rather than copyright covering creative works, so without reading more about the laws in those states I don't know whether any of this is actually relevant in this case.
Why Smart Executives Fail: And What You Can Learn from Their Mistakes
Anyone ever read this book? Seems that these are the words of wisdom/gospel, and I can see them in so many places I've worked.
This was posted earlier:

https://github.com/vincenthz/hs-tls

https://news.ycombinator.com/item?id=7557089
Don't most password managers have a feature that enables you to locally generate a random, high-entropy password? If you're using a manager in the first place you don't really need to remember it, right?

Also, I've always wondered if it was better, worse, or of no consequence to leave spaces in a passpharse.
leviathant is correct. My art teacher started each beginner class with a survey that asked students to draw "a house," "an eye," "a tree," etc. He then compared the typical student's drawings with real photographs by pointing out the differences in proportions, "you couldn't even walk through this door," etc.

In general he related things back to symbol vs. reality, the way the brain falls back on abstraction and its unique symbol-vision, and then showed us how a study of proportion and negative space gave us more practical creative power than we had back in symbol-land. He would put a bunch of chairs and objects on a table, wrap it in plastic, and say, "let's all draw that. Start with the negative space." This all goes back to Dr. Betty Edwards' works. In my experience I was even better at analyzing and approaching cartoony, symbolic styles after this practice than I was before.

Edit: Getting back to your question :) I think my art teacher was annoyed by an attitude of "how cool is Bob Ross--look, he's sharing his tree technique where he uses a fan brush," kind of squandering (in his opinion) an opportunity to finally show the public how to see, an opportunity to equip them with useful mental tools for approaching any kind of art.
Sorting: More comparisons versus less memory traffic
I think his argument is that these patterns are the easy thing to do in Haskell, not that they are necessarily unique.

The Monoid pattern is universal, but most languages don't give you tools to talk about it as an entity.

It is harder to enforce something like implementing a Monoid Ruby or JavaScript but you can always implement mappend, mempty and use "duck typing". Haskell's advantage in encoding these patterns is static checking, and type classes.
My smart phone has made me dumber
"This test is not a primary mission objective and has a low probability of success (30-40%), but we hope to gather as much data as possible to support future testing."

This test isn't expected to be successful, either.
Among people who work in investment banks "investment banking" has a specific meaning (i.e IBD) but in general usage it's meaning covers the wider capital markets.

For example see the Wikipedia article:

https://en.wikipedia.org/wiki/Investment_banking
Resale value in 5+ years out should be very good. I've been watching the used market for over a year and it's been very, very strong. There's not much used inventory being sold and owners seem to love the Model S's.

The other factor with resale is that the Model S is light years ahead of any other cars in terms of technology. So, in 5 years the current center console of the Model S will still be far superior in terms of user experience than any other car in the market IMO. This will help resale value.

Another point is that current users are experiencing very little degradation on their batteries, even after 20-30k miles of usage. After 5 years/70k miles, the battery will probably still be at 95% capacity and this will help resale as well.

Also, with EVs in general you are buying not just the car but the battery. Think of it as you're buying your future gasoline with the car purchase (of course this isn't a perfect analogy because you still need to pay for electricity), so that's why EVs tend to have fairly good resale value.

Lastly, Tesla demonstrated a battery swap (in less than a few minutes) last year (https://www.youtube.com/watch?v=H5V0vL3nnHY). They've hinted that eventually you'll be able to upgrade your pack by paying the difference in value between your used pack and the new pack. No details have come out on this as of yet.
?

This seems matter-of-factish to me as long as they can defend it. (Hey, some of the code tha I've written to save people time and money does not have a very polished style, -that is a matter of fact and I'm fine with that.)
Is it typically a disaster because business users are given access to create their own rules and they don't know what they're doing, or because the complexity of the system grows to the point where that complexity is better managed by other tools (version control systems, QA environments, rigorous testing, etc.)?
You mean that you put it unsanitized (for HTML) at the database, and sanitize only when converting to HTML... Well, I completely agree, but how can you then claim that sanitizing is always wrong?
Keep in mind that the Roadster is an extremely limited-production, high-end niche car that is no longer manufactured.

Its value/depreciation curve will look very different from a still-manufactured luxury sedan of a previous generation, which is what the Model S will be in 3-5 years when Tesla release a new style.