skysight-inc/HackerNews huggingface dataset:
I've devoted most of my career to upholding the software freedom that the GPL ensures. I have worked with Rob Landley in the past who is mentioned on this thread. I think Rob has some facts wrong about BusyBox enforcement. The most notable one is his claim that "no new source code got released".

In fact, we get "new source code" all the time from GPL enforcement efforts. The thing is, it's admittedly not often upstreamable source. A lot of the modifications to source done by redistributors of GPL'd software is not really well formed nor suitable for upstream. It's that classic kind of "it just works, but it's ugly" code.

This is particular true with regard to the "scripts to control compilation and installation of the executiable" which is a required part of the complete, corresponding source, provision of which the GPL mandates.

Situations like the WRT54G (the GPL enforcement source release of which launched the OpenWRT project) and the Samsung TV lawsuit that I helped do (which launched the SammyGo project: http://www.samygo.tv/ are excellent examples of what great things happen when the GPL is enforced: reaching the promise of copyleft, which is hackable devices downstream.

This is why I've spent(and probably will spend) most of my professional life enforcing the GPL.

This post here is about a few specific issues, but if you want more general information on the topic, dalke's link to my talk is probably helpful. Also, here's links to the docket of the largest GPL enforcement lawsuit ever done, Conservancy v. Best Buy et al: http://ia700409.us.archive.org/18/items/gov.uscourts.nysd.35...

BTW, sorry for jumping into this thread. I'm kinda the Kibo of Free Software licensing discussion online; I'm not an HN regular but mlinksva linked me to this.
Add anything from your mobile email to Trello, with just a tap
i know it's usually frowned upon to make jokes on HN, but it's amusing that this comment seems be sexualising everything and your user name is an anagram of "viagras"
I can see that working in meatspace but here we're talking about selling an idea on the web - the buyer is very unlikely to be able to track you so they're unlikely to front the money.

Suppose you found a bug, couldn't cash it in with Google because of where you live and so were selling it on. The buyer won't release the funds, would you really give up the goods? Even with an escrow, proving the transfer and performing the transaction with minimum risk seems problematic to me.
Just remember it when you have some British clients.
Source is paper here:

https://www.cs.utexas.edu/~shmat/index.html#pub

It's the first one, Frankencert.
Can You Get Private SSL Keys Using Heartbleed?
From: Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations

https://www.cs.utexas.edu/~shmat/shmat_oak14.pdf

github: https://github.com/sumanj/frankencert
Who says you have to have job interviews afterwards? I've known plenty of people who line up interviews before they actually quit, then only quit when they've got another job lined up.
Interesting.. I hope the generator function is non reversible? I.e., if you know the password ("qnQTs0-QO-9osX-me4)M" in this case) and your policy, could you find the master password?
RSA, DES, etc are not "restrictively licensed software", they are algorithms in the public domain. Anybody can write their own implementation of it and license that work how they see fit - including OpenSSH. I'm pretty sure they're just lazy and would rather use someone else's code.
That's exactly the point: some experts, when asked for a simple explanation, produce a huge info-dump in simplified terminology, and most experts thought that an appropriate response (see upvotes) - failing to realize that the result is anything but simple.

It takes a special skill to eliminate all the non-essential information and produce something truly simple to understand, like the comic.
Can someone point out where are the laser trimmed resistors in the photos, and maybe explain some more of the components?
The dumping of hazardous waste on third world countries isn't exactly news. The given example may (or may not) be inaccurate but this is something that's been going on for decades.
There is no portable way to echo without a newline. Use printf instead.
Great story. It is good to know that some programmers do learn over time.

For every 1 story like yours there are probably 10 where someone is still traying to get "revenge" by saying nasty things about you know who.

Those more common stories get replicated through the wires and the end result is that no one cares about programming anymore; they are simply interested in discussing interpersonal relations.

Would you rather have your software written by a foolish programmer who is pleasantly tactful or a competent and conservative one who is tactless?

The answer of course varies depending on what you are really after.
personally I have been mining Litecoins for 6 months and am just about ready to turn off my rig. Electricity cost vs. difficulty level isn't make it worth it anymore. For the record, I have not sold and don't plan on selling any of my LTC. I will be holding onto them until virtual currency becomes as mainstream as is portrayed on "Almost Human".
Ask HN: Why isn't UPS leveraging Amazon?
I've been wondering why UPS does not charge Amazon for a percentage of their profit. 5% of any package delivered (or $5000 for every employee who wants to quit). I think of them as Amazon's real employees. Amazon can't goto FedEx (more expensive) and USPS (unreliable). So why isn't UPS using its monopoly on the Amazon monopoly right now?
How to NOT sell high-heels to a businessman (and other Email Segmentation tips)
Where it might not be possible to get SSL private keys directly via heartbleed. Is there not also the possibility of exposing reused credentials or something that exposes a further exploit that could provide root access or similar to a server, allowing the retrieval of these keys?

It may not be possible in this clean minimal install, but in a real production environment, it should still be treated as a threat?
As spullara mentions, owning a smaller portion of a more valuable company is obviously preferable than owning a lot of a less valuable company.

I am all for bootstrapping and people choosing their model, but lately there has been quite a bit of vitriol for these advanced growth stage companies (no longer startups) who are largely VC owned. My opinion is always - Ok, these founders/ early employees knew what they were doing at some level. They were the boots on the ground who - in this case - said, if we want to grow to the point we can IPO, need to raise $85.5M to get to that point.

Playing arm-chair quarterback isn't really fair when we don't have great insights.
I read elsewhere that the bug exposes first and foremost memory that OpenSSL itself used before (because OpenSSL has its own allocator running on top of malloc).
Your iPhone having OpenSSL is probably the jailbreak, however all OSX computers ship with 0.9.8 for legacy reasons. It's not used by any other apple software to my knowledge.
Spouses of H-1B Visa Holders May Soon Be Allowed to Work in the U.S.
Longaccess as a safe deposit box for Dropbox files. Feedback wanted.
World != USA only. Just move somewhere in Europe, you have like dozens of different flavours ;)
News Feed “Like-baiting” FYI: Cleaning Up News Feed Spam
FreeBSD dev response to De Raadt's very vocal stance: http://tech.slashdot.org/comments.pl?sid=4559455&cid=4570198...

It really does seem like De Raadt's just being really petty to me. But if this is an actual hole and he doesn't want to say what it is, that is worrisome. Doesn't he insinuate the rest of FreeBSD does not know about the hole?
How did we end up here? My initial point was that zeroing memory does not prevent leaks in the general case and we both agree on that. I never claimed OpenSSL should or should not have done something differently.
Got that one too. Also got this [1] but it looks like public keys maybe ? I'dont have time to check right now.

[1] http://pastebin.com/KiVNV0c6
Everybody who is dropping OpenSSL in favor for alternative library X is going to bet on the wrong horse here. A big leak has just been fixed in OpenSSL and every commit will be checked now by more critical eyeballs than before imho.
ScanTailor book scan processing tool gets a new maintainer
Crazy... Modified my post. Thanks :)
The don't sign comments rule is designed to stop pointless posting of company URLs when there is no need to. In this case it is clearly appropriate for Matthew to disclose who he is as it is important to the context of the post.
Too many gay porn with Putin leaked perhaps ;) He must've been like "Kurva, abort abort, block teh whole interwebs!" :D
The Truth About Accelerators: Some Accelerate Success, Others Accelerate Failure
I must be the only one that's pretty much done with having to read about heartbleed.
I was being facetious; but my point was that for audiophiles, you shouldn't need to be disassembling components in order to tell the difference between systems.

Sure, if you can notice a difference, then go ahead and track down where it is coming from. But if you start from the wrong end (i.e. the 'AD744 has higher noise and higher offset voltage') then you should stop and question your actions, IMO.
Synchronizing Asynchronous JavaScript with ES7
So... Cloudflare sent you the IP and they are not "playing nice"? You have to understand that they can not remove any content because they don't have access to the server. If you want to blame someone, blame LeaseWeb or Netherland's law.

Also, Cloudflare chose to stay neutral and this is good in some cases and bad in others. They may protect warez sites but they also protect websites with content that some goverments and people loved to erase from the internet.

This can be bad for you, but the internet is not perfect...
Xkcd is best at simplifying the most complex things and complicating the most simple things! :)
Heartbleed and The Future of Authentication
That doesn't solve the merge problem. What happens when you edit a password on one computer and then another password on another computer before syncing?
If it helps, the numbers in parantheses after read, malloc, calloc etc. are referring to the page number in the man pages.

e.g typing `man 2 read` into the shell on a Unix system will give you information about the read system call.

2's are for system calls, 3's are for members of the C standard library (usually).
XML made it for more manageable to create machine to machine API's. I can say we surely would not want go back to the 80's and 90's when dong that stuff was a nightmare.
(stolen from the amazing prosody guys):

https://github.com/polarssl/polarssl/issues/84
Mhh, read the article a bit more carefully. Specifically:

Minimum viable code. I was forced to write code for no less than 30 minutes a day.

30 minutes a day? That's not exactly a huge quality of life problem or a work addiction. That's keeping a useful skill up to par, the same way I'd expect a good musician to practice every day.

Besides, when you're a serial procrastinator, tactics like these can help you break out of that rut.
In addition to what has already been stated, components have additional concerns about environmental tolerance and long-term reliability. If two chips test the same on a test bench, that just means there is no difference at this point in time and under the conditions of the test bench. It says nothing about vibration susceptibility, moisture susceptibility, EMI susceptibility, ESD sensitivity, operational and non-operational temperature ranges, or a host of other factors that affect reliability and manufacturability.
I actually just agree with grellas. I'm indifferent to Dropbox.
Here is image Mikhail Svarichevsky (author of that blog post) posted as answer to this question in comments on Habrahabr http://i.imgur.com/vC5VkH0.jpg
SEC eyes test that may lead to shift away from 'dark pools'
Citizen Apple: A spotty record of giving back to the tech community
Well, I suspect there will be people postponing quitting for a few months just so they can cash out with the offer. That's undesirable for Amazon.

But I doubt you'd have people staying in a job they dislike for another year just to get an extra $1k when they do quit. Also you'll have compounded another year of turning down cash to work there so the cognitive dissonance might be even stronger.
I had a play with express/node a whole back but found it quite low level (useful in some cases). Is there anything closer to rails in node or is there a preference for piecing everything together with libraries?
West struggles as Russia moves to dominate old USSR
Thanks for sharing! I would also add to read the Lean Startup book which gives you great insight into how to act/react and shape your first startup
Heartbleed: A great time to think about incident response
Apple Could Finally Adopt NFC On iPhone For Mobile Payment Plans And Touch ID
Does anyone know where I can find discussion about the Express team's decision to completely detach from connect? I'm also curious about what type of middleware design they went with, or if they just reimplemented connect in their own way, which wouldn't surprise me due to the prevalence of Not Invented Here syndrome in the Node community.
I think there is an important and quite general point here: it is not just about programming languages, but also about programming knowledge and skills. You are replying to someone who was unaware of the state of the art in program verification (to be fair, he recognized the issue to be solved, which is an important start.)

As the example in the original post demonstrates, programming in languages that have this level of support for verification is very different from programming as it is currently commonly practiced. Not everyone will be capable of making the switch, and for an organization to simply say 'from now on, we are going to use this safe language', without addressing the skills issue, is setting up for failure.
You might as well skip the US who is not very hacker friendly either and come directly to western Europe :)
Although nobody else seems to have mentioned it, this sounds to me like they are trying to avoid employees being dissatisfied but sticking around in order to get severance pay. Obviously if you quit voluntarily, no severance pay, but Amazon gives you a bit of money anyways (much less than severance pay), so that maybe you won't stick around longer than is good for either of you.
Test our changes before we commit? What blasphemy is this?
take a look into Sail.js, Meteor.js or the MEAN stack

http://sailsjs.org/#!
https://www.meteor.com/
http://www.mean.io/#!/
I stopped reading at that line.
It might work outside the States? But the question really is "will US gift cards work" wherever you are. We've got someone testing in Japan who says he'll report back.
Report: 44% of Twitter Accounts Have Never Sent a Tweet
I fear that your economic analysis is way too simple.

You should include damage to the company's reputation, should this get leaked. Specially since they work with security - and who would trust their security to people who sell vulnerabilities to the highest bidder?

This could cost than much more than your quote.
You're oblivious to user experience not your own user experience. A good usability person can put him/her-self in someone else's shoes, rather than assume everyone else thinks like they do. Since software engineers think very differently from most people good usability people are rare. (Steve Jobs was actually such a person. People forget he knew enough programming and electronics to be dangerous.)

The thing Apple did with the iPod was offer a seamless end-to-end user experience, to allow "normal" people to buy a song and have it appear on their devices legally, simply, and at a reasonable price. This involved software, UI design, hardware design, negotiating compromises with the RIAA (e.g. iPods did not simply act as a file system to prevent casual piracy while not seriously inconveniencing users). This combination of software, hardware, design, and legal wrangling was not replicated by anyone, even approximately, for several years (Sony and Microsoft eventually managed to get something vaguely comparable, but it was too little too late.)
At my company, I am both the most unmotivated and most productive employee. Where would that leave me? :)
A better way: Actually read and understand the submissions from the
entrepreneurs!
The guys behind this report have an interesting pricing model: Pay what you want!

https://detectify.com/pricing

The pricing models has apparently worked so far. Are any active users of Detectify here and can share their experience?
The Moral Power of Curiosity
"The only way to reconcile their thoughts and actions is to explain that, in fact, they must really love this job and therefore should work hard at it."

Is my mind supposed to work like that? I'd think "I should've taken the money, oh well, I had my reasons at the time, they've turned out to be wrong, nevermind, time to go."
One tricky bit is that it seems to be only once a year. So someone just moving on normally wouldn't easily be able to take advantage.
This brought back some memories..

D&D was great. I was absolutely obsessed with it as an early teenager in the mid 80's. I carried the rule books around all times and even had a club at the school lunch table. I remember the vice principal...a bearded guy who was probably like 28 coming over and congratulating us saying he played D&D also and he believed only smart people played the game.

I also remember the ridiculous religious hysteria and my parents becoming concerned after someone at church giving them a cassette of some guy warning of demonic possession from rock music and D&D. The were reasonable though eventually let it go after investigating the rule books and my father actually playing a game (he frankly thought it was dumb which in retrospect is understandable). It all seems so tame compared to what is around now.

D&D was my great love at that time. Well... that and my TSR 80:)
> Simon may have no choice but to steal

There's always a choice. Thievery is despicable.
I'm no linguist, but I think they effectively used the pumping lemma, just like the canonical "there's no finite bound on the distance between declaration and use of a variable" proof for Algol-flavored programming languages. Either confirmation or pointing out my mistake would be greatly appreciated.
With Google Glass save, and share with Livestream
How to Get Open Source Project Ideas and Execute Them
Great! I had so many colleagues in this situation - invariably it made starting a family more attractive as one spouse was basically stay-at-home anyway.

I understand that Americans want jobs for Americans, but bringing in immigrants and letting them work means you get taxpayers whose education was subsidized by a foreign government. They basically are net contributors to the economy upon their first paycheck. The higher skilled they are, the more dramatic this effect. It seems like a huge net win to the US economy.

I'm sure there's a good counterargument to this, but I'm biased being an immigrant myself.
Meanwhile over in a Makefile...

# Automatically figure out what echo options to use so that echo
# '\r\n' actually just outputs the characters CR and LF and nothing
# else. This is very shell dependent.

ECHO_OPTIONS := -e -n -en
ECHO :=
$(foreach o,$(ECHO_OPTIONS),$(if $(call seq,$(shell echo $o '\r\n' | wc -
c),2),$(eval ECHO := echo $o)))
ifeq ($(ECHO),)
$(error Failed to set ECHO, unable to determine correct echo command,
tried options $(ECHO_OPTIONS))
endif
we appreciate your supportive comments :)

there are about 10 of us at conformal.
It's not just EoL that has to be replaced. If you don't have a support contract and can't afford/don't want to renew, and the patch is under support only, you have to replace your gear because you can't get the patch.
> try comparing environmental panics (historical and present) with religious ones.

Care to name some examples? Because the past ones I can think of (acid rain, ozone hole) do not fit the pattern AT ALL, they were well grounded in reality and abated because things were done that actually eliminated or mitigated the causes of the problem.
We just did the annual summit at http://www.thesmallbusinessweb.com and I looked at the industry landscape with Bjoern Hermann of Startup Compass.

http://blog.startupcompass.co/2014-saas-market-outlook

Basically my assessment is that we are blowing out brains out doing enterprise sales for low ACV sales. It is hardly the promise of subscription software as a money machine.

The problem is that there is not very well organized distribution channels so we all have to spend huge sums on acquisition.

Compare Zendesk's total account book size (40,000) to Intuit Quickbooks (5 million they have claimed).

That's what I would like to help fix with the SBWeb, our trade association. Tough problem though. Lots of things have to change first.
Fun read, but there might be a bit of mis-attribution going on. You could recreate the 4-day work week, the benefits and the communication methods and management structure, or lack thereof and that will likely do wonders for employee retention, particularly if your compensation is still competitive.

However, implying that these management and productivity hacks rather than the combination of good ideas, solid execution, clever marketing and lucky timing are what drive customer and revenue growth seems suspect to me.
You can admire Jobs for the good things he did while acknowledging the bad things. We are all human, all fallible, even our heroes. Sometimes, it's our bad deeds of the past that propel us towards the good deeds of later. Does that moment fully describe Jobs' life? Does his initial denial of his daughter Lisa describe his later relationship with her? I am sure not. Humans are not simple creatures.
I personally never bought into it since I could never understand the mechanism that took somebody from playing a board game (my reference point at the time was Monopoly and Chutes and Ladders) to all the kinds of terrible things being discussed. It never made sense to me so I didn't carry that around with me.

Instead I became deeply skeptical of my parent's ability to parse these kinds of issues out for my well being. Which of course led to all kinds of wonderful moments as a teenager ;)

Over the years I also discovered that my mother was deeply susceptible to counter-mainstream, alternative movements. So I also grew up with all kinds of weird fad diet of the year, carb-load, bran, high citrus, vegetarian, soy, uncooked veggies, low-carb, acai, quinoa, dozens of others, or a stint where we all did Chinese medicine and ate lots of ginseng or a brief stint with homeopathy. No surprise my mother eats gluten free today but I suspect that's about to change as the next fad diet starts to infiltrate popular culture - Metabolism B, Dash, Paleo whatever. I usually indulged her at home (after all some of the diets were pretty tasty) and just ignored it all when I was out on my own.

More importantly it's made me very skeptical whenever large groups of people cotton onto something. It seems the more intense the group interest in something is, the less I'm inclined to go along...whatever it is. I grew up almost anti-cool - skeptic kind of personality. It saved me from most of the terrible fashion fads that everybody I grew up with regrets these days.

But in terms of what HN would be interested in, I tend not to really "get" large scale trends either -- since I've basically been trained to revolt from them unless there's a clear advantage to following it. So it definitely had an impact on my thinking in that sense.