skysight-inc/HackerNews huggingface dataset:
Nonsense. The copyright belongs to the copyright holder. I know GS like to steal every fucking thing in sight but claiming copyright on a piece of Free Software just because its received a copy is a new low.
PossitiveSSL2 (Comodo) through a reseller (I use http://cheapsslsecurity.com/ -- $5/year/5years)
About `undefined`, that’s not true anymore in ES5, btw.
That's not the point - the point is to stop them from updating to a new version and blacklisting the new method names. They already have a license that allows them to use the existing code.
I agree we should not draw any conclusions from my arithmetic above. I just couldn't resist the opportunity to correct someone's math on HN :)
Still not a fully optimised DFA solution though (although neither is Boost.Regex afaik)
This should be on this list http://www.amazon.com/How-Solve-It-Modern-Heuristics/dp/3540... single best technical book I have ever read.

Also, if you ever need to give a gift, http://www.amazon.com/The-New-Turing-Omnibus-Excursions/dp/0...
"I don't see how one user (the founder) being super excited translates to a viable MVP "

Less excited people simply won't bother building it.

It's that simple.
The things that caught my eye were both related to IBM hardware features.

Firstly, apparently IBM chips have hardware transactional memory now:

PowerPC / PowerPC64 / RS6000
GCC now supports Power ISA 2.07, which includes support
for Hardware Transactional Memory (HTM)

S/390, System z
Support for the Transactional Execution Facility
included with the IBM zEnterprise zEC12 processor has
been added.

That's pretty cool.

Also on the 390:

S/390, System z
The hotpatch features allows to prepare functions for
hotpatching. A certain amount of bytes is reserved
before the function entry label plus a NOP is inserted
at its very beginning to implement a backward jump when
applying a patch. The feature can either be enabled via
command line option -mhotpatch for a compilation unit
or can be enabled per function using the hotpatch
attribute.

I guess if you're doing high availability the mainframe way, you don't get to restart your apps to patch them. That's terrifying, but again, pretty cool.
Previous discussion of the original comic: https://news.ycombinator.com/item?id=7571947 (514 points, 1 day ago, 74 comments)

(and 3 more submissions with only a few upvotes and comments)
The Complete Coward’s Guide to Starting a Company
How about we open a radar? Is there one yet? The engineers who read those are not entirely unreasonable... just really busy.
I use Mogenerator to just generate the entities. Not actually use the methods.
Groove actually still exists, though it's gone through a bunch of branding and strategy contortions:

Groove 2006 -> Microsoft Office Groove 2007 -> SharePoint Workspace 2010 -> SkyDrive Pro -> OneDrive for Business (the current product)
Undoubtedly these excellent books call for a unique
presentation. I, however, would like to see
simple text-only list companion to go along with it.
Turns out, this is not just a matter of grep'ing
through the source: the only actual "text" are the
link URLs.

I wrote a script[0] to create the list for amazon
links at least:

# Script redacted - I think HN isn't happy
# with my scraping. Fair enough.

The list contains 44 entries -- to much to post
here, I'm afraid.

[0] Using the `mojo` cli tool for ad-hoc HTML parsing
from
http://mojolicio.us/
Idea is that the next version of mogenerator uses new method names, and that version says "Apple can't use this". Apple has no motivation to change the method names they use to match the new mogenerator if they're not using it, so nobody else is affected.
When someone asks why not outsource the coding to India, point them to this page.

The first Indian winner is #236, but if you go to the last page, there are a bunch of them trying.

EDIT: I'm gonna make a script to list the best countries that output programmers.
Thanks for pointing this out. I have now changed this to just "No interpreter involved". Except for not interpreting or JITing bytecode it's indeed very much a VM. E.g. it presents the same memory model and threading model to the running app as a desktop JVM would.
Add specified damages for doing so (be bold! be creative!), and mandate your choice of legal venue (obviously somewhere that the loser usually pays both parties' legal costs, and where it's relatively easy to get lawyers to work on contingency).
Spotify/Trance playlists. Spotify has a great selection of curated playlists that help the brain get focused and get into a productive un-emotional state.

I also keep a second laptop on the side (apart from the desktop workstation) so that I don't have to context switch for my music if I need to.

I have tried a lot of different music. I've found trance to be the most effective for me. Also vocals are great when I am trying to do light work but not for heavy coding sessions.
Downvoted? From a woman. Point Made.
We're using a webapp we've created and are currently working on. Since it's player as well as playlist are both collaborative we can schedule songs/youtube videos we like. Hearing can indeed be a way for noticing server/code issues.

http://co.lou.rs/#trance
>If you go for something other than wholesale freedom - 'freedom with restrictions' - then you find yourself in the position where there is going to have to be somebody who creates and polices those restrictions

Yes, and this is what civilization has done since time immemorial. Where did I argued against this as a practice?

What I said boild down to that people that recognize this need for "policing" can also recognize a need to restrict the powers and information given to those doing the policing, and that there's nothing contradictory about it.

>And freedom is a binary choice unless you restrict the problem domain from 'life' to some subset of life, in which case all such subsets must be 'free' in order so say one is free.

I don't think it's a binary choice. In some ontological, philosophical way maybe you're right, but people understand that it's perfectly fine to call you "free" is you are not a slave and can say whatever you want, even if you're free to, say, drink and drive.

This "restricting the problem domain from life to a subset" has always been the case for freedom. You don't have the freedom to come and kill me, for example.

>If one is not free there logically must be oppressors. You see? All we've done is reshuffle things.

What we did is far more impactful that reshuffling, we changed the scale of constaints. And quantitative change also brings qualitative change at some point (like water after some temperature starts to become vapor). In this case, we went from 20% freedom (say in medieval times), to 70% freedom. Suddenly, you got something there.
Three to four hours of practice a day is quite a lot, in comparison Johnny Ho (http://www.quora.com/TopCoder/Who-is-Johnny-Ho) only did about 1 or 2 a day while practicing for IOI 2012

Source: me asking that exact question to him at IOI 2012
It's a marketing issue.

StartSSL can make free certificates because the entire system is automated (until you require Level 2 certificates) so the cost of operation is very low.

My guess is that the revocation is not entirely automated. There might also be reasons other than technical why it's not the case. In any case, if they explained the reasons it would put some perspective on their point of view and help people understand.
How about this from last year? http://www.go-hero.net/jam/13/regions
A tangential, but this complexity is one reason I think that sales tax should largely be abolished in favor of rolling it into income taxes. The only context it makes much sense in is taxing various luxuries. Beyond that, it's confusing, adds administrative overhead, and discriminates towards those with lower incomes.
I knew there was something I liked about this list. (aren't there enough of those already?)
Price tags are one thing. The region-wide ads for Kroger saying "milk is on sale for $1.99/gal this week with your Kroger Card" are another. A broadcast TV ad like that might be visible in 10 or more different sales tax areas. Having worked in retail, I have several anecdotes from customers getting annoyed over even the smallest pricing discrepancies. I had one shopper complain about being charged less than the price in the mailed circular on the theory that the chosen product was of lesser quality than the advertised product.
15 GB was presumably with LTO enabled, you could always build it on a fairly average laptop with it disabled. This is great news though, as LTO is pretty awesome.
Edge of the abyss
My current employer has a bunch of sites like that as well - abandoned projects from years ago that have since been replaced by new things, but the website files are still there and the virtualhost block for it hasn't been removed.

The scary part is that these sites still manage to make a few sales each year.
I've had plenty of server friends who've had to do this and didn't get fired.

In larger companies where payroll is handled by software, they'll do it automatically.
The problem with this analysis, as with most libertarian analyses, is that it ignores externalities. The security of x.509 is a cooperative endeavor. The continued existence of compromised certificates from any CA undermines the security of the entire internet because you can no longer trust the browser padlock icon. So while it is certainly arguable that Start could justifiably refuse to provide a service for customers who have never paid, it is a much harder case to make that Start is justified in undermining the security of the internet because it chose (wisely or unwisely) to provide certificates for free.
I don't see what's so bad about excluding Apple in the license. I mean, they're not really playing nice here. Perhaps unintentionally so, but if that's how they want to carry it then they can write their own thing for the Photo framework.
One thing I did not like about this years problems was I never could get the minesweeper one. And I could not decide if it was my formatting or my answer. I think my answer was right though... ah well. no worries.
I have no problem with them asking for money to issue a new certificate, but revoking the old one when it is compromised is an obligation they took on when selling (or giving it away) in the first place. An obligation to Mozilla and others that have put them in their trust store if I may add.

It is the same reason we have mandatory recycling provisions. Just because your shit is free doesn't mean we have to sit by and watch you pollute the world.
The conclusion i have come to after reading about Heartbleed is, that OpenSSL's code is a giant monolithic mess and does everything on its own from the ground up in a highly optimized way for each and every platform, thus breaking the simple rule "do not trust the client, ever" could stay undetected.

Adding a Bitcoin miner to the mix would worsen the problems.

I think OpenSSL needs professional structure - organization and code-wise to gain funds and harden the system. This was discussed in other threads on HN already, i am of the opinion that they could pull this of, if they wanted to invest time into it.

For consumers i could imagine a system library or framework, which applications could depend upon. This way the mining would be encapsulated. The user could get some control options and some information dashboards. The apps would then talk to the miner and ask for a share.
I've been working for a number of years on a product of similar nature.

If I switched companies to make a new system from scratch, it would take me a non-trivial amount of time to replicate a full system, and I probably wouldn't do it the same way. Even if I did it the same way, it would be hard work. During years of work one encounters many little problems, glitches, and even random ideas that don't come to mind so easily.

Obviously the previous experience helps a lot but having your old code basically bootstraps you. And the reason that coders in this sector are paid well, is that obviously the expertise is worth more than the code itself looking into the future. But still, if you do something really stupid like giving them an excuse to lock you up when you're going to a competitor, then you're screwed. I'm pretty sure Aleynikov would agree with me that he fucked up massively by taking his code home. If not, then he'd be out of touch with reality. The very thought of trying to do what he did makes me anxious. Big corporations are powerful and can fuck your life up.
I might be doing GCC a disservice but I'm pretty sure the various sanitization work has come from LLVM/Clang.
"That makes no sense whatsoever. One does not simply refuse to show up to testify to Congress! I mean, if you want to talk about things which are disastrous for a democracy, having the Executive routinely ignore their responsibility to testify on their actions to the Legislature would be right up near the top of the list!"

Of course it makes sense. If the questions were pre-approved as I stated, he would not have had to refuse to show up in order to avoid being put in this situation. He would simply have had to not approve the question - which would have been the most in line with his obligations and least misleading to the rest of congress and the American people.

There is apparently some dispute as to whether the questions were, in fact, pre-approved. But as you hadn't contested it, I think it's fair that it remain the assumption for this sub-thread.
I'm American, but this kind of statement pisses me off: just because some people from India didn't perform well in the Google Code Jam, we shouldn't hire them?
No. I just think it's odd he hasn't included it that's all.
A stamp of approval if ever there was one.
Thank you.

What, however, hinders adoption as a "working man's"
TLS library? Neglecting performance and variety of
cipher support, would or should anything prevent me
from using Tiny TLS to secure channels between
"inner circle machines" (that talk to a set of
well-known participants)?
> just 25$ to get a new one

Due to $0 price of certificate I guess many had considered it would be a good idea to have a certificate per service, i.e. a separate one for HTTPS, email, XMPP and so on. I did. The overall thought was that if one service would be compromised, others would likely remain safe - but Heartbleed had completely changed the story.

In my case if I'd revoke all the certificate it would be about $600. Call me names if you want to, but I'm not going to shell out that much. Guess, many others would think the same.

I've updated OpenSSL but if any certs were compromised, they would stay so until they would naturally expire.
For another view on this process, see Joel Spolsky: http://www.joelonsoftware.com/items/2008/05/01.html
> The continued existence of compromised certificates from any CA undermines the security of the entire internet because you can no longer trust the browser padlock icon.

True, but my guess is that StartCom doing free revocations / reissues would only make a tiny dent in that situation.

http://news.netcraft.com/archives/2014/04/11/heartbleed-cert...
Or HUMANFile.
There's not really much difference between the top 1000 places, since all that matters is solving all 4 problems. This is the qualification round that goes on for 27 hours, so there is not much pressure to solve the problems fast. The Indian programmers are in a time zone that makes it difficult to get up at 4:30am just to solve the problems a bit faster.

Comparing the performance in the next few rounds would make more sense.
Grooveshark -> my collection -> play all [-> shuffle, sometimes]. At times I also put on specific playlists, but that's not so often.

The downside of Grooveshark is that there are no hotkeys, but I don't really miss them that much. I've got volume control keys on my keyboard and that's enough. On the upside, it works in the browser so I don't need a special Linux client.
To be fair, C large has the biggest score of all subproblems.
Is NextDayVideo still the recorder for the 2014 pycon? If so I wouldn't be surprised as they have deep experience in this space.
Something I start to notice that more and more questions are being closed as duplicate pointing to another question which only sounds similar but when you look deeper it is different.
For now you'll need Xcode to use RoboVM which implies Mac OS X running on Mac hardware or in a VM (it can be done although Apple doesn't allow it unless you run the VM on Mac hardware).
Timing the HTML5 Application Cache
I tried the identifier route before, but there's always a few smart aleks who detect and refuse dictionary words, maybe even the domain name (can't remember exactly). These types of "systems" that live in your head, would be the best way to go if it weren't for banking, financial institutions, and government run websites.

With that being said I use LastPass for the high priority stuff and 1 basic password for sites I could care less about. Never lost one of those basic accounts yet.
works great in firefox also
How the NSA shot itself in the foot by denying prior knowledge of Heartbleed
it might be worth looking at using a different kind of license: https://www.gnu.org/copyleft/gpl.html comes to mind.
And yet the US has had far more wealth the next decades, per capita and in aggregate (adjusted for inflation) that it ever had back then, right?

So it's not like the new ruthless environment is a result of budgetary restrictions.
A World of Hardware Startups
> It isn't compromised.

The private key being not private is the very definition of "compromised" when applied to the CA security architecture. Whether StartSSL has a different definition is completely immaterial to the Mozilla policy.

Now you're right that it's not StartSSL's fault that OpenSSL suffered Heartbleed, but nor is it the various end customers' fault (unless they introduced the bug themselves?). So pinning down the response to this as a simple exercise of assigning blame and responsibility completely misses the point and does nothing toward resolving what is admittedly a very difficult question.
Certain ... private enterprises, as well. It's very unlikely that bug bounty prizes can be made to match the kind of money you might be able to get elsewhere for a big bug; but they don't really have to.
Agreed, it's a loose analogy at best. The juxtaposition just struck me, mainly because it could be viewed as singling out the real difference, which is how the code was handled.
Half a million - plus bonuses, which can often be 5-10 times your salary.
Here's the beginning of the list[0] ('Design' and 'Engineering') in plain text (Markdown), using the "I can just type it out faster than I can try to parse it" approach. I'll do more later, maybe.

The 'unique presentation' also seems to mean no alt-text (bad) and no title-text (disappointing)...

[0]: http://pastebin.com/9NKtqJSw

Edit: Added a little more[1]. Maybe someone else will add some while I go write an exam :)

[1]: http://pastebin.com/J0vi5uvJ
@EDIT: Sorry, that was me. I've misclicked the wrong button - meant to upvote, and there seems to be no way to undo. Nonetheless, I disagree.

> Do we go back and ask to revoke our certificate again? Free of charge?

That's right, ask to revoke. In current system, considering the position CAs' are in, trust is primarily their problem. If CA's not revoking the certificate that's compromised, it's CA who's to blame, not server administrators. Not sure about server admins who don't want to pay, but end users (those who see the false green padlock) have full moral right to call such CA "evil".
It just takes a bit of practice. Once you've seen a certain type of problem before, it is easy to identify other problems that can be somehow reduced to a known problem. Speed comes with practice too... soon, basic constructs like for-loops just get etched into muscle memory. Don't worry, I couldn't even solve a single problem in my first tryout at my university.

At my university, after a practice session, we sometimes discuss solutions to problems so that those who couldn't figure them out will know how to solve them in the future. After being told the solution to a problem you couldn't solve, you should try coding it up anyway.
That would stop apple from using it.

Would probably stop most current users as well.
Practice and Learn for the Google Code Jam
"Not more than three to four." != "Three or four hours practicing every day consistently"

Also, this guy has been performing at an extremely high level for years. If he didn't do any competitive programming practice at all for a year, I doubt you'd notice a big difference in his performance.

Some of the top guys at Topcoder Open / Google Code Jam don't even participate in matches outside of the yearly tournament and I doubt they are practicing consistently (i.e. once you get to that level at problem solving, performance doesn't seem to decay much and certainly much less than in a similar situation for athletes - though these guys are students / engineers whose brains are still being stimulated and solving other kinds of problems outside of competitions).
Hm, by that argument I guess they (and all other CAs) should just revoke all of the ones on servers that are/were vulnerable without user intervention. I can't imagine that would make them any more popular, although it probably would be the right thing to do.
Windows system DLLs have pointless "mov edi, edi" instructions in function prologues to enable hotpatching. It's not just mainframes ;)
maloader and Darling won't, they require Linux. LLVM works fine on Windows. I'm guessing the RoboVM front-end is also fairly portable. The effort to port ld64/codesign to Windows would probably be similar to the effort to port them to Linux.
I was going to recommend this one. Conceptual Mathematics is wonderful in that it provides a narrative of intuition instead of just the proofs. It's kind of like seeing How It Is Made for algebra.
For real - I'm super excited there's 1500+ of them!

Hardware is going crazy right now!
It makes me angry because it's disrespectful to the worker, and sets them up as some sort of quasi-independent contractor. It also makes me angry because it conceals the actual price of the meal, but that makes me less angry because eating at a restaurant is a luxury anyway.

I always tip 20-25%; my anger isn't that servers need to be paid, it's that they're not allowed to depend on it.
It's dangerous if you're dehydrated and drink a lot of soft water (that's the term for water with low/no mineral content) at once, otherwise it's okay as long as most minerals come from the diet.

Tap water in most places has a GH/KH of 0 (to avoid clogging pipes with carbonates) and nobody dies from it.
Or have the build system check if the SDK name ends in ".internal" and change the name and/or complain if so.

Seriously, adding licensing requirements is silly when most likely the engineers responsible just need to know what's going on.
Unfortunately, licensing restrictions like that would make it incompatible with the GPL. One way around that would be dual licensing: allow people to use either the special MIT-but-no-Apple license, or the GPL. Presumably Apple wouldn't touch the GPL option.
Well, many people who actually worked with him disagree with you. I'm not sure what that means, there are definitely a few possibilities, but I think it's worth at least acknowledging that maybe you're wrong.
>It sucks because what is the other thing to do?

Quarantine them in separate spaces?

I mean, DUH!
>On current hardware, RPC is expensive no matter how you optimize

You mean IPC? While hardware support could make it faster, it is already plenty fast. The whole "L4 only introduces 3% overhead" thing is pretty old news at this point.

>I have played a lot with L4

Then you should know that the performance myths that come from mach's slowness are not accurate.

>Any user or application can't replace a privileged system server

Multi-user systems are a vanishingly small minority at this point. I don't think "you need to be in control of your computer" is a huge show stopper.