skysight-inc/HackerNews huggingface dataset:
His former employer is claiming that he worked on it on their time and that he stole code. He denies these claims and even offers some evidence to prove it.

So HN says he should have discussed it with them, he probably had a non-compete clause, he probably conferred his intellectual property to his employer in his contract, or that his actions are just in general bad form.

BULL - The companies claims are pretty specific and if they are false as he claims then their behaviour is indefensible.

I'm shocked that the HN community is in favour of this.
We are talking about new engines written in these languages, though, not multi-decade old codebases still using inline assembler, goto, and pointer arithmetic.

Modern C++ is really safe if you use the subset that involves automatic storage duration, well bounded arrays, etc and use all the warning flags of your compiler, run static analysis, have a robust test framework, etc.
I read a couple of paragraphs and I liked it. Will read it, even if it's not up-to-date :-) Thanks.
Not all languages with getter/setter support will invoke them automatically like this.

For example, it's not possible in Java or Objective-C to make an expression of the form a == b, where a and b are plain variables, have any side effects.
Exactly. I actually think the way they handle upgrades for users who bought after March 1 was clever. Those users get a non-MAS key that works. I also think that $50 is more than fair for this upgrade.
IRS misses XP deadline, will spend $30M to upgrade remaining PCs
Years ago, when I first heard about Python 3 and plans to improve the language my first thought was "Yes! Multi-line lambdas are coming!", then I started reading more and found out that Guido actually wanted to _remove_ lambdas all together. I still remember the state of shock I was in after reading that, and a sinking feeling.

The lambdas stayed, fortunately, but, unfortunately, I'm still convinced the whole project was a bad idea. The cosmetic changes which make Python 3 incompatible with Python 2.7 are just not worth the trouble of breaking the compatibility. Has anybody ever tried to estimate the man-hours needed to port the myriads of great Python 2.7 libs to Python 3 and weight it against the advantages of subtle language improvements? I don't think so. Plus, the big Python's problems like GIL are still there in Python 3...

If it was up to me I would drop Python 3 and focus the development effort of the community on improving PyPy and porting libraries to it.
These issues are all very similar to the difficulties with interaction between JS and C++ in web browsers. A lot of engineering and specification effort has been expended in browsers to improve these problems, on things like WebIDL [1], codegenned bindings[2], JITs that understand some of the behavior of the underlying C++ operations [3] and so forth, but for a game engine where you aren't running potentially malicious code I can see that it would make a lot more sense to just tell people to use C++ rather than expend that effort.

[1] http://www.w3.org/TR/WebIDL/

[2] http://jstenback.wordpress.com/2012/04/11/new-dom-bindings/

[3] https://bugzilla.mozilla.org/show_bug.cgi?id=938294
> This meant we needed to write a quick shell script to loop from 0 to 255 and try to output to screen the ASCII representation [...] The computer locked-up and we needed to hard-reset it

That sounds like you echoed a Ctrl-S character, which tells a terminal to stop updating; the opposite command is Ctrl-Q, but since that came earlier in your sequence rather than later, you were out of luck.

Try reversing the for-loop next time!
True, but that's something you can largely evaluate on the ground by re-lighting engines in a test rig. Also, even a couple of launches with the same vehicle would dramatically reduce costs per launch.
Maybe he means the Godot engine? I've heard a lot of newer kickstarters are eyeing it since it went FOSS.
I've seen one self storage facility in my town removed in favor of a commercial medical plaza recently.

Self storage buildings around here are just cheaply built steel buildings. They are easy to dismantle.
Also, although the first stage is quite large and has 9 engines, when it finally touches down it uses only the center engine, throttled down. Even using just that one engine, it produces too much thrust to hover (grasshopper can hover, but grasshopper is heavier than a returning F9 first stage).

The second stage is meant for use in a vacuum so it's expansion nozzle is much larger, so perhaps that extra weight would balance things out a bit, but I suspect that the second stage would have a massive thrust/weight ratio when reentering almost empty. Makes things more challenging, even if the engine does work in atmosphere correctly.
I'm not a scala hater. I've used it in production, and produced more than one open source library, and attended scala conferences at my own expense.

I'm simply pointing out that it doesn't have a rock solid base.

I would like to use scala more, but I found clojure easier to use and equally powerful in practice.
Compare:

- Pyramid of Doom (JS beginner)

- An array of functions in an async.waterfall (async module)

- A massive .then() chain (promises)

With: 'put the next thing on the next line' like every sync programming language you used before:

var fileContents = yield readFile('myfile', 'utf8');
console.log(fileContents)

This is the future.
ICP Gets Cryptocurrency: JuggaloCoin
What are the most productive ways to spend time on the Internet?
Absurd Easter Peeps Pie [pics]
I have a XPS13, the current 9333 model. It's nice, but it makes an annoying noise, and it seems Dell aren't going to fix it, so I'm going to have to return it. It seems this only effects people with good hearing, and work in quiet environments, though.
More info:
http://en.community.dell.com/support-forums/laptop/f/3518/t/...

I also wasn't impressed with the Ubuntu installation, it didn't work too well out of the box for me (sorry I can't remember specifics, so take this with a pinch of salt). I spent some time installing and configuring the latest Ubuntu, got to something usable but it was some work.

I tried the chromebook pixel before, but installing linux was problematic, and the specs are impractical. A shame as I liked the screen.

I will probably get a T series thinkpad now.
You just have to emulate the blurring inherent in a CRT display :)
They wouldn't but they might want a laboratory grown penis.

There's a lot less skin down their for them to create a penis with currently, so this technology could give surgeons a lot more to work with.
PMP certified PM here - I think the main role of a PM at any company, but particularly a software company, is as a story teller. By that I mean that you are responsible to take the team's status, and put it in terms the stakeholders understand (on the one hand) while taking the stakeholders' goals and putting them in actionable terms for the team to execute (on the other hand). Very few PM tools seem to facilitate this. Many of the corporate ones (as mentioned here and elsewhere) focus on completion in terms of tasks and dollars, and maybe resource assignment and forecast. That's because what folks REALLY want to know - how close am I to getting what I thought I was paying for - is hard to measure objectively. Both because the definition of "what you thought you were getting" is usually squishy, and how close is "good enough" is usually difficult to measure except in terms of whether there is money to make it better or not.

Waterfall tries to address this by making the "what you thought" as rigid as possible, but not surprisingly I can give you exactly what you asked for and you will find it lacking. Agile says I'll give you "good enough" often enough for you to decide when you're done as early as possible, but tends to be difficult to time box. My .02 worth anyway...
Using skin grafts and prosthetics they can already create the structures they want, so this would merely make a slightly more realistic looking structure, but probably not make it 'functional'. There's a number of active processes that would have to be reproduced, and I doubt there's sufficient existing wiring/processes in place to create the same effects. If you just don't have the wiring, it's difficult to make it work organically. But I can completely believe it will be possible in the future to create synthetic pumps to induce erection, and redirecting female ejaculation through the phallus should be simple enough.
In terms of being used for authentication, CRA and other online services usually require SIN + DOB + Postal Code, and then they mail you a 4-digit PIN to the address they have on file.

Hilariously enough, if you call them, you can change the address on file if you have SIN + DOB, making the "PIN" pointless (and irritating, since you have to wait several weeks)
Highly unlikely. iSEC is widely regarded as one of the best in the business. Having worked with those folks, I can see why.

At some point, you have to trust someone, even if they are out to get you.
Depends on your employee agreement, and where you live. Most of the companies I've worked at said that anything related to any of their business was theirs, regardless of the times that I worked on it. Since a large company does a lot of things, you're pretty much down to selling fruit or watercolor paintings of stuffed animals, if that. (I believe that Microsoft has a blanket "No moonlighting" that they want to apply to all jobs; makes those paying hobbies interesting).

My current employer doesn't care at all, and gives explicit permission in the employee contract. I can even write stuff that is in their business space, as long as I do it on my own time and equipment. Very enlightened.
>> you are locked-in to a largely "waterfall" model of development. That's way out of fashion for good reason.

I once worked on a multi-million dollar "agile" project that went off the rails until a decision was made to switch to a waterfall approach.

This is not to to say that "waterfall" is good and "agile" is bad.

If your methodology doesn't suit the culture of the people you have delivering the project, you're going to fail no matter what.

The problem is that these pm techniques get adopted organization-wide by executives who became "experts" by reading a few articles and books but don't spend any time becoming experts at the type of people they have working for them.
Functional JavaScript, Part 1: Introduction
> We have still to see the final leg design, and the ones in the CGI mockup video look, to my untrained eyes, very skinny

We have photographs of the actual production legs (folded away) on this current F9.

https://pbs.twimg.com/media/BlIDkwYCUAAiWXz.jpg:large
https://pbs.twimg.com/media/BlL4V42IYAAgZ1J.jpg:large
Many of the review peers work at Google, so eh...
"Benjamin, I want to say one word
to you. Just one word … ”

"Yes … What is is, Mr. McGuire?”

"Plastics.”

http://youtu.be/PSxihhBzCjk
Show HN: Our Open-Source Raspberry Pi Robot
We posted a Show HN a few months ago and got some great feedback on the design. Today we launched a Kickstarter for the project.

You can see our github repo and check out the start of our code and design here: https://github.com/DexterInd/GoPiGo
All things considered, pretty good.

No massive exploits; the worst problem was using too small a number of iterations of a keygen.

There were a bunch of other minor problems, but most of them were information disclosure only trigger-able by malicious software running in the encrypted environment (ex: finding out if a file you don't own exists) or things that could only be triggered by someone with raw access to the hard drive (at which point they could just overwrite your bootloader)

Although this explicitly doesn't cover a large chunk of TC.
Skateboards made from recycled fishnets
>>> speaking of locks in general it's easiest just to use a bolt cutter.

Which is why I never understood the Master Lock commercials where they shoot a bullet into the body of one of their padlocks showing how tough it is.
Most likely they would claim a reduction in competitive advantage if the employer CI was internal.
Agree. Think the late 1800's is most fascinating period in economic history.
Phil Ivey Sued: Latest Details on Poker Star's Lawsuit for Alleged Card-Cheating
Thanks for the hint, I'll have a look at it.
Considering that the 4 patients were teenage girls born without vaginas, it seems unlikely that they'd be able to tell how it compares to non-artificial one. Maybe that would be included in another study, on using it as a replacement (after injury/cancer).
A Proposal to Distributed File Sharing / Syncing
I would suggest increasing the maximum length from 5. Many applications that don't use iterated hashing schemes like PBKDF2 recommend much longer passphrases for security against brute-force [1].

[1] Off the top of my head: cryptsetup with plain dm-crypt recommends a random English sentence of > 135 characters length (i.e. a passphrase of 27 words at 5 characters per word).
Great talk, thanks for the link. I've used DJB's software for years, but this was the first talk I've seen.
I've used Jira's project management tools in conjunction with post-it notes to great success. At a very large company with lots of interdependent projects.

At the end of the day you don't need software if you have good managers (separate development managers and project managers if the product is big enough.) I've seen huge programs managed with nothing but Excel, Powerpoint and Post-It notes. You just have to retrain your executives to give you high-level vision and not try to micromanage it (I know, it's harder than it sounds.)
It IS a violation in many places and it should be IMO. See my reply above.

I'll try to dig up some relevant links to laws

Here's a relevant link.

"Employees Owe a Duty of Loyalty to Their Employers

...

Thus, an employee who improperly competes with his employer, assists a competitor during the course of employment, or makes use of the employer's confidential information to compete with the employer after termination may have breached the duty of loyalty.

"

etc..

http://shawvalenza.com/publications.php?id=68
> I don't think it will happen with Rust until it becomes more stable

Indeed. Most of the trail blazing work is being done by professional game devs in their spare time, hobbyists, indies and students who are willing to endure the pains of early adoption for the incredible gains that Rust gives them. It will only be post 1.0 however that the bigger players will be able to even consider using Rust. It's too risky to bet an entire company on – and that's coming from somebody who is willing to bet their indie project on it. ;)
Ugh, formatting.

Note: It's very obvious the validation code is in the wrong spot. However, after looking at it? It's so unclear what is going on in the validation code that I'd have to spend some time to detangle it.
>I would argue that this is a moot point since computer hardware is a commodity.

The cost of the hardware is recognized (in accounting) over the life of the machine.

>(would you travel with 2 laptops just to be able to claim you didn't use company hardware).

I have a really nice computer from work and an old laptop at home. I use my old laptop for all personal projects to avoid just such an issue.
That's a good approach. If the first stage engines last for 9 flights, then it's one engine per flight and usage is at equilibrium point with the upper stage. AFAIK the upper and lower stage engines are almost identical bar nozzle.
This ignores refurbishment cost. It is very interesting to think about the economics.
It depends. Is company worth fighting for? What would be your share if you keep your part of the slice? If that is bigger than compensation you would get, than it certainly is worth fighting for. It's not about vengeance, it's about founders own interests, even if that would make company worse off.

45% share of 100M$ worth company is still much more than 10% share of 200M$ worth company or 1M$ compensation. You are not fighting to optimize for the company success, you are fighting to optimize your own wealth. If the company gets destroyed, and you still manage to get more then what would be your compensation package, you are still better off then retreating. Why caring about the company that doesn't benefit you, you would certainly not enjoy the success of the company that squeezed you out.

So yes, lawyer up and fight if it's worth to you to fight for the control. Don't be emotional about he company and business. It's your weakness, and they are already playing on that.
Huh. I hadn't thought about multiple-image attacks.

Could that be mitigated by having TC occasionally randomly write random data to unused blocks?
Does this help us understand the work of Bob Ross any better?
While I applaud the nifty tool, we should be trying to get away from single-factor authentication wherever practical. It's also possible that the use of phrases could incur the same mis-use as passwords (common phrases, common words, reusing the same phrase on multiple sites, etc). Passwords just aren't a good idea anymore. (Side note: a lot of password fields i've seen limit you to something like 12 characters; how secure can our phrases be at this length?)
Race to Save a Child's Life and Find a Cure for VWM
Nice picture, butI believe that article is inaccurate and misleading. The powered descents over the ocean were not intended to actually recover the stage, but just systems tests. To date Spacex has never actually attempted a recovery of any of their vehicles, but the article says they have tried an failed and are now trying an alternative method using legs, where in fact this was the plan all along.
I forked the repo, but I think I will actually see if I can put it up in a non-forked repo so it'll be a tiny bit harder to take down. Also I am starting a private repo as backup on another git service.

They will never be able to shut it down now lol. I think the communication of the employer was really bad even if it's not that good to do the same at home as you are doing at work.
It's a little unclear what you mean by "modify", so just to be clear here: you can't alter an existing commit.

You can certainly fake any timestamp you want to start with, or you can create a new set of commits with a different timestamp (which is what rebase does), but you can't change an existing commit - the hash would be wrong.
weekly digestion activites...?
Not including insurance was a mistake. The Honda Odyssey has some of the cheapest insurance of any car.
Square Hires Amazon Executive Alyssa Henry as Engineering Lead
As a trans woman, I'm very happy about this sort of advance, but I question why I'm seeing it at the top of my HN feed.

A lot of people here seem to REALLY LIKE vaginas.

Just saying.
The last time I used Hugin was about 5 years ago, but at the time it was my go-to software for panoramas. To get the best results you want to have a good amount of overlap between the images, and make sure everything is very level. Here's one that will give you an idea: https://www.flickr.com/photos/joshbg2k/3382847846/sizes/o/

You can't see too much detail there, but I have a 6' long print of that image and it's perfect.
If they do a lot of consulting, they could have heavy third party approval processes or some other consulting workflow structure in the CI that "greatly" improves their customer experience or engagement in the dev process.

I am not sure that there would be a burden on the employer to even prove value though.
Dear Windows XP Users, Please Don't Migrate to Linux
I'm pretty skeptical about resale value on the Model S at 5 or more years out just because their newer models will have major technical advances and the cost of a battery replacement. It's hard to speculate on that right now since the car is too new.
The "hack" in question was just looping over a publicly accessible REST API for iPads that would reveal the email of a user with a given ID. This was trivial, as IDs were assigned sequentially by AT&T.
Disclaimer: I have not tested this extensively. This is merely an outline of the ratios involved, not a recommendation. Don't come after me if you get your password broken after reading this.

The goal is to make it at least as difficult to break the master password as it is to simply brute-force the resultant symmetric key. If the key is 256 bits long, this is true even for a one-round SHA256 KDF if the password has 256 bits of entropy. Of course, that's at least a fifty-character long alphanumeric password from /dev/random. A password structured for a typical human to remember it should probably be 5-10x as long or more to meet a similar standard.

Fortunately TrueCrypt does not use one-round SHA256, it seems to use 1000 rounds in a PBKDF2 construction. That doesn't mean we can use a password 1/1000th as long, because SHA256 is still very fast. Someone could use a Bitcoin ASIC to get a cost structure where hashing 1000 times is about as costly as verifying the aes256 key.

Speculation: You can maybe go down to 25 random or 150-200 human-memorable characters.
Same. I wonder how hard it would be to bake in some kind of local webhook system for that purpose. Haven't looked too closely at this, though.
OWASP do a decent job of aggregating currently accepted practice: https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet
For the purposes of border searches, the best approach is to use full-disk encryption and have a separate OS installed. You can then configure your bootloader to default to the plain OS and not to show itself unless a key is pressed. This will mean that the encryption is not obvious to the 'turn it on and look' inspection.

If you want to hide the presence from a disk image (for example), then it will be much more difficult. Truecrypt's hidden partitions can make it difficult to prove that the hidden partition exists, though if you're not extremely careful then circumstantial evidence can point strongly towards it.
The issue is that anecdotes come with a whopping big side of selection bias. Sure, it's technically "information", but calling it "data" implies rigor. There are a lot of alien abduction anecdotes, but this tells you more about humans than it does about aliens.
And when you read "go to the employer" and "the employer said", think to yourself: My company should have a clearly defined IP policy that states how to make these requests and hopefully an associated SLA.

I sit on our IP group as an R&D representative and there are other representatives from HR as well as Legal. This allows the group to basically handle any situation that comes up efficiently and employees have a clear single point of contact. We try to ensure no request takes longer than a week to resolve, but most take minutes.
I'm not OP, but I suspect it's a bit like watching a hyped sporting event. There's a build up, lots of discussion, some naysayers and the tech equivalent of trash talking. In the end you sort of expect something more exciting than what we got. It's sort of like watching the favorites secure a clinical win in the Superbowl. It's ok, but no one's going to be talking about it for years to come.

That said, as a Truecrypt user, this is good. I don't have the technical expertise to understand truecrypt myself, but a second set of eyes (and all the eyes watching that second set) make me more comfortable. Follow standard security recommendations and you're pretty safe.