skysight-inc/HackerNews huggingface dataset:
I wonder instead of notifying to select few parties with an embargo, if it would have been a better handled by releasing an encrypted sources with documentation containing the url to high availability server containing keys that serves only after pre-defined point in time. And documentation on integrity verification, accessment of the source changes and implications on other softwares using openssl.
Am I crazy for using PPP over SSH for this?

I enabled masquerading on the server for ppp0 interface and then I'm doing this on the client:

route del default
route add -host vps.host gw my_local_gateway eth0

pppd pty "ssh vps.host -t -e none -o 'Batchmode yes' sudo /usr/sbin/pppd" 192.168.16.1:192.168.16.254 local nodetach silent

route add default ppp0

I guess some of this could be automated in ppp-options but I never bothered as it's a simple script I can run at any time.
It can also depend on what is the easiest thing for you to hear. Take a look at this article:
http://blogs.reuters.com/great-debate/2014/04/14/america-the...

It's disturbing how much we look to confirm out preset biases.
Nice idea! I imagine that 90% of your sales (if not more) will come from wholesale. I think I saw you were reaching out to co-working spaces and so on but I'd ensure you're speaking with conference organizers, hackathon organizers etc etc.

The biggest problem there is that they will likely want their sponsors on the stickers rather than your set of startups...

Maybe you flip the model on it's head - get the startups who are on your stickers to finance the stickers and then offer the package for free to consumers. It's basically free marketing for these startups - maybe you share the customer's email address with the startup too in return? Feels like a small investment from each of the companies but you might get more orders that way?

just some thoughts
Prevention efforts could include ways to talk about your problems without being afraid that people would treat you differently or force you to do something you didn't want to do. There would have to be an absolute guarantee of privacy of course.
Wait, are you asserting that the LGBTQ community isn't an oppressed minority?

If not, then I don't see how you could possibly object to me calling a spade a spade.
Are there any business benefits to using LinkedIn?
I suspect that's not supported by the app store. An initial discount seems like a reasonable work-around.
Well, it depends on what you mean by "commonly understood under civil union umbrella". A lot of people mistakenly believe that civil unions are just a separate-but-equal version of marriage. That version of civil unions is a fairy tale.

Speaking as one member of a couple that finally gave up on making a civil union work and went ahead with an actual marriage a few years back, I can say that there's a night-and-day difference between the two. The institutional benefits that were available to us as a legally recognized civil union could be counted on one hand, and most of them were still not quite the same as what married people get. People who only have a civil union aren't allowed to share health savings accounts the way married people can, for example. The number of finacial and convenience perks we acquired the day after our marriage license got filed with the county clerk, on the other hand, are practically innumerable.

We feel like shits for exercising the privilege we enjoy as a heterosexual couple. But we're getting pragmatic in our old age, so here we are.
I wondered how this one got posted then. I did this url on the original story a day ago, glad to see it made the front page :)
Culture Eats Strategy For Breakfast
How does it happen that after being in the wild for two years the bug was independently found by two different security researchers at roughly the same time? I'm not trying to suggest a conspiracy or anything, just genuinely curious how that works!
I wonder if there was any special reason for choosing x64, other than that it's the most powerful architecture that is easily accessible. Will TempleOS (or some future version) ever be implemented for ARM or other platforms like the Mill? (http://millcomputing.com/docs/)

Edit: there is a lot of explanation at http://www.templeos.org/Wb/Accts/TS/Wb2/TempleOS.html - I guess I should have asked 'are you only interested in x64, or other architectures too?'
Here, just read Bernstein:

http://www.hyperelliptic.org/tanja/vortraege/20130531.pdf
This [1] forum post on nasaspaceflight.com says at stage 1 cutoff, velocity is 2,531 m/s (mach 6.76) and altitude is 84.1 km. The actual deceleration burn starts 12 seconds after that, when the stage has coasted up to nearly 100km and has slowed (slightly) to 2,479 m/s.

I don't think (?) this altitude and speed requires heat shielding for the 1st stage. The 2nd stage is jettisoned far too fast and high to make recovery feasible (for now!).

[1] http://forum.nasaspaceflight.com/index.php?topic=27748.690
Despite your cynical fatalism, the fact that the public's perception of the issues has been shifting rapidly in recent years suggests that people can change their minds. Just because you have no experience with changing your opinion on something does not mean that nobody else can or does.

Consider how absurd you would sound if you were suggesting that the zeitgeist on racial or gender equality was an unchangeable constant, making discussion of racism and sexism futile.
Why are you talking about Java? You obviously don't know much about it. I don't even say this to defend Java, because I don't like it. But you're apparently just repeating secondhand information about it.
There's a lot of interesting detail in the Metafilter thread about an earlier version: http://www.metafilter.com/119424/An-Operating-System-for-Son...
Canada’s Digital Privacy Act lets companies share customers’ personal info
My issue with the Cloudflare Challenge can be summed up in: no matter what the results are, it will give people a diminished impression of the bug's actual impact. I can't fathom any way in which the Cloudflare Challenge was beneficial to the security of their customers (or anyone else, for that matter), which should be the goal of bounties; not to simply be a PR move.
A few years ago the CRA messed up a tax return of mine and credited my payments to the next year. I got a letter from them saying your tax bill of $11k has not been paid, please pay it, and here are some interest payments due, also you have $11k in credit for next year.

So I called them up, waited on hold for 5 minutes. I spoke with a CRA rep who said "Yup, we screwed up. Fixed". And it was fixed. Total time to fix an $11K screw up? 15 minutes. Try that with any other organization.
Can I come up with a bit of criticism? This book does provide a great description of the details of the algorithm inner workings (very cute demons too). However, after reading this chapter (sorry I haven't looked at the other ones), there is still a feel of a bit of mystery about why it works, and even more why it might not work. Possibly is is covered in other parts of the book, so I apologise if this criticism is not justified. I am personally a big fan of Christopher Bishop's book Pattern Recognition and Machine Learning, where backprop is described as an architecture for efficient computation of multiple stochastic gradient descents... I was involved with NNs before, but only after understanding where the algorithm for individual neurons comes from, I could properly appreciate the benefits of backprop (and understand the drawbacks).
Ask HN: How do you become a security consultant?
Currently on a software developer path. I am enticed by the idea that I could have a single goal to work towards, such as penetrating, discovering vulnerabilities in a system. I feel like I can be free to 'hack' literally, come up with solutions.

However, I don't know how to get started in this field. Currently, it seems like black magic, in how people are able to discover zero-days and etc.

What are some actionable steps to ultimately become a security consultant, advising companies on vulnerabilities and fixing it for a fee?

1. Run sql scanner
2. Email report
3. Offer to fix
4. Profit???
Has anyone asked how two security researches supposedly found the same exact bug (that's been in the code for 2+ years) within days of each other? How likely is that?
Inner Platform Effect: "the tendency of software architects to create a system so customizable as to become a replica, and often a poor replica, of the software development platform they are using" - http://en.wikipedia.org/wiki/Inner_platform

Seems an appropriate term here.
You could use an anchor to scroll the page down to the results. the url http://stenographer-arithmetic-82316.bitballoon.com/#informa... seems to already do this correctly.
Calculation problems are a thing too, though. A huge corporation is still central planning, which isn't very efficient. That's why disruption happens, at a large scale there's a lot more room for error. That is, if they really are subject to market forces, which is always a good thing to question.
Basic economics already says we will never run out of oil. Sure it may be $10,000 per barrel, but it will still be available.
My problem is that if you're trying to figure out how key material is distributed throughout heap memory, asking people to answer that question about an unknown private key through heartbleed "peeks" is about the most obtuse possible way to find out.
Someone made a LoseThos Wikipedia page but removed it for lack of significance.

The CIA or NSA or somebody is really being evil. They don't know God is just.

God says...
comedy middle_class who_are_you_to_judge driving employer
I'm_feeling_nice_today You_know nevada fun that's_all_folks
clever I'm_done I'm_thrilled play
Autopano is great.

I've used the tool over the past few years to stitch together footage from Syria into media with a much wider field of view than handheld cams typically provide[0]. This includes everything from protests as previously linked to stitches that manipulate time some to highlight elements of a scene such as this stitch of a field hospital in Jobar Syria[1]. The persistence in my documentation such as in the kidnapping of Richard Engel[2] and others even earned me a mention in NYTimes, neeto.

Somewhere along the way Assad ended up using a munition system I stitched previously[3] to launch Sarin attacks on Ghouta and other neighborhoods, booo.

A smattering of other panoramas I've stitched including Mars and meteors can be found under my profile[4]. I highly support people stitching together media with free or paid software, as long as you expand upon a scene with faith.

[0] http://imgur.com/gallery/9Lq4w

[1] http://imgur.com/gallery/M4nVKYo

[2] http://imgur.com/gallery/1Hnqh

[3] http://imgur.com/gallery/C45Cw

[4] http://jurassicbark.imgur.com/
Security researchers are social animals. There might have been a hint on IRC or mailinglist somewhere, and the other team got on it.
PREGNANCY EXERCISE: STAY FIT WHEN YOU’RE EXPECTING
Great work! Keep moving forward. Best of luck!
Renzi e D'Alema igemelli perversi
It was a day after disclosure our ELBs were patched.
A lot of people don't _actually_ want to commit suicide. Humans generally speaking do not want to die, but when you're there, it feels like the only option.

I distinctly remember feeling that my brain wanted me to die, but I personally was not of the same opinion at all. So what I did was call up a friend and basically said "You have an hour to convince me not to do this". It worked, I'm here.

But I feel that when trying to commit suicide, you will instinctively do everything in your power to botch the attempt. Because what you're looking for isn't death per se, it's clarity and resolution. Mostly you just want "it" to stop, any sort of traumatic experience can be surprisingly helpful with that.
It's not your fault, like it's not your fault when children die of cancer. That doesn't mean we should find ways to prevent it. Most poeple who attempt or commit suicide don't want to die, but rather prefer death over life because they want to put an end to their suffering.

That said, I don't think talking about attempts will help someone who is suicidal in the slightest. If anything it leads to emulation suicides, also known as the Werther effect, see: https://en.wikipedia.org/wiki/Copycat_suicide
No, it's not hindsight bias. I have posted (and so have others) on many public forums for years about the need for an audit of OpenSSL and OpenSSH and there have been many discussions about the sad state of the codebase in OpenSSL.

I can think of a particular discussion on the cryptography mailing list at randombit from ... two years ago ?
Exactly. I wanted to play with the java code to try some possible optimizations but this is difficult without a test driver.
People don't want to have to root a device to work around usability issues. That's why iOS devices are so popular, out of the box they just work (for the most part).
It happens routinely. Allow me to illustrate: on a pentest a couple years ago, Vitaly McLain from our Chicago team found that if you accidentally slipped a NUL into a header that nginx reverse-proxied, nginx would short-copy (it used strncpy) and reveal server memory. We reported to our client, and in the time it took for them to OK our upstream report --- a matter of hours --- someone else reported the same bug.

What's funny about that is that the nginx bug is functionally identical to Heartbleed (modulo that it only worked on nginx).
Depending on the country, doing 1. and 2. may already put you in court. Wouldn't recommend doing that without company's approval, unless they're running a known, public rewards program.
Here's the thing though, depression is a treatable-ish illness. Suicide is a symptom.

Isn't the usual approach to at least treat symptoms, if you can't immediately cure the underlying illness?
The Untold Story of the First Woman to Fly Around the World
Previous active discussion (also not submitted with the canonical URL):

https://news.ycombinator.com/item?id=7585177
a 2006 base model Mercedes S class in 'very good' condition, with a hundred thousand miles on it, is like twelve grand, private-party value. (interestingly, a 2004 car is around six grand, both according to KBB)

I find it... unlikely that you will be able to sell a 2014 Tesla model S for $30K in 2022.
Google Making Bets On Drones And Robots
How would that not just be an overcomplicated way to do exactly what the reporters of this bug did anyways?
Analysis estimates of the cost of the car are about $56K

http://green.autoblog.com/2014/02/26/why-teslas-35000-model-...

That $20k motor is much less advanced than what's in a Tesla... So @ $24k I think its a bargin... what is the rest of the car? Aluminum and Plastic and a couple of computers...
Previous submission of this 2013 article (which I think is not the only one, as I remember another with more comments):

https://news.ycombinator.com/item?id=5615686
While it is true that "investment bank" means a bank that does investment banking, investment banker does not mean an employee of an investment bank. A trader at an investment bank is no more of an investment banker than a backend software developer at the same institution.
https://news.ycombinator.com/item?id=7589498
This definition of "wealthy" seems really, really arbitrary. My ancestors made a living by exporting lumber which was chopped by hand, and came close to dying of cold and hunger four or five times during the early 1900s. By that measure, we are all living like kings.

You could live comfortably for the rest of your life on much less than $10MM in assets, even in the absence of an income. So I'd say if there's an absolute limit to "wealthy" in our geographic region, it would have to be "don't have to work for a living", which would be around $1-2MM for a middle-class lifestyle and a 4% annual return on capital.
It is not suicide attempt if you are not planning to die. For example drug overdose is not necessary suicide attempt.

Men in general are treated like a shit, so they kill themselfs. Most women are emotionally blackmailing their families.
Apparently country size and population centres are anecdotal, dismissed with a hand-wave? Besides, your 'real facts' video tells us pretty much nothing about the differences between Canadian and Norwegian driving habits, and whether the vehicle is as suitable for Canadian conditions as for Norwegian. "Suitable for Canada" is not just "the vehicle can drive in snow".

A 300km range with a long refueling time is a considerable factor for Canadians, something the video says little about. The distance between Toronto and Montreal is about 6 hours of driving, which in turn is two times the cold-weather range of the Model S. Given that you generally want to refuel before you hit rock-bottom empty, and that battery performance will degrade over time, that means two recharging stops in the Tesla, where you'll have to wait for half an hour while the car charges. That adds an hour to your journey, and means getting out of your car (in the cold) twice when you can get cars where you don't have to do that at all.

I don't know why you're apparently put off by the idea that people in big countries with good roads have better driving endurance than people in small countries. It's no different to saying that the Norwegian public have a stronger maritime tradition and are better sailors. Far more Norwegians own or operate boats per capita than any of the 'big country' places. Should I post a video of Canadian fisherman to 'prove with facts' that there's no difference between the Canadian and Norwegian public when it comes to maritime choices?
Methane hydrates are not oil. This article is amateur nonsense.
Good point. It kills me,however, when people quote a stock price when they really should talk about market cap. Stock prices are basically arbitrary unless you consider shares outstanding.
Perhaps they read the same article or attended the same talk, and something in the article or talk triggered a similar thought process.
That's a good way of doing it. I would have prefered scrypt but PBKDF2 is good enough. (Something changed with HN recently, I get the downvotes too.)
I think the vernacular is that you can indict a ham sandwich. But yes, my point is just that no matter what US jurisdiction you work in, you probably won't go wrong by adopting the most conservative interpretation of your employment contract.
The article doesn't really say the product is good, just that a lot of people said it was good... which isn't quite the same thing. Also from the article:

"The demo and the app, some employees came to realize, were not the same thing. When it came to the actual app’s progress, multiple sources say Duplan wasn’t always straight with his employees."

Sounds like it could be a real-life case of "Important Corollary Two" from here:

http://www.joelonsoftware.com/articles/fog0000000356.html
Sure, he could be on everyone's side and trying to clarify the issue. If so, he's doing a rather poor job.

However, it seemed rather obvious that he had an intention to take some sort of stance on an issue, something he also failed at.
It's hard to tell -- I tweaked it quite a bit, and rewrote it from scratch 2-3x. I'd say 4-10 hours.

Was it worth it? As a programmer, no. I'm very familiar with scraping (raw) web/RSS feeds for data, then processing it. I was hoping Pipes would have enough intelligence, so that I could subscribe to (cooked) data sources, then split and refine the results.

In practice, Pipes worked, but the data always required further post-processing, which was awkward to do in Pipes. You have to be a dev to understand what your system is doing, but you don't have easy access to all the standard dev things.

I look forward to seeing Pipes take off, or another technology (Huginn? Ifttt?) replace it. It was a lot of fun to wire things up graphically then for example get a text when someone's RSS feed changed.
How does it happen that two people ask the same question in a comment at roughly the same time... ;-)
This post consists of 1) an undocumented / unproven assertion, 2) a laughable generalization, and 3) an offensive generalization.
Assuming "re-entry" means "to decelerate from (near) orbital velocity" and not "to pass from vacuum-to-atmosphere", isn't this a solved problem for fast high-altitude jets (e.g. SR-71 Blackbird, 3,529.6 km/h). Wait, I see the problem:

((3 529.6 * 1000) / (60 * 60)) / 340.29 = 2.88120263

The fastest jet plane only does 2.88 mach... not 10+ mach.
So, if we switch to using methane hydrates and shale gas instead of coal and oil, we will be emitting less CO2 - obviously not as big a step away from fossil fuels as going all renewable (and/or nuclear), but seemingly better than doing nothing...
I've had the same problem with this and other "real glass TTY"-type fonts, and have yet to understand why the font authors don't provide a version without the scanlines, for use with terminal emulators which don't go so far as to emulate a CRT display.
1. Men are more "successful" because they tend to use more violent methods - guns, jumping off high places, etc. Women are more likely to use pills. Sometimes attempts are more of a call for help than ending one's life.
2. Your question is unclear to me, but most people who have attempted and failed to commit suicide regret that decision.
Opinions on Ionic framework for mobile apps?
Have any mobile devs used Ionic to build apps? If so what was your experience like (& would you recommend it)?
Total Lunar Eclipse of April 15
That's a bit like saying 'we haven't run out of food' when there's only half a jar of mustard and some salt in the cupboard.

Actually, it reminds of a housemate I once had who often ate other people's food. He would respond "Well, you can help yourselves to the food in my cupboard"... which was, in total, one lemon and a quarter-kilo of flour.
Can you elaborate on this? I think it would be virtually impossible to prevent suicide, not to mention various things perhaps not treated as suicide but which are self-caused deaths (repeatedly engaging in very-very-high-risk activity, for example).
for every single subtype you add, you still need to add a case to each of your visitors.

Why is this a problem? If you have N visitors, that's N different behaviors for every type, and you'll have to define those N behaviors for a new type somewhere. In this case, you do it on each Visitor (since each Visitor defines a behavior). Without using the Visitor pattern, you might put the behaviors somewhere else, but you would put them somewhere.
This is not claiming to be a complete list of who knew what when. It is only a list of confirmed cases.
As far as I can tell, that's still just a little local syntactic sugar for making composing generators nicer. There's a still a fundamental distinction between generators and other functions.

Think of it like this. Let's say you have a chunk of code that you want to refactor out into a separate method. The usual way to do that is to pull it out into a separate method and then call it from the place where the code used to be inline.

In languages with coroutines, you can just do that, regardless of what's in that chunk of code. In Python, you have to think, "Oh, does this chunk of code contain a yield?" If so, you need to do a "yield from" the function you pulled out instead of a regular call.

It forces you to constantly be cognizant of and design around the split between normal code and generators.
Pagekite dependency on Python was deal-breaker for me a few years ago. If they would have clients in multiple programming languages so it can be easily embeddable, they would get a lot of business. Prices could be easily higher too.
Pass v1.5 Released, with Awaited Team Password Management Support
Why The Open Office Makes You Distracted, Exhausted, And Insecure
In America, you are better off putting it in your sock under your foot. No TSA search includes the bottom of the foot, and you'd have to really arouse CBP suspicion to get them checking out your feet.

But, to answer your question, no, airport security screeners are not x-raying for objects of that size. If visible at all, it would be ignored.