skysight-inc/HackerNews huggingface dataset:
Same here. Using angular ui at the moment, but I'm tempted to switch to angular strap seeing this.

I wonder the opposite though: does anyone know what the current angular strap does NOT have, but angular ui does?
Help Me Write – get your audience to help you decide what to write about
This is early release, but still fantastic: http://shop.oreilly.com/product/0636920031116.do
Why did Java (JRE) vulnerabilities peak in 2012-2013?
I was glad to read this, but then today I noticed a new comment by Eich clarifying that no one tried to convince him to stay as CEO.

http://dutherenverseauborddelatable.wordpress.com/2014/04/07...

Perhaps your understanding is a little off. Maybe it's a prudent position to go back to not really knowing what happened between Eich and the board.

Anyway, I'm done being angry at Mozilla. You guys are doing an important thing. Calls for a boycott are counterproductive and will only hurt us all. What's done is done.

I just can't quite find it in my heart to support you anymore.
It's open source, everybody can decide to invest his own time to do the fixes.

However, the functionality openssl provides is much bigger than most of the commenters can imagine. It's not easy at all.
Get. It. In. Writing. Number zero rule of doing business, especially with friends.
What language other than C would allow code to be used from all mainstream languages/frameworks? This is a critical requirement for a lib like openssl, having N such libs for N languages would be a nightmare.
The point is that in Haskell you could reasonably define a 'biggish-num' type where only strict and constant-time operations would be possible - you couldn't forget to make an annotation, you'd have to explicitly ask for the value to become a 'normal number' before being able to make any such operation.

In C having such a 'safe buffer' struct would require discipline from you, in Haskell that'd be the natural order of things.
Actually, they seem to be taking 'enterprise' seriously now (JIRA Data Center and Confluence Data Center are in beta currently).

Promoting their Enterprise Advocate to Enterprise Czar (or BOFH) would be good, so that person could finally force the dev teams to think of scalability first.
Yes. If you run something sensitive, you should also consider:

- Invalidating any open sessions (i.e. cookies), since those could have been stolen.

- Force password changes for all users (since those could have been intercepted in memory)

- Change internal passwords.
Haskell is not a theorem prover, and I doubt it can be made one. You can encode some properties of data via the type system, but it's still a general purpose language. Agda on the other hand is a theorem prover, but much less general purpose.
Actually, perfect secrecy refers to the ability to determine any information about the plaintext at all, given arbitrary decoding power. It's quite simple -- it means that given a standard distribution of keys and an a priori distribution over the plain texts the best estimate of the plaintext given the ciphertext is simply the a priori distribution (no additional information). For the binary case, Y(any distribution)+X(uniform)=Z(uniform) (mod 2), so that this is satisfied for any prior.
the documentation does not mention which browsers are supported / tested. Is it IE8+ or IE9+?
join the army... write code in your down time... get a girlfriend... smoke some pot... go back to school when you have a clue.
Don't forget x64 SEH. From http://www.nynaeve.net/?p=105 :
"This layering violation is not the most egregious in the x64 exception handling scene, however."
> I know this is harsh...

I wouldn't call your comment harsh, exactly, more along the lines of some combination of:

- offensive
- inappropriate
- ignorant
- transphobic
- confused
How can a library of this size and importance not be run through a linter, with violating patches rejected? And why is a cleanup effort of the simplest stuff not undertaken?

And with it being C, doing a proper operator spacing+indentation of the whole source should be as easy as running it through a tool (yes, auto indent is always better than a broken indent).

What's the next discovery? The core is all php and there are zero tests?
The placement of any site elements on top of the scrollbar is indeed annoying. Is that a Blogspot thing, or is it due to a customization?
Is this entirely impossible with (fun) physics-related jobs?
DeepBeliefSDK: image recognition framework for iOS
Google's Helping India Vote
I think it's actually the opposite, as I've also just started doing the same after almost losing my father and with a family on the horizon.

I'd say it's actually because of these 'commitments' that you've finally got something worth staying home for.
Wow... the lack of business skills is thick in here. Don't ask them to "put a number on it", they can't be both buyer and seller...

What is your time worth? $100 bucks an hour? $200 an hour?

How much would cost you to recreate it? Are they asking you for a non-compete? Do they want exclusive ownership? or just asking for a license and you own the rights?

If this took you 4 weeks @ 30 hours a week and this is your first project... it would probably take someone who knew android 1 week (40 hours) @ $125 per/hr so $5K?

Ask some questions... develop a friendship with your customer... find out what they are doing and what they need it for and how they'll use it... use that to set a price.

This is a stepping stone... be greedy and it will get around... be a chump and that will get around too... If you think its worth $10k ask for it and be flexible when a counter offer comes in... you don't exactly have other offers floating around.
you'd have a define with an understandable name instead of just the magic constant 20.
I'm quite interested in the topic of modern day slavery and sex trafficking. The article was made frustratingly difficult to read.
The problem is that a memory unsafe language leaves gaping holes. Protection against timing attacks doesn't help me if one can read my private keys (remotely!) with a simple Python script. Timing attacks at least require colocation in most cases and are much harder to implement and run for meaningful results. It's certainly worth thinking about how we can put memory problems to death in at least crypto code and imho C has proven to be a permanent problem in that regard.

I am still a (interested) Haskell beginner but whenever this discussion comes up the first thing I think is "why not try this in Haskell?" and I never give a thought that I would do this in Java which is my everyday language (and reasonably memory safe).
Not everybody has droughts; if you're doing longer term work it's fairly easy to book yourself (virtually) solid for the whole year.

I've been doing what tptacek calls 'staff augmentation' (i.e. drop me in any project that's in trouble and I'll make sure it goes faster/makes it deadline) and in 5 years I've never had more than a six week drought and even that was only because I didn't start looking until two weeks into that drought.
How about instead of trying to circumvent the problem, we could address the original issue? Namely, that your employer single handedly has enough power to send you back to your country?

The whole concept of H1-B is broken because, besides being an actual lottery, it gives the employer too much authority and control, which is why some scare tactics are in place (and sadly generally accepted).
p.s. the documentation link on your related 'bootstrap-additions' project is not working. I'm looking for a demo :)
That's pretty ridiculous. The purpose of the law is to keep people from unfairly copying ideas, not rediscovering them.

However this is different. It's not a person rediscovering it, but an algorithm which happens to do exactly the same thing but is provably not unique or patented. It's a different algorithm that just happens to converge on the same process.

This is perfectly analogous to patents on real world inventions - there are plenty of cases of different machines that do the same thing. You can't patent the output of an algorithm, just the process by which it gets to that output.
Big Data and Nollywood
Also keep in mind that the tax company, at least where I'm from, will tax your income as though they occurred over the whole year.

That means you'll be paying quite a bit less taxes.
> 5 bucks a year for an SSL cert is peanuts.

'per year' pricing is one of the most insidious aspects of the current CA system.

Certificates don't rot.

They claim that annual renewal is necessay to protect us from a rogue but unrevoked certificate; however any malicious activities would be quite profitable well within a year.

So why not set renewal to be monthly, just to be extra-safe? Weekly? Perhaps I should suggest that to them. The resulting outcry from users might be the only way we can disrupt the CA situation.
Well, this is OpenCL backed and the latest OpenCL is all about sharing the memory space between CPU and GPU. AMD has for some time been making a big deal of sharing the same view of virtual memory on GPU and CPU sides. Which lets you use the same pointers from both sides.

https://www.khronos.org/news/press/khronos-finalizes-opencl-...

"Host and device kernels can directly share complex, pointer-containing data structures such as trees and linked lists, providing significant programming flexibility and eliminating costly data transfers between host and devices."
It took me a while to understand that the article's use of "frew" simply was a random placeholder search string. I started looking up those characters in the docs, and becoming annoyed since it made no sense. :)

Also, shameless plug: my Gitbrowser plug-in for the Geany editor/IDE support git grep, and makes the search results clickable in the editor (https://github.com/unwind/gitbrowser).
The link is great but how many times it was posted here ?
Build, Deploy and Thrive – Embrace The Hacker Within
Is my private key secure?
Video Lectures on OpenMP, MPI and Xeon Phi release
Wearable ring gesture interface
Having used it for sometime now this is the smartest one. I keep guessing at their algorithm on finding my free time because it gets pretty close. Good application.
I wonder if any of the existing static code analyzers would have found this?

PVS-Studio checks some open source projects and posts part of the results on their blog. I did a search and found that they did take a look at OpenSSL in 2012.

http://www.viva64.com/en/b/0183/

And Coverity: https://scan.coverity.com/projects/294
"This tendency to glamorize the primordial man is an extension of libertarian ideals; it assumes that people are more naturally cut out to hunt, gather, and organize themselves than they are to abide by rules imposed by a coercive, misleading government."

wat
I like it - although pasting garbage in the field gets the same response as (presumably) a real private key. Doesn't specify what kind of private key either.
Why Communication Is More Beautiful Without Facebook
Yeah, start from zero...

Just start with the framework you know the best or leanst to your more familiar culture.

Lavarel 2 for php, RoR for Ruby, Asp.Net MVC for Asp.Net, Flask for Python (i think), ...
As someone else has already pointed out that could be better classified as risk management than the way I originally put it.

The problem with security through obscurity is that it is not security. Kind of what people mean when they bring it up.. At least in my circles anyway.

It is fine to have security through obscurity but you can't, much like the alternative implementation scenario claim it makes you more secure as a result. Its exactly like when apple claimed they were more secure and couldnt get viruses like their PC counterparts.

That is what I was trying to bring to the conversation when I made my first post. I get the feeling were starting to move off topic / split hairs over words now so I'm going to leave it at that I dont think I can explain myself any further.
It was also careful to frame it in terms of clock speed. I remember fondly the ramp up from 4.77 MHz to our current clock rates, and we have really plateaued around 3.4 GHz at the top end. [1] There have been challenges to reach higher speeds, and I think the highest clock rate is an impressive 8+ GHz, but that isn't off-the-shelf stock you just pick up at Newegg. That blog post has some interesting and relevant data. It is a few years old now, but still applies.

[1] http://csgillespie.wordpress.com/2011/01/25/cpu-and-gpu-tren...
Let's hope it will be people with insight even better than mine :-). Thanks!
Having worked with OpenSSL on only one occasion. I figured something was up when they have a function named SHA1_Update and SHA_Update that has the exact same signature and creates different outputs. A library designed by incompetents.
http://privatekeycheck.com/yes/
"Garbage Collection" by Richard Jones

I'd recommend the Dragon Book, but it's a bit dated these days.

Anything by Agner Fogg is good for optimization.

There's always the D forum, where we're always going hammer and tong over every detail of how things work.
The idea of Ukraine independent of Russia is new. It's pretty safe to say that the entire infrastructure in that country was built under Moscow's supervision. It was inconceivable to even think about a plan of defense against an invasion from Russia.
prostitution
I think the billing interval is relatively unimportant.
I'm moving over to MongoDB (NoSQL), but an EXTREMELY awesome book that I have in my collection is SQL Hacks. It's published by O'Reilly. It's an extremely awesome book on optimizing SQL queries appropriately. It's not in this list, but I definitely recommend it!!!!
http://privatekeycheck.com/maybe/
Netflix Company Culture
I think you would have done better to have linked directly to your blog, rather than making this a self post. If you really feel that a tl;dr is necessary, that's what a comment is for.

Anyway, here's my own brief response to both PG and your response:

1) "Nerd" and "Jock" are stereotypes. Given a large enough sample size, of course there will be popular nerds and intelligent jocks, and every shade of gray in between.

2) What about a "jock" who deviates from the accepted wisdom and take chances? For every high school football star who goes on to become an NFL star as an adult, I'm sure there will be a dozen has-been football stars who end up giving up football and find a boring job. I'd argue that there's not much difference between nerds and jocks when it comes to the probability of success.

3) In my interpretation, PG's central insight is not that the real world places a higher value on intelligence than American schools do. The central idea of the essay, which PG repeats several times throughout the piece, is that school is a prison. When you graduate from that prison, you are finally free to find like-minded nerds and do interesting things together with them. Of course, as you said, the whole world might be just another prison that demands compliance with the status quo. But since this prison is several orders of magnitude larger than a typical high school, there are many more opportunities to do interesting things inside of it.
Genius. Set up a site that collects private keys, this saves so much work...

Weren't they called private for a reason?
That's all great, but doesn't answer the question, what will he do when he's too old to work?
Dude... relax... you're in a bad spot have a beer, eat some pizza and get laid...

You'll find a job. Only about 1 in ten people that want jobs don't find them and only about 1 in 100 end up eating out of a garbage can. You sound pretty smart... get your portfolio together and start going to networking events. You'd be surprised how many people want smart people working for them. You have to go looking thru the haystack... the haystack ain't coming to you.
It was up until you clicked the Check button.
Thank you. Come again.
But if you asked for a public key, this would be safe and useful.
British TV Night on the ABC
Saturday night on ABC1 is great for fans of British TV. With action, drama, mystery and comedy. A great night in.
First, determine what leverage you have.

How essential are you to the startup's success? (how much would it cost to "replace" you). This might be higher than you think .. they may need a couple engineers physically in SV.

What % of your equity is vested? With standard terms, I'm guessing 1/4th (so 0.25%), unless there is a cliff longer than a year (which I've never seen).

How likely is the startup to exit in different scenarios: acquihire, bought for user base, bought for product, or IPO. How likely are each of these scenarios?

Just remember, this is a pure business decision. Don't worry much about "loyalty", "promises", "reputation" etc. If you're seriously good, these things don't matter much. Simply calculate the likelihood and payout for the possible decisions and then pick.

That's how good founders should make decisions and how good employees should make decisions. I wouldn't hire people who didn't think this way, or work for people who didn't.
"Let It Go": Singing the Tunes vs. Living the Verses
People (all people) are fundamentally unsafe, not languages. It may be harder to write safe code in some languages than others, but that arguably doesn't make the language unsafe. Most certainly though, it does not make it "fundamentally" unsafe.
Using Git patch to the max
Pugmarks recommends content that you would love to read based on your context
Wouldn't it make more sense to work more the years where his hourly wage is the highest? The years where he reaches his goal in May is the years he should work longer.
I remember reading a story about how NYC taxi drivers worked until they made a 100$ before going home. This lead them to working longer on days with lots of competition and less demand, and shorter days on days with less competition and more demand.
> Can you tell me, without looking at a chart, whether $ or >>= has higher precedence, and what kind of associativity they have?

No, which is why I don't think that should be allowed. Scala doesn't do that - all "custom operators" have the same precedence, and the global rule is that anything ending in : associates to the right (and is defined by the thing on its right), otherwise to the left. So I could answer those questions easily for a Scala library.
http://privatekeycheck.com/42/
"Undefined behavior" means "undefined by the language specification", but it is well defined by the compiler implementation. In other words, you never use the C language, always an implementation.
It sounds like they're trying to maintain platform independence while still abstracting platform specific low-level operations. If you utilize machine specific code in subclasses, how do you generate MSIL that remains independent?

If you really needed something like that, could you not use C++/CLI and expose those operations in your own unmanaged library? You will of course lose portability, but that seems like a possible work around.
http://privatekeycheck.com/why/

http://privatekeycheck.com/idontknow/
Here's a crazy idea: single addresss space for the kernel, virtual memory for applications in userland since their memory grows more unpredictably. I guess this dual approach would need hardware support?
If you post your private key on this site it's not private anymore, so it should always answer it's not secure.
Because he's not pushing himself too far, he'll probably be much healthier than others when he's older and still be able to work.
Since Soylent is food -- and highly processed food, with
processing having a cost -- it hard to see why it would
ever be expected to be a particularly inexpensive
alternative.

Some processing reduces the end cost. When you process tomatoes into cans, you don't have to throw away as much stuff that goes off, you don't have to anticipate customer demand so precisely, and you can make weekly, large, slow shipments instead of needing daily, small, express shipments.

I don't know if soylent will ever be cheaper than canned tomatoes on dried pasta, though!
You're thinking of implementation-defined behaviour. Undefined behaviour is not well-defined; the compiler does not have to implement it consistently or sanely, and certainly gcc won't.
Well, having a working lexer/parser is needed to make a compiler, but I see very little reason to write your own parser. Lexer yeah, but from what I've heard parsers are tedious and better optimized by programs.

Anyway, thing that helps me do stuff - focus on getting a piece of program right. Then move onto another part.

Another good saying, all good software starts simple and evolves into a complex solution. So maybe start with Lisp syntax and evolve it into something more complex, when you're ready.
> You still have to warn the user that their desire for a secure connection (conveyed by their request to retrieve an https URL) cannot be fulfilled

Normal users do not enter URLs in their browsers, much less https ones, and do not pay attention to the https prefix when clicking a link or pasting an URL, so the client retrieving an https URL usually does not indicate a desire from the user to have a secure connection.

I believe that users have been trained to pay attention to the presence of padlocks and colors in the address bar, not to the presence of the "https" prefix, so that self-signed HTTPS could look the same as plain HTTP from that perspective and I don't believe security harm would ensue.

> There is very little self-signed HTTPS traffic out there. The NSA assuredly has the resources to MITM all of it.

I find this doubtful. I am willing to believe that the NSA might be passively snooping on a large portion of HTTP traffic, but performing active attacks, even when you have the resources, is a lot harder to be doing smartly (unlike passive attacks, which are invisible).

If the NSA were routinely MITMing self-signed HTTPS traffic, knowledgeable users would have noticed. They would be investigating under which conditions, and along which routes, does the MITM take place. As nobody seems to have witnessed this, I doubt that is happening now, or that it is likely to happen in an indiscriminate way.

> You might be willing to gamble your own security, but you should not gamble everyone's security.

Even then, how is MITMed HTTPS traffic worse than passively monitored, and potentientally MITMable, HTTP traffic?

As for your point about training users to ignore security warnings: blame the browsers, not the websites. If using self-signed HTTPS is no worse than HTTP, those messages are stupid, and I'm not going to give up on the additional security of self-signed HTTPS just because browsers are doing something stupid with it.