skysight-inc/HackerNews huggingface dataset:
Apple docs: Samsung misled investors about Galaxy Tab sales
Where to spend your time improving your site
My Online Accounts was deprecated last year. The current landing page is https://retail.santander.co.uk

Yes they should have taken MOA offline and removed the DNS entry

But anyhow an expired cert still works just as well as a 'current' cert. It isn't stripped of its crypto-skillz just because an arbitrary date has passed.

Source: being an Abbey retail customer; we were informed of this change.
Seriously can't wait till they get things in place BUT R with dplyr and data.tables really fix 90% of what people are saying.
PolarSSL – Does anyone have any experiences with this OpenSSL competitor?
Because ummm... people are posting pirated files maybe? We've been fighting this battle for a month now.
At Going Native last year Sean Parent, from Adobe, gave a superb talk called 'C++ Seasoning' where his number one pro-tip for C++ was: no raw loops.

He made a good case that anywhere you have a non-trivial loop in C++, you're almost always going to be better off folding the problem in to a composition of algorithms. The code got more readable, more performant, and redundant code can often be removed.

Please take an hour to watch it here in glorious high quality:

http://channel9.msdn.com/Events/GoingNative/2013/Cpp-Seasoni...
Well if Google already said it's OK to do censorship, I don't see why would anyone else would give away their profits.
scnr

XML - It seemed like a good idea at the time
Cool, thanks for this!
C++ Seasoning
Just testing it out. A great online tool.
However, when you click on delete with no items, a JS error "Uncaught TypeError: Cannot read property 'canWrite' of undefined" is thrown. Cheers!
10 best founding teams
Relevant correct horse: http://stream1.gifsoup.com/view1/4658462/correct-answer-o.gi...
Linux people complain all the time.
It is unfortunate that many "big" companies still use expired certificates.
WHOIS records come from the registrar not Cloudflare, perhaps they mean obfuscated traceroutes?
Cake proghramming
Us too...

Cloud Flare and LeaseWeb are not playing nice. LeaseWeb is asking Cloud Flare to give me the IP so that I can enter it into LeaseWeb's automated system, but Cloud Flare refuses to do so.

They've sent the IP to LeaseWeb, but LeaseWeb refuses to do anything manually.

Ugh.
The problem with this method is that the example phrase, "No one knocks off old Tony", yields 3,580,000 Google results. All attackers would have to do is apply a few simplistic substitutions on common phrases. Any phrase easily found online or in print doesn't make a good passphrase.
"... information which is prohibited for distribution in Russian Federation"

— And what information would that be exactly? Maybe anything that wouldn't agree with Putin & his cronies? The Russian gov't has been known to sit on their hands (to put it politely) while dissenting journalists were being killed off in the open street in bright daylight.

Fuck the Russian government.
Scouting Children: Why MLB Has Teams Competing For 14-Year-Olds
I think that's a paste of Google translate, it doesn't read as logical English.
Did you struggle too much to come up with that list? You only missed Hitler by an inch.

Ad hominem attack on a dead man is so low I can't even describe it.

Sadly, this is HN. So long HN.
"However, an eye for an eye will make the world blind"

Heh. True.
Just to clarify, aside from the footnotes this is a translation of the original page.
That's the reason for the popularity of Rook: http://boardgamegeek.com/boardgame/1260/rook

Which is basically a standard deck of cards but with four colors for four suits, and numbered from 1-14. Just getting rid of the standard symbols is enough for people to pretend that they can't gamble with them. Popular with Mormons.
Wow, I was quite taken aback, expecting to read about al-quaida, got robin hood instead.

Still, it is only one source, but having this version of this story of those so-called pirate is definitely a plus.
If ANY information regarding JSCore or Webkit is required, visit http://whtconstruct.blogspot.in/. BFulgham is one of the chief contributors to the webkit project.
with bare simple tools (raw html text, one gif or png image, period)
> loading external entities pointed in an XML automatically? what kind of joke is that?

Your browser does much the same when parsing (X)HTML. LaTeX naturally includes ‘external’ resources when building an output file. There are tons of examples like that, loading external entities per se is not wrong, it’s mostly just wrong under these specific circumstances.
They should be regarded as expensive today, because key exchange is one of distinct parts of the attack surface of an SSL implementation. The less often this exchange is visible to eavesdroppers, the better.
OpenSSH is a SSH client and server provided by the Open BSD Foundation.

OpenSSL is an encryption API maintained by an entirely different group of people.

EDIT: Modified my reply. OpenSSH at some point moved it's "restrictively licenced software" (RSA, DES, etc) out of it's codebase and now depends on OpenSSL according to it's license. http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/LICENC...
Thanks for the feedback.
Fixed!
What if there is some bug that resets your Keepass/Lastpass keys? Don't you worry about something catastrophic like that could happen? Because then you'd lose access to all websites, right? Or do you rely on the fact that if you lose them, you can recover say your main e-mail password through another e-mail, and then you can recover all the other passwords with your main e-mail?
The purpose of the bounty prize is not to outbid or compete with the criminals.
I also like KeePassX but its major flaw is not being able to sync or merge databases. That has led me to consider using password-store[1]. Has anyone found a way to overcome the sync problem with KeePassX?

1. http://www.zx2c4.com/projects/password-store/
Unknown-unknowns as it were.
Depends on the relationship between John and Andrew.
Bio-batteries that can recharge in 30 seconds? Sounds sketchy
Pirated files? I thought that's what vk.com is used for and Russian gov doesn't seem to have any problems with it AFAIK.
Pretty much, yes.

Here's an analysis of the actual OpenSSL code:

http://blog.existentialize.com/diagnosis-of-the-openssl-hear...

Here's the patch itself:

https://github.com/openssl/openssl/commit/96db9023b881d7cd9f...
Oh, nice catch :)
Controlling, yeah, but that makes Steve a sociopath?

Is Michelle Obama a sociopath too?

http://www.washingtontimes.com/news/2014/mar/6/1m-kids-stop-...
On a side note, Somalia now has a semi-autonomaus transitional federal government and is actually doing a relatively good job. Not only have they implemented a .so domain but they're starting to organise and regulate the booming telecommunications industry.
With the kind of monitoring that Google has in place your access will last a very short time.
Ok, but in normal[1] place that phone costs ~100 euro. There's also an old price visible - 99.88$

[1] It's not a normal place http://www.walmart.com/ip/Jimmy-Dean-Croissant-Egg-with-Red-...
Love the black strip on the top. You don't even notice it until you need it.
However, not every populace is as accustomed to falling into line with their government as the Russians are. Russia is still about 200 years behind the standards of civilization elsewhere.
My thoughts exactly. It's simply not true that "everybody knows without thinking" what the std::accumulate version will do. It's specific not only to a particular pattern but to the expression of that pattern in a particular language. People new to C++ won't be able to parse "[](vector<int> acc" right away, and it's key to understanding the whole. By contrast, the range-based for loop is obvious even to a C++ novice and easily guessable even by those who don't know C++.

If you want something that's both concise and readable, try the Python list-comprehension version. That is an elegant solution. The C++ accumulate/transform solutions are the very opposite of elegant. In a code review, I would flag them as obfuscatory.
Heartbleed Bug Found in Cisco Routers, Juniper Gear
FTC to Facebook: Respect WhatsApp's privacy promises
I store the keypass database in dropbox so that my phone and other computers can all access the same db.

if you're worried about the security of that you can even take it 1 step further and add a keyfile to your login requirements. you could just store the keyfile outside of dropbox on the devices.
If Andrew didn't help Simon taking back his fish or prevent the stealing even though he knew about it then John has to conclude it's a free for all game with stealing allowed (or not punished, which doesn't change the outcome anyway).
> to put it politely

Yes, you were almost too polite given that these journalists mostly had anti-government attitudes.
So the issue is that their certificate expired? Not their using SSL3.0 instead of any TLS implementation?

Qualys SSL lab fails them immediately because they can't even connect via TLS. Opera says I'm connecting with, "RC4_128bit with an MD5 RSA signed key." I'm actually surprised their public modulus is 2048 bits long.
Er, you realise that Apple's own OpenSSL substitute is open source? And that they both use and release lots of open source software?

Are you thinking of Microsoft circa 2000, or something?
Check out this presentation by Rob Landley (@landley), who started the infamous BusyBox lawsuits:

http://www.youtube.com/watch?v=SGmtP5Lg_t0

He talks about the lawsuits and the effects they had.
The crazy part about this is that I remember having these conversations over a decade ago and it was very clearly recognized as a major security, reliability and performance problem but the greater XML community basically just shrugged it off.

One really interesting aspect of this is that many applications suddenly broke when the Republicans shut down the government last year because a number of XML schemas are managed by government agencies who were suddenly legally unable to provide their normal web services:

http://gis.stackexchange.com/a/73777
http://forums.arcgis.com/threads/94294-Expected-DTD-markup-w...
http://www.catalogingrules.com/?p=77

Makes me wonder whether it's time to start contributing patches to disable bad ideas like this by default — some places are clearly paying a significant amount to serve content nobody should need: http://www.w3.org/blog/systeam/2008/02/08/w3c_s_excessive_dt...
Aaaaand it's back up to ~$430
A memorable password is almost certainly not going to be unique, lines from a book or a movie are very likely to be in cracking dictionaries. Simple transformations adding underscores or numbers at the end are well known techniques.

There are no shortcuts to creating genuinely high entropy passwords
http://ss64.com/docs/security.html
Naval gunfire would have played a greater role in the Iraq war, especially the last one; the previous, as well as Vietnam and Korea, had Iowa class battleships available for that role, although there's quite a bit of difference in what this rail gun can do, 23 pound kinetic shell out to 100 miles vs. 16 inch caliber AP and HE shells 100 times as heavy out 1/5 of the distance.

In a future serious war, imagine what one of these, with drone spotting, could do Communist China's PLA naval forces. Note that Taiwan is 110 miles from the mainland's coast, ships with these guns could be in the general vicinity of the island and as long as they had sufficient reconnaissance completely control the surface, reducing an invasion attempt to what's sometimes mocked as a "million-man swim".

They wouldn't have to move as much, which would help with the treat of slow, quiet submarines waiting for you to come into range.
<algorithm> is so 90s. In C++14 you'll be able to do this:

auto square_copy = [](auto v) {
for (auto& e: v) { e *= e; }
return v;
};

Another option:

auto square = [](auto& v) { v *= v; };

auto map = [](auto range, auto fun) {
transform (begin(range), end(range), fun);
return range;
};

vector<int> vec = {1,2,3,4,5,6};
auto squared = map (vec, square);

Note that, in both of these cases, if you use std::move() to gift a container to these functions, they will not actually allocate any memory and will effectively operate in-place.
From what I understand, the political aspect of the issue aside, the problem is that if a site is served via CloudFlare, there's no easy way to identify and communicate with the actual hosting company.

Off the top of my head, this could be solved by adding the origin IP in CloudFlare's HTTP response headers. Am I wrong? Or this makes no sense (or it's there already) and I just don't know what I'm talking about?

EDIT: Ha! Got downvoted, probably because someone thought I want to help Russia censor the web. :)

Thing is, CloudFlare shouldn't be responsible for taking down sites, whatever the basis of the takedown might be; this should be addressed at the host level, not this or any other proxy.
"And this is, kids, why you always have to validate your input and do not trust on the user".
The Heartbleed Challenge
They do use OpenSSL, just 0.9.8y version which is not affected.
The maximum length is specified, 65535 bytes, because that is the largest number that fits into the length field. If you have a variable length field you always have to specify the length, otherwise you will never know the actual length and are for example unable to read the next field because you don't know where it starts. There is no real next field in the case of the heart beat packet, only padding, but you still have to figure out the length in order to know what to return.

You have the option to specify the length implicitly by using a terminator like a zero byte in a zero delimited string but this is sometimes a bad idea. First you have to scan the entire field just to figure out its length while with an explicitly stored length before the actual data you can just read the length and for example skip to the next field without ever looking at the field. Forgetting to properly terminate the field will of course get you in serious trouble, too. And last but not least using a terminator only works if you have an used symbol (or are willing to perform escaping). In the case of the heartbeat extension there are no restrictions on the content and you can put in arbitrary binary data and therefore something simple like a zero terminator does not work.
I see we've attracted the trolls from Fark's political tab. sigh :)

Care to back up your statement with some facts with sources?
You should keep incremental backups of the password database. I have four backups of my 1Password database:

* Dropbox (which lets me recover a deleted file up to 30 days)
* Time Machine
* BackBlaze
* Monthly HDD clone
That was kind of my point. I really think that if anything, C++ cannot be as unsafe as C. You can do crap in C++ just as well as you can do in C, but at least C++ gives you tools to do things way more safely IMO.
I use a combination of a master password (12 chars, only known to me, not written down) and a seed to generate gibberish passwords for websites. In most cases, the seed is the service or website it's for ("netflix", "reddit.com"). So, in the case of "netflix" my app gave me "qnQTs0-QO-9osX-me4)M". The benefit being that the passwords aren't stored anywhere, and I can retrieve them by simply visiting my web app.

(I didn't just leak my Netflix password, btw ;)
The tale of three text editors – Atom, Sublime and Textmate
The freaking Atari anecdote. If there ever is a thread about Jobs on Hacker News where someone doesn't mention it I will shit my pants.
You mean that black bar ?
http://imgur.com/KdwcTRD
This is a good one :)
Build some decent service, have it used by human rights activists, and any sufficiently oppressive government will advertize (the same way) it for free.
No, indeed I wasn't pitching that as a problem with BTC - just in general how can you ensure a secret transaction will go through. You'd need a trusted escrow, a trusted escrow would probably need to have a business address [and other things] for you to trust them ... but that means they'd be registered to handle money in all likelihood and that means records of your transaction that law enforcement could eventually get hold of?
>Because that's the sort of guy Steve Jobs was. A sociopath.

Yes, god forbid someone takes our precious donuts away from us...
No not at all. Build a SaaS, build a game, build a enterprise solution, etc... The world extends far beyond social and mobile apps.
I just began appreciating all the hoops I jump through just to concentrate on things hardly anyone else cares about. It takes me nearly ten times as long to complete a program, and taxes my mind ten times more, and makes me frustrated twice as much about pursuing programming, but after a very sharp practicing curve, makes me hundred times better than the rest of the programmers out there. But, still, I wonder if it's worth it. Especially, considering my boring as hell job.
Express has been at the core of everything we have done, a great little framework. Going forward though its worth keeping an eye on http://koajs.com, like express it is built by visionmedia/tj but uses the new generators that are starting to become available in node.
Indeed, it's funny that I'm reading about a vulnerability they had and it's actually making me feel more safe about using their products.
They're using an expired certificate on an expired website. No biggie.
Sure, but, regardless of agency, human or automated, it is still not possible to prove all true theorems. (The human / automated distinction comes in more sharply in the halting problem, where any potential halting decider will choke on some program that proveably terminates.)
How to Rank #1 on Google – By Matt Cutts
The Committee’s complete list of findings regarding the CIA and torture
- War propaganda; pornography and antisocial behavior propaganda

- Free speech abuse: Extremism

- Free speech abuse: Drug production and acquisition information

- Free speech abuse: Secret information disclosure

- Free speech abuse: Latent influence (e.g. hipnosis)

- Anything related to extremism

- Malicious programs

- Information which is a crime by itself (slander, humiliation, call for terrorism, offer for a drug use, etc.)

- Improper advertisement (alcohol and tobacco ads)

- Secret inforation
Judge says flashing headlights is free speech
Apache Spark 0.9.1 Released
How to Make Surefire Link Building Method Even Better
t’s one of the most surefire ways to build links: just get enough experts to take part in a group interview. How can you ensure the support of others by involving them without significant time and effort spend?
> 1. In theory difficulty and hash rate should follow the bitcoin price, but they don't.

This ignores efficiency increases in mining hardware. We've basically seen an increase in efficiency of at least 10,000 times, over the past years, from CPU mining (~5000W/GH) to ASIC mining (~0.2W/GH). This completely disconnects the Bitcoin price from mining, and this will continue to happen, as developing more efficient mining chips won't stop, although the rate of efficiency increases will decrease.

So difficulty and price will never correlate, because mining keeps getting more and more efficient.
Google Releases Project Ara Module Developers Kit
You can do specification as type in ATS2 too. My biased view is that I find ATS2 to be far more practical than using coq.
That's probably because i treat them the same way they treat me.

Their attitude makes sense and sometimes it's actually necessary for a companies/entities survival.

We all face hard choices between what's moral and what's best for our own survival the only difference is companies put any amount of small profit over morality not just survival.

I don't make the rules i just play the game.
FTC Says Facebook Will Need Permission From WhatsAppers To Use Their Data
Allocate a fixed length buffer for the header and read the header, inspect the length field and allocate a second buffer with this length and finally read the variable length part into this second buffer. Maybe check that there is no trailing data. This is what you would probably do anyway if the variable length part could be way larger then 64 kiB and just blindly allocating for the maximum length is not an option.
I really like this new http://expressjs.com/4x/api.html#router feature.

This will help me build better architecture for application on top of express
Regarding price, percentage of volume is the important metric. It is not relevant that ~12M bitcoins exist, if only, say, 1% of these are for sale on exchanges. Only coins for sale on exchanges help stabilize the price.
Words in mathematics mean what they are defined to mean, so there's no point arguing about the correctness of definitions. Yours is essentially the constructivist perspective on truth; but it is not the only one. It will declare that certain statements are neither true nor false, which some find distasteful.

A more model-theoretic approach says that a formula is true in a theory (not a system, although the word choice doesn't matter) if it is true in all models of that theory—a statement that can (in principle) be concretely verified simply by testing in each such model. Then it may (and will) be true that a statement is true in "all possible worlds", but that there is no way of proving it from the rules that constrain 'possibility'.
Yes:

steps: Open mp4 file in Firefox 28 on Android.

actual behaviour: Shows in tiny partial window inside browser. Content is small, laggy, impossible to control, cannot be made full screen.

expected behaviour: opens with default android media player interface or asks which interface to use as per intents system.
The grandparent meant that you wouldn't be removing a few kbs from "a probably Xmb or XXmb image", since web images aren't that large.

You're right that it doesn't make sense to downvote you for that; it was an interesting question.
I write a lot of C++, and nothing about a standard algorithm loop is hard to read or maintain. For the Python or C++ guru both are trivial to work with.

If I were doing fancy conditional transforms on maps with non-trivial modifications (ie, string manipulation) I'd almost always try to use Python first, though.
Amazon Will Pay You $5,000 to Quit Your Job
And here are the new features in Express 4.x: https://github.com/visionmedia/express/wiki/New-features-in-...
Are you a bot with a database of platitudes?
Nice guide on Express 4: http://scotch.io/bar-talk/expressjs-4-0-new-features-and-upg...
finally i am really excited
Does this (or any other state's) non-compete change anything for the H1 visa holders?
If I read this right, they lose money...every year.

Is this discouraging to anyone looking to start a SaaS-based startup?

You imagine that your new service will make money, but in reality sales and marketing will cause you to have to chase funding constantly just to stay alive.

Thoughts?
Something similar can be found at Project Euler, http://projecteuler.net/ or at Codewars, http://www.codewars.com/, although those have a stricter format than your examples. For example, the challenges at Project Euler all have a single number as answer. Some problems can thus be solved via mathematics, but for most a program -- you may pick the language -- is most efficient.
Well, people can write bad/unsafe code in any language. But ATS can remove entire classes of bugs from a program, while C is notorious for its lack of safety. Though obviously, it has no more built-in protection from side-channel attacks than C.