skysight-inc/HackerNews huggingface dataset:
Why kernel tutorials always say they need nasm. Gcc already comes with an assembler so simply use it instead of installing other softwares.
And if you prefer intel syntax simply add ".intel_syntax;"
Yes, but for $9000/year, I could very easily stand up a server, backups, and a VPN to access more than 1TB of data.
I really like time-tracker feature!
Free SAT Test Prep for Everyone (maybe forever?)
Don't go so far as to say "fuck being a good person", but understand that not everyone deserves unlimited trust and good faith. --which is I think what most of your comment is expressing.

Your story is the topic of one of the most famous West End /Broadway songs of recent years:

https://www.youtube.com/watch?v=y6h1eBEmY6U

Even if you find that life's not fair, it
Doesn't mean that you just have to grin and bear it
If you always take it on the chin and wear it
Nothing will change
Even if you're little you can do a lot, you
Mustn't let a little thing like little stop you
If you sit around and let them get on top, you
Might as well be saying you think that it's OK

> homeless people asking for money ... i see them as predators who use negative emotions to try and take my positive feelings away.

Or they are asking for money who using asking for money as a way to get money. Your "predator" description fits panhandlers with manipulative stories, but not all "homeless people asking for money". Also, it's worth considering , if someone is telling you a story that upsets you, but is a true story, maybe the negative feelins you feel are appropriate, and there is something wrong with economic inequality.
What's the solution? We hate regulation as an industry, but if I was outside the industry, seeing these data breaches over and over again would seem to imply a need for regulation. Looking at PCI and HIPPA, as two examples, it doesn't seem like data protection legislation would be super successful. Any thoughts on that?
Yes, and you can combine it with other purposes (travel). I intentionally get off the bus at an earlier stop so I can walk through a quiet neighborhood to my apartment.
Check out the code for the geordi bot that hangs out in freenode##c++. It uses some of the more advanced linux sandboxing features I've seen
Thanks, this is true. Encryption keys can exist in memory for up to a week [edit: or longer] in live memory with power on. This is well after they've been used on the machine, or say after you close your Truecrypt volumes. The vast majority of people rarely shutdown their laptops for extended periods of time and often just suspend to disk, instead of a full power-off.

This is why it's good to power down or sdmem when you're finished working with sensitive data.

On a full shutdown persistence is not as big of a risk, as the other commenter pointed out, cold boots are mitigated by DDR3 similar to how modern SSDs with TRIM make deleted data-recovery nearly impossible (such as Swap data which may also contain encryption keys).
How To Monetize Your Mobile Apps
Correlations can never always be estimated correctly.

They'll work for a while, but as soon as the underlying assets stop acting according to the 'rules' upon which the original correlations were calculated, disaster strikes.

That turning point always occurs--it's not a matter of 'if' but 'when' and 'how severe'.
I'm no expert in security, but man am I weary of using ANY Adobe product. I guess I continue to confirm that feeling every time I see one of these data breaches and its tied to Adobe products.
Exhale – Check yourself before you wreck yourself
Site URL: http://www.getexhale.com/
Presentation URL: http://goo.gl/BKDGU0

Have you ever woke up after a late night party fearing you will not be fit to drive to work? Our study has shown that over 30% of drivers admitted driving under the influence.

The answer to this problem is Exhale, our smartphone breathalyzer.

Simply exhale into the device and instantly get relevant information such as how long until you are street legal again, or if you are in a hurry, be able to get a ride by cab or by friend. Exhale enhances your ability to drink responsibly and gets you to your destination safely. If you don’t intend to drive we’ve got you covered too.

You will be able to compare your “score” with your friends in a new era of drinking games.
Capturing Maximum Revenue From Your Mobile App
The trick would be to do so in a way that fits the minimalist spirit of Hacker News. We're loathe to change the site in ways that add clutter. Our bias is in favor of using the existing mechanisms where possible. Often the best ways of doing so are surprisingly if not embarrassingly low-tech.
> Because "supply and demand" is a lot like "correlation does not equal causation" in the lexicon of internet debate: most people are parroting something they heard once but don't quite understand.

While I admire your attempt to recycle the "refute a commonly used argument on the basis of its commonality" strategy, that simply doesn't cut it when you're making fallacious claims.

While you can try making dubious arguments regarding economics, you can't hand-wave away the fact that buildings in SF can be much taller than they currently are while adhering to safety codes for a seismically active region.

> The econ-101 supply/demand curve requires a perfectly competitive market for a homogenous product -- neither of these applies to the SF housing market.

Which "econ-101 supply/demand curve" are you referring to, exactly? I hope you're not referring to the perfect competition supply/demand curve, because that's irrelevant here. Price is influenced by supply even if competition isn't perfect.
Big Data's Biggest Challenge? Convincing People Not to Trust Their Judgment
This isn't true.

One of the things I'm famous for is creating "BlackICE" 15 years ago, an intrusion-detection technology that we shipped as a variety of products, such as a personal firewall, gigabit IDS, and inline protection (i.e. intrusion-prevention-system or IPS).

The distinguishing feature of this technology is that we wrote "protocol-decodes" for everything. This made the product faster, able to catch more things, yet producing fewer false-positives. It's a vastly better technique than Snort-style pattern-matching.

Yet, it was an uphill battle convincing the market of this. That's because people are stupid and don't understand how things work well enough to appreciate the difference. All they know is that they download a public exploit, run it, and if the IDS catches it, then the IDS is good.

Today, there are lots of commercial products that do things the right way, with protocol decodes. There is also the open-source "Bro" project which does things the right way. All these products can catch my heartleech tool -- it can't evade tools doing things the right way.

Even Snort often does things the right way, but only when people like me prod them. They are going to add an SSL decode (I predict).

So the upshot is this: I really are about the difference between protocol-analysis and pattern-matching in IDS technology, and as long as people like you aren't smart enough to understand the difference, I'm going to keep releasing exploits to demonstrate it. None of my exploits evade properly written IDS -- only IDS that takes shortcuts.
NextBigSound is built on top of plenty of social media companies.
:) It feels kind of good to learn that I'm not the only one. I'm in Istanbul. The 15th started for me 23 hours ago. It has been a loooong day.
Thank you for these suggestions, this is causing major strife in my life at the present time.

I have had a really hard time with this over the past 6 months. I have plenty of time to work, but when I sit down I have a very hard time focusing on the task at hand. I find myself working on other tasks that aren't a priority. The days when I have 100 small things to do are the worst. Logging into a server to change one line of code on 5 different servers is so scary to me.

I am really at the point now where my life is getting unmanageable due to my schedule and lack of focus and I need to make a change.
I have a hard time believing that Google served so many ads that 2/3 of the screen were covered in ads. I just tried a few searches and in three fairly generic searches I only saw ads in one of them. The search with ads had three clearly marked ads, one above the search results and two to the right. What search terms are you using that give you these results?

Somewhere else in the thread you mentioned that you reformatted to get rid of some trojans and adware. Do you still see as many ads now that you've reformatted the machine? The descriptions of the types of ads you were seeing make me think that you had something on the machine that was actively inserting ads into html that it received.
You need to show a demo or screenshots of the product.
Pycon: Getting started with machine learning in python
Show HN: Sure 1.2.7 makes easy to test diffs in python
That's the entire domain of engineering, isn't it?

It's as essential to actual deliverable products and inventions as the basic research is.
Seeking Growth, The Payments Industry Embraces New Technologies
Chrome (Canary) Now Only Shows Domain Info (Instead of Full URL)
By far the most interesting piece of Google, and likely the most satisfying to work for.

Also good to see people that aren't 20-somethings driving innovation. Hope for us oldsters yet.
I'm not sure why this is catching downvotes; it's probably the most viable idea for how to go about actually manufacturing a space elevator and putting it in place. Granted, we would need to figure out how to manufacture that cable that's 100x stronger than anything we currently have in space instead of on Earth, but that's probably easier than figuring out how to get the entire manufactured cable from Earth's surface into orbit.
Fitness activities are goal-dependent. There is no one "best" exercise, and generally a balance of training methods is used to achieve specific goals.

There are different modalities to exercise. Many of them are complimentary. All of them hit a rate of diminishing returns in finite time.

What you do (how you train / what your fitness routine is) depends on your goals and needs.

Generally, there are:

• Short-term energy systems training: high-intensity cardio. Characterized by high-intensity intervals, Tabata, fartlek, or similar training protocols. A Tabata workout runs 4 minutes.

• Long-term endurance energy systems training: this can help train the body to more efficiently mobilize fat stores. It's what many people think of as "exercise": long, slow, steady-state activities such as walking, cycling, etc.

• Strength training: high-level resistance training to near failure in the 1-20 reps range, generally. This contains within it additional modalities: strength, hypertrophy, endurance, isolation, compound, plyometrics, speed / Olympic lifts, etc. Also involves progression, periodization, and micro / meso / megacycle training variation.

• Prioreception / fine motor control: not entirely the same thing, but essentially training your coordination and skills. This could be gymnastics moves involving strength and balance, pitching or tennis accuracy, or fine motor control utilized by musicians.

• Mobility work: much of the asana practice of yoga delves into this, but myofascial release (self-induced or received massage), heat and cold therapy, etc., play into this.

• Relaxation, meditation, mindfulness, visualization: different aspects of relaxation, many involving stilling the inner voice. The meditative practice of yoga is an embodiment of this.

• Rest and recovery. Anyone training hard becomes a sleep whore. An eight hour minimum, and often sleep binges of 10-12 hours, aren't uncommon for athletes in serious training.

• Diet. Fueling the engine, specific to your goals, is key. Micro and macronutrients, timing, and caloric content are the major factors.

"Yoga" itself is a multi-form discipline (the eightfold path) of which asanas (poses) are only one component.
You can still access the full URL by clicking on the domain name. Here's an example: http://imgur.com/eOLruTn,9VvjbEJ#1
I took ai from Dr Moore as an undergrad; he's an excellent teacher. These sorts of close ties between industry and academia are a great thing in a world where <10% of grad students become professors; I would love to see more of this in the biomedical fields.
What kind of guarantees are you providing that a company that will invest itd resources in creating content on your platform wont be held to ransom tomorrow by either price hikes or service closures or something else?
Glad you do :) Hope it actually saves time!
Also supports D (GDC, the gcc backend to D).

http://d.godbolt.org/
Same thing here in Italy! Drink for all :)
>Captain of Moonshots--"moonshots" being his catchall description for audacious innovations that have a slim chance of succeeding but might revolutionize the world if they do.

Moonshots, huh? I'd call them "useless PR stunts".

Stuff that's neither useful and product oriented (like from Apple), nor deep or interesting enough (like Xerox Parc, IBM or AT&T of old) but is guaranteed to buy some expensive positive news coverage and bring some goodwill towards Google for their "innovations".
Maybe that language indicates who has the leverage in the deal and thus reflects in their stock price - post-buy.

It would be interesting analizing the phrases surrounding acquisitions both public and private may reveal this...
Hey guys, I am working on a start up idea with some friends and we would like some feedback! Thank you for your time!

Have you ever woke up after a late night party fearing you will not be fit to drive to work? Our study has shown that over 30% of drivers admitted driving under the influence.

The answer to this problem is Exhale, our smartphone breathalyzer.

Simply exhale into the device and instantly get relevant information such as how long until you are street legal again, or if you are in a hurry, be able to get a ride by cab or by friend. Exhale enhances your ability to drink responsibly and gets you to your destination safely. If you don’t intend to drive we’ve got you covered too.

You will be able to compare your “score” with your friends in a new era of drinking games.

Presentation URL: http://goo.gl/BKDGU0
So it is a fund of fund of funds?
In general I realized that my mind is full of distraction. I want to play games, go on HN, maybe facebook, look at stock, etc...

For me the key to be in the zone is to turn off my internet and force myself to do one small step. If I am coding, I force myself to write 1 line. If I am designing, I force myself to design one small part of the page.

But once I finish the small step I realized that I am not satisfied by my work and next thing I know, I am coding/designing the whole feature.

After I get in this zone and I need the internet for answers, I turn it on but don't get distracted. By that time, I'm too paranoid to finish my task!
The site just emailed me my password in cleartext when I used the "forgot password" option, so they must not be hashing them on their side. Seems like a terrible security practice.

The incident notification states "website user names and passwords could also have been accessed", so I guess this means cleartext passwords.
Yup.

Getting a private key using the extent simple scrypts is quite complicated, with lots of difficult steps. This is no barrier to teenage kids, who has lots of time on their hands that can play around until they get things right.

As a defender, however, you don't have that much time. For you, it's really easy. If you have a server, and want to know if the private key is visible, just download the Windows heartleech binary from github, run it against a server, walk away for 10 hours, and then come back to see if it's gotten the key.

In short, as you say, a tool that effortlessly prints the private key of a production server is worth a bazillion blogposts and security advisories. Code or GTFO, IMO :)
I reported a XSS bug in their login page in 2011. Never received a t-shirt or acknowledgment. But they did fix it...just saying...
> Corporate person-hood, and corporate taxes don't really make so much sense.

Corporate personhood (as far as I understand) is required by limited liability, which makes a lot of sense to me. Separating a company's debts from the owners' debts (and preventing creditors from going after the owners of a company when it goes bankrupt) is very encouraging for new and small businesses. The debts of the company become separate from the debts of its owners. It encourages people to start businesses and take loans, not having to worry that they'd lose everything if their startup goes under (at least theoretically).
One checkout clerk? That's not really how I remember things working.

You walk into the store that sells things. You go up to the meat counter, and you say, "I want a kilo of meat." They weigh out your kilo of meat, and give you a receipt that says, "Meat: 1 kilo". You then go to another counter, where you pay the clerk for that particular receipt - it is then marked as 'paid' (or you get another one, I forget.) You then go back to the meat counter, and you give them the "I paid for this" receipt, and then receive your kilo of meat.

So, at best, you've got two inefficient checkout clerks! And at worst, you pay for meat and then there is no meat.
Nobody is writing articles at Neel Mehta, the guy who discovered the bug. They should, he's a god.
Philips is working with Google to use them in healthcare:
https://www.youtube.com/watch?v=ssldTFWBv3E
> Encryption keys can exist in memory for up to a week in live memory with power on.

No. After some high-enough RAM area contained the keys and you keep it powered and your OS uses much less physical RAM than physically available there's no hard limit. Just forget the "week."
Al fin del mundo en barco
By obtuse I meant arguing that local port forwarding was somehow adding something elegant here. Arbitrary protocols would be ideal. I didn't mention portability to where, but we agree there's a clear limitation. By daemon-centric architecture I mean that state is maintained and exchanged between the guest and host rather than the host inflicting its version of truth upon the guest (shut down, start again with new settings), which is arguably cleaner for disposable service containers (even those requiring persistent storage). Linux has supported SELinux out of the box for 15 years, but it doesn't mean that it is easy to configure or gets used properly. Manipulating live services via SSH is an anti-pattern because it removes repeatability/predictability by causing undocumented state to accrue in guests, ultimately resulting in wasted time chasing down bugs that someone introduced by accident. To put this another way - the whole attraction of containers is disposable environments: SSH in its conventional systems administration utilization is their antithesis.
Would love for it to support Groovy, and/or there to be something similar for PHP.
In my experience, it also leads to better solutions because devs who don't get woken by issues with their own code are people who don't particularly care about such faults. I've done on-call before where I've begged the devs to fix issues because they were waking me up needlessly. The devs were nice, but somewhat lazy, and my fix wasn't on their radar. Stick them on on-call, and all of a sudden it's more important to fix.

At one place I worked we had a two-person support shop. We would claim time and again that this or that affected customers or made support hard. The devs would pick and choose what was fun to work on. I ended up leaving and the other guy went on a prearranged month-long vacation. Everyone else had to pick up support (~5 devs) for a month, and I'm told that they had so much trouble with the normal support load that development actually stopped for that month. Apparently when the other guy got back, they started listening a bit more to his concerns, having had a taste of what happens on the pointy end.

In a similar vein, there's a wine distributor where all employees spend their first week half on the phones and half in the packing department, to give everyone a feel of what the core function is and what customers complain about. The guy telling me said that everyone gets the treatment, except the new CEO, who got away with only doing a day rather than a whole week.
Nimrod's static type system looks comparable to Rust's; are you referring to Rust's safety guarantees?

If so, I believe Nimrod's support for immutability gets you pretty far, but I have not looked very deeply at it. For example, implements an explicit "IO taint" mechanism reminiscent of Haskell.
See, it did not take that long:

https://github.com/fgsch/varnish3to4
Wow, that got to market quickly!
Yeah, there's nothing more appealing than creating a nation of geeky males in their 20s. You know what dating down in MV is like? Well, that'd be way worse.
Everyone's mileage will vary, of course, but I notice a lot of advice around mental preparation, how to think about your work, etc.

Some great tips. But, for me, at least some of becoming productive has to do with not doing a lot of meta-thinking about my work. For instance, the more I think about a start time, how to start, etc., the more likely I am to just keep thinking about it vs doing something.

The same is true for hitting the gym too. If I take time off for whatever reason and say, "I'm going to start again Monday" or similar, then I am less likely to do it. Instead, I have to just get up, put on my workout gear and go. In fact, it's like I have to do it as mindlessly as possible.

There just seems to be something about planning, talking, and thinking about things that keeps me in a passive mode of inaction. I think that mode is decidedly "out of the zone".

Also, along the lines of thinking too much, I read somewhere a while back that we spend too much time thinking about how we feel about things. The question posed was "what does that have to do with anything?", which struck me as very true. Sometimes things just are and we have to deal with it. That includes getting work done. I know that if I whine and complain to myself about not feeling like doing the work, it gives me license to slack off.

So now I try to refrain from putting so much energy into thinking about how I feel and instead redirect that energy to just getting the work done. Not always easy, but a prerequisite for being productive at all, let alone approaching the zone.
SpaceX is being funded with government money, yet it's very much a capitalist enterprise.

Just because government money was involved doesn't mean the government developed the technologies, nor that profit wasn't a prime motive.
You still have to be in a spot to snoop. If you are a random hacker wanting to snoop on a Russian bank, once you get their private key, you have to now tap into the network. This is unlikely to be within your ability. You might fly to Russia and sit in cybercafe's open to catch people on the open WiFi, but it's not something that's easy.

On the other hand, as the above comment says, you can use heartbleed in other ways, such as catching people's cookies from memory, then insert those cookies into your own browser and hijack their connection.

Among the things I'm famous for is having written a proxy server you can aim your browser through in order to do cookie hijacking:
https://github.com/robertdavidgraham/hamster/
Amazon Cloud Drive Photos For iOS Gets A New Look
What's the typical turnaround time for responding to sign ups? It said I'd be contacted shortly, but I haven't received a confirmation email or anything so I'm not sure it went through.
Supreme Court of India recognises transgenders as third gender
Fixed headers/footers make it impossible to navigate content using the keyboard. Pressing spacebar/page down doesn't take into account the missing real estate and you miss a few lines of content every time.
"pompous"
Creating Your First Firefox OS App
A Non-Techie Tries to Build a Tech Company
Allowing vast portions of the internet to be vulnerable to an exploit that leaks passwords and private keys seems like it is not in the interest of the security of the nation.