skysight-inc/HackerNews huggingface dataset:
> Why though? I'm of the opinion that the error should be handled at the place that produces the first NULL/None.

Producing NULL (or whatever the languages equivalent is) isn't an error -- if there was an error, it would be throwing an exception, not returning NULL. The idea of "do this chain of operations propagating nulls encountered at any point" is reasonably useful.
No, the idea is that there are reasons for trends that have to do with people, culture and society. The fact that trends are a product of our very complex society means that the explanations for these trends can be studied from an academic perspective. Aesthetic trends aren't created by programmers, that's for sure.
I was also unhappy with their customer service from an incident a couple years back and won't be using them again. Not really sure why they get so many recommendations here.
If someone has passive access to snoop, the odds they can perpetrate an active attack are so close to 100% as to make the distinction immaterial. Encryption without authentication accomplishes nothing.

Worse, self-signed certificates train users to freely click through certificate warnings. People running servers with self-signed certificates are actively reducing what security we have available for the web.

If we ever do get anything better than the existing CA structure, it won't do us any good if users have been trained to ignore browser security warnings anyway.
Or, he could take the down payment he put on the place and invest that and come out ahead. Granted this person probably does make more than $1, but if they didn't, there are other better uses for money.
They bought Crucible and Bitbucket too, doesn't make them any less an Atlassian product.
Can you sell literacy to someone? I think it's fairly simple: if you're literate, you can make way more money for your family.

How do you sell understanding cryptography, using it in real life and whatnot?
The "terrible outcome" is that if one hotel defects, more are tempted to defect (defect or allow the defector to capture more of the profits), and if all hotels compete on price, everybody's profit margin is lower. If demand is actually greater than supply, prices rise, but if supply is greater than demand, then the possibility of the price collapsing because of defection is greater.
Pfft. Spying on Congress dates back to Russel Tice's revelations.
That's a good question. I haven't played for 3 or 4 years and wouldn't mind trying again but I don't want to spend a day setting it up to discover that my battleship pilot has been nerfed to oblivion.
Atlassian didn't get caught in the established wisdom trap of enterprise software: worrying more about generating sales leads than about the product.

Upfront non-discriminatory pricing, direct purchase via credit card, immediate access to trial downloads, both installable AND cloud offerings, and source access to give customers piece of mind when it comes to solving their own problems and ensuring business continuity.

Atlassian does it right in a field where so many don't.
"And it never will"

I would never pay for a Picasso or a Van Gogh to hang in my house (because it's would be exorbitant and) because it doesn't evoke positive emotions when I look at it. Norman Rockwell does just that and he has since I was a kid, does that make his art better than Picasso's? Not to most people.

Just because ideas about how a chair can be designed remain popular doesn't mean that it stops being subjective.
Yes, I trust my own self-signed certs and I might trust the self-signed certs of certain sites. However, telling me that "There is nothing wrong with self-signed certificates." is irresponsible IMO. Who runs "peereboom.us"? #### if I know. I'm going to tell FF "It's okay - I'm good" this time b/c I'm not doing anything that matters but, as a rule, self-signed certs for unknown sites is not okay.
of course, when it's monsanto pushing it, it's pretty clear whose interests this data collection will serve
> I like how you vaulted straight over the defensible middle-ground "hotels charging more during big events isn't actually the same thing as price-gouging" argument and went straight to defending incontrovertible, life-threatening, criminal-in-34-states price-gouging.

I did that because it clearly raises the bar for my argument. I have more to prove in the harder cases. And yes, I do think the logic holds despite what our emotions tell us, and I think that for the most part the laws are wrong.

> No. It's it's making sure they're only consumed by those with the most money.

Again, I'm granting that emergencies and other demand/supply shocks heighten the problems caused by inequality, and again, I'm granting that that's not ok and should be tackled appropriately by policy. I'm arguing that the price system is not the best way to tackle this and leads to other problems. This will seem a bit off-topic, but Chile tackled a similar problem in their water system by transferring cash to poor populations while letting their prices for water rise [1]. (This is only meant to illustrate how you can use more than one policy mechanism to tackle separate problems: prices for allocation, transfers for inequality).

You're right, people with the most money can purchase more, but you also have to think about how you allocate scarce resources in the absence of a rise in price: is it first-come-first-serve? Does everyone get the same amount? You have to have some other mechanism to allocate the scarce resources and they each have their problems.

Also, you must think about the supply side. People will find a way to supply areas with high prices. People are creative. In fact, the high prices in the Omaha rental market spurring people to turn to Airbnb is a perfect example of why we should let prices rise.

[1] http://elibrary.worldbank.org/doi/book/10.1596/1813-9450-244...
It could be bigger. The 'keys' are just arbitrary sytems of equations, this is where 'unbounded keyspace' comes from. Any implementation would wind up being bounded by some practical constraint.

Whether this is any improvement on existing ciphers (which you can also design to have any size key you desire), is less clear, but I would bet on 'no'.
DigitalOcean Update: Heartbleed Vulnerability
It looks like this was the precursor to assl, 'A library to hide awful OpenSSL API in a sane interface' which hasn't gotten much GitHub love.

https://opensource.conformal.com/wiki/assl

https://github.com/conformal/assl
1. What is the political leaning of the national news network who stands to lose the most viewers if you were to take a percentage of everyone's audience? Fox [1]. Will they call your network neutral?

2. There seems to be an inordinate amount of money pouring into campaigns to discredit the sort of thing you might focus on (e.g., climate change[2], which is seen as a liberal idea[3]).

3. Less seriously, it was sub-text'd from Colbert's "Reality has a well-known liberal bias." [4]

_______

[1] http://stateofthemedia.org/2013/cable-a-growing-medium-reach... (2012)

[2] http://www.theguardian.com/environment/2013/feb/14/funding-c...

[3] http://www.conservapedia.com/Global_warming

[4] http://rationalwiki.org/wiki/Liberal_bias
Just checked -- you are right. I was using Rails Composer for one of the apps I checked, which does include it by default.
As great as the Eames Lounge Chair is, I think it looks like it was created in the 1950s. A better example of a timeless piece of design would be the Barcelona Chair, which predates even the Eames Chair. It still looks modern, nearly a century after it was created.

https://en.wikipedia.org/wiki/Barcelona_chair
This tool is just great, thanks!
These comments are the single best illustrations of why the NSA has gotten away with what it has. So many of its most strident critics have no idea what they're actually criticizing. It's not so much that you have zero credibility–that part is obvious. It's that you have absolutely no capacity for making things better; other than being a constituent (i.e., a target for manipulation), you're irrelevant.
Eureqa seems a wonderful software for this specific application. If only I could get 2,500$ for a one-year license...
either monkeys or NSA programmers
Ooh, shift, nice. Didn't know about that. That should come in handy.
You're the only one bringing race into this. All that is meant is that the author views OpenSSL as approximately what you would get if you flung poo around for a while.
Yeah because political activism is never ever sponsored by foreign actors as a means of fomenting unrest. Just ignore what's happening in the Ukraine right now, it might be devastating to your indignation.
Date on the article might belong in the title: 2009-08-24
What alternatives are out there?

It is time for a new open source SSL implementation, maybe minimizing what is supported to reduce attack surface?
We've also been discussing it over on reddit: http://www.reddit.com/r/webdev/comments/22gxx1/untrusted_a_j...
Can you MITM public wifi? Real question, but I thought the answer was "no", which would make public wifi a compelling counter-example.
Oops, you're right. The CIA is and always was an independent executive agency.
well, i appreciate mr dipropyl tryptamine having linked this. anyone who has looked at openssl source knows the score.

to quote one of our devs (davec) on the topic of openssl:

"funding openssl won't stop it from happening again... openssl is largely unmaintainable is the problem"

the ifdefs alone in the source make it nigh unreadable, much less the inconsistent variable naming, inconsistent indentation/nesting and inconsistent overall style.
To be frank, OpenSSL website itself is vulnerable. (At the time of this writing.)

http://filippo.io/Heartbleed/#openssl.org
Not sure if routers use TLS or just some utilities of OpenSSL. Could anyone confirm?
Kevin Rose Protest: Home Demo at Google VC's House on Potrero Hill, SF
Creating bar graphs with AJAX and Morris
UberPitch: Google Ventures Investors are On-Demand Wednesday, April 9
I think by unbounded they meant 'you can stick any number of arbitrarily complicated functions here'. I'm not sure whether this is any different in practice from just upping the key size on a cipher (since any implementation will be limited by at least memory used to represent the functions).
Kevin Rose Protest: Flyer distributed to neighbors
How does a secret treaty that enables us to spy on everyone in Austria actually enhance our power?

It diminishes the sovereignty of Austrians. It makes us a global spook. It didn't prevent a single bit of terrorism. Activity like this only enhances power to the short-sighted and self-important. There is a lot we should simply stop doing, and stop paying for it to be done, and spend that on things that make the lives of Americans better, because we rate poorly on quality of life measures.

Power comes from a strong, productive economy. Putting ourselves in a panopticon is not productive.
It has not, lets see how long till they get a cease and desist from the FAA.
Raymie Stata hasn't worked for Yahoo in a long time. You can go here, https://help.yahoo.com/kb/postmaster when you have issues. Was very easy to find. postmaster.yahoo.com
Why is this so hard? I'm honestly curious to know. The theory is extremely well laid out, i.e. it's just number theory. We know to do stuff in a way that avoids side-channel attacks, i.e. try not to leak power usage when you're exponentiating, etc. Why do people keep using the awful mess that's openssl?
Also, I doubt that decentralized liking is what will render Facebook obsolete. This is a very tech-centric point of view. People don't think of Facebook as of some kind of key-value storage where they can learn who liked what. They use Facebook to share stuff that happens to them with their friends.
i don't think the NSA works like that :)

remember "national security" equates to "we will watch you all the time and steal all your dataz". it would obviously be great if "national security" meant what it was supposed to...
Seems to go to a login page
From what I recall, it's illegal for companies to get together and agree not to raise prices, but there's no law preventing them from noticing that their competitors are putting their prices up and raising their own in unison and this is actually quite common.
I'm new to this conversation, but I have the same reaction as mark212. The purpose of quoting an interest rate is so borrowers can (a) predict how much they will have to pay back and (b) compare one loan against another. The first purpose is better served by the flat-rate quotation, and the second is also better served if most other lenders in their community also quote flat-rate interest.
> Are many people writing numerically-intensive full-stack games in managed languages?

It could just be that the current languages don't support it well.
MAPI US is an API that provides an easy access to organized and updated data about all pharmaceutical products available in USA, certified by FDA. This API aims to make things easier for developers that are some how connected to the Healthcare environment, such as Pharmaceutical companies and Researchers. This is a Beta version, however we are working on new features to release soon.
So I only have a basic/intermediate understanding of SSL and X509, but I am curious about your opinion: Is the awful code design just a flaw in that particular implementation, or are the standards involved so hard to implement correctly?
Here are some more thoughts from people far smarter than me:

Tyler Cowen: "I agree gouging should not be illegal" [1]

Paul Krugman: [On Uber's 7x surge pricing during horrible snowstorms in New York] "This makes a lot of sense from a rational economic point of view" [2]

[1] http://marginalrevolution.com/marginalrevolution/2003/09/mor...

[2] http://krugman.blogs.nytimes.com/2013/12/21/uber-and-the-mac...
The 39 Most Important People In Cloud Computing
Home routers have bigger issues to worry about before they get to Heartbleed.
Well you can play it that way too, if you want. Try overriding some of the internal functions using creative methods. :)
No. They obviously were not more than a few decades ago (race and gender equality were issues that were not even paid lip service to until the 20th century, in many cases the late 20th century.) Even today, now that we pay lip service to these issues, they are not completely ironed out.

The other issues that remain today are nothing new, and cover the rest of the 20th century.

For whatever it is worth, top tier universities (particularly Ivy League schools) are very good with need-based scholarships. If Harvard accepts you, Harvard will see to it that you can afford to attend.
That might have been a slight misunderstanding on the writer's part, but I'm sure the atlassian guys are considering box's market as well. If a company is already spending money on Jira and stash for developer collaboration, wouldn't offering content management as a product be compelling? If the engineering department at a company is heavily invested in atlassian products, maybe marketing or sales would give their cloud content sharing product a shot too.
Absolutely some do; I consider that orthogonal to the question of whether or not it would be ethical for them to raise them if they wished, however.
DMARC.org has very clear remedies.

Q: I operate a mailing list and I want to interoperate with DMARC, what should I do?

A: DMARC introduces the concept of aligned identifiers. It means the domain in the from header must match the d= in the DKIM signature and the domain in the mail from envelope.
You have a few solutions:

- operate as a strict forwarder, where the message is not changed and the validity of the DKIM signature is preserved
- introduce an "Original Authentication Results" header to indicate you have performed the authentication and you are validating it
- take ownership of the email, by removing the DKIM signature and putting your own as well as changing the from header in the email to contain an email address within your mailing list domain.

Spoofing is a huge issue for all email customers. DMARC was started, in part, to deal with the coming problems that were foreseen here. Mailing Lists don't have to forge or spoof to work. They can adjust and everyone is better off.
I have no idea where you'd get the idea that the answer is "no". The answer is emphatically yes.
I think that could work because on a small scale there's a strong social pressure to not be "that asshole" who spends the significant portion of the pool's income. However if this scales up, who knows what would happen? You get just one asshole, suddenly you need an enforcer, that enforcer needs to be watched too, etc...
http://postmaster.yahoo.com
Well, I think you'll find that the people in positions of power at top universities have rather leftist values. They don't make all that much money in terms of salary, so their satisfaction generally comes from pursuing those values in their own eyes. That doesn't mean they're idealistic; they often make deals with the devil to increase influence, and they are happy to sell their prestige to the highest bidder. But the hypothesis that they are helping rich people as an intrinsic goal doesn't make sense, and it isn't needed to explain their behavior.

Also, my impression based on things like twin studies is that rich parents's ability give their kids unfair advantages is much weaker than you think. But that's a whole other discussion.
Two guesses:

First, making them immutable means you don't have to worry about memory barriers. That could be huge for data that's being shared by multiple threads. While these types logically have multiple elements, in reality they all fit within a single SSE register. Meaning the performance cost associated with having to worry about mutability could easily annihilate any potential performance boost you might get from being able to fiddle with the vector unit.

(Guess one-and-a-half is that, since these values are meant fit in a single CPU register, they're really more analogous to atomic types than they are to objects, anyway.)

Second guess is that it's more of a "pit of success" thing than a performance thing. Mutable value types in .NET are really problematic. I've seen so many bugs resulting from them that nowadays I consider them grounds for automatic rejection in code reviews.
The Unprofitable Valley (Or, Why So Much Stuff Is Mediocre)
Not sure if you were agreeing or disagreeing, but yes that's my point.

The only way for it become twice as hard to get in is, if there were another set of equally brilliant 18,000 applicants who would've never considered applying, apply.

At least based on my experience, when I applied almost 20 years ago, anyone who had shot at being accepted applied, including all the geniuses.
Took me a while to realize: you have to scroll down to see the content.
Windows 8.1 update 1 live
I think people must be misreading you, as I did, thinking that you said, "Did it become harder ... sure, twice as hard, as the numbers suggest."
But you can just use 'letter_opener' and pow: Emails open up instantly on the browser to preview.
They also removed database.yml from the default .gitignore ... I don't understand why?
Right, you need both sine and cosine parts, hence e^ix, in order to fully describe the function. Unless the function is completely odd (or even), in which case the transform really is equivalent to `x[n] * sin(2pik*x/N)` (or cos). To see why imagine analyzing a function W that is just a plain cosine wave (any frequency and amplitude). If we only use the sine part of the Fourier transform, F(W) is indistinguishable from F(-W). In fact both are zero everywhere.

Transforms that use only sines or cosines (like the DCT) provide a complete basis by increasing in frequency by only a half cycle (pi) rather than by integer cycles (2pi). Essentially trading half a transform of sines and half a transform of cosines for one transform of half-cosines (or sines).
It's an American thing: your class is the expected year you will graduate, not the year you entered as in other parts of the world (like China).
I am _stupidly_ excited for Variants. No more .hidden-xs, visible-xs markup for me. I can taste the savings! :D

A massive thank you to the Rails team for their time and commitment towards making the best web framework on the web even better!
a guy setting out to write a CA (with LDAP backend! cue in nostalgy for my old days at one well known BigCo ) for what seems to be a first time, and as a first timer he obviously goes for OpenSSL (has he ever heard at least about NSS?). Does it all sound like part of the same problem he talks about?
The author brought race into it by comparing human beings to monkeys, a common racist trope.

If your only defense for someone calling people sub-humans is "but it might not be racist!", you need to think hard about what you're defending.
Detecting the heartbleed bug using Bro
Fitts's Bar, interaction + data vis design.
Its probably not as sexy as that. All data structures have to be copied from CPU land to GPU land, and the GPU is limited in the kind of pointer chasing it can do (so simple linked lists might work, but they are mostly about vectors and matrices).
We shouldn't have to keep this giant security hole in email (spoofing) just because mailing lists, which predate the spam and spoofing issues, don't want to update how they operate. Accommodating =reject DMARC policy is simple for the mailing lists. A policy of "Because that's the way we always did it" is dumb. We didn't use to recycle, now we do...because it is better. DMARC is better than allowing spoofing. Update your mailing list. Stop forging sender. Move on.
And we've had straight marriage for years so why is gay marriage news, right?
yes, we are tackling a single vertical, life sciences - with multiple SaaS products. the core vision is the industry cloud.

by being super specialized, the cost of sale is massively lower. no need for an army of sales people. focus is on product and delivery/implementation - once it is proven that your stuff actually works, others take notice in a tightly knit industry.

Eli Lilly, one of our customers, just got awarded for their innovation around using our products: http://www.informationweek.com/strategic-cio/executive-insig...
For more, and more recently:

https://twitter.com/OpenSSLFact
https://web.archive.org/web/20140125144231/http://www.peereb...

If you don't want to add a security exception.
I don't think this is unique to Switzerland, maybe a little more spectacular due to the landscape. But it fits well with their exclusion mentality.
I'd trusts self-signed certs ahead of most CAs, frankly.
I agree. I'm sure there will soon be more info. I'm looking out for a TED video :)
Thanks for pointing that out. I rephrased.
Yes. You arp poison the default gateway and route traffic through your own host instead.
It's not just number theory; it's a web of interlocking state machines implementing the TLS protocol, which itself depends on a variety of different marshalling formats for the number theoretic parameters, built on the shifting sands of optimizations for different machines, all evolved over the the course of ~15 years, starting from a package that was, literally, Eric Young's "teach myself C" project.
I'm sure there are than a few.

Box2D for Java/C# is very useful (see Farseer in C# land), and can be more efficient than going through lots of interop calls. You can also hit DirectX directly using Sharp/SlimDX, which again, is also quite useful (if you want to write a game for DirectX, you are pretty much stuck in C++ unless you use these bindings).
Those with glass ceilings shouldn't throw stones

I'm not visiting something criticizing OpenSSL if they can't get basic security right.

And I've had with the "encryption without checking certificates provides an illusion of security" people, so yes, I won't visit the site.
Microsoft releases source code for Spectrum Observatory under OSS license