skysight-inc/HackerNews huggingface dataset:
I'm no anthropologist, but it all sounds like a big succession of unfounded claims following from a single fact (the large skull). Brain size is weakly correlated with IQ, structure is far more important: otherwise, people with size abnormalities should have been geniuses [1] There are mammalians with huge brains out there --- whales and elephants, and they're behind apes cognitively.

Modern processors are laid out in a few square centimeters, and not because we are involuntarily constrained by size, quite the opposite -- we're voluntarily constraining them. Making them bigger is actually inefficient: signals couldn't reach the whole die in a single clock cycle, losses increase, and so on. Many diminishing returns architectural changes are required for scaling up [2].

[1] http://en.wikipedia.org/wiki/List_of_tallest_people -- most of those are sports players, not mathematicians or whatever

[2] http://images.anandtech.com/doci/7003/IntelDieSize_575px.png -- die size remains fairly constant through generations
I subscribe to the r/oculus where this is the big thread and top comment is from the team behind idea and slightly debunks the claim while suggesting they'd like to kickstart it:

Hey guys,
I'm from Atlantic Productions and this whole article is about 60% correct. We're currently working with the rift and we're really excited by it. We've got a couple of things in development at the moment, maybe three things in fact. They're all potentially fantastic projects but as you all know it's quite a difficult thing right now to fund development of these things.
We're considering putting out a kickstarter for a project but we'd only put it out there if we knew you guys were interested. So as a very simple show of hands kind of thing, if we were to make an immersive documentary, where you are in the scene, would you be interested in helping fund that in a kickstarter?
Would love to hear your thoughts and suggestions.

http://www.reddit.com/r/oculus/comments/22rqvu/next_attenbor...
Learn shortcuts. Work faster.
Microkernels are a nice step toward security, but they're a concept ahead of current hardware design and they don't really bring the flexibility typically promised.

Services (virtual memory/swapping, file systems, the network stack, etc.) in microkernel systems typically can't be modified or replaced by applications any more than in monolithic kernels, which is probably party of why microkernels have stayed in the realm of embedded systems, etc. where you have control over the whole system.

Exokernels bring the flexibility that microkernels don't, by moving the security boundary down the stack. Instead of moving services into trusted user-level processes, they manage protection at the level of hardware resources rather than services. This enables those services to be in untrusted shared libraries that can be securely modified or bypassed on a per-application basis.

Thus, instead of the lingering "eh, it's a little slower but we can ignore that," exokernels provide much better opportunities for optimization and tend to be much faster. For example, a database could choose to discard and regenerate index pages rather than swap them out to disk and back; a file copy program could issue large, asynchronous reads and writes of all the copied files at once; a web server could use its knowledge of HTTP to merge packets, or co-locate files from web pages to improve disk seek time.

Further, exokernels and microkernels are not mutually exclusive; they are rather orthogonal concepts (you could move an exokernel's drivers into user space processes if you wanted). If we had hardware that were more conducive to a microkernel design, for example with direct process switching rather than going through the kernel (32-bit x86 did this with task gates, but they weren't used much and were abandoned with 64-bit), this would probably be the optimal design, rather than a purist microkernel approach. Incidentally, the in-development Mill CPU design does this very efficiently, as well as a few other things that are good for both micro and exo-kernels.
Some customization options would be good: select whether you want male or female clothing, only scarves, only shirts, etc. The idea is pretty solid!
Dropbox's 4/9 launch event
It's also thrown out as a red herring pretty often around here.
Good for you.

It's been a nice day since I left, much more productive. So in the end I guess I have to thank you for being such an asshhole.
Thanks, I just tried it and it found an assignment in an assertion that the compiler didn't warn because it wasn't an if statement.

I ran it over a couple of old finished projects and it found a problem in each one. Awesome.

Unfortunately it misses a class of errors memcpy would do,( similar to heartbleed )
, if copy size is determined at runtime.
I doubt if popcorn-time.tv is taken down. "Not Found The requested URL / was not found on this server. Apache/2.2.22 (Debian) Server at popcorn-time.tv Port 80"

The Github repo is moved (again) from popcorn-org to popcorn-official. What happened?
https://github.com/popcorn-official/popcorn-app/issues/1
It's not the size of the brain, it's the "brain-to-body mass ratio" that matters. http://en.wikipedia.org/wiki/Brain-to-body_mass_ratio
That's completely bogus. C doesn't have first-class arrays so that means the entire C standard library provides no way to pass strings to functions.
36-24-36? Ha ha, only if she's 5 3.

-Sir Mix-a-Lot
your exactly right. only way to get money for a business like that is credit cards, second mortgage etc.
Time for every browser to change that behavior.
loan that never get's paid. don't have the time to run them. so then you could take back equipment, but it's mostly worthless for resell especially in a hurry. easier to just take a loss on taxes against future income.
Along that vein, "She's 36-24-36"
The Most Famous Desktop Wallpaper(Bliss) Ever Is a Real, Unaltered Photo
"[H]osting vendors that don't have isolated VM's don't also allow users to install their own OpenSSL as this would become a vector to compromise neighboring hosts."

Could you explain this please?

Here's a possible scenario... I root virtual machine X running on host Z (using heartbleed). Another machine running on Z is virtual machine Y. Because X and Y are not isolated, and I am running whatever I want on X, I can find some uncleared memory (somehow -- how?) that was previously used by Y, thus giving me access to Y. (Seems a bit handwavy, and I'm not sure this is what you meant, so any details would be helpful.)

--

For some context, I looked up "VM isolation" and found this article which I think sums it up pretty nicely: http://blogs.msdn.com/b/rsa2008/archive/2008/04/07/isolation...
Keep your sanity while developing AngularJS apps on an enterprise scale
Microsoft's dedication to backward compatibility is why Windows ruled the desktop world for several decades.

Apple's utter contempt for backward compatibility is why people who care about their sanity hate developing products for OSX. Which API is Apple going to deprecate and screw me over with today?

Microsoft always went above and beyond the call of duty to support hardware and software (with runtime code modification and more). This allows programs should have failed epically to run flawlessly on everything from Windows 95 to Windows 7.

If Android even attempted a fraction of what Windows did, fragmentation would not be a problem. Android is a perverse mix of Apple and Microsoft though. It's a pain in the ass to maintain products for Android and it's even worse for iOS.
on a positive note. I saw the crap loans companies were approving before the downturn so I pulled out all of my money from the market and only lost 5% that year versus a lot that lost 30-40%. And put it back in the following year and had pretty good gains. so at least my experience paid off some.
Sometimes you do get multiple heaps, but it can be made to work if one is careful not to allocate on one heap and then free on the other heap. One example is a C/C++ COM addin for Excel say - instead of freeing the Excel allocated memory directly the addin DLL invokes addRef/Release appropriately on the IUnknown interfaces to the various objects it gets handed by Excel. That can be automated a bit with ATL and CComPtr. A similar factory / smart pointer API can be made to work for any DLL that wants to maintain its own heap.
Soggy toast would be the first concern.
That's Windows strength as well as its weakness. For example, I've heard that Windows Shell (whose proud team member is Raymond Chen) has to carry the baggage of backward compatibility, heritage code base and stuff like that simply because some forsaken customer might be using a particular feature. It's really hard to innovate in the environment like that.
chapter 13 is brutal. no 401k contributions for 5 years.
From the literature, Amazon contracts out it's warehouse duties to fulfillment companies. I'd be interested if anyone knew if Amazon had any direct employees (other than Sr. Management) that worked in the warehouses.
I would say the worst case is a working class African immigrant heads back home to see their ailing parents, contracts Ebola, and flies back to Paris or London while suffering from a head cold or the flu that makes them cough & sneeze. After the flight, they go back to their job as a line cook. They tough out the sinus infection, because their job requires them to. A week later, major symptoms start to develop and finally they seek a progression of primary care doctor, urgent care, hospital ER, and finally hospital isolation ward when they approach the end and the symptoms are identified for what they are. In this time they've not only hit the plane passengers, they've used packed mass transit a dozen times and infected thousands through food.

Bodily fluids can be a moderate danger or they can be a very severe danger, based largely on the circumstances of the infected.
if a human and a neanderthal had a child, hybrid offspring may have been less fertile, or even rejected by both societies, or even killed.

any humans that raped the neanderthals would probably not integrate those neanderthals into their human societies. any hybrid (with neanderthal mother) would probably remain in neanderthal societies.
While most of the discussion here is technical from engineering and business perspectives, your question digs more at the root of the problem: this is a cultural and institutional problem.

I live in China: people pinch pennies (or mao) here without taking into account the overall cost. This is why you have a large market for imported goods; even amongst the most nationalistic Chinese consumer, there is an assumption that imported goods are better because domestic products are made by cutting corners.

There's a strong suspicion of things that are priced cheaply but, bizarrely, people still buy cheap goods but are resigned to the product failing rather quickly. This just doesn't apply to electronics, but also to clothes, vehicles, etc.

There's a very strong tension between value-pricing and product quality. That is, there is a demand low prices but assume that the product quality is poor. On the other side of the spectrum there is a demand for high-quality "luxury" goods too. Thus pricing your product too low, even though it may be a quality product, basically indicates that it is a low-quality product.

Part of the myopia here is that people will cut corners without figuring out the benefit/risk ratio. That is, is it worth losing a contract to improve your bottom-line by a negligible percentage? Culturally (and I'm speaking in a broad generalization here) there's a desire to "win" at a contract... to make the contract be better for yourself than what's on paper. So even if the contract spells out your profit margin, it's a matter of pride to be able to improve on it (aka, "sticking it to the man"). With China's large population and widening gap between rich and everyone else, there's a perception that you have to get rich or die trying; no one else is going to help you... certainly not the government.

China's future could be a lot brighter than it is; the problems aren't technical.
posted this on the wrong thread.
Our financial system's infrastructure is in need of a serious web 2.0 upgrade
Hey electrum,
There is a discussion on this matter over [1]. Other people and I still cannot get symlinks to work on gh-pages.
Do you have any idea why that is? It could be because of a free vs. business GitHub account…

Cheers

[1]: https://github.com/Sidnicious/gh-pages-symlink-test/issues/4
There's something I don't understand: I've heard that one of the keys for avoiding VR motion sickness is having both rotational and positional head tracking.

A naive interpretation would be that for that to be possible from a prerecording, you'd have to have a 360 degree recording from the perspective of each cubic millimeter whithin the given volume of space that you'd expect someone's head to move.

Of course that's impossible, and there's certainly ways to interpolate from fewer viewpoints, but I've not heard of any that sounds like it's convincingly solved the problem. Is there one?
Did you read the link? The point was that in idiomatic C, you pass a string to a function by passing a raw pointer to a char-array buffer together with an external length.
Indeed, trading off sensitivity for specificity is always a win when trying to sell static analysis to people.

Considering that any non-trivial piece of software has a fairly large number of bugs, you can dial the sensitivity way down and still find some bugs, and the high specificity looks really impressive "Most of what it labelled as bugs really were!"

Consider the hypothetical situation where your piece of software has 40 bugs in it (but you don't know that).

If you see a report of 10 bugs and 6 of them are real, that looks more impressive than a report of 100 bugs where 20 of them are real, despite the fact that the latter actually found more bugs. In fact there is a non-trivial chance that the first 5 or 10 bugs you look at in the latter will be false-positives.

Obviously if your specificity goes too low, the payoff of inspecting each report starts to become questionable, but I think that to successfully market an analysis took, you need to sacrifice more sensitivity for specificity than merited by a rational analysis of the cost/benefit of detecting the bugs early.
This would be really nice. E ink with LTE and tethering would totally make me happy.
Attenborough has been pushing the envelope of new visual technologies for a LONG time. Bravo to him for keeping at it. I can't wait to see it.
Maintaining a Linux distro is a lot of work, even if it's a variant of another distro. The more you diverge from the upstream, the more work it is.

Note that your examples of distros that adopted PaX/grsecurity are also your examples of distros that have been abandoned.

You need to pick your battles. Being based on Debian oldstable, which is still receiving security support while being a stable base to work on, is a fine decision. Not introducing a big change like grsecurity which will inevitably lead to having to tweak dozens of packages to continue to work properly (and thus have to maintain your own forks of said packages, without being able to easily pull security updates from upstream), is also a reasonable decision.

I invite you to create your own distro if you disagree. Please show me your up to date, privacy and security oriented distro; I'd love to see a comparison of how your style of maintainership will differ from that of Tails.
A different person achieved retrieving the key in 100,000 requests, which is well within a practical and cheap botnet attack. The next question is how much of the key did they receive in the requests that revealed the key. If it was most or all of the key, a single attack node could query 100,000 different servers with the high probability of retrieving a key at least once with a low probability of being blocked by any of the servers.

TL:DR, patch OpenSSL and revoke and rekey all your certs.
Bugsquash: Help Us Test OpenSSL and Make the Internet Safer
> MinGW, the compiler for VLC, LibreOffice and most other FOSS projects on Windows does exactly what Raymond says not to do.

While this is mostly true, and because of the project of VLC on WinRT (Windows Metro), VLC can now link, in a MinGW environment, to MSVCR80, 90, 100 and 110.

The main problem with all those, is that we cannot redistribute MSVCR*.dll for licensing reasons.
Maybe he's not a sinister person, but he tells narratives in which his side is unambiguously good. What happened in this book was lazy research and poor journalism. There have been plenty of factual critiques, which should set off flags around a book that purports to be an expose. But he spends more of the book moralizing and appealing to pathos than actually explaining how things are. As an immigrant, I thought it was cheap how often race was brought up in the book (examples: at some point one of the protagonists had a "this is how we do it in America" moment, whereas several HFT programmers were noted to be Russian, and as I recall Lewis saying, Russia helped them because in addition to forcing them to write clever, efficient code, they had learned to take advantage of the corrupt system. I mean, come on. The one guy from the SEC who spoke up? An indian quant. I don't know how Michael Lewis surmised that he was a quant, rather than just someone else working for the SEC. But there you have it).
HN is crawled, the links are just nofollow.
cool! I have a friend who is doing her undergrad there , in CS and math. Lemme know if you have specific questions. Good Luck with the decisions
Actually, I don't see how it is an important story, though it was interesting to read, and I enjoyed it. As you said, it's one more story in a long list of stories.
Ask HN: Does open source and free product cannibalize your paid product?
I'm in a bit of a dilemma. I have developed a product that I think would be great if it was free because not many open source, free versions of it exists but I also don't want it to cannibalize my paid products and subscriptions.

Is my assumption correct in that people who would've paid for my product would now be satisfied with the open source, free version that I released and never end up paying for the full version? Even worse, someone customizing it using their own inhouse development resources, productizing it with their own brand and selling it and becoming my competitor.

I am concerned about working all those hours into the product, open sourcing it (thereby making it available at competitors hands) and not getting paid for it.

I am also assuming that I could get some free marketing when I release the free version...but I'm not sure if this offsets the cannibalization of sales.
http://trachanhquan.com.vn/

TRÀ CHANH QUÁN là mạng xã hội – Game online theo lượt dành cho các bạn Teen trên nền điện thoại di động và Smart Phone. nơi chia sẻ cảm xúc, chat chit, video, đăng ảnh, viết tường, chơi game,… game đã nhanh chóng thu hút được hàng triệu lượt bạn trẻ tham gia trên khắp mọi miền đất nước. Ngoài chức năng giống như một mạng xã hội tra chanh quan còn là 1 địa điểm vui chơi giải trí của các bạn trẻ, Thỏa thích chơi các Game Bài cùng bạn bè: Liêng, Phỏm, Tiến lên miền Nam, 3 cây, Tiến lên miền Bắc, 3 cây gà, poker, xito…
More People Were Paid To Exploit Heartbleed For The NSA Than Fix It
Yes I read the link. It makes the unfounded claim that heap allocated strings were never intended to use the NUL character as the means of determining length. Get a 1st edition of K&R and see what fraction of functions in the standard library pass a length with a string.

Get an SVR4 API manual and do the same. After doing this I don't find this argument to be compelling.
Because .NET has version mechanisms built in. The code will make use of the right version if available.

You can do the same with WinSxS and manifests, but again too many lazy developers.

Doing that would be the same as .so hell in GNU/Linux regarding libc versions.
A full Tokyo-Nagoya-Osaka maglev (SCMaglev) line is under construction in Japan right now, with the Tokyo-Nagoya leg due to be in operation by 2027.[0]

As if late, traditional HSR is getting a lot of competition (in Japan at least) from domestic flights that cost almost exactly the same and take about the same amount of time. This has led to a resurgence of the "old" airports in Tokyo, Nagoya and Osaka.

[0] http://en.wikipedia.org/wiki/Chuo_Shinkansen
Wish I could see what's on the monitor!
> How about this one: "C++ is horrible because of implicit copy constructors"? That one's not in C :-).

I also mentioned compatibility with C semantics.

"The Design and Evolution of C++" contains lots of such examples.
Overreaction to sarcasm.
Stop Writing Code Everyday
Thousands evicted by police in Rio
Does Linux suffer from this problem?

I think the answer is "no" because Linux distros generally recompile the world with each new major standard library version. If any C standard library gurus are reading this, feel free to chime in!
Check out the interesting stuff you might have missed
What's wrong with an installer? An unattended installer or even a click through one is no obstacle these days.
I knew I was going to have this remark :)
Now correct me if I am wrong, but I think the FFT (which computes the discrete Fourier transform) cannot replace the continous fourier transform in my case, because the optimal periods I find are non-integer values. In the first case, the holes are separated by 7.5 pixels. The FFT could only have told me that they are separated by 7 or 8 pixels, which is not precise enough. Same thing for the tempo, a beat corresponds to 7.1 frames of the video, and a FFT would have told me 7.

If someone knows a way to use the FFT to get non-integer periods (apart from oversampling the signal) I'll gladly change the code.
>Last decade, Steve Marquess, a former U.S. Defense Department consultant living in Maryland, started the OpenSSL Software Foundation to secure donations and consulting contracts for the group.

That's kind of like a former Christian preacher living in Alabama raising money for Planned Parenthood.
In the end, it's about efficiency and redundancy. If a function is going to have to do something with every character of a string (e.g. copy it into a new buffer), and you don't have very many registers reserved in your calling convention (especially true for e.g. system calls), then it's silly to pass an explicit length if you know you've already NUL-terminated the string in its buffer.

All Unix system-call wrapper functions were specified this way, because it is guaranteed that they will need to move the string data from a user-space data structure to a kernel-space data structure (copying it wholesale in the process) before manipulating it. The NUL-terminated string can, in this case, be thought of as an encoded wire format for passing a string between the userland process and the kernel.

And because the Unix system-call wrappers--the most visible and useful parts of the C stdlib--followed this convention, C programmers generalized it into a convention for passing strings in general, even between functions in the same memory-space that can afford whatever registers they like.

If you're not going to iterate over everything in the passed buffer, though, C intended you to do things more like sprintf: take a destination buffer, and explicit size; write to the destination buffer, without scanning for a NUL first as a place to begin, and without appending a NUL afterward; and return an explicit size in bytes written.
JavaScript is all about lack of standard solutions. Take any aspect of the development and you will get a million of possible solutions, whether they are classes implementations, package managers or build tools.