skysight-inc/HackerNews huggingface dataset:
I think you missed the part where the NSA claimed it prioritized protecting the data of Americans and American companies. Nobody denies that exploiting the bug would be useful for the NSA.
So You Want to Be a Bitcoiner
Grew up with both parents in law enforcement. The one time I risked name-dropping my mother in another county about an hour away, I lucked out and the guy knew her and gave me a warning - and I was in a vehicle with out-of-state plates (had come up to visit).

Friend of mine is a county cop near Houston. He told me, "The bigger the stack of 'I Donated to the 100 Club' stickers or whatever on their back window, the bigger the chance they're going to be a dick and they'll get a ticket anyway."

I'd say that having a Texas Mason license plate (not frame), being polite, saying "Sir" or "Ma'am" as appropriate, and handing over my CHL (as required by law) with my license/insurance - showing that I've undergone a background check already - has more of a chance of getting me out of a ticket than any stack of stickers.

Unless I run into an officer that is anti-CHL - but so far, that hasn't happened. Had one ask me "Sir, do you have your weapon on you?" "No sir, I'm not allowed to have it on property at work." "Well, you never know when you might need it."
Can you please elaborate a bit? Where in Asia are you located? Please write to me at lalwani.vikas20@gmail.com if you want someone in India.
Email is [redacted]. HMO:

Just launched [redacted], an automated gift shopping service.

1. Would like to ask someone questions about it. (Would you use it? What kinds of gifts would you like to see offered? How do you keep track of gift-giving? Is it a pain point for you?)

2. Would love beta testers and feedback.

Let me know how I can help. I'm happy to answer questions, beta test things, or give programming advice (esp. anything about web development).
Who said anything about suing the USG, unless you are already assuming someone contributing to OpenSSL was hired by the USG in some relevant capacity. I don't see what would shield contributors to OpenSSL from a criminal investigation.
For me, Twitter works for hyper-local things. All the local media personalities live-tweet council meetings and the like, local politicians and businesses have active twitter accounts.

It's great for contacting the public face of something in a fashion that makes it impossible to handle the matter privately. Every business or elected-official is super-gracious and accommodating on Twitter because the world is watching.
It's hard to notice subtle things without an A/B test, it might just be that quiet parts of certain songs just don't sound as good.

For something like this you would want to measure the noise levels, not make assumptions about audiophiles being wrong; they're only wrong a significant fraction of the time.
A free list implementation is some kind of self made allocator.
The states can go for a variety of reasons when the feel the federal government is overstepping their bounds or has committed a constitutional violation. They can open investigations into federal behavior.

I never said anything about damages.
That's a good question! It'd be easy to do a hacky port to another sport, but a quality port would be much harder. There is a lot of detail involved in the simulation engine, the AI, and the UI. To put in the time to make a good simulation game requires some significant motivation.

For me, the basketball version is fun to work on because I'm a huge basketball fan. Other sports wouldn't be nearly as fun for me. If I thought that making versions for other sports was the path to riches, I might be motivated enough to try it. But if the basketball version can't grow beyond its current popularity, then the other sports probably won't be hugely profitable either.

That being said, I am working with someone to make a baseball version, but it's too early to say if anything worthwhile will come from that effort.
Drugs Can’t Cure the “Mental Illness” Crisis.
Twitter is a replacement for RSS in the same way that DropBox is a replacement for running your own FTP server, both in terms of usability and liability.
So out of curiosity, I ran the python heartbleed tester against their server. Surprisingly, the first (and every response thereafter) returned a memory dump which contained at least part of what looked like a private key. I immediately became skeptical when each of these apparent private keys ended in LOLJK.

0690: 79 37 70 71 31 76 63 2F 74 70 49 67 68 4C 4F 4C y7pq1vc/tpIghLOL
06a0: 4A 4B 3D 3D 2D 2D 2D 2D 2D 45 4E 44 5F 52 53 41 JK==-----END_RSA
06b0: 5F 50 52 49 56 41 54 45 5F 4B 45 59 2D 2D 2D 2D _PRIVATE_KEY----

Seems like a clever setup to return hand-crafted responses.
I don't know about that. Yesterday, my sister (a person who has no interest in tech, government, and is downright afraid of both) asked me about Heartbleed and stated it was the topic of discussion during breaks at work. I was pleasantly surprised.
Sounds plausible to me. I would think the NSA, and other spy agencies, pour over every release of a security package to see if any exploitable errors were made.
Is this part of a bigger swell of anti-technology sentiment or strictly about homes? I wonder if there is starting to be a backlash against being tied to a device, being recorded on the street, and after all that, the people behind it are now rich and taking over large homes in SF.

Interestingly, the more tech-savvy folks seem to be less caught up in their devices than those who still see it as a bit of a novelty. At dinner in the midwest the other night, the table next to ours was 40-somethings who kept taking cell-phone selfies while the 20-somethings at other tables were just chatting with each other.
This is what tooling is for: Define your entities, and generate a wrapper around a datastructure is for, just like you would do with Doctrine and PHP.

Change your entity? Regenerate the wrapper and generate a migration.

Problem still is: Nobody is writing tooling for WebSQL. Everybody just seems to automatically grab NoSQL, throwing away 30 years of built up software developing knowledge, including the golden rules of Database Normalisation: Don't duplicate your data, and compartmentalize.
Having conversations with people and not just sending out a single tweet has helped me a little bit.
I'd like to clarify a bit on "speeding itself does not cause accidents". You're mostly right, but it's not strictly true. There are realistic cases where speeding itself will cause a crash, such as poor visibility where you're driving too fast to stop within the distance you can see, driving fast enough to lose control on poor surfaces, being too fast to take a curve, and such.

I don't know how significant it is, I just want to say this because people shouldn't think that they can go as fast as they want as long as they drive well. Sometimes you simply have to slow down.

(I got reminded of this last year when I wrecked my car by hydroplaning on the highway. Technically I was within the posted speed limit, but clearly I was going too fast for conditions. Speed definitely caused the accident unless you want to blame the highway department for poor drainage or mother nature for the weather. Which, of course, I do, but I still should have gone slower.)
True, but you also make much more in salary and pay much less in taxes.
>N x N has the same cardinality as N

until the N is aleph-one if i remember correctly, or do you think it is not?

http://en.wikipedia.org/wiki/Cardinal_number
I love geeks who find the same easter eggs. =]
This is about entitlement, not economics.

If you don't drive like an asshole, speeding tickets are just an inconvenient, Poisson-frequency toll. Yes, you can safely drive 80 mph in light or no traffic... and if you do so, you might get one ticket every ~3-5 years. You're not likely to accumulate points. Good-driver-got-unlucky tickets are rare and usually minor enough that it doesn't cost-justify the plate. Even if your insurance company is a dickhead, you can usually go to court and get the charge reduced to something without points... unless you habitually drive like an asshole (or speed in the wrong state; be cautious in Virginia.)

It's not surprising that this article would focus on Sand Hill Road, where the running ideology is that one should be able to buy one's way out of anything.
So we should just blindly trust an agency that has repeatedly been shown to have abused that very trust for self-serving and hypocritical ends?
Report: NSA exploited Heartbleed for years
Basically the cut down to everything is the laziness of how it is developed and how many people are actually looking over the entire code. ATS allows the developers to know that the can be even more lackadaisical about coding as ATS will remove bugs for them...
Irony would be such a patch leaking information about the state of any random number generator leading to more easily guessable session keys or the like.

(Of course, creating suitable fake data with a separate PNRG to avoid this would be pretty easy.)
Well, consider what that would look like. Given the way that the US Government has pursued Snowden and other whistleblowers for embarrassing them, if you had privileged information indicating that the government was deliberately leaving nearly all Americans' online information exposed, would you want your name attached to it?
This isn't about cardinality, though, this is about number of steps, which is more properly measured with ordinal numbers. I'm not familiar with the theory of infinite-time Turing machines, but it's at least plausible that there are things you can do with omega^2 steps (or larger countable ordinals) that you couldn't do with only omega steps.
I found this article helpful in understanding the 'multiple times per day' motive.

http://martinfowler.com/articles/continuousIntegration.html
Both (especially the second) are subjective. In the context of an arbitrary objective even BASIC may be a good choice.
That's true. Other thoughts: Tinder has flipped the traditional dating website model on its head. On OkCupid and others, people filter by black-box quantified "compatibility" first and then attractiveness. Tinder just puts attractiveness first and leaves compatibility scoring to the people themselves.

OkCupid recently introduced a feature where you can pay a small fee (about $1) to temporarily boost your personal search ranking. This is clever, and also fits very well in Tinder's matching model. Adding features like that or the ability to pay for additional profiles for A/B testing would put Tinder in the black pretty quickly, I think.

edit: I should throw in some negatives. There are quite a few duplicate/spam profiles on Tinder created by escort agencies. Finding a way to seamlessly detect & block these will be important to avoid a reputation of seediness. It's already on the line due to the common practice of mentioning Tinder alongside location-based hookup apps.
Michael Arrington Ignites Twitter Chat On Tech And Race
I once read a book by a retired police officer about how to avoid tickets. (Protip: a new one comes out every few years)

His take was that organizations within the police department are just like fraternities on a college campus: You have people who are with them and people who vehemently dislike them. So you're taking a gamble. Still, it seems like it's worth it if you're a speeder.
HMO: Know anyone interested in analyzing consumer EEG data? The product I'm working on is developing a solid dataset: http://www.threepound.com

How I can help: I'm a former startup data analyst and strategy consultant. I can give a few hours to help with making sense of the data you're collecting or think about how to start capturing 3rd party data.
Any particular reason to choose Express over Koa?
OpenSSL has an abstraction layer over malloc, which uses an internal stack-based free-list, and which it uses for all allocations. It's not an actual malloc(3) implementation, which is half the problem.

If OpenSSL had just written a malloc(3) implementation that sat in a separate shared-object--the way that, for example, jemalloc does--then switching it out would be a simple and obvious linker argument. Any developer who had used a project that relies on an alternate malloc (e.g. redis) would know that "test while linked against system malloc" is a crucial step.

Instead, you have to learn that there's a specific OpenSSL debugging flag that disables the "caching behavior" of the malloc wrapper, causing it to become a passthrough to regular malloc. None of the tests use this flag.
Chinese telegraph code
OK. Message received and understood :)
Except that's not how K&R would have done it. It would have been pascal style: one byte of length directly followed by the string itself in memory. The pointer would be the address of the length byte. Now it's hard to create strstr without copying so they wouldn't. Instead you would have a new API where every call would have offsets to the beginning, likely it would be one based too. Anyway C does it the way it does cause PDP set the zero condition flag on move.
What about the relative ease and speed with which the bug was fixed? Fuzz testing could certainly find the bug in closed source software, but patching it is a different story, especially if the person or group that controls the source code is slow, uncooperative, or extinct.
It's probably cryptographically hashed. There is no reason to keep a raw password in RAM beyond the stack frame of the function that receives it from the client - at any point after that, just store & compare the hash.
I guess I'd argue that if you can avoid the tickets without the detector through sufficient awareness and caution, why not save the money?
Anyone who is proud of speeding should come hang out and I'll throw punches near your head just out of range. It's cool I have it under control; it will bring me some pleasure and you will only be at risk if you get in my way or if someone dumber than me follows my example doesn't have as much control.
Short: WebSQL enables more powerful web applications. It allows some online features to be used offline.

It's not about SQL it's about a proper relational database with tables, indexes, ACID, etc.

You may remember Google Gears (http://en.wikipedia.org/wiki/Google_Gears ), even back in 2007 one could use the Google Mail (GMail) web interface during a flight, train ride, etc. to read mails, write mails, edit drafts, etc. As soon as the connection had reestablished the data synced between client and server. Later Google rewrote it to HTML5.

There was a trend to move everything to the "cloud". But with the arise of peer-to-peer web applications (WebRTC, etc) and thanks to the bad NSA news we need good client side cache and data storage APIs.

I haven't seen a SQL library as shim on top of IndexedDB. It would be pervert anyway as IndexedDB is implemented on top of SQLite in Firefox.

I would like to ask Mozilla to finally implement WebSQL. With a relational database, more powerful web applications with optional offline support would be possible.
Nathan Myhrvold is a hero, bolding hacking the legal system and showing where it's vulnerabilities are so Congress can step in an-- oh who am I kidding he's pretty much the worst. Nathan a proper astroturfing is going to cost you 10% of your revenue, I'm willing to edit this comment in your favor if you want to do this the easy way.
Your friends tell you about your flaws and shortcomings. The people who keep quiet or even exploit your flaws? They are not your friends.

So, what's to keep some organization that runs a package repo from publishing OpenSSL packages that claim to be like OpenSSL 1.0.1g but actually display the heartbleed bug? I also ask myself, would the NSA seek to implement such a thing? They would, though that is an entirely different question from if they have.
It was definitely easier to fix because it was open.
New reports saying the valuation was actually much closer to $500M. Now that makes a lot more sense to me
> to stop within the distance you can see, driving fast enough to lose control on poor surfaces, being too fast to take a curve, and such.

Agreed, but I classify that as "driving like an idiot" - driving too fast for conditions is in a category beyond speeding. Part of driving well is knowing - outside of concerns for a ticket - when it's possible to speed safely (and by how much), and when it's not.
It's no where near as much money as it is to the people who are actually getting the offer. It's like 2 weeks pay for an engineer and 2 months pay for a warehouse worker.
Those can just as easily be screwed up in relational databases. For example getting the schema wrong, or only updating it by accretion (adding new tables).

A developer being below average (as half of all developers are), using the wrong tool for the job, not understanding things etc will make a mess. A claim that developers can screw things up is uninteresting (and true).

A claim that there is no scenario in which a "NoSQL" database is the better solution is a lot more interesting, and requires more than "some developers could screw it up" to substantiate.
By N, dkarapetyan presumably means the set of natural numbers, or aleph_0. So it isn't aleph_1. That said, it is also true that aleph_1 x aleph_1 = aleph_1. More generally, any aleph_alpha x aleph_alpha = aleph_alpha, for any ordinal alpha; and if we assume the axiom of choice, then any infinite cardinal A can be written as some aleph_alpha, and hence satisfies A x A = A.

However, ultimately none of this is relevant; number of steps is properly measured with ordinals, not cardinals.
NSA exploited Heartbleed for years
To be fair to the NSA, it's not just them. Many other government agencies operate under the assumption that society is better off if people are protected from themselves. It's why we have FCC censorship and the war on drugs. Questioning this core assumption is verboten in these organizations because it is equivalent to questioning their reason for existing. So when they take criticism from the public they naturally retreat to their core assumptions and values, even if they have to dress it up with doublespeak.
The number one feature we need to add to P2P transportation services is common carrier laws. There is no reason that I need to check N different services to get a ride. Plus, making it possible for all buy and sell orders to be available across network does the most to protect the consumers and suppliers.

These companies should be free to operate their own apps, but they should be require to make their buy and sell orders available to others so that a generalized market can be built on top.
Great idea :-)

A couple of observations:

I'm a non-USian, and while it looks like you ship worldwide for 5 USD, it's not crystal clear. Be good to make it so.

Also, I'm a Brit -- we're very polite ;-) -- so 5 USD including postage feels like I'm taking food off your table. I think most non-USians would be happy to pay an extra couple of bucks. Just a thought. Or maybe go down the middle and say, 5 USD + 1 USD shipping worldwide.

(Here's my thinking: Hmm. 5 USD. Seems cheap. What if it doesn't really include shipping. Hmm. Don't really want to get into that discussion. Move on.)

Also, while you have some great start-ups in their -- \o/ Buffer -- personally, I'd be in the market for cool tech. I see you have Firebase, which is awesome, but my current faves would include redis, jruby (new logo recently), and a few others.

It would increase your workload, but of you could let a customer pick, say, twelve from 20 or 30, mixed start-ups and tech, that would be great.

Okay, I'm rambling. Good luck with it.
The worst problem with the NSA knowing about Heartbleed is the total lack of accountability.

If I were any US-based company CEO whose customers got hacked by Heartbleed exploits, I'd drag their corpses to the court if necessary.

Sidenote: People have asked "Why are you doing JS-based cryptography on passwords if you have HTTPS?" - here we have the ideal answer. Encrypting the passwords using public-key crypto in addition to HTTPS and doing the decryption in RoR/PHP/nodejs would at least have spared the users from the need to change their passwords.
Our Commitment to your Rights and Privacy
The bug only existed in the wild for two years and less than a month. I’m not sure what the “at least two years” means in that context. The NSA can’t have known this bug for a lot longer and “at least two years” implies to me “at least 24 months and possibly many more”, not “at least 24 months, at most 25”.
Yes, I laughed when I got a console prompt on an $80,000 EMC Isilon disk array and it was FreeBSD.
No, I got that. You missed the point of my critique.

It is impossible to scale that $8 delivery lunch large enough to provide any significant threat to local business. There simply isn't enough VC money for the hundreds of millions that would take. The scruffy little startup trying that model will either raise prices long before profitability, or will run out of money and disappear.

But a standardized delivery model that is a straightforward service charge, made possible by modern tech? Hell yeah, that's a good business model - and it's good for the mom and pop restaurants too.

Now, if you can point me to the mom and pop food delivery service...
Years ago in NY, an acquaintance showed me his "mini shield" which was just that, a small version of a NYC police shield (badge) that he clipped onto the inside of his wallet.

The story I was told was that police officers were given a number of these mini shields for their family members. The idea was that if the family member was asked for ID by another cop, presumably for doing something wrong, opening their wallet would reveal the mini shield and get the person a little (or a lot) of leeway. Wink, wink.
Don't know about Ada, but Rust and ATS can. The Rust code would need to be written in an unsafe block in order to as freely modify memory as C, but regular Rust can still do a lot without requiring automatic memory management, safely.

As you can see from the article (not that you seem to have read any of it), ATS can express C, and optionally prove low-level stuff about it.
I wonder what the tax implications of taking this offer are. My gut says it becomes considerably less desirable. Too bad
I would immediately support this. This conversation needs to be started again. I'm gonna ping some people on twitter.

I've just searched for a WebSQL on IndexedDB adapter yesterday and it's certainly possible, but it's a nightmare from the perspective of any sane person. This polyfill I found runs SQLite compiled with CLANG to javascript, which means running 2MB of javascript to support something that they already support 'under the hood'. I refuse to work with that.

https://github.com/Philzen/WebSQL-Polyfill
Why do you think Bloomberg was any more thorough in its Heartbleed investigation than Newsweek was in outing Dorian Nakamoto as the author of Bitcoin?
In the last month/years, I've noticed that a good number of companies where I live (mostly ISPs) have started to offer official support over Twitter/Facebook. It's usually the only way to get some decent support, as the choice is between social networks and call centers - and for most of those companies, their call centers are outsourced out of the contry, full of people that barely understand/talk your language, and that don't really know anything about solving issues.
US seizing tax refunds of children over parents' debt
The most important application of quantum computers seems to actually be to enable scientists who do fundamental research to answer questions from reporters such as "What practical purpose does your research serve?" with a single catch all buzz word. So the answer to the title of this article is clearly: Yes.
do you really have to be wealthy to have access to $2k? While you can argue this is a corrupt system, you dont have to drive a high end two door sports car to have access to it.

edit: two door