skysight-inc/HackerNews huggingface dataset:
Headline is misleading by omission.

This isn't a data-snarfing app along the lines of what we hate the NSA for, this is a tool put out there so people who want to send things in to the police have a quick way to do so. Less like Carnivore/PRISM and more local police tip line, but on the internet.

There is no coercion happening here. There is no "surveillance" happening here, at least not in the loaded way that term in used nowadays.

I see absolutely no problem with this. Normal people willingly participating in law enforcement is a Good Thing.
Sneaky Peak: The 2014 Learning Trends Survey
write non-obvious code instead of automating writing obvious repetitive boilerplate one.

That's fine and all but Haskell's a powerful enough language to abstract away most boilerplate. What little remains can be taken care of with the TemplateHaskell extension. For a nice example of a library in Haskell that requires almost no boilerplate at all, check out XMonad. All of what you'd expect to be boilerplate is packed into a variable called defaultConfig.
Oh, I completely agree, but I think punishment will always be part of the criminal justice system in my lifetime.

My point is that the thing we need to change first is lowering sentences since they are just absurdly long given that it is so easy to catch people committing crimes relative to just 20 years ago.
The funny thing is the constitutional court now has its own twitter account. I'll say what I said about this before to some friends:

"Welcome to Turkey, where we struggle with basic literacy but the stodgiest of government institutions has a twitter account to spite the leading political party."

http://twitter.com/AYMBASKANLIGI
Sounds like an great plan. Perhaps you could provide an example from history where your idea works? I'm having difficulty finding one.
You assume that your wage is proportional to the value you deliver to the world. Bad. Not correct. Try again. There is a positive correlation on the population level, but on the individual level the relationship is tenuous at best.
You don't need to use p or q. See http://vnhacker.blogspot.com/2014/04/idea-to-solve-cloudflar...
> On the night of his arrest, Serge waived his right to call a lawyer. [...] Then he sat down and politely tried to clear up the confusion of this FBI agent who had arrested him without an arrest warrant.

These are things no sane person should do, especially if they're innocent.
In case you want to try out static analysis on your own code-base, here's a link with the list of most popular tools in this field, grouped by language: http://en.wikipedia.org/wiki/List_of_tools_for_static_code_a...
Good job! Here's a similar one, but animated: http://wagerfield.github.io/flat-surface-shader/. It was on HN a few months ago.
This thing where you shame people who invoke any kind of authority figure really needs to die off. It's sophomoric at best.
So in other words, there's now a $5000 hiring bonus if you can figure out a way to jump ship to Google or any of Amazon's other competitors. Sounds good to me.
I wrote a tool some time ago. It's 10 lines of Python using pyasn1.
Here's an useful website if you want to make the code more readable: http://jsbeautifier.org/
In many impoverished areas, there is a high correlation between lack of clean drinking water and lack of fuel sources.
It's not a good idea to remove anyone's copyright notices. See, e.g., http://newmedialaw.proskauer.com/2013/08/05/infringing-copyr...
If you like it, promote it; if you don't, just flag it. (I flagged it because this isn't content or discussion)
Turns out, when you redistribute wealth under specific historical circumstances that no longer prevail, consumption increases so rapidly that the economy takes off.
I still get the same error mentioned above.
Grow your own bugs
I don't know about calling it theft, but some courts have made it into a DMCA violation, though there is disagreement on that point.
You might find this helpful with creating a GUI: http://appjs.com/

With Webhook being Node (I'm guessing based on the distribution via npm?), you'll feel right at home. As a Node guy myself, I found it immensely valuable when I was building a toy desktop app.

Great job with this by the way. I started on a similar project a few months ago (fell by the wayside), and it makes me really happy to see someone execute it, especially this well. Keep it up!
Have you guys thought about possibly employing smarterer.com rankings? I took your test, I think smarterer may yield a better evaluation, although you can't write code on a clock.
Cute animal photo
Really funny and nice animal photo that will make you smile!
It shows up as private to me...
Extracting OpenSSL private keys from core dumps
GE cut all businesses in which the company could not dominate the market in first or second positions and I doubt those all were slackers.

(Shrug) The ones who weren't slackers did better somewhere else. The ones who were slackers, Welch was right to fire. What's the problem here, exactly?

I'm not defending stack ranking -- it's stupid and counterproductive. But the notion that GE owes somebody a lifetime career at their shareholders' expense is unsustainable in a world that (rightfully) doesn't work that way anymore.
https://www.youtube.com/watch?v=_7jENWKgMPY

This one might be even larger, it's kind of a hybrid configuration though.

Also, isn't a Chinook technically a multirotor?
Criminality is for the justice system to decide.

Seriously though, almost all posts about the financial sector here go something like: "They're overpaid, they rip people off, why don't I make as much money since programming is so difficult and requires so much education, etc...".

Yet somehow people on HN forget where funding for start-ups comes from... They benefit from the system yet complain about it all the time.
Easily find similar websites
If you are just drinking water and not eating, then this could be a problem, but then you have other problems anyway.
Don't get me wrong I see at least as much bad coming from this as good, I just find directing anger at the technology to be illogical and think it'd be more lucrative to direct such emotions to the root issue here which is that the police as a concept is inherently problematic. Solving those problems solves this one for free, and prevents its reoccurrence to boot.
same here. it was public until about 10 minutes ago
Build your own 2048 with SpriteBuilder and Cocos2D – Part 1
US federal debt was largely domestically held. Also 'most European countries had almost fully recovered by the mid-50s' seems quite wrong to me as a European. Certainly, they had functional economies again and cleaned up the mess of the war, but that's hardly a full recovery. European countries were paying off war debt far longer than that too. The US had a huge economic advantage for several decades.

Things like price controls and the GI bill and the Cold War all helped in their way, but I'm not sure that that's a formula you can deploy going forward.
Turns out it's hard to post videos of talks before they happen, and after they've happened it still takes at least a bit of time to get them online.
Ned Batchelder's PyCon Talk on Testing
Do you have some kind of "always https" extension installed in your browser? http://qrohlf.com should load just fine, https will not.
Fantastic tool and it feels a lot better than digging around with `dtrace`. Really looking forward to help on the OSX side as it will help us tremendously.
Slightly OT: What is the background for allowing $ to be used in ECMAScript identifiers? I imagine there could be some compatibility background.
Which is what caused those particular vulnerabilities.

OpenSSL has been vulnerable as you state because it is C rather than managed code, and managing memory has never been one of the core teams strong suits.

I get the reason for using C, OpenSSL is probably the most performant SSL solutions available. It is much less resource intensive than say Polar. (NSS is getting there, but is not really a solution for embedded systems [routers and such])

>all OpenSSL bugs in the last 10 years is that they often come from basic problems/difficulties with C (array out of bounds, length checks and such)

When you have a means to over flow or retrieve memory you can get at data or execute code to give you data. Which is the bug that is causing heart bleed.

What is making heart bleed worse is that it goes back so many versions so for the first time in a long time there is a well known vulnerability that is the same on everyone who runs it.

It isn't a "worse" vulnerability it is a "more common one". Think of it like a Genetic defect. If 1 animal in 10 has it, the herd still has "herd immunity". Or the old "there are no viruses for mac" back when mac had like 2% of the market share so even when there were viruses they were hard to spread. We are now at a point everybody who wants to be malicious knows how to attack, and there are a lot of thing to attack, so more attackers will get "lucky" and find something interesting, especially since there will be so many servers that no one remember they need to track down and fix.
Comparing a (presumably) merit scholarship with a 'cute' boy/girl favour seems misleading here.

IMHO better 'gift' from the community might be an interest free loan.

That is worth some $$ (600-1200/yr) and solves a real need.

Paying it forward is still optional.
How is it that you're incapable of recognizing that 3% is larger than 0%?
A Tipless Restaurant is a Well-Run Restaurant?
No, I'm talking about the licence.

> Each licensee is addressed as “you”. “Licensees” and “recipients” may be individuals or organizations.

> To “convey” a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying.

> All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program.

> You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force.

https://www.gnu.org/copyleft/gpl.html
I'm curious : what parts of your game code were you able to reuse on the ios version ( apart from obvious things such as the game logic itself) ? Network ? Opengl libs ? Sound libs ?
TIOBE ranks seem to be kind of proportional to the activity of the language creator's Twitter account.

Science ftw, I guess.
Something similar is used by https://peerlibrary.org/ on their homepage’s background, except that over there the pattern is dynamically being animated — to great effect.
While dtrace is extremely robust, it is usually, in my case, not pulled up thanks to the level of expertness needed to really dig properly. This seems to really help welcome usage much more frequently and, with the OSX core / kernel team lagging as they have been for years, we really need additional instrumentation like this.
Some JATOs?

https://www.youtube.com/watch?v=VHOvoO-6nWQ (action at 37 seconds)

https://www.youtube.com/watch?v=5gXfK4ypirI

They can be dangerous...

https://www.youtube.com/watch?v=Hru0z9WJwKo
The copyright belongs to you as long as you don't convey the program. GS didn't convey it, so it belongs to them.

https://www.gnu.org/copyleft/gpl.html
This culture of begging is really starting to get to me. I'm all for helping non-profits, and those that cannot help themselves. Student loans if it's that important, guy.
Ask HN: How do people know they're being talked about on HN?
Repeatedly on HN, this will happen. Someone will mention something, like for instance someone says something about a16z, and the next thing Mark Andreessen is commenting back in the thread.

Or someone says "X company is bullshit!" and 5 minutes later you see in the thread, "CEO of X Company here.. We're not bullshit".

Some of these people are famous and I would think, not hanging out staring at HN (in these particular threads no less) all day.

How are they being alerted that their company etc.. is being discussed and able to respond so quickly?
Interesting: "As you might guess, additional locations in OpenSSL are also flagged by this analysis, but it isn’t my place to share those here."
I am curious how a project like this, which has been around since July of 2012 [1], gets such an intense amount of media coverage all in a the last two weeks: Wired, Daily Mail, Smithonian, Engaget, Huffington Post, and now HN. [2]

[1] http://s831.us/1qr8eNO
[2] https://www.google.com/search?q=WarkaWater
Game Development Bootstrap Bundle
Is this implemented in Coverity by a local model? (There is reference to a model being applied) Or was the actual product modified to support this? Can Coverity customers get ahold of this now?
It's super cool to see the power of advanced static analysis these days. Props to the Coverity team for using the Heartbleed trainwreck to motivate new research on these problems.

That said, are there other ways to fix this class of problem? We have choices. We can continue to build ever-more-advanced tools for patching over the problems of C and C++, or we can start using languages that simply do not have those problems.

There will always be a need for C and C++ in device drivers, microcontrollers, etc. But there's no compelling reason why SSL implementations in 2014 should use languages designed to run on mainframes in 1973.
"and he's doing it without her knowledge (presumably)."

My personal opinion is there is an issue if he is publicly doing this without her knowing. But then again. [1]

How many people would want someone to post a picture of them with their names, plans etc out in the wild for this reason.

It's not like she needs a kidney. Or is kidnapped and he needs to take immediate decisive action.

She may very well be the type of person who has previously expressed willingness to be very open of course. But from the story we have no way of knowing this.

[1] Personally again I like the initiative that he is taking. He is taking a risk obviously. But you have to to get ahead. Besides it doesn't matter if the internet doesn't like what he is doing and in fact (streisand wise) that may actually work to his benefit.
And recent events confirm the wisdom of that course.

Wait...
IANAL but I think the double jeopardy vlause f the fifth amendment had been INCORPORATED against the states in the 80s man

http://en.m.wikipedia.org/wiki/Benton_v._Maryland
I'm not saying he proves anything but he certainly knows something about what he's talking about and the OP asked "why not rewrite" and Spolsky offers a number of reasons why. They might not apply here but they just as well might.
What 61 points on HN did for my startup
How is this begging? You don't have to donate, you can hire him as a designer. And he's offering a discount. If you A) need a designer B) want to help him and his girlfriend out, that's an added bonus.

People "donate" on Kickstarter when they pledge money to a project without pledging enough for a full reward, but we don't consider that begging. It's patronage. Not everything has to be black and white where if you give $5 here that means you're a bad person because there's someone less fortunate out there who could have used the money. If you think it's not worth it, then donate elsewhere.
Is this something that doesn't happen in some climates? I've never noticed nor even heard about this "toast sweat" in my life.
> I own the modified code and can report you to the DA if you take it and try to sell it somewhere else.

How does this work with the original copyrighted code? If I take 10k lines of an open source project, tack on an echo or a comment or some nonsense, do I suddenly get to claim ownership of the rest of the code? It would make sense that you could own the delta, but you should only own your delta, not the original code.
It would be interesting to see the outrage if a school offered a "male only" scholarship.
Chrome doesn't check revocations by default. See "Check for server certificate revocation" in settings, which has for a while been disabled by default.
backend + sysadmin + storage technologies. you'll never be out of work.

the amount of new data that is being produced every day is simply staggering, and everyone seems to be absolutely convinced they need to store, manage, and analyze every last bit of it, forever.
Go read the paper. They show (through doing it!) that it's practical.
CIA and FBI servers are easy to find, and many run OpenSSL. Go see which ones have the vulnerability.

You won't find it on them. Their branch doesn't have the issue.

Also look through this http://web.nvd.nist.gov/view/vuln/search-results?query=opens...

You will see mentions of this bug in products that use OpenSSL quite often.
CloudPaint. A replica of the original MacPaint circa 1984
The "model" makes reference of the model injection for memcpy.

The modification made by the team is referenced in John's blog post "Their insight is that we might want to consider byte-swap operations to be sources of tainted data".

As Andy said (and quoted), that's a modification that we need to evaluate overall to look at its impact in term of false positives (FP). It will probably be made available however under some options if it doesn't pass our acceptance tests for FP rate though... a bit too early to say.
After WWII, the US was pretty much the only functioning manufacturing nation for a decade. In addition, new markets opened up to US manufacturing due to the dropping of trade barriers with, and competition from, the markets of the British and French Empires as well as Japan. This advantage also lead to faster technological development in the US compared to other markets for a while.

These advantages slowly eroded as other economies were rebuilt. They nevertheless lasted well into the 1970's.
Agree. Not to mention the connections that you make by being in close proximity to other like minded individuals.

With respect to consultants the other dimension is the consultant presumably has judgement which they can apply from all the information that they have accumulated over the years. Things that you read online don't have judgement. Although I guess if you want to spend an inordinate amount of time reading absolutely everything you may come somewhat close to being able to triangulate a close approximation. (Actually, no I don't think that is the case with many things..)
Disclaimer: I help run App Academy

You may want to look into our program (http://appacademy.io). Students only pay us if they find jobs as developers after the program. In that case, the fee is 18% of your first year salary, payable over the first 6 months after you start working.

It's web focused, not iOS focused, but we do have a strong emphasis on fundamentals, and grads have often picked up iOS on the job within a few months.
Visual Studio now ships with a reasonably good static analyzer built in. We're using it more than our aging copy of PC-Lint.

(Carmack's review: http://www.altdevblogaday.com/2011/12/24/static-code-analysi...)
Mass/Bulk Following of GitHub users using JavaScript
My experience with most hiring processes is that you should learn about classic CS stuff (data structures, algorithms, Big O, etc). Unfortunately, my experience is also that these things are not of much use during day-to-day web development.

If you want some help with brushing up on actual web dev skills, email me: hello at duncanmsmith.com. I'd be happy to do a Skype/Google Hangout/phone call sometime this week, and point you to some great resources that helped me a lot when I was first getting started. I can also help you compile a list of topics to research so you can build your knowledge base (the body of knowledge required to sound smart in a room full of web devs is INSANE).
Interesting approach! Kudos to Coverity for jumping on it so quickly.

Taint analysis is notoriously prone to false positives; as well as the reasons listed in this post, there are many situations where relations between variables mean that tainted data doesn’t cause problems. [For example, the size of the memcpy target (bp) is known to be greater than payload; so even though payload is tainted, there isn't a risk of a write overrun.] But even noisy warnings can be very useful — when we first implemented simple taint analysis in PREfix a decade ago, the first run was 99% false positives but one of the real bugs we found was in a system-level crypto module. So with the increased attention to these kinds of bugs after Heartbleed, seems like a great time for more attention to these classes of bugs.
Wow, the heli-blimp looks like something I would have built in Kerbal Space Program (A game which lets you build spaceships and planes). Its a bad idea, and it looks like they thought adding a lot of cross-beams would make it stable. "Guess and Check" might have worked for HS Calculus, but it's not a good way to build a flying machine on a Navy contract.
Thanks. I have already covered those topics during my CS undergrad. But I'm trying to redo some things at a much higher level. Hence the comparison with SICP, which is far from a regular introductory book. In the same vein, a course with Axler & Rudin is far more advanced than a standard one.
Thanks. This text is not in GPL v2 (don't ask me why I wasn't looking at v3, I suppose in my mind that's still "the new one that nobody seems to be using yet").
This is probably the most important bit of information, in regards to Goldman Sachs' motivation. I think it is very likely that they simply did not want him working for competitors. They then searched high and low for ways to remove him form the market.

The actions this guy was sued over are likely all things that he had done before.
I am super excited about this! I also really want to see something like "Samsara" filmed for the Oculus Rift.
Akamai posted its special heap implementation</a> to openssl-dev yesterday: <http://marc.info/?l=openssl-users&m=139723972124003&w=2>. We'll follow that up with help to adapt it to openssl's needs---which are much, much broader than our set of problems. We run 100k machines, sure---but all x86-64, almost all Linux, and all running substantially the same software. We don't use DTLS. We don't use any PAKE systems. We are, in some sense, an easy problem.

The OpenSSL Foundation is trying to help people with those needs and needs varying on every imaginable dimension communicate with secrecy and strong authentication. We should expect them to need several times as many developers full time on that problem as any of the planetary-scale computing companies.
@gkoberger - Good point.

We used to have droughts as well.

Hence are launching this service to keep a track of good leads for freelancers round the year: http://topleads.co

One question - what do you do when you have many good leads, but have time to work on only one?
Trevor Perrin (of TACK fame) wrote TLS Lite in Python.

I submitted a link to TLS Lite a few days ago, but, alas,
showed poor judgement in timing:

https://news.ycombinator.com/item?id=7564740

Direct link: http://trevp.net/tlslite/

I'm actually rather anxious to hear the knowledgeable
crowd discuss this fine project.
Chrome also has a button[0] to do this automatically in the Developer Tools, which is what I used when I wrote the initial comment.

[0]: https://developers.google.com/chrome-developer-tools/docs/ja...
The only book on mathematics actually reassembling SICP I found is "What is mathematics?" by Richard Courant. I have read it after reading SICP, largely because I very much liked some of the more mathematical fragments in SICP, and surprisingly it felt like an actual follow up - it spends significant amount of time highlighting high level trends in mathematics, like use of abstraction and generalization, using very concrete examples. Sounds familiar?