skysight-inc/HackerNews huggingface dataset:
Why is Evan Spiegel someone we should hate?

Genuine question, had to look him up. Snapchat seems no worse than half a dozen other startups...
Be security conscious folks. Don't click through to a site with a self-signed cert.
As far as I know the server is CPU bound, and the lack of multithreaded simulation isn't because of sharding decisions.
An interesting idea. They'd have to find a way to condense hours upon hours of sluggish battle into something outsiders can understand and appreciate. Lots of alliances and corps have montage-like recaps of notable battles, but it's not something that can be appreciated by the average person.
I don't see what's particularly interesting about this. This is a pretty standard technique.
Those are for consulting gigs, not full-time employment.
aah! Okay, thanks man.
Don't really understand why they are comparing Box and Atlassian the whole article. Box is cloud storage. Atlassian is programming tools like issue trackers, wikis, etc.. It's like comparing DropBox and StackOverflow. It doesn't make much sense.
Great read!

I once used D to implement a toy LISP language under a thousand lines including the native and loads of built-in functions. I can't imagine doing it this easily, this cleanly and this performant using either C or C++ (I even had fixnums and clojure-like vectors and maps, although not persistent.)

There's a lot of features to learn, and a lot of ways to use them. But the result is something almost as powerful as LISP, almost as safe as Haskell, as low-level as C and even more with inline assembly, and most importantly as productive as Ruby. Definitely a lot to digest as a first language!

Congrats on making the top 20 most used languages, well deserved!
With respect, you sound like you're under the very common misconception that top universities are interested in educating the most academically impressive undergrads, and that it's a fight between parents to see who can trick the school into thinking their child is among the best students. In fact, universities are driven primarily to increase their influence on the world at large.

When hiring professors, this can indeed mean academic acumen is valued, since impressive scholarship shapes the world and brings the university prestige. At the same time, grant-getting abilities are very important, since you can use money to buy influence in lots of ways.

When selecting undergrads, academic ability has some instrumental value but very little intrinsic value to the university. This is because academic-superstar undergrads will leave the university before they exert influence with their scholarship. The universities does wants to mold the minds of future powerful people, and that usually means looking for students who are fairly (though not necessarily outrageously) smart.

But to first order, you can think of the undergraduate program at top universities as a pure money-making venture. The first strategy used is near-perfect price discrimination to maximize immediate returns, i.e. "send us your parent's W2s and we'll tell you how much you'll pay". (Tuition is extremely high but most students get substantial financial aid.) The second strategy is to groom an ideal donor pool for long term revenue, and this is primarily composed of a few business superstars with a long tail of doctors, lawyers, and financial folks.

These blog posts touch on some of these ideas...

Sean Carroll: "The Purpose of Harvard is Not to Educate People"
http://www.preposterousuniverse.com/blog/2008/05/29/the-purp...

Steve Hsu: "Defining Merit"
http://infoproc.blogspot.com/2009/11/defining-merit.html
Can you imagine a way of constructing things such that, whether or not the NSA does this, no one could do that?
In the cloud: How coughs and sneezes float farther than you think
Oh please. I go to one of these schools and it's the same attitude that every "joke" major has that somehow by partying their way through college they will emerge more creative than the "nerds" who are trying hard. Yeah, you're a "leader", huh? Gonna be really successful with your app-idea once you outsource it to an Indian firm for $20k of your parents money? Oh and it's a blatant Facebook rip-off that you have to have your parents pay someone to manually remake for every college because you don't know what scalability is? Sounds great, if you don't make billions here's my number so I can add you to my team as an "idea leader".
I agree. This is clearly the way to go for the most common use-case ("I don't want to write C/C++, but I want to make this thing faster"). Having support for SIMD in the standard library, even if at the expense of specific types (like NumPy) is definitely the way to go.
Nobody's perfect.
Does she spend most of her time in a web browser or a dedicated app of one kind or another?
I have been using their free service for a very long time, so this is a big disappointing.

However, I recently bought a new ASUS router that includes an ASUS dynamic DNS service built in (asuscomm.com) that works really well.

There's an app that allows me to wake up my computers remotely via my Android phone, and I can VPN into my network to do SSH/Remote Desktop.

The nice thing about DynDNS is that it was widely supported by routers, including DD-WRT and Tomato.
I'm updating the Shodan Chrome plugin atm to show the data that it's collecting on heartbleed:

https://chrome.google.com/webstore/detail/shodan/jjalcfnidlm...
Perhaps when our generation becomes seniors we will still play games.
I've been looking everywhere for an answer but this may just be right place to ask.

What can a user or a client do to protect itself?
Sites can patch things up (some sooner and some later). But meanwhile, what measures should the client take while waiting for the sites to be patched up?
Yup, ffmpeg to a node.js script that is rebroadcasting over websockets. We tried 4-5 live streaming services and could not find one that had latency lower than 10-15 seconds (if not more).
Mongo haven't updated their feeds for Ubuntu. I wonder how long they will take to do so?
Colleges have low admission rates. Students send out more applications. Colleges lower admission rates. Etc.

What's the stable equilibrium here? It's a complicated matching problem that's driving up costs, stress, and randomness for everyone. Maybe something like how medical residencies are doled out?

The question is how to keep costs under control...
Ask HN:Is there a panic button service for immigrants on work visas
With tens of thousands of dollars in student loans, my worst nightmare was to end up getting booted out of the country. This was either through a failure at the H-1B lottery, something doing the rounds again this year. Thankfully I survived.

Booted out of the country could also happen through a job cut which leaves my H-1B visa hanging. Something which I am currently afraid of. Is there a panic button service that matches employees on the cusp of losing their job with a valid work visa against employers looking to hire fast? Is this even a viable idea? Logistically and morally? Hedging against jobs and people is a very weird area to get into. What do you think?
There is nothing wrong with self-signed certificates. If you need to trust a website that uses self-signed certificates, just make sure to verify out-of-band.
Within the page you didn't bother to read, presumably due to the mortal terror well known to be inflicted by presentation of a self-signed SSL certificate for a resource for which there's no reason to give a damn about identity validation in the first place, there's an expanded version of the metaphor which involves a reference to flung feces. So, no, I'm pretty sure that when the author says "monkeys", it's monkeys he means.
Generally they seem good at convincing management they offer some business like value add none of the users actually want. I've been at companies where we had to switch to their really poor wiki product, Confluence, instead of free and better alternatives because Confluence allowed management to lock down editing permissions on individual pages in a more detailed manner. Note that I then spent weeks trying to get access to write to a page whenever I needed to add something to the company wiki, and weeks trying to get an admin to install a plugin to allow some HTML syntax we needed. So the experience from the user side was absolutely terrible, but it made management happy they got to micromanage all the page write permissions. That's all you need to do to make money in enterprise.
You mean like wifi-passwords? :) Everybody seems to manage distributing those just fine?
Why do you think the sky is going to fall if you temporarily accept a certificate?
Huh? All it means is that the site you are trying to visit may be an imposter. Since you don't even know who the site is in the first place, does it matter to you if someone is impersonating that site? Of course not.

Feel free to accept the self-signed cert, there is no security worries there. If you go to your bank's website - or anything at all with private data - then you need to make sure it isn't self signed.
You can get rid of a fair amount of marshaling overhead if you use unsafe code (if that's acceptable in your org).
FWIK BTLE is pretty poorly supported on devices and even at the OS level on Android.
Sounds pretty promising, but wish there were more details. The article doesn't even say if the cigarette size battery used for testing contains the same mah as standard S4 battery.
It could (ideally) be boiled down even farther. You need to do one thing: build a great product!

In reality, there is a lot more needed to be successful, but Atlassian is a great example of success being 90% great product.
I approached it like this:

player.removeItem('greenKey'); return 0;} if(1==1){('');

Full link:
https://gist.github.com/anonymous/c78b439d8f2369e03f68

Basically, this let's you delete the green item once. After that, it makes sure that return true is never reached (because of the 1==1), so next passages through green are allowed. Kinda liked the sneaky (''); myself :P
1.) If it was made in the US, probably not. Reading the memory of a webserver would be pretty easy for a lawyer to argue is "unauthorized use of a computer system." That is the basic definition presented in the Computer Fraud and Abuse Act.

2.) I don't know enough to be able to argue one way or another on this point. However, if you download the list or disseminate the list you are likely increasing your possible exposure.
Here, this should be way less scary for you:

http://web.archive.org/web/20140125144231/http://www.peerebo...
Cool video. Has any real product been released?
So before this your app would be down every time you deployed? That's nuts.
It's NOT all good, bra!
PEP 225 was an attempt to add a load of new operators that was rejected (well, deferred 14 years ago). I don't know of a proposal to define arbitrary binary operators.
You can always switch to a DE merkur if you have the time.

.05c a blade. Awesome experience.

/r/wicked_edge
Excerpt:

Indeed, the study finds, the smaller droplets that emerge in a cough or sneeze may travel five to 200 times further than they would if those droplets simply moved as groups of unconnected particles — which is what previous estimates had assumed. The tendency of these droplets to stay airborne, resuspended by gas clouds, means that ventilation systems may be more prone to transmitting potentially infectious particles than had been suspected.

This fits with what I know to be true, experientially, as someone with a compromised immune system who works hard to avoid exposures.
Right but exploiting Heartbleed to dump memory of the target webserver is most likely "unauthorized use of a computer system" and thus in violation of the CFAA.
This might be intended. Supporting SSL is better than not supporting it (well, except in situations where an OpenSSL bug could leak your server's memory, but that's a bit of a stretch <http://filippo.io/Heartbleed/#www.peereboom.us> -- but put this aside), because it's always better to encrypt traffic even in a way vulnerable to passive attacks; and some people may reasonably opt-out of the SSL CA business because they do not like the way it is structured, doubt the security it offers, or feel that they do not need it.

(I use a free StartSSL signed certificate, but only because it's free and not very hard to get. If there were no free provider with widespread support, I would be very happy to use a self-signed cert and think of it as a protest against the stupidity of browsers which present SSL+self-signed as less secure than plain HTTP).
Riding In Cars With VCs
Winklevoss: Bitcoin Payment System Worth $400 Billion
>On another note I was recently talking with a CS professor and he mentioned that rankings are highly correlated with the years that an institution has been in existence which is worth thinking about.

Compound interest over 300+ years buys very good professors.
Totally read that as transparent tees, as is tee-shirts. My bad!
They write terrible, terrible code. Can I donate to some smart people looking to replace OpenSSL with something reasonable?
dodgy cert for read only site + magic verisign fairy dust = unicorns and rainbows?

For future reference you can use archive.org in the future if you are afraid of dodgy certs: http://web.archive.org/web/20140125144231/http://www.peerebo...
reminds me of this:
https://www.varnish-cache.org/docs/trunk/phk/ssl.html
A year or two ago - definitely. But as of today, I would disagree. Apple has been shipping BTLE in their devices since the 4S. All flagship Android phones have been shipping with BTLE for over a year (with official SDK support added in 4.3). You can pickup a $10 USB BTLE dongle and it works out of the box with bluez (Raspberry Pi works great).
Colleges actually accept larger numbers than they can have in a class (i.e 1,800 for a 1,000 person class). Students will get in off the waitlist, but I don't think that affects the overall admission percentages
How is the process isolation implemented in such a setup ?

The traditional approach is to flush the tlb and load new a new memory map on a context switch in order implement isolation , though what you're talking about sounds like something else.
Thanks for posting this.
It's a rough read, but a world many of us never see much less otherwise think about.

They reference the Polaris Project, seem like a decent a non-profit in the field to combat this stuff. They're getting my attention - Epic CharityStar rating. http://www.charitynavigator.org/index.cfm?bay=search.summary...
Marketing a VC like a startup
Overriding a certain method may help ;)
I suppose they could be used by movie companies though: Add actors on sets, voice overs, music, a decent plot. I'd go see the Eve Online Movie.
Corona SDK is it the best out there?
Is Corona SDK the best out there?
Sounds a lot like another IT company starting with M :P

They have a solid target market and a product that pretty much does what it needs to, albeit with a tonne of bloat and questionable UX principles.
Hey, great snarky reply.

Of course, in your haste to post a reddit-style sarcastic comment, you missed or glossed over the fact that free software such as OpenWRT or PFSense can be audited and patched by the public, and is not controlled by some corporation under undue influence by the NSA.

Oops! Better luck next time!
> If you want supercomputing-grade efficiency you won't stop using numpy/scipy just because of this update

Especially since the update is just creating a language feature for numpy and similar libraries to leverage -- there is still no matrix implementation (and thus no matrix multiplication) in the standard library, just an overloadable operator so that numerical libraries can consistently use it for matrix multiplication and use * for elementwise multiplication, providing a standard API for those libraries.
Is there anyone with a more current read on this issue (heartbleed aside)? The linked article is 5 years old, lots can change in 5 years.
Serious question - has university ever been meritocratic?
"The Axial Network" – Has anyone heard of/joined this? Thoughts?
I remember the fun times in Mankind, it was the first game I played seriously, and doing diplomatic work for @ was much more fun than the actual game.

I'm glad that game is still going!
Might I recommend gandi and also http://code.google.com/p/gandi-automatic-dns/
This has been posted many times, but the words of Teddy Roosevelt bear frequent rereading:

"It is not the critic who counts; not the man who points out how the strong man stumbles, or where the doer of deeds could have done them better. The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood; who strives valiantly; who errs, who comes short again and again, because there is no effort without error and shortcoming; but who does actually strive to do the deeds; who knows great enthusiasms, the great devotions; who spends himself in a worthy cause; who at the best knows in the end the triumph of high achievement, and who at the worst, if he fails, at least fails while daring greatly, so that his place shall never be with those cold and timid souls who neither know victory nor defeat."

The critics often seem to be saying, implicitly, "_I_ could do it better". It's a claim of superiority. I guess it's beguiling, because criticism of this form is so much easier than genuine creation. I think many of the critics don't consciously realize this, since they've never created something of great worth, and have no idea how difficult it is.

I've known very accomplished people who could be haters. But usually accomplished people seem to be appreciative of creative projects, and understanding of flaws (while wanting them eliminated). I think it's because they understand just how difficult it is to do good creative work. They know that someone can bring immense gifts and effort to bear on a project, and still have it go awry.
I've done quite a bit of programming with the OpenSSL library and this article is only scratching the surface of the awfulness. Documentation is horrible to non-existent, you really do need to go spelunking into the source to figure out how things work, and the code really is that horrible.

The worst thing is that error reporting is not consistent - sometimes -1 means error, other times 0 means error, other times 0 means success, and sometimes it's a combination. This is really, really bad for a crypto library since properly detecting errors is usually critical to security.
MonoGame mirrors XNA down to the namespace names so that's a very suitable replacement. You also have Unity of course.
But you would probably click through it if it was plain http.
To be most cynical, I think they want to admit just enough middle-class smart kids to create the appearance of academic excellence, while letting rich mediocrities benefit from the aura effect of being in a place where it's genuinely difficult to get in if you're not rich.

The soft ("leadership") component of college admissions and venture capital fill a similar role in the US, which is to launder the connections and parental wealth of the rich and make their advantages appear earned.
On Chrome for Android the onscreen keyboard never came up for Typeahead. Otherwise this looks outstanding. Nice work.
Keynote by Poul-Henning Kamp at FOSDEM '14
Mr. Buffett should just move his shareholder's meeting to a city with many more hotel rooms such as Las Vegas, Chicago or Orlando which has a far greater supply of hotel rooms than Omaha and also has far more accessible flights.
The term for this is called "Symbolic Regression".
If the NSA is going to spend our tax dollars analyzing that code, the least they could do is contribute formatting cleanup patches!
China Brings Disruptions in the Tech Space
You can, and I've generally had better luck with unsafe code than with C++ code. Unsafe code creates GC overhead, though, so it can also end up doing more harm than good if you're not careful. It's another spot where I've found that microbenchmarks can be misleading - the performance cost that pinning incurs is insidious and hard to measure.
secrets.yml is not in .gitignore by default
Docker 0.10: Quality and Ops Tooling
If I was advocating teaching people to read 800 years ago, you could have said the same thing about literacy.

People learn when it's sufficiently important that they do so.
Winners of Free Hacking Courses at ShowMeCon 2014 Announced
It's not mortal terror, it's declining to enable someone who uses racially-charged language to attack their fellow human beings while configuring their server in a way that anyone competent to evaluate OpenSSL's merits in the first place would know was no better than not having SSL at all, and in fact much worse, since it trains people to ignore certificate warnings.
I have been using the following phrase a lot lately:

Schrodingers-Murphy's-Law:

"When you look at it, it breaks!"

I joined this company in January and had to peel back all the layers of hte onion to find out where its weaknesses were, and as soon as we start looking at how a component of the system is built and how it works - it breaks. We learn a ton real fast and figure out how to make it resilient.

Yesterday in my Ops Stand-up I told my staff: We have come a long way in rebuilding the infra; I am now paranoid that a security vulnerability will be the next thing that causes an outage...

Lucky, our ELBs on AWS were all updated without issue...
Route 53 is also really cheap if you're an AWS kind of guy/gal for 50 cents a domain. The usage charges are beyond low (think 1 cent) for smaller sites.
Don't get why you're being downvoted. I can hardly imagine my friends signing restaurants' public keys. They don't have any problem with Facebook or Foursquare whatsoever.

As some guy said, you can't start with the technology and work backwards to customer experience.
High end hotels will buy new furnishings every 18-24 months. The used furnishings are bought by Hotel Furniture Liquidators (HFL) who sell the furniture to mid-tier hotels. Working with the resellers to rent a dozen rooms of furniture should keep costs down.
I'm sure all the serious sites will be updated soon. But what I'm more worried about is all those routers. My home router has an admin interface that's served over SSL. I'm not so confident in that manufacturers will push out updates for those routers quickly, or that people will update them at all.
Heartbleed affects clients too
As having maintained a code base that uses openssl since 2004, no, not a lot has changed, openssl has just accumulated more of the same.
When I was at Dartmouth I overheard some sheik (guessing by the clothes he was wearing and complexion, could have been a really tan Norwegian who liked wearing a Keffiyeh) talking on his phone outside his car.

His side of the conversation went something like:

"I want to talk to the dean!"

pause....

"No, it must have been a mistake. My son went to Eton!"

pause...

"Well that's the last time I give this school 10 million dollars!"
+1 for dnsmadeeasy - they have fanatical support, they actually know dns inside and out
Did your mother ever use Skype? Then she used a secure system. There are variants on the ideas behind PKI that are easy to use, and that do not rely on centralized trust.
Why no SSL?
>Also, the name (bastardizing the Japanese pronunciation of Godzilla) always feels somewhat racist to me.

Bastardized? It's the ACTUAL pronunciation, they just removed the "go" part.

It's nothing like making fun of the Japanese. I think trying to find racism where it doesn't exist has gone too far.
This is a foolish belief. The higher ups in NSA are most likely under the very same surveillance that they oversee, whether they know it or not. After all, the NSA cannot be immune to internal politics and power-plays.
Drones and Maps
Some of the maps used in COA requests submitted to the FAA.
Regulators Approve New Capital Rule