skysight-inc/HackerNews huggingface dataset:
I do see your point. US has to a certain degree have lost a lot of credibility especially with Afghanistan and Iraq. I definitely think Russia has the right to look out for it's own interests especially when US have been doing so for a long time now, often behind the veil of covert operations aimed at puppeteering elite ruling social class in different countries often through the usage of economic warfare through fronts like the World Bank and International Monetary Fund by freely giving loans and aids and in return taking their resources, be it oil or soldiers to fight their other armed conflicts. US is able to achieve this most of the time without the usage of force.
Is memory wiped with zeros by malloc/free in libc or in the kernel? If not, you're at risk.
Then there is still only one truth and they can still come to an agreement on statements like "gun control is good if your goal is to reduce homicide rates" or "gun control is bad if your goal is to maximize personal freedom", etc.

Then it's not a matter of disagreement or coming to different conclusions, it's just having different values.
Not here: you can't do much with AGPL+OpenSSL. AGPL requires release under AGPL. OpenSSL requires advertising clause. There is no legal way to distribute software including parts you have only under APGL and parts you have only under OpenSSL license.
This does not only happen in software field but also in biomedical sciences. If the recruiter can't find exact keyword matches on your CV or resume then you are out of luck how much skillful or experienced you are in your field does not matter.
In fact big Pharma companies have algorithm developed for their job sites where if it cant find exact keywords on your resume then tough luck. Almost all time it will go to trash(virtual one).
If the Heartbleed bug was still viable against your service, I'd say that he made the wrong call and should've emailed your team about it. But here, we're basically talking forensics.

I've written at length about the decision to not roll the keys as soon as Heartbleed was discovered, so I won't repeat myself, but in short: him publicizing this, as well as the Cloudflare challenge immediately getting slapped down, should make it clear to everyone that if you have a memory read, you should assume everything is compromised.

Hopefully this is a good thing for security in general.
As Andy tweeted, we built that particular patch to keep unencrypted secrets off disk -- it actually was intended to provide tangible security benefit, it wasn't just paranoia:
https://twitter.com/csoandy/status/455307255895060480
I haven't read all comments so excuse me if this has been mentioned, but you should hand in resignation now with minimum of notice period.

You say that you are currently desperately needed now, so your leverage to work-out an equitable legal arrangement with them will never be greater than now. As you said, in 6 months you may not have any leverage.

Just my $0.02.
As discussed in many, many other OpenSSL related posts here in the last few days, it's becoming pretty clear that any "open-to-public" PKI system will practically be required to be built on a third-party trust system (as also discussed, PGP WOT system also reduces to a third-party trust system when it comes under attack). @jude- How else would you solve this problem if not through one or the other third party trust based PKI?
Omaha: Software installer and auto-updater for Windows
For me and you, this is true. Unfortunately, INSERT_MAJOR_NEWS_NETWORK is proof that the vast majority of people don't give a shit about logical validity.
>TL;DR: What is a sub-one ounce object made mostly of silicon that costs more than a thousand dollars. (intel i7)

In that case, you are paying for the IP, not the silicon.

The Tesla motor is a simple design, no magnets, no brushes. I assume they are hand-built. Some, but not too much precision machining required.

Think about how much precision goes into a 2TB hard drive that costs $100 retail.
scratch is still programing. following a recipe is interpreting a program. logical sequences of steps.
I'm kind of waiting on Facebook to do this. Create a voting engine based on people similar to me for services like Rotten Tomatoes and Netflix. The "other people similar to you liked.." should be far more ubiquitous.
How to deploy your Node.js service
Yes, it is. Leaking memory contents across processes would be a pretty serious bug in the kernel. So when your process asks the kernel for memory (via sbrk or mmap) the memory it gets is zeroed out.
Hmm, sorry I cannot provide you any stories of my due diligence powers. I can only speak to the fact that I know my existing fiduciary duties don't make this an optional task.

I have a relative who works inside one of these large institutions and he has advised me multiple times: if we cannot verify what they're saying, you don't accept their investment -- it's as simple as that. The onus is on the investor to present themselves, and then the responsibility of accepting that investor in the group lies with management/ownership/board as designated by the corporation. Basically, you accept it or you don't.

A complex environment simply doesn't absolve me of my duties to my board.
When your social startup fails, it's not the Iraq war.
What'sApp Location Bug
I listen to his Security Now podcast on a regular basis and have always found it be be extremely thorough and informative. However, I have to agree with you that his website and writing style look like something you'd expect from someone who wears a tin foil hat. I also understand that he doesn't have much credibility in the wider security community.

So I guess my question is, what do you guys think of the show and are there any alternatives you would recommend?
Your work, made easy A new way to email
Safari 7.0.2 warned me, but let me proceed. Nightly 31.01a flat out blocks it. Don't have any other browsers to hand.
A service that incorporates startups and sets up stock options with a few standard templates. You can manage everything online, including investment rounds.
There I agree with you. Thanks.
Your definition of "cover" is rather loose.
I missed that comment, thanks for drawing attention. I do wish it was included in the actual list.
Who runs this UI on 110,000 computers?
South Korea definitely had a period of dictatorship and hard knock life for it's citizens. I think Taiwan also had a period of such oppressive rule. Chile as well had dictatorship up to 90s.

At least South Korea is doing well because it has seen so much sacrifice of it's own people by enriching the nation's government and it's handful of conglomerates. They may be doing well but South Korea and Japan has the highest suicide rates, a sign that although economically prosperous do not equate to collective happiness. Chile for instance has a higher happiness index than of South Korea or Japan.

However, I will add that such economic progress is not at all miserable and unwanted situation. U.S. has provided much of the security guarantees and the environment for such successes.
IANAL but this is not a non-compete. This is simply a request/requirement for you to proactively inform them of what you're working on after you leave for a year.

Like most contracts, the question you should be asking is what happens if you breach the contract?

Well, if you're stealing IP, then they can come after you.

But they already can.

So, like pseingati said - go, learn, enjoy. Don't worry about the contracts, just be a good person and don't steal IP. They're paying you to work for them, and they own the things you produce while working for them.

If they're NOT paying you, as an intern, well, go work for them, then go talk to an employment attorney, because I think they have to.
These vendors (like Pega Systems) will never go away, because they always find ways to dupe senior management into believing that there's a silver bullet to software development.

So as long as there are non-tech savvy senior management around wielding disproportionate influence over IT procurement, billions will be made selling Hocus Pocus IT solutions. "Never write code! Use drag and drop interface! Let business make on-the-fly changes!"
For what it's worth, I think that the patch you guys threw out there (and have been using for a while) is a great idea, and I really hope it ends up in mainline OpenSSL. I think you guys have acted 100% properly from a tech perspective in this whole thing, even if a bug did pop up (when do they not?).

I disagree strongly with the business decision made w.r.t. keys, but I hope people don't take that as me ragging on the tech team over there; you guys are doing good work.
Landing page has zero information and ask for your email address. No bueno at all.

Turns out it's a mobile email app. Actual information about it can be found at http://www.mailcloudapp.com/Home/Thanks
Google Chrome Will No Longer Check for Revoked SSL Certificates Online
Stop thinking like a techie. Start thinking like a business-person.
As a business-person, do you think this clause is fair?
There are two Bs, though: one sees opportunity to sell change. The other sees opportunity to perform arbitrage against the inefficiencies.
Let's be clear here. He's not saying "do this, it's in your benefit." That would be cause for skepticism because Mark is a VC in competition with other VCs. What he's saying here is that some firms engage in a particular type of unethical behavior. This is reporting on an industry trend. It's even a falsifiable claim despite the fact that we are tremendously unlikely to have access to the information that would confirm or refute his claims.
I'm working on this (a subset of these features at least) right now. It was going to be an internal tool for my company, but having seen this interest makes me think I might try and go the SaaS route...
Guess this works if you have a lazy eye too hehe.
no suitable resources for implementation.
Deadly blaze destroys 2,000 homes in Valparaiso
You might be interested in this http://www.procon.org/
The implicit claim being that Tesla does not factor in R&D when they charge consumers for replacements?
Not hard. Just change the license and require commercial use to be paid
how can an article about glow in the dark roads not have real pictures of glow in the dark roads? (sadface)
This is certainly true - we are all carrying various mutations that influence who we are. For example, I am now sitting in front of my computer drinking a chocolate milk - something I can only do as an adult because I have a mutated version of the lactase gene that causes lactase to be expressed in adulthood (lactase persistent syndrome). Until agriculture was invented this "syndrome" had negative value since unless I am drinking milk it is a waste of resources for my body to make an enzyme that won't be used.

As we learn more about each persons genome I hope we stop categorising people into people with a "syndrome" and those without.
That is why it is happening. NATO was set-up to counter the Soviets (dominated by Russia) and it is a slap in the face for Russia to allow NATO right on their border when they are trying to become a real world power again.

NATO might have gotten away with limited defence/economic pacts with former Soviet satellites, but full NATO and EU membership was bound to provoke a reaction from Russia.

Apparently the US State Department didn't learn from its arrogance in Iraq, because such blatant provocation shouldn't have been allowed.
> If an attacker can read memory out of a process containing sensitive data, the assumption should always be that they got the keys to the kingdom even if they didn't

We both agree on this.

> but that they played chicken with an exploit and ended up on the wrong side of it.

I disagree with this. They thought they had a valid technical solution and did the honourable thing by releasing it. Unfortunately they were wrong but that's a bug and not a arrogance issue.
This is a paid internship, right?

I would be wary. The law already protects them if you use their IP. This is just bad, controlling company culture.

Please name and shame, if the company is that big they have sent a lot of these contracts out.

This isn't a noncompete, which would almost certainly not hold up, it's a shitty sentence designed to make you think it's a noncompete.

The reason a noncompete wouldn't work is that they aren't giving you anything in return. Your wages are paid for the work you put in, if they want a noncompete they will have to provide valuable consideration for it (a payment when you leave, stock, etc) and in many states there are significant limits to how much they can limit you.
Unlikely places to find a data-center
MIS 330 Assignment
How To Download and Play 4k Resolution Video From Youtube
4K Youtube Video Downloader Makes It Easy To Download 4K Videos From YouTube. Youtube is a Great Place To Watch 4k Video In Full Resolution.
Recruited for a lot of big companies. I'm lucky that my current one is really good with hiring. Everyone super open with what they want and why.

There is a main concern about the interview process in this story. Anne's team should've been the one interviewing. Then they would know who would have the skills required.
How was Ukraine doing when it was taken over by uncorrupt Ushenko, whos wife is openly a CIA agent?
Some applications not ready for the cloud
I don't know that much about Idris, but from my understanding, its type system is more advanced than Haskell's, because dependent types by definition contain more information than the (independent?) types used in Haskell (can't comment on scala). Haskell as a language with all of its various extensions and bells and whistles is surely far more complicated, having been around a great deal longer and with a massive compiler and numerous features, but from my knowledge it's incorrect to say Idris is simpler than Haskell, at least in regards to its type system.
The phrase "scripting language" makes less and less sense in a world where C interpreters exist (e.g. Ch, CSL, picoc, CINT, tcc -run), and in a world where Ruby, Python and PHP have compiled implementations (both JIT and AOT against various virtual machines and native targets).
Glenn, Intercepted:
Is hn a security forum?
Seems like it now, seriously how many security experts are on here? Oh right,none

So can every other story stop being some link bait about heartbleed?

And that includes you cloudflare.
This is the original paper [0].

[0] http://www.sciencedirect.com/science/article/pii/S0960982210...
Secret gists are supported. If you've got a raw secret gist URL that's not working, let me know. Probably best to tweet @yaypie or @rawgit; I don't look at HN often.
I would volunteer to help out at next year's Pycon in Mtl if you're planning to do produce a similar survey
Nope, I just use it.
On ownership in startups
Usually when I get that, it's because I'm trying to make something perfect. To handle all the edge cases, to make something bulletproof. And then I take a deep breath and remember that the sooner I make a shitty version, the sooner I can actually figure out what I need to optimize for.

So take a big breath and build the shitty version. You will save so much time in the long run.
I was thinking the other day about this. They have cars that can park themselves already. I think Audi has been advertising them. They obviously use some sort of sensor to detect empty parking spaces. What would be brilliant is if they did two things:

1) Used GPS coordinates to figure out if you are in a high-demand area for parking and, if so:

2) Passively scan for parking spots as you drive by, then upload them to the cloud.

You don't actually have to be looking for a parking spot -- but your driving by an empty one could help someone else.

A more YC-focused idea is to design a small device that does exactly that for any car and is as simple as dropping something onto your antenna or sticking it on a passenger-side window.
who would perceive such a thing as social or friendly
I heard about AirVend a year ago working in this space. http://www.air-vend.com/home
Doing exactly this on Kickstarter would be a sure fire bet. Do it now!
MIS 330 Assignment Due April 18th
I faced the same problem while I was building a SaaS product. It became difficult to understand what users were doing on the app and then easily reach out to them with help/feedback emails. We realized that there are other people building SaaS products who are facing the same problems. So, we have pivoted to building an analytics + messaging tool for SaaS products.

These are the problems that we are working on:

- quickly check out the feed of any user's actions on your product

- click on a action and see the recent / most-frequent users for that action

- segment users by their 'journey', e.g. case: how many users have integrated their Google Analytics account but have never seen the generated reports? (user 'hasdone' and 'hasnotdone' queries)

- auto segmenting users based on their engagement/frequency/plan (by assigning a karma score to each user)

- lifecycle emails / notifications : send emails to your users based on where they got stuck while using the product etc

You can check out more on the landing page:

http://www.dodatado.com/landing

My email: prateek [AT] dodatado [DOT] com

Links:

Website - http://www.dodatado.com/landing

Beta Sign Up - https://dodatado.wufoo.com/forms/dodatado-account-registrati...

SaaS product I was working on - http://www.dodatado.com
How did you get suspend and resume running on the C720? I have a C720P and I've been trying to get it to resume at all(it freezes when I reopen the lid)
The content in this scenario is. The http body with banking info or wathever.
Please find me a time when it was common to IPO with profits?
Thanks, looks promising - I have seen couple of other desktop time-tracking apps and this looks much better than those.
Interesting. I've skimmed the article and I can easily believe that some people can consciously observe their model of the world from a physical position different from a position of their body.

From a perspective of ML/computer vision, think this way: You take bunch of photos and then build a 3d model. After that, you can construct the image taken from any location within the observed area. And if the model is good enough, you can construct realistic images even outside the visible region.
ATS looks fascinating in concept, but what code examples I've seen, the syntax is terrible and it's ridiculously verbose. I'm sure you could write absolutely bulletproof code in it, but the productivity hit would render it almost unusable for large-scale projects. I might be off here, of course... but one of the lovely things about Haskell is that despite its reputation as a difficult language, once certain key concepts are tackled, it's relatively easy to program rapidly and create real world products (with a considerably higher assurance of correctness than most languages provide). ATS seems complex to a level that nearly guarantees its usage won't extend much beyond academia.
I'm really hoping they do a server-oriented flavor of Qubes -- would be tremendously useful.
MapsWithMe[0] lacks routing, but it is an iOS app that provides fast, detailed offline maps with POI's. Data is downloaded by region (for the US, it's by state, for most of the rest of the world, it's by country) and the data is updated pretty frequently. When I was trekking in Nepal, even obscure trails were marked on the maps, which was terrific!

[0] http://mapswith.me/en/home
> Certificate revocation does not work.

I have to second this. Just days after the Heartbleed disaster struck, my Firefox (v24; Debian "Iceweasel") sometimes takes more than 30 minutes (!) to load SSL-encrypted websites, as it first downloads some 50MB of CRLs from ocsp.comodoca.com (verified what it is doing using tcpdump). Disabling OCSP certificate checks fixes the problem.

I haven't encountered the issue under Ubuntu 12.04, maybe newer Firefoxes have some timeouts built in, or the certificate database works faster on my Ubuntu PC (the Debian system uses NFS which may slow down the sqlite database a lot.)

This is like single point of failure designed into a protocol. Unbelievable.
The Story of a Girl Developer in CryptoLand
Today's software requires constant patches to "stay" secure. If you stop patching your OpenSSL or your Windows XP, its security will degrade -- but the software is the same; all that's changed is some hacker was able to construct an MS Paint file that executes arbitrary code, or some other ridiculous nonsense.

Large software systems will always have bugs and be difficult to understand in their entirety, but they could be made orders of magnitude easier to secure by not giving every line of code the potential to compromise the system.
Quote From Part VIII:

Soviet Communists are frequently reproached for having attempted to build a socialist society but having produced something which closely resembles a prison. Such a charge is entirely unjustified. In the Soviet Union some of the inmates have larger cells than others, some eat well, others badly. There is complete confusion-a lot remains to be done to tidy up the situation. True socialism, in which everyone is truly equal, does not just resemble a prison-it is a prison. It can not exist unless it is surrounded by high walls, by watchtowers and by guard-dogs, for people always want to escape from any socialist regime, just as they do from a prison. If you try to nationalise medicine and, from the best possible motives, to guarantee work for all the doctors, you will find that they pack their bags and leave the country. Try to bring a little order into the situation and your engineers (the best ones), your designers, your ballerinas (again, the best ones) and many, many others will also flee abroad. If you continue your attempts to establish a model society you will need to build walls around it. You will be forced to do this sooner or later by the flood of refugees.
This paper [0] is really interesting from the perspective of looking at Williams syndrome as the opposite of autism. The authors found that an individual with a duplication of the Williams syndrome deletion region that was autistic. Basically they found that not enough of the genes in this region (i.e deletion) then you end up with Williams syndrome, too much and you get autism.

Autism is genetically more complex than Williams syndrome as there are many other genes that can cause autism.

[0]http://link.springer.com/article/10.1007/s10803-011-1389-4