skysight-inc/HackerNews huggingface dataset:
This is in line with what I've seen in London - suffice to say it's easier and cheaper to get a car around London than it's ever been, the only people losing out are the black cab drivers who used to profit from what amounted to a monopoly on certain journey types.

Specifically:

1. Black cabs hailed on the street have a set (very high) price, only pre-booked cars can be cheaper. Uber and others are "just in time, pre-booked" services and so cheaper. Here, Uber and others are creating competition and improving the functioning of the market.

2. Uber have at least 4 (popular, at least with people I know) competitor apps in London - Hailo, GetTaxi, Kabbee and Addison Lee. All do similar things with their own take (Hailo finds black cabs with their extortionate prices and supposedly better service, Kabbee is an aggregator for many local and often very cheap minicab companies - but with highly variable service levels, GetTaxi I think is similar to Hailo and Addison Lee is a private car firm who employ a lot of drivers and have been around since long before Uber). All are vying for customers and responding to the competition with deals and pricing improvements - another sign of a healthy market.

3. The algorithms appear designed to find the most profitable sweet spot at any given time to keep prices as high as possible while minimising spare capacity - that's sensible and how any company should (and do) act. Even if it's irritating when surge pricing is in play, it's completely reasonable.

I have 4 of the above taxi apps installed and pick the best one for each job - which often turns out to be Uber, so good for them.

Bottom line - you can never rely on one company to create a competitive market but if anything, the attention and lobbying Uber has brought to the sector seems to have created a fairer market and benefited consumers.
> This surplus is passed to the consumers who are lucky enough to get a cab but many are literally caught in the rain. Uber raising the price is simply allowing the person who wants the ride the most to benefit from it.

I think people understand that. But they might feel like distributing the limited cab supply based on luck is more fair than based on who will pay the most.
No, there's a threshold below which you can't effectively distinguish noise from signal even with many samples; theoretically, you can try to overcome this problem with more samples, but there are practical limits, and often actual constraints on the number of samples you can collect and the window of time you have to collect them.

Read Crosby and Wallach's "Opportunities and Limits" paper; the shorthand result of the paper is that across Ethernet you have a window of 100ns, and across an IP network something closer to 30us. The memcmp distinguisher is well below the IP network threshold.
Thank you, I had a bit of a feeling this might be some kind of marketing ploy.
I guess I'm more used to the classical Hackerspace (of which there are quite a few in Berlin [1]), but I appreciate that you are doing mentoring and imparting best practices.
I think 'hacker retreat' gives a bit of the wrong vibe as it sounds more like a place for social gathering (aka a hackerspace) when in fact it's more in the spirit of e.g Games Academy (especially considering the price).

[1] http://hackerspaces.org/wiki/Berlin
Yeah, chemical separation + gun assembly warheads is a particularly bad path to allow, side steps the two hardest current things required (non-chemical uranium enrichment and implosion based warheads).
I'm hoping this has to do with a change in policy in regards to these types of issues, but I'm skeptical. It could just be an anomaly.

We need a major tech company like Apple to take a stand against these types of lawsuits before we will see any real policy change.
Would a multi-process server engine help protect against this? Think what Chrome does with tabs. If the network request is received by a dedicated IO process which then uses IPC to communicate with other parts of the server, then perhaps sensitive information like keys would not be in the same address space so could not be leaked? I guess if the bug was in a sensitive process then it would still happen. Disclaimer: I have no idea how modern servers are architected, perhaps they already do this :) Would be interested to hear from anyone more knowledgeable.
Startup Framework – with 15% discount  
"FlatDSGN created a partnership with Designmodo to offer the best Framework to users, with 15% discount!"

Promo Code: "flatdsgn"
angular-cog: Declarative ajax requests for AngularJS
I wonder if Cloudflare is logging all data sent to and from the challenge server, and then searching it for private key fragments. If not, they should be! As it's not guaranteed that a lucky attacker will be aware of receiving key material, if it is exposed.
Sadly but truly!
BlackBerry Offers Developers Even More Tools To Port Their Android Apps Over
Anything people pay more for, including tempco, tolerance, power rating, whatever. I once got counterfeit models of these[1] from ebay.

http://www.vishaypg.com/docs/63066/e102.pdf
You Can Buy Google Glass on Tuesday – if You Still Want It
You would think that they could easily work on in advance of incidents who they can trust to with early information. I'd be amazed if Canonical (Ubuntu), Redhat (RHEL) and The Attachmate Group (SUSE) wouldn't show discreet discretion. I don't know about Debian and similar projects, but you would think they could determine this in advance.
Vittorio Camardese guitar tapping tecnique 1965
I like spectrwm but it really needs a NEWS/CHANGELOG. Users can not quickly get an idea of what has changed in between release X and Y. I went to update the debian "please package latest spectrwm" bug and there is no easy way to post the changes between 1.0.0 (yes the debian package is that old) and 2.5.0.
Report: 44% of Registered Twitter Users Have Never Tweeted
The linked-to court judgement says that there are no applicable NJ laws. The relevant laws don't apply, and that it's not enough that some 4% of the numbers were from people in NJ.
The worst situation is where the site prevents submission of a password containing certain characters or limits password length, ruining any carefully chosen or algorithmically generated passwords.
I have twitter, i find it useful. I follow local beer and burger guys. They always come up with great spots I've never been. Very useful. I also follow CEO's, which is also very informative. Its rare I feel the need to tweet myself, but that doesn't make me a less active user.
My comment was more of a dig at things like banks which barely will let you view your financial transactions more than a year or two out. Yet I can pull up someones stupid rant about a basketball game from 7+ years ago on facebook.
The original privsep programs weren't async reactor-based designs.
Great approach: base word and a URL modifier. Memorable and different for every site. I use the same. I even have a one page site (http://passmix.com) that teaches people the same approach.
Anthony Logistics Men Skin Care Line Review
I've had the good fortune of coming into a bunch of new products that I'll be reviewing in the weeks to come. The first products I'll be tackling will be the men's skin care line Anthony Logistics. This men’s skincare line embarks on the rough and sensitive terrain of men’s grooming. Like most product lines, Anthony has products for face cleansing, shaving, and moisturizing, but what makes them unique is the attention they pay toward an ethnic man’s skin - See more at: http://www.perceivedstyle.com/skin-care/2014/2/15/anthony-logistics-the-urban-mans-toolbox#sthash.AVuIBVo5.dpuf
I think you have misunderstood the bug, actually. It has nothing to do with read(2) returning less data than requested. There are two length fields at play here, the SSL record layer length field, and a second length field in the heartbeat field. Both are 16 bits.

OpenSSL correctly reads the whole packet using the SSL record length. It then passes the packet off to the `tls1_process_heartbeat` function, which uses the second length field to do (variable names changed because the originals were terrible):

outgoing_packet = malloc(heartbeat_len)
memcpy(outgoing_packet, incoming_packet, heartbeat_len)

So when the two length fields disagree, SSL's network code correctly reads the short packet, and the heartbeat code incorrectly reads past the end of the incoming packet buffer and copies it into the outgoing packet buffer.

Edit: As a shortcut to establish my bona fides, I wrote a honeypot for this issue so I ought to know what I'm talking about:

https://twitter.com/moyix/status/453760960671383552
Since 3.7 WordPress auto-upgrades itself in the background (for minor versions), like Chrome does. So not sure what are you talking about.
To a degree. This only applies for being tried in NJ for the same crime. They're free to charge him in other states and try him without double jeopardy applying:

http://criminal.findlaw.com/criminal-rights/charged-twice-in...

"But if a single act violates the law of two states, the law treats the act as separate offenses and thus not in conflict with the Double Jeopardy Clause. A second state with a case against a defendant may decide that a conviction in the first state is sufficient, so it does not necessarily mean more than one state will bring charges. Therefore, it is up to the discretion of the particular prosecutor, as with other criminal cases."

This is known as the Dual Sovereignty Doctrine. This is also what makes hacking such a perilous crime. If you're hacking a large corporation in one state, you may have victims in multiple states. Thus, you can be tried separately for essentially the same crime in multiple states regardless of being acquitted in other states.
It seems like it's the loop itself that is redundant. Why couldn't I just do:

squaredVec = vec * vec

or

squaredVec = vec ^ 2
Patent Trolling was defined due to the 'trolls' being "non-practicing entities" -- a fact which obviates cross-licensing, counter-suit and basically any strategy other than the simple math of "license cost" (to comply) vs "legal cost" (to fight).

Trying to conflate a suit between Apple and Samsung with Patent Trolling is to rob the term of all meaning and essentially lump every action under "patents are bad".

Which is certainly as valid an opinion as any.

But such an opinion doesn't make any distinction between practicing entities and trolls, and as such it makes no sense to voice that opinion using a word that exists solely to make such a distinction.
Why Node.js is not vulnerable to Heartbleed
Are Colleges Preparing Students for a Big Data Workplace?
PolarSSL condones the practice that makes OpenSSL less secure than any other, which is commercial entities not being obligated to give back. They simply extend that privilege to people who include it in a commercial product.

The biggest problem with OpenSSL is that noone helps.
I maybe pessimistic, but I haven't seen any progress in H-4 employment proposals recently and the article doesn't point to any particular proposal.

The Senate bill for Immigration reform passed the Senate last June, but the House isn't taking a vote on it.

The house in turn had similar proposals last year in committee, but House leadership has no plans of putting them to a general vote at least till November elections.
How does this work with cross-product passwords where the login can be used across multiple web apps?
Designer/Developer ish guy here. Can you give me some examples of what this would fall under? Like...inkscape? Thats open source right? Do they want/need designers? Or how could I get involved in this? (My current closest thing to this is I randomly add icons to the noun-project. Conceptually I could make money off that but not really, so I view it more as public help...now you can get an easy to use tesseract icon if anyone ever wants it!)
New startup: Lead scoring and unified user profile for your SaaS
Best to only buy from TI franchised suppliers. Can't find any that go down to $16 though

http://octopart.com/opa627au-texas+instruments-420817
Certainly it's possible, but it's much harder to do without frying either the triggers or the engineers (gamma rays and people don't play well together), so the conventional wisdom is that non-thorium fuel sources would be lower-hanging fruit, and the pool of actors who could potentially make a bomb with it (or the U233 from further down the fuel cycle) is smaller than with plutonium or enriched uranium. "Proliferation-resistant" is the claim, not "proliferation-proof."
I've been working on a website for almost 2 years (on&off). I'm right there at the final push to get it live, but I think I'm just a little burnt out from it. One of the things I'm struggling with is the pricing model I want to use. I'm trying to find that balance of a simple pricing scheme that scales well.

My site was made to run leagues & tourneys, and I'm a single founder. If anyone would like to talk with me on my business model ideas, my email is in my profile.
This might sound tongue in cheek but I would love to have a version or way of having an open source license where it can be used by anyone except businesses or industries I find unethical and specifically prohibit in the licence. For example, that what i help create can be used like a GPL by anyone unless a person or company involved in the defence industry, private or state intelligence, selling FinFisher type stuff, diamond mining, investment banking, supplier to the Saudi Arabian government, etc etc :)

Is there such a thing or a specific way of doing this?
New packing list for android (soon iOS)
Dear reader,

we've launched a new packing list app:

As Featured On Lifehacker.com http://bit.ly/1gCpz4O and Fast Company's Co.DESIGN http://bit.ly/1lHqoLT
"A Travel App That Practically Packs Your Bags For You"
Never Forget Your ______ Again!
PackPoint is an intelligent packing list builder for serious travel pros. PackPoint will help you organize what you need to pack based on length of travel, weather at your destination, and any activities planned during your trip.
Once your packing list is built and organized, PackPoint will save it for you, and then you can choose to share it with your friends and family in case they need help packing too.
Punch in the city you're going to travel to, the departure date, and the number of nights you'll be staying there.
PackPoint will build a packing list for you that takes into account:
- Business or Leisure travel
- Activities you plan on doing
- What you need for an international trip
- Warm weather clothes
- Cold weather clothes
- An umbrella if the forecast calls for rain
- If you're willing to repeat wearing basics like shirts and pants
- If you will have access to laundry facilities
Some expert packing checklist user tips:
- Tap gender icon to change between male and female travelers
- Tap and hold, or swipe, to remove packing list items
Have a feature request or feedback?
Visit http://ideas.packpnt.com or e-mail info@packpnt.com
Like us on Facebook https://www.facebook.com/packpoint
Follow us on Twitter https://twitter.com/packpnt @packpnt
Slightly off-topic, but I've just written 10 mins of JS soundtracked by your busking. Cheers! :o)

More on-topic, have you contacted http://theskiff.org/ to see if they can help you fill any gaps?
Another complete web framework in NodeJS world.

http://www.partialjs.com/

Its a bit high level than Express but same performance wise. I like it becoz you get started in 2 minutes.
Heartbleed explained in layman's terms (xkcd)
Yeah Amazon are great to their permanent workers, management and so on. But what about the vast of majority of permatemp workers who do all the moving, warehouse work etc. ?

https://www.youtube.com/watch?v=waeMkka60po
The fix wasn't a massive one. Even without giving details they could have let the distros know that an emergency release of OpenSSL was coming.
It's the building next to that

https://www.google.com/maps/@52.516975,13.390126,3a,75y,156....
HMO HN: security for node based website.

How about this format?
Another (non-profit) initiative from Berlin: http://www.opentechschool.org/berlin/
> There is nothing ignorant about belief in God.

There's little more ignorant than an adult who still has an imaginary friend and insists he's real.
This has been posted here already: https://news.ycombinator.com/item?id=7571947

Only difference is your link has www in front.
Specifying the width proportion with fractions looks pretty nice. But the paragraph explaining how jeet's better than bootstrap/foundation/etc. because it lets you use sass mixins (instead of inline classes) to separate content from presentation seems a little misleading - it's not like you can't do the same with foundation (jeet: @include column(1/3); foundation: @include grid-column(4);). (I don't use bootstrap, but presumably it has equivalent LESS mixins).

(True, it's not the most popular way to use foundation, but that's cos a lot of people don't care about semantic layout and/or don't want to use a preprocessor).
TLS is usually used on top of TCP and therefore UDP limits do not apply. I have no idea how implementations on top of UDP or other datagram protocols deal with that issue. For a payload length of zero I would expect to just get back a payload of length zero, but I am be no means a network or even TLS expert and the standard may as well disallow this. And I am to lazy to look it up.

It is probably a really bad idea to make your protocol depend on details of an underlying protocol layer. Just imagine sending something over Ethernet and receiving it at the other end over WLAN where both protocols may disagree on the maximum packet size. You usually want your standard as precise as possible without imposing unnecessary and artificial constraints. Being allowed to stuff undefined amounts of data into a heart beat packet just to ease abusing the protocol really seems to call for trouble.
Exactly.

I love Uber. Whenever I'm in San Francisco, where the taxi market is completely broken. I've never felt the need for Uber when I've been in places like Sweden, Singapore, Japan, etc, since in these places regular cabs work just fine. In all these places local taxi companies also have hailing apps or SMS services, so simply adding streamlined payment and reputation services doesn't a monopoly make.
When you talk about IV, use the name Nathan Myhrvold. Hell, they have a picture of him right there.

One of the best measures we have against Mr. Myhrvold -- given that he seems interested in portraying himself as a public genius of some sort -- is to drag his name through the mud over this. He's not the guy who studied with Stephen Hawking. He's not the guy who wrote the molecular gastronomy tome. He's the very, very rich guy who wants to drag down the entire tech industry to get even richer.
No they were single threaded forked. Aware of that.
> " Is this just another version of paying off the trolls to make them leave you alone?"

That's absolutely what this is. Instead of being on the receiving end of a thousand lawsuits, you 'invest' in IV, which gives you a license to any and all of the patents they have and will acquire for some term after your investment.

It's a further optimization of the 'pay them to go away' method of dealing with patent trolls, as you're not paying each shell company for each patent, you just pay the parent company once.
Right, so Google is now the bar for moral turpitude? :)
It would help, but it wouldn't get rid of the errors.

It would convert corruption/security bugs into other, much safer runtime errors.

To get rid of the runtime error altogether, we need a stronger type system or a different form of static analysis, as mentioned here.

Also, the extra bounds checking might be somewhat expensive in some scenarios, especially as the fat pointers would consume many more cache lines than thin pointers.
We have build http://DoerHub.com to tackle this head on. You post whatever projects you are working on (hackers, researchers, scientists, are are 50%+ of the community, but there are also marketers, subject matter experts, designers, etc). Examples:

http://www.doerhub.com/for/doerhub (dogfooding)

http://www.doerhub.com/for/robopaint

http://www.doerhub.com/for/surgery-boards-app

http://www.doerhub.com/for/coincashcard

http://www.doerhub.com/for/synaptor

http://www.doerhub.com/for/securityfirst

Whoever sees your project can help in little or big ways, from joining the team to becoming an advisor or a beta user. Teams are soon getting public/private collaboration tools inside projects as well.

At the same time your profile shows what areas you are great at or looking for help in/learning in, example:
http://doerhubassets.s3.amazonaws.com/assets/badge-67f14a8ee...

So you can really easily see people you have a lot in common with and share complementary skills with. An app with real-time chat and serendipity matching is in the works as well. It is entirely free, we haven't made a cent with it but some amazing projects are now in beta because of our work and people who would have never ever met otherwise (a hacker and a surgeon for example) are now doing projects together. There are growing past 600+ doers already and 80+ projects as of yesterday. You are welcome to join.

We don't spread it randomly. Instead we mention it only to communities of doers we respect and would want to work with and I hope you will do the same if you join in.
The New "One Microsoft" Is–Finally–Poised For The Future
> It's like saying your system administrators failed to warn about every single unscheduled service outage.

What you're saying is that 1933 and 2008 was an unscheduled service outage to you. I don't really think so.

Let's take another outage that happened this year to the Nobel Committee: This year's Nobel Prize for the economics went to three economists, Eugene Fama and Lars Peter Hansen from Chicago (I hope Friedman rings a bell) and a third guy called Robert Shiller from Yale.

The thing is that the first two are renowned neo-liberals. They took the Nobel prize for their theory called EHM[1], which states that the markets always now better and to make a long story short "all you have to know about a product, it's written on the price tag". Which is of course is not true. Fama was the guy who made the 2008 wall-street meltdown possible. A meltdown that tax-payers still pay and will pay for the years to come. So does really this guy who had a prominent role in loosing financial restrictions which led to the 2008 crisis really deserves a Nobel? Are his theories real? I believe the result is there for all of us to see: Hardly, if the state has to intervene to save the financial market then apparently, is not as efficient as Fama thought it would. It does not auto-adjust.

The third guy though is famous for stating the exact OPPOSITE from the first two! Which is that the market doesn't regulate NOTHING (otherwise moody's, S&P and many others would be out of business today, giving triple A's to Lehman's products till Lehman crashed). Robert Shiller has become famous in economic circles by consistently disproving professor's Fama's theory!!! It's insane!

So why did they gave a nobel to two guys who say something and a guy who became famous by disproving the first two??? I mean it must one or the other right?

Welcome to the beautiful world of economists (and not economics).

PS: I studied economics in Milan (Bocconi) from 1999 to 2003 but had to go home (change country) due to a health problems. Didn't like it much though...

[1] http://en.wikipedia.org/wiki/Efficient-market_hypothesis
Organizational productivity: You're Doing It Wrong
>education is questionable

Don't you think that generalization is stretching it.

>local economies that they didn't "pay into"

What would you like to say about millions accumulated as social security & medicare by H1B workers that they can't redeem. If one returns to their home country before certain conditions are met, all that money goes to the US.