skysight-inc/HackerNews huggingface dataset:
Only reverse engineering for debugging modifications of the LGPL code in derivative works.

if you try to reverse engineer the protocol starcraft 2 uses with battlenet, you will have a hard time arguing in court that the LGPL license gives you permission to do so. If I recall right, starcarft 2 has some heavy restrictions on reverse engineering for this specific purpose, and I trust their lawyers to actually understand this difference.

For console games (which starcraft 2 is not), the console environment is incompatible with LGPL. If adaption of a security library depend on the console market, then such adaption won't happen.
> So you would vote for the President of the United States when he was not in support of gay marriage, and that's OK, but if the new CEO of Mozilla holds the same stance you will?

Even when Obama was "not in support of gay marriage", he condemned Prop. 8 and similar moves to enshrine prohibition of same-sex marriage in Constitutions -- whereas Brendan Eich donated money to the Prop. 8 campaign.

> So you would vote for the President of the United States when he was not in support of gay marriage, and that's OK, but if the new CEO of Mozilla holds the same stance you will?

I've seen Obama, at a minimum, change his mind very publicly, has never once advocate any change in law or policy hostile to same-sex marriage, and has used the power of his office to direct that the government first stop defending existing statutes hostile to same sex marriage, and then take other substantive steps in support of it.

Meanwhile, Eich said that his donation doesn't prove that is a bigot, but hasn't done anything to indicate that his hostile position has changed.

> What's the difference again?

The fact that their positions in 2008 weren't the same to start with, and that one of them has very publicly moved to a very much more pro same-sex marriage position since then.

IOW, there's pretty much nothing similar at all.
Ironic that the blog talking about this is a rather boring looking site that I've just navigated away from as soon as I got the gist. Not meaning to be hash but that's what I did...
Video ads are fine, but auto-playing with sound is awful. It's the kind of ad I have a blocker for. I would have found another source if I knew about the ad.
"Drone please spy on my ex" - Winner business model
But was Eich's stance on Prop 8 relevant to his post as Mozilla's CEO?
This is easy: Your salary and skills can use a bump. Take the risk, and save some of your raise in an emergency fund.
Mission accomplished. does a little jig
Pros -> people who do it for the money only. Amateurs -> people who do it because they like it. why/when has 'amateur' become an insult?
> Why not put every chance on our side and use languages (e.g. Rust, Ada, ATS, etc.) that make entire classes of errors impossible?

Bugs will still occur, just in a different way: Java is advocated as being a much "safer" language, but how many exploits have we seen in the JRE? Going to more restrictive, more complex languages in an attempt to fix these problems will only lead to a neverending cycle of increasing ignorance and negligence, combined with even more restrictive languages and complexity. I believe the solution is in better education and diligence, and not technological.
I agree. But unfortunately many of the browser creators want to support full-fledged apps within a browser, which in their minds necessitates the rebinding of core shortcuts. A great example is command/control-s in Google Drive Documents.

Conflicting interests.
For the record, that's nonsense: the Levitical laws are typically not taken as binding for Christians. The reasons for that are surprisingly straightforward (see: entire NT), but this is a rather silly tangent issue on an already-silly thread and is just not the forum.

And no, while I've given money to a church, it is not anti-gay, thankyouverymuch.
I agree - we are only now coming to where we understand gamification enough. I do believe that gamification is very important for some of the rote, but necessary, aspects of educations. It's not a cure-all, but perhaps it's good for drilling basic math, building vocabulary, and learning grammar.
Yes, and that's how this bug was found.
OkCupid as an organization sought specifically to harm Eich and Mozilla. I don't really care about any apology unless it is issued directly to him.
Yeah, pleading ignorance was a neat way to word it, I admit.

The guy is a sleaze-bag, who chose to attack an open source browser (with an important role for the future of the internet, and the work of thousands) through his business for the benefit of getting positive PR for his business.

I wonder if Brendan Eich had this mentality, how he'd spin it. "Oh, I apologize, I thought Prop 8 was about supporting the gays, damn. I didn't do my research!".

But he doesn't have this mentality. So he instead chose to abandon the work of his life in order to preserve it, a rather painful action, as his spin-skills and spin-will were insufficient.

It basically means that those of us who are willing to...

1) Attack others for their political actions for PR reasons.

2) Engage in the same type of political actions.

3) Lie they were ignorant about it.

4) Say "sorry" without feeling any guilt.

... have a huge edge on those honest people who just say things as they are, without spinning things.

Damn, no wonder sociopaths are ruling the world, huh?
So ... as a professional organization, why does OpsBeat continue to contract with such an amateur organization? You could scale up your own servers, round-robin DNS (more for ELB), etc if you're not happy with their performance.

Instead, a group of dedicated professionals updated a world-wide infrastructure in less than two days. If you were running your own systems would you have managed that? Yes, you would have known exactly when you were done but could you predict ahead of time when you'd be done?

So, as engineers we make trade-offs and AWS is a pretty clear winner when you look at the TCO of having a scalable architecture. Once you've made that trade-off, the down-side is that you don't have the ultimate flexibility provided by a bare-metal host.
That's amazing to me that you have never, ever given any money to the Salvation Army. You may be a unicorn who has never donated to anything which supports an anti-gay agenda good for you.

>Your position proclaims that if all things apply, then nothing applies

I'm saying that if it's enough to fired someone over donating to a bill that is anti-gay then it's enough to fire someone for donating over and over and over again to a church which fuels constant anti-gay agenda. Not just Christianity but Judaism or Islam which are even more explicitly anti-gay - logically anyone who is a Jew or Muslim should be targeted next by the social justice witch hunt.
How Mike Judge and Co. Are Turning "Silicon Valley" Into the Next "Spinal Tap"
NYC’s Flatiron School Raises $5.5 Million To Teach People To Code For A Living
Transactional Memory in PyPy
Supporting Prop 8 is not "indirectly anti-gay". It is directly anti-gay. Prop 8 has only 1 purpose: to deny gay couples the protection of marriage. On the other hand, with a candidate, one could in all honesty support a particular position (or set of positions), while being unaware of the candidate's stance on some other positions.

I was waiting for Eich to respond to the firestorm with some clarification or a public statement; he did neither other than resigning. That, to me, speaks volumes: he'd rather give up his CEO position than his anti-gay position. So it is best that he resigned and left.
3 features from Rails 4.1 that I’m excited about
git grep can be used outside a git repo (git 1.7.8):

--no-index
Oh, yes, this class of cartridge can be deadly, it's a question of statistically how reliable is its "stopping power"; killing is a secondary consideration after stopping someone from trying to kill you!

I'm impressed that there's lots of > 300m training, 400m effective range is achievable with this class of rounds, but the bullet drop after 300m is serious. But you wouldn't want an enemy to get complacent if they were > 300m from your people.

Not sure about your ideal; the heavy forces have a deterrent effect, they ensure reducing them in an all out war would be expensive. As I recall, the German General Staff figured taking Switzerland during WWII would break 85 divisions, a cost they simply couldn't afford. Which came at a cost to the Swiss, you mobilized your army, shut down your stock market, etc., the defensive "threat" was credible, deterrence was achieved. (I haven't read it yet, but this is supposed to be the current best book in English on the topic, written by a very solid and trustworthy author: http://www.amazon.com/Target-Switzerland-Swiss-Armed-Neutral... ).

It's also worth noting the accepted costs of the Swiss strategic system, then, during the Cold War, and presumably during a future attack by a major nation (which, as it became more likely, you might presume would include Switzerland bulking up its heavy forces in response).

Very bloody minded: give the indefensible lowland big cities to the enemy (where per the book I linked to previously, the citizens practice "Total Resistance" using among other things those decommissioned from military service older rifles), and retreat to the mountainous country and make the enemy pay for every foot they gain, with little more than bullets and rifle grenades if need be. Per the apocryphal quote from the Imperial Japanese Navy admiral who planned the Pearl Harbor attack, "a rifle behind every blade of grass".

Also, after the Vidkun Quisling debacle, a general order that henceforth no surrender order would be legitimate, and to fight to the last man and foot of ground. (Well, meter of ground of course.) Credible deterrence, which I submit to you, your current heavy stuff aids. Certainly aids in deterring any less than all out attempt to "punish" Switzerland for whatever. Right now the latter is "unthinkable" in part because you've got those heavy forces.
Now Available New Domain Extensions and Names...What You Have to Know.
The app looks like this when you launch it: https://www.dropbox.com/s/zmj9poc7nic7wzz/Homescreen%20Final...

If you enroll in SICP, we find you someone to work with.

(You can always just call someone you already know, though.)
In Haskell, there are types that you have probably heard of but not used. Functors, applicative functors, and monads. In Haskell, I could define a value and its type:

> value :: ConstantTime Int

But how do I obtain an "Int" from that, since I know it somehow relates to an integer type? The answer is: you must ask the implementation of ConstantTime for the value, and if it doesn't want to give it to you, it doesn't have to. Constructors can be one way.

The library author could define a number of additional operations. These operations are privileged, being written as part of the library, they can actually inspect the inner data at any time. This is the "small core" that needs to be verified.

> addInt :: ConstantTime Int -> ConstantTime Int -> ConstantTime Int
> subInt :: ConstantTime Int -> ConstantTime Int -> ConstantTime Int
> mulInt :: ConstantTime Int -> ConstantTime Int -> ConstantTime Int
> divInt :: ConstantTime Int -> ConstantTime Int -> ConstantTime Int

Then to compute something like Euler's formula one could write a function in terms of those functions.

> newtonsMethod :: ConstantTime Int -> ConstantTime Int
> newtonsMethod = ...

And one can be certain that the laws that apply to `addInt` apply to `newtonsMethod`.

This composition has wonderful benefits because if there is no branching operation defined by the library, users cannot use branches inside ConstantTime. To serially apply addition, multiplication, etc, one can write in a sort of reverse polish notation:

> square :: ConstantTime Int -> ConstantTime Int
> square input = mulInt input input

Using the multiplication operator, (*), would be illegal there. And that function, square, cannot inspect the value of input. Because it can't inspect the value, it can't make choices based on that value.
Or maybe not after the current maintainers roll our their not so welcome mat.
> Obama campaigned in california in 2008
True.

> 2008 was a presidential year

True

> 2008 prop 8 was on the ballot

True, and Obama is on record in California in 2008 specifically opposing Prop 8 and all similar attempts (Prop 8 wasn't unique) attempts to write a similar defense of marriage into state and federal (there was an active move to do that, too, then) constitutions.

> === That is "action" with intent...it is cut and dry.

Sure, action against the position Eich was for.
Don't overdo it either. There's plenty of landing pages with non-existing services, no need for crazy project pages where the projects themselves will die soon out of interest or are just subpar.

In this specific case, I would prefer resources spent to make the OpenSSL library itself better instead of the https://www.openssl.org/ domain better.

That being said I agree with the article and love how http://heartbleed.com/ was done.
For those who have the chance, the Air and Space museum in DC currently has a very good exhibition on the history of navigation techniques [1].

[1] http://timeandnavigation.si.edu/
Thanks ! Glad it can be of help, I was really annoyed that such an article didn't exist (or at least I didn't find it) when I started.
So fucking true. Obnoxious javascript masturbation pattern #47,601 that will make me blacklist scripts from your site. Same for single-key shortcuts (I'm looking at you there, JIRA...).
My personal pet peeve is the hijacking of / for in page search...
>the Levitical laws are typically not taken as binding for Christians

http://www.evilbible.com/do_not_ignore_ot.htm
Did I miss something, why 14.4m between knots? Or why set 1.852 kilometers as the nautical mile?
I am developing on a Samsung Chromebook, actually. The weight and price is perfect for travelers. I have felt its limitations, with speed and storage, which I tend to offset with cloud boxes and storage.
Agreed.

Is there an addon to block shortcut hijacking? I would love that.
I invoke git grep with helm-git-grep inside Emacs. Almost instantaneous incremental search across the whole repo.
BitBucket/JIRA/Confluence integration could be much tighter. BitBucket definitely feels like an island IME.

That said, it's most of what you want from Github at much more reasonable rates. So I'm very happy with it outside of the positive network effects of forking on Github (I rarely see a lib I want to fork on BitBucket).
Thats an awesome article. ISRO can be an inspiration not just to young kids but many other private/government agencies in doing technologically advanced things.
The fact that all of this was fixed so quickly given the size of AWS infrastructure is in and of itself very impressive. Sometimes there isn't much to say except "We're working on it" - You can argue semantics but half the internet was in the same boat yesterday and sure maybe they comminuted poorly but "Amature‎ hour" isn't fair imho.
> No, but they are kinda close.

Let's not be dense. They're not even close. It's almost impossible to vet a candidate and figure out his views on each and every position; while with a proposition like prop 8, one just has to read the title to figure out what it's all about.
You seem to avoid the obvious issue. He encouraged and sought the approval of blacks and religious groups who overwhelmingly (7/10) voted against prop8 and led to that ballot measure being passed. He used <specific language> about <the subject> to win their favour. So he was not in any way neutral on this issue. It is impossible to argue.
> That, to me, speaks volumes: he'd rather give up his CEO position than his anti-gay position.

That's a pretty big assumption. You don't know that at all, and you also have no idea what sort of pressure he might have faced from Mozilla's board.
Good insights Marc!
Is it open source to verify that behaviour? Has anyone verified the source actually compiles into the binaries they offer?
A fanboy of ..?

Due to so many downvotes I must have not expressed enough the absurd of "PC, or Linux". I know the reasons Apple is branding itself not as PC, I got used to it. But saying "PC, or Linux" is something completely new to me.
http://archive.is/L86K7
Or create a standard of annotations for C, like those used by Java and C#? NotNull, CanBeNull etc, and let the static analyzers use those hints to help even more.
Ok, can these guys actually release something which doesn't require login, beta subscription, waiting for months to see something, etc.
Sorry for the rant but... seriously, I think they'll be much more successful if they just do something that works and solves a problem, show it publicly and then try to build all the excitement.
I agree with the principle; the logo even made the NYT, which had at least three stories on Heartbleed.

But: are there enough two-english-word combinations left as viable .com names, much less ones that accurately describe the vulnerability?
To be clear, #[no_std] only "removes" the runtime by ensuring you don't accidentally use any functions that need the runtime. Something like

#![crate_id="basic_lib"]
#![crate_type="dylib"] // for a .so

/* not there's no `no_std` */

#[no_mangle]
pub extern "C" fn add_in_rust(x: i32, y: i32) -> i32 {
x + y
}

Compiling that will give a `libbasic_lib....so` which can be linked against by any C program, and the `add_in_rust` function called without the Rust code needing to touch a runtime. (I imagine that one may have to add some extra linker flags.)

There are many functions/types in libstd etc. that can be used without a runtime (although its still not as great as it will be in future).
I'm exclusively PC/nix. Heavy use of VM's. My main laptop is a reasonable Thinkpad that has had "some issues" with its ancillary GPU but the core has been solid. I used to dev primarily on an EEE PC running mint, but that model is no longer produced, and was the last one that provided the physical robustness as well as the featureset I wanted. (If they still produced that same model, I'd still be using it, even over the thinkpad.)

My laptop is my "interface", far more often than my tool itself. I have powerful servers for building, VM's for emulating other environments, I want my laptop to simply be something I'm _VERY_ comfortable with and able to mangle as needed, which usually ends in *nix for me, out of sheer pragmatism. (the windows is for software I have to run that forces a degree of compatibility.)
They're not amateur. We pay for their premium support and their communication is professional, polite, and usually totally useless.
I think this is the same content, different MIT URL:

http://engineering.mit.edu/ask/why-speed-sea-measured-knots
First of all, thank you for your comment. I didn't realize that linking directly to the blog post and adding the tl;dr as a comment would have been a better format. I'll remember that for the future. I do believe the tl;dr is necessary because I didn't want anyone to feel they'd wasted their time reading my entire post without having a preview.

1) You're very right. PG has likely seen more diversity than I have. However, I think his bias, when discussing the real world environment in the essay, leans toward culture that values the properties most nerds have. My bias probably leans the opposite way. So neither of us even considered a large enough environment sample as we generalized "Nerds" and "Jocks." Or perhaps PG did consider it, and that is why he alluded to the sense of greater freedom in real life.

2) This is an important idea in the essence of my post (perhaps inaccurately conveyed). Even though I considered myself a nerd, my status in high school was primarily "Jock." After high school, I was primarily a "Nerd." For me, deviating from the standard path to popularity was so much easier as a jock in high school, than as a nerd in real life. As for success after high school, I do believe nerds have a better probability overall, but anyone who disobeys the status quo in real life should expect plenty of headwinds.

3) I agree with you. My experience within a small sample of what the world offers in its entirety likely constricts my perception of the relative freedom between secondary school and real life. I only know what it's like struggling in the real world in a small farm town in MT, in a medium college-town with a population of a few hundred thousand, in Los Angeles, and in a large city in Brazil. I know what it's like to be financially successful only in that medium-sized town and in Brazil. I do believe that the lower you find yourself on the hierarchical ladder, the more imprisoned you will feel in both high school and real life.

Thank you for your insight and for both taking the time to read my blog and respond to it.
This speaks to a broader issue with trying to keep every hotkey at the top level when you have multiple, nested containers. There is a fantastic solution to this: have a leader key that says "I am talking to my browser", where one of the sub-commands is "pass a literal leader key through". This is the way screen/tmux and ratpoison handle key bindings, and it means there is literally zero chance of a collision that I can't trivially resolve by slightly modifying my interaction.
By arguing fervently that all Christians and all Christian Churches are fervently anti-gay, you're obscuring your point, which actually isn't a horrible one. To support your point, which is that Yagan's actions are tantamount to donating money to a (for example) Catholic charity that happens to be anti-gay, you only need to point out that some Christians and some Christian churches are anti-gay.
This is so vague it seems they have barely started work on their product.
Here's an interesting thought.

The NSA isn't the only entity who could stand to benefit from a privately held exploit to most SSL implementations. The NSA is also not the only group who could actually accomplish this.

Who's to say there aren't groups out there that are doing this already to steal and profit from corporate information, credit cards, etc.?
I'm around to answer any questions.
> HTML <keygen> tag has been around since Netscape Navigator 3, and still nobody uses it?

StartSSL uses it for personal (email) certificates. I've tried using it in a toy VPN project but dropped the idea mostly because I was unable to easily explain how to use those certificates afterwards (i.e. export them out of the browser's keystore, import them to smartphone and use with VPN without horrendous tens-of-steps tutorials that'd bore anyone to death).

The issue is, almost nobody uses client X.509 certificates, so <keygen> is obviously unused, too. The core issue is, browser (and other software) vendors never gave a thought on improving horrendous UIs for certificate use and management. It's still hidden after 4-7 clicks away under some obscure names, and then it exposes almost raw X.509 data which asserts those casual users who found their way through the settings are scared away.

I mean, something in this direction is a must: https://www.dropbox.com/s/xxfzf9ed4wfytkj/tls_auth_ui.png
That's not a conflict, if you're using vimperator. In one mode, you pass whatever. In the other, you pass nothing. The only conflict would be around a site wanting to bind escape...
"The Heartbleed announcement ... is masterful communication."

You have to be kidding me. It took so long to decipher what I wanted to know that I went elsewhere.

Edit: "masterful communication" this is not, since the reader doesn't know who the page is aimed at. Even a line at the top saying "Technical people go _here_", and then something aimed at technical people would be better.