skysight-inc/HackerNews huggingface dataset:
But the problem is that there are people who have been coding C++ for 20 years, who never quite got all of these newfangled smart pointer things and just want the "C with classes" parts of C++.

Or you have the cargo cult programmers, who don't know the language very well, so just pick up idioms from random internet postings or from some old part of the codebase that's been working for a while, so it must be a good source of design tips.

Remember, any time you talk about the safety of a language, you have to think about its safety in the hands of a mediocre programmer who's in a hurry to meet a deadline. Because that's where the bulk of the problems slip in; not when people are actively and deliberately coding defensively.
TypoPRO – Fonts for Professional Typography
Here's why banks should never be allowed to open a bar
Believe it or not, there is actual IETF precedence for this:

http://tools.ietf.org/html/rfc6189#section-11

(which they really should have cited in RFC 7169)

When the IETF was deciding whether to standards-track ZRTP or DTLS-SRTP, one of the decision points was Phil's refusal to remove the disclosure flag from ZRTP. The committee wouldn't consider adopting ZRTP unless the disclosure flag was dropped.

Incidentally, this is also a case of creative patent use. Phil received a patent for some core design elements of ZRTP, then freely licensed the patent as long as you correctly implement the disclosure flag.
As a frontend dev who isn't using Angular I'm a little jealous I can't readily make use of this! It's the subtle details that add a lot and I believe that in 2014 (and beyond), users are so used to those animations and niceties found in native apps that they expect them at this point. If we can bring that same level of polish to our web apps then everybody wins!
You're right, I completely misunderstood the purpose of Halide. I read up on it and I see now that they simplify how developers can do the copious implementation by hand. The schedule must be specified by the developer, the compiler doesn't to that.
I'm not sure who would downvote that: the amperage is simply staggering! That, and the railgun project has been around for years, with the self-destruct problem being one of the more obvious issues with the idea.

Bludino notes [0] a Popular Mechanics article that quote ls 3MA, with a plan to go to 6MA!

[0] https://news.ycombinator.com/item?id=7553163
I believe you get that with all OS upgrades.
I love Roundcube, use it everyday. The only thing I wish it had was some type of mobile interface. Didn't see anything in the plugins. There are really no good web mail solutions with a mobile interface. I'd prefer to leave this account off my phone if at all possible.
The purpose of SOPA was to call attention to a bill that had enormous implications for the world at large.

The purpose of deliberately breaking IE6 support would be. . . what? To tell customers that we don't like old clunky technology? Seems just a teense less noble, don't you think? Especially in response to a situation that the free market can easily handle unmolested.

If you want to not have to worry about IE6 anymore, all you have to do is stop worrying about IE6. You don't need my help to do it. Though, if the only thing stopping you is fears about alienating customers I'd certainly be glad to help there - just send 'em my way. Can't say I even know how to support IE6 anymore, but if they've been able to cling to it this long I imagine there's a good chance their money's green enough to make it worth my time to re-learn.
I do mostly contract work in the U.S. for state and local governments. The RFP's (Request for Proposals) always say something about using HTML5, responsiveness and the latest web standards.

And sometime shortly after (and sometimes before) project kickoff we always see that a large percentage of their employees are using IE8 and we have to support it.

I make a point of describing in detail what kind of resources will be required to do both a modern website/app using the latest standards and one that will support IE8. I mention that, for the most part, they are mutually exclusive and I will effectively have to build the site (at least the "modern" parts of it) twice and this will cut back on the features I'm able to implement within the project budget and timeframe.

This usually makes the customer take a closer look at their actually IE8/XP install base and I've had several customers decide they would speed up migration from IE8/XP and remove the support requirement for that browser.

Just doing my small part to help kill IE8 - one small government agency at a time.
HARDWARE HAS AN API
How Git redefined open source software development
No, they ask their IT department.
The difference being, they can fix issues with the OS themselves (or hire someone to). With something closed like Windows, there's only one place to go for support.
The real problem with data.table is that it has too much magic. It's great for interactive use, but it's hard to program to.

If, for example, you want to aggregate a table using a list of supplied variable names, like if you wanted to abstract out some aggregation code, you need to descend into horrible quote/substitute/etc. hackery to make it work.
The cost of a cryptography code review is about $5-10k per week.
Stackoverflow HTTPS Error – Heartbleed Bug
This is the job you signed up for. It's a site easier situation now than 15 years ago. You think supporting browsers is hard now? (I can't believe I get to be the crotchety old man in this thread). Perhaps you don't remember the NN4 vs IE4 days. NN4 didn't even have a DIV tag, it had a LAYER tag, and IE4 didn't have the LAYER tag, it had DIV. The only way to support both with all of the DHTML junk people wanted (like they want the damn-near equivalent malarky out of HTML5 today) was to emit separate markup for each browser from the server. You got to maintain two different versions of the site for desktop users.

I just really don't have any sympathy for you. It's not anything approaching hard these days. These days, you just write everything in a compiles-to-javascript language it figures out the browser compatibilities for you. That shit didn't EXIST. You were considered an ASSHOLE if you did anything with JavaScript.
I second this! I switched my domains to them back when GoDaddy got caught endorsing SOPA. Haven't looked back. Very happy with their service!
The Totally Mathematical Reason Why Social Matters To SEO
The fundamental problem is that having a highly secure network costs large amounts of money and time (in direct work and as a knock-on effect of reduced efficiency due to the overhead).

That and a lot of the software used in the Enterprise was intended initially for smaller companies in a much less hostile part of the market.

I have no idea how to solve this problem, systems and software are basically insecure from the ground up and often for convenience/cost reasons that is the way they where designed.

As an aside I installed an older ReadyNAS today (little raid box) and out the box it created AFP and CIFS shares with guest access on the local network, now that is fine for me as it's a wired only network and there are only two of us in the office but how many medium sized companies without IT departments are running little NAS boxes that are shared to the world over WiFi and that is just one recent example I can think off.
Incapsula issues a fix to the newly disclosed OpenSSL Heartbleed bug
Good enough can also be the enemy of great. It's a tricky balance. My feeling is that there are already plenty of languages that are mature and stable enough to be good choices for industry but few (if any) that are actively and inclusively defining themselves the way Rust is. It's true that it won't be viable for a good while yet, and that's ok. What's the rush?

A data point: I have a few little Rust projects that rely on some patches to some other libraries; whereas I used to spend above a half-hour compiling and sometimes an hour or two freshening making things compile for the new version, I'm now typically down to about 10 seconds to install the newest nightly and 5 minutes or to fix up some warnings and standard library changes. A stable 1.0 is starting to feel imminent and inevitable to me.
Here are the release notes. http://docs.mongodb.org/master/release-notes/2.6/
Frozenfever
Building any apps on Qt, Ubuntu or Sailfish? What are the pros and cons?
2048 With unicorns inside
Wikipedia has a good writeup of the Millenium Challenge 2002 wargames, where a large fleet was basically destroyed by assymetrical guerilla tactics (small boats, low tech communication):

http://en.wikipedia.org/wiki/Millennium_Challenge_2002
We have internal web based apps that require IE 7 and Windows XP due to Active X controls. We've moved to Windows 7 with virtual XP machines. To prevent internet access we've stopped any traffic at the firewall with the virtual machines.

We think this will work to prevent internet based attacks, but realize we're still vulnerable to physical attacks through media. It was the best we can do given our reliance on the older system.

Any other holes in this other than the physical issue?
While this may seem like a tempting statement, it is not really an answer, since "unbreakable" is not really well-defined. Clearly, "truly random" is a bit of a tough one to define. And sending the message length is a bit of an information leak itself. But even putting those aside, there's a bigger flaw.

The biggest problem in this mechanism is how does the other party get their one-time pad? An upper bound on the unbreakableness of the entire scheme is the unbreakability of transmitting a one-time pad; and if you can do that, then why not just send the actual message via that mechanism?
"If OpenSSL suddenly became twice as slow, it would cost a lot of people a lot of money."

Perspective check: We are talking about a situation in which OpenSSL had NO SECURITY, has had NO SECURITY for two years, and an unknown amount of existing caught traffic is now vulnerable. If the NSA did not already know about this bug (and given that it is not hard to imagine the static analysis tool that could have caught this years ago, it's plausible they've known for a while), they are certainly quite busy today collecting private keys before we fix things, so what security there may have been is now retroactively undone. (Unless you used PFS, which I gather is still rare. In other news, turn that on!)

Do not argue as if you're in a position in which OpenSSL experienced a minor bug, so let's all just calm down here and not make such radical arguments. We are in a position in which OpenSSL was ENTIRELY INSECURE and has been for years, because of a trivial bug that can pretty much ONLY happen in the exact language that OpenSSL was implemented in! Virtually no other language still in use could even have had this bug. This is not a minor thing. This is not something to wave away. This is a profound, massive failure. This is the sort of thing that ought to bury C once and for all, not be glossed over. (As for theoretical arguments that C could be programmed in ways that don't expose this, if the OpenSSL project is not using them, I'm not entirely convinced they really do exist in any practical way.)

If we're OK with bugs that are this critical, heck, I can speed up your encryption even more!
The tool is interesting. However the naming makes it unsuitable for corporate work.
children have no lack of free time, and if this is just another activity they enjoy, it will give them access to learning important skills for their future
Micro $299 3D Printer Passes $1M On Kickstarter In 1-Day
So I have to wonder.... why? If I was you I would put the link to https://github.com/andrewromanenco/pyjvm/blob/master/WHY.md front and center. That's great that it was done for academic purposes but I didn't understand that from the main page.
In the case of my friend, because she could no longer afford to subsidize the rent of the tenant and they've decided that if they have to pay the mortgage and property taxes of the unit, they might as well live in it (or in the case of the friend, she wanted to move her parents into the unit as opposed to into assisted living).

But even if she just wanted to personally sunbathe in each room of the unit, WTH should such a landlord have to pay a cent towards the relocation expenses of the soon to be ex-tenant? I'm a pretty liberal guy in most ways, but this is utter BS entitlement IMO.
And even this is in practice a problem: How do you distribute and secure the pads?

A lot of problems in cryptosystems stem from implementation details - think side-channel attacks, exploits, ...
How does it work with digital products? After payment receipt you a show a download link from the persons dropbox?

For physical products - is there a custom form to collect shipping & billing?

Nice work!
We made it for our kids, wich where very happy to see unicorns, so we decided to submit it.
Really nice to see some innovation in this space. I have used a particular provider since 2006 and eventually ripped out 98.5% of their system to replace with my own, but am familiar with the offerings you're competing with. Most are godawful. They're largely bubblegummed-together, the reporting is atrocious, they're virtually unusable by the (surprisingly) non-technical people who have to work with them, they have UXes which actively discourage customers' customers from spending money (!), etc etc.

I would not be surprised if the market eventually pushed you into handling fulfillment, by the way. For many of the early adopters in this space that's as simple as "proxy a download link and send two emails" but it's a really important part of the puzzle for them.
Or from any other stable, human rights respecting country that isn't a Five Eyes member. Doesn't save you from DNS blocking (and many other things), though.

See https://www.pirateparty.ch/wikileaks_ch_blocked (EveryDNS stated it isn't taking a position on the content hosted on the wikileaks.ch website)

In addition, I'd like to say that I don't think there is a problem with .com, .net, or .org

It's way more important which registrar you have.
Why would they abandon it? It's fun.
I'm not sure you even need to do any analysis of the runtime layout of OpenSSL, to be honest, though no doubt it increases the efficiency of the attack.
Some notes on using the shell, and some unforeseen performance changes from the beta: http://comerford.cc/wordpress/2014/03/28/mongodb-2-6-shell-p...
Exactly. Any AV worth it's salt should pick up something that a security update should have fixed.
We've done many enterprise integrations. How we increase enterprise adoption
That actually makes me feel much better about the matter, good to know!
I would think the myriad security holes ie8 presents would be compelling enough a reason.
I love EU! US, pay attention. This is how you do civil liberties.

Note that it was the EU that implemented this data retention law in the first place. The US has no such data retention law and attempts to pass one have failed.

US law enforcement and intelligence agencies have done plenty of their own privacy invasion, of course, but there is substantial evidence that their counterparts in EU countries have done the same, sometimes conspiring with the US to do so.
I liked original versions of Pirate of Silicon Valley, and original Office Space - nothing beats those two movies on Startups.

However, the theme (and reality) of entrepreneurs facing all sorts of challenges and storms, and still stand like a mountain to support their products/platforms/ideas reminds us how power a human being is! just amazing...
Twitter is about to look exactly like Facbook
I'm very happy with dspam (http://dspam.nuclearelephant.com/), and the Dovecot integration plugin (http://johannes.sipsolutions.net/Projects/dovecot-antispam)
From: https://en.wikipedia.org/wiki/Bitcoin#Block_chain

"Integral to Bitcoin is a sequential record of all transactions known as the block chain. There is only one block chain, and it records bitcoin ownership both present and at all points in the past. By keeping a record of all transactions, the block chain mitigates double-spending, a core design challenge of digital currency. Approximately every ten minutes a new bundle of transactions, called a block, is added to the block chain."

If you need a more in depth explanation, which also covers how this relates to a famous problem in distributed systems (the Byzantine Generals Problem), see: http://expectedpayoff.com/blog/2013/03/22/bitcoin-and-the-by...
This is the group that stole the Beastie Boy's song and broke Adam Yauch's dying wish, right?
"unbreakable" may be not well-defined, but perfect secrecy is[1].

1. http://en.wikipedia.org/wiki/One-time_pad#Perfect_secrecy
how does one node know what other nodes are doing if latency between the messages could be anything between 50ms and 5000ms? if one node has a good position in the network it would know more than other nodes and outpace the network. which is exactly what would happen with ghost. the ghost authors have bound estimations on latencies, overlooking the possibility of information arbitarge. somebody would figure out where the most information comes from and arbitrage the network. so besides hashing attacks there are "latency attacks", but they don't even appear in Bitcoin, because blocks solve that issue. latency is negligible vs. the 10-minute block time. this could be shown with a timing attack on an alt-coin with < 60 sec blocktime.

Lamport's work make this connection obvious. He invented the Byzantine Generals Problem and wrote this paper: "Time, Clocks, and the Ordering of Events in a Distributed System", Communications of the ACM 21, July 1978
http://research.microsoft.com/en-us/um/people/lamport/pubs/t...

logical broadcast means: every node has the same state (time invariance). the only thing that matters is hashing power.
Inspired by a music box, Stanford bioengineer creates $5 chemistry set
mongodb is the best database in the whole wide world at the moment. I encourage everyone to jump in mongodb for agile web scale development with full big data capability.
That's about right. Depends on customs and other mysterious bits. I've had shipments take a couple of weeks and I've had others take 6 (in fact 30 days seems a bit aggressive). It just depends.
Would be interesting to know. Based on anecdotal reports, I would guess that we are now today in a situation in which more people than ever are running an unpatched, Internet-connected computer - I'm hypothesising that XP is by far the most 'un-upgraded' OS we've had since mass adoption of the Internet.
Malware detection in a firewall/proxy is already very common. See Blue Coat, FireEye etc.
And here's the original video on YT, minus the Wired framing.

https://www.youtube.com/watch?v=ArNAB9GFDog
It seems at least reasonable to try to compare smartphones to the innovation of the microcomputer. Mainframes/supercomputers have a particular purpose. When microcomputers/pcs came along, they filled a new purpose, but they didn't necessarily try to replace everything workstation and mainframes were doing for a very long time. They will never do everything that a compute cluster does. The same will likely be true for desktops for a while. I imagine that mobile phones will do much of what desktops do eventually, but it's going to take a long time to get there.
Especially now that there are no more security patches. But if you've never worked for a government agency then you might be surprised at:

1. How little management cares about technology as long as it's working.

2. How competent/paranoid some of the sysadmins are and how severely locked down some of these networks are because of it.
Cause staying home and taking care of the child brings absolutely no value to the world, right?
HTTP error response code 418 (RFC2324) is my favorite because many servers have actually implemented it. The recent RFC7168 extends it.
Thoughts on culture at a startup
What am I supposed to see? I just get an invalid certificate? Or is that what I am supposed to see?
I am not sure this gets at the reason XP computers are still around:

Our lab has a fair amount of equipment that is based on a PC running Windows XP. This is mostly equipment that is old but still working, and will never get driver support for Windows 7 or 8. It will also never get Linux support.

Short of throwing away lab equipment our options are to just ignore the security issues, or do something complicated like disconnect the network except when we need to transmit files.

Linux is a good option for people that just have an XP machine for email and some web browsing, but I personally don't know any examples of that.
It looks great but their is a lack of an About Us section on the website.

I'm worried about the website not being maintained and the Robotiky becoming an expensive paperweight.
Is Iceland the place for your data?
As a dev I have been trying to convince the project managers of the following theory of people who use IE6/7/8.

They must fall into one the following categories

1. Windows XP, which does not allow them to upgrade to IE9 AND do not know that other non-sucky browsers exist

2. They work for a company that requires IE8

3. They are masochists who love pain)

4. They are sadists who enjoy dealing out pain to Web developers.

Proposed solutions were:

1. Tell them that other browsers have better experiences.

2. Point out that they can usually get around this by using a Chrome frame. Also point out that IE8 is riddled with insecurities and give them a form letter for their IT department asking for an update.

3. They love pain, there is nothing we can do about this. They probably enjoy having incomprehensible boxes instead of icon fonts on half of the sites they visit. Grids be dammed, they love misaligned columns.

4. They probably don’t even use IE8, they (or their botnet) just use a User Agent String that mimics it. These people are asshats, should be ignored at all costs.

I felt this was a quite pragmatic approach, needless to say we still support these users and their shoddy experience.
It's sounds like you are doing what everyone else is. If the cost of support < cost of retaining those users than you fix it. You've realized IE6 is not worth it at this point and sounds like IE7 is getting to that point. For some people supporting anything <IE9 doesn't make any sense. I'm curious about IE8 users though. It seems that after IE7 it would be a much faster life cycle. Doesn't IE9 auto update? So our last hope is to get IE8 user to upgrade 1 time and then we're good?

I work with some enterprise customers and they seem to be mostly IE8 or IE9. We have one dreadful customer who still wants IE6 support but we've officially dropped IE6 & IE7 support. We still do direct hacks as part of consulting for that customer.
It's not just enterprise. For consumer websites the usage is going to hover around 3-5% (IE6,7,8 combined) for a long time - if you target less technically inclined people probably more. Tablets and Smartphones probably help more than Win7+ adoption in that area, but there's still going to be a significant amount of people using browsers on older computers.
I ran the acid3 test on my Firefox 28 on OS X and it passed 100/100.

Besides, the acid tests are more a worse case scenario and may not be indicative of real-world cases.
/me is unable to read :( sorry abotu that

Yeah, it is. Especially since their cert is over a year dead.
Don't begrudge the Smalltalkers their crumb of comfort :-)

http://benchmarksgame.alioth.debian.org/u32/benchmark.php?te...