skysight-inc/HackerNews huggingface dataset:
I tended to have many amazing insights, only to discover I'd just reinvented the wheel. It's because I do not have an academic comp sci background.

I learned how to do data flow analysis by taking a short course put on by Ullman and Hennessy.

I learned about GC from the famous GC book.

I learned a lot from people who started out saying "Walter, you damned ignorant fool! [...]"

I've learned a lot about things that sound like great ideas but just don't work, from bitter experience. I try to pass this stuff on to the next generation, but they are usually determined to make the same mistakes. Oh well.
Also note that many non-SSL domains will be using SSL in subdomains, e.g. login.blahblah.com
The depth of the problem
Microsoft launches Office Online for Free
Which only applies if you were to do it to systems that you aren't authorized to use it against. Simply creating and testing the code on your own servers is far from unauthorized access. If it were anyone who had posted any PoC code would have been liable for anything that happened with their code.
I kind of OD'd on MMO's back in the days when Everquest was king. I played with some RL friends and, when they got sucked into an uber-guild, so did I. Pretty soon it was a second job and about as fun. Still, being elite was addictive. Eventually, I had to choose between virtual success and real-world success. There just wasn't enough time for both!

The funny thing is, this experience completely turned me off of multiplayer games, MMO or otherwise. I used to enjoy logging into FPS servers and wasn't half bad at several popular games. There was no time for them when I played MMO's, and I've never gotten back into them since. Since I know people who used to work at Bioware, I've long made a point of playing every single one of their games. That ended when they made a MMO. I briefly played Mass Effect 3's cooperative multiplayer, but I couldn't stand even that! There is absolutely nothing that breaks immersion and destroys your enjoyment of a game universe like listening to teenagers talking smack.

Yeah, I'm a geezer now I suppose. Damn kids, get off my Quake server!
SEEKING WORK. Located in San Diego. Willing to relocate or work remote.

I'm a Master's student (Computer Science) in University of California, San Diego and looking for summer internships (July - September timeframe).

I have programmed in Java, Scala, and Javascript in the past. Recently I have been doing data engineering (ETL, server backends).

See my LinkedIn profile for more details: http://www.linkedin.com/pub/pramod-biligiri/23/65a/b97

I have a few small projects on Bitbucket: https://bitbucket.org/pramodbiligiri
Fwitter.
I've always wondered what it would be like if Eve Online did hi-def movie re-enactments of these. Certainly at least as exciting as watching a couple of hours of some sporting event.
Mailer previews will literally shave hours of time off of my email testing workflow — no more mail-to-a-test-account-and-wait garbage. And that's one of the minor features.
What Is Heartbleed? The Video
The issue at hand is an error that is typical for C (unchecked out of bound memory access). It's a class of error that does usually not occur in other languages. The vulnerabilities in Rails were XSS vulnerabilities and an information leak - both classes of errors typically found in web application frameworks.

The first is an example of an error made more common by the language design, the other an example of errors typical for a class of applications. There's a fundamental difference here. There's a ton of reasons to criticize ruby and it brings its own set of flaws and problems, some rooted in the language and some rooted in its ecosystem - but the given examples just show that web applications are hard to get right. That's why this is not "a point not well made" but rather "sorry, you're attacking a strawman here".
My main complaint: The syntax is awful [1].

The runtime is also extremely bloated. To run one fairly simple web application with a handful of users, Rails uses well over 500 MB. I have no idea what it could possibly be doing with that much memory -- is it trying to make a separate object for every pixel? Startup for Ruby apps often takes over a minute.

Ruby is Rails. It's hard to find information about using Ruby for non-Rails projects. So as a beginner, not only do you have Ruby's weirdness to deal with, you're often fighting the number of moving parts in a modern web application.

Also, "magic." I haven't used Rails enough to know about this, but I hear "magic" is common, e.g. (I've heard) Rake uses some horrible hack to monkey patch the lexer or somesuch so it can have its own syntax. This kind of thing leads to code that's even harder to understand because you now have non-local dependencies. To be fair, Python also allows monkey patching, but also has a strong "don't-do-that" cultural norm.

[1] https://news.ycombinator.com/item?id=5872899
Wow, that is really neat. I would imagine Java's parallel-friendly data structures help make that feasible? (vigorously discussed in this thread a few months back: https://news.ycombinator.com/item?id=6505786)
Debian and Ubuntu default SSL on. More details here

http://blog.hagander.net/archives/219-PostgreSQL-and-the-Ope...
I thought the banana said "For Sale". Makes sense now..
Awesome! The other day I tried to find the amount of per-cpu tuning the .NET runtime was capable of but could never find anything. Thanks for the link, this is exactly what I was looking for.
This is where I make my obligatory comment about the game I've been developing on my own for 2+ years: Gangs of Space. It is heavily inspired by EVE Online, more arcade-oriented (but keeping or expanding all the good parts like unique shard, territory control, trading, research...) but without the PVP component.

And since it might tickle some hacker's imagination, most of the game data is accessible over a REST API (like EVE Online) but also modifyable by this API. Writing custom tools, bots, notifiers, collaboration tools, or anything else is actually encouraged :)

To see more: https://www.gangsofspace.com/en

(We're also running a Greenlight campagign, any vote there is very much appreciated! http://steamcommunity.com/sharedfiles/filedetails/?id=234327...)

If you have any remark or just want to chat about nitty-gritty technical or game design stuff, my email is in my profile :)
I get that, but the purpose of the script is now explicitly "steal user sessions" rather than "proof-of-concept".

I wouldn't convict you, but if someone used this tool in a breach that was embarrassing enough to the right person, I don't think a prosecutor would have a very hard time convincing a judge that you were an evil hacker writing evil hacker tools.
Report: Google's Android TV is all set to shakeup the market
This isn't true in the home videogame console scene. I know for a fact in the Sony PSP hacking scene, the main hackers had a handful of kernel exploits but are very careful about using them since SONY usually released patched firmware less than 48hrs after the exploit is public.

They hope exploits carry forward into newer firmwares so that they can use them to find newer exploits introduced in that firmware so when they use the previous exploits, they can use the news ones when SONY patches the older and explore what SONY did to fix it; learn more about how SONY's devs think.
What have your bills looked like, if you don't mind my asking? I've been running a VM server on a business cable connection, but thinking on getting rid of that in favor of a few cloud/hosted systems, and virtual DNS.
I don't think the author understands what the quantified self movement is about...

data-points gathered by most "quantified self" tools are completely useless in the hands of anyone except yourself (or someone who has weird fetishes about your insulin levels)

It reads more like a leveraged sellout (leveragedsellout.com) piece than commentary on quantified self...
Silicon Valley TV Recap: season 1, episode 1
Episode about a judge's corruption and extortion is being censored in Belgium
It's been a while, but I went straight into Accenture out of school (Andersen Consulting at the time actually). It all depends on your manager. If you have a good manager/partner, then once you show you're not just another cog, you'll have plenty of opportunities.

And if you're technically good and put in the hours, and your senior manager/partner has pull among his/her peers, then you will be taken care of in raises/promotions/etc. As soon as you notice the senior management can't go to bat for you for the things you want, then IMHO you should look to make a move. Ideally you can make a move internally, but you dont want to be stuck.
12 lava coins.
In most systems, this will only work within the same process. Contemporary Unix kernels always allocate zeroed pages to processes, so it's impossible for a process to recover data from another unless there's a kernel bug.
I don't think that's true. Most android phones are not large screened.
Interesting the supply/demand in the extreme is considered Price-Gouging. What should we call Gillette's pricing on razors?
The sins of the group of posers behind the so called “Bitcoin Foundation”
I can see it now

PyJVM --> Jython --> PyJVM --> Jython ...

It reminds me a bit of LISP interpreters that are mostly/entirely written in LISP.
That's interesting. Do you have a link/citation?
You don't have to use .* and friends when operating in 2 scalers, 2 * 3 works just fine. But if you have 2 matrices A and B, A * B does a matrix multiplication, And A .* B is needed for element wise multiplication.

I'm still new to matlab, but the place where this has bitten me is if I'm trying to write code that works on either a scalar or vector of scAlars, if you aren't specific, the code my run fine against a single scalar, but blow up or do the wrong thing with a vector.
Chrome 34 launches with support for responsive images, unprefixed Web Audio
It seems odd that Buffett and the WSJ would call this price gouging. There are high prices brought about by low supply and high demand. Sounds like Econ 101 to me. Am I missing something?
Most API requests are signed (using HMAC) with the API secret key, and do not actually include it, so no, probably. But certainly many other things could have been read if they were vulnerable.
CRM: Does Your Startup Need It?
I have to give AWS credit for updating their systems so quickly. Despite a bit of public anger over their lack of transparency (1) they managed to update thousands, if not tens of thousands of OpenSSL installations in their datacenter. Truly impressive devops at scale.

(1) https://forums.aws.amazon.com/thread.jspa?threadID=149690
What does Rails do that Django doesn't? It seems like Python language is much easier to learn, with very clean syntax.

And Django's architecture is usually simple and easy to understand as well -- e.g. the official tutorials have you do a lot of things "by hand" before showing you parts of the Django standard library that automate them.
Every comment, every upvote, every webpage you've ever viewed - parsed and mined for context specific metadata by some watson-like super-brain. And the interface isn't a regex, it's more minority-report style and lets you query people by political/economic/religious/etc affiliation. And you better believe there's a terminate button that disables your car brakes courtesy of on-star. (I keed I keed)
I just came across their story the other day - really inspiring. I'd love to hear the full story of how they did it. They are in a super specialized market, so I'm guessing that helped.
I used to write .NET for a living and when I started working with my own ideas for a startup, I looked at both Django and Rails.

Python/Django had a very small community in my local area (Dallas, TX) while the local Rubyists were more plentiful, not to mention very welcoming. I got some early mentors that helped me get going and that got me to stick it out with Rails.

These days, I see more similarities than differences between Python and Ruby. It's like choosing between Vim and Emacs. Both sides have their value, but the bigger difference really exists between a text editor and an IDE like Eclipse or Visual Studio.

My advice is to try both, and see which one appeals to you more. Focus on it for a few months and find mentors to help you through it.

The harder choice would be to pick something like Node.js which is just starting to hit its stride, or Golang which is really just starting to pick up. Keep in mind, it's quite common for startups using Django or Rails to augment their stack with either Node.js or Go to solve certain problems that don't fit nicely into either Ruby or Python.
https://davenport.geek.nz/bitcoin-day-8/
I wonder if Buffett would invest in a business which didn't increase their prices when they knew demand was going to spike.
Exactly 2.x was good enough that it's hard to make something so much better that it compels people to rewrite substantial code-bases.
Submitted under the title "EVE Online shatters its records with new largest war: The 49-U6U Slaughterhouse". I understand the reasoning behind the editor's title changing, but it always feels clickbait-y when you can't reason out what the article is about with the title (or the first few comments.)
Just got to say, dirtiness aside, overloading / to be path.join is actually a godsend for readability working with path heavy code.
Every other payment processor charges a percentage -- agreed. So, it seems people have no choice right now. They are going to pay a percentage no matter where they go.

I'm open to pricing suggestions. I was just trying to do what I thought was reasonable.

If you (or anyone else) want to work out some kind of X% for less expensive transactions, then send me an email and we can work something out. I'm willing to discuss matching whatever Gumroad or anyone offering similar checkout products is charging.
Anyone have a reference for where that in particular was rejected by BDFL fiat?
I'm using it and it works very well. You can also add custom domains if your dns server supports the nsupdate API.
There is an amazing, easy to use peice of software for doing stuff like this called Eureqa (http://www.nutonian.com/products/eureqa/). I've used it to find approximations for a lot of different functions.
Hackers used a Chinese takeout menu to infiltrate this oil company
This seems like bs. Why would an agency communicate about such a huge issue from their major client via email?
I'm just curious why no one has tried to tackle this yet. Seems like an obvious angle to take in the "hiring" market (that seems to be saturated).
Everyone are basically doing the same thing, having a niche angle might help. Just a thought.
You cannot override "Use compatibility mode for all sites". It's a master switch. No X-UA-Compatible header, No meta tag, and no DOCTYPE will save you from this scourge.
odesk? freelancer?
The bug was introduced in version 1.0.1, released 14 Mar 2012. Aren't most of Snowden's documents older than that? And we certainly don't know what the NSA has been doing since Snowden collected his files late 2012 / beginning 2013.
Like others have said it's a very good write-up tutorial, I think it must have taken longer to write and edit all the explanatory text than the code itself. Clearly they started before the very early on change to the original 2048 that lets yo keep playing past 2K at least ;)

https://lh3.googleusercontent.com/-rtiXCvTQ2Zo/U0Rr5Zav0yI/A...

And this Angular version doesn't leave graphical debris all over the window in FF on FreeBSD, big win, sort of the reason I turned my awk script that I ran to test strategies for playing the original game well into an interactive game itself ;)

https://news.ycombinator.com/item?id=7471897
It's an extension now. SEO people seem to like it for the quick look at rankings.
Not sure I agree. More eyes in a library should mean it is more secure. I guess.

Having 200 broken TSL libraries is security by obscurity. Not very useful, and a pain for sysadmins.
Ask HN: Including video elements in a tech blog for employers
I was thinking of starting a blog mainly to show off to tech employers.

I'm wondering if video elements would be good to include in addition to text elements, essentially to shortcut the interview process to establish the in-person checks on the hiring process (Is this person likable enough, are they alright at oral communication, are they not a hugggge jerk) I've read a lot of advice about not including photos in resumes that seems like it would apply, but I'm still thinking it would be a good option. Do you think there are factors I'm not considering?
I'm not arguing the other side. I think you are correct. I just think you needed to point to the reason the parallel construction didn't work.
with attitude like this it should not be a surprise to you that you are probably the type of employer whose employees will be using this type service. instead of whining about this service maybe you should be paying more attention to why your employees would be even tempted to use a site like this in the first place.
Has Brandon made any statements (other than, maybe, the donation) that indicate what his beliefs are? I believe he may have apologized for causing pain to others based on his actions, but I've yet to read anything where he states what he actually believes about gays and their fight for marriage equality (other than, again, whatever the donation itself says). It'd be interesting (to me, at least) how he explains his donation and what he was trying to accomplish with it.
I don't get the inconsistent answer to site load time:

If you were an SEO of a large company, what would you include in your 2011 strategy?
Optimise site speed, control of CMS, education program, internal linking, social media

Should I be obsessing about load times?
Slightly

Do site load times have an impact on Google rankings?
No
I don't work on windows anymore, but Git Extensions is still my favourite Git Gui

https://code.google.com/p/gitextensions/
The fact that they can get a better deal on AirBnB reveals that the market is not as supply-constrained as the hotels would like us to believe.
Not sure what goal this accomplishes for Twitter - maybe it ups engagement slightly?
I wonder if AWS got an early heads-up from OpenSSL as at least one other major infrastructure provider (Akamai) did: https://blogs.akamai.com/2014/04/heartbleed-faq-akamai-syste...
The most exciting part of this release is the $1500 I get for reporting a bug! (YMMV if you are not me).
Likewise, I got pretty good at it and love relative positioning (especially if you use it on a list). However, it is definitely a steep learning curve lol.
>There is absolutely nothing that breaks immersion and destroys your enjoyment of a game universe like listening to teenagers talking smack.

Sounds like my experience with console games lately except I don't even think some of them are even teenagers yet. It really ruins some of the new games.

I wish we had a reliable way to play online games and play by age groups.
How hard is it to penetrate reinforced concrete walls vs. going through a real warship?
I've been there. Still, I'd want a code sample anyhow.

If open source becomes the dominant mode for hire screening, it provides an interesting disincentive from taking jobs at open source unfriendly companies.
Given that I just left gandi after 2 days: Please be sure that you want to do business with them and that you've thoroughly checked their offerings.

I'm kinda guilty on part two and can answer part one with a resounding 'no'.

Their no bullshit claim didn't apply here, I cannot and won't recommend them.
A guide to the future technology everyone should know about
For performance reasons, we’ve defined those types as immutable value types.

Immutability strikes again.
Thanks for the reply - I asked because I'm considering an offer for entry-level consulting at a big IT firm, and I wanted to have a sense of what I'd be doing. My background is in petrochemicals, so I figure I'll be in that domain for a bit. Ideally, I'd like to move around in different domains and see what I like best. Do you think an entry-level hire would get a decent chance to explore?
Enjoyed this a lot. Points I could identify with:

- being motivated by people telling you you can't do it.

- writing what you need instead of what other people say the world needs.

- having a weakness for getting into arguments with people who are "wrong." :)

- being inclined to work solo, and being uncomfortable giving up control but realizing at some point that you have to cede some.
Read the comments in this thread. So hacker news to focus criticism of a newly launched site on fonts and minor design inconsistencies.
US Supreme Court passes on NSA surveillance case
Yeah, doc was calling it post-natal depression. Two years after birth. I suppose it's possible, I'm no physician. I posit perhaps it was was an ambitious, accomplished woman programmed since birth through culture & genetics to be a 'mommy' and was having trouble coming to terms with the daily realities while losing her independence, selling her business & having no time left for herself. No gruesome thoughts, just feeling over-whelmed. The doctor was throwing pills at the problem, IMO and that is when she began having the images. Again, I'm no doctor but I am a person who hallucinates on Doans & becomes a drooling, incoherent wreck if I take Coricidan or Dramamine. YMMV.
I get these errors:
/usr/lib/go/src/pkg/github.com/titanous/heartbleeder/tls/cipher_suites.go:66: undefined: cipher.AEAD
/usr/lib/go/src/pkg/github.com/titanous/heartbleeder/tls/cipher_suites.go:133: undefined: cipher.AEAD
/usr/lib/go/src/pkg/github.com/titanous/heartbleeder/tls/cipher_suites.go:149: undefined: cipher.AEAD
/usr/lib/go/src/pkg/github.com/titanous/heartbleeder/tls/handshake_server.go:556: undefined: crypto.PublicKey
/usr/lib/go/src/pkg/github.com/titanous/heartbleeder/tls/tls.go:93: undefined: net.Dialer

Am I missing something?
San Francisco, CA

DeNA West

DeNA - Mobile Innovation with a Smile

size: 201-500

status: Public

founded: 1999

http://www.denajobs.com/

We are...

Mobile. Games. San Francisco. Global. Entrepreneurs.
Please call us ‘D-N-A’: we make games, a social games platform, e-commerce products and other services for mobile devices.

We believe mobile is the future of human communications and entertainment: we aim to impact and delight this mobile world.

...and...

We have an entrepreneurial office culture. We work hard, we push ourselves to excel, and we smile in the face of the impossible.

We're building things that have never been built, learning together how to delight a rapidly evolving mobile app market. At DeNA you have the potential to reach tens of millions of people with your work.

What we're working with...

ios android unity node.js go objective-c java ruby sinatra ruby-on-rails javascript git github google-app-engine aws redis mongo cassandra fabric cucumber rspec jenkins linux osx

We develop backend systems to power hundreds of iOS, Android and Unity games. The backend API services are written in Ruby, which we are transitioning to Go. The native iOS and Android client SDKs we produce call directly into the backend services, often via a proxy layer in Google App Engine. We use enterprise Github to manage our code, and regularly contribute to numerous open source projects.

We are constantly iterating towards higher availability, scalability, and performance within all our services and components. We strive to serve more requests, faster, and on fewer servers.

We have great benefits:

* Breakfast, lunch & dinner. Snack wall (healthy & junk).
* Beer on tap
* Weekly yoga.
* Gym reimbursement.
* Intramural soccer, softball, basketball & more.
* Customizable ergonomic set-up.
* Apple portable computer & Apple Cinema Display.
* 13 paid holidays.
* 120 hours accrued PTO.
* Flexible work schedule.
* Standard HMO/PPO & company covers 100% of premiums.401k.
* Stock-based benefits.
* 2 performance reviews/yr.
* Paid maternity and paternity leave.
* Off-site dinners, milestone celebratory outings, regular happy hours.

185 Berry Street

Suite 3000

San Francisco, CA 94107