skysight-inc/HackerNews huggingface dataset:
Microsoft's latest innovation: An Indian hotline for startup advice
Your proposal is still bad :-) but the good faith attitude with which you engaged responders is a model for mature discourse.
What if they have a unique definition of 'vulnerability', much like they had a unique definition of 'collect'?

As a bit of internal jargon, the NSA only considered information 'collected' when an analyst looked at it. So, they could record & store bulk data about all Americans, but still claim (with a secret wink) that they didn't intentionally "collect" data on Americans.

Maybe for them, 'vulnerability' means both "the bug exists" and "bad guys know enough to exploit it". After all, if a tree falls in the woods, and there's no one there to hear it, does it make a sound?

This definition even makes sense, if you have an advanced, economic and strategic understanding of security as something that's a matter of relative priorities and dynamically-changing situations. There are plenty of bugs, known and unknown, in all software. Perhaps they only count as 'vulnerabilities' when they're practically exploitable, and practical exploitation has as an absolute prerequisite, discovery by malicious actors. (On the other hand, when we, "the good guys", discover the bug, it's not a vulnerability: it's an asset! Search for [NOBUS NSA] for more reporting about this style of reasoning.)

Still, using such a fine-grained bit of internal jargon, even if it makes sense among people who share your terms, is deceptive if used to hoodwink the public and Congress, exactly as the 'collect' finesse definition was long used.
It's not much of a hoop - you search for the article headline on Google, and you can read it for free without sign-up.
Help Me Out:
I left academia to come to Silicon Valley into a non-technical role, but I want to get back into technical work.

The help I need is mainly in how I should market myself to prospective employers.

I have a technical background, mainly in support and quality assurance, but I'd like to get my hands more dirty with a full software engineering role.

I need some guidance with deciding what to focus on when preparing for interviews, what kinds of projects to work on in my free time, and what kinds of positions I should be looking for that will be willing to interview/hire someone who hasn't had a software engineering role despite being a bit older.

My older resume: http://jclo.co/john-resume.pdf
Github and LinkedIn, as well as contact email are in profile.

Help You Out:
I am pretty good at finding bugs, testing software, and writing. I can proof read documentation, resumes, cover letters, or any other text written in English, or close to English. I'm not judgmental about the idiosyncrasies non-native writers/speakers have, and I am happy to point out that they speak/write English better than I speak/write any other language, but I'm also happy to identify and correct those idiosyncrasies if you want.

From working at Quora, I have some good insights about how startups scale their infrastructure (I also helped to write a long polling back-end in Go for an "off road" project), and I can offer some minor insights.
As much as it sucks to be in the recieving end of misogynistic douche bags, can we all get over this nonsensical notion that one sex is objectively better? While we're at it, that how hardcore a programmer us is just as irrelevant as their sex.

All this does is spew more hate, which is doing nothing. Those women are incredibly good, fine, but you still come off as very confrontational. Can we all just act with a little bit more civility and tact on such matters? It's irrelevant if the 'other side' fails to, be the better person.
Tracking time as a freelancer
i think part of it has to do with the high fatality rate along with no specific treatment plan
Years of Living Dangerously
Here's a song from an album released October 1989 that debunks his claim of when pagers were available: https://www.youtube.com/watch?v=l7Og1DuMu3k
> 2) Go as fast as you want - but don't be the fastest car on the road. Always let a cop-catcher run about a 1/4 mile to 1/2 mile ahead

I have a name for them. I call them "forward probes".

If you know what you are doing you can actually "launch" forward probes. All you need is to identify a young driver in a hot or pretend-hot car and match their speed while driving next to them. I'm not talking about racing or speeding. Almost without fail some of these guys will punch it and take off like they have to prove something.

Having launched a "forward probe" you just keep it at a comfortable distance in front of you and enjoy the ride.
I have often thought we need something akin to gittip on Enterprise Scale.

A central point of collection, but I can direct the donation to any project, and "EnterpriseOSSFoundation" just handles the messy admin.

There are an awful lot of CTOs who would be happy to "pay back" to projects if it looked legit on the budget and the brand was something the Chairman would hear about at the golf club.
Fair enough. If a VC wants to toss money at them, why not?
They wouldn't be doing it for the money. The EFF would be a good example of a firm that could take this practice up.
Last sentence reads: "Unless there is a clear national security or law enforcement need, this process is biased toward responsibly disclosing such vulnerabilities."

So, should the NSA decide that there is a national security interest or law enforcement need, they will not disclose such vulnerabilities. Given their past behavior and explanations for what was considered acceptable compromise for national security, I am not particularly reassured by this statement.

Yes, it's good that they weren't hoarding this particular exploit. But, they have clearly not denied being in possession of other exploits; they've only said that the ones they might hold would be because of national security or law enforcement need.
Yes, if people want to be compensated in cash for their work they sell it or become employed by others. I've always seen open source more as a kharma type of thing and never expected any compensation for my contributions
Why should we assume that SELinux is secure? I would suspect that if there was NSA involvement then it is necessarily less secure because they would want to be able to access it at will.
Interesting ideas, I would like to add pressure sensitive stylus support to compete with the Wacom Cintiq Companion.
sure, I'm switching to git-annex https://git-annex.branchable.com
I like the mockups, but fail to see the purpose. As a professional, wouldn't you want professional precision? A programmer/writer would hate typing on it, a graphic designer would hate sketching/designing on it (if it has the same responsiveness as the current models - I do like the idea of pressure sensitive touch, Surface has this), a photographer would laugh at the camera, a DJ/producer wouldn't even consider the speakers for any practical use. IMO it misses the mark for every category of consumer it could possibly target, bar the "Faux-Pro" users - the "Beats by Dre" users of the world.
The error is a structural one. Due to that fact the entire trial was tainted, not matter what else happened. Thus they can start over.

Just because it's a federal crime doesn't mean he can be tried anywhere. This is exactly what this is all about. That under Federal, and New Jersey, law he has to be tried in one of the places the crime was committed.
That's such a weak argument from them at this point. "Hey, we're the NSA - we're entrusted to protect US infrastructure. We'd never do something like that!"

Yeah, right.

"Oh, and we're under strict oversight, too!".
I wish instead they would get their Android-Kindle products certified by Google, so we could get the Google Play Store Apps on them, and that they would put Amazon Instant Watch and Music Store as Google Play Store Apps, so I could rent movies on my Android devices.

But I'm not one of those marketing geniuses who loves to create walled gardens and captured verticals and synergized markets and all that...
I am pretty sure shared docs with Google came quite a while before Wave, no?
It is very handy - http://xvilka.me/frama-c.png - screenshot of the integer overflow found.
I'm switching to git-annex assist https://git-annex.branchable.com
I would agree with you except that they added the "rather than". It is a debate between the 0days value as a weapon through holding secret vs value of release to everyone else. If there was any merit to them holding any bias toward the latter we would see at least ONE public disclosure of a vulnerability by them.
They would say this if it were true and they would say this if it were false. Total information content: zero.
More details in: http://www.nrl.navy.mil/media/news-releases/2014/scale-model...

At first I thought it was fake, but it’s apparently legit, but perhaps they need still a few years to make it practical.

They use the CO2 and H2O to produce fuel. They don’t explain this clearly, but this use a ton of electricity. My guess is that they expect to plug this to a nuclear reactor in the ship and the main problem in the middle of the sea is to get the atoms to produce the fuel.
> If history and geography trump the current citizens and laws, then the yanks should all fuck off back where they came from and leave it to the native americans and the mexicans, no?

Just the former. Because, you know, the latter, inasmuch as they are distinct from the former, have the same problem as "the yanks".
Here's the difference between urls:

Posted:
http://online.wsj.com/news/articles/SB1000142405270230387360...

Google:
http://online.wsj.com/article/BT-CO-20140411-711057.html

Why not post the google one and save us the collective time lost?
In other news, NSA thinks responsible disclosure is the way to go but apparently has no 0days to responsibly disclose. I didn't know TAO sucked so hard. Can't see how any one will buy this.
If the camera is in the logo, where is the WiFi antenna?
Aye, it's certainly dangerous. I'm mostly wondering what likely outcome of Ebola infected passengers on a plane to NYC would be. I am inclined to think that Ebola would not spread particularly well in a city like that, and would be quickly contained/isolated.
And he's going to quit his job with your donations now? Tired people can still commit code they don't plan on hiring all of the contributors.
A single semimonthly paycheck.
Sorry US GOV but the piggy bank of trust is currently sitting empty.

This statement isn't worth the memory it's stored in.
Yes, this is purely a political problem rather than a technical problem.

The other issue is that taxes are so politicized that there will undoubtedly be a contingent of congresspeople that think the hassle of taxes is a feature of the system rather than a bug.
Cherry Blossom Grown from Space Seeds a Bit Weird
Uh, a monolithic component design would not "make them more durable".

Most of the non-monolithic design is strain relief.
The point of things like strain relief is often to avoid force being transferred to weak points like electrical contacts
(and sometimes to avoid going under the supportable bending radius of the internal wire, though a lot of this is just amazingly flexible these days).

Making it a monolithic component makes it all act as a single component. In fact, now rather than straining individual points, you'll strain them all at once!

This would not improve anything, it would make it significantly worse.

Also, coatings are not magic. If there was such a coating, everyone would use it :)
Ask HN: would you be interested in a simple fashion guide for men?
Problem: Our industry (tech) isn't really known for sharp dressing. People either don't care, don't know how or think that it would be difficult or expensive to dress better.*

Solution: for those that don't know how or think that it would be difficult or expensive to dress better- a simple, well organized guide to dressing well for men.

Possible topics to cover:
- how different clothing articles should fit (including choosing clothing to match your body shape)
- how to shop online and offline
- dressing for different occasions
- clothing care
- developing a wardrobe

I would imagine this as either an eBook or a interactive web book in the style of http://book.discovermeteor.com/

Would you be willing to pay for this?

* I realize that "better" is a difficult concept to define or measure, but lets assume it means wearing clothing that fits you well and being dressed appropriately for different situations.
Great stories. It says a lot about Apple that time, in addition to Steve. The personal side is good too.

Yes, Steve could be intense at times. But he was also a real person. He had to deal with the ordinary and mundane aspects of life like everyone else. Maybe even enjoy them.
"‘uber’ is a German word which means ‘over’ or ‘better than’ or ‘the ultimate’."

The word is "Über". "Uber" doesn't mean anything. In 2014 one should expect people to find &Uuml; or \u00DC. Since the two dots stem from a superscript "e", "Ueber" would be ok. Uber is not.
I'm a lock person and always will be. I grew up in NYC in a high-crime neighborhood. I remember more than one occasion when burglars were outside my door trying to bump the locks open and I would be going behind them relocking my locks with a knife in one hand and the phone in other, screaming that I was calling 911. They'd also try to pry the door apart (heavy steel doors & frames are a fantastic investment) at least once or twice a year, even today with it being a nice neighborhood.

That said, I don't blame the logic of no lock people. Burglars are going to find a way in if they are motivated enough. I live in a mostly no-lock area (cars, homes) and people make fun of me for always locking up, but I'd rather at least employ a minimum amount of security (I actually usually go overboard) to none.
Furthermore, by making a blog post about it, it seems that they have pushed more of their userbase to delete their accounts (judging by reading the comments section on the blog post).
>I bet many marketing people would LOVE to manage such a project business wise including me!

I highly doubt the engineers want to be 'managed' by a marketer looking to raise money.
Here:
http://i.imgur.com/Fk5f69k.jpg

You can see the laser has cut the resistive material, increasing the resistance.
I don't even understand how to get started with Twitter. I might know like one person in real life who actively tweets. My only real exposure to Twitter "in real life" is through using it to post status updates/outages.
Exactly. Unless this could somehow be pivoted into write access, with the ability to modify server responses to clients (for phishing or installing malware), no black hat would care about this.
The article is very confusing about the numbers, but if they do hold up to scrutiny, the people cashing out are smart.

Tinder's user engagement can be modeled as a wave. Due to the social graph, when you first get the app, people in your cohort are likely to be using it as well.

During this time, there is more value than just the dopamine rush of flipping through pictures and getting matches. A match is much more likely to be actionable.

The downside of this is that once the addiction wears off for you, it's likely starting to wear off for the people in your cohort. So user "unadoption" is just as viral as user adoption.

How many people here have used the app beyond a couple months? How many have deleted it once they stopped using it?
Has this actually verified? It was only newish versions of OpenSSL that were vulnerable. Websites that ran on IIS and other platforms were not vulnerable.

Does anyone have a historical list of critical government websites and their web server versions? An old nmap list would suffice to show that high-priority sites were vulnerable or not.
> Once this limit is gone, best practices will almost surely be one command per run.

Agreed, I thought the same, but then I hit the 127 (I think) limit.
The real victims are already dead :(
Sure. The way the H1B works is that it is tied to your employer. The employer knows this. You know it. This creates leverage on the part of the employer. How? Two ways: One, you get fired, you are out of status immediately, you have to leave the country ASAP or find a job immediately. So, you make sure you don't get fired. Two, an H1B employee is supposed to be paid the prevailing job market rate. For CA, San Francisco County, the max is around 100K. It is a pretty sum. BUT. It is also less than market rate as of six months ago (when I was job hunting). Now, most big companies don't need to exploit you. But a wily manager can easily fuck with you with enough awareness of the issue.

Personally, I have noticed this phenomenon at smaller companies where a H1B candidate is potentially more attractive. I got a green card very recently, however, I am obviously not an American and am relatively young enough that I can be suspected of not having a Green Card. I have had a few situations where hiring managers were rather disappointed that I didn't need their help to acquire an H1B or for them to file for my green card.
Sure those other guys are in the wrong too. My point is that killing someone because you didn't want to take a cab home is horrific but so to is killing someone because it's fun to drive fast, to shave 15 minutes off a four hour trip, because you just have to know right now who won the packers game, or because the kids are bickering in the back seat. The resulting injury and death aren't the result of accidents but crimes. Crimes rather more serious than possessing a few grams of cocaine base I might add.
we need to begin putting government officials in prison for this.
Why didn't they just give out bonuses while you were still there, and give you $0?
Bet On People Prematurely
"NSA thinks responsible disclosure is the way to go but apparently has no 0days to responsibly disclose".

Very nice! In just one sentence you have completely discredited the ODNI release.
And a little more detail: http://en.wikipedia.org/wiki/Dudley_Allen_Buck
1Password, Heartbleed, and You
Yes, and it prevents you from gathering unemployment, which is generally much more than $5k.
The thing is that you can actually have the company apply for a green card way before those 6 years, or you could apply for one yourself after living for 5 years in the US - and while your application is processing, you can extend your H1B indefinitely (until you get your GC result). So no, it's not really restricted to six years. Also the green card wait times are not THAT bad, its only for citizens of some countries (like India and China, due to the huge number of people from those countries).
While the overall yearly limit is a problem for sure, I feel like fixing the H4 restrictions is actually a much bigger issue at this point.
Lol. I was thinking the same thing. Almost all current comments in this thread have value.
there needs to be a user owned group that funds these critical projects in a transparent and effective way. I would sign up in a heartbeat.
Cppcheck - http://cppcheck.sourceforge.net/
It is extremely unlikely due to noise. It's the same reason we use digital computers right now... for all the "waste" of converting voltages into 1 and 0 it pays back in spades in that we get reliable computing. You hit the noise floor of an analog system long before you're into any sort of revolutionary computation land. It's not much use if something can theoretically compute something amazing if it can't do any of receive that degree of input, maintain that degree of accuracy during the computation, or output it to that degree of accuracy.
Looking for Rails developers frontend and backend.
Hey guys,

Hope all is well! I'm looking for really talented frontend and/or backend rails developers to help me out with some projects.

I have a couple projects on the table and I simply cannot do them entirely by myself so I could use some extra help!

That said, If you are a talented frontend or backend rails developer and you're looking for work feel free to send me an email at pblogsltd@gmail.com and let's chat!

Cheers!
The difference in noise is readily measurable. I've done op amp based design for commercial products, including an audio product for my side business. (n.b., it's not targeted at the "audiophile" market). I've measured the noise of dozens of op amp types for a specialized application. Impressively, the measured noise performance typically doesn't stray very far from datasheet values. You can measure it with a few dollars worth of parts, and the audio input of your PC.

Now, it's not a slam dunk that every application should use the quietest chip. Noise trades against some other factors such as current consumption. And of course from an engineering standpoint, cost matters too.
C's NUL-terminated strings were intended for mutating strings in char buffers (where the buffer's capacity was known at compile-time), not for passing around. More detail here: https://news.ycombinator.com/item?id=7475866
It does seem like a judgement call is unavoidable. If they discover exploits that are extremely difficult to use, and extremely unlikely to have been discovered by others, it might make sense to use them. But it also seems clear that they should have an obligation to find and make public exploits similar in nature to Heartbleed. Sitting on a bug like this should be a criminal offense.
At the cutover level (around $5), the micropayment fee is $0.50, whereas the standard fee would be $0.45. It's not that massive a difference. If people are donating only one dollar, then it's a wider difference (10c vs 33c), but this level of donations is neither a serious chunk of the total pool, nor the kind of donors you want to attract. One of the donors gave $0.02 - clearly meant to be a joke or a system test, and not the kind of donor you want to court.
For the record, this is more what I had in mind. I was just very bad at explaining it.
Florida Deputy Arrests Wife after Video Recording Husband’s Arrest
I think you just proved that writing an excellent blog post like you did is an amazing way to get new customers!! Maybe make it a tad more explicit in the post (or page) what detectify do. I personally had no idea.. but I just checked the homepage because I liked the design and was curious, and it's only then I realized what you guys were doing.
Is this even a legit website? The NSA makes announcements via their Tumblr now? Doesn't that strike anyone else as strange?
Let Me Google That For You Act
HYO: link me your startup or project and I'll review it and if you're interested suggest some growth hacks.
Would have to be unique garbage, such that de-duping isn't possible.
Just to clarify, what you're saying is that Nathan Myhrvold is a complete piece of shit?

EDIT: Oh wait I forgot, HN isn't crawled.
the problem is that they will always claim a need
Aren't the utilization of the 0-day exploits in Stuxnet proof that DoD and the intelligence community generally don't care about responsible disclosure? I'm sure Microsoft would've liked to know about those. I'm also pretty sure many US government systems were vulnerable to many of the exploits, including the MOF file one.

I suppose the NSA counts that as "a clear national security or law enforcement need."
I don't know.

But I do suspect the geek is more likely to be aware of Rice's appointment and close their account over it.

After all, the geek has options.
http://i.imgur.com/agJIP.gif

Drew Houston must not know how this works. You can't placate the SV Business Morality Police with words. Only heads on a platter will satisfy.
Nothing says official like Tumblr.
So if the US DoD doesn't fund medical research, not a single other organization or country does? If that is the case, then turning DoD funding back on does not seem like a sustainable plan.

What is the response from the EU's member states (who's medical systems are often touted as superior)? After all, they're much closer to this than we are.
you can see the post right above yours then.

or do a two second google check.
Bob Crawford-Experienced Music Professional