skysight-inc/HackerNews huggingface dataset:
Would it make sense that companies in more than one location show up on the map in more than one place? NinjaBlocks main base is Sydney, but they have an office in SF, so they show up as SF.

Showing virtual offices and workers might do more to show how truly global hardware startups are.
This might be along the lines of what you're looking for: http://www.amazon.com/Mathematics-Birth-Numbers-Jan-Gullberg...

"This extraordinary work takes the reader on a long and
fascinating journey--from the dual invention of numbers
and language, through the major realms of arithmetic,
algebra, geometry, trigonometry, and calculus, to the
final destination of differential equations, with
excursions into mathematical logic, set theory, topology,
fractals, probability, and assorted other mathematical
byways. The book is unique among popular books on
mathematics in combining an engaging, easy-to-read
history of the subject with a comprehensive mathematical
survey text."
You are correct, of course. But what the Heartbleed showed us is that even at the scale of OpenSSL (millions of users), almost all were using it blindly. People often care more about the free in pricing aspect more than the freedom to inspect, modify and contribute - because as you say, dev time is precious.

> open source doesn't necessarily mean "anyone can edit it and improve it".

I think you missed the point in the article - it was about how anyone can create or contribute to open-source. Not about submitting patches to existing projects and have them pulled upstream without any review process.
4.8.0 was actually released in March 2013. GCC has been on a yearly major release schedule for several years now (since at least GCC 4.5.0 in 2010). This year 4.9.0 will be about a month late.
>That's some impressive conspiracy hokum right there

Gore Vidal: "Americans have been trained by the media to go into Pavlovian giggles at the mention of the word "conspiracy," because for an American to believe in a conspiracy, he must also believe in flying saucers or, craziest of all, that more than one person was involved in the JFK murder".

>I'm sure you have links to sane, data-driven evidence of the "damage" of public schooling that you'd like to share?

That's a common "scientism" approach to social issues that's completely bogus. Issues that concern with the values of a society can not be measured like particles or IO rates, with "data-driven evidence".

For example, do you take a "data-driven" approach to determine if your project manager is a jerk, or if the way he pushes for a project leads to worse morale? Or do you, rather, use your general unquantifiable observation, and do a qualitative assessment of the situation, based on logical (in the common sense) analysis and arguments?

It's the same kind of broken logic that takes "data-driven" BS like "LOC commited" or "bugs squashed" as the real metrics for programmer productivity.
The way it works in Australia (I think, certainly not 100% sure) is through tax credits. The miller buys wheat from a farmer, and pays tax because it's a sale. But the miller gets tax credits for later selling that wheat to a baker (in the form of flour). The baker pays tax on the flour, but puts tax on the bread. At each stage value is added to the object, and due to the credits, the differential of that value has the appropriate tax.

So if you have a wholesale/retail business, you have an easier time of it - everything gets taxed at the same level, and your clients that onsell can claim their own tax credits. It is the final purchaser of the product that ends up actually forking out for the tax.
It's my first time this year, I can't understand why my answer for the mine sweeper is not correct. I think I found all the edge cases and even checked my results one by one :(
Businesses will typically operate with the standards of what other businesses do wherever they are located.

As such it could be out of the question to do it for another way other than whatever the legacy established standards are.

So what we are talking about is hypothetically changing behavior that people already expect in their country or community. And not only that doing it individually since it is unlikely that a law would be passed for this.

For example if I am the only restaurant in a certain area and I charge $35 for lobster "tip included" what I am saying is that less people will buy lobster than if it is priced (at an equal place) where the lobster is priced at $29 because $29 is a more attractive price "on the menu".

I think from my exposure in the business world it is pretty much well established that people respond more favorably to a low price than a high-er price as they aren't not able in their head to either compute the total price or somehow a higher price is just a turnoff or other psychological reasons.

If you study advertising you will see this. Not that there aren't places that have done well by not breaking out charges (all inclusive resorts for one thing or cruise ships as another). But speaking of cruise ships they now offer other restaurants where you pay more for the food and for that matter they charge for drinks. And also you don't tip (on the ones I have been on) you pay a daily fee. But note that the daily fee isn't included in the trip cost when you do research but shown as an "added cost" elsewhere in the advertising material (same with some hotels for that matter)
cheapsslsecurity is not a CA, so we can hopefully agree that this does not count as "from a CA"?

Comodo Free 90-day Certificate: https://www.comodo.com/e-commerce/ssl-certificates/free-ssl-...
Does the security team not count as one of the sets of "eyes"? Would they have discovered the bug without inspecting the code?
Generalizations about whether open-source developers or closed-source source developers have more resources, or are more professional, or whatever, are silly. The two groups of developers are very large with high variance in many dimensions, and a lot of overlap. There are open-source projects with one or 2 developers, and open-source projects that are the primary focus of $100-million, thousand-employee companies. There are also closed-source commercial projects developed by teams of hundreds, and closed-source commercial projects developed by a solo programmer when he's not busy answering customers' phone calls. Lots of developers work on both open and closed-source projects at one time or another.

It's important to discuss what changes we can (and should) make to make problems like heartbleed less likely in the future, but wildly waving competing generalizations in the air doesn't help anything.
Sorry, I always forget what they are officially called, which is compound literals. You can do ((struct foo){...}). GCC had a different syntax for this before c99 but the only standard way to do such allocations was in a new block, which doesn't help for a function argument.

Edit: also worth mentioning that some of the early implementations of this were very inefficient so you might see complaints from that time, but this is not an issue with modern compilers.
Concrete Mathematics by Ronald Graham, Donald Knuth, and Oren Patashnik

https://en.wikipedia.org/wiki/Concrete_Mathematics

Also Knuth's TAOCP series are very formal and dense, in a good way.
I've had an app rejected from the selector search the article mentions. As the article says though, I'm sure it's within apple's power to ignore them, especially if lots of existing apps use it.
Typedefs in C are just aliases, so given `typedef int foo;` one can freely use `int`s and `foo`s interchangeably, i.e. no checking by the compiler.

That said, one could use actual wrapper structs around the various types.
The posible colors combinations of the mesons are red+antired, blue+antiblue and green+antigreen. The color+anticolor are not fixed, they “constantly” change. (Actually, any linear combination of the pairs is posible.) http://en.wikipedia.org/wiki/Quark#Strong_interaction_and_co...

There are some abstract algebraic properties of the particles and these properties produce the color rules.

With 4 quarks the only possibility is a mix of 2 quarks (with colors) and 2 antiquarks (with anticolors). For example red+antired+blue+antiblue.
That may be, but it's beside the point. Given that we have a situation where the continued viability of the internet depends on everyone rowing in the same direction, the argument that Start has no responsibility in this case because "you get what you pay for" should not carry the day.
>How is this any different from the ability to call/text the local police tip line?

It's not. That's Big Brotherish too -- including in the literal sense that snitching is a common practice in the book of that name.

Don't know about modern US, but there are societies with moral codes against snitching of any kind, including snitching the bad guys to the police. And even in the US, I'm aware that there at least used to be some old popular attitude against such a thing.

In fact, this notion that snitching is immoral in itself, even if it is to the "authorities", has been part of popular culture and lore for ages, from Zorro and Robin Hood to Batman. Heck, Judas himself was snitching to the authorities, and we all know the status he has in our cultural landscape.
I tend to agree with andybak's points but is is such a nice change of pace to see more transparent moderation. Thank you for the explanation.
> this may be a stupid question but why is it hard for you to give OpenSSL money?

Primarily because it's not tax-deductible. I try to restrict my charitable donations to things I can deduct.

The other reason I don't is that I'm not convinced it would be used effectively. They shouldn't be using small donations as their primary source of funding, they should be going after huge corporate supporters.

I'd be happy to donate $100 if it were tax-deductible and if OpenSSL committed to making the minimal effort of reaching out to major tech companies for substantive funding.
NeWS was architecturally similar to what is now called AJAX, except that NeWS coherently:

used PostScript code instead of JavaScript for programming.

used PostScript graphics instead of DHTML and CSS for rendering.

used PostScript data instead of XML and JSON for data representation.

https://en.wikipedia.org/wiki/NeWS
Brazil has an interesting variation on tipping: Restaurants add a 10% service fee, but which is still optional. Therefore, servers don't have to engage in the "parasitic side-business" of generating tips since the service fee of 10% is almost guaranteed, but the customer still retains a mechanism to punish really bad service.

Quoting from the article here:

http://brazilsense.com/index.php?title=Tipping,_fraud,_and_s...

it says, "The service fee when added is still considered optional. However, Brazilians do always pay it — except when the service was poor. If the service was poor, all you have to say is Eu não vou pagar esse (I will not pay that) pointing at the service fee, and then pay just the base amount. I've seen Brazilians do exactly that when the service was bad and it didn't cause a scene."
I think this is Langley's post tptacek is referencing: https://www.imperialviolet.org/2012/02/05/crlsets.html
I'm not an Objective-C developer but it looks like modgenerator is a code generation tool that (among other things) generates helper methods. Apple used this in one of their own frameworks, which is completely within the license, but the helper methods ended up on a blacklist for apps submitted to the app store. Using APIs on the blacklist apparently won't guarantee that an app gets rejected (if I've learned anything from HN it's that iOS App Store rejections are notoriously inconsistent).

The author of this article (and modgenerator) is (perhaps facetiously) considering changing the license so that Apple can't use it in order that they generate other accessors which are not blacklisted.

(Again, this is all my non-Objective-C-developer understanding, so corrections are appreciated)
Print the CLA, sign it and scan it (or use a camera to photograph it) and e-mail it to hello(at)robovm.com. Include your GitHub user name in the e-mail.

print & scan in 21st century...really?
Obama Lets N.S.A. Exploit Some Internet Flaws, Officials Say
Warnings are problematic enough: https://github.com/magicalpanda/MagicalRecord/commit/723827e...
tl;dr NSA is either lying (they knew about it, and didn't tell anyone, therefore failing their mission to "protect America"), or NSA is incompetent, and in 2 years they couldn't find this massive vulnerability, even though they have thousands of security researchers, spend billions of dollars, and OpenSSL should be a huge target for them - therefore also failing their mission to "protect America".

So far NSA has pleaded incompetence.
There has been a lot of really insightful hindsight about the heartbeed issue. This one seems to fall into the category of "we should of expended more resources on such a critical piece of infrastructure", where resources could of been time, attention or money. That is true, but not really very helpful.

This particular observation comes up any time something goes wrong in any context. The stuff about the shallowness of bugs really has nothing to do with the argument. This bug was in fact quite shallow, some random entity just found it by looking. If more people had of been looking then it would of likely been found sooner. You can only find a bug once.
mplayer + zsh globbing, or even find [options] -exec mplayer {} \; but I tend to listen more and more to albums and concert bootlegs and mixtapes on youtube.
They're a reseller, if you took the 20sec it took you to make asinine replies to actually look you would see that they sell Comodo, Thwate, and Verisign certs. But thank you for your useful commentary.
Dr.dk's classical channel, Dubthugz, and Mind Potion Radio. If I'm feeling a little lo-energy, I watch the Bella Coola segment from Into the Mind. Equipment: Sennheiser HD518s via a Behringer headphone amp. On the road I use MEElectronics IEMs.
Dispelling the hate against PHP
It is not Mesh at all.
it is odd, but I chalk it up to the fact that bret is a young man who's poured his productivity into a field that's fairly broad already. can't fault him for not being as well read in other areas so far in his life, but i'm sure he's interested in getting around to enjoying literature some day
You can't see them, but my eyebrows are raised. Start is famous for providing free SSL certificates; in fact, that may be all they're famous for. Virtually all other certificates cost money. What you're suggesting is that it wouldn't be the first question any reasonable person would have had, "what are the limitations of this free SSL certificate"?

I also find the notion that people would have gone elsewhere for their certificates had they only known Start's were irrevocable a bit dubious. More than a bit; "laughable" is perhaps a better word. From out here on the limb I'm standing on, I'll suggest that you probably (and quietly) agree.
"as long as we have big problems, nobody should discuss or work on smaller ones"
Yup. So soft-fail revocation checks are like a seat-belt that snaps when you crash. Even though it works 99% of the time, it's worthless because it only works when you don't need it.
Tipping extra sometimes encourages behaviors that are materially detrimental to the business itself. This effect is pretty well known in the industry, so I can't imagine many restaurateurs would complain if tipping were universally ended for everyone. But are restaurant owners ready to start employing servers and bartenders on professional terms?

The article alludes to the practice of tipping out the bussers and dishwashers, but is a bartender more or less likely to do that with a $60-80K salary? Maybe the back of the house could see a percentage of sales instead... Or just food and wine, but not cocktails. There are really too many corner cases and caveats to work through up front, but if this becomes a trend it could open new opportunities for POS providers who might appreciate the shot at staying relevant.
Google Music All Access "I'm feeling lucky radio" is the best thing ever
Marijuana: much more than you wanted to know
NSA decides it shouldn't and should, respectively.
The substance of your argument is that, having provided a free "no commercial use" SSL certificate that explicitly requires a $40 handling fee for revocation, Start has somehow assumed some obligation on the part of the users that opted into this scheme, and that their users' reticence in forking out money for revocation is an externality created by Start. I don't find that argument credible.
If you give them a free item just to increase your tip, isn't this ethically the same as stealing from the company? You're converting an asset of the company into dollars in your pocket.

I used to work with a sales guy who would make sales that cost the company more than the final sale brought in. Spend $12k to make a $10k sale? Made sense to him... because he got a commission on it.
School, Smarts, and Success : Knowledge, Specialization, Passion and Success
come on, you and I know you want people to click on donation button
"Obama says" versus "Obama does."

Actions, not speeches, count.
The viability of the Internet in no way depends on Start's actions here. Certificate revocation is not in fact a giant "everyone row the same direction" coordinated effort to save the Internet. It's closer to theater than it is to triage.
don't feed the begger
This is so bizarre. The point of a signature is that it's an unreproducible way of marking that you have personally approved something.

There is no difference between an auto-pen, and just giving your secretary a stamp saying "the bearer of this stamp speaks with the authority of senator X".

The only difference between the stamp system I described, and an auto-pen, is that the latter can be used to trick gullible people into thinking a real human pressed a pen to the paper.
SICP doesn't really cover very much in the grand scheme of CS, so "like SICP" might mean ...

... something covering "how to do math". This might be an introductory real analysis or linear algebra book, or (alas, I haven't read much in this area) you could do no wrong looking for books on problem solving, contests, and inequalities, say by Polya or Andreescu.

... a higher-level view of day-to-day mathematical practice. There probably isn't one book for this, but I'd recommend Loomis and Sternberg's Advanced Calculus as a summation of linear algebra and calculus on manifolds; you'd also need to read on complex and functional analysis, algebra (Lang and the unofficial companion volume?), topology ...

... a broad but shallow introduction to several fields and applications unified but a common underlying approach (abstraction and programming language design). I'd recommend Geroch's Mathematical physics, which, as the name implies, studies algebra, algebraic topology, and functional analysis through the common lens of category theory.

... a somewhat quirky book on foundations? You could look for a book on naive or axiomatic set theory, categories, or type theory.
"President Obama has decided that when the National Security Agency discovers major flaws in Internet security it should – in most circumstances — reveal them to assure they get fixed, rather than stockpile them for use in espionage or cyberattacks, senior administration officials said Saturday."

Emphasis added is mine.

The "in most circumstances" means they can pretty much do whatever the hell they want.
A bit wacky indeed. For what it's worth when dealing with this stuff I use Apple's Preview App's signature feature. It's pretty neat. You take a photo of your signature with your webcam and place/resize it as necessary. I create a new signature each time (paranoia) but if you have to do this a lot you can have Preview save it for later.
"you cannot expect a person working in academia to be held to the same standards as professionals working in the industry for many years"

This is absolutely BS, especially in security and cryptography. Most security related code written by most so-called "professional" software developers is astonishingly terrible (e.g. ECB mode encryption, storing encryption key in code, reusing encryption keys, relying on (unauthenticated) encryption for authenticity, reusing IVs, linear time MAC verification, ...). Most cryptographers are academics. Also, anecdotally, the poisonous "demo an exploit or it doesn't happen" attitude in response to hints at a flawed system design is much more prevalent among "professional software developers" than in academia.

If anything, we should encourage more security experts in academia to engage in implementation, verification, and improvement of security code, not the other way around.

(Not that most academics write good code either, but this is not an academia/industry issue. It is a security expert/non-expert issue.)
OS X OpenSSL Updater to Avoid Heartbleed Vulnerability
i'm one of those guys - i would love for the servers to get my money; i just very strongly dislike being the one who gives it to them directly. i have settled for leaving a 20% tip regardless of service, which at least feels a bit more like i'm paying a service charge rather than tipping.
VidConvert v1.5.2 Multilingual MacOS X
Looking above (dllu's comment) a significant factor in success at these competitions is practice. There's a good chance a lot of these folks are just students trying this for kicks. Basically, its really unclear how much self selection goes on with these contestants.
Genuinely "trying" here means genuinely practicing; its unlikely that you would fail the first round if you practiced
"every software has bug and opensource has less resources to look at it"

i'd rather say "and you just don't know about the closed source ones because they're harder to find" ;-)
Why do you think the GPL matters? This is MIT licensed and the GPL is incompatible with the app store anyway, so no one can use it. See the removal of VLC.
This is one of those times where I think the HN title rules work against itself. The page does say 'Nothing is impossible', so this title is legit, but it's just a page of a bunch of mobile games. Apparently they are 'Brain games to make you smarter', but all I see are games.

I'd suggest a title change, but that goes against HN policy.
That's for personal (client) certificates.

For server certificates, unless you supply the CSR by yourself by skipping a step (IIRC, you're softly encouraged to do so), they generate the key server-side and send it to you back. They even have a FAQ entries (##43,44, although their site is down ATM, so Google for a cached copy) about that.
"Obama does x" is the headline when when the news is in general positive.

"The government/administration/specific department" is the headline when it is negative. Look out for it...
As I state above, practically all restaurants run a "comp[limentary] tab", giving free items is extremely standard. All items are marked on the comp tab. Senior servers/bartenders can run their own comp tab, but most staff has to ask management. This is factored into all costs and is used to encourage repeat customers. A repeat customer and good word of mouth is worth far more than a free dessert.

There are many misconceptions about the industry from outsiders. It seems to be making people mad, but this is how the industry works.
This is arguably good military strategy, too - the US has ample resources to allocate to finding novel or even one-off exploits on an ongoing basis, where some poorer powers might want to rely more on keeping secret existing exploits for a longer period. Perpetually making enemies' weapons obsolete.

Also, the US has a much larger attackable surface area and far more to lose in this domain. So it makes perfect, cynical sense if the US government wants internet security in general to be better.

Just like a naval power with strong international trade interests has reasons to keep shipping lanes open to all and to deter naval piracy.

None of this requires benevolence, it's all self-interested