skysight-inc/HackerNews huggingface dataset:
45 vs. 25 mph in residential zone: child runs out in front of you, hit the brakes but you can't stop in time, hit him still going 30mph and kill him... vs. you stop and don't hit him.

100 vs. 65 mph on freeway: you certainly die vs. you probably die, depending on the accident. Freeway accidents are very bad at either speed. Luckily, there shouldn't be any pedestrians, children running into the street, or bicyclists.

The danger of freeway speed has more to do with differentials. Accident risk goes up 2x every 15-20mph of raw speed but 2x every 3 mph of speed differential (in either direction). If you're in traffic and driving 100 mph, you're probably an asshole because most people won't be, but it's the speed variance (and weaving, tailgating, and other asshole behaviors) that makes it dangerous.
Does the EFF donate to OpenSSL?
This has worked for me in the past (gotten off with only a warning). Along with the hands on the steering wheel, engine off, interior light on, window down I might also add, ask the officer if you can reach for something before doing so.

Cop: "Can I see your license and registration?"
You: "It's in the glove box."
Cop: "Go ahead and grab it."

It's not about submitting to their authority, it's about doing things that benefit you in the end. You don't have to do any of this stuff, but don't complain when things don't go your way.
I created http://www.Learneroo.com to teach programming and more through interactive content and challenges. I'm looking for more developers to help with:

a) running code online
b) creating interactive javascript "explainers"
c) connecting students with tutors or jobs

I'm also interested in joining another startup doing one of these things, and just created a site for that purpose: http://startupmerge.com/.

Please contact me at ak[at]learneroo.com to find out more.

I'm also looking to help people learn programming, either Java or Ruby.
I'm one of those people, I rarely tweet. If I do it's usually aimed at one of my few followers (I think I have about 20) that are friends in my field.

Otherwise, I follow people that have more interesting things to say. It's how I know what's going on in the development world. I barely follow anyone outside of my field.

Although, funny thing happened once. I commented on someone's tweet pointing out a bit of hypocrisy and his defense was I didn't have enough followers to warrant being able to say anything in the first place. Apparently I'm in a popularity contest I didn't know I was in.

If you are tweeting and hoping someone to pay attention and no one is, I could understand the frustration.

I'm thinking of getting back into the habit of doing a tech blog that's more for me to keep tracks of the interesting tidbits of information and code I come up with doing my job. I guess that's a similar deal to your idea of tweeting as a diary.
Due to its global importance, even if its security record was impeccable there would still be a huge incentive to constantly audit and test OpenSSL.

It is critical for the future of the Internet that OpenSSL (or any alternative that might show up) does not have any other Heartbleed bug.
But those are scams, they don't actually do business there. Those suits should be thrown out.
Natero (YC S12) is hiring for BizDev, Sales Engineer and Customer Success
HMO:

I just can't seem to solve this bug, no matter how hard I try... It's in my side project: http://www.hashworld.co/
it's written in Java under App Engine. If you want to give a try, send me an email at hmo@hashworld.co and I'll send you details.

How I can help:

I'd love to help out in interesting problems, especially relating to scaling and making sites always live.
Driving well includes knowing when to slow down.
> be cautious in Virginia

I drive like an old lady because I'm in Northern VA, and I've still gotten tickets here.
Quebec used to have these stickers to place on your plate for registration (not anymore). And some police families were giving out plate stickers with VIP written on them, which as it was found out gave them leniency, as well as parking ticket immunity. Investigations happened, and as a result, no one has these anymore, at least as far as the general public know.
New Website for the Pocket Puffer, the Company's New Dry Herb Vaporizer
http://youtu.be/XFkn37BDvTw?t=1m27s

The difference between a 60mph collision and a 100mph collision is significantly larger than the difference between a 20mph collision and 30mph collision.

In fact, with a lot of today's technology, a 20mph collision can be avoided by collision detection systems... and 30mph collisions are effectively transformed into 5mph collisions automatically.

But nothing is going to save your life from a 100mph collision.
I imagine it's less about time saved, and more about fun. Most people don't go downhill skiing to get somewhere.
Commenting so I can come back later (email also in my profile). Would be very interested in talking.
Not quite yet, but it's in the roadmap!
Dropbox faces online protests after appointing Condoleezza Rice to board
OpenSSL is like a guardian angel who's invisible to a person. The guardian angel has been helping the person all the time even though he/she doesn't know it. Then the time came that the guardian angel made a little unintentional mistake that led to large consequences. The person then starts blaming the guardian angel, forgetting all the good things the angel has done for him/her.
It's the new toss your business card into the bowl thing.
That was a quick moving of the goalposts.
As much I understood the article (had also to look twice), the problem is not the OPENSSL_Malloc near the troublesome coding, but an other allocation for the received data. And that is (as much I understood) handled by the freelist. But the portions where of course allocated by normal mallocs.
Don't trying going on the German Autobahns (motorways). Unlimited speed limit, and unlike USA bendy roads, and lotsa on/off slip roads.
What about his mistreatment in jail? Just because you are a prisoner doesn't mean they should be able to treat you like shit.
That will just drive people to make sarcastic commit messages.
There would be many business reasons to not release such information.
This - something like this is not only a great idea but incentive for more developers to spot some easy fixes & promote the OpenSSL brand as well.
The events of this past week make me wonder how much Heartbleed would have been worth to an entity that buys zero day exploits.
Tsuru at OSCON 2014 (Go powered PaaS)
The NSA knew about Heartbleed for years...
"Hey I wonder why all those cars ahead are slamming on their breaks and suddenly slowing down?"
Show HN:Track Dropbox Files
"Dr. Rice understands our stance on these issues and fully supports our commitments to our users."

There are three possible things this could mean:

1. Rice has changed her mind about NSA surveillance.

2. Dropbox's commitments to their users do not include attempting to defend their data from government surveillance.

3. This statement is full of crap.

I'm guessing 3, but 2 is also likely. 1 does not seem to be the one to bet on.
Probably not. But good for him if he does. Where were you when the USAA's were wasting time / money prosecuting him to start with?
You make a good point when it comes to merging. Speeds of 90-120 mph are reasonably safe on German autobahns, because people have a regimented driving style (absolutely no passing on right, but the left lane really is the fast lane) and follow it to a T. Most Americans aren't trained to drive those speeds, though, nor do they follow lane discipline.
Soo, throwing a little bit of economics out there: BSD-licensed open source software is pretty much a Public Good (http://en.wikipedia.org/wiki/Public_good). There are basically two ways we've figured out how to create public goods: taxation and assurance contracts (like Kickstarter).

Thoughts on the pros and cons of either approach with respect to improving information security infrastructure?
I'm not so sure about the fuzzer.
We have several good symbolic fuzzers around by ourselves, like fuzzgrind, but not so many open symbolic bug finders, like BAP, MAYHEM, EXE, forensic, cmbc.
It could also be that they just added symbolic annotations like with Frama-C (as done with portalssl) and found bugs thereby.
openssl nor gnutls is not in the shape to add something like this by themselves.

It's much easier to come up with workable exploits in decent time with symbolic input and the stp or z3 solver than with simple fuzzing.
Thanks for the feedback. I've clarified the text to show that it's free shipping worldwide. I like the idea of letting the customer pick from a list. I'm not entirely sure how much I'll pursue this beyond the first batch, but I'll keep that idea in mind if I do another round.

Thanks again for the suggestions!
Because Apple usually just goes along for the ride...?
Mortgages, donations, and other deductibles. As well as stock trades, investments and other sources of income.

I used to wonder that as well until I bought a house and did some investing.

For the more simple returns, there's easier ways than copy/pasting. If it's just a W2, there's apps that let you take a picture of it, and it'll OCR it and populate the forms automagically.
Ask CloudFlare how much they paid.

No, I'm not saying they buy zero day expolits to be evil, but how else did they get 12 days notice?
Regardless of my opinion on whether or not we're in a bubble, the argument of "it's different this time because..." is used in the build up of every bubble we've ever experienced.

Stock bubble? Economic stability and the wonderful controls the Fed has on monetary policy. No more economic cycles.

First tech bubble? The internet is a wonderful thing we haven't had before - new opportunities, etc.

Everything is different until it isn't.
The Sea of Fog
Azure earns EU privacy policy approved cloud status
It doesnt really matter what he thinks, the evidence and the lobbying by the biggest H1B consumers suggests that it is very worth it.
I agree with the overall premise that the technology you choose needs to match your problem, however it's unfortunate that the author seemed to think that NoSQL is only about document-based databases, and didn't do any research into something like a graph database. It would have been interesting to see if that would've met his needs better than taking his ball and running home.
Hey, this is great. I'm doing the same thing. A lot of stuff: DVDs, books, musical instruments, gadgets and stuff. :)

Can I use your design on my site? I already copied it. :P
We should have been clearer that none of this is going to change with Dr. Rice’s appointment to our Board.

i.e. "We should have been clearer about how this isn't what it looks like."
12,000 Mile Road Trip Smashes Records For Longest Electric Car Drive
> Actually, I have a very European way of thinking, rather than Russian.

Luckily most people who want to move to Europe do ;)

As for the rest.. I can answer for the Netherlands, since we're quite unique in how easy we make it for international workers.

> 1. Bureaucracy. A lot of documents, visa, cv, cover letter etc.

The only bureaucracy is about getting hired. After that the company will arrange everything.

> 2. Language barrier.

Everyone in the Netherlands speaks fluent English and at pretty much everyone of the companies on that list it'll be the official working language.

> 3. I have a girlfriend. Who will give her visa?

Dutch knowledge migrant visas actually have room for a spouse. She can even work freely here.

> 4. I think that foreign employer will hire you only if you are a genius...

No, they'll hire you because you're cheaper. Since you'll both get the tax discount and will not negotiate as hard they can pay you less while you still get plenty enough. Also; Dutch employees have a reputation of not listening to the boss and many bosses don't like that ;)

The one thing I have found is that you need to have your CV in the right style for the country since each country has different standards. Dutch ones are more about understanding what your main responsibilities / daily activities were. Russian ones tend to be summaries of all types of tasks your job involved. US ones are often 'boasting' about the results you've achieved.

As for common objections; the main reason not to hire Russians is usually a lack of communication, since we expect much more cooperation and interaction. It's not a deal breaker since we're used to it, but if you can convince people on the other side you communicate well/better than they're used to it'll be a big plus.

For a Dutch style CV that works well you have a look at mine at http://michiel.trimpe.nl
Well Ted Nugent (not to mention Ann Coulter) got away with calling Obama a "monkey," and he's the highly respected darling of the GOP, whose endorsement is sought after and appreciated by not only Republican senators and congressmen, but Mitt Romney himself.

(I'm not endorsing anyone's behavior here, just pointing out how low the right hand side of modern American politics has degenerated, to provide some perspective.)
> two people familiar with the matter said

As much as Snowden has shown us the amount of effort NSA puts into this kind of stuff, I think we need more evidence than this article is giving.
Heartbleed attack now used by Call of Duty cheaters
I had a fifteen minute conversation with a relative about this yesterday.

No, they emphatically do not, at least until you explain that to them. And even then, it was "well, I don't really do anything important online anyway..."
Underfunding is not an excuse for a code that gives headaches to people, lack of testing and blind acceptance of "new features" just for the sake of it.
It depends on your perspective. Crimea agreed after the fact that the Russians were merely securing their own territory, correct? If so, then there was no invasion.

If the Crimeans had voted no, would Russia still be there?
Consider: what if the NSA's sensors are so extensive that they know the exact moment anyone other than them tries to exploit certain bugs?

That changes the risks/rewards of early-patching quite a bit. They can be confident it's their own trump card for quite a while, and learn about (or strategically mislead) any teams that arrive later to the same knowledge. When it's really "burnt", and in use by the NSA's enemies, then they can help US companies patch... and possibly even assure them exactly how much damage (if any) occurred.

(In the extreme, with say a big friend-of-NSA telecom or defense contractor, that could even be: "Hi, American BigCo. In the 48 hours between the beginning of enemy exploitation and your patching, we saw about 13,000 suspicious heartbeats directed at your servers. If you don't have raw traffic logs to do your own audit of exactly what server memory was lost, we can share our copy with you. It's a pleasure doing business with you.")

In fact, perhaps the reason for the synchronized reveal from US and non-US discoverers just now is that the first non-NSA probing (by either malicious actors or researchers) was just recently detected, starting the race to patch.
If they did, OpenSSL wouldn't have $2000/year in donations. Most of the EFF's donations go towards fighting cases in court, if I'm not mistaken.
Thanks! If you use it, please feel free to post issues on the Github issues list. Also, I'd be very interested to hear if you have experience with other writing packages--perhaps Sigil, yWriter, or Scrivener--and what you like about them.
Qualys SSL Labs fails to load the link you give me reason, "No secure ciphers supported." Which I think is a bug because I've gotten that twice today.

When a browser and web server agree on a cipher suite its not necessarily the most 'secure', just the first they agree on.

This is largely controlled by the client. Who basically iterates over their list (from lowest to smallest).

Do you have 0x002F? (128bit AES DHE).

No.

And you continue to count upwards. By the time you reach more powerful suites that use SHA256/386 (~0x0080-0x0090) you've paste SHA-1 w/ AES256 using Diffe-Hellman exchange, and SHA-1 w/ RC4 using Diffe-Hellman. The two most common (and one is arguably secure) suites used (RC4 makes up a good 40% of all TLS traffic).

Your only real option I think is to black list SHA-1 crypto which may cause issues.

<pure speculation>

Smart phones may disable SHA-256+ methods because of extra computing power needed.

</pure speculation>
The Style Guide Guide
Whether it's true or not, I think the correct thing for the NSA to do would be to say that they knew about it for years and exploited it. That is their job, after all.
At 65mph, it is realistic to drop your speed to 50mph or 40mph before a collision. (Delta-V of 20mph or so seems reasonable).

The survival rate of a 40mph collision is around 50%. The survival rate of a 80mph collision is 0%.

There is a _big_ difference between a 60mph cruising speed and 100mph cruising speed.
Fair enough but for that to imply anything about 'most android devices having large screens' you'd need to show that most devices in the < $300 group also have large screens.

The existence of one such device that is known to have sold poorly, even though it was a good product doesn't tell us anything about that group.

Apple's documents do not show that most Android phones have large screens. That is the original claim you made.
Most graduate programs aren't displacing US citizens with foreign students. They literally cannot find a US citizen willing to take the job. I know, they were trying to recruit me and after seeing the bullshit my graduate friends had to deal with I got the hell outta there.

The science and engineering graduates have no problem finding work. It's no secret why the engineering school is full of foreign PhD students. Local graduates weren't interested.

Sociology and Political Science were a different matter. You can't get hired in Sociology without at least a MS. PoliSci was the entry point for law school.
رش مبيدات بالرياض
I think lauradhamilton's point is that "familiar with the matter" is too subjective.
How about:

1. Rice wasn't brought on for anything that has to do with data privacy and thus her views on data privacy are irrelevant.

2. Rice doesn't have an uncontrollable compulsion to send people's data to the NSA and thus it's unlikely she'll be sneaking off to install backdoors.
The tax preparation industry has more lobbyists than you (and I) do.

stronglikedan has a fair point with deductible expenses, but they could send a prepared statement to anyone who took the standard deduction in the previous year. Or they could send prepared statements to everyone, with some mechanism for adjusting the deductions (which should still be a big simplification).

Edit: It probably also makes sense to just let people change anything on the statement; it shouldn't matter, but I think there are lots of people that would find that allowance reassuring.
“He feels so empowered and he can do what he wants.”

He feels he can do what he wants with his own property? What a dick /s
Important details are really hidden on the webpage. For example, who are the mentors? Second: unlike the Hacker School, it's not free. Both of these items should be addressed under "The Essentials".
No, you can't make that same argument. Software is fundamentally scalable, due to incremental copies being free after the first copy costs a lot of money to produce. Food service is about as far towards the other end of the scale as you can get.

Like I said, if they were making a unit profit and an overall loss due to building out their infrastructure, that would be fine and normal capitalism. They're not.

I agree that their VCs should be ripping them a new one, or should not have invested in this plan in the first place. It's one thing for a 22yo to think you can make easy money in food service, the VCs should know better. What's next, the VCs investing in kids starting a bar with their friends?
Here's where the freelist operations are defined: https://github.com/openssl/openssl/blob/21e0c1d23afff48601eb...

But where are they called from?

Update: To answer my own question the freelist is used in

ssl3_setup_read_buffer()
ssl3_release_read_buffer()
ssl3_setup_writer_buffer()
ssl3_release_write_buffer()

This is not the same as universally replacing the allocator.
Prima facie rule is really "don't be a moron."

I would throttle up in the right lane and not have a speed differential not too great compared to traffic, because someone that cuts you off to make an exit could be fatal.

Also, there are some areas, like near UC Davis, where a cop on 80 will stand behind the rise of an overpass berm to hide his vehicle around a bend and nab people using laser. Thankfully the twice this happened, laser jamming may have been allegedly deployed and he checked his gun for errors while I might have turned the alleged system off and coasted.

If someone were unlucky enough to have been pulled over:

If the cop is male, you can try a sob story ("I'll lose my job because I need to make FAA status") or actual sobbing. If the cop is female, emotional persuasion is less effective.

Also if someone happens to get a ticket, best move would be to be unmemorable as possible and fight it. There's a zillion technicalities because there are so many ways to screw up (not) measuring and writing the ticket.

Heck, a friend of mine even legally has no front license plate and gets out of every fix-it because a previous ruling allowed it. Mine has a front-center threaded tow-receiver hook frame, so you can guess where it's at most of the time. :)
Jeff Bezos Says Amazon Is Seriously Serious About Drone Deliveries
Even in the absence of a lab, the interviewee could explain measurements they could obtain and how they could obtain them.
Well designed cars can. Formula One drivers are going those speeds when they crash, or faster.
There is a valid safety concern. On certain roads, people regularly speed 70 to 80 mph in a 55mph zone. It is honestly safer to be ~70mph than it is to be going the proper speed limit in these circumstances.
I think that the WhoIsHiring account should just automatically post this. It's basically for everything that doesn't fit in the monthly Who's Hiring of Freelancer threads. Btw, this thread is fascinating. It's a great way to check the pulse of the HN crowd and a more informal way for people to "Show HN:".
Go hack yourself or someone else will
Because mindlessly associating Apple with almost anything gets clicks, and that's the purpose of news sites.
Then why not speed on a track, or some other closed environment?

I imagine that shooting guns at targets is fun too - but most people wouldn't find that to be an acceptable excuse for shooting guns at targets in a public park.
I'd be more inclined to look to state funding for encryption-related public goods if the state wasn't demonstrably an antagonist in the realm of encryption...
Since the NSA (and probably other government agencies) are already researching vulnerabilities, it would be nice to have them made public. We're already paying for the research, so we wouldn't really have to raise taxes.
You make it sound so easy. Any suggestions you've got regarding $800K in revenue in the next year? :)
Well this was flagged fast.
Estimate of inducatance and capacitance?
I'd like a partner for my startup hedge fund that uses machine learning and nlp. If you have experience with those check out dynofuz.com or @dynofuz. You can also email me with ricky at that domain.
But I find it hard to believe VCs are that stupid.

I don't.
I actually did a couple of searches and only came up with stuff from years ago. What terms did you use?
Sponsorship and advertising also work.
This attitude is exactly why I think that vehicular assault and homicide should be prosecuted even if alcohol isn't involved. Every jerk with a fast car thinks he's god's gift to driving and the rules shouldn't apply to him. Then when there's a crash it's described as an accident. In the overwhelming number of cases it wasn't an accident, it was negligence, often criminal negligence.

You want to drive fast go to a track, on the public roadways follow the damn law.