skysight-inc/HackerNews huggingface dataset:
store everything, reconstruct it all later by trying to work out which part of the heap each request is from. there is likely some sort of efficiency calculus you can do here (i'm not good at math so I have no idea what i'm talking about) where you could calculate for heap size x and probabilities y and z etc. just how many requests and what size they should be to cover the entire process heap.

edit: OpenSSL wraps malloc, so it is different on different systems. You could find out what the probabilities are by looking at the source. For some reason FreeBSD's malloc gave up private keys with the default exploit length and not much effort. It was only a matter of time before other platforms were also figured out.

Note that the FreeBSD exploit worked on a fresh server after boot, which might have also been the case here.

Note that in the heap there are the intermediate values that and are used when constructing the connection and doing the encryption, you aren't exactly looking for '------BEGIN PRIVATE KEY------' or base64 string, you'd be looking for those - each which have a unique data type.
Apparently the problem is that you just say "three gallons" and not "three U.S. gallons". But I'm pretty sure the miles are the same. Except that there are nautical, international, statute, and probably some other miles. So stop being so inconsiderate.
I think this is a nice solution because it takes care of the hardware side of things by making use of a garden variety video camera.
Used to not bother much about HFT's but after someone referred to it as "legalised scalping", there is no doubt on its effect.
So - why is Toast Sweat bad? That question was never addressed.
And yet nowhere close to as dense as Japan.
If you need more motivation than the other apps, you can try beeminder.com which will fine you (!) if you don't achieve your goals.
Expert Explains What Makes The Best Logos So Good
Yes. This is also quite common with Arabic and there are a number of online Arabic courses that use Skype (for example) as the means of communication.
"She's five eight"
Quite a long time... I rode the maglev train at the Japan pavilion at Expo '86. It was so smooth you almost couldn't tell you were moving.
Is it possible that they've quietly disclosed to affected organizations/teams, but that those organizations don't want to publicly credit the NSA as their source?
They're probably trying to spoil the pot for the other people that are trying, by inserting extra private keys someone looking for 'just a private key' will grab one of the pushed ones.
Does the GitHub connect help? We're thinking of adding Linkedin and Facebook as an option. Would those help?
Related, how do you feel about sub-penny slicing as mentioned here: http://www.nanex.net/aqck2/3519.html

I wish there were more debates between HFT/exchange folks with Hunsader out there because I think it would be illuminating. Both sides seem to stand on their soapboxes and shout, but never truly debate the details.
thanks all for the suggestions, just switched all my passwords with Keepass + sync
Yep, we ask for location and have local functionality for universities and hackathons. Will need to open it up more for self organized groups.
We are about to give you the ability to pull in your GitHub repos and turn them into doerhub projects you can then open up for contributions from your non hacker friends and other subject-matter expert doers.
i don't know where you read that i believe native americans were NOT capable of killing other people. I believe that ALL groups of humans are capable of murder and rape. That's not something that I only believe in, but probably is just a simple fact.

I'm sorry if I was unclear when I say "they." I mean "they" as in the hominids the article says "may have been smarter than us."
Although I too switched away from OS X, this is irrelevant. The point of the story is not about Apple's idiosyncracies. It's about a man whose story is fragmented. It's about a man who was intriguing, cryptic, and unpredictable. It's another story in a bucket of stories of about him.

And it's important. OS X is not.
How I Went From Gangster to CEO of SwissCoda
keep them non networked, if you are really afraid of xp without support
Another excellent question. At this stage, I had my sweat-free toast, and wanted breakfast, so no. I've made a note for the next set of tests though, thanks.
i include native americans in the group which i call "humans."
Help build, break, and test the platform for drones at Airware (YC W13)
We're looking for our first Software Test Architect to build a comprehensive test suite for our autopilot hardware/firmware/software platform at Airware (YC W13).

As the test architect, you'll devise devious ways to break our code. The work will go far beyond scripting simple unit tests - you'll be ensuring the quality of a complex distributed system consisting of low-level firmware drivers, inertial estimation and flight control algorithms, communication middleware, automated health monitoring, radio links, advanced user interfaces...the list goes on. On top of all that, you'll get to see your bulletproof system fly commercial drones across the globe.

Check out the job description at the link below to see if you have what it takes.
http://grnh.se/bq05v1
Important information.
Mars Landing Supersonic Parachute Simulation [video] | High Tech Point
There is speculation on this at the end of the IEEE article.
Much appreciated! Will add a link shortly, but try http://murrayhurps.com/rss
Special-Ed Student Who Recorded Bullies Accused of Felony Wiretapping
The easiest, most clearly falsified example is probably Paul Ehrlich's alarmist population bomb. Already too late to avoid hundreds of millions of people dying from starvation in the 70s. Didn't happen. Food production increased. Later editions said 70s and 80s. Didn't happen, food production increased. Instead of backing off the catastrophic rhetoric, he increased it, and was ignored by the community. Oh, wait, no, he got a MacArthur genius grant...

Peak oil (oh, we just mean "conventional oil"). Many resource exhaustion forecasts (it will happen, just wait). Mass species extinctions (it's happening! Dozens per day! Which species?)

Each of these is based on an element of truth, extrapolated without allowing any mitigating factors, and published with forecasts of imminent doom.

Declaring victory over the ozone hole appears premature. Nasa says current changes are driven by wind and temperature, not changes in chlorine levels. http://www.nasa.gov/content/goddard/new-results-from-inside-...
Why is there a scarcity of comments here questioning the Bloomberg article? For that matter, why was there a scarcity of discussion questioning Reuters' December '13 article about RSA and Dual EC? Neither provided any evidence for their claims, and I presume that, in both cases, the information was obtained from anonymous sources who could not provide documentation a' la Snowden.
I can almost hear them thinking "Oh look at that nice small-headed boy, I could possibly bear three or more of his children before dying in childbirth"

(Note: not sarcasm)
Fantastic idea, and one of several great suggestions I'm taking note of for a followup piece. Thanks very much!
This is part of what's driving the rise of feudal app store models. Users like them too-- at least most users who aren't concerned with (or don't understand) things like openness and freedom. They prune the ecosystem of shitware to at least some extent.

Personally I think OSes need to evolve toward a model where apps are more strictly containerized, something like Docker (Linux) but for everything. The user should still be able to admin their own machine, but this permission should be forbidden to apps without explicit user approval (and a big red warning).
Popcorn Time official website is moved to get-popcorn.com
For all we know they would be considering us the severely autistic ones.
I must confess to statically linking my Windows binaries. It's better than making the user click through extra installers-within-installers to install the right MSVC redistributable.

It also seems to paradoxically improve load times. Shrug.
Out of curiousity, it there really any benefit to revoking a certifcate? Most (all?) of the leading browsers do not check the revocation list, so this move seems like an empty gesture. Is the Internet vulnerable to MITM attacks until this generation of certificates expire?

Do you think Firefox, Chrome will release an update in the next few weeks with revoked certificate checks enabled?
Big players are hiding info about their trades and changes to the demand curve, at least until after their trade finishes. Predatory traders are revealing this info.
Game teaser video re-released (Superverse)
One of the reasons I can't take your criticisms of debating seriously is that your debate style includes "you must have a mental illness, ha ha", seen below.
Infrared thermometers like the one used in this article are (typically) calibrated for an emissivity of 0.95. If you use one on a material with a lower emissivity, it'll give inaccurate readings. This can be cheaply solved by sticking a piece of electrical tape on the surface, and measuring that.

http://en.wikipedia.org/wiki/Emissivity
The technology of cryptocurrency is cool, but Bitcoin has definitely been in a ridiculous bubble. Seems to be popping, but you can never be sure.
Japan's maglev technology (EDS) is very different from Germany's maglev technology (EMS) that's being used in Shanghai. One pulls the train up electromagnetically to a steel track and the other uses permanent magnets to push the train away from the track. Both are still going nowhere. And it's for good reason.

● Both are extremely expensive per mile compared to HSR (high speed rail). Sure it's faster than high speed rail but a technology doesn't make it because it's better, but because it's more practical to implement.

● Service is not as tried and trusted as HSR. Germany's test facilities have been torn down after the Shangai maglev was built and Japan's maglev hasn't been expanded. On an emotional human level it just doesn't feel trustworthy. If you're not growing you're dying.

● Both technologies are proprietary whereas HSR has more companies and manufacturers to chose from.

● HSR could probably compete with maglev speeds by building a wider gauge track, using larger wheels, and implementing more aerodynamic designs to reduce drag and power consumption.

● Germany and Japan are pitching their maglev trains while they themselves aren't avid users of them.

=== Lessons ===

If you want something to succeed sometimes you have to set it free.

If you're not expanding or growing you're dying.

If you want people to use your solution, instill trust by investing in and using your own solution.
>we had the bug 16 days early, no we had the bug 18 days early

And we didn't know what to do about it...

CIA and FBI had knowledge of variations of this vulnerability nearly 10 years ago.

OpenSSL has been patching variations of this bug for that whole time, and every good hacker, (and the bad ones) have been exploiting OpenSSL since its creation.

https://www.openssl.org/news/secadv_20030930.txt

People act surprised, but OpenSSL has never had a secure release. Ever.
Pardon me if I'm being blunt, but I believe I can answer your question regarding downvotes.

You seem to have found a niche you're good at, all I'd counsel you is to get better at managing impressions. I think what you want to do is great, and I think most HNers agree on that. But this doesn't seem like the appropriate forum to reach out in, and partly because of that and partly because of your wording, you come off sounding a little arrogant and like a salesperson. I think if you were less verbose, your intentions would shine through better.
Programming is a game with an inventory
And, of course, I'm sure its completely safe to treat something as a pointer but explicitly set it to memory you don't own (i.e. just past the end of the string). I guess we could point to the last byte and doom everyone to inevitable off-by-one errors in string length computation.
Well, sorry about my unclear writing. I was trying to say that your argument is just a variation of "bad Europeans killed peaceful Indians" narrative, only applied to a bigger picture.

And just like that narrative, your story doesn't tell why those hominids would be less inclined to kill competitors (after all, having big brains than chimpanzees didn't make us saints). You just assumed it because it suits the narrative you chose.
C'mon, no need to experiment. Just make a toast teepee -- stand those suckers up against each other and let them evaporate before making that sammich.
Could symbol versioning, like ELF has, help the situation? I know that glibc has made backwards incompatible changes and they up the symbol version when they do so. I don't know if that handles changes in struct sizes though.
I just keep my toast in the toaster a bit longer.
Andrew Auernheimer’s computer hacking conviction is overturned by appeals court
Not likely. What are you going to talk to them about? The context is going to be xxx wants to learn a language and inherently unnatural...

For learning French I started with Duolingo and once I got where I knew 100 words or so started going to FIAF to watch French movies and plays and eventually interacting with native speakers, both tourists and expats. Since we were all there for the same event there was a natural starting point for the conversation. This also has the advantage that there are people around that know enough English and French to give an assist in the case where we hit a limit to my/their knowledge of the other's language.

There are a few more I would like to learn and suspect that a similar approach is going to be effective.
I really like your config :)
There is no Neanderthal mtDNA in modern humans, so any raping was going the other direction. And, if indeed humans were regularly attacked by Neanderthals, that would explain why they disappeared, as pre-civilization humans would have had motive to exterminate them and no modern sense of temperance nor stigma against genocide.
Yes, resorting to static linking is a pretty good solution for executables. Pitty about the bloat, but it works! How would static linking work with libraries? Would you get multiple heaps?
What can you do for the situation where you ship a library instead of an executable?

My team's product is moving to statically link libstdc++ and libgcc thanks to the runtime linking exception in GCC. It will allow us to use C++11 on old systems. We are grateful that libstdc++ is backwards compatible to GCC 3.4 (other libstdc++'s can link against us)!

I'm looking into statically linking musl libc so our product could (in theory) run on any 2.6/3.0 kernel. =)
Inventing the One Minute Mobile Phone Charger
The problem is hardly solved. Your string length computation is already wrong - the length is the difference between those pointers plus one.
Bitcoin is a bubble, but not in a bad way. All monetary goods display a "bubble" phenomenon. Their price cannot be explained by their use demand alone but by a monetary premium. This is true for gold and it's true for the dollar (which has no use value at all, unlike gold). This idea is explained best by MM in his bubble theory of money:

http://unqualified-reservations.blogspot.com/2013/04/bitcoin...

Also see:
http://unqualified-reservations.blogspot.com/2011/04/on-mone...
No, this is just the opposite of that. One click and scroll.
I want to express my great respect to David Attenborough and love for his documentaries. They are absolutely incredible. For me, this is a killer content for Oculus Rift, even if they are owned by Facebook now.
If there's a bug that you can fix in short order, why not fix it and deploy said fix?

If you've got an important bug to fix, sure, of course you want it dealt with as quickly as possible.

If you've set your CI and infrastructure up correctly, update rollouts aren't something the user even notices.

Not if it's for a bug fix or security patch, but presumably most of your development work is adding new features? In that case, isn't the whole point that it's something the user will notice?

I've always been a big proponent of small, atomic commits.

And again, no argument from me there. While I don't think every development project is suitable for that approach, I favour it most of the time myself.

Being able to deploy just one thing at a time means we often know where breakage comes from (when it happens)

This is where my experience and background seem to be very different to the deploy-hourly kind of philosophy. I've noticed that proponents of the latter often seem to assume that stuff is going to be breaking all the time, and therefore that being able to deploy bug fixes or diagnostics very quickly will be a significant advantage.

However, if you have so many significant bugs that you need to deploy multiple times per day just to keep up, to me that seems like a clear demonstration of insufficient QC/QA in the development process. And so I can't help wondering whether the pressure to release so often, and the consequent almost exclusive reliance on some sort of automated test suite for quality checking, is a causal factor in having so many bugs in the first place.

The customers love it, and we enjoy excellent stability and development velocity. These are the reasons we deploy many times a day. There's no reason for us not to deploy things once they are tested and ready.

I guess this is the paradoxical part that I don't understand. If your project enjoys excellent stability and your deployments are all soundly tested before they go live, then by definition you don't need the rapid deployments just to rush out bug fixes or diagnostics.

So that brings me back to where I came in: do you experience any concrete, measurable benefits from the "excellent development velocity" you mentioned, or is it simply your team's preferred development style?
Heartbleed Bug's 'Voluntary' Origins
A Quick Tour of Ruby and Rails
That's a far less useful function, since you still have to do a memory copy if you want to pass the return value to a function that operates on strings.
dfc - you're right, I think, that it's almost always ambiguous temperature references, doubtless because the 'degree' part of the unit name is shared between the three common measures.

As rgarrett88 points out, short distances are often reduced to foot and inch numbers, with the receiver left to intuit context. Sometimes people will assert they hit a hundred, or went from zero to a hundred in x seconds, and weight-lifters are likely to talk about the number they can push ... again reliant upon sender and receiver sharing the same cultural background.

My comment about 'us' being so considerate was somewhat tongue in cheek, natch, though (since I'm speaking for all the rest of us now) we'd really like it if you guys would switch over to metric at your earliest convenience. I won't say ISO / SI, as working in K is just too unwieldy :)
Yes, yes, yes. It really is a philosophy. Great summary on his incredible (and quite readable) thesis.
Elon Musk's Hyperloop makes sense from first principles. Most people and therefore most governments don't think that way.
Can't you just use an rack?
He is right, after all, it is just a bug, like so many others some of them we are not aware off, and it did not break internet.
It just may leak information, if and only if you really know your job in coding and are very good.
People that could be hired by organization with the money and the need for it? Nooo.. You have to be paranoid to think so.
And ... then throwing the stone at openssl would be like distrusting all softwares: they all have bugs.
By the way, I never saw a software with a legal liability clause for bus for a software... so ... if a user have a problem or money loss caused by softwares, then he is the responsible for his choices.
SCADpad: Micro home the size of a single parking space
To really protect against active attacks, browsers can't just re-enable OCSP checking (i.e. return to the status quo as of a few years ago). They would also need to make failure to contact the OCSP server a fatal error (something which I don't think has ever been done by default before), and that would probably cause so many problems I can't imagine the browsers doing that.

Personally, I'm never again going to buy a cert that's valid for more than 1 year, and even that's too long. Google uses certs that are valid for only a few months, but they're only able to do that because they are their own certificate authority.
I would call this a "self-induced man in the middle attack". You're telling your computer that cloudflarechallenge.com is his server.
i don't make any real conclusions here. I'm sorry if I sounded like this is the only thing I can accept. It's not. I only suggest a possibility. There's a possibility that this group of hominids killed each other in some kind of civil war or died in some drought.

And i hope this isn't a revelation, but the narrative is real. Bad europeans did kill peaceful indians. That doesn't mean that all europeans are bad and all indians were peaceful. But largely, that narrative is hard to deny. All kinds of humans have done bad things to people who really just wanted to be left alone. To me, though it may not be the whole story, it's a true fact. I merely suggest that it is a very real possibility that humans hunted this hominid group down and slaughtered them all while the hominids wanted to be left alone. I don't see how you can not consider that scenario if you are wondering how a group of hominids became extinct.
Hope you took the comment in the whingy great southern continent spirit it was intended. ;)

I was just going to dwell upon my amazement that toast lasts 120 seconds at your place. Butter really needs to get on and be melting within 10 seconds, vegemite or marmalade within another 10, and that leaves you about 15 seconds of tolerable consumption temperature. We are not animals, after all.

FYI - when I've been too busy to pre-warm the plate, I've found a sheet of kitchen paper between plate and toast can ameliorate some of the toast sweat problem.
I love Raymond Chen's old new thing, also Mark Russinovich's SysInternals - because of these two (and real job involving Windows) - I actually enjoy it when I can solve the next "weird" windows problems some of my coworkers would have (but then again I don't know as much as I wish - but it's fun time overall).

And while I disagree with Raymond on the MSVCRT.DLL topic, I can also see his point (and I might've took it, if I was working for Microsoft)
As a reader, I far prefer this to any kind of summary. This was well written, thoughtful, and thorough. I can't imagine any value that any summary would have added to this, unless I were just hoping to skim it over my lunch break. And I greatly prefer to read one well written, thoughtful, thorough article in a day, then a dozen summaries which inflame the senses without providing any particularly useful information.
I don't think I have come across a more succinct explanation of the problem. Thank you.
CDNs are part of a group that receives advanced notification because of their reach on the web - they're a valuable attack vector.
What if your application is a plugin. Or SDK?
Samsung Wants to Leave Android
The problem with most of the podcasts in this space is 90% of the people they interview (and the hosts themselves) are in the "make money online" / self help / social media space.

Everyone's key to location independence or bootstrapped income is teaching everyone else about location independence or bootstrapped income.