skysight-inc/HackerNews huggingface dataset:
When you were a beginner at Java, did you by chance already know how to program in an imperative or OO manner? I find it highly unlikely that anyone unfamiliar with imperative/OO programming in general would get any benefit from reading Java libraries. If you want to get benefit from reading Haskell libraries, just like in Java, you need to learn how to program in the paradigm. Not just "have casual encounters" with it, not just reading things about it, but actually learn the thing.

A direct analogy to what you're saying: When I was studying French, I was able to read articles above my level and get a decently good idea of what they said. Now I'm studying Chinese, and I can't tell at all what characters mean! This should not be surprising. French is very similar to English, where Chinese is very different. Of course picking things up in the latter will be more difficult. It would be absolutely absurd to blame the Chinese language for that.
Mysterious White Light On Mars Seen In Images Taken By NASA's Curiosity
It wouldn't be a bad thing to repost it every now and again. Which reminds me, people are as burried in bookmarks as they are in email. Solution = new startup?
My experience at a coworking space in Osaka, Japan
Let's assert something else. The wide majority of food additives do not have large negative effects. A few of them may have relatively large effects that are poorly understood.

(It's important to specify the negative aspect; mineral and vitamin fortification both have pretty big positive effects, in countries with legal requirements for fortification, things like rickets are a bizarre anomaly.)
I was getting OCSP validation issues on kernel.org today. Turning off OCSP validation, visit kernel.org, then turning it back on seems to solve the issue.
The mg implementation that ships with OpenBSD has a fair few insults in it as well under the command "theo":

http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/mg/theo.c?...
I have seen Riemann geometry applied to neural networks. Basically the state space is curved, so you can speed up learning if take the curvature into account when sampling in the space of possible neural nets. (you want to explore the hypothesis space evenly)

Information geometry for Neural networks, 1998, Daniel Wagenaar:-

http://www.danielwagenaar.net/res/papers/98-Wage2.pdf
Snake Game using jQuery
Wait, wait - learning any of those skills can surely be done, but it naturally requires motivation, time and engagement.

That's the whole point - if we're expecting employers to use gamification to engage them after hiring, then can we expect them (the majority of them, not the best of them) to learn nontrivial marketable skills on their own before getting that job?
> Is minix still kicking around? I thought that was the teaching Kernel

Surely yes, since version 3.0 it got some commercial and EU funding and migrated to NetBSD userland.

Minix is enjoying the fact that it isn't 1992 any longer and there are quite a few micro-kernel OS systems to choose from.
How a Startup Can Compete With the Big Boys for Talent
but what about things like ctrl-s and ctrl-b in Google Docs? Those are handy and I rarely save a page or create a bookmark by hotkey.
Not in only could be embedded, but also compiled into dynamically linked library.

(Shameless plug) I've collected examples of this here: https://github.com/drdaeman/haskell-library-ffi-example
Also read the "Inside Windows" book series, they are full of valuable information.
Zidisha (YC W14) reduces interest rates for P2P lending to developing countries
I agree this is incredibly surprising. Even beyond typical production testing it seems to me that critical infrastructure crypto should have a formalized testing structure based on logic and information theory (as I had assumed OpenSSL did). Build trust from the bottom up. Test that only known affirmatively tested primitives are used for memory allocation, and other known sensitive operations. Things like buffer overflow, range checking, executable code in data, etc. can all be easily tested.

There is a lot of work in crypto research about trust in the logical and mathematical sense, why is this work not applied to software testing at least for infrastructure crypto?

P.S. By way of incentivizing this work... seems like a pretty good dissertation topic.
I'm not saying we should accept sloppy engineering in security-critical code, I'm saying that it's pointless to insult people who contribute to free open source projects from the outside.

We want to incite more people to audit and contribute to these projects, not the other way around. Insult the engineering, not the engineers. Or, alternatively, don't insult and propose improvements.
3D Printing with Clojure
It's hardly a problem of open-source, it's a problem of open-incentives. While nobody disagrees the project is critical for everyone, are you (or I) willing to make it a priority? It's a essentially a "who will build the roads" issue.
> India's national space agency ISRO would be the fourth after agencies in US, Russia and Europe to have undertaken a successful mission to the red planet.

Good to see this among all the political slugfest going on in India at the moment.
> At its best, the study of the humanities is an exercise in analytical skills, critical thinking and logic.

I think there is a typo, author probably meant mathematics. Most study of humanities are threatened by logic and critical thinking.
What is that makes the United States such an attractive place to immigrate to for people whose skill sets could take them almost anywhere in the world?

As a European who spent his last 3 summers in the US, and now participating in H1B lottery, my motivation is pretty simple: money, and also prestige stemming from working for a well-recognized tech company in the core of SV that will follow me when I get back my home country, or immigrate to some country I find more desirable.

Spending few months in Bay Area and in Seattle made me pretty disillusioned about the whole "land of the free" thing, about equality and justice for all. It also made me concerned about my own personal safety, something I never ever felt back home.

But for the salary, I find that Canada is in almost every way superior for immigration purposes, not to mention Germany, Switzerland, Denmark or Sweden.
rust-core has been coasting along in maintenance mode for quite a while now, because it was only intended as a temporary stopgap. Nobody really wants to fragment the community with a third-party standard library.

Instead, the Rust devs intend to restructure the standard library such that it has multiple profiles, and that you can jettison parts of it (such as the parts that require the runtime) without losing all of the other goodies. Here's the most recent RFC for doing so, filed yesterday: https://github.com/rust-lang/rfcs/pull/40/files
Small slice of doctors account for big chunk of Medicare costs
A few quibbles based on what I've followed on guns and the military:

Once the SIG SG 510 AKA Sturmgewehr 57 ("assault rifle" in English, but it's really a battle rifle, and at 12.5 pounds edging close to a machine rifle) was adopted in 1957, upon retirement from the reserves, instead of buying your bolt action rifle at a nominal cost, you'd turn yours in and could in return buy one converted to semi-auto.

The new rifle, the SIG SG 550 AKA Sturmgewehr 90 introduced in 1990 is a true assault rifle, but if a [citation needed] bit in Wikipedia is correct, less than 700,000 were produced and "production for the military has now ceased." I've read elsewhere that a quality civilian version of this rifle costs around $3,000, although the cost in bulk buys would be lower (I personally own the closest one can get to this rifle in the US without going to extremes like switching the barrel for a longer one (I deal with the ballistic failures of 5.56x45mm NATO by using illegal for the military hollow point copper bullets from Barnes)).

(In all cases these are reported to be very accurate rifles with issue ammo, drilling a target at 300 meters has always been an important requirement. Switzerland has in general been pioneering here, e.g. adopting non-corrosive primers in 1911, and lead free ones in 1990.)

Somewhat over 600K sounds lower than the able bodied young-45 years of age cohort, and especially if military production has ceased it's pretty clear the system is changing.

I'd also add that there's lots of evidence many in the Swiss establishment were concerned about an invasion by the Soviets post-WWII (e.g. http://www.amazon.com/Total-Resistance-H-Von-Dach/dp/0873640... which is highly recommended), and as a child of the Cold War myself, over in the US, I don't think that concern was unwarranted.

If the law is still requiring nuclear hardened bunkers, that's extremely wise, for we can be sure some day nuclear weapons will be used in anger again.

Final note: Switzerland is instructive in the durability of true federal system, that with the breakdown of ours in the US with steadily increasing centralization of power in our central government, provides some useful object lessons.
Humanities are a dead end in the sense of research and sience, so let’s stop pretending they are not. Instead, let’s reframe studiying humanities as an activity of personal and cultural enrichment, just like foreign languages.
>AFAICT, when people use this phrasing, they are appealing to one of a wide array of different (but stylistically similar) mythologies...

So, then you knew all the while that I was obviously referring to certain chemical additives and not just chemicals. Yet, you replied with the obvious statement that "everything is made of chemicals". This kind of pedantry is what really makes meaningful discusion difficult.

>sometimes, the inappropriate language seems to be used instead just to make it impossible to discuss the whole subject meaningfully, since any disagreement with what is actually said is treated as missing the point obscured by the language

No. The reason it was impossible to discuss meaningfully is not because of how "any disagreement [was] treated". It's because you didn't actually disagree. Instead, you interpreted the comment literally and complained about it being a "nonsense phrase", even when you understood perfectly well what was meant. You then went on a tangent about chemicals and how they work.

If, instead, your assertion is that there are no harmful chemicals in our food supply or that there is no difference between eating organic foods vs. processed foods with chemical additives, then you should have stated as much.

All of this is tangential to the main point, however, which is that, while Soylent may not be the perfect food replacement, it is likely a step up for most people whose diets are suboptimal for any number of reasons.
The same license that some libraries inside Starcraft 2 has.

But blizzard must be one of those small companies that do not care about profits, or have no lawyers. No "serious company" or serious software would dare to use LGPL, right?

But instead of arguing license religion, I suggest we move back to the topic of OpenSSL and vulnerabilities.
All PRNGs have a seed, so you can always make them deterministic if you want.
If you are looking for an open source version, libccv was previously discussed here: https://news.ycombinator.com/item?id=7480380
There is a formally verified implementation of TLS in F# (comes from Microsoft Research, if anybody cares):

http://www.mitls.org

However, there are gotchas. At this point the TLS protocol has gotten pretty complex. Even the act of just stating what the desired security property are is not simple. Furthermore, understanding what their proof means requires you to go through at least two of their papers (and probably both of their tech reports to grok it fully). Then you need to look at the code itself and the different assertions/assumptions spread throughout, and make sure that those conform to the properties you expect. Even if you are familiar with the field, starting from scratch would probably take you a couple of weeks, just to gain confidence that what they prove is correct. And it might be possible that there are some features of TLS that they don't implement (as you can tell, I haven't taken the couple of weeks to fully understand their stuff).
When I said not teenagers I was talking about people younger than 13, and believe me they are all over any COD game. Trust me some of them told me how old they were as they sang Miley Cirus songs to everyone playing.

The 20 somethings just talk trash and are rude the kids are just annoying and never stop talking.
NPR is covering this story and confusing the library and protocol as well. I suppose most people that need to understand this will not be getting their info from these people.
Just curious, Is this the best algorithm to use for image recognition? What's a good library to use on the raspberry pi?
Thanks for that... I am a big fan of ag at work but I had trouble making it work on cygwin at home. This should solve that problem :)
Just a question (and I don't know too much about this). Is there any chance that certificate authorities who give out warranties could actually have to pay out on them now? Do any of them use OpenSSL?
I suspect this is a joke / troll
If he's working for a German firm now, it wouldn't be an NSA backdoor. Maybe the US isn't the only government with an eye on developing these exploits.
How to make a custom share tweet button and know when the user tweeted
I personally incline toward - memory safety in C is hard. We have had enough of those bug pop on their own to need encouragement. Whether interested parties knew of it and use it as a key towards all you can eat intelligence buffet is another story.
MOM is ISRO's first inter-planetary mission. I've been following ISRO MOM since its launch - those orbit raising manoeuvres and Trans-Mars Injection were a nail biting experience :) Wishing them best of luck. Eagerly waiting for September 2014, for Mars orbit insertion.

Here's a nice interactive animation of NASA MAVEN and ISRO MOM spacecrafts. It fetches real-time data from NASA JPL HORIZONS ephemerides:

http://sankara.net/mom.html

By the way, for space/rocket enthusiasts out there - ISRO will be doing a sub-orbital test of their next gen "monster rocket" GSLV Mk3[1] in June. It will carry a Crew Module[2] as payload. This will be interesting.

[1]http://en.wikipedia.org/wiki/Geosynchronous_Satellite_Launch...

[2]http://en.wikipedia.org/wiki/ISRO_Orbital_Vehicle
AJA Debuts CION: 4K/UHD/2K/HD Professional Camera
Swearing isn't required for passion. Martin Luthor King didn't have an (expletive of choice) dream, he just had a dream. There are plenty of people who care about their work and manage to express that without swearing. Similarly there are plenty of people who swear about stuff who may well be committed but it's highly questionable about what they're committed to and whether it's to the benefit of the project / team.

If someone does swear (and as it goes, I'm fine with swearing for emphasis and swear way more than I feel I should) they need to be aware that some people find it offensive and that if they don't moderate their behaviour it may be taken very personally which can result in barriers between colleagues and / or low morale.

You can choose to say that that's the person reacting's problem but if you do so you need to be aware of the price that comes with (that they're working in an environment with which they're not completely comfortable which is unlikely to get the best out of them). The alternative is that the swearer moderates themselves (with which they in turn may not be comfortable).

Obviously the better you know your colleagues the more leeway you have. If you've built up trust and togetherness overtime you can get away with anything but even then you need to consider what happens when new people join the team.

But ultimately this is about people and where it's about people there are no absolutes - what works for one group will be kryptonite for another.
Cheers pal! that's a hacker with bleeding heart ! Well done.
Van Vleck Turner & Zaller LLP specializes in all aspects of California labor and employment law.

It would be surpising for a law firm to publish something blatantly obtuse on the subject.

More likely, the departure was negotiated with a non-disparagement clause and a payout.

A legal action by the disgruntled employee would be terminal for mozilla's mission and brand. The could not risk a trial--it would be worse publicity--so they would settle. But this should have been anticipated and already settled, however. This is why HR people are employed and why executive failures are typically quiet.

On the merits, there is public evidence that The Mozilla Foundation chief executive was publicly hostile to the departed executive of MoCo.Due to the corporate structure of mozilla, the Foundation executive can be hostile to MoCo ceo without being in a position of legal unsubordination.[+] Which basically render's your point moot.

_________

[+] The foundation is the 100% owner (and thus in a Parent-child relation) of MoCo.
Amateur hour at AWS
In 60 seconds, the "10 Reasons Java Rocks More Than Ever" series
Sure, so long as the bug is a genuine bug and not a misunderstanding. Debian's openssh valgrind warning springs to mind. Crypto implementations can be subtle and non obvious. Maybe it's crap design for that reason, but it seems like it's what we've got to work with currently.
Meet Silicon Valley's 28-year old whiz kid
An awesome list! I saw this list on stack overflow before it was transferred to Github. It really does save you loads of time as compared to searching for books using Google.

Another fantastic resource, http://pineapple.io/

Edit: not sure why i've been downvoted? is it because I recommended another resource?
It's possible to define a subset of C++ that can be statically verified to not have this sort of problem. This can also be done with C, but it's more difficult. There are actually people who write in overrun-proof subsets of C++.
That's quite good, thank you very much! It's clear a huge amount of effort went into creating it.
Reading this comment made me think the demo would be laggy on my already slow-almost-burning old 2008 Macbook (not pro). But it was very smooth here.
I don't know where to go look (mailing list archives? meeting minutes?) to find any discussion about this extension (I'm woefully ignorant of Internet standards processes), but it would certainly be nice to review that discussion.

Given the rather dramatic differences that need to occur in a protocol designed to work over unreliable versus reliable transport, though, it seems like a bad idea to try to keep "parity" between DTLS and TLS. I can see how somebody might see it as "elegant" to do so, but I'd argue they're different animals solving different problems.
I believe there's another one that occurs every time a heartbeat request is received, and was just as surprised that they had to allocate a new buffer, copy the payload over (which is where the bug was), basically construct a new message, when they could've just validated the incoming message, changed type + padding, and sent it back out using the same buffer. Heartbeat extension is only slightly more complex than an echo protocol.

It's probably much harder to remove the one on reception due to how the rest of OpenSSL is written, but at least from a glance at the code, a lot easier to rid the sending one. In terms of design, the simplest implementation would be malloc-on-receive + modify-and-send; a little better is an expanding buffer that's allocated once but reallocated if necessary, and to me, the way it's currently being done is the most complex, inefficient, and error-prone.

Having many unnecessary dynamic allocations tends to be a trend I've noticed most often in C/C++ code written by programmers with a Java background. Not saying that this necessarily applies to heartbleed's culprit, but the general trend of excessive complexity is there.
Yeah this is big to me. Even for system utilities. I use an OS X volume booster called "Boom"(http://www.globaldelight.com/boom/) (which is nonfree but worth the $7) and it, by default, hijacks cmd + +/- for zooming in chrome. Please don't do this!
Top 5 Ultimate Warrior Matches: Relive the Moments
It is, however, reasonable to assume that "they" are as smart as we are, so "how would I do it" analysis is quite called for.
One of my professors likes to say "consulting is like doing drugs."

You're hooked and you can't get off :) .

And yes, he definitely advocates productization strategies.

He ends up his spiel by saying "say no to drugs!" :P
Real time communication can use ephemeral keys. A Skype-like communications tool could be open, verifiable, as simple as Skype, and at least as hardened as Skype was before it was castrated.

As for web-of-trust for store and forward communication, social networks are an great way to provide secure key-signing.
The army size is currently 185k including reservists and does indeed not include all able bodied men anymore - many choose to serve 360 days in civil service instead, as do I (however I've done my first ~150 days in the military before switching over). Most stay active in the army for about 8 years (150 days academy for regular soldiers, after that at 6 x 3 weeks repetition courses). In the 24 years since introduction of Sturmgewehr 90 I would expect 150k / 8 * 24 = 450k rifles. Pretty close, makes sense that they've seized production for now.

Now, about the classification: I'm curious about this. Would you say, a rifle with only 20 rounds and the size / preciseness of the StGW 90 is an assault rifle? I think it's not so useful for that role - in fact the close combat troops use shortened versions.
I think the warranty only covers losses that occurred during the use of the certificate. If it wasn't limited liability, Heartbleed could have caused a "Lehman Brothers" style default for all CAs.
"Reconstruction" step looks like a source of unjustified inefficiency: why reconstruct state by traversing proc and doing lots of system calls instead of capturing all data in the first place where it's much cheaper to do?
Open Source To-do List Managers
Russians did this tactics against Napoleon. It is flat country, so they effectively had to burn down half of their country.
Thumbs up for clarity. There's some inherent complexity to having different rates borrows pay vs what lenders receive, but having interest broken up by both flat rate and APR and posting the registration fee in the same place makes it easier to understand.
If I check your submissions I'm reading:

[dead] Spotify: Thoughts/complaints about new Your Music feature and Stars (spotify.com)
1 point by jimeh 55 minutes ago | flag | discuss
2.[dead] Show HN: stub.sh – Stubbing helpers for Bash script unit testing (github.com)
1 point by jimeh 17 days ago | flag | discuss
3.[dead] How I Explained REST to a n00b (gist.io)
1 point by jimeh 368 days ago | flag | discuss
4.[dead] Pure Awesomeness (cu.ms)
Pluralsight acquires Digital-Tutors
Also see this explanation from Troy Hunt, which hasn't made the front page. https://news.ycombinator.com/item?id=7558597
I like how the example idea is ripped off three.js: http://threejs.org/examples/#css3d_periodictable ;p

But seriously, this doesn't look very release-ready.
Slightly off topic, but do you know whether the paid developers of Linux work on the core kernel, or on device drivers?
That use to be true, but isn't anymore.

I'm pretty sure that most of them have been removed by now and new bridges and tunnels are no longer built with explosives.

Wouldn't it be just as easy these days to just fire a few missiles at the bridges and tunnels if another country is invading? Yes, and it's much safer and much cheaper to maintain.

I remember reading about a tunnel fire that could have set them off and would have been disasterous. http://www.swissinfo.ch/eng/archive/Lucerne_yields_up_explos...

http://www.oltnertagblatt.ch/panorama/vermischtes/armee-holt...

https://en.wikipedia.org/wiki/National_Redoubt_(Switzerland)