skysight-inc/HackerNews huggingface dataset:
It only takes one person on any of these teams to leak the details and the cat is out of the bag, and then the scramble is on.

Considering the circumstances, it appears that the process that was followed with regards to the release was as flawless as it could have been.
Oh come on. People that know of the pitfalls build useful abstractions that keep someone falling in from burning down the house. Look to the Linux kernel for evidence of C being used by responsible people, not morons that can't rise above hacking on raw memory straight out the socket.
Oh those wacky congressional staffers.

Also, they should Google the creation date of the internet. :-)

"(2) NTIS was established in 1950, more than 40 years before the creation of the Internet."
Please, it can happen in any language, it depends on how you write it. If you do not sanitize your inputs you get sql-injected, and is this fault of SQL or you? I agree it is harder to write C code safely, but this was a stupid bug, not actually a C incompetence. You could allocate a large buffer in Java, and you could use `System.arraycopy(array, 0, part, 0, size);` instead of OpenSSL: `memcpy(bp, pl, payload);` both lacks only a boundary check and language provided checks will not help you in Java. Java is given as an example language that provides boundary checks. It applies to others as well.
Forgive my ignorance, but isn't openSSH more or less a done deal? How many man hours are they honestly putting into that now-a-days?
Isn't it premature to be comparing sysdig to DTrace?
Internet isn't harming love of 'deep reading', it's cultivating it
Always respected EFF's work. If there's anyway I can help you feel free to reach out.
The issue is more software architecture than programming languages. DJB writes plenty of C, and manages to create secure systems.

If you follow the principle of least privilege and separate things into processes, then you can write secure systems in C. Granted, there is friction with this approach on modern Unix, but it's more than worth it, and much more likely to get done than rewriting all of OpenSSL or OpenSSH or nginx or Python in Rust or whatever.

See "Some thoughts on security after 10 years of qmail 1.0":

http://scholar.google.com/scholar?cluster=981457031544057079...

People can and do write insecure code in any language. The most popular ones seem to be the most insecure -- C, PHP, and JavaScript -- and that doesn't seem to be coincidence (liberal languages have advantages as well as diadvantages).

Systems have to be designed so that tiny mistakes aren't catastrophic, and rewriting everything in a different programming language is probably the most costly way of achieving that goal. In other words, it's an economic impossibility.

See also: http://www.cl.cam.ac.uk/research/security/capsicum/ . This works with existing code.
>One of our negihbour counties are being invaded by Russia.
Excuse me, what country?
my main point here is that there is space between $50 and $100,000. Assuming OpenSSL doesn't have infrastructure, my suggestion is that they try to charge as much as they can and still stay under the level where you need sales.

$1000, from experience, is below the level where you need per-user sales.

>Selling something online, could work but the question is what do they get for their money? a t-shirt, name on website etc. Though in a world of kickstarter it could work if done right. This is a $50/yr deal for most which is 20k people to get to that same $100k with a lot more community work to keep up with those people.

http://www.netbsd.org/donations

http://www.openbsd.org/donations.html

https://www.freebsdfoundation.org/donate/sponsors

http://mirrors.centos.org/sponsors/

I would suggest that for corporate sponsors, you make it more clear than Theo does that you are buying advertising, not donating money. I think selling a "I helped pay for software you use" website badge is a good way of doing that... but look at the mirrors.centos.org sponsors page. You are very clearly buying advertising space, in that case.

Heck, the CAs charge a lot of money for badges that mean nothing; The OpenSSL people could create a similar badge. "OpenSSL developer club auxiliary" or something.
There is just no easy way to handle this and someone had to make the decision on who got what.

The reality is that the open source community isn't vetted like an intelligence agency when it comes to holding secrets to their vest. It only takes one person in all those OSS communities to leak to the press about something of this magnitude and then the result could be even worse. The fact that this was kept under wraps for 12 days (that we know) is a testament to the folks who made the decision whom to inform.
When Is The Best Time To Get Lasik?
I'd really love for Amazon to make a phone that uses the same eink screen as the kindle paperwhite. Just a basic, no frills phone with a similar long lasting battery life to the paperwhite.

No doubt if they are planning a smart phone though it'll be more similar to their Kindle Fire tablets which is fair enough, but hey I can dream..
Inbox Attachments to Dropbox
Jon Karlung? I have a lot of respect for that man, and love how he is active in the debate.
It is because of secondary effects -- larger supply of foreign workers drives down the wages, now and in the future.

Except the whole "software eating the world" thing that might be the exception that proves the rule.
You just can't make this sh*t up: the "No Fear Act".
An Automated Theorem Prover in Python
That Pretty Much Wraps it Up for hammers
I love hammers. So damn much. I enjoy using heavy hammers.

I love having some nails and some wood and the flexibility to do whatever I want. I love that it imposes a discipline that prevents me from using that flexibility in stupid ways.

But between hitting your finger and bent nails I have to wonder if my beloved tool should be retired — at least for everything that could be a carpentry issue. (Which is potentially everything, I suppose.)

There are two things that make other tools better for these things: 1) in many tools these particular bugs are impossible, and 2) there are often better tools that can prevent those particular flaws from happening in a chunk of wood.

The finger hitting bug is a major hassle. What worries me is that the next time something else might happen — maybe someone hits their toe or breaks their hand. (Or worse.)

If we’re serious about protecting ourselves from pain and other malevolent entities, maybe we have to move away from hammers.

(I suggest this with great reluctance. And a realization that the cost of this would be huge.)

In short, this is click bait and stupid. C is a tool, it's up to the people using it to make sure the tool is used right. What we need is something closer to build codes for software. Right now it looks like some people think that building sky scrapers out of marshmallows is a wonderful idea and anyone pointing out that this is a bad idea is called a Luddite.
Orbital animation made with a single CSS element, used as a logo
sorry for not following the latest news in patent troll world :) but that new agreement would allow samsung to join later on, maybe?
Sure, but that's bounded by the size of the buffer in Java. A bad boundary to the arraycopy in Java will throw an exception, not give you the contents of memory beside the buffer. These are not comparable failures.
You can login to Russell's selinux debian box and see for yourself. He gives the hostname and the root password here:

http://www.coker.com.au/selinux/play.html
Most previous outbreaks have been in rural areas, though. So depending mainly on the mortality for containment doesn't sound like the most prudent strategy.

The incubation period of Ebola virus can be quite long (more than two weeks) which is more than enough time to spread the disease geographically far. EVD/EHF is also contagious during the incubation period when no symptoms are present.
I know very little about LNP delivery -- what's the cause of the toxicity?
Right, and most crashes on the highway aren't fatal, and aren't in to immovable objects. So, I kind of don't the point of the comment.

Surely sometimes they are in to immovable objects, of course, and those ones are pretty bad.

Even worse are side impacts on trees, electrical poles and light posts.
While we're handing out reading assignments, I'd encourage you to read something that wasn't assigned in junior-high civics class; perhaps Machiavelli? Political power has been exercised for millennia, and its nature is far closer to the caricature I offered than anything written in any newfangled constitution.

The point is that a constitution is not an achievement, the "unlocking" of which would transform a society in any lasting way. It might be more accurate to say that a constitution or similar document is an aspiration, but since few such have been fulfilled it's foolish to be surprised when we fall short. The fault is not in our constitutions, but in ourselves, that we are underlings. We knew when we built this monstrous war and imprisonment machine that it would be turned against us, yet we built it anyway.
When you refer the the "large install base" associated with Canonical, I assume you mean Ubuntu on servers. Lots of people do run Ubuntu on AWS, but Amazon never needed to own Canonical to make that possible.

The Kindle Fire OS is a fork of the Android Open Source Project, not Ubuntu or Ubuntu Touch.
I suppose "need" is synonymous with "desire" or "usefulness".
Large companies are made of many people who sometimes have different goals and ideals.
Only in your books would not accepting an official position qualify as groupthink. It's kind of hilarious. Oh, and Clapper lied because they made him, and thinking otherwise makes you a wacky conspiratard. Real mature..

Edit: Question for you - do you think there isn't a conspiracy here? Do you think the public has all the information about the legality of the executive branches activities? Because it sounds like Clapper was lying to cover his ass - but that's just conspiracy think.
I saw that wikipedia article too. The articles smells like BS. But, who is to say that intelligence is favored by evolution. If humanity is not careful, our ancestors could end up being intellectually inferior. For a more entertaining story that this article read "Galápagos" by Kurt Vonnegut.
You'd have to ask them. I'm not a lawyer, and don't have ambitions of being one, but they might have been concerned with such an action appearing punitive.
Exactly my point. An organization like the NSA can say "Oh, yeah. We've had great success. We can't tell you what it was, of course. Just take our word for it. What's that you're typing there? Don't want to tell us? It doesn't matter, because we already know."
> If this is true, and the NSA knew about the Heartbleed vulnerability, then how come the EFF hasn't been getting more log data showing the vulnerability being exploited against sites?

I don't know how common the "extensive TLS-layer traffic logs" the EFF is soliciting are. I know I don't collect these.

I'd imagine the NSA would use such things fairly sparingly so as to not blunt their swords. Using it willy-nilly increases the chances of someone going "huh, that's odd traffic" and discovering it.
"First, tumblr? Really?"

That was my first reaction too. I'm probably late to the party on this, but when I saw the tumblr domain I thought it was some kind of satire at first.
"Playfully destroying pigs or experiencing mind-numbing insta-gasms."
...more than 40 years before the creation of the [World Wide Web].

I think the internet, were it a person, would've been old enough to vote, if not drink in 1990.
OpenSSL Heartbeat Code
If it snows and you have kids at home, it's pretty hard to work. Especially if you have meetings.
See a master at work making original rolls at QRS.
http://www.youtube.com/watch?v=i3FTaGwfXPM

If was a fun place to see in the 70's after watching
my father rebuild our player piano.
Help us build a better marketplace – Listia (YC S09) is hiring web, mobile devs
Be the first Product Manager hire at ZenPayroll
Haha, well I started out as a warehouse worker at a chemical factory in West Virginia, where I worked for 7 years. We didn't have a parachute policy at the chemical factory, and given my experience with and without a parachute policy, I'd say Amazon's policy creates value on both sides.
If you leave, work somewhere else for six months or a year, can you come back at Amazon?
Turns out you were correct! I wouldn't have imagined that Lucentis would have such a impact on the numbers.
the capital G on www.Google.com is a nice touch that makes you feel extra good about the internet savvy-ness of our representatives.
Stem Cell Research for MS Kick-Started by Crowdfunding
So good. Center of Gravity is such a great track.
What's worse in guinea right now, is that anyone that is showing any symptoms even remotely related to the disease is quarantined with others with it. It sucks because what is the other thing to do?

The panic is spreading and people don't know what to do, hence why violence is now breaking.
TL;DR: This bill attempts to disband The National Technical Information Service (NTIS), which collects and sells information and research. The bill asserts that the agency is no longer important, since you can basically just Google it now.
And yet off the top of my head I was able to provide you with four programs/ways NSA has benefited the lives of US citizens. Why did you ask for examples if you were going to completely ignore them?
Plot twist, the NSA is sending all the data it has "collected" to aliens living on Mars via the Mars Rover. Now it all makes sense.
This is really, really cool. I'd love to see this in SublimeText but I doubt that it would be able to work as well as it does with Visual Studio.
The Naked Android – Google clamps down on Android forks
Thanks; I had misread that as NIST (National Institue of Standards and Technology) and was somewhat shocked.
Women priests in the Mormon church?
Will Galleries and Museums Ever Embrace GIF Art?
NTIS has compensated for its lost revenue by charging other Federal agencies for various services that are not associated with NTIS's primary mission.

So when a federal entity isn't providing enough revenue to the federal government, it can compensate for it by charging other federal entities. This seems like a very convenient way for government businesses to misreport their actual income - I'd like to see how much of the NTIS revenue actually came from the real market.
to prove a point
Interesting idea. I prefer to work with people in my local area, is there a way to filter on that? I'm thinking of ways to foster more cooperation in the local startup scene and a sub-set of something like this might be an interesting option. Just a thought.
+ Sponsored by senators Tom Coburn (R-OK) and Claire McCaskill (D-MO).
2 guys playing on 1 violin? AMAZING
They went on to: "Reports that NSA or any other part of the government were aware of the so-called Heartbleed vulnerability before April 2014 are wrong." so there's no weasel-wording going on here.
I'm not disputing, as I know nothing about this, but isn't the Apple V Samsung thing very similar to Microsoft V Android? Big companies throwing their weight around? Or is Microsoft hitting small guys?
NSA Said to Exploit Heartbleed Bug for Years
Fedor Indutny breaks CloudFlare Heartbleed challenge
This has been confirmed by Matthew Prince.
Show HN:  PeerInterview.com
Ruby on Rails developers needed
Hey guys,

Hope all is well! I'm looking for really talented frontend and/or backend rails developers to help me out with some projects.

I have a couple projects on the table and I simply cannot do them entirely by myself so I could use some extra help!

That said, If you are a talented frontend or backend rails developer and you're looking for work feel free to send me an email at pblogsltd@gmail.com and let's chat!

Cheers!
That's really tight. I'm very excited about the idea of everything becoming dynamic and code-oriented. Going into Photoshop feels like entering the dark ages these days vs. change-on-the-fly already-in-the-browser CSS3.
CloudFlare's Heartbleed challenge cracked
EBay study: How to build trust and improve the shopping experience
> I don't have to assume.

In this case I can sample. Now, my sample size isn't very large, in fact it's just one person... me.

Ah, yes. Very cute. Doesn't make a lick of sense. But cute.

> But don't you think you are taking a comment made largely in jest just a bit too seriously?

It's funny how, when something does not hold up to scrutiny, it was all just a joke all along. Then the person that performed the scrutiny was just an uptight person that couldn't take a joke. Yes. Very convenient.
What's your Twitter handle? I wanna retweet these, especially the #baseball one. I might even follow you if you keep cranking out these gems. ;)
like Yota phone , but simpler

http://yotaphone.com/
This has been confirmed:

https://twitter.com/eastdakota/status/454778897079734273
Just wanted to point out the hilarity of your typo: "we're not very nice when..." vs "were not very nice when..." completely reversed what you meant to say ;P.
excellent to see the Apple //e [1]
http://youtu.be/i3FTaGwfXPM?t=4m28s
"Held to the proper degree xenophobia is a normal, healthy instinct in all cultures"

That may be, but I'm not sure you know what the words "normal" "healthy" or "proper" mean.
Rewriting from scratch can be beneficial, take the V8 engine in Chrome for example.
For the JQuery, it is more about separation of concerns and keeping a maintainable an clear codebase. If all of your JQuery is in one file and somehow a small change to one part breaks another page's code that can be very difficult to catch/fix. It's just good form in general to separate it out.

You're also right about performance. Loading unnecessary stuff on a page is just going to slow everything down.

It's a great idea and also being a relatively new starter myself I can relate. Hopefully you can take all the feedback everyone is giving and make your project better!
I don't trust a cryptography tool that the NSA says is secure when they openly and proudly spy on US citizens. Centers of Academic Excellence? They are probably also involved in the School of the Americas. Just calling something a school doesn't make it a good thing.
"What's its temperature coefficient like?"

That reminds me of a common practical joke from EE lab in college (~30 years ago): take the "right" value of carbon resistor (probably 1/4 watt, I forget how resistance mapped to time delay), plug the leads into an ordinary 120v power outlet, and walk away.

As the current flows through it, it'll warm up a little. Because carbon resistors have lower resistance at higher temperatures, as the resistor warms up, it'll start conducting more current, which will make it warmer, until a few seconds or minutes later (depending on resistance value, ambient temperature, etc.) ... "bang!".
Slightly off topic, but this instantly came to mind - it caused considerable outrage at the time. http://en.m.wikipedia.org/wiki/Donna_Maguire
I got a private key without the LOLJK, but I'm 99% certain this is someone trolling me.

Still going to double-check though.
That was a lovely read, thank you so much for writing and sharing it.
This has not been confirmed, from the tweet: "Haven't confirmed used #heartbleed. Updates soon!"
Jeff Hawkins on How brain science will change computing
For spying. No one, least of all Snowden, is calling for an end to the NSA's spying days.
More likely it's the lower number of driving-hours per-person. The longer you drive, the greater the odds that something can go wrong. Germany, like most of Europe, has dense old urban cities and good transit infrastructure compared to American suburban sprawl. That means the average German doesn't spend as much time behind the wheel, if at all.

I wouldn't be surprised if Germany is substantially more dangerous per-driving-kilometer than the USA, but with far fewer driving-kms per person.

Also, remember that in many locations the "speed limit" isnt' really the defining thing that controls how drivers handle the road - many dense twisty urban environments are tight-enough to navigate that drivers instinctively take it slow and never even approach the speed limit. This tremendously reduces the odds of a fatality, although it does make minor scrapes pretty common.
I click on the demo and see lots of women's clothing. Maybe Hacker News is the wrong demographic for this?
> But, who is to say that intelligence is favored by evolution.

Well, define "intelligence".

Evolution seems to favor technology very strongly, and our models imply that it would. But more detailed senses for example isn't as strongly favored.
I went into Kelly services today to fill out my final time sheet and the rep said the manager told him 'someone who looked like me' was spotted on the property yesterday.

I was home all day and haven't set foot anywhere near there since the day the assignment was terminated. I am inferring the manager intentionally made that up to further tarnish the perception of me in the minds of the reps at Kelly. Maybe I'm just paranoid , but it sure seems like that. Anyway, if he did do that it seems to have worked by my perception of the Kelly reps response when he was speaking with me.

I don't even know why I'm typing this other than to point it out in Robert Greene fashion for all those uninitiated.
Remember to properly keep apart the annoyances vs. the dangers in your head. People being overly "polite" in intersections are merely annoying. People on the phone are going to commit negligent homicide.

As a driver, it's easy to mentally group all the frustrations on the road together, when some are just annoying and some are potentially lethal.
No, just straight out lying.
That's a no brainer. Hookers and cocaine. That's what I'd do as CEO of Dropbox.

Running a company at that size becomes very difficult, and lonely, when you're at the top. You have to assume there are many factors which will never be shared publicly. Until you're that person, it's a bad decision to judge.

Unfortunately most people have never been in that position and hence don't have the perspective to understand, which is why they immediately jump to their own fear-based conclusions of self-interest.

One might assume the amount of data involved, and multi-national interest in security, may induce the necessity to seek assistance from someone who has previously navigated those waters --- regardless of previous behavior.

The Chicago Cubs may be the worst baseball franchise in history, but if I'm getting into owning a major league team and the Wrigley Family has relationships and experience ---- it would be tremendously beneficial to have them on board -- even if they haven't won a World Series in over 100 years and make decisions I don't support.

My guess is they just need help navigating the insanely complex global landscape with the assistance of someone with experience and relationships.

Drew is a smart person who's done a great job building his company. Think that's going to change now? Not a chance. There are bigger forces at play here we'll never understand. Speculation, including mine, is futile.

To summarize, hookers and cocaine. That's what I'd do as CEO of Dropbox. ;)
https://twitter.com/indutny/status/454767565991325697

How do you not love this guy.
Look for building the full stacks of the app from the really down ground up. Any cloud hosting will be vulnerable.
If you can provide powerful in-house infrastructure and platform, you're good to go.
You might end up inventing a new security protocol, which is an interestingly big deal (http://ycombinator.com/rfs3.html) .