skysight-inc/HackerNews huggingface dataset:
I upvoted your comment, but the reality is that the grey area is easy to find.

Consider apache's httpd.conf. It includes support for fairly advanced features like conditionals, scopes, and sub-configuration of 3rd party modules. In some environments, for example, it may be quite sensible to include some bits of what might technically be considered "business logic" in something like URL rewrites.

Consider DNS records. Not named.conf, but the actual zone data itself. Is that configuration or is it data? Do you check zone files into a configuration repository with your other files, or do you treat them more like a database to be modified on the fly and just back it up periodically? It probably depends on how dynamic the records are expected to be.

Consider emacs: it uses lisp as its configuration language.

On the other end of the scale, you have very small single-purpose scripts that are easily hand-editable. If you have a script that's no more than 1K, maybe you simply put an "options" section at the top with some defaults that can be changed by modifying the code directly. Or maybe your script is so small that even that amount of overhead is pointless.

It's important to remember that just because there is a grey area doesn't mean that just because you might stuck there, everyone is. But it doesn't mean it can't be confusing sometimes.
Yes, smells more of a cosmic ray hitting the sensor. They're quite a bit more common on Mars.

Also, from what I read this was first noticed on a website called "UFO Sightings Daily". NASA isn't giving it any thought because there's nothing to think about.
Thanks! Got it!
Vulnerability in Microsoft Publisher Could Allow Remote Code Execution
From what I've learned, it reports back if it gets something, when it should get nothing.

How vulnerable a specific site is depends on luck. Yahoo must have broken a whole bunch of mirrors because total amateurs can send mail.yahoo.com a certain blob of code and it has a good chance of returning a stranger's password.
The claim in ideas is usually boilerplate to ensure you don't go into competition with your employer or create a service that addresses some shortcoming in your employer's product/service. An employment or startup lawyer would be able to give you a good perspective on how such disputes actually play out in your state, as well as the probability of such a dispute. Since you say it has 'nothing to do' with what your current employer does you'll likely be OK; I would expect that after advising you a lawyer would then offer to write to your employer's legal department to explain your position and ask for their OK. This would be better than making a casual inquiry yourself because it would create a proper legal record of communication from the outset and avoid arguments about who said what later on if a dispute should arise. Many lawyers would give you a short consultation for free or for a minimal fee, since the potential income from business development later on would be much more valuable. If you're not sure where to find a lawyer, call your state bar. If you're in Silicon Valley then then there's no shortage of them.

Don't DIY and put it in your wife's name; in the event that a dispute does arise that's exactly the sort of thing that a plaintiff would point to as a denial of honest services, and courts take a dim view of such legal 'workarounds'. If you absolutely insist on DIY then do everything in writing, send emails from a personal rather than business email address etc. You can be circumspect (eg say you'd prefer not to say what your traffic is, should they ask) but don't ever be dishonest - again, when a dispute arises the first person to lie is often the one that loses in the end.

I'm not a lawyer, and I repeat that you would be far better spending a few bucks getting a professional opinion than trying to wing it.
Yep the line itself is not editable but the string argument to player.removeItem is editable.

The code as given:

player.removeItem('greenKey');

My "solution": Append the following text at the end of greenKey:

');player.pickUpItem('greenKey','

Final code:

player.removeItem('greenKey');player.pickUpItem('greenKey','');

But currently this hack no longer works.
The article states that the initial "Holy s*!" moment was five years ago:

> Over the next five years, Harkema's team applied electrical stimulation to three more paralyzed men...
Adobe launches Lightroom for iPad
"But existing hardware acceleration on mobile web isn't that bad."

Mobile users are extremely demanding, in my experience. They DEFINITELY notice the difference between web & native interfaces. When mobile is accounting for huge %s of traffic and revenue, its a hard sell to settle for good-enough for philosophical issues. Particularly when the competition isn't.
I fail to see how Ruby is more dynamic than Smalltalk as I am not aware of any Ruby dynamic feature not present in Smalltalk as well.

Are you aware that Hotspot was born as a Smalltalk (StrongTalk actually) JIT compiler?
HN very much has a hive mind. HN used to have great articles all the time. Now it feels like reddit. Every day tons of great articles slip into obscurity while HN upvotes the meme of the day (Snowden, NSA, 2048, etc).
Compiled from source.
I changed it to take out the sensationalism. If anyone suggests a more accurate title, I can change it again.
Two years later, they might want to reconsider the .is TLD. It's about $50/year and open to international folks, however they do have some unique NS requirements[1].

[1] http://www.isnic.is/en/domain/req
Every Mongo release announcement I hold out hope for an improvement to database-level write lock, and every time I'm disappointing. Considering this is probably the #1 or #2 complaint people have with Mongo, I'm surprised it hasn't been addressed ahead of some of the other features that have made it in to recent releases.
It's 150% of Iran's military budget in one year. Split that over 10 years and it's 15% of Iran's budget. Granted there would be maintenance costs and it's not 100% automated plus you they would need storage even if there taking off from dirt runways etc. But, they don't exactly need 100,000 to be a solid threat either.
Yes, this is a complete non-event, probably a radiation artifact in the sensor. The following photos were taken at the same time by the left and right navigation camera, respectively, and only the latter shows the bright spot.

http://mars.jpl.nasa.gov/msl/multimedia/raw/?rawid=NLB_44979...

http://mars.jpl.nasa.gov/msl/multimedia/raw/?rawid=NRB_44979...

Images digged up by redditor CurtisLeow at http://www.reddit.com/r/space/comments/22g13b/rover_captures...
Totally agree, but the parent said that AirBNB gets 80% of the value (revenue) of a hotel chain. That's just false — the host gets ~85% of the value, not AirBnB.
People do realize that you can have multiple pages on a website right?

It doesn't have to be one long page, that design was deemed terrible 2 decades ago.
Greed Is Good: A 300-Year History of a Dangerous Idea
Interestingly, I just got that for HackerNews, but not on a second try. I thought they were using CloudFlare anyway?

(And yes, you interpreted that correctly. Notice that this online test does not request even a fraction of the 64k possible, and you can always repeat it to get more)
Sorted by category:

http://pastebin.com/raw.php?i=Uixgv5Hr
YC is seed stage; you expect a higher failure rate and higher returns from your successes.

Basically, you can break VC firms down into categories based on the size and timing of their investment. Typically you have the following:

* Seed / angel funds. <$1M investment, 90-99% failure rate (failure rate is higher the less you invest). Astronomical returns because they buy equity when it is at its cheapest; a "home run" here can net you several thousand times your initial investment. Your founders are often very raw and you have to work with them on basic business fundamentals.

* Series A funds. ~$1-3M investment, 70-90% failure rate (though this is dropping as more funds move from Series A to seed funding.) Probably the riskiest of the bunch since you're placing pretty big bets on a lot of companies; this is typically what people think of when they think "VC". Returns for a "home run" are 10-100x initial investment. Your founders think they know what they're doing but they don't; good VCs will help the founders through their network and by letting them make enough mistakes to learn from.

* Growth funds. $10-25M investment, 50% failure rate. These guys go after companies that have proven a market exists and there's an opportunity for huge growth if only they can scale. Still risky because scaling a business is hard. Returns for a "home run" are closer to 10x, but these guys can pull their funding if things are starting to circle the drain so a "failure" doesn't always mean a loss. Good founders here are starting to realize they are in way over their head and ask their VCs for help.

* Pre-IPO funds. $25M+ investment, very low failure rate. Returns are relatively low but also much safer: investors here are basically funding you pending an inevitable IPO. This is basically your traditional private equity firms at this point. Founders here need guidance on how to take their company public (legal, cultural, etc.) -- hence why PE guys who are often ex-investment bankers play in this space.
Adobe issues Flash security update
An online tester: http://possible.lv/tools/hb/
Heartbleed test
Others may be able to give you general advice, but it's important before you make any actual decisions to have someone also review the specific facts. Especially if you are planning to transition your employement relationship. EG, even if you keep this as an external side project you may want to protect it going forward if you take another full time position (which you may specifically negotiate in your terms of accepting and offer).

Some of the variables involved: You will need copies of your contracts and/or employee handbook (or similar) as appropriate. Also relevant may be thinks like using company resources for your project. And similar along those lines. Again, its best to focus on being organized with the information you would need to discuss this with someone knowledgeable, rather than try to anticipate what such a person may say.

It may be better to solict advice and recommendations for contacts that may be relevant. The Lawyer would need to review your terms of employment currently. So, this is one step you can take now if you haven't already.

TLDR: This is (likely) a serious question for a lawyer.
Great ORM. Has undoubtedly made MongoDB millions by now.
Things you never hear successful people say
The Rust folk tend to avoid talking in terms of purity nowadays. Graydon had a good writeup of the pitfalls: http://thread.gmane.org/gmane.comp.lang.rust.devel/3674/focu...
This is most likely because I know absolutely nothing about space exploration but I found the line below to be the most interesting piece in the article. (because as posted already, I'll just chalk this "strange light" up as a photographic anomaly.)

> "Arrival at this location means Curiosity has driven 3.8 miles since August 2012, when it landed inside Mars' Gale Crater."

It's crazy for me to think about this in comparison to Earth.
Imagine somebody dropping a robot on Earth before any known life and trying to make sensible conclusions about what the entire planet was like by only exploring 3.8 miles...
Strapdown.js – instant and elegant markdown documents
There are two known unbreakable encryption schemes, the other one is Shamir's Secret Sharing.
OBJ is simple enough that I wrote an OBJ import/export/view tool for an entry-level computer graphics course. That's pretty damn awesome, I can't think of too many other file formats that simple that are useful in so much industry software.
Crowdsource the Pokemon Challenge
(Frequency of LastPass.com login via web page on insecure network) * ( odds of MITM attack on that network) = scary low odds
Windows XP support will be available after April 8–just not for you
To be fair, not where you think he got it from (it seems). For example, in Ubuntu you download all packages over plain HTTP. Worried yet? Don't be. Let me tell you why:

A Debian repository (a repository of .deb packages) is a directory containing *.deb files, a list of packages in a file called Packages and a description of the repository in a file called Release. Every package listed in Packages includes the filename, the name and version of the package, and several checksums of the file (typically MD5sum, SHA1, SHA256, and SHA512). Thus if you trust Packages you can verify the integrity of the .deb file.

Why should you trust the Packages file? Well, it's checksums are listed in the Release file.

Why should you trust the Release file? Because there is a signature of it available in Release.gpg file. The signature is created by the distribution maintainers.

How can you trust this signature? Because your initial installation ISO, etc. came with the public key of the distribution maintainers which APT uses to verify all the packages. How can you trust the ISO you used to install it? Because presumably you verified the checksums of it when you downloaded it, and you obtained those checksums over a secure channel at the time of the installation.
Most VPN providers offer openvpn which uses openssl and thus is vulnerable as well.
This is scary:

# ./hb-test.py mail.yahoo.com |grep -A3 -B3 pass
You cannot do external IO in a consensus system.

(This is one reason why I think a lot of fancy contracts are best done using a quorum of external oracles, since you have no better security than that in anything that does external IO, and it's much more scalable (and works great in Bitcoin already))
Next Akai drum machine will run on Windows Embedded
It’s time for real change
I find your ideas worrisome indeed. To call homosexuals a threat to society has no merit- not an iota! It's both unfounded and callous to compare it to criminality.

No doubt you disapprove of Brendan Eich's treatment. Normally, I would disapprove of mob rule as well. But if he ever held only a fraction of the hatred and stupidity you harbor, then with all vindictiveness I say that it is good that the mob stormed the castle and cut off the kings head. Put his head on stick, as an example to others like him. As long as the homos have the upper hand, let the shoe be on the other foot.

I hope you remember these moments, should the day come, when someone makes the declaration that something about your nature, say your religion, is now criminal. You could have lived and let live but you didn't. We are winning and you have not made an ally in me. Gay marriage opposition is falling like dominos. When the twitter mob comes for you, and I hope they do, I will not be there to defend your rights.
This Robot With ‘Soul’ Gets Frightened When You’re Angry
The bug also leaves the client vulnerable.

Has anyone a link to test client implementations?
(E.g Browsers,... Windows,... Android, Apps, etc)
Ah, the old middle-management excuse: "We don't have time to write tests!"
I work for Bloomberg. (And yes, I verified that web guys didn't mind sharing the numbers :))
Can you elaborate for people who don't understand the feature? Is the aggregation result large because of grouping?
Tesla Creates A Lease Program For Small Businesses
But he started it first! </joke>

Message received, thanks for the reminder.
Well, that's rather unfair to keepass. Presumably you can install keepass the same way you install your browser. If the browser is backdoored you're hosed anyway. In fact, if any process is backdoored you likely hosed.
Junk marketing spam: 'if you're still stuck on XP, why not move to a Chromebook?'
Getting Funding to Attend and Speak at IT Conferences
An apparel client in the US over the last 90 days:

IE6 0.07%
IE7 1.33%
IE8 19.44%
IE9 18.67%
IE10 16.24%
IE11 44.25%
Twitter Rolls Out New Web Profiles for Users
BuzzFork Shuts Down
did you contact your account rep or go through support? if the former, that makes sense. ours is traveling..
No IPv6 support.

Meh
That seems a bit unfair. Are open-source participation and spec work really analogous? How often are programmers asked by a client to complete a project, so the client can decide afterwards whether to pay?
Why couldn't there be small metallic wheels in the barrel making contact with the projectile? Wouldn't that prevent wear?
Or you could just use Google Surveys or Survey Monkey, which are built for this purpose.
Distributions are signing distributed packages with trusted keys by PGP. PGP signing is a fairly standard mechanism by which somebody can prove that he packaged that software.

The interesting bit is ... if a web of trust can be established, this is far, far more secure than distributing binaries by HTTPS. That's because the private keys with which those packages get signed DO NOT have to be distributed or installed on any public servers on this internet and thus this mechanism is invulnerable to exploits such as Heartbleed. And in the case of Linux distributions, this web of trust can easily be established, because the package maintainers and software authors know each other.

In the right context, the web of trust model can be much more secure than SSL/TLS, because SSL/TLS requires X.509 certificates that have to be issued by a central authority - and we'll always have problems with central authorities that go rogue or have their root keys stolen. And you can't rely on the central authority model if you want protection against the NSA. Too bad that PGP signing/encryption isn't too popular, since the web of trust model only works if there are enough people vetting for each other. But for Linux distributions it works just fine ;-)

Here, read more about it: https://en.wikipedia.org/wiki/Pretty_Good_Privacy
The issue I have with LastPass is that they claim to never see your master password. This is not true in any sense. Open their website, log in using your master pass. You just submitted it to them. As a secondary thing, pick a random password from the list and say "Show me the password"; it will ask you for your master password. The extension you install has nothing to do with this: you are entering the password directly into their web page and interacting with their JavaScript and their server-side code. At this point they have your master password.

I understand why they do this: it's convenient and lets you share/give passwords to others. But this feature is 100% incompatible with the claim that they never see your master password.
"I know! I'll use a PRNG to create the one-time pad on the fly!"
Yeah I've brought it up to management. The lead dev on my current assignment doesn't like to use Skype because it "slows his computer down"

I tried to get a yammer site going but it died as well. My boss said that he prefers face-to-face interaction so I got a high-quality webcam but it's already enough of a pain to make sure he has his microphone plugged in.
Brand identity: What you need to know about color
Technically a TTP is not a OTP.
Loading an https://APPNAME.herokuapp.com page, I'm seeing a certificate (sn:"0E:3E:94:7F:C0:64:D7:4A:52:B1:38:D7:71:90:88:1F") with an "Issued Date" of "1/20/14"... which doesn't sound like it's been regenerated in the last 24 hours.

Am I interpreting the certificate info wrong? [edit per official answer below: YES] (Are fresh certificates sometimes given much older start times? [edit: YES])

This blogpost doesn't clearly address *.herokuapp.com HTTPS service, as opposed to the custom-domains "ssl:endpoint" service.
Or a combination of both?
Text formats can be downright huge, however. I've worked with quite a few meshes that exceed 100s of megabytes when stored as obj, but compress down nicely in binary. What we really need is a simple binary obj file. It would be a no-brainer to develop a binary variant of obj. This would be marginally more difficult to parse, but drastically smaller. Either that or convince Autodesk, SideFX, The Foundry, Blender, and others to read in .gz'ed versions of obj files.
Seems to me that's not evidence for or against a hive mind, its evidence that, whether or not it has a hive mind at all, the aggregated preferences of the current HN user base don't align as well with your preferences as those of the user base did at one time in the past.

But having a user base whose aggregated preferences disagree with yours more often than they used to is no more evidence of a hive mind than having what you perceive to be "great articles all the time" is.
Note also that the lock blocks readers, and that writes are given priority over reads. Consequently even small volumes of writes can have major effects on readers.
Why would anyone pay that much for a domain? Are there any notable sites using it?
Agreed, I guess these guys have a different definition of operations. This sounds more like management/compliance or maybe they should have stated Business Operations. That might might carry a more accurate description in the tech community.
How to Cut Hair using the Alpha Channels – Photoshop cc Tutorial 
In this tutorial, you will learn how to make advanced hair selections using the alpha channels. And how to blend two different images together, using advance masking and the adjustment layers.
Love the "call back who you just called" feature. Just imagined stalkers loving this feature.

Anyway, nice to see a unique point of view at an age old problem!
No, but your github.com password may be compromised.
Why the 'Next Silicon Valley' Is Always Silicon Valley
Then this is anti-advertising for Angular.
F2 1.3.3 is out
KeePass by itself is not a replacement for Lastpass since it lacks (among other things) the ability to sync across devices or support mobile platforms.
English.club sells for $17,500.
Context has been a buzzword for quite a while. This is that rare app that uses it in a usable, seamless manner. Very impressed.
Heck I'd even be happy for them to do locking on a per file basis. (For those unfamiliar with mongodb, the actual database storage is broken up into 2GB files.)
"This vulnerability can be remotely exploited to leak encryption secrets from Heroku applications, allowing an attacker to retrieve the private key used for SSL encryption and decode data obtained by intercepting traffic"

Does anyone know if this is "actually" true?. By looking at the bug it seems you can dump up to 64 bytes at a time from the stack. Given that the attacker doesn't control were from the stack at all and looking at the code the top of the stack is probably holding some random structure, is it really possible for the attacker to retrieve the private key?

I just want to be sure before spending a bunch of money to replace re-issue all certs.
I dont understand why they wouldn't let you download the files, unless its just they dont want to pay for the bandwidth.
Gandi now has offices in the USA and is obligated to spy on you and take your domains without notice or appeal and all the other USA PATRIOT garbage.
Or as Steve Jobs put it, PCs will be like trucks and phones will be like cars. I don't think he was wrong.
How do you maintain such a library? Do you devote a portion of your house? I always thought I had a pretty sizable library, but its probably <1000 books (and probably <500). As of now, its basically one book shelf with 5 rows, 2 of which are filled with paperbacks and two books deep (the other rows are larger books, including textbooks and only a single book deep) and another drawer filled with things that are in my reading queue, maybe 50 books total. I'm still rather young (I just graduated undergrad in December), but I can't imagine having a library of 10,000 books without a sizable portion of my life revolving around maintaining such a monstrosity. It must have cost you a small fortune to acquire 10,000 books and a room to house all of them in anything but cardboard boxes.
Microsoft: Apply Windows 8.1 update or forget about future updates