skysight-inc/HackerNews huggingface dataset:
The NSA has already proven that its willing to lie to the public, not just omit information or mislead, when its talking about something the agency considers related to National security. Of course it's still possible they could be telling the truth in this instance, and Bloomberg could have failed to properly vet its sources. However, taking the recent past into account I think most people would agree it is far more likely that Bloomberg is providing accurate information and the NSA is not.
Perhaps brand (and, specifically, water content) of bread plays a big role too. With the brand of bread I use I don't experience this problem (or maybe I just eat my toasts rather quickly?).

Also, paper critically omits condition of toast prior to heating - was it stored in the fridge or in the cupboard? Was is stored in vacuum packaging or not? How old was the toast from the manufacturing date? Also toast can be weighted before and after heating, and after removal from the plate to measure loss of water content (it's my understanding that water on the plate is actually condensation, and not part of the toast, but is it indeed so?).

Murray should seriously consider establishing Murray Institute of Toasting Research and addressing these important topics in subsequent scientific publications.
And you must be a member of this thought police that seem to be invading every aspect of out lives.
Paris MoodUp to MoodDown
Saint-Germain-des-Prés is known for its charming "cafés", what if something distrubed this tranquility
Toast sweat is on par with pizza sweat. As a pizza retains its heat for much longer than toast, I usually just put it on a rack or slide a large knife underneath to prop it up.
Cocoa for Web Services
Amazon is great for content, but not having the Google apps like gmail, maps, and so on is kind of a dealbreaker. Also, with a Nexus phone, Google keeps creating updates for it. I don't get the impression Amazon is so concerned with keeping things updated like that.
The NSA doesn't need to redefine "Vulnerability" or use any other jargon. When it comes to issues the government considers related to national security, they don't bother to hide behind convoluted language or misleading information, the NSA has already demonstrated it's willing to flat out lie to the public regarding such matters.
Either you're allowed to lie to congress when you're under oath or you're not. You can't have shades of grey or the law becomes utterly useless.
Exokernels tend to be a good idea for quite a number of things. In fact, all modern desktop systems use what is essentially an exokernel design in their graphics driver stack:

Rather than implementing OpenGL (or Direct3D or whatever) in the kernel, the kernel drivers provide an interface that allows user space to submit hardware-dependent command lists for the GPU.

OpenGL is then implemented as a very thin layer that loads a hardware-dependent user space library. It is this hardware-dependent library that contains the vast majority of the OpenGL implementation, including the shader compilers and everything else that is needed to build the hardware-dependent command list that is ultimately submitted to the kernel.
not being in a city doesn't necessarily mean you'll have fewer children. but it may mean you don't like cities, and your children won't like cities, and you may prefer living in a small tribe.
It was tongue-in-cheek. If Amnesty International hired Donald Rumsfeld for his organizational abilities, most people would question their commitment to protecting human rights.
I think that's the first 13-pages-long cheatsheet i see.
The files Snowden leaked seem to imply that the NSA is both all knowing AND incompetent.
Would really like to see an equivalent 'idiomatic' cheatsheet written by yourself.

It would be ideal for seasoned developers that want to quickly get up to speed on Haskell (such as myself).
> CIA and FBI had knowledge of variations of this vulnerability nearly 10 years ago.

Source?
The US is solely responsible for, to my understanding, most of the breakthrough pathology research in the past hundred years or so. No indication that is going to change. At least it's a hell of a legacy to leave.

Please do correct me if I am wrong. I am no expert in pathology.
>That said, the biggest downside I've seen with Ansible is reusable components

This was a major, major issue with puppet, too - although somewhat worse, in that the manifests were more unreadable.

One issue that ansible still hasn't really solved is the horrible if/then/elses you have to put in to accommodate RHEL/ubuntu/centos/whatever else differences.

I like that galaxy at least lets you specify which environment the playbook will run on, though.
AFAICT, here isn't really any benefit for most people. If you're using an Extended Validation certificate the revocation would remove the EV presentation in most browsers.

The only way you'd get a browser to totally fail to load the page in the case of a MITM that can block the OCSP servers is Chrome's CRLSets. Only a limited set of revocations are included due to space constraints though; mostly EV certs from select CAs and Intermediate CA certs.

A good solution to this problem would be short lived certificates, but that idea has yet to find much traction.

http://crypto.stanford.edu/~dabo/pubs/abstracts/ssl-shortliv...
http://dev.chromium.org/Home/chromium-security/crlsets
http://blog.spiderlabs.com/2011/04/certificate-revocation-be...
> This allows programs should have failed epically to run flawlessly on everything from Windows 95 to Windows 7.

The "upgrade through every version of Windows" videos show Reversi and MS-DOS Executive running on Windows 8. You do have to run 32-bit Windows, though, to get 16-bit compatibility.
After Bashing Facebook for acquiring Oculus Rift, finally there is something to show the hn people - thinking beyond the use cases previously thought will help bringing the technology closer to consumers. Oculus Rift use case of hardcore gaming is still alive and facebook acquiring is a good nothing so that people David and his team can invest time to bring their content Oculus Rift. Thanks David for showing us new uses for the Oculus Rift..
Today we learn about dew points?

This is no different than why you have vapor barriers in certain climates.

Without trying to sound dismissive, i was not aware there was a lot of experimentation here necessary to figure out the temperature at which the water would stop condensing on the plate again.

Still a fun article, of course :)
You should feel proud of yourself man. You've defied a lot of odds. Live long and prosper.
This Tower Pulls Drinking Water Out of Thin Air
This is a really interesting article and it touches on an recurring wish of mine that these newer, and for most part unused, security features actually get exposed in such ways that the end user/ owner of the hardware could routinely use them for their own purposes.
I would like to see the Tokay Gecko again, but this time walking in front of me 3D, that would be awesome. So not just nature, but science in this form.
It's less than ideal for sandwich toast, where you want to contrast the dry and crunchy toast with your moist and chewy interiors.
They could set up Visual Studio to not compile code that does X, so that current binaries that do X still work, but you can't ship any new versions of your product until you stop doing X in it.
I think that's trying to solve the wrong problem. The problem is that the closed, unbrowsable site makes it impossible for us visitors to tell whether it has any relevance to us at all, so we bounce right away. The front page has only very vague, general information and an unreadably small screenshot, instead of the actual projects and people which would solve the problem completely.

I think what the front page needs instead of what it has (or as well but right up the top) is a list of active, interesting projects like you posted here, and a link to browse all public projects.
I still hope this will be cross device as most of the stuff. I can still see myself using Sony's product as well if they go this direction.
The purpose in founding the NTIS was to ensure that information and research was available to U.S. industry, government, academia, and the public. This is especially the case for government-funded research, but also includes technical information from foreign and other sources.

It's like saying you don't need the U.S. Copyright Office any more because the record and movie labels do such a wonderful job making sure their content is widely available.

"Of the reports added to NTIS's repository during fiscal years 1990 through 2011, GAO estimates that approximately 74 percent were readily available from other public sources."

Yes, because proving that 26% of the material added is not readily available elsewhere proves their uselessness... Oh, and let's not forget that the mandate for them to be profitable did not exist until just before it started to become impossible for them to do so.
I really love this. Great job.
> You can do the same with WinSxS and manifests, but again too many lazy developers.

I'm surprised Microsoft hasn't put a feature in the "Customer Experience Improvement Program" that scans the applications installed on a system for what versions of DLLs they try to load, collates all that data together, and then automatically generates "default" manifests for those apps, locking them to the specific versions of DLLs they were already requesting+using anyway. It'd be like wrapping each installed app in a Docker container based on the current working system config.
Fantastic insight. I did have trouble picking up a temperature at certain angles, but at 90 degrees it returned the highest reading, which still wasn't burning my hand so is probably not above the value registered.

Might have gotten away with it because it's stoneware of some kind, but will definitely try a tape patch next time.
You clearly haven't heard of the Washington Times. The world must be new and full of wonder for you.
New releases are made quite regularly.

Dates and changelogs can be found here:

http://www.openssh.com/txt/
Agreed. I didn't expect my post to go through ... I expected it to merely become a +1 on an already-posted link.

That said, for some sites "www" and the domain by itself serve different content and function as different sites, and it would be difficult to try to reliably figure out if it's the case for every submitted domain.
Thanks man! I really appreciate it. Feel free to share it with anyone who may need some inspiration in their life.
Great points, and added to the list of paths to explore for the next version.

Also hard to disagree with your suggestion as a new life path.

The global bread market is predicted to hit $170B by 2015 (GIA report), if we can capture the minds of just 1% of that market, then I'll be able to afford a better thermometer.
Just click the "save" button in your browser - the file gets saved as a .html.
This is why I'm against the commonly praised "Be conservative in what you send, be liberal in what you accept" principle. Being liberal in what you accept only gives you compatibility nightmares in the future. Another perfect example of this is html and is the reason why every browser has to reimplement all the bugs of internet explorer 6 in order to not "break the internet". Really, why should a browser try to correct a corrupt document with trailing tags and open attributes. Beginner developers/designers will simply think "looks good on my machine, deploy and forget" and then we are stuck supporting that kind of corruptness forever.
Who is still hiring intern?
A CMU student who is good at machine learning, web/mobile development is looking for internship. Please contact her: Jueqiong, wjq282x@gmail.com
Thank you.
The point is you can connect to it with HTTPS and your browser doesn't throw up big flashy warnings. It's basically proof that he has got the private key, since he can impersonate cloudfarechallenge.com with regards to SSL.
Without even considering positional head tracking, just the act of rotating your head moves the location of your eyeballs in space (our eyes are not the center of rotation of our head, our neck is).
So I'm also doubtful that this will end up looking any better than a simple 3d QuickTime VR sphere.
E-Receipt, what's holding it back?
BrowserClass.js
What's his favorite food?
You go boy!!
Third Circuit vacates convictions in United States v. Auernheimer
There's no such thing as a free lunch, and many people believed they could mine one lunch at no (or very little) cost and expect that lunch to last forever. That's very unfortunate, but who wouldn't see that such a utopia would come to an end. It's like thinking that electric cars will replace other cars in 10 years or 20 years (there's too much at stake , the environment being last on the list).
Even if the public was to embrace a such a "currency", governments would step in (and they did) realising they would have no control. The very fact that it became an object of speculation and was making people richer meant it wasn't a currency anyway, it was no better than property, therefore spawned a bubble as a natural phenomenon.

Bitcoin, like Punk certainly isn't dead.

Bitcoin sounded and looked like the sex pistols a year ago, now it sounds and looks like Green Day.
Smartwatch+ Wins Pebble App Challenge
He doesn't have to have the private key, only a private key that was signed by any of the hundreds (counting intermediate CAs, thousands?) CAs trusted by his browser.
C doesn't implicitly convert one struct into another. Why implicitly convert one class into another just because I created a constructor in one class that takes the other class as a parameter? The "explicit" keyword should have been "implicit", with the default behavior reversed.
Sophisticated Simplicity [quote from 1984]
Thanks man! I really feel like all these comments are validating the purpose for writing this story!
hey no problem, after all the buttons are quite close together (I always wonder how touchscreen users deal with them?)
retailer adoption...
Ravee Lyall Releases his Amazing Music Video
The Early Years Of Logic Programming (1988) [pdf]
yes, i believe our brains have shrank by 10% in the last 5,000 years alone. so a 20-30% lift isn't a big leap. also, if you read the wikipedia article it mentions that they were not a separate species, but human and the size is highly debated
You must be my doppelganger, because I've been saying exactly this for some time. Internet Explorer caused so much trouble partly because it accepted so much bad HTML. It would close tags for you, even.
If Apple and Google put half as much effort into mobile web browsing as they did in proprietary platform development, we'd be further by now.

The fact that in today's "build software people want" world you need to do it three times, or at the very least in 3 different languages on the front-end is fucking crazy.

Now, the HTML5 problem will solve the platform. Especially with local storage and high performance browser graphics! Boom shaka-laka. Coming soon hopefully.

The problem after that is much more trivial - responsive layout. Can you really write an all purpose app that responds to desktop, and all shapes of mobile and tablet without having to think about each form factor individually?
Maybe I'm showing ignorance, but what about Redhat makes it far too late to change course?
How do you track and fix security issues in the libraries that you statically link?
Google.com's search engine gives you "information" and tries to sell stuff. Amazon.com's search engine finds you products when you're trying to buy stuff.
Are we burnt out on anonymous apps yet?
This article is so poorly written/researched that it makes me doubt its content. If you know anything about Africa, how can you confuse Gaddafi's Libya with Tunisia? And, according to wikipedia, Ebola has a mortality rate of 68%; where does the 90% come from?
That's the way OSX is RIGHT NOW. As a User I can run any program I want and mucky-muck my crap up. But Apps from the Mac App Store live in neat little bundles and are forbidden to do the mucking around in OS bits. So the OS is an "appliance" that I can just replace at a whim. If I go off the tracks to load apps that NEED to overwrite OS space, then I know who did it.

Personally, I but App Store versions whenever possible and I have next to zero problems with my Macs an order of magnitude less than my locked down PC at work even. VERY few apps need to color outside the lines and I like the push for them to explain themselves or get blasted by the next OS update.
The OOTB/Mill people are apparently working on porting L4/Linux to their architecture: http://millcomputing.com/topic/security/#post-802

Their machine-supported security features will be very interesting to see realized.
While i don't agree with this completely there is some truth to it. I ran an accelerator funded gaming startup for 2 years and was obsessed with development and coding. Most of the real CEO work was done on the side without much focus. In the end i think that played a big part in failing, because ultimately we ran out of money before profits were healthy. This could have been prevented if i had talked to investors earlier and more, focusing on the vision and shorter term goals to keep liquidity in check.

It's not that i didn't see it coming miles away, but it was still too late.
You don't appear to have kept up with Japanese maglev development in the last decade or so. Japan actually is going ahead with a major maglev line, to the tune of almost $100 billion (privately financed by JR central).
urx.com
From a piece? Hard.

But brute force everything you get back? Easy.

Take every key-sized chunk of heap you got back, and see if, when interpreted as the key, it is the private key to the public cert. When found, send it in!
"Zeal"? Fucking seriously? Ask Kathy Sierra what Weev's "zeal" adds up to.

Weev was a test case for some shitty law. The shitty law lost, and that's good, but it doesn't magically make Weev a worthwhile human being, much less some kind of hero.
> Not knowing what a latch is or why it is bad seems like more a failure of the class than an inherent problem with Verilog.

You misunderstood the problem: It's not a problem that you can describe a latch, but that it's so easy to make the mistake of describing a latch instead of combinational logic. It's a common mistake and clearly a failure of the language, because two very different intents are described by very similar code.

> The simulation/synthesis disconnect is inherent to that. [...]

No, you're confusing simulation/synthesis mismatch with non-synthesizable code. The former means that simulation gives you different results than the hardware at runtime, which is a very bad thing and should be avoided wherever possible (that's the point of simulation, after all). The latter is unavoidable to a certain degree if the HDL should be usable for simulation.
CAs will verify that you at least have control over hostmaster@ or an email listed in the WHOIS info for the domain before issuing certs.
And they'll add a little pork on top for flavor, too.
You can still run honest-to-goodness PC DOS 1.0 .com files from 1981 designed to run on the original PC out of the box in 32 bit windows 8.
click through extra installers-within-installers

the crt can be installed silently just like any other self-respecting installer out there, and normally the tool you use to create installers does support this as well. I mean, even something basic as WinRar allows you to create silent extract-install combos.
As others have mentioned: keep in mind this offer is for warehouse employees. There's lots of hard metrics being gathered on those employees, so it's straightforward to figure out which ones are underperforming.
>If Apple and Google put half as much effort into mobile web browsing as they did in proprietary platform development, we'd be further by now.

I doubt it. More likely we would have a bunch of browsers that followed an even more divergent set of standards.

Web standards are slow to improve because they involve getting a bunch of competing companies to agree to things, often things that are against their commercial interests. It's ridiculous for people to claim to support web standards but then complain about the slow pace. That is an inevitable part of the process of trying to get everybody in the world to agree on a single platform API that monopolises all user facing software. Native platforms move forwards more quickly because Google doesn't need to get permission from Apple and Mozilla and Microsoft before they add a new feature to Android. The web has to be a slow moving lowest-common-denominator type platform or it loses the only advantage it has, which is that it runs just about everywhere.

If you want a platform that is fast moving, exciting, and cutting edge then you don't want web standards at all, because web standards are exactly the opposite of those things, by design.
ProxyDr – Scans the Internet for good proxies
on the other hand there's the issue as stated in one of the other comments: If an application breaks because the internals of a library were changed, that's none other than the applications' fault.

All the occasions we had an application only crash on client's machine where alway due to bugs in our code, not in the platform. (not saying that it can't happen, but it seems rare for the type of app we do) So I'd rather expose bugs by 'surrendering' to the target machine completely, than to simply never find them.
Count me in to the baffled crowd.
He has to have the private key that matches the certificate he's presenting.

He's presenting the CloudFlare-obtained cert (which the site offers up on request), so the lack of a warning means he's got that private key.

Getting another CA-signed certificate, naming 'www.cloudflarechallenge.com' and matching another private key, would itself be an impressive compromise, though not the challenge CloudFlare made or what he's demonstrating.
And approximately at the same time the bitcoin bubble ends, and the so called experts and analysts are proclaiming the death of crypto currencies, that's when you will know that crypto currencies are finally on their way toward the mainstream. At least that's how things typically work when bubbles form around new technology (eg the internet).
@kayoone - I also used to code everyday - it was definitely a good practice.

However, I realized, that I am not able to focus on management - which is also important.

I still code at least 4 days a week (including weekends).

However, doing it every day, I don't think it is mandatory.
I get your point, but CloudFlare actually fixed that 7 days before the public disclosure, that is 12 days ago.

"We fixed the flaw on Monday March 31, 2014 for all CloudFlare customers, with public notification on Monday April 7, 2014, after the researchers' public announcement." -- https://support.cloudflare.com/hc/en-us/articles/201660084-U...
This would only be an issue with shared hosting that shares a web server process.
That's how I read it, yes.
HMO: I run an NGO and am looking for a voice biometrics service to use for caller authentication that can be subscribed to monthly instead of having to pay a large upfront setup fee or annual fee. Would really appreciate any ideas. Thanks!

Email in profile.

How I can help: User testing, designing focus groups, help with payment integration, and general brainstorming.
>if we can capture the minds of just 1% of that market, then I'll be able to afford a better thermometer.

I'm sure that just after couple publications consulting gigs for brad and toaster manufacturers and speaking engagements will pay not only for thermometer, but also for microgram scale and hygrometer.

Interestingly, I spent some time thinking about where condensate is coming from, and so far it's not really obvious - some humid air needs to get colder for it to appear. May it's indeed evaporation from the piece of bread itself? But then it would be visible, in the same way evaporation is visible on top of cup of hot tea. Mystery.
PayPal, Ebay, Yahoo, Facebook, Amazon, Priceline, Salesforce, Twitter, Yelp, etc. What's your point?