skysight-inc/HackerNews huggingface dataset:
I agree that prison is better then death, but I do not think being in prison is like being in comfortable room happily reading books whole day.

You are subject to prison rules and have to live in society of other prisoners and guards. You can loose your reading privileges for some petty reason and I'm not sure how big prison library is. It is not like they would be determined to make you happy or at least leave you alone - the atmosphere can get very poisonous.

Most people that have been in prison do not report about it as about pleasant places where they learned a lot from books. They usually report it being very bad place and learning some street smarts (which I would happily pass).
Am I the only one that doesnt like this "feature"? The reason I dont like it is because now, instead of being limited to 25% of my total CPU usage, at times Chrome happily pins all four of my cores. Granted that this is probably a result of poor plugin/webpage interaction (although, I havent been able to determine what combination...being a heisenbug and all), in Firefox, the worst case is still 25% maximum CPU usage.
I'd love to see someone design a unique synthesizer (audio) algorithm for these things - hope you'll keep HN updated with any progress you make in that direction.
Rapidly (manually) opening, switching between sometimes 20 tabs always brought FF to a crawl for me and is the reason why I always switched back to Chrome after giving a new FF version a try for a week.
I thought about doing the exact same thing. But I wonder about the: limiting of the issue creation API on github and false positives. [The variable has been sanitized prior to being executed]
Horizontal tabs are so 2007. ;-) I'm still waiting for Chrome to have a vertical tabs solution that's as good as Tree Style Tab for Firefox. Tabs Outliner and other Chrome extensions are inadequate.
IPv6 is the future. Even DO will run out of IPv4 addresses eventually, then what? I have Ipv6 at home, it suprises me how many sites are available over Ipv6... Just not my DO projects...
In the Firefox Nightly channel, you can test Electrolysis (e10s) using the "File > Open e10s Window" menu. Addon compatibility is still a work in progress, but many popular addons like Adblock Plus mostly work today.
Generational Garbage Collection.
I interpret this as "get a crappy MVP prototype for a very low price" which I think sounds great. I don't think the price is too low if that's the expected outcome.
This is like the "Heartbleed" backdoor of the medical industry .. how many previously-though-defensible studies are now trash because of this? Its mind-boggling, to be honest ..
axfr support might be useful even if you end up using them as primary:

1. migration

2. standard "config" API. You just keep up using your scripts to generate/update bind/tinydns configs.
Lions hunt alone. Lionesses usually hunt in packs.
Since we're focusing on prototypes/MVPs the process is very iterative and feedback oriented, so scheduling just consists of fitting well-defined blocks together. We've also got a balanced team which helps us parallelize. There haven't been any scaling problems yet, but when there are we're ready to bring on extra talent.
The price is great. I love heroku for the easy setup of web facing servers but i'm in the process of moving my workers to DigitalOcean, way more value for money.

Not being able to install a custom OS is a minor annoyance, hopefully they will add CoreOS soon. (Currently i'm quite happy with Ubuntu though).
Of course I'm way late to the game here, but thought I'd add one more voice of dissent:

The real estate costs can be extremely low for self-driving cars. Imagine a tower of, say, 10 cars stacked vertically with an elevator mechanism to bring them to and from ground-level. Since each autonomous car is interchangeable, you can just treat the vertical parking lot as a stack. When demand is high, pop off the stack. When demand is low, push back onto the stack. No need for ramps or anything else that existing parking garages use. And just to be totally clear, humans don't interact with this tower, it's just a storage mechanism for empty cars after they've unloaded passengers.
It would still be vulnerable to a CSRF attack. The attacker can just get a logged-in user to launch their exploit, through a vulnerable site they frequent or even a link or image in an email.
It all depends on how high ttl is, the number of queries increase exponentially as you decrease it, with ttl=0 you have no caching.

My company makes about 160qps which translates to about half billion per month, so it doesn't seem too unrealistic.
Frankly, I'm glad to hear it. When I lived in the US, I counted a number of times where I'd go visit some friends or colleagues at their place, only to discover they lived cold, segregated lives, because "they're always moving and never had time to unpack" .. its a matter of comfort, I guess, but I was never comfortable hanging with my American' friends homes after they'd just moved - and they sure moved around a lot, 6 months on average ..
Why aren't smart cards more popular? Is there even an API for web pages to make use of smart cards (I'm not a web developer)? I know yubikey, but I do not understand the concept. A simple smart card token should be sufficient (like the yubikey NEO).
I do not own a smart phone, but it would make sense to have smart cards built in, register your phone's public key to your service and use a challenge-response like authentication for second factor.
If you are thinking long term development, I would suggest modern Javascript Technologies like NodeJS + AngularJS/BackboneJS but if this is few projects things, then go with PHP, you will do everything with PHP+HTML ! Sky is your limit.
Thanks for taking the time to address my questions. Memory management hasn't been a major stumbling block in my line of work, but I'll read up and give it a whirl if I have the appropriate project.
I'm very suspicious about this astronomical performance difference you're talking about.

Like many I run both firefox and chrome all day long.

I literally cannot tell which one is faster.

Firefox does use all the cores like Chrome does btw - it's called multithreading - and both of them seem to do approximately an equal okay-ish job at it (maybe servo does a much better job but thats not useable yet).

The only times where as a user i can see chrome multiprocess model shines is:

- sec vulns where chrome sandbox is not bypassed

- stuff actually crashing or hanging

Needless to say both cases are quite rare on either browser (and when flash hangs in firefox, it does for a few seconds before firefox proposes to kill it - while in chrome it only hangs the current tab)

Note also that:

- electrolysis can be enabled right now by an about:config option

- i run firefox and chromium on linux - i guess your mileage may vary on other platforms (?)
Looks like I have a lot to read up on. Thank you for pointing me in the right direction.
Checked it and on false. Tabs still on the top.
The Best Web Browser
Fix the design at least. The pictures are huge, the format is really off. Not much content would be ok, but the utter design of it is less than appealing.

As for content. You can definitely improve it if you spend more time on it.

The people who get hired for having good blogs have one of two things(sometimes both): good design or good content

Since your blog appears to have neither, I'd side with just listing your github, but not your blog unless you fix more of it.
200+ level history, literature, philosophy, or anthropology: something combining creativity, debate, and methods, but not just an intro-level course. You'll probably find an in-depth study of a topic in those areas more redeeming than a broad survey.

Intro-level art, music, acting, or other creative skill. I don't mention photography, because I think the barrier to entry is too low. You said you wanted to be challenged, picking up a charcoal pencil or an instrument, or getting on stage, are all fascinating challenges.

Communications. Yeah, I know, the major and field are generally regarded as a joke, so choose carefully. Find something that teaches public speaking. Most people are terrified of that, and getting the practice now will serve you well for a long, long time.

Study abroad. Go to a country where you don't speak the language. Say 'yes' to everything – food, invitations, experiences, job offers, etc.
Say each doctor's patients had a common constant death rate for that doctor, not a crazy assumption, and those constant death rates across doctors followed a gamma distribution (not hard, because I could fit my ass with a gamma), then the distribution of each doctor's patients' life expectancies would be exponential and the distribution of life expectancies of the whole group would be Pareto.

Exponential is completely positively skewed and thin-tailed, and Pareto is roughly the same shape but very fat-tailed.
Thats not the point. Of course "rm -rf /" won't work, but what about downloading and installing a backdoor? Or modifying the website scripts itself? Or dumping a database? Or...

Removing all the files from a filesystem is something only a script kiddy would do, and it's probably a "best case scenario" for the owner of the server, because the impact of that is relatively small (just re-install the server and restore the backups). But once the attacker starts injecting mallware, stealing customer information (credit card numbers anyone?) or anything else nasty they can think of that they would benefit from, then you are in a whole lot more trouble...
This appears to be the device in question:

http://www.cryptomuseum.com/crypto/att/tsd3600/

The variant the author carried is described as "developed for export purposes. It used a 'weak' cipher algorithm with a 40-bit key."

Should you feel the need, you can buy the E variant - "the first model with the ill-fated Clipper Chip inside" - for the low, low price of $60 here:

http://www.dutchguard.com/ATT-TSD-3600-telephone-security-de...
Nice product. 1 year ago, I launched "Two weeks to materialize your idea": http://munda.me

This business model works well. Congrats.
right now my firefox uses 49 threads. Guess what? the kernel scheduler run them on all cores.

chrome uses 5 processes and 7 threads in 2 processes, 11 threads in another, 1 in nacl helper and 27 in the main process. Guess what? the kernel scheduler also run them on all cores ;-)
Interesting... I always thought Bruxie was a pretty popular chain. Why do you think the growth is unsustainable? Are the amount of customers decreasing at each existing chain?
Designing and Building an "Open-Hardware" Laptop
If you have four cores and really want so that Chrome can only use one of them at a time you can just start it with

taskset -c 0 google-chrome

or maybe better

taskset -c 0-2 google-chrome

which will allocate cores 0-2 to Chrome, dedicating one core for your other work.
Αποφραξεις Παλαιο Φαληρο – : apofraxeis-vlachos.gr
Man Hacks Monitor, Screams at Baby Girl
Assume that a ridiculous amount of effort went into designing and testing this device, and that this 8in drive is connected to devices that will not have an sd-card reader or USB controller available for $5 off eBay.

It might just be cheaper to buy 100 8in drives for 10k each, instead of upgrading the control systems to use thumb-drives. You'll also have to do all the paperwork to change documentatino from "insert Top-Secret launch diskette into drive" to "put Top-Secret micro-sd card into the top-secret-launch-diskette-substitude-reader-assembly (TSLDSRA)".
From initial inspection of the GPL firmware download, it looks like port 4567 is controlled by the /bin/tr69c daemon. I also found references from tr69c to a "data_center" program. Neither the data_center or tr69c binaries were in my reference firmware source.

Research suggests tr69c is hosting the TR-069 protocol: https://en.wikipedia.org/wiki/TR-069

Also: OpenSSL 0.9.7f 22 March 2005
the tabs that arent in the foreground (ie all other tabs except the front tab) are actually square.
im pretty sure the overall layout of tabs and buttons is actually more space efficient
> Again...WTF does that even mean? So they only use CSS3 transforms that are GPU accelerated? So it's a CSS3 animation library? The vague documentation seems to imply a grander vision which is unclear.

The core of Famo.us is a rendering engine. Instead of using the DOM to represent its UI hierarchy or using the browser to render that hierarchical DOM to screen, it uses an internal scene graph representation and handles the rendering of the scene graph to screen through an abstracted output layer. The browser DOM is just one of its supported outputs; another is WebGL, and there's no reason there couldn't be other outputs, outside of the browser--I think this extensibility is part of the 'grander vision.' The scene graph is a very robust graphics model, so it would be a great choice for a model if someone were to reinvent HTML from scratch today. Again, 'grander vision,' maybe.

In the case of rendering to the browser, the way it works is by flattening and compositing its scene graph, creating a DOM node for each 'Surface' (which is a leaf node of the Famo.us scene graph) and handling the 3-space (or really, 2.5-space) positioning with CSS3 Matrix3D transforms, which are GPU accelerated. Since the DOM isn't needed for hierarchy (again, all of the calculations are handled by the engine) the Famo.us-outputted DOM is a simplified set of sibling nodes underneath a single parent (the Famo.us container,) and it continuously updates the Surfaces' DOM representations' Matrix3D properties (performantly, leveraging requestAnimationFrame) as the scene graph gets updated by the program running on the Famo.us engine.

So that's pretty much what Famo.us is. Does that help? A slightly less technical, if more practical explanation might be about how you can "write one JS app [and] deploy everywhere with awesome performance across devices and browsers."
China’s Largest Bitcoin Exchange Halts Merchants Bank Deposits
Bitcoin traders settle class actions over failed Mt. Gox exchange
[MountainWest RubyConf] But Really, You Should Learn Smalltalk
note that you can change that quite easily. I sort of like the separate search personally.
Half the time these are just prototypes or throwaway projects or are behind password protected proxies. Relax people.
Curious - do you run ad-block or any other blocking-type add-ons?

On my system, there's a noticeable speed difference between Firefox and Chrome, especially if I disable ad-block in Firefox. (Also on Linux.)
A sneak peek into what augmented reality is, and the challenges its future faces
i like the big menu better than the chrome menu. less confusing. and tech users dont care about it since they use regular menus ;)
Considering that a mid-level to senior South African developer makes around R40'000 per month (which is roughly what $3500 equates to), you would be able to get an entire month's worth of work from a competent developer based here in SA.
Only if you move the pointer into a vector or similar. just having loop { let x = ~"something"; } will not create a memory leak, as the pointer will be dropped and freed at the end of the loop.
The photo images in the news reports seem quite sharp even resolving the two engines separately so if those are raw data and not artists impressions I guess they must have the location down to a few meters which would make it relatively easy to check out I guess?
The first programming course we expose students to at Edinburgh has them doing Haskell in Emacs on Scientific Linux. We like steep learning curves, it seems.
I'm not convinced it would have to be secret updates. As the service that scanned your ports learned new exploits, it reported them. Scanners sometimes use heuristics to guess.
actually that one button appeared in firefox designs much before opera - there was a big drama about it back then.
opera had the same design but released much faster than mozilla did.

back in the days they didnt have 6 week releases.
All the best with that.
50 ways that MIT has transformed computer science
Novena the open-hardware computing platform
We with computer science background tend to put this claims to the margins due to the strict nature of the systems we work with.

But we forget how many correction steps those systems have to prune and filter anomalies:

- the voltage threshold for digital signal;
- correction bits.
- checksum;
- hashes
- rings
- keepalive signals
- etc
True, but once you have <foo; $any_command_with_user_privilege> you can start executing any user commands. So you do a </dev/null; mkdir ~/www/nefarious; cp ~/www/AdminSettings.php ~/www/nefarious/settingns.txt;> (without the index file you can just view the file as plain text, which probably contains the database username and password. Then you can go on and download a database dump. The attacker probably does not give a damn about root in this scenario.
If you're creating a new ~T in a loop, it will be freed after each iteration of the loop (ie, when the block ends). Witness for yourself: https://gist.github.com/cmr/f80c0a58e5b90021bb35
As far as I know, it's common practice for DSL and Cable providers to provide over-the-air firmware and configuration updates to your modem. Whether or not they own it.
I do not think there is such difference in FF and CR performance. Both browsers are relatively close. Firefox however hangs in some common cases where as Chrome handles general cases better.

CR however is worse when it comes to multi-tab browsing with over 20 tabs!
I think the problem here is the fact that tainted variables (user input) are used to execute shell commands. it doesn't matter if that's $_POST or $_GET, both of these are user input and therefore these are huge vulnerabilities.
im surprised people choose to use or not use firefox depending on the ceo.
the ceo doesnt take many decisions, the whole community does. some of them paid, and many unpaid.

by taking these - IMO - baseless decisions, you're only hurting the thousands of people putting their time, blood and tears without any commercial interest into firefox, not the ceo's you agree/disagree with.

remember that mozilla has no shareholders, the ceos dont get stock options, just a salary. its wholly owned by the mozilla foundation.
https://www.youtube.com/watch?v=gRJ_QfP2mhU
OWIN and Katana are awesome
I really don't want to be negative, but every browser update in the past year feels like a step back. This is true for Chrome and Firefox. Each update contains more "Sign in to your browser" stuff plastered everywhere. Eye candy is added. Useful configuration options are removed.[1] Many of these changes seem to be made with the goal of increasing revenue, not improving user experience.

Rule #0 of business is: Listen to your users. For browsers, one straightforward way to do this is to look at what extensions and addons users install. By far, the winner is adblock. Almost everyone who knows how to block ads does so. Therefore, if you are making a browser and you care about user experience above everything else, you will have ad blocking by default. That no major browser does tells us what their priorities really are.

Again, apologies for the negativity. This has frustrated me for some time.

Edit: I realize that if everyone suddenly started blocking ads, there would be darkness and chaos. But the current situation is only tenable because a small fraction of users have the know-how to get what they want. You can avoid ads if you are technically proficient or know someone who is. Everyone else has to put up with ads. Advertisers annoy millions if not billions of people, effectively subsidizing the usage of those with ad blockers. That doesn't seem fair to me.

1. Such as the old new tab page in Chrome: https://code.google.com/p/chromium/issues/detail?id=326788
"Mogil’s group discovered that this gender distinction alone [...]"

It's sex, not gender distinction. Gender - what you identify as, sex - what you are. Males that identify as females would still throw their test off. Yah, nipicking. And call me paranoid, but this seems to have agenda....
Almost a Haiku,
it is.
TL;DR version
Telegram is completely open-source and has an open API. There is no PKI, so the public key of the Telegram is hard coded in the application.

An attacker could simply take the source code, change the server IP and public-key and has a working MITM, if he can somehow make the user install this one instead of the original.
Though I'm surprised how many aren't PHP, for example all the Ruby repos...

Edit: ah, most of those are Metasploit scripts.
"That's the joke."
So he suggests to have users connect to (a) attacker's server (b) using attacker's public key for authentication.

That's from the same domain as planting a fake CA cert on the client and then proxying its SSL connections.
Very well put. I tried Go now for a while and I was wondering why it doesn't appeal to me like for some of my friends. By reading through your response I found the reason for my gut feeling. I guess I belong into your first categorie ;).
Have they tested this design on users? Did they make the records public?
These are great suggestions. Thanks! My co-founder, Marlene, is going to kill me for attempting to publish without her "editing". She was an executive in communications at HP. This is our first blog experiment and between typing 85 words a minute and lack of sleep, I neglected to go back through and give it a good edit. Again, I sincerely appreciate your suggestions. Any additional advice?
NSNotificationCenter is thread-safe NOT
Because they don't know better. Sadly, there's no way to control bloat in Android, just like permissions. No way to disable worthless background services and autostarts.
It's pretty easy to implement such a feature in any strongly typed language, but sadly few framework/libraries/stacks actually do it.
New Flash Player 0-day (CVE-2014-0515) used in watering-hole attacks
Google's POWER8 server motherboard
> Any advances outside those recorded by the system, would clearly indicate who is to blame

But the question remains, who is to blame? In my opinion, mature adults should be able to calmly handle both rejection and an unwelcome advance. In my opinion, it's the person who's handling it worse at the workplace (being annoying, obnoxious, ...) and whose work is more affected who is to blame, at least from the perspective of the employer.

Anyhow, I don't think this would work - Tinder works on the premise that you're swiping strangers left and right, so you're not that affected by rejection... If you swipe yes someone you know, and you don't get a match, you know you've been swiped no, so the rejection must still be handled maturely...
My fav:

$device = $_GET['device'];
$state = $_GET['state'];

exec( "sudo ./send " . $device . " " . $state );

EDIT: it is for home automation, but also appears to be a CS class group project.
Killer feature in that it kills your free RAM?

Firefox with 200 tabs can be 1GB or so; chrome with the same load is about 4GB.
Is UX a full time role?
As soon as you have "somehow make the user install this one instead of the original" as a step, nothing is safe from MITM attacks.
Hmmm. I don't see why any of the crypto stuff in the paper is necessary.

A modified client can log, leak or change any message it wants once it has the plaintext. You shouldn't need to understand the protocol at all.
Tibco acquires Jaspersoft
Actually I has this idea a long back and I am working on it too http://sitesale.co/