skysight-inc/HackerNews huggingface dataset:
> It is too late when undefined behavior has already happened.

This seems more like a theoretical concern, as just about all the hardware out there is 2's complement and signed overflow wraps around in the usual way - because that's the simplest, most straightforward way to implement it. (This also means I think compilers that exploit this "loophole" in the language are seriously violating the principle of least surprise.) If you're working on the few exceptions to this, then integer overflow is probably going to be the least of your worries...
As long as Legere remains at the top I'm cautiously optimistic. TMobile are so much better than Verizon it's not even funny.
Thanks for your reply! Sorry our homepage wasn't clear enough: Kivo is a way to annotate presentations and PDFs in the browser. If you want more info, check out the video on the homepage or try the example presentation below it.

Re the problem we are trying to solve: giving feedback on documents really sucks. Emailing around 'Slide 1: change x,y,z, Slide 2: change this' and other out-of-context comments is a massive pain-point for users, who want to be able to do it quickly, visually, and in their browser (instead of in an old piece of desktop software). Feel free to ping me on leo@kivo.com if you have any more questions.
Filecoder For Android? Trojan That Can Encrypt Your Mobile Found
Given the usability of said company's website, Apple would be doing web users a favor acquiring that domain.
You can play moral white hat hacker when you are disclosing vulns in some shitty Chinese router, or participating in one of bug bounty programs, but NOT when you play against big boys (AT&T, MBTA, Juniper, Adobe, etc). You will get crushed, jailed and humiliated.

Disclose fully, but anonymously.
I can halve the size of the GIF with a bit of lossy compression (https://pornel.net/lossygif http://compressor.io/compress), but a proper video codec or actual WebGL would be much better indeed.
That's not true, at least not in the US, and here's a lovely example of it.

A few years ago DC Comics decided to sue DC Shoes over their logo which, like DC Comics logo at the time, used the letters DC and a star.

Turns out DC hadn't trademarked the logo, despite having used it (and variants) for decades so they lost.

DC Shoes HAD trademarked it and successfully counter sued and DC Comics, despite having used a similar logo for a lot longer, were forced to pay DC Shoes for the rights (at least until they ultimately changed their logo).
I used to do a bit of business with this guy, always seemed like a real nice guy.
Exacty.. Is it also their "belief" that artists that worked hard on something should not be paid for what they made? Because then I think that would be as awesome as: Hey I have an idea, and you can be my partner. There is no money involved now, but would you be willing to work for a year without pay? See you Idea-Man
And developing in Obj C makes it so much easier to move your code to Android? I don't get it..
I disagree with the one you replied to. I instantly understood what it was about, and with the example it solidified my thoughts.
This will stop at #1 after vendor sends you DMCA and informs feds that you are planning to kill people by hacking their product.
"if the trial were held in public the prosecution might not proceed with the case". Worrying. "But the evidence on which the crown relied to argue for the secret trial could not be presented in open court" "This relates to the pair's alleged possession of a document entitled "Bombmaking". What do you bet that the evidence is improperly obtained, like with the NSA.
I too had a content site where I did not ask users to sign up. First 2 years, 83 emails. Then one day I changed that and forced them before clicking through. First DAY 100+ emails. And it never stopped until I shut it down.
Maybe it is different in the US then in other countries, but every restaurant I have ever been in the waitress has taken the credit card away inside of the check and come back with a receipt to sign.

Even so, just because you can see your card doesn't mean someone cannot copy it. They could even have a modified device that automatically log all cards while also performing transactions. In such a scenario you would see nothing out of the ordinary.
Not as the default DIY kit, but there are other sizes we can support with the same electronics (basically all screens from E Ink and Plastic Logic). Also keep in mind that sizes other than 6" and 9.7" aren't mass produced, which means higher prices - there's a reason why Sony is selling their 13" PDF reader for 1k EUR.
I'm not sure if it is more common to say that 0 is a natural number. There's a math.stackexchange thread about this which seems to have equally many people saying that each is the more common one.

http://math.stackexchange.com/questions/283/is-0-a-natural-n...

(I count 4 people saying {1,2,3,...} is more common vs 3 saying {0,1,2,...} is more common. I also notice that N_0 is used by both sides to refer "unambiguously" to the convention of the other side.)

In my experience {1,2,3,...} is used more in number theory, and {0,1,2,...} is used more in logic.
Red Hat advisory for RHEL6 seems to be already available: https://rhn.redhat.com/errata/RHSA-2014-0625.html

Edit:

They also released a blog entry about the CCS injection issue: https://access.redhat.com/site/blogs/766093/posts/908133
Yes, they do. Art school teachers, namely. I bet they're not starving.
I am curious who sets these end points?
I studied IT, because I wanted to get a job in it.
Get Paid On Medium
Why iOS 8′s WKWebView is a Big Deal for Hybrid Development
Hey Leo, just a small copy error: 'if your heart of heart' should be 'in your heart of hearts'
BuzzFeed's Native Advertising Is Nothing But A Confidence Game
Ask HN: Please review my start up – Washbox
Hi everyone,

This is the first time I've submitted anything here but I read HN almost daily. My partner and I have just launched a laundry and dry cleaning delivery service where users can schedule orders through our web app (mobile app coming soon). We would love any feedback you have to give.

https://www.washboxapp.com/

We have been working on the site for about a year now and launched 2 weeks ago. We've had some great feedback from our early adopters however we want to iron out any problems (excuse the pun) before we launch on the various mobile platforms.

We're based in Bristol, UK so if you want to sign up use the address 35 St. John's Road, Bristol, BS8 2HD.

Many thanks,
James
I feel like there is a (potentially bad) typo in the second paragraph of this advisory.

Servers
are only known to be vulnerable in OpenSSL 1.0.1 and 1.0.2-beta1. Users
of OpenSSL servers earlier than 1.0.1 are advised to upgrade as a precaution.

It seems to me that users on versions earlier then 1.0.1 would be advised not to upgrade since they stated in the sentence before that 1.0.1 is vulnerable.

------

edit: Oops, I feel kind of dumb. Literally the next line is describing the recommended upgrade for 0.9.8 users:

OpenSSL 0.9.8 SSL/TLS users (client and/or server) should upgrade to 0.9.8za.
Gear Secondo – Cozy Cloud raised 1 M$ To Change The World of Personal Data
"The language is very JavaScript-like in its design..."

Disagree. JavaScript isn't even strongly typed. Swift affords many imperative and functional techniques, but that doesn't make it JavaScript-like.

"The real purpose behind this language, however, is a little darker. I believe that it's ultimate purpose is lock-in. The more developers start using Swift the less they are going to be able to move to other platforms (such as Android)."

By this logic we should all be using Java. Now ask yourself: Should we, really?
Maybe in the 80ies. I suppose with things like Agda, Idris & friends, one can say that the standards are rising.
With broad correlational data like this, it's important to know what significance threshold is being used, and what the significance value actually is. There are many possible analyses that can be run, and there will be some subset of those analyses that produce significant results by chance, which is why you need hypothesis-driven analysis and/or very conservative corrections for post-hoc analysis.

Without the details, we can't evaluate significance claims.
Awesomely cool.
I have a question:

What is the value of encrypted communications when your system is closed and presumably compromised (Windows, iOS, OSX)?

Also, why are they suggesting that you write down passwords? For that matter, why passwords at all? Passphrases are easier for people to remember for the same amount of entropy.
Ah! Cheers!
Fix your title : Swift, it hurts you (and I'll let the reader figure out why)

Did you seriously expect Apple to ship a cross-platform development solution ?
This is not accurate.

Verizon purchased all of Verizon Wireless from Vodafone this year, for $130 billion. It is now fully owned by Verizon. Vodafone got $59b in cash, $60b in stock, and some other throw-ins.

http://newscenter.verizon.com/corporate/news-articles/2014/0...

http://venturebeat.com/2014/02/21/verizon-closes-130b-deal-t...

Also, AT&T Wireless is a wholly owned subsidiary of AT&T, so they weren't exactly far off the mark. The modern AT&T is the net result of BellSouth and SBC merging, then SBC eating AT&T and rebranding itself. The mergers gave them total control over AT&T Wireless. The wireless subsidiary's results flow up to the parent, which shows up in the quarterly results for AT&T, and that is why AT&T is worth $181 billion today. AT&T Wireless is paying for the DirecTV purchase.
I'm looking into this (again! I used to buy from 7digital but it seems they're no longer in the same business model) after having used Rdio for quite some time, because I just hate not being able to play songs when I most want to because I don't have internet or it's flaky or I'm at another machine.

From a quick research it seemed that Amazon MP3 was DRM-free.. not that I trust them too much or would want to support Amazon, but it seemed the only option with a good catalogue.
already here:

https://news.ycombinator.com/item?id=7851357
To make it even worse:

<meta name=Generator content="Microsoft Word 11">
They say, versions earlier than 1.0.1 might be vulnerable, we're not sure, so upgrade to the latest (presumably a newer version than 1.0.2-beta1).
I cannot speak for Rust, but I can speak for Go. The actor model is almost the reverse of how Go handles concurrency. Instead of sending to named actors, in Golang you name your pipes (or channels). Then you handle these pipes as first class citizens and routines can choose to receive or send on them. e.g.

1. In your main routine you build a channel of ints (noticed they're typed) named `x`

2. You hand `x` and an integer i (incremented by one for each new routine) to ten routines which will double that number and send the result down `x`

3. Your main routine then receives on `x` and builds a list of results. It hasn't blocked on the doubling operations for each integer `i` because you sent each of those operations in a new routine.

Ignoring the fact I haven't managed closing the channel `x` you can get the gist of how channels are named and passed around.

I can't say what the alternative would be in Rust, but I hope that sheds more light on Go!
I agree that the FDA would be a good place to start. I only know people on the Drug side, so I am not sure who to have you talk to about devices.

I would start with Josh Simms who is in charge of Cardio Devices in the Division of Manufacturing and Quality at 301-796-5540, or maybe someone in the Office of Device Evaluation. Mark Feliman at 301-796-5630 is in charge of Cardiac Electrophysiology Devices, but I think he works more on the approval side.

The appropriate contact info for all of CDRH can be found here: http://www.fda.gov/AboutFDA/CentersOffices/OfficeofMedicalPr...
OTR only works when both parties are online. Especially with the modern mobile internet, that is something crucial!
I'm confused... there is no explanation about "why" Swift might hurt.
as bad as "goto fail", but not as bad as "heartbleed"

Thank you for this excellent description for we who recognise this must be a problem, but lack the area knowledge to immediately appreciate how bad (or not) it may be.
> it means that people with solid theoretical foundations in CS are derided if they can't--for example--get an iPhone to print to a wireless printer

1) You need to explain to people what you do - "write database applications and generate web pages from the data stored in the database".

2) And what the people questioning your ability are looking for "you are looking for someone that works in a mobile phone shop, not a software engineer".

The fact they expect a software engineer to deal with configuring /installing applications on a mobile phone, makes them look stupider than a software engineer who "can't" configure a phone.
Debian advisory: https://lists.debian.org/debian-security-announce/2014/msg00...

Red Hat 6 advisory: https://rhn.redhat.com/errata/RHSA-2014-0625.html

Red Hat 5 advisory: https://rhn.redhat.com/errata/RHSA-2014-0624.html

Ubuntu advisory: https://lists.ubuntu.com/archives/ubuntu-security-announce/2...
Yep, but in terms of languages, that is around the corner!
Job description years are like dog years, nearly there.
Correct me if I am wrong, but if you're looking to get something done, get in touch with some freelancers. How does a "solo founder" fit into this?
> None of that money goes to the artist... that goes to google...

Youtube uses an ad-revenue sharing program. So video creators/uploaders do get a share of money from the ad, even if it is marginal.
Yup. Unfortunately, it seems we're doomed to repeat the browser popup wars and relearn all its lessons, now from courtesy of the Mandatory Signup and the Undismissable Floating Div.
Watching Mr. Victor, he tells us about how we're doing old media with new tools (painting, film.) Then he moves on to ... a puppet show using his new tools. I feel like he started with what was going to be an intriguing thesis ("make something new, not just old media with new tools") and changed to building those new tools.

That criticism aside, he's absolutely correct about needing new tools to prevent the creator from needing to learn a programming language. I'd suggest that this is the case in many fields. I'd go so far as to suggest that some day most of us software creators might be able to create software with little to no code, just dragging together concepts. (I'm aware that such tools have existed and do exist. One could argue that they haven't quite nailed it and thus are not very widespread in use.)
Didn't games like Duke Nukem 3d, post-Doom, Wolf games use what was called a scanline algorithm? Drawing the lines in the players FOV as you just stated and then using a clipping algorithm to keep unwanted information out. I think raycasting would be a type of scanline algorithm, but the technique is less primitive since your not using a proper 3d engine. It's a long time since I programmed games like this so am now a bit fuzzy on the specifics.
In the article they link a page with more details on the code and the "iron fish" : http://www.history.navy.mil/faqs/faq61-2.htm

A bit strange that it's the most critical words which had the less variation in the end.
Something similar happened to me when I was young and stupid and I still have a bad feeling about that decades later.

This should serve as a warning to anybody in a similar position: promises of shares are worth nothing, if you are in a vesting arrangement make sure you get the actual shares on the promised dates, otherwise you are being taken for a ride, if you are a co-founder and there is no vesting make sure you get your shares right now.

Particularly galling here is this paragraph from the linked text:

"Update (Jan. 17, 2:45pm ET): HFJ released a statement, set in the firm’s Mercury typeface, denying Frere-Jones’s claims and saying the company will henceforth be known as Hoefler & Co.: "

So, as long as you're working without a stake in the company but on vague promises your compensation is limited to your salary + having your name as an equal partner on the company letterhead but as soon as you so much as try to enforce your rights you're being removed as if you never existed. Classy.

I sincerely hope that this suit will be resolved amicably, and if it isn't that the firm will be named Frere-Jones Inc. when they're done.

Hoefler is going to have a hard time arguing that Frere-Jones was only in the masthead for decorative purposes, it certainly seems to spread the message that Frere-Jones is to be considered a full partner in the venture.

Beware of power asymmetry in relationships like these.
"Upgrade" doesn't necessarily mean "upgrade to 1.0.1". Older versions are still getting updates. Unfortunately, this might not be clear to some readers because OpenSSL uses a weird versioning scheme. The three numbers stay the same, but the alphabetical part at the end gets incremented each time there's an update.

> OpenSSL 0.9.8 SSL/TLS users should upgrade to 0.9.8za.

> OpenSSL 1.0.0 SSL/TLS users should upgrade to 1.0.0m.

> OpenSSL 1.0.1 SSL/TLS users should upgrade to 1.0.1h.
Thanks for posting this. My own first thoughts on seeing the project were: looks like a soapbox racer (and I laughed watching a video where they gave it a manual push down a slope to get it going), does France not have speed bumps or steep driveways or road litter, what's its top speed, and how survivable is a collision? This competition is just pure PR for Shell and other companies, engineering constraints for an actual car don't seem to matter. (I'm sure the students enjoy it and learn a lot though.)
However, it wouldn't hurt if the home page had the above explanation explicitly written, and if they mentioned who is behind the site.

Also, common questions like "where are my documents stored", "is it secure", "how do I share the result and who can see it"... remain unanswered.
I'm less concerned with the reuse of their logos and more concerned with the fact that their logos are implemented in HTML/CSS rather than as images, which means there will be subtle differences.

Basically those aren't their logos. They're slightly inaccurate imitations. Most big brands will be upset if even a few pixels are off when their logo is displayed.
I bring up editing spec because it is an indicator of priorities. Apple does edit specs, just not the type we're talking about here. As for your list of features you guys did first, that's great and I'm appreciative of the work, but those are all pretty dated at this point. We're talking about today's web, not that of 5+ years ago. Anything in the last 2 years? We can both list off a dozen from Google and Mozilla.
Android version distribution over the last 2 years
15 - 20 years ago when I studied (in the UK), most places had a "Computer Science" course to cover everything. I see it has gradually separated into separate disciplines over time.
>1) You really shouldn't have an open conversation about >knowledge that can easily kill people.
I can easily kill someone with a rock. Just hit in the head, repeatedly.
Why that should be a secret?
> The stylesheet above will never load unless the branch is satisfied.

Or if the user has JS turned off.
I don't understand—why would you want to be secretive about running a relay? Especially if you're running an exit relay, I'd expect that you'd be best off doing it in the open so that others can correctly interpret the bizarre traffic they might see.

The challenge FAQ [1] even has two points addressing this:

> Is it a good idea to let others know that I'm running an exit relay? Yes. Be as transparent as possible about the fact that you're running an exit relay...

> Should I tell my ISP that I'm running an exit relay? Yes. Make sure you have a Tor-friendly ISP that knows you're running an exit relay...

[1]: https://www.eff.org/torchallenge/faq.html
Are you speaking from experience? Because that doesn't work since 10.8 I think. You need to use the script to turn the dog into an iso. It is not just a format change, it actually changes the structure of the contents.
I suggested somewhere earlier that it might be a good idea to use the blockchain to claim prior art on implementation of ideas. Add the 'filing fee' to get your message included and presto: instant notarization by 10's of thousands of people.
"We believe your HipHop software should be open source and available for everyone to investigate."
Show HN: Discussions everywhere
This is early prototype. I think what that system can join the audience of the sites and extension/bookmarklet users.
For me it was kinda obvious when the video started playing :-) Although the idea shown in it is creeping me out, reminds me of these over-managing micro-managers saying things like "what about half a pixel left?" (really happened to me)
I don't think that generative art needs to stop requiring programming skills to be successful. The huge community of www.processing.org artists who code suggests this requirement is not a problem. The whole point of generative are is to use programming language as the tool of visual expression as opposed for example to using UI based tools like Photoshop or Illustrator.

Any art (visual or not) requires creators to use various tools and learning these tools takes a lot of time and afford. And mastering them often takes insane amounts of study and practice. Think of work required to learn to sketch human figure well or chisel it out of wood. Think of years of training required to play a violin concerto. Or to dance a ballet piece. Programming is just a new/differnt tool required for creating generative art.

I would even go as far as stating the opposite. Attempting creation of generative art via interfaces other then conventional programming languages is what would limit it! This is for the same reason that professional programmers haven't adopted (not yet at least) visual programming languages - they are too limited in their expressiveness.

The whole interest in generative art and design is driven by the fact that you can create things that you cannot using Adobe (etc...) tools. All the Photoshop and other image creation and editing applications are very powerful, but still limited by the imagination of the people who made them. Creating images using code lets you escape these limitations. This is what makes it an interesting new visual arts discipline.

And if you study lives of many artists you realize that they can be pretty obsessed and determined to work hard to learn tools and techniques in the process of their practice, so I am not worried - there will be many who will become excellent programmers!

What stops fast adoption of this type of art is the educational institutions insistence on separating artists from engineers. If computer science departments offered and occasional art course and fine art departments intro to programming, the generative arts would possibly become one of the most popular art forms in the new century. It would also help more of multidisciplinary creative thinking on both sides. I certainly agree with the article that the possibilities are immense...
HeartBleed Changed Passwords: Now Change Your Online Security Policy
A few years ago I was developing against an API...though that's not how I would have described it then. I copypasted tables from a webpage into Excel and used Mailmerge in MS Word to generate a bunch of functions [ok, actually procedures - it was Pascal],

I'm not a professional programmer either, of course. But it worked pretty well and for a one off exercise was a reasonable way to handle tooling. It's pretty lightweight.