skysight-inc/HackerNews huggingface dataset:
>It's not a coincidence that the best researchers in the
>industry spend much of their time discovering and weaponizing >browser vulnerabilities

It's not a coincidence, but complexity isn't the only possible explanation. Attackers like to go after easy targets, and nobody's saying that browsers aren't easy targets. I'd say it's because browsers are built around a fundamentally flawed security model that provides inadequate isolation between various users, resources, and activities. That could be true even if browsers were ten times simpler. Others might point to prioritizing other goals (e.g. rendering performance) over security, or even say that browser implementers are just less skilled than kernel implementers.

> You say browsers are insecure because they're required to be complex.

No. I said they had conflicting requirements, but I wasn't talking about complexity. I was talking about things like plugin extensibility and interoperability with protocols and formats that are themselves insecure. Those requirements don't have to drive the insane LOC figures for browsers, but it's hard to be secure when you're exchanging bodily fluids with every plugin writer in the world.

Instead of beating this dead horse any more, perhaps the more interesting discussion is whether browsers can be secure. Or is the fundamental concept of a "browser" - a single program to mediate all kinds of protocols, intermingled with presentation and even execution of arbitrary code all in the same address space - just a security anti-pattern at its most basic level? If you have a component that tries to pretend it's an OS, but is essentially not capable of being a TCB, maybe it's not the component but the whole architecture that's broken.
> The problem with the term "organic" is it's broad and not well defined. It's like "agile" in our space.

...and this if further complicated by the fact that this paper is based on combining data from almost 150 other studies.
Oops, I read your first comment as saying "CPU, demodulator, AND tuner". Yes, there are lots of chips that integrate a CPU and demodulator, including the ultra-popular RTL2832U, very popular among SDR hobbyist (as combined with E4000 and other tuners).
I'm not a fan of Star Trek, but curious - where are all the stupid & lazy people in their universe? Ie have they been bred out, are they back on Earth and the show doesn't dwell on them, or what?
I think Pete Cashmore founder of Mashable spoke about the rise of curation a few years ago.
Was Teller a bible-swearing kind of person?
Jazz and Rain
I looked at this project quite a while ago. It seems really interesting but I'd like to see more example projects that build on top of it to really get a gist of what it is good for.
The actual headline is "Curated Food Delivery Startup Caviar In Talks To Be Acquired By Square For $100 Million" - this isn't a done deal.
It seems like the problem is simply that there aren't any national grocery chains active in Detroit. That may be unusual, but it's something of a far cry from there being no grocery stores at all.

People are mammals, not snakes. They need to eat! Where there are 700,000 people, no matter how much many of them live in poverty, you can be certain that there is enough demand for food to support at least one grocery store...
This is kind of a core principle of mandatory protection systems (Class B for people familiar with the old orange book).

Without this, it because difficult to ensure security policies are subverted by users. There are also some really powerful security benefits when essentially nothing is anonymous.
This is horrible advice. This is the type of advice which causes people to give up on what might be a modest improvement, because they rapidly find you can't get anything done when you have to get up to pee every 20 minutes.
Unfortunately, all the responses are pretty negative and feel selective. The responding authors always criticize details, sometimes even around implied intent rather than factual content, while carefully omitting core parts of the original paper's findings.

For example, nobody even cares to agree that organic food has significantly lower pesticide residues, which I think is a pretty agreeable positive effect of organic produce, and one of the cornerstones of the argument for organic foods. This affects not only the health of consumers (around which there can be an absolutely healthy debate despite the fact that less poison is probably almost always better here), but also impacts the environmental footprint of farming.

There are also loads of straw-man arguments, which further undermines the trust in the credibility of the responders. The OP never denied that eating more fruits and vegetables - organic or not - is better than eating none at all. All that the paper did was publishing findings about the differences between organic and non-organic produce. I don't think antioxidants or phenolic compounds were framed as essential nutrients, and besides that non-essential nutrients do have effects on the consumer's wellbeing and health as well.

A truly unbiased response would feel more balanced. It would welcome certain findings, rounding out the picture with additional facts that might change certain conclusions drawn from the data, and add contradicting data found on a similar scale of research to the conversation. Such a straight and drastic dismissals of the paper in its entirety, however, based on carefully selected details, feels motivated by external factors beyond science or neutral dialog.
buy a business card cutter and print on unperforated card stock.
So a criticism of the stats: the health page bars for electrolyte levels are poorly conceived - they give the impression that "higher is better" (there's no numbers on them) - not whether or not the value is within the relevant "normal" range (which itself, should be adjusted for age/demographics as well).
That last sentence is rather odd, coming from a gigantic lump of some trillions of cooperating cells.
Idea: The ‘Liquid Grid’ Street Layout (2011)
I wrote https://github.com/abemassry/crazip in python and it was challenging to find out how to do multiprocessing effectively, not sure how this would run if implemented in other laungaues.
Tweetping: Worldcup
Hilary Mantel's "Wolf Hall" and "Bring Up the Bodies" - historical fiction. Brilliantly imagined life of Thomas Cromwell - http://en.wikipedia.org/wiki/Thomas_Cromwell,_1st_Earl_of_Es...
Comparatively speaking, the functions of an OS kernel are fairly small and contained. Sure, you can find bloated kernels out there and small secure browsers, but I can read the kernel portion of the POSIX specs without crying. I can't say the same for all the browser specifications out there.
I was a game developer for various AAA studios for many years and did many, many interviews for new hires. The number one thing that companies will look for is knowledge (you will be tested on this) the next is drive (you have to show that the company should take a chance on you). These things are no different than any other job.

Luckily there is a very simple thing you can do to hone the first and show the second. Make a game. Don't piddle around with an engine, don't read and talk about how you could do this and that if you were given a chance. Make a game. Make it small and completable. There is not a single thing stopping you from just making a game.

Find a genre you like and make a clone, then extend one area with a new idea. Or a clone that show you understand a specific technical area. Or create a mod for an existing game, hack new functionality into Minecraft, or change a control scheme in Half-Life. Just make something you can show, then show it.

A point though, you will find it easier if you pick an area to specialize in. Saying you want to get into the games industry is like saying you want to play in a band. What instrument do you play?

Most game studios don't hire many generalists without experience. So pick one area that you are willing to work at for 3-5 years and double-down. Then find a way to show 1) you've done your homework at a base level 2) are willing to sit-down and do the work.
pretty poor language choice to teach parallel programming concepts
FreeBSD already has it in ports:

http://www.freshports.org/security/libressl

And there is work underway to make it an option for things that use OpenSSL currently.
While there are exceptions, the majority of the valley is more the weekend biking, hiking, 40-50 hour a week with good work-life balance. There is a lot of stereotyping, which always has some grain of truth, but it is not the median.
Thank you. We changed it.
You're ignoring all the user space libraries that the browser uses and a kernel does not. Heck, glibc alone is over 2 million lines of code.
I'm assuming this acquisition (if it does occur) would be paid for mostly in Square stock. $100 million cash vs $100 million in Square stock have two different values, depending on how you feel about Square's current valuation and future prospects.
it's nearly impossible to find a parking spot at that whole foods during business hours (which is a good thing!)
or they have more tables.

In any case, they conclude by asking people to be more "considerate". Whatever that means.

Perhaps there's a market for restaurants where you can be fed in 30 seconds, I could imagine something.

Or perhaps there's also a market for more expensive restaurant where you can take time to eat and have other social activities like talking, texting, taking pictures and having pictures of your table be taken. Also perhaps they could widen the space between tables so that we don't bump into one another when walking while texting.

Otherwise, it might suggest a feature in smart phones: a little camera on the top side of the phone that would display on the screen when the phone detects movement in that direction.

(only the last paragraph was half a joke, the rest is serious).
Some good comments prior of MirageOS https://news.ycombinator.com/item?id=7726748
One exception does not disprove the rule, and honestly, I wouldn't let my kid walk home at that hour.
"Should be dealt with by parents", I agree. Often, it is not, so the community has to do something. I don't mind a curfew for kids, but I don't think it should be a criminal offense either.
https://www.changedetection.com/ should do what you're looking for.
I was quite recently fed in 30 seconds at Umami Burger in Oakland. I placed an order online, walked there en-route to BART, they had my food ready.
Seconded. If your commits consistently fix things while his consistently break them, that will be noticed. Just focus on doing your work as best you can and try not to let this guy get to you.
In their statements they all ignore the question of environmental impact, pesticides, worker health, etc, which are the strongest reason to buy organic (and not because the food has magical properties).
Are you saying that large SQL strings isn't a code smell if the application is dynamically putting them together? That seems like DSL/Query Builder territory to me. Perhaps you could share an example?
New Recipes App: Help me make sure I'm doing the right thing
I've been working on a new mobile recipe app for about a year now in my free time. I recently watched a Google I/O talk called "Perfectly executing the wrong plan" and it hit me hard. I realized that I had never taken the time to fully validate my "critical assumption." Could you help me by participating in my dinner habits study? The purpose of this study is to learn about cooking, meal planning, and dining habits.

If you cook at home at least once a week, please help me by signing up for my study here: https://docs.google.com/forms/d/18uxASkdBSIkgb4vqr51GoCDQTcwNqa0VVmdeOLPDXgA/viewform.

I'm using the "experience sampling" approach described by Tomer Sharon in the Google I/O session. It's really easy to participate. During the study you'll receive a text each day for two weeks. All you have to do is send a quick response each day.
Venezuela Airport Is Charging Passengers for Clean Air
herbicides: pelargonic acid (Scythe) and acetic acid are famous examples, but glyphosate (Roundup) and imazaquin (Image) have higher LD50s than table salt.

insecticides: Bacillus thuringiensis Cry proteins (used both in organic agriculture and in Monsanto's Bt lines), RNAi
So, like maybe he gave her a black eye, and a fat lip? Did her clothes get ripped? Was there lasting evidence of a serious assault?

Did he knock her down a flight of stairs, and the kick her the stomach until she shat blood?

Or did he just kind of push her aside, or grab her by the wrist, and shove her around and yell a lot, after she stood in a doorway between him and his bongo drums?

Did he overpower her and then hold her down and spit in her face? That might constitute serious psychological abuse, and then again maybe it might not be abuse at all according to some people.

Maybe he put her over his knee and spanked her? (some people might enjoy that sort of thing at the time, and then complain loudly about it later)

What does "attacked" mean?
Keep in mind that even if a compound is suitable for use at scale it might cost slightly more than current methods and therefore see almost no use.
Here's the link to my study: https://docs.google.com/forms/d/18uxASkdBSIkgb4vqr51GoCDQTcw....
I'm always curious as to who profits from a leak like this. is there ever any interest from the company or acquiring party to leak this deal to the press before it closes?

It's happened with Twitch and now Caviar, so i've started thinking through reasons why it'd be in either party's interest to leak the deal. Any thoughts? Or should I take my tin-foil hat off?
Here's the Google I/O talk "Perfectly executing the wrong plan": https://www.google.com/events/io/io14videos/847e9312-a8ba-e3....
Wikipedia is getting very awkward - it is clear that some articles are 100%
propaganda, while others appear to have honest insight into world events.

I guess it's good to break the habit of thinking that history (like AP US
History) can be read in an "unfiltered" way, but without something like a
comprehensive database of every single Wikipedia edit, with tools to help detect
bias (example: CIA wants to edit an article) Wikipedia will become a victim in
the information arms race.

In this particular case, I think statistics can reverse the obvious "tragedy of the commons" situation with Wikipedia.

For example: tools to help with associating edits / edit conspiracy / sockpuppet detection
Personally, I think the experience of typing ctrl+t is better than using pkill. Just 2 keyboard taps and you're done.
Author here - just a note the purpose of the article was not to convince users to use Tastypie over Django's RestFramework - both frameworks work well - I just use Tastypie because I made the decision before Django's RestFramework existed.
Considering the author's use case (mathematical modeling) and language (Python), threading and event-based models would have no real performance benefit.

Event based models only shine when you are doing IO-bound tasks. They won't help you when you are chewing CPU.

Threading models in Python aren't attractive because of the GIL. If you are doing a parallel matrix operation you can only ever use one CPU because of the GIL. Not attractive.
Probably back on Earth (or whatever their homeworld is).

Besides the issue of being theatrically-fulfilling, the nature of something like Starfleet would tend to select against having truly stupid/lazy people there. Even the modern (and for that matter, WWII) U.S. submarine fleets are not cross sections of society, and the technical and training requirements would only seem to have gone up for Starfleet.

I'm presuming the "bred out" thing didn't happen, since the Star Trek canon (and a few episodes, e.g. of DS9) speaks of eugenics as a practice becoming highly disfavored hundreds of years before the events of the various TV shows and movies.

With all that said it is definitely implied that life in the Federation is essential utopian, without lazy/stupid people. Maybe a more knowledgeable Star Trek geek can explain how the show explains it but AFAIK the disparity is never explained by anything more substantial than improved social policies after First Contact.
But if there is a systemic-level issue, systemic-level intervention is precisely the right response. Individualist attempts to address systemic issues are mostly romanticism.
It's just as appealing as watching self-organizing behavior in ants.

But I'm not an ant or a honeybee and I see no reason to think of my fellow humans as worker drones as opposed to a more familial social patterning. Even the elephants, lions and wolves can do that much...
> they're nailing an underserved market

There's a good reason the market is underserved. If it were wildly profitable to operate in that space, you'd see many more players.
The reliable sources for high-power EUV light (synchotrons and free-electron lasers) are all expensive and gigantic (building sized) due to the accelerator and shielding required for the electron beam. They're completely impractical for industrial scale manufacture (you fundamentally couldn't put 100 of them into a single factory).

Heating tin in a regular laser until it forms plasma and starts emitting 13.5 nm light is much simpler to scale down (since it doesn't involve an accelerated electron beam) but you lose large amounts of power while trying to form a partially coherent beam out of the result, turning hundreds of kilowatts of infra-red laser power into mere 10's of watts of EUV power.

The high input to output ratio means that you need to be really careful that the large amount of dissipated power doesn't cause problems. Tiny misalignment problems often result in the 200kW infra-red input laser melting the entire device into a puddle of former components.

http://www.eetimes.com/document.asp?doc_id=1321162&page_numb...
So you want to be yet another place I need to check in with to get these offers and provide the tracking, analytics and subscriber numbers to sell to businesses?

In addition to Facebook, Twitter and my regular email.
This is certainly an intriguing answer, and makes me want to try Haskell sometime, but it also makes me wonder if I can't get the same benefits, with a little effort and discipline, in a "semi-functional" language such as something in the ML family or even (if I can live without static typing) Lisp.

In fact, I've always made a point, when working in a semi-functional language, of writing as much code functionally as possible. My experience is that it has the same benefits as you describe. So I don't know how much more there is to be gotten by actually switching to Haskell. My guess is, most of the additional benefit would come from the type system. But maybe I would be motivated to write even more code functionally.
Autopolyfiller.js
I've had my wife throw items at me. It definitely felt like an attack as opposed to mere threats or menacing.
A completely unrelated question: in the terminal screenshots, what is being used for PS1? I love that display of the CWD and git repo on the command line.
Scaling, Normalization and Standardization for Machine Learning Algorithms
JQuery 2.0 Development Cookbook
On the acquiring party's side, isn't it then obvious what side is responsible for leaking the deal? I'd imagine this move breaches some level of trust and risks the entirety of the deal.

To me, when I hear news like this before the proverbial money is in the bank I actually think the deal is likely to fall through
It seems there's an error in the text:

"must be representable in binary using at most 52 bits for double precision and 23 bits for single recision. In other words, for double, 2^52f is an integer in the interval

0≤2^52f<2^52"

52 bits are used in the double but the highest 53rd bit is implicit for all IEEE754 doubles which aren't denormals. And denormals use less bits as they approach 0.

The text misses both important aspects of the standard.

And what's with that "I've always known him by his nickname "Velvel"" and then using the nickname from that point on? Sounds like Monty Python sketch: http://m.youtube.com/watch?v=9svCBKWpCRQ
I think that was still a year or so before news stories started coming out about government "redacted" documents that were not actually redacted.

A lot of the NSA-related documents released after redaction were certainly run through the "redact,print,scan" routine, and I know the Navy does the same as a best practice now.

Maybe that hasn't made it out to the defense industrial base by now, but I'd be surprised if 9 years worth of being beat about the head regarding redaction mistakes wouldn't have fixed things even there.
> He's attempting to analyze systemic changes in society accurately.

s/He/She
Whatever a robot can do, they can do a million times an hour.

Next we'll have robot comments on robot blogs. We already have impersonal birthday wishes on fb -- where you can make an app that automatically wishes happy birthday. And the recipient can install an app to automatically thank everyone. It's as I was half joking in the past -- guys will outsource their robots to have sex with their wives' robots.
Are you suggesting some moral theory by which wealthy/educated/successful people ought move to certain cities in order to improve those cities?
I'm making no comparison to physical goods except the wheat one. Yes, I'd bet you can grow wheat in San Francisco and lots of films are made in places other than Hollywood but my point is you go where the people are and the people for those industries are in Silicon Valley and not Detroit.
I don't recall seeing it either. I must not eat at the right restaurants. (I live in Silicon Valley.)
Ah, I think I see what you mean. Seems the constants being ignored could be massive. Are there any comparisons saying how things compare in practice? (Similar to how heapsort is typically not used, even though it has among the better Big O values, right?)
It's called Powerline, and it has bindings and configs for nearly every shell, editor, and everything in between including tmux.

http://powerline.readthedocs.org/en/latest/overview.html
Accusing someone of communism in those witch-hunting days was a dangerous thing to do. It seems a bit improbable that Feynman would have done that to himself, knowing that it could jeopardise his participation in other committees/projects/areas that were of interest to him. He wasn't 'forced' to be on the PSAC, it's not like he was trying to get away from jury-duty. He could just as well have said he wasn't interested/able do participate when asked to join.

To me, it would also have seemed a bit out of character, Feynman has demonstrated that he had no big problem speaking his mind, so stealing someone's identity, with the legal risks that represents, especially if it was his estranged wife's, doesn't sound very probable.

But hey, I don't know, I guess I see it as improbable but it's always possible.
I don't think anyone in my family eats organic foods. Many of the older generation have lived into their 90's and 80's. My grandparents are in their 80's now. Would their parents have lived into their 100's had they eaten organic food? They weren't sickly miserable people all their lives. I just don't get the ultra-health kick. My take is to stop worrying about your food so much and eat whatever satisfies your hunger, just not too much. Micromanaging our diets is this generation's yogurt enema.
BE THE CHANGE-Arwen Starsong (Audio)
Whispers of Love- Music to Heal Your Soul
also, that individual (or his/her guardian) was paying for the privilege of doing her work for her.
How is that a paradox?[1] I fail to see the contradiction in putting up a defense and yet remaining cautious. Did you instead mean that it is ironic? I don't find it ironic or paradoxical, but I think irony is closer to the word you're looking for.

Taking one precaution and yet remaining cautious is rather common. We wear seat belts, yet drive carefully. We practice good hygiene, and yet get vaccinations, etc.

[1]http://en.m.wikipedia.org/wiki/Paradox
Is this for me? I'm in Australia.