skysight-inc/HackerNews huggingface dataset:
I see, so prior to this random() and entropy() addition to Linux nobody could ever write any security related application. Yes, this is true. We should change the pull request to "Enable security for Linux, 2014". God, never too late...
It could've been email spoofing[1], where the attacker sends an email with a worm and makes it look like it was sent from a friend. Once the email is opened by the recipient, the worm sends a similar email to the recipient's contacts, which continues to spread the spam.

[1] http://en.wikipedia.org/wiki/E-mail_spoofing
A 64-bit process ID would allow that.

Well, currently. (~585 years to overflow at 1 billion PIDs/sec. Seems absurd, but then again, there are so many cases where we've gone "this should be good enough"...)
When I scroll down the Vim Awesome home page, click a link, and then go back to the home page (Alt-Left), I'm directed to the top of the home page rather than the location on the home page where I left off. Is this issue caused by React? (Every site I've evaluated that's powered by Meteor has this issue, and I hate it.)
Just don't fork in that callback... Or call anything that potentially forks.
The Sneaky Game of Retailers to Make Buyers Spend More Money
I assumed they were talking to an AI of some kind. They should do that instead.
Forced abortions, forced sterilizations, sex-selective abortion leading to a demographic disaster, promotion of eugenics, overcrowding orphanages, child abandonment, and infanticide.

Please do not call what China has done, good.
Correct. I had tried to clarify the margin of error calculation wasn't relevant here by saying "Even if this had been a quantitative study"...sorry if that wasn't clear.
Dropcam acquired by Nest/Google
I don't know if there's still an active cell line in the lab, but have they tested 1-deoxynojirimycin, or nojirimycin? Although they're glycosidase inhibitors, since this is a lysosomal storage disease, IIRC one copy of the NGLY gene is dead because of a nonsense mutation but the other has an uncharacterized, non-catalytic mutation. This one might be rescuable through a "chemical chaperoning" effect, ironically the proper treatment then is an inhibitor to the enzyme you're trying to save.

Relevant research on a (beta-) glycosidase (but presumably the active site structure and thus the inhibitory mechanism of nojirimycin should be similar):

http://www.pnas.org/content/99/24/15428.short

Also I had a short discussion with Dr. Freeze about his results showing that flooding with mannose (not therapeutically viable) improves activity, mannose is a weak NGLY1 inhibitor.

Also Mz: I was the biologist that responded to your query!
The “Just In Time” Theory of User Behavior
That people outside of the "voting ring" or "in-crowd" get voted up by a "voting ring" or "in-crowd" sometimes does not obviate the central criticism - insiders exclusively decide which outsiders are selected.
> Patient-advocacy groups have been around for decades, but it’s extremely unusual for one or two families to single-handedly direct an international research agenda. It helps that both the Mights and the Wilseys have family money. (Matt Might’s father is the president and C.E.O. of Cable One, the cable-television division of the former Washington Post Company.)

It's a really sad fact that economic inequality has a particularly dire effect on limiting access to quality healthcare and specialists for patients with rare diseases, no matter the severity.

The diagnosis difficulties the Mights went through with their son are made much worse for parents who can't pay, even for much more common rare diseases.

Hopefully someday our civilization can advance to the point where economic means matter much less than they do now for healthcare, where quality of life and opportunity to thrive is respected equally for every human, regardless of family money, or who gets the right to publish.
It also helps to establish some early rolls. Some with more expectations than others. We sat with one investor and they assumed that the CEO should be the one pitching for example.

Not to mention, if you are going to quit your job to build a company you don't get excited and call yourself a junior engineer. Or full stack guru.
Library for create zip archive in php
What about a non-global blocks-until-seeded CS-PRNG character device? I.e. you open an rw file descriptor to /dev/csprng, write(2) your seed to it, and then read(2) bytes from it. Open another file descriptor, and you get another CSPRNG that wants a separate seed.

This way, you could, say, somewhat simulate the behaviour of ZeroVM with Docker containers, by having the CSPRNG seed be a configuration parameter passed to `docker run`.
How do you know it is not random?
http://dilbert.com/dyn/str_strip/000000000/00000000/0000000/...
It could have been that spam was sent to all her contacts, from her contacts machines. Another possible explanation; has she granted access to her Google account to sites? --you know, login with your Google Account. Some permissions are "access your contacts."
I totally agree! An average teenager/young adult sends 3000 text messages per month. For this generation, text messages are more convenient than phone calls.
I understand where you're going with this now. Employees tap out responses on their smartphones. Put yourself in the shoes of a customer now: you walk in and see an employee looking down at their phone and tapping away. Most people won't assume that they're conversing with a customer. The phone conversation doesn't have the same "hey, I'm busy with another customer right now" effect that an audible phone or in-person conversation has. Customers will assume the worst: that they're being ignored for the sake of some employee's personal texting.
THANK YOU. Very, very much. I have been taken seriously a few times by a short list of folks with PHD's and it has been invaluable.
I would say fairly secure based on length

Here is the reason:

1. It is 101 characters. If I was brute force attacking I'd imagine I'd target passwords <32 characters. Probably more like 8-16.

2. It has [a-zA-Z0-9]. This isn't bad, but isn't optimal. Add some symbols or non ASCII characters to really screw up brute force attacks.

3. If for some reason this is the password on a system that is not hashing but encrypting and using a cipher in ECB then it is definitely not secure.

Honestly if this was a password on a giant list I'd skip it and move on to easier targets.
Malaysia Flight MH17 Passenger Joked About Disappearing Plane Before Takeoff
See https://support.google.com/accounts/answer/3466521?hl=en
I see the Babel doco has now been changed (10 hrs ago - any relation to this HN post?) to say I can run Babel against Nimrod 0.9.4 stable instead of needing to build Nimrod from source. This is great news, I was put off by the language's package manager not working against the stable release version. I look forward to giving this a try.
I would love to see Netflix buy Backblaze and offer free computer backups to every customer, just to fuck with this specious argument.
Why Nuzzel Raised A Second Seed Round
Depending on what you need, http://html5up.net/ has some free templates. I'd also be willing to build you a custom page.
No, this is most likely an artifact of react-nested-router (https://github.com/rpflorence/react-nested-router) not currently preserving the scroll position. Definitely not a constraint imposed by React.

Edit: Or this may be due to the fact that we don't properly cache the fetched plugin list on the client side so we end up re-fetching it when you go back. Either way, this is not a React problem.
Why do you think flask is better?
No not really. Django makes a great API framework.
What is a case where a random IV needs a different entropy source than a session key?

And if we're assuming the entropy pool is being compromised (full state read by attacker) from time to time, isn't it foolish to be generating keys on such a machine? Why would new state not be compromised in he same way the previous state was? I understand the system design may want to provide a robust RNG, but further than that seems slightly pointless.
Alias analysis failure leading to escape analysis failure is the default case, not the corner case.

I think it is valuable to research what is the best set of restrictions to get reliable escape analysis. For reliable escape analysis for unrestricted case, yes, I think it won't be possible and it isn't worth bothering with at all.
Malaysia Airlines plane MH17 ‘shot down’ on Ukraine-Russia border
New map fingers future hot spots for U.S. earthquakes | Science/AAAS
Where in the world HN users came from
>If my Library let me donate $120 to them annually with the ability to borrow from an eBook collection of 500,000+ without having to go to a local branch or waiting for someone to "return" the digital file then I'd write the check tomorrow.

My university's library sometimes has this feature. In my experience it's more delimited by the availability of ebooks beyond PDFs (especially scientific publishers only hand out PDFs, no mobis/ePubs at all) and a good measure of paranoia.

Currently, I can read the uni-library's ebooks only using Adobe's 'Digital Editions', which doesn't have a Linux client, and doesn't want to communicate with my Kindle, even if the file in question is an ePub.

(Of course with the right plugin Calibre can remove the DRM making the whole security theatre completely unnecessary)
I was in one of the first Rising Stars programs and our company was subsequently accepted into the full, 3 month, TechStars program. The program was great because it gave us access to a community of entrepreneurs and mentors who could help us navigate the endless challenges of leading a startup.

I definitely recommend the program!

Greg Coleman, President & COO, Nexercise
Measuring context switching in Linux applications
Yes, and how has copyright law been faring on the face of torrents?

What I'm saying is that it's silly to try and regulate things that are mathematically designed to withstand any regulation. I do not believe unenforceable laws are the way to go. If the government prefers that we do things differently then it should lead by example, convince by arguments, etc, just like anyone else. Instead they're acting childishly by passing laws that regulate something they don't even understand, and that ultimately are not amenable to regulation.
Isn't redbox owned by Coinstar? But has agreements with Verizon?
While in theory this is useful, it's one of the least intuitive parts of python for me. I avoid them whenever possible because I feel "else" conveys the intent very poorly. (And I've been writing python for years.)
Practical Guide to using Apache Camel
Employees already use there phones while at work to text their friends etc...When a customer walks in.... They would usually put there phone in their pocket and satisfy that walking.

Can't see how they wouldn't use this in the same way.
^ Agreed
> "might generate easily predicted cryptographic keys under certain extremely rare circumstances"

no, he's not saying that - he's saying that there's no such thing as entropy depletion - and so urandom is secure. Which makes me ask after urandom was created - why EVER bother using /dev/random with it's blocking flaw/deficiency?
Well, Orville Wright didn't have a pilot's license :)
Funny that half the comments so far are people linking to their own projects in this space.

Yep, me too.

Try a demo: https://demo.sandstorm.io/demo

And here's the code: https://github.com/sandstorm-io/sandstorm
It is a good idea. you may want to better understand why customers may contact a business and make the messaging experience much smoother for instance by having sample text message ready to be used by users.
It is still illegal to buy a vibrator unless you have a doctors prescription in some places.
Could we possibly grow headless humans that are kept alive on life support or something to make up for the missing brain?
If I understand correctly, this is livechat's model:

I need to ask if the Levi's store at Kanata has a Midnight black 514. To do so, I have to download Levi's app first, use the chat option (that integrates with live chat) and chat from there. The problem is I don't know when I will use the Levi's app again, maybe once more this year? I don't want an useless app to clog my phone.

Here's the RealTalk scenario:

I only have one app "RealTalk" that connects me to Levi's for jeans, Diesel for my shirts and J. crew for my sneakers.
Proper link that lets you see the discussion:

https://lkml.org/lkml/2014/7/17/145
"We are closing Google Reader Free, but you can pay $1 a month!"
You make it sound like you are saying something new in your first couple paragraphs, but you aren't: the initial entropy gap issue seems to be exactly what klodolph was talking about. You hedge with "not really focused on you", but I'm going to say that you probably then have just not posted most of your post, as even if none of it were related to klodolph (which isn't the case anyway, due to the quoting of "too loose") it is still written in a way as to make people believe he made the mistake you are trying to be pedantic about :(. Just because many, even most, people make a particular mistake does not mean everyone does. Note, very carefully, the wording "at some point": and it wasn't then "until it runs out", it was "just keep on spitting out". To some people, this is a real issue stemming from a completely unreasonable kernel default that the developers of libraries and applications have absolutely no control over, which occasionally comes up on computers built with custom distributions by non-experts under the assumption "Linux will do something sane", and which in a prior thread we found actual Hacker News users who had been first burned and then didn't have good options for a fix as it was a customer's computer. I think if you would be willing to be more open to the premise that not everyone is wrong in trivial, predictable ways, you'd be surprised by how often they aren't :/. Your last paragraph is great, and I'm really glad you contributed it, but the first two were unwarranted.
What is the difference significant between Second Seed and Series A?
It happens to me too now and then and I'm pretty sure that we're not the only ones. The Ad icon I see is far from gigantic and more blueish than gold, it's very easy not to notice you're clicking on an advertisement. Maybe15 years of using Google and relying on the first search results on top has caused some sneaky "Ad" blindness.

Sometimes I feel sorry for the advertiser when I accidentally click such sneaky text Ad, especially when the first real, natural search result is the link to the advertising company's website, just below the Ad. It feels like a devious way to rip off advertisers who would have been first anyway.
This is presuming, of course, we don't care the Alice and Bob have different world views temporarily?
Shooting while in motion leads to a very shaky video. Being able to shot that steady video while using iPhone on a bike counts as very impressive to me.

To understand more, see this product called MoVI

The final footage:

http://vimeo.com/62917185

Behind the scenes for the same footage:

http://www.youtube.com/watch?v=pDv2OYKICoc
I agree. I use it, but intuitively, I think of else acting the opposite way - if the loop finishes successfully, great! else, do something.
http://tvtropes.org/pmwiki/pmwiki.php/Main/TwentyPercentMore...
How do you message a business that doesn't follow you privately?
React already can render into shadow roots, and eventually we could add a mode that tosses aside server rendering in favor of shadow DOM. However, if all you want is style encapsulation, you can get that with conventions.
I'll put $50 into this if a feature of version 3 is supporting an optional serializer / renderer that follows the "JSON API" spec (http://jsonapi.org/), to support output similar to rails' ActiveModelSerializers.

Anyone working with EmberJS would find this desirable because that is the default format of API it expects.
Floor staff are trained to be proactive rather than reactive. When the customer has already voiced their intent and it doesn't necessitate more interaction you can switch to another channel queue.

Obviously if that's not the dynamic of your shop then this isn't the right tool.
Yeah, totally not cool to knock the design - it's damn sharp. (PS I'm from the competition Wipster, and I'm still saying that)
I agree. Intuitively, I would expect for item in list: .... else: ... to execute the "else" clause only if the list was empty and hence the for loop didn't iterate at all.
Matt: I'm on temporary hiatus from science work and have a lot of flexible free time, and am located in San Diego, where I know some of the work has been done. If there's a lab that has access to relevant cell lines, I'm willing to do a bit of work here and there on a volunteer basis to try and explore a therapeutic strategy, have some ideas to quickly ascertain if the chemical chaperone route is wise or not, especially if they have a working assay going.

Contact info is in my profile.
If you're using break to signal success, that is how else acts.
TCP/IP includes UDP and IP. It's quite trivial to "data-rape"; that's what [D]DoS is.
Holy shit, you're in the zone!

We'd been considering N-acetyl-dideoxy-nojirimycin (2-ADN) to inhibit a different enzyme related to NGLY1. (I can't discuss more publicly since the research is unpublished, but would be happy to discuss over email.)

Can you explain a little more about how an inhibitor for NGLY1 could rescue the frame-shifted (non-nonsense) variant?
you do realise that China has hugely imbalanced demographics and have artificially created their own social security crisis thanks to their their policies?
I count 17 that classified it as a sex object. Its worth noting that this survey was sampled after it was released to the public and a controversy had already stirred.

I was impressed that one respondent said "ouija board planchette".

The open ended nature of "what do you see" is totally questionable. The 'do you think this is a sex object' is a much better way to ask that question as even though its leading, its also the kind of thing you cant 'unsee'. "Does this look like balls?" It does now that you mention it, yes.
I had problems a while back with any long-running downloads or streaming video on ATT DSL. Basically made some uses impossible - any large remote data that couldn't resume at arbitrary points. Went completely away when I switched to a third-party ISP - using the same ATT-owned DSL lines.
What if you want reproducible random numbers, such as in, I dunno, AES? That limitation would prevent any sort of decrypting things.
"I'll help you find patient #2."

Awesome. I would give a million upvotes if I could. Your dedication to helping others is worthy of deep respect. :)
What finally made it intuitive for me: assuming the loop contains an if condition: break, you can consider the else-clause to be the else of the if statement within the loop.
Differing views are a fact of life, but inconsistent views needn't be. But I think what you're asking is a question of how long a lag your app is willing to tolerate between Alice and Bob. Orly lets you set limits on that lag but never allows inconsistent reads, preferring to fail the operation if it can't be done within your app's constraints.
the inhibitor to NGLY1 would not be able to rescue the frame-shifted variant, it might be able to rescue the other variant, under certain conditions, unless that variant knocks out the active site (I can't remember from the original manuscript if it does or doesn't, and I can't seem to find it). Sorry for the lexical confusion.

Also, on re-reading the description of NGLY1 (it's been 2 years) I realized that an acetyl-nojirimycin might be a better choice! Looks like my intuition was correct.
There are many objective reasons why the world is becoming a better place if you take a macro viewpoint (i.e. at the decade or century level).

Violence for example is one, and Steven Pinker makes a great argument for it in this book: http://www.amazon.com/The-Better-Angels-Our-Nature/dp/014312...

Its hard to see these patterns if you just rely on news/anecdotal evidence as your barometer for whether the world is becoming a better place, because the news reports whatever will get views, and nothing gets views like bad news.
Poll: How many emails do you have in your inbox right now?
Just curious to know what other inboxes look like. I'm guessing you have more than one account, so to make the math easy, just go with the account that has the most, and include both read and unread messages, and those in folders, if the folders are in the inbox.
1-99
100-499
500-999
1000-4999
5000-9999
10,000-19,999
20,000-29,000
30,000+
Sanford Burnham is in San Diego and is the leading lab for NGLY1. All of the cell lines for all of the patients are there. Dr. Freeze has a variety of assays related to NGLY1 available.

We'll get you access ASAP.

I'll be in touch shortly.

Thank you!
If you look at forum complaints with low-end WP devices, most people complain exactly about low memory that prevents them to install a lot of interesting stuff from the Windows Phone Store. I couldn't believe when Nokia decided to limit availability of 525 to 3rd world countries (that one had 1GB), and continued offering 520/6xx in the rest of the world, and then acting surprised when their sales were dropping like crazy. And after that they decided to release 635 again with 512MB...

I remember when Elop was arguing that WP doesn't need to support more cores as it runs fine on a single core (when Nokia didn't have multicore SoC supplier and MS had only single core kernel in WP7). Immediately as Nokia signed Qualcomm and MS released multicore kernel in WP8, Elop started marketing the more cores, the better. I just have feeling that your argument is a different version of the same.
Funny you'd mention Cogent and L3 together, seeing as L3 has done worse to Cogent (depeering) for the exact same reason Verizon is using (unbalanced traffic).
I use NodeJS quite a bit, which has massive ecosystem, but recently (and especially After TJ Hollowaychuk's announcement about moving to Go) I've been taking a fresh look at these new-fangled systems languages, including Go, Rust and Nimrod, plus Apple Swift. If I'm going to tool and skill up in a new systems language, I want not just performance and nice syntax but also reach. Of the three, Nimrod is the only one with a convincing story for running on the main consumer platforms (iOS, Android, Windows), server platforms (Linux, *NIX) and embedded systems - because it compiles to C or Objective C (or JS for that matter!). That strikes me as a neat approach. Whilst there are attempts to get Rust and Go compiling for iOS, they don't seem very advanced.

The small ecosystem is definitely a concern, but could also be an opportunity for a mid-sized IT corp to step into the ring with the big hitters and all their shiny new systems languages by backing this project.
I planned on using React for my next mobile app project until Polymer was shown off at I/O. React is a fantastic alternative to Angular, but the Paper Elements make Polymer too good to pass up.

I would be over the moon if React had a UI Kit that could be included. We need more app-centric first UI options for rapid development.
It's not that our current system functions well:

- ACH/normal bank transfers take days

- Files and money transfers are handled via SFTP

- There's no checks in place to see if the account transferring the money actually has enough funds. The money is moved and rolled back once the bank finds out

- It's legitimately difficult to move or accept non-cash payments through a bank (without Stripe/Braintree etc.)

- Checks are still valid

- Banks charge for incoming transfers (I don't understand this still)

It's more like it has had to do well; it's all we have had. Compared to Europe, it's really not great.

There is a much better alternative out there now. And it's tenable.