skysight-inc/HackerNews huggingface dataset:
I see. So the correct answer in your PC world is to silently feel some sort of existential guilt at having a better life than them. Sorry, I don't share that worldview.

While a) and b) may be true ("b" more so than "a"), "c" is only true in certain circumstances. Would you assert that everyone in prison is there due to bad luck? A necessary precondition for a new immigrant to the US to ultimately prosper is to avoid criminal activity (despite the very difficult situations they might find themselves in). It's quite sad that people take offense to this.
I disagree, security can be estimated, scheduled and tracked to completion.
It's not magic, and while new attack vectors are still being discovered, Heartbleed is a very traditional vulnerability that static analysis should have caught - if someone were actually running the analysis.

In fact, we don't know how long it actually took to find Heartbleed once Codenomicon and Google started looking. It might have been a weekend project for someone new to Codenomicon's internal array of tools, who was just looking for a way to get up to speed at a new job. It's also possible that it's the result of months of painstaking work by Neel Mehta, 6 of which were possibly spent with the status report of "All week long, I looked painstakingly through such such directories and didn't find any security issues", though I'd bet he didn't spend it on HN.

For traditional feature development, a dishonest employee could take random code from the internet, rename functions and then check that into version control, and say they were working but instead they were surfing HN. (Stretching out the "Oh, there's some problem getting it to compile, I'm working on it." excuse for months is left as an exercise for the dishonest.)

"Find and fix security bugs in software component X" is about as specific as "add a spell checker in software component X" and can be treated just the same. You break down the task into smaller components until you can visualize the code needed and then you write it. "Audit software component X for security risk A" is something a competent security researcher can be tasked to do and get results for.

For instance, after a week of working on timing attacks against an OpenSSL key verification function, the developer assigned to it could say "Here are the numbers I got; the difference between how long it takes to validate this key, vs invalidate this key averages this much, so it's not vulnerable to key recovery because X, Y and Z. Additionally, here is the code harness I wrote to generate this data; I also modified the code so that was vulnerable to a timing attack, and here's my exploit code, which is why I know that the shipping code is not vulnerable to this class of attacks.

Now if you think you can fake your way through six-months of status reports with that much detail, if not more, and also fake out some code for test-harnesses to back it up, all the while surfing HN instead of working, I'm all ears, but outside of vendors selling snake-oil magic security blankets, security research is a hard field to be in, where sometimes there's a lot of work for no payoff. The flip side of that is, that while Neel Mehta isn't due to become a household name, he is now quite famous in certain circles, and won't have any trouble finding a job if he leaves Google.
Ah, thanks for clearing it up. I was just surprised seeing it with 13 points off the front page the second time I checked it. Looks like I have to eat my words.
I understand why publishers don't freely license their game engines (e.g., under the GPL): if users and the gaming community had the ability to modify the games they purchased and create their own content, companies wouldn't be able to get away with selling horse armor DLC, releasing yearly rehashes of the same game, locking purchasers out of their own games with DRM, or sabotaging their own games ( http://www.tweaktown.com/articles/6450/ubisoft-gimping-watch... ). I don't see any merit in the "stopping piracy" routine you might hear; DRM has never done anything to prevent unauthorized sharing on PC, and art assets aren't any easier or harder to share if the engines are free software. Proprietary software is purely an instrument of control by the publishers over the users in order to keep short-term profits high, even if it means mistreating the customer.

But why don't we see more companies following in id's footsteps and re-licensing old engines as free software? It keeps interest high and people coming back to purchase the art assets needed to run the games. There are several games on Steam that continue to sell well under this model (e.g., Duke Nukem 3D, Doom 3)
There is some serious bias with this video.

For example, within the first few minutes they show this graph: http://i.imgur.com/IDXYI9Y.png

But the U.S. Bureau of Labor Statistics shows this:
http://i.imgur.com/BPNyjM8.png

They've excluded other industries in forming their basis and it's clearly cherry picking to fit a narrative. I like the idea of a fully-automated utopia as much as the next person, but jobs are simply not going to disappear - they're going to shift industries.
I thought they merged this in with their Oracle Linux

http://www.oracle.com/us/technologies/linux/ksplice-datashee...

http://www.ksplice.com/uptrack/using
Yeah, it's really a bit basic for an institution like Tate. Have you seen the other leading contenders for this project though? Also pretty weak.
http://www.tate.org.uk/about/projects/ik-prize/ik-prize-2014

Personally, as a serially apostate UK-trained computer scientist who is now an art/architectural historian, this kind of thing makes me question the superiority of London's museum establishment. It feels as empty as the rash of gourmet burger bars in central London, just recycling an idea of freshness rather than actually pushing any boundaries. Inherently conservative, not that I believe "disruption" is the answer to everything.
Hey Andy. Will do. I'll shoot you and email.
Thanks!

I think Blank is entirely right. But you have to be tricky.

At my last company we did user test every Tuesday afternoon. When seeking subjects, we looked like a research firm, not a product company. When they arrived, there was no company name on the door. The interviewer would start out asking about a variety of products to get a baseline; ours would just be one of several discussed. Eventually, because we spent more time on our stuff, maybe half the people figured out that one product was ours, but by then we generally had enough honest opinion.
Assalaamu alaikum! Great hadith. Nice to see more Muslims on hacker news. Where are you located?
Guessing they intend to submit a pull request in the near future. You can see examples on their GitHub[1], but I agree, it's rather odd to post the blog post before submitting the PR to TodoMVC.

[1] http://hackers.lookout.com/oraculum/
good html5 execution!
Unfortunately it's not clear they will be around for all that much longer. The Lib Dems had a 'reform' bill that would have made the House of Lords largely elected. It failed only because the relationship with the Conservatives fell to pieces at key time. A lot of people think that an unelected House is anathema still.
Hey, your website requires Javascript to display anything without any reason. It only uses JS for distracting effects.
>Monsanto has done this and won.

Well that's just not true.

http://www.npr.org/blogs/thesalt/2012/10/18/163034053/top-fi...
Does anybody knows how to search for HTML-ENTITIES?
Hello people.
Sorry is this too dumb a question. I'm trying to find information about an encoding in PHP that can be used with mbstring related functions. The thing is, it seems ALL search engines act as if the hyphen doesn't exists.

I tried Google, DuckDuckGo and Bing, similar results in all of them.

PHP site's search is powered by Google. Too bad. If you search for HTML-ENTITIES, found here:

http://ar2.php.net/manual/en/mbstring.supported-encodings.php

In the first page of results that page is not listed. In the second page you start to get pages in other languages (like, you know, Japanese, or German). Shame on you, php.net.

So, does anybody knows if there's a programmer-friendly setting or engine around?

Thanks in advance.

P.S.: Again, sorry if this a stupid question. But I think it's even more stupid spending more than 2 minutes trying to find out how to do a search.
> In fact, if seeds from your neighbor's field are blown over by the wind to your field, and you harvest those, you can be sued for patent infringement

I don't like Monsanto, but nothing I've read indicates this alone is sufficient to lose a lawsuit. In the case I assume you're referring to, the farmer didn't lose because harvested a few plants that had blown into his field. He lost because he then killed off his non-resistant plants with Roundup, intentionally collected the seeds from the remaining Monsanto plants, and replanted his entire field with them the next year.

http://scc-csc.lexum.com/scc-csc/scc-csc/en/item/2147/index....
Sorry, I may have mis-phrased this, I've edited my original comment. The problem is those pooling their resources into insurance companies are subsidizing those who are NOT. This is what the insurance mandate of the Affordable Care Act is trying to fix, we have yet to see if this will work or not.

Ultimately, the simplest solution to the resource pooling problem is to eliminate the insurance industry and go single-payer, then EVERYONE pays with their taxes. However, many insurance companies are for-profit and they'll keep fighting against single-payer until they go out of business.
The horse thing seems like a bad analogy. Whether you're using a blackboard or some fruity iPad or whatever it is, it still must go through your eyes before you read it. So you don't "optimize for blackboards", optimize for people is what you do.

What's the equivalent in the horse/car thing?
> They're still subject to the general laws of the country, still subject to the same taxes and regulations.

The point of the article is that this is actually not true; the City is not subject to Parliament and Monarch, but rather a peer with substantial autonomy on various matters, enjoying special representation at Westminster and in other bodies. The author mentions a private development where the City was at the same time investor and institutional overseer, in a clear conflict of interest that would be illegal elsewhere in the UK.

Because the City body politic is composed by businesses rather than individuals, most matters where special status is invoked or leveraged are financial privileges and lobbying powers of one sort or another; this enabled City companies to build the network of tax havens we all know and love, where money flows to semi-autonomous City of London, which redirects it to progressively-more-autonomous dominions oversea, disappearing like a ship on the horizon.

Removing all privileges the City enjoys would be a necessary first step to crack down on global tax avoidance in the financial sector, but this is extremely unlikely: Blair's (New) Labour held an overwhelming parliamentary majority for a decade and still conceded to the City's wishes, while Tories are wholly dependent on City money to even exist in the first place. The author believes international pressure will eventually force the government's hand at some point; personally, I am quite skeptical -- but then again, I work with/for a lot of City companies, so I might not be entirely unbiased.
So I hope they don't read HN, would not want to give them any ideas...

Seriously, don't give the nanny-state, collectivist, big-gov, we-need-more-regulations crowd any more ammunition or ideas! That crowd of kooks do enough harm on their own, no need to help them.
Now this might sound like a rude and blunt answer but it's true - it's because most of those other engines suck.

This is coming from game dev trenches. :)
Still doesn't mean the law was written with the express purpose of keeping seed trades down.
Then you upvote! Like I did!
Not exactly the case: Ubuntu, Fedora and Debian are supported for free, and RHEL for a fee:

Ksplice Uptrack is available for Oracle Linux, free of charge, for Oracle Linux customers with a Premier support subscription. Additionally, anyone can use Ksplice Uptrack for free on Ubuntu Desktop and Fedora.

http://www.ksplice.com/pricing
People pay for products that don't exist all the time. That's what contract software development is all about, for example. Ditto vaporware, Kickstarter, and "coming soon" features of existing products.

And, as mentioned elsewhere, people can think they are about to pay for a nonexistent product. Once you have proven willingness, there are a variety of ways you can finesse the issue of not actually having a product.
I won't mince words, the cost of Ksplice these days is much higher than pre-acquisition, however you can get Ksplice for Enterprise Linux 5, 6 and 7, with the Redhat kernel without rebooting, as well as the Red Hat Compatible Kernel that Oracle recompiles, as well as Unbreakable Enterprise Kernel (UEK) r1, r2 and r3.

https://www.ksplice.com/uptrack/supported-kernels
Insurers almost always negotiate huge discounts with hospitals. So the bill you see is not the bill they pay, and what they pay is considered confidential.
I saw this a while ago and played around with it. Pretty cool app, and a nice implementation of AB testing. Even if you don't have a good use for it, you can learn some good techniques by poking around the Flask code.
Readability was not the first.

Their mistakes:

1. They charged too little.

2. Their model was meant to be "viral" -- enticing sites to join by saying "hey, we have money for you". But it meant they wound up with money sitting around they can't use for anything else. In fact it imposes overhead.

3. Everything had to go through their servers.
.. can't you just use a few bits of hashing (via a second algorithm) the original email address for the salt?
I think one big problem is fact that there really can't be a long-term nonvolatile store of value. Economic activity is inherently continuous. There are a few goods that last more than a few years without maintenance or replacement. Economic output puts a hard limit on how quickly you can turn your value store into stuff you actually want. For an individual it doesn't make much difference, but when everybody tries to do it, it doesn't work.

For an extreme thought experiment, consider if everyone puts half their income into a perfect store of value for a year, living off the other half, then the next year they live off the savings. Everyone would die of starvation the second year even though they supposedly have just as much value available as what sustained them the year before.
Zoo Miami's Ron Magill reveals identity of long-anonymous donors of millions
The only thing that will ever matter is reaching a network effect inflection point.

Apart from that, I have a patent pending on the core technology.
I attended the second cohort at Codeup and just completed the twelve weeks at the end of July. I learned LAMP Stack, Js and many other technologies. I learned quite a bit and I am eager to start developing with a team to build on my new skills. I am confident that I will find a good fit for me. The boot camp was very tough but this was expected. Codeup had a good mix of instructors who are all very knowledgeable and helpful.
Also kernelcare by the cloudlinux folk. Although that has a closed-source blob that it uses, it's available in production now, as opposed to kGraph and kpatch.
I think you'd find the mortgage tax credit is as dangerous to tinker with as social security politically. That is, no politician would dare try to get rid of it due to the uproar from their "entitled" constituency.

I say that it is regressive because the bigger your mortgage the bigger your tax credit (given some small print about AMT etc), which means that people who qualify for larger loans (read richer people) get a better tax rate.

As far as it being harmful there are some disputed studies about US home ownership rates being much higher than the "natural" economic rate, which subsidizes all manner of non-essential middle men (real estate agents, lawyers, title companies etc) and increases the impact of mortgage rates on the larger economy.

My personal problem with it is that I've seen estimates that it costs the government close to half a trillion dollars. This is a very similar number to Medicaid. Medicaid is constantly being attacked yet the mortgage credit isn't, when basic health care seems like a better fit for governmental spending to me than real estate industry subsidies.
> While I realize HN loves basic income, it honestly is not a good idea. I would love to hear people's arguments for it.

You could click the link -- the article here is a set of arguments for it. And there are usually more posted in every thread on the subject.

> Make no mistake, no one wants unemployment, poverty, starvation, poor health, etc.

Actually, plenty of people benefit fromt he existence of these things and the insecurity they cause in others, so I think the "no one wants" claim is false.

> People seem to treat basic income like a panacea

Never seen this. I've seen people directly address how basic income addresses particular problems experienced by government programs that exist to address some of the same problems now. I haven't seen it treated like a panacea.

> Why don't we give people money instead of food stamps? Is it because it was politically untenable? No, it was done because giving people food stamps (actually, now debit cards redeemable at grocery stores) is significantly more effective than just giving cash at solving hunger issues.

Evidence?

> I didn't even get to the negative incentives it creates, which is a whole other can of worms.

Basic income eliminates negative incentives inherent in the means-tested programs it replaces.

> For example, subsidizing income on the lowest level generally leads directly to price inflation, which is highly regressive.

Basic income is an across the board increase to income, not a targetted increase at the lowest levels. Further, the regressive impact of price inflation is only an accurate description if you assume it occurs independent of income changes; to be regressive with income changes, the percentage increase in prices would have to be greater than the percentage increase in income at the lowest levels.
Your msg can only be heard on FB when people say it together. Here is a tool
While I appreciate the cynicism that this embodies, it shows a gross misunderstanding of constitutional law. There is a deep divide in constitutional jurisprudence between commerce and police powers. One of the leading cases is Printz v. US: http://www.oyez.org/cases/1990-1999/1996/1996_95_1478

The federal government cannot rely on the necessary and proper cause to empower it to compel state LEOs to fulfill its federal tasks for it - even temporarily.

The feds can offer "incentive" money, as previous commenters have stated.
> Sure, but that's not what the petition is asking for. It's asking for federal legislation to require it.

The petitions are not bills that people are submitting to the floor of Congress. To say, "well the petition didn't ask for this specific implementation," seems a bit disingenuous. Federal legislation requiring it to receive specific funding would effectively be "federal legislation requiring it" so I'm unsure why you're splitting hairs.
Thing is, while Oracle Linux is pretty much rebranded RHEL last time I checked, the KSplice commercial license won't let you use it with RHEL, and that won't be supported.
Amazon Publishes Customer Success Stories as a Free eBook
Where I Should Live, According to Math
It's obvious, but I've not seen it presented clearly before: the interesting bit for me was that if your attacker can see all the traffic on the network, traditional means of hiding a host (moving off a common port, and port knocking) don't do you any good because your attacker can see the traffic when you use it, and use that as leverage to acquire themselves an ORB. Normally you wouldn't assume that J. Random Skiddie has your router.
Those graphs aren't in any conflict; of course if the proportion of workers in one industry goes down, the proportion of workers employed in some other industry must go up, mathematically (the BLS graph being percentage of the total workforce, rather than percentage of the total population).

I see your objection that to consider agriculture's decline indicative of the future of labor in general could be considered cherry-picking, but I think the video at least attempts to respond to this charge, explaining why its author does not feel other industries will "pick up the slack" in the same way in the future as happened in the past for jobs lost to automation.

[For what it's worth, while enamored of the dream of leisure-society utopia, I am quite skeptical of the author's assessment of the current state of progress on various forms of automation (and thus, a fortiori, of the projected speed at which such automation will take off as ubiquitous in the near future). But I did want to defend them against the charge of not even considering the idea that jobs will simply shift to other industries.]
I think the issue is more that there's this external service that knows all your google searches.
Awesome work! Congrats on the ACM acceptance. Shameless plug, but I did/am doing some research on the same subject of path selection. [1]

People were mostly excited about the TorCoin aspect of our paper, but our path selection algorithm reduces latency in hidden services (by requiring only 3 relays instead of 6), and allows each circuit to be publicly verifiable, privately addressable.

[1] http://dedis.cs.yale.edu/dissent/papers/hotpets14-torpath.pd...
The only taxes I can see them being exempt from are local council taxes, not income/VAT/corporation tax. And whilst they are nominally not subject to the Monarchy, nor is the rest of the country really.

Much like the Monarchy, the City's regulatory power is largely paper thin and only exists within the square mile. The moment they tried to exercise any kind of open egregious use of power (like evading, rather than avoiding corporation tax), they'd find their priviledges revoked near-instantly.

However that doesn't prevent them from using the usual methods of bribery and corruption from influencing the government. But then how is that any different from any country in the world?
That doesn't really make a difference though, does it? The community has shown at every opportunity that it loves being able to hack with game software. A small group of volunteers has even completely rebuilt Morrowind from SCRATCH! Even if the original code sucks, I think people would love to be able to hack it, port it, and play with it. This sort of activity can only lead to increased sales for original publisher, who otherwise would never get anything after their game falls into obscurity.