skysight-inc/HackerNews huggingface dataset:
Ask HN: Where to find good CTF / wargame platforms?
These days I am very interested in learning about computer security / cryptography by practice and I find that CTF / wargames are very practical ways of learning about these subjects.

After a quick google search I did not find that much on HN:
site:news.ycombinator.com ctf wargame intitle:"Ask HN"

I am seeking more platforms to train my skills and learn new things.

Here are some I already know of and am working on:

- http://overthewire.org/wargames/vortex/vortex0.html

- http://www.root-me.org/

- Stripe CTF

- Matasano Crypto Challenge

Please post the ones you know about with a symbolic representation of difficulty (* = easy, * * * * * = extremely hard).
Artificial General Intelligence Analogous to Flight
Camera movement between each frame would be minimal though so there'd be a lot of overlap between frames so minimal extra information. I'd guess the key to improving this result would be multiple cameras at different angles; I imagine it only works as well as it does because the GoPro uses a fisheye lens.
Yes i sort of forgot about it, the facebook article was old, i read it a long time ago, i rediscovered the issue when running FB on one of the Gingerbread devices.
You can't guarantee trusted software even your code and the libraries are 100% trusted / bug less, as the combined software creates emergent properties which will also have to be properly tested. As such you can only trust a software system if it has been properly tested.

If this is the case, then you can provide 100% trusted software even if it has been built with insecure code bases / libraries, as long as all the external interfaces has been tested for all possible inputs.

Off course this is extremely difficult / impossible. This is why we will never arrive at a point where software is 100 trustworthy.

edit - spelling
Flux is actually available on Linux: https://justgetflux.com/linux.html. Regarding Alfred and Dash, there are some Linux alternatives (Gnome Do, Synapse for the former, Zeal for the latter), but they are far from being as good.
Then why make it about auctioning and highest bidder? It's a US visa for people to work in the US in hopes of benefitting US citizen. Then why not limit H1Bs to US companies (HQ in the US and not subsidiaries of international companies) only. Solves your stated problem of how the H1B system is currently misused without favoring big corporations over startup companies.
Yes and still FB relies on this patch to run its app, and sometimes it does fail as happened on my device.
I guess one approach would be to dramatically simplify required functionality so that it doesn't require a general purpose computer to implement. You could even take things back to the point of having mechanical systems rather than electronic...

[NB I can remember in 1990s being on a project where someone was telling us about the safety shutdown equipment on a UK AGR nuclear power station - it was mechanical logic as when the plants were designed in the 1960s they wanted to use really well tried and tested technology.]
> Google is now requiring OEMs to only launch devices that are 2 versions and/or 9 months old

Are they requiring anything from carriers or phone shops, though? Because everywhere in my town is still selling Gingerbread devices to anyone that doesn't know better.
Who cares. It's finding and reporting genuine bugs in widely used open source libraries, and most of the times it's even suggesting a fix or a workaround. Think about it: each article is worth half a dozen to a dozen high quality bug reports.

Moreover, the guys behind PVS-Studio seem like great guys. The CTO, Andrey Karpov, was interviewed in early 2014: http://www.viva64.com/en/b/0231/.

Selling software development tools isn't easy. PVS-Studio "adverts" are interesting and useful to the community.
удачи
Integration with Oanda would be great.
The bug they hit isn't the 65k limit, but the smaller LinearAlloc buffer size on older versions of the OS.
Which a cynic might argue, is something in the interest of the company sponsoring you for said L1.
> It's completely irrational why there are not the same security measures taken for train passengers

No, it's quite rational (whereas knee-jerk calls for trains to adopt airport-style security theatre are not). High-speed trains and airplanes are very different in their "exposure" to terrorist activity, and in their operating environment.

For instance:

(1) Airplanes are, relatively speaking, very fragile; a relatively small bomb can bring one down, and if one goes down, 99% of the time, all on board will be killed. For a terrorist, it's a tempting target.

Trains, on the other hand, even high-speed trains, are relatively quite robust, and even severe train accidents typically only kill a small fraction of the passengers. Trains are extremely long (and the passenger density of high-speed trains relatively low compared to local trains), and the direct effect of a blast would be limited to those in the immediate vicinity. The most you can hope for is to derail the train (which is not at all a given), and even a derailing passenger-train is likely to have many survivors. The worst train accidents in terms of deaths have been due to the effects of extremely specific locations.

(2) As famously shown in 9/11, airplanes can be used as (extraordinarily effective) missiles; if you manage to take one over, you can aim at a wide variety of targets. Trains basically cannot be used this way. So if you attack a train, you basically are limited to killing passengers—and as point (1) noted, even that is fairly difficult.

(3) Once an airplane is in flight, they're pretty much out of reach. Trains, on the other, because they travel on the ground, are exposed to trackside attack. If you want to attack a train (for whatever reason), your best bet is to place a large bomb by the side of the track, not to try smuggling one on board. [That this has, mostly, not been done is probably more a testament to the low "terrorism yield" from attacking trains than to the difficulty of doing it.]

Because of this, the benefit of securing passengers is far lower for trains than it is for airplanes.

(4) Because one of the big advantages of trains is easy and fast boarding and disembarking of passengers, at multiple points, with relatively minimal infrastructure and staffing, the costs of extreme security would be far more prohibitive for trains than for airplanes. Given that the advantages of such security would be, at best, very dubious, the costs obviously tend to dominate the discussion.

Attacking a train, even a high-speed train, is much more akin to simply attacking any crowded location—a club, a restaurant, a theatre—than it is to attacking an airplane. [Because of this, an attack on a crowded local train is likely to be more effective than an attack on high-speed rail.]

You can cause economic effects by damaging infrastructure, but even that is unlikely to be significant.

So basically, (a) trains are just not that attractive a target for terrorism, and (b) the (extreme) costs of airport-style security would not justified by the (very minimal) benefits. Despite the overlap in the service they provide, airplanes and trains are simply very different in many ways.
> In that sense, determinism might be a small part of indeterminism.

I agree. The astonishing thing about quantum mechanics to me is that it describes how deterministic laws emerge from completely non-deterministic processes.

For example, in quantum electrodynamics, a photon going from A to B, chooses a random path with a well defined probability density assigned to each possible path. When you do the math, it turns out that the shortest path between A and B is the most likely one and that's why the classical "deterministic" law that light goes in straight lines is a good approximation for large distances. Yet the path which the photon chooses to take is completely random, chosen by the photon's free will, if you will.
My 2 cents, tomorrow torrentfreak will announce that Apple removed the app.
I've got an old cheap 4 year old Acer phone running 2.3 as a backup phone and it plays lots of games fine. Sure not games using a lot of 3d graphics or games which require very precise timing, but it plays lots of other games.
I didn't think this was possible. Interesting.
> Common Lisp is also superior to Scheme (as a language)

Your comment would be much better without this bit, which is entirely subjective.
Not sure I understand your question correctly.

We should stop judging.

Because nobody has been able to show "free will" is more than just another belief (as in religion) and it is therefor no basis for rational discussion. And if free will does not exist, our concepts of "merit" (on the positive side) or "guilt" (on the negative side) are worthless and should be abolished.

That's why there should be no judging at all.

(Note: No judging does not mean nobody goes to prison for crime. It simply means we must redefine "punishment" as "a neutral sanction" or better: "protection from happening again".)
i never had the patience to follow that mind juggling, or "word jugglery" as Kant calls it.
For me as a programmer free will would mean something like:
var a:Int = 2
var b:Int = 3
println("\(a+b)")
>> 42
where transistors take the place of neurons
From the abstract of the PDF we are reading... right at the top: "avoid $103 (31-232) billion/yr in health costs"

103 * 10 years == $1 trillion

As you can see from the first paragraph in the article, the saved health care costs would cover it.

"World Health Organization: Air pollution kills 7 million people a year"

"Air pollution is behind nearly 200,000 early deaths every year in the United States, according to a new study by researchers from Massachusetts Institute of Technology."

"California, they found, topped the charts with an estimated 21,000 early deaths every year due to air pollution, largely as a result of road transportation and commercial and resident emissions."

The article does NOT take into account recent advances like solar thermal in Australia (base load cost close to coal), and car batteries in Denmark (1000s of cars used to store power in the grid). It also doesn't include biofuels like are used in Germany for more than wind+solar currently.
Not that I necessarily disagree with your points but, I'm sure you're aware the wiki article you referenced also mentions:

"Her prostitution studies have been criticized by sociologist Ronald Weitzer, for alleged problems with their methodology. In particular, Weitzer was critical of what he viewed as the lack of transparency in how the interviews were conducted and how the responses were translated into statistical data, as well as the sampling bias toward highly marginalized groups of sex workers (such as street workers) and for the way the findings of Farley's studies have been more generally applied to demonstrate the harm of sex work of all kinds. A 2002 study by Chudakov, et al. used Farley's PTSD instrument to measure the rate of post-traumatic stress disorder among sex workers in Israel. Of the fifty five consenting women interviewed, 17% met the criteria for PTSD, compared to Farley's 68% figure. Farley's critics also claim that her findings are heavily influenced by her radical feminist ideology.

Farley has also been criticized for accepting significant funding from anti-prostitution organizations. She has acknowledged that 30% of funding for a prominent research project into prostitution was provided by the United States Department of State Office to Monitor and Combat Trafficking in Persons, an agency with an outspoken policy which conflates sex work with human trafficking. However, Farley has stated that such funding has not in any way swayed her research, in particular its methods or conclusions."
Git code review
I made my own personal stand. I refuse to click any BuzzFeed-style headlines.
I've found that I quite like very wide screens now, with a little reorganisation.

For browsers, I put the web inspector on the side. For editing, I have two editor panes side by side.
> The bride's side hence considers it a liability since there is a financial cost with no return.

Right - so why do they pay dowry on top of that? It would make economic sense for them to accept a bride price to compensate for the investment. Especially when the femicide now has created an increased demand for unmarried women.

Is it just cultural inertia that overrides economics here?
Web Frameworks for Ruby
Oanda offer FIX connectivity, so very doable - we've already built FIX adapters in NodeJS. Will get the ball rolling.
Chihuahua With No Front Legs, Can Walk Again Thanks To 3D Printing
Supercharge Your Emails
This makes you go awwww.
Gartner's 2014 Hype Cycle for Emerging Technologies
Your comment provides no value. The OP has specific examples of tools being used to find bugs in software all without the need for testing. Testing is the least efficient way to fix those bugs. Tooling, as demonstrated in the OP, and other applications of programming language theory are far more efficient ways to have correct software. First, let the computer find the bugs we don't know about, then we can focus on higher goals.
That is not true for all nations. Australians can apply for an E-3 visa, which is essentially an indefinitely-renewable H-1B with fewer restrictions and no lottery.
When did it come out ? I suspect it wasn't adopted widely a year ago.
But that's the thing. Labour budgets ARE smaller at smaller companies. Hence your salary at a startup will most of the time be lower than what you could make at a similar position at a big corp. They make up for it by handing out more equity.

Whereas a large company can make a better case for paying say $100K on a visa for a $200K/year job, this is much harder for a startup paying e.g. $100K+1% equity for said job. If I have only $1MM or so in funding as a startup I am limited to what I can pay and couldn't reasonably waste a year's worth of salary on a visa, whereas a $50,000MM revenue company might have more leeway. No?
In this case it is bugs that can be discovered and fixed through static analysis. What about this case?
Maybe we showcase our sideproject one day on hackernews.
Created on a weekend last year...
Created with Django

international sex database isexdb.com

http://www.isexdb.com/

[Sorry, throw away account, as you may imagine...]
It works perfectly on v37 on my Mac OSX machine (running Mavericks)
That might be, but then CalDAV/CardDAV would be reduced to WebDAV, so it would only be a WebDAV-Sync (because the server couldn't reply to CalDAV requests like "show me events between xx and yy"). As far as I have seen, Flock only "encrypts" the connection, say, is using SSL. But please correct me if I'm wrong!
99% might have connotations like that to it, but that doesn't prevent large healthcare groups etc. from using it. E.g. Kaiser Permanente offers courses in "Mindfulness Based Stress Reduction", and so there is plenty of non-religious training material available for mindfulness meditation.

Even some of the best introductory resources on mindfulness meditation from Buddhist sources are refreshingly free of "religious-mystical-woo", or careful to separate the woo from the practice. E.g. my of my two favourite introductory resources, one (Gil Fronsdal's podcasts "Introduction to Meditation") specifically jokes about "the 'B'-word" and mentions buddhism just barely for context, and the book Mindfulness in Plain English mentions Buddhist traditions only for historical context.

As an uncompromising atheist and skeptic, this is the reason I ended up with mindfulness meditation over alternatives.
FwdMarket – Barn raising for products (prelaunch)
I'm an American have been trying to live in the US with my spouse for over a year so I can go back to school. I'm still waiting and unsure if we can even get in. Kafka-esque and nightmare can hardly describe the feeling.
Especificação EN 206-1 do Betão em Sessão da Ordem dos Engenheiros em Viseu
Cross-Channel Marketing 2014 (Trends and Opportunities)
And muskets couldn't do anything a well-trained archer couldn't accomplish.
FwdMarket is a platform for managing products and interacting with the community in order to build and sell your design, theme, app, library or anything else you can zip and upload online.
Amazon Changed Their Design
The article is about static analysis. Static analysis is the most efficient way to catch a whole host of bugs. Testing would be a waste of everyone's time for these types of bugs. Now, the tools in the article are commercial and perform static analysis on C and C++. Other programming languages have static analysis and code path coverage analysis built into their compilers. Many of those languages are free. Writing tests to cover those types of bugs is time wasted on a problem that is already solved.
3D Programming with JavaScript
same here :).I was trying to modify warez's group releases and showed my friends those were all my work :D
Not to mention they don't push any religious agenda while they're out there. They do good work for its own sake.
I own a Xperia Play, that don't support anything after 2.3, and I have lots of gaming here, including shooters, platformers and racing
Is a Nazi-shooting game somehow more culturally valuable than a social network?

It's all entertainment, and there's nothing wrong with that.
So there is a reason you don't see much financial stuff written in JavaScript, doubles plus financial really don't mix.
Let's down-vote these types of comments that answer, vaguely, the question proposed in the headline and reveal that they did not even skim the topics in the OP. Totally worthless.
I completely agree.

I won't change my initial comment, but please be aware that by "testing" I also meant static code analysis. (Thought had it covered with software, hardware, and infrastructure, but forgot one)
Looks like the code has inline x86 assembly in the Borland format, so that would probably need to be converted for a different C compiler. There are likely to be other, not so obvious dependencies on compiler-specific features.
if you're looking for loons, look no further than 'captain cyborg' http://en.wikipedia.org/wiki/Kevin_Warwick
Hashimoto: I/O bound proof of work [pdf]
Taming Wildcards in Java’s Type System (2011) [pdf]
And how do you feel about static analysis which is the topic of the OP?
Zuckerberg 2012: Our biggest mistake was betting too much on HTML5

Zuckerberg 2014: Our biggest mistake was betting too much on Dalvik
Ask HN: Codebay.io, suggestions?
I have the incredibly cool domain "codebay.io", but i don't know what to do with it. Ideas? ...or somebody interested in buying the domain?
on FwdMarket you can find people that complement your skills and share a percentage of your sales for their service. no upfront payments.
Implementing Material Design.
The title doesn't really fit the article. The author just picked up an open source C/C++ library and found some bugs in its dependencies using their commercial static analysis tool.

This is hardly a surprising result, and does not tell us anything new about how one might evaluate or build highly trusted software.
Very true. I am actually surprised BA hasn't ordered more. Especially as Willie Walsh alluded to how much their customers like them. LHR is slot constrained as are others around the world. No better way than using a slot with as many customers as possible in a magnificent plane like the A380.
PostgreSQL page size for SSD
Non-Blocking Doubly-Linked Lists with Good Amortized Complexity
Thats what happens when you used a language which has an ISO or similar standard.
Excellent answer to my question. Thanks!
Horror Vacui and the battle for white space
If Airbus NEO's the engines with Rolls Royce Advance and stretches the frame to a possible A380-900 I'd venture a guess and say that gap could be closed, especially on a CASM basis. Provided they keep the production facilities rolling until such a change might happen in the 2020s.
Ugh more spam for this product.
A little note about the "make a privkey" section of the signature example; it can sometimes* make invalid privkeys that are off the end of the EC curve. Only integers between 0x1 and 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 are valid in our particular case. Super unlikely to ever get a sha256 hash that matches the invalid portion, but it's worthwhile to point out.

* probably never, but worth mentioning
Show HN: Pop Up Gay Bar (create LGBT space anywhere)
Problem: if you are LGBT and work in tech, there's a good chance you live in a place where offline options for meeting people are limited.

Solution: www.popupgaybar.com, a location aware email list that makes it easy to find and create LGBT space pretty much anywhere. Not going to win any awards for cutting edge computer science, but it gets the job done. Check it out, and share with your homosexually inclined friends.
Possible bug:

The instructions BOOLAND and BOOLOR don't interpret the stack values the same way IF, VERIFY etc do. They decode the top stack values as integers and compare against zero, thus they have to fail when the top stack item size is greater than 4 bytes.

Edit: littleEndian.decode also doesn't seem to respect the size limits

Edit2: .. or signed integers for that matter. So while this is a very cool basic concept, it's not a complete implementation.

The reference client provides test suites

https://github.com/bitcoin/bitcoin/blob/master/src/test/data...

https://github.com/bitcoin/bitcoin/blob/master/src/test/data...
Hi, you're talking about connection to Youtube?
All what humans say is subjective.
Simplest to play yet hardest to score [0.98mb android game]
Elon Musk Invites Hackers to Break Into Tesla Cars
> Is this the killer app for home 3D printing? Printing plastic spoons? The same spoons you can buy mass-produced in packs of fifty for eighty cents or something?

Sunday afternoon: I am tidying up the house. I could use six or so small boxes to store neatly some loose parts. I would have printed those boxes if I had a 3D printer.

Sunday afternoon: I need to print my flight ticket. I could wait tomorrow morning, go in a copy shop and print it. 4 cents. I will print it right now with my inkjet printer and forget about it.

My nephews are visiting me and one of them likes my keychain. I would print a copy for him if I had a 3D printer.

My nephews are visiting me and one of them likes one of my photos that hang in the dining room. I could wait until tomorrow, go to the photo shop and print one for him. 1 euro. I will print it right now with my inkjet printer and git it to him right away.

I think "I can print it right away" is a killer app on its own.
What if the spouse does not want to raise children but rather would prefer to work. What if the partners would prefer to both raise the children and both work less? "Just go raise some children" just promotes the gender inequality that people have been trying to fix for ages.
I feel like this is somewhat exaggerated... https://mvexel.github.io/thenandnow/#11/-34.9324/138.6289
> but maybe weren't wealthy enough to get an advanced degree.

Of course, in many countries the ability to get an advanced degree is not very dependent on being wealthy
Of course it is huge, but as something I have thought about for a long time it actually has a chance of working. Not that I can convince anyone here, but it is worth taking the time to consider in depth.
I'm with you all the way until the HSR between LA-SF. There's 100s of reasons why it's mismanaged (starting to build the line in the middle of nowhere, which later politicians will use to prove that 'no one' uses the line; it's horrendous cost (why?), the slow speed (why?), the lack of local public transport on both ends etc). But arguing that more seats between LAX and SFO is the answer is something I'd have to disagree with these days. Flying in the US is a huge pain with it's security theatre. 90% of the time I drive from LA to SF rather than fly. It almost takes the same amount of time, especially considering I'd need car transport on both ends anyway to get to my destination.