skysight-inc/HackerNews huggingface dataset:
Except for the JS transpiler, Microsoft Silverlight could make similar claims: the CLI runtime is standardized by ECMA, and the entire source code for the .NET Framework is available. (Granted, not the Visual Studio IDE.)

For these kinds of platforms, post facto standardization efforts and code releases are part of marketing, IMHO. Dart remains a Google-lead project tied to Google's goals rather than an actual open platform.
Gideros is Open Sourced
Dart will never be adopted outside Chrome, but there is plenty to worry about already.

- Google can push Dart the same way MS did with ActiveX

- C# is an ECMA standard too; how well did Mono fare in the early days and even now after more than ten years?

- The relegation of JS innovation to second place behind Dart is a cause of concern. HTML and JS are the basic foundations of our web.
it's a common misunderstanding that ad publishers care about Google users. They care their own customers, and Google is just a user acquisition channel.

Say you are a bread maker, do you care the shopping environment your customers buy the bread, if you only pay commission to the shopping mall according to the sales number? Of course you don't, because if one shopping mall doesn't sell any of your bread, you have no cost!
Use of uninitialized memory is certainly a common bug but I'm not seeing what that has to do with zeroing free'd memory. It might be easier to detect such a bug if the uninitialized memory is zero'd but it seems like the work devoted to zeroing memory would be better spent fixing the uninitialized memory accesses.

As for the second point production software isn't typically configured to produce core dumps (ie. ulimit -c 0).
> OS X Yosemite will include a Hypervisor

Is that a type 1 hypervisor that can run a linux VM image/container without vbox/parallels/fusion, as if the VM/container was an "app"?
Seq as a Sink for Serilog
Religious Sites Carry More Malware Than Porn Sites (2012)
> No other browser can practically implement or support Dart.

They don't have to, they can use the Open Source DartVM as-is, in-fact this is what Google encourages, just like how node was able to use V8 JavaScript engine - which they've said is an example of new use cases that's possible when you create a high-performance VM.

> Google's engineering could have gotten JS much farther along

Lars Bak and Kasper Lund on the Dart VM are the same guys on the V8 team, who were also on the world-leading JVM Hotspot compiler that was derived from the Strongtalk VM (the fastest implementation of Smalltalk) that they created. They believe performance of JavaScript is reaching its peak and is unlikely to see another 2x improvement, JS VM's are also extremely complex as JavaScript is extremely hard to optimize.

By contrast Dart is a much simpler and predictable language designed for both productivity and performance and because it was designed in-hand with the VM engineers, language features are designed in a way that performs well.
The first book on that list "Grey Hat Python" isn't very good. It contains some good parts but it skips things like Scapy which a consider a superb tool if you are in the pentesting business. I recommend reading "Violent Python" instead. It's everything that Grey Hat should have been...
I would take what kevingadd says with a grain of salt. He's the author of a .NET -> JS compiler (arguably a competitor to Dart) and the experience he cites below is pretty different from what I've had and my colleagues have had. I don't mean that as character assassination - he's obviously a very talented developer - but rather as a point of contrast.

Frankly, you would not want to be touching the compiled JavaScript from Dart - it's not meant to be changed. I agree that if it's that broken, then you should certainly not use the platform. So you should just be writing in JavaScript or just be writing in Dart.
There are two programming language environments, or better to say operating systems, that are designed for this kind of immediate coding: Forth and Smalltalk. Forth plays its strength when controlling hardware. Your code is immediate executed, and you see the results, e.g. a robot arm moving instantly. Times of Forth coders running circles around teams using traditional programming languages are nearly over.

Smalltalk on the other hand still has to find its killer application. Smalltalk was 35 years to early, and since then every few month a new language is hyped, each one one step closer to Smalltalk. Computing history turns in cycles and we soon will have a situation comparable to VM/370, where every application is running its own operating system. I hope that there will be a Smalltalk killer application exploiting the immediate changes in coding to power users, similar as Forth controllers do, but on GUI level.
> Dart remains a Google-lead project tied to Google's goals rather than an actual open platform.

Right, I agree with you. I guess you didn't read my whole post. To quote myself from just above: "I guess how you feel about Dart may depend on how you feel about Google and big corporations more generally. Just because a big company that has a lot of mindshare/marketshare creates a great platform, does that necessarily mean we should be afraid of it? Maybe, but if you're frustrated by JavaScript, it's certainly worth a look."
The Islamic State (full documentary)
Show HN: Zaundy, the new way to get your voice out
Right now, you can share your ideas and feelings with texts, videos, pictures. Why not with your voice? With Zaundy, you can leave your personal soundprint anytime anywhere, and share what you are listening to.

Your Zaund will be publicly available. People can listen to any Zaund recorded in the same area where they are, or within a specific time frame.

Any time is the good time to let everyone know what you are thinking and listening to.

Download it now and start zaundying!

Google Play https://play.google.com/store/apps/details?id=com.zaundy.callout

Facebook https://www.facebook.com/zaundy

Twitter https://twitter.com/zaundy

Google+ https://plus.google.com/118223430878651018203

LinkedIn https://www.linkedin.com/company/zaundy
The Supernet
When forced to use Windows at a previous job, I used http://code.google.com/p/python-windows-tiler/

In fact I only had 2 applications running: Outlook and Cygwin/X tunneled to a Linux server, where I did everything else.
I was able to connect to any database from a multi-tenant ERP written in Python. The idea was to get hold of the class of the connection object, and re-instanciate it, while passing a new database name in parameter. That ERP lets users (of different tenants) write Python code in various places. The kind of code you could write was already restricted but not sufficiently. Now all the dunder are forbidden, things like getattr() are also forbidden, which makes the trick used in that blog post not possible. One of the funny thing I had to do was to use lambdas to name intermediate values, because statements were prohibited.
Without knowing anything about this guy, it seems like he'd be the kind of person who'd wear socks under his Crocs because it's comfortable and he doesn't care.

Hahaha. When I knew Simon Peyton Jones he didn't wear shoes at all—just bare feet—in Glasgow—one of the coldest, wettest cities in the UK.
> the entire source code for the .NET Framework is available.

Which means nothing as no-one else is legally allowed to use it. It's only "Source Open" (not "Open Source") so no-one is legally allowed to adopt, adapt, enhance, etc as can be done with true Open Source projects.
"Why Google thinks you should drop everything you do and pick up Go" .. no wait.. compute error.
cperciva already answered, so I'll just add that most side-channel attacks (at least those using power analysis) on AES typically focus on the last round.
Barclays brings finger vein biometrics to Internet banking
That's exactly what I though, the python code need to be alternated to get the returning approach. Thanks for pointing that out!
For anonymity, I guess. If the spammers write scripts to send emails from your servers, the authorities can’t track down the spammer’s servers and shut them down. And the spammers would be able to just keep creating anonymous accounts and using your site to spam after each spam-script is individually shut down.
Funny quip at the boxed wine, since good winemakers have started selling their stuff in BIB in the last 15 years in France. It shows a bit the lack of perspective of some people.

They complain about comic sans to show membership to a group. Like cracking a Star Trek joke.
These guys already did port those frameworks to Android:
http://www.apportable.com
From the Pages of Stupid Software Design Quarterly…
Town Becomes a Beer Ad, but Residents Don’t Feel Like a Party
Meh, I don't care if I lose more stupid fucking Hacker News points, but I can't understand why I would have been down voted for this comment.
Comic Jens is great too: http://www.netzallee.de/extra/comic-jens-en
When I wanted to code a foundation of reusable code for different devices I would either do it like Dropbox and use C++ as the most common layer http://oleb.net/blog/2014/05/how-dropbox-uses-cplusplus-cros... or use Javascript (which I can also use for web pages) for the program logic like described here http://www.skyscanner.net/blogs/developing-mobile-cross-plat...

Also interesting http://kivy.org allows you to use Python for iOS, Android, OS X and Windows.

I would not bet on Swift and cross compiling it today... too bleeding edge. But interesting project... hope it matures. Good luck!
> Dart will never be adopted outside Chrome

This is an incorrect. Dart2JS is an implementation of the Dart specification that transpiles to JS and is supported by every modern browser. Dart also has great support for Source Maps letting you debug (JS Transpiled) Dart code in other browsers via source maps.

The Dart team expect Dart2JS will be the primary way of running Dart which is why they've designed the language so that it transpiles well to JavaScript as a primary objective - i.e. they've often rejected language features which can't be implemented efficiently in JS (e.g. non-local returns).

It's also not clear if Opera (by virtue of Blink) will adopt Dart once it lands into Chromium/Blink.

> Google can push Dart the same way MS did with ActiveX

ActiveX is a proprietary binary blob that has nothing in common with Dart. Dart is entirely Open Source, runs on all modern browsers and integrates cleanly with the DOM (i.e. like JS).

> C# is an ECMA standard too; how well did Mono fare in the early days and even now after more than ten years?

Only the language is a standard which Mono's compiler and runtime has excellent support for. The biggest problem Mono faces is that they've had to re-implement the massive .NET Framework class libraries themselves. This is not an issue with Dart because they entire platform (VM, Class Libraries, Tools, Analyzer, etc) is Open Source, so the same implementation can be used everywhere as-is.
The Concorde engines were apparently based on the Vulcan Bomber's engines. There's still one of those that flies, and you can see it at airshows in Britain once in a while. I saw it at this year's Farnbourough which was an awesome experience (as was seeing the Airbus A380 take off at an extremely short distance -- when it's not loaded with fuel and cargo it's incredibly powerful and agile). The Vulcan was load, and has an incredible "howl": https://www.youtube.com/watch?v=H_ARSE8jEHQ
The Chrome extension that reduces your reading time
gives me an error zero, any suggestions??
The superpowers I'd like to have are read minds and super speed.
No joke, had someone on my team during startup weekend this weekend that could not let go of market research. It pretty much ruined the mural of the whole team.
Why on earth would you rewrite ElasticSearch in Go ?

You would have woeful monitoring support compared to the huge array of tooling for JVM, an average GC implementation and almost zero integration with most enterprise applications e.g. Hadoop. All so what, you can go from one multinational (Oracle) to another (Google).
A Strange New Gene Pool of Animals Is Brewing in the Arctic
The Most Amazing Places Visible from Space
NaCL is a good example that shows how inspecting code is not actually the mistake that was made by the Python sandbox that was attacked in the article. The mistake was that the inspection was based on a blacklist rather than a whitelist.

Sandboxing based on blacklists is a recipe for disaster, and it's an unfortunate accident of history that the default Python implementation (CPython) makes whitelisting practically impossible. Luckily, there are alternatives as others in the thread have pointed out.
>> I'm a 17-year old self-taught developer just starting to tap into the mobile world! :3

Great idea indeed, wish I could try.

To tap into the mobile world, it could be better if you'd target the 95% user base (iPhone or Android). Unfortunately Windows Phone sells less than 3% globally in Q2 and going forward, the prospects for Blackberry, Symbian and Windows Phone look darker. Even newer more exotic options such as Jolla, FirefoxOS, Tizen, Ubuntu Touch don't seem to have prospects for much bigger market share.

But impressive idea, again.
Why anyone won't? If you're offered a super power for free, take it; the worst case, you have it for free and never use it.
Swift playgrounds.
Bell Labs 1960s: This is a neckbeard
Wealthy Chinese Travelers Lining Up to Blast Off
There is a whole range of JVMs:
http://en.wikipedia.org/wiki/List_of_Java_virtual_machines
> Dart will never be adopted outside Chrome

This is exactly where it becomes an issue. You get to a situation where apps running on Chrome are faster, and the other browsers are slower. Why would anyone run a slower JS implementation of an app, when Chrome gives them wings?

> Google can push Dart the same way MS did with ActiveX

A large body of source code isn't as adoptable as you imagine. You need the people who are embedded in the evolution of the platform, or you are always going to lag.

> Only the language is a standard which Mono's compiler and runtime has excellent support for.

Not true. As an example, for a long time Mono's GC was much slower than .Net's.

The lessons from the 90s and early 2000's were very clear. We need to learn from them.
this seems plausible, yet there must've been thousands of attempts of people doing sql injections/looking at their logs?

if i remember correctly an error page leaked an ip in 2012/2013. someone had to realize the captcha was leaking at some point? consider me confused ;)
The Silk Road statement: Where are the packetlogs?
Computer Cats
A physicist in the neurobiology lab
Interesting. But please keep politics out of HN. There are plenty of other websites more suitable.
KeePass 2 can be run under Mono on both Linux and Mac OSX.
Words to use and avoid when writing about disability
Another viable — and possibly more enjoyable — approach would be to use C# for the full stack, irrespective of platform. See http://xamarin.com
In some markets, WP has over 10% market share. It's absolutely true that globally the share is much less but it isn't a small number of deployed units in absolute terms.
Learning TDD with fizzbuzz
It's not so hard to zero memory when it becomes unused. So libraries like LibreSSL do that. Increasingly, other applications are also starting to use this pattern. It is easier to add a few safeguards into the library than it is to fix every past, present and future application that uses it.

It's a start. Adding the safeguard doesn't mean effort won't be put into fixing the actual bugs. But you just don't fix all the world's bugs overnight. That's why things like virtual memory, permissions, chroots, ASLR, NX, SSP and such exist.

How many systems enable core dumps by default? I don't actually know, but I think quite a few do. Every application you use to get stuff done is a production application. Every application that handles sensitive information handles sensitive information whether it is in production or not. Leaking passwords and keys can be as simple as working on some client software, having it crash once, then passing through airport security and getting your HD snooped on...
Very nice... its perfect! Thanks for the shear!
Couldn't disagree more. I work in the enterprise space and there are plenty of companies using Groovy, Scala, Clojure as well as Python/Ruby on the JVM.

I know it's anecdotal but what platform do you actually think enterprises are using ? Companies are looking for cheaper options so .Net isn't exactly on fire.
Configuration errors lead to HealthCare.gov breach
What were you guys painting anyways? \s
Linguistic Inquiry and Word Count – Text Analysis Software
11 open source security tools catching fire on GitHub
The one hosted there is very limited. You can't move windows from one virtual desktop to the next for one. Mdesktop is pretty light weight.
I am quite ignorant when it comes to Windows Phone development, mainly because it never took off how Microsoft wanted it too.

Would you mind sharing the tools and technologies used to develop your app? If not here then a blog post would be fantastic, describing the process from start to end, issues you had with the tools/processes, etc.

One small bit of feedback on the UI, make the background for the "Type or tap destination" text entry field darker, it looks kind of messy at the moment as the background information is too visible.
Advice is cheap
Umm... since when is guessing passwords not an attempt to gain access?
I like your motivation, I'm 17 too and just started getting my hands dirty in the game. Would you please recommend me a few sites from where you are learning things from?
That was my point: even though Rich Hickey pretty much touts Clojure as an anti-OOP language, Clojure still relies heavily on OO polymorphism, yet it doesn't make the language any more complicated -- in fact, it helps keep it simple.
mDesktop compiled uses MUCH less memory and is much faster.
Well, that's a pretty good reason to fix something, I agree. But what are your thoughts about Dotty? I assume it's insufficient for you, but is Typesafe going in the right direction here, is it not relevant to what you are doing or will it make things harder?
http://en.wikipedia.org/wiki/Katz_v._United_States
Well, you could let their parents decide, as is the norm in many countries. I'm not saying that's good, though. What I'm saying is that even freedom is not a one-size-fits-all.
How to synchronize I/O in JavaScript
No offense against C# (I like the language) but Xamarin is a commercial product https://store.xamarin.com/ which makes you dependent on Xamarin. Xamarin is definitely more advanced and I guess you can also do cross compiling UI apps. But before going the Xamarin road I would look more into QT.
It looks cool! Well done! :)

As others have commented, in my opinion Windows Phone will have a negligible influence on the mobile market going forward. I think it would be a much better investment of your time to start developing on either iOS/Android (or both!) as early as possible.

Good luck!
Code normal forms (2008)
It's fun tech, but if it doesn't work in Linux, I'm not interested.
White Paper: Hybrid IT: The Best of All Worlds
Why don't the other clients in the swarm penalize the client for this behaviour? Downloading all the fragments in order means that if the initial uploader drops off, everyone is stuck.
From what I have seen, Windows Phone has way over 10% market share amongst Microsoft employees.
Couldn't the agent be referring to a http header, in which case it doesn't seem that improbable.

I've worked on sites before where if you logged in as the admin it started attaching a header with the ip of the application server responsible for generating that page to help with debugging. It's not outside the realms of possibility that something like that could break and start leaking ips.
NumPy 1.9.0 Release Notes
I used to use Comic Sans all over the place, even though I knew it was frowned upon. I did it mostly to piss off my designer friends and colleagues, although probably initially just because I liked it when back then when there was not much choice.

I don't use it anymore as I can't be bothered to annoy people on purpose anymore, and nowadays there is not much effort needed to find a nice google font etc.

Although I do still like to argue about tabs-spaces, curly brackets, pragmatic-mathematic etc.
Very impressive! I found a few glitches on the aps, but overall it looks very impressive!
depends on what they work on, business applications in large organizations we tend to direct programmers through reams of project documentation, from top level to familiarize them with what the overall direction is to technical documents which specify exactly the formulas to be used at all levels of calculation. These formula and related specification does include the number of decimals to use within calculation, rounding, and resulting decimal precision.

yeah its nice if they understand it all but programming isn't all shoot from the hip, many work in very structured environments which is more true when projects can have more than a dozen programmers on just one machine. Throw in three or more touch points and I am more concerned you follow the technical than branch out with your own ideas
What about the Python sandbox on App Engine?

I believe it is fairly secure, but I don't know if it's comparable to the ones you mentioned.
> Emacs Lisp used to be close to `the' standard Lisp. But since a few decades all Lisp have static scoping by default now.

Static scoping is nowadays supported in Emacs Lisp.
IPv4 and IPv6: A Short Guide
Windows XP Updates 2014: New Download Will Provide Unofficial Service Pack 4
If fonts were rock bands then Comic Sans would be something like one of those 'X-factor' talent show boy-bands, i.e. popular with the masses yet utterly despised by 'proper musicians' for not making 'real music'.

To fit into the 'I am a designer that cannot use anything other than Photoshop club' you have to mock comic sans in all of its uses and show utter disgust at what is a truly popular font. It is as easy to do as mocking the talent show boy bands. On the 'designer' learning curve it is up there with replacing all text with lorem ipsum.

Despite what people say in general Comic Sans is used quite appropriately, particularly by those that are not designers. If you want people to go to the village fete then a 'designed' flyer is not what you want, something banged out in Word with Comic Sans actually conveys the message pretty well.
Interestingly, you can in Powershell, where piping objects works very naturally.
What I'd like to know is if anyone in the public domain has any packet logs from SR?

I find it than incredible that, given SR's notoriety, nobody had ever used tcpdump, an interception proxy or a browser's inspector and noticed this IP before.
tnx. very insightful. I'm not fully convinced that type classes are OOP, but I certainly understand why --for a very broad definition of OOP-- one might think they are.
One word my friend! Brilliant! Definitely using this!
Off topic, but I thought OP was still in prison? I can't seem to find any notes of his release on his blog, so could someone please elaborate?
I was testing OpenCandy as an alternative way to make money but I just removed it. It's not worth it.

VirtuaWin is abandoned and slow and most prefer mDesktop:

http://answers.microsoft.com/en-us/windows/forum/windows_7-d...