skysight-inc/HackerNews huggingface dataset:
I think you should research MariaDB some more -- there are a lot of reasons to use it, and a lot of companies are switching. In fact, just today we upgraded our Zimbra cluster and was surprised to see they had made the switch from MySQL to MariaDB. This isn't "fud" as you put it... but rather a better product for a lot of reasons.

> You're better off on Oracle MySQL.

Hardly true, given the two db's are mostly the same except that the creator is now making newer and better changes in the 10.x branch of MariaDB (Monty left Oracle just like most Sun employees due to inner-politics and fighting that is regular at Oracle).
There are some chips providing zeroizing a small region of device memory when needed and it's specially designed to hold encryption keys etc. It's also done by hardware.
If you give would like to discuss this on Product Hunt, you can give me your twitter handle and I can give you access there as it's on the home page. Nice job btw
I love you simply not because
haha he even set the url straight to https://www.ghosttunes.com/garth-brooks/
It's even stronger than that. They also acquire massive cash-flow. And as every accountant will tell you: Cash-flow is king.
you can definitely learn more by working with/for someone else than by simply striking out on your own (too early) IF those people actually care about mentoring and have the ability to communicate their knowledge and experiences.

Sometimes working on your own ideas vs someone elses is very appealing regardless of how efficient the learning might be. So, sometimes I have to remind myself and others -- doing this is not just about efficiency.

I chuckle at the "Academics joke that "a month in the lab can save you an hour in the library." line in the post. What immediately came to my mind was something Click and Clack said : "reality often astonishes theory" ..which is why spending time in the dirty reality of building and experimenting (or even reproducing something you found in the library) is the yin to the library's yang.
That exists: http://en.wikipedia.org/wiki/Pizza_%28programming_language%2...
You should rip your DVDs and store them on a hard drive connected to a Roku/WDTV/whatever...
Share your thoughts, not your life
I agree with the git add -p , but I feel that at point, it often should be followed by a stash then a rebuild and/or some testing. Next, commit and unstash to continue.
Our first payment from a customer which meant we could pay our biggest supplier and each of our smaller ones.
Attribute Modules for CSS
For a time a friend of mine lived in a very bad area in Philadelphia, a bit off Diamond street. The local corner stores had, at best, potatos, and the semi-local supermarkets scaled pricewise to the college student population nearby. You could probably go out of your way and find some affordably priced, but what is convenient and available pales in comparison to the amount of really questionable foods like chips. (bag of chips is probably 49c, 99c for a big one, by the way. So you could get a bunch of chips for the price of those carrots, similarly, you could get something like 2-3 burgers instead. The prices are not such that the carrots seem appealing)
Zero-width non-joiner
Thanks! Just looked into this further. The guidelines say you should use the original title when submitting a story. But what if this title is uninformative and the subtitle is too long? Then you have to summarise. I don't think it's acceptable for a moderator to edit this summary, without giving any notice to readers (this was done several times to me). He should kill the whole submission instead if he doesn't like the title.

Apart from that, I guess it would be much better if submitters had a chance to indicate why they find their submission interesting. Just a thought.
Does anyone remember (or have a link to) the article about some guy trying to make a hello world executable as small as he could and ended up with an absurdly small size?

That was also a pretty interesting read.
It's an interesting notion to "counterfeit" a chip... I mean, the supposed counterfeit still has to perform the same duties as the "legit" chip does... maybe of less quality, stability or longevity... but nonetheless, it does the same job. It's like saying Hyundai is counterfeit cars because their quality is less than Honda or something.
It works now with qemu 1.7.2 compiled from source and with this change in server.go:

- for ptr <= len(FB) {
+ for ptr < len(FB) {
The Trillion-Barrel Tar Pit (2004)
I'd love to, thanks. My Twitter handle is the same as my username on here. :)
As someone watching from the sidelines I had no idea there were such major issues with IPv6. It seems like IPv6 has been out there for a long time (about 10 years) in terms of being supported by OS's and networking hardware, if not ISP's. So I would have thought that cutting edge institutions (like MIT) would already have years of experience with it and have worked out most of the kinks by now.

If this is not the case what does it mean for more widespread IPv6 adoption ? If such adoption is significantly delayed or stalled what will the consequences be, both for current Internet growth in the face of IPv4 address depletion and for new technologies like IoT ?
the random address is changed regularly, typically daily, but the old random addresses are kept around for a fairly long time

I don't understand this part. I have Ubuntu machines in a network which is technically /48 but only one /64 prefix is announced by radvd and they all have only two addresses, one derived from MAC and one private/random changing over time. They certainly never have eight.

Are those previous addresses not visable in ifconfig or ip -6 addr show?
I've been following them but we haven't talked. Yet :)
21 Crowdfunding sites  how to choose yours (infographic)
Some previous Google security research I worked on (and got paid for): http://blog.andrewcantino.com/blog/2011/12/14/hacking-google...
Of the money I invest --

25% in Vanguard dividend growth index fund

25% in Vanguard total stock market index fund

25% in Vanguard total bond market index fund

25% in stocks I chose myself
You might be confusing profit with margin. You need margin, in general, but you don't necessarily need profit.
Bleve – A modern text indexing library for Go
Really a better list is by tom his own self: http://www.amazon.com/lm/R2EN4JTQOCHNBA/ref=cm_lm_pthnk_view...

My recommendations would add:

http://www.amazon.com/The-Codebreakers-Comprehensive-Communi... by David Kahn. Many stories of the whole history of secret communications, with lessons in op-sec, not changing the codes frequently enough, they can't possibly break this.

The John LaCarre http://en.wikipedia.org/wiki/John_le_Carr%C3%A9 books. Do you remember the point where someone says to Smiley "There is no reason to think that they tapped the phone" to which Smiley replies "There is Every reason".

A must read, I tell my students in my Security Awareness training classes is The Cuckoo's Egg http://www.amazon.com/The-Cuckoos-Egg-Tracking-Espionage/dp/.... Examples like default service accounts on Dec Vax with username Field and password Service. Note when this is written and are our habits really any better with junk hung on the internet? Concepts pioneered in his book, as effective as they are, are not practiced. Note the alarms going off, ignored, at a large retailer last thanksgiving. Or another retailer recently, "Wait, what, we are being attacked? I didn't feel anything".

Most vulnerable is the thinking "Well, they can't get our X because <thing we did>". I have a matrix of attacker motives and what they are after. There motives and targetsyou haven't thought of.
> I don't understand why older people hang on to less optimal way of doing things...

I'd imagine they simply don't understand how these things work. I don't think my parents have ever intentionally watched a YouTube video. I'm sure they've heard of Netflix, but I don't think they know how to setup it up... so they wont even consider the value proposition... even though their Blu-ray player has built-in Netflix support.

We've grown up with this technology so it's not a big deal to rip a DVD or download a torrent.

But if you're barely aware that these things even exist, it's difficult to actually learn how to use them... even if the procedure is ultimately trivial.
Totally agree about the learning in consulting - you're always working on your customers _actual_ need ...even if that need ends up not being viable or meaningful in the larger market
And watching live sports is often a social experience - big games are fun to watch with friends and family. Sometimes it's just fun to watch with strangers who are also invested in the game's outcome. I've never had cable, but often I've gone to bars alone to watch a big game like a gold medal hockey game or the world series; Grab a few beers, order a pizza or something, and it's a lot of fun.
place/time and a sprinkle of luck
I get it on some chans I run. I'm not talking about the annoying "test" message either, I'm telling you there is already actual spam.

And the only reason there isn't tons of it is because Bitmessage doesn't have the kind of user base that it's profitable to spam to.

It is much eaiser to spam Bitmessage on an industrial scale and profit than it is to do so against Gmail's anti-spam systems today. If Bitmessage had a hundred million users, then it would be profitable to spam there and it absolutely would happen a lot. In my opinion spam would quickly become the dominant form of traffic on the network, and the broadcast message feature would go the way of VRFY and open relays in SMTP.
Years ago when I interviewed at Google, upon walking into reception, I was required to sign an NDA which stated that I wouldn't tell anyone about my interview, and that I had not told anyone I was interviewing.

I was kind of stranded in Mountain View unless they schlepped me back to the airport because I happened to be flat broke when they flew me out, so I just signed it, but I consider it laughably the craziest, most paranoid, least binding NDA I have ever signed.

Talk about Duress. ;)
I think this may have changed (in 14.04?) as I remember having more addresses in the past but don't now.
A nice treatise on a well-charted ocean.

Another great article along these lines for those interested in assembly and execution environments and so on .. is of course the famous muppetlabs exploration to build the smallest linux executable:

http://www.muppetlabs.com/~breadbox/software/tiny/teensy.htm...
I have 14.04s and OP talks about 14.04s.

Thus, a typical machine — say, an Ubuntu 14.04 workstation with the default configuration
I have a lot more to say about A.C.:

http://sockpuppet.org/blog/2013/07/22/applied-practical-cryp...

I really think people should avoid that book.
I used Ubuntu as an example, but it is hardly the worst offender. We have seen
Windows machines with more than 300 IPv6 addresses

Wow! I don't operate a very large network, but I do operate an IPv6 network and I've never seen one of our machines use more than 2 addresses. I feel like they've got some other configuration option or oddity going on that's causing a lot of these problems, but I am guessing they're much smarter than I am, so I don't know what to say.

Could someone elaborate on this? I've never seen this behavior on an IPv6 network, and I'm just running a server or two with radvd and no custom switch configuration.
Acquisitions is where good ideas go to die, part 457
Sure, but AFAIK many/most of the "supports Javascript" languages out there rely on emscripten, so LLVM is involved anyway. By its nature, LLVM gives you more flexibility in the long term than VMs that were intended as a final destination.
Not really nice to have. Memorizing is essential part of learning.

That the data are also out there, available in books and on the internet doesn't matter much.

Let's put it this way: a surgeon is someone that has, through training, memorized and internalized all sorts of facts, procedures and notions to be able to perform (and respond to anything that might go wrong).

The fact that I have full access to all the kinds of books and info that he had read, doesn't make me a surgeon.

And it's not just practice either. E.g. I wouldn't sit on the table of some surgeon who doesn't know the necessary stuff of his trade by heart but "can look it up on his iPad if he needs it".
I would agree that if you don't intend to utterly disrupt some industry, that some experience working in another company can be helpful.

I would argue that as much good knowledge may be gained that the equal number of bad habits may be learned and turn you into an "inside the box thinker".

Working in a hardware startup is a great example of this duality, however. Old engineers know that planning, testing, and quality debugging lead to a great product and that no amount of research can beat a good test program. Young engineers are willing to try stuff because they don't know what they don't know. Some huge innovations have come from younguns trying stuff that "shouldn't" work, and become industry shaping product innovations.

Who's right in the end? Both have been.

Last, I think I am pretty sick of people saying "what the formula is". Just shut up, because there isn't one!
Docker has a sophisticated system for controlling what ports are open on each container and which other containers it can "see" when it uses these ports.
A significant factor is that privacy addresses won't be released if there are active connections using that address. So if the machine is running something with long lived connections; big downloads, push notifications, IM clients, ssh sessions and so on, then it can end up a growing stack of unreleased addresses.

A typical admin who ssh's to a few boxes every so often, but then leaves those connections open in a tmux/screen/terminal-tab session can cause havoc.
I would like it, but it is not showing any prices.
I think having a dedicated TV with cable is optimal:

1. Computers and Internet are for work (HN being an exception), TV is for
entertainment. It makes sense to keep things separate, even physically
separate.

2. If I watch TV, I do *not* want to be bothered about thinking what to watch.
I reserve these kinds of decisions for work or for things that actually
matter.

3. If another person makes the program for me, I'm likely to be exposed to
interesting things that I would not have picked by myself.
I would add a few simple rules.

1: Never, ever read aloud from the slides. Use the slides as focal points to material you have mentally prepared.

2: Carry only a small deck of notes. Something that can fit in your palm will be fine, and again, use these as an aid to keep the speech in coherent order.

3: Slow down. Your thoughts will be racing, and the personal feeling of time gets distorted.

4: Get familiar with the equipment. Check that everything works at least a hour in advance. Preferably more. Then check again 15 minutes before you're supposed to give the speech.

5: Confident != cocky.

For what it's worth, I was a terribly shy person when I was young. By the time I was in the university, and held the equivalent of infosec 101 on two years running, I had learnt to enjoy speaking in public.
> unless USB Ethernet is good enough

Well, most (all) of the $40 ARM boxes I've seen run the ethernet port off the USB bus... so, an USB ethernet dongle should suffice.

(the USB bandwidth should likely still be faster than your internet connection, but depending on which ARM chip you have, that may become your bottleneck in processing the packets... Beaglebone Black seems like it would suffice though, RPi might be a bottleneck)
What about malicious programs without privileged access ? Is it possible for them to just keep requesting new memory pages from the kernel and see leaked data that was free'd by another process they shouldn't have access to or is this something kernels are already preventing ?
I question the veracity of that statement. Whenever you see a mob of screaming fans surrounding one of the Kardashians they tend to span all age groups. And twentysomethings are always trying to get me to watch the latest E! reality show.
You're in the US, right? I don't need anywhere near 10k a month in order to live, even with a large family and a mortgage, here in Australia.
Same, I am currently in college and have free cable in my room. I even had a TV at one point. Never hooked them up. Ended up selling the tv.
How would Docker help here at all? Docker dose not provide security like you think it does... it's about application portability...
Hi! Nice product, I'd like to upgrade. But I don't want to use Stripe. Any plans to use something else - btc/paypal - as a payment method in the future?

I really like the idea - put the LuaVM to great use handling this and make things really simple with a hosted namespace. I'll be using my free account in the next few days ..
Thanks, you have definitely convinced me to remove it now.
Loved the series. To your point, Burke apparently has a pretty amazing track record:

https://audioboo.fm/boos/1574606-james-burke-predicted-the-f... (WARNING: webpage auto-plays an audio track of Burke)
Super informative post. Thanks for sharing.

One thing I didn't understand was the author's comment that "I bought the part off eBay, not from a reputable supplier, so it could have come from anywhere."

A 5-pack of quality 7805's can be found on Amazon for $5, including Prime shipping, (e.g. http://amzn.com/B00H7KTRO6), so what's the incentive to buy parts of unknown provenance on eBay or the like?

I ask not being a hardware guy myself, so genuinely curious, as I've heard stories like this before.

Again, fantastic overview of the chip, though. I learned a lot.

[Edit: spelling]
Yes, someone (M2dude, I think) says that 65% of the thrust, at speed, was provided by the intakes. That said, at lower speed, all that work to bring air up to speed is accelerating the plane as well.

Even so, since drag tends to increase as the square of velocity, and in proportion with density -- you're spending a lot more effort to maintain velocity at higher speeds. The afterburners are mentioned as increasing fuel consumption by 80% and power output by 17%. The high fuel consumption comes down to the plane accelerating, climbing, being in denser and warmer air, and heavier -- all at once. While the engines might be marginally more efficient in some sense at high speed, this would be cancelled out by the vastly higher drag at low altitude/speed.
IPv6 has been sold as "just like IPv4, but bigger" but it's not. It's much more than that, leading to the schism between the "adopt or die" and "not on my watch" people.
High-level paradigm for reliable large-scale server software (Erlang)
It seems fabricated at best.

SR was up for a long time... and I'm sure made a lot of enemies... not to mention bots trying to pound on it... So it seems very unlikely that something as basic as not escaping user input strings would bring them down...
If you want to be a cobbler, go work at a cobbler's shop. If you want to be a luthier, go work at a luthiers. If you want to start a startup, go work at a startup for a while.

Why is this news?
Did you just want to voice your opinion and find my comment relevant enough to serve as a place to hang it, or did you mean that as a response to what I wrote? I don't think I substantively disagree, although I think Norvig's claim is often read (not sure if intended) slightly stronger than is merited. I would also note that the list does not seem to be restricted to "security professionals", but to all those interested in learning about the topics in the list I quoted above. I broadly agree with the thesis that Design Patterns doesn't fit that mold particularly well.

(In general, I find it a recurring problem on HN - and to some degree similar fora - that I am not sure what conversational role a poster intended their comment to serve; I wonder if there is a good way to address that...)
Ignoring the more generic point the gp poster made, if you want to learn Node but not sacrifice expertise on iOS why not identify a mobile app that requires a server side component and do that in Node. That way you still feel like you are working towards a singular goal of doing app development.
Actually the "poke" method would work and I suggested it on a different thread on that mailing list. It's the S/MIME model although these days you'd just stick an ECC key into a header and sign it with DKIM, then upgrade the clients. Doesn't have to be technically complicated.

There are at least three major downsides:

1) You still leak lots of metadata and the full data of the poke including most obviously the subject line.

2) Do users understand that their spangly new "encrypted mail" actually fails to protect a lot of important data? What if they (gasp) came to rely on it? I'd want to see usability studies showing a clear understanding of what is protected and what isn't.

3) You break other features that rely on the server being able to see content, like search, and the ads that pay for all of this.
Caravan – Responsive Multi-Purpose WordPress Theme – IceSoft
Google in Talks to Move Data Inside Russia, Tightening Putin's Grip
Does this mean anything for Git and other VCSs, which uses SHA1 for identifying commits and other blobs? For non-malicious content, you won't care, but if collision attacks are actually feasible, then Git's security guarantees ("you can fetch from anywhere") might potentially be compromised.
> It makes sense to keep things separate, even physically separate

Saying something doesn't make it true.

>2. If I watch TV, I do not want to be bothered about thinking what to watch. I reserve these kinds of decisions for work or for things that actually matter.

Fair point. It's the same reason I listen to pandora in that sometimes I'd rather not choose.

> 3. If another person makes the program for me, I'm likely to be exposed to interesting things that I would not have picked by myself.

Maybe but more often than not, this isn't true unless you find the massive amounts reality tv to be interesting.

But none of the reasons you describe make TV with cable optimal for anything except lying back and having random (not necessarily good or interesting) entertainment thrown at you and exposing yourself to hours of psychological marketing tricks.
This is a great comment, thank you!

> I learned that most startups fail, and that when they fail, the people who end up doing well are the ones who were looking out for their own interests all along.

Can you elaborate on this? How were people "looking out for their own interests", and how did it end up helping them? Could the founders have done things differently to make the outcome more equitable?

Thanks!
The Hacker Crackdown by Bruce Sterling (cyberpunk author) is awesome. It's the story of Captain Crunch and the rest of the phone phreaks in the late 80s and early 90s, and some of the earliest prosecutions of hacking by the U.S. federal government. Apparently they still throw a 2600 magazine party at defcon....

http://www.mit.edu/hacker/hacker.html
Do you use privacy addresses ?

I don't, the /64 is identifiable as "my house" so there is no reason to hide which particular machine is doing something.
I had a raspberry pi on my network via ethernet and saw it had accumulated a ton of IPv6 addresses. Ended up just disabling privacy extensions on it. If your machines reset their network connection (ie wireless reconnects) then they'll flush their IPv6 privacy addresses.

Your machines might just have a long timeout before they use a new privacy address. You can find more info here: https://home.regit.org/2011/04/ipv6-privacy/
Using Feedback Army for Usability? This Is Better
This is something that a significant amount of people do not understand. The fiduciary duty in this situation runs to the company not to individual employees.
Almost all large organizations decided to delay adopting IPv6 until the last possible moment because this reduces various costs. But this meant that many deployment problems were not discovered until very late.
Smart TV and cable are not the same.