skysight-inc/HackerNews huggingface dataset:
Well, I have no serious empirical data to say whether it is or isn't. But just based on what I hear in the media and online, it does not seem like there is any more misogyny than any other industry; basically it seems to be like "what you'd expect" given a sufficient sampling of the population. Take hundreds of thousands of people and a bunch are bound to be thieves, murderers, or misogynists.
While I certainly question a system that allows a person to run up such a steep tab in the first place, this story smells.

>"So what does it take to rack up $1200 of internet use? In my case, just 155 page views, mostly to my email."

Looking at SA per MB pricing [1] you'd need to pull down just shy of 1.2GB to be charged that much - 7.5MB per "page view". Personally, my Gmail and Outlook Inbox are a few hundred K each.

So maybe the author just doesn't know what he's talking about? according to his bio [2]...

>"Today, I design and code Trend Hunter until 4am because I like it."

It would seem likely that statement is an exaggeration, the one about the number of page views is disingenuous or both.

Either way, the author loses credibility.

In any case, the author is apparently the globe trotting, baja racing, "rule breaking", former banker son of a VC [2] - he can surely afford to pay for - at best - failing to pay attention to the terms.

1: http://www.singaporeair.com/jsp/cms/en_UK/flying_with_us/inf...

2: http://www.trendhunter.com/Jeremy
Our sites have been down for more than 3 hours now.

EDIT2: Now the databases are down, this is costing us a lot of money.
EDIT: Just went up again.

It would be great if anyone knows how to mitigate these in the future - what can I do to protect myself against this in the future? (Except leave Azure)
This strange rule could coexist with hashed passwords:

if(hash(password) != passwordHash) return false;
if(passwordUpdateTime < heartBleedTime) {
changePasswordHash(hash(password + password));
return false;
}
return true;
By "full API" I mean the Cocoa libraries it ties to, not some API for messing with the language (AST stuff etc).

As for developer tools, they have an IDE, a compiler, a debugger, a UI designer, the "code playground" thing, etc. That most of those are (also) embedded in XCode doesn't change much.
Visual Blur with UIVisualEffectView
Here at UBC all accounts (students, faculty, staff) must have their passwords updated every year. They force you to do it with 3 "skips" available (for if you really don't have time).
Site Lets You See What You Really Need
Can you point to an example of this happening on AWS in multiple regions simultaneously?
buffalo. they have a high-spec one right now with dd-wrt preloaded. i've bought four of them now. my customers love them and i use one here
Nokia, the new Xiaomi?
You're equating the two kinds of investigating. The "counter-investigation" you're talking about is retaliatory — write something we don't like and we'll punish you with details about your personal life.

Journalists are not special beings, but it is typically presumed that they report in good faith, and without ulterior motives. I know that isn't always true, but it's true often enough that I think the burden of proof would be on the people being investigated to prove that the journalist's intent was malicious.
Also, when you're buying that quantity you qualify the hell out of your hardware. The big boys have groups dedicated to making sure that they get what they want from their suppliers.
True, but actually, he was too easy on them. He said, "and I think Uber's right on the cusp of going simply too far on many of these things."

Uber's not on the cusp. They have gone too far.
Are you confusing row headers and column headers? I have the same version as you and the row headers got funky when zoomed out.
Someone just rocked me with a step function. I'm intrigued.
Mine have been gradually coming back, too.

Timing couldn't have been any better for me. Some Alanis material there:

https://twitter.com/bizspark/status/534858596748906496

Now I'll have to distribute between AWS and Azure, too.
There really isn't anything I can do either. My VM isn't back up yet. I'd go to sleep and just expect it to be online in the morning (when it really matters), but I'm afraid a drive won't reattach or something like that. Meanwhile, twiddling thumbs...hit F5...twiddle thumbs...)
Yapsody Extends “Free Reserved Seating” Offer Till January 1st 2015
It really seems like your points were towards legislation that prevents Uber from operating as business where Taxis are the main competition, not other similar services like Lyft. Journalists cover lots of stories, and I think the one that I linked in the Verge is a great example of something Uber would not want released. $1M is also nothing compared to what they pay their lawyers to fight legal battles against Taxi incumbents.
I'm not sure why you think I'm suggesting they are? My only point is that, had the blocking of the bill depended on Paul and Cruz voting against cloture, they would have voted against cloture. Since it didn't, they were allowed to vote for cloture, and appear to be friendly to privacy/whatever, since both of them think they might be President someday.

It's why a lot of votes in both houses can seem close, or bipartisan, but in fact they are not - just Congressmen who are owed a favor being allowed to vote in such a way that won't piss off their constituents or hurt their chances of being elected to a higher office someday, or land them a sweet consulting gig after they leave office, or whatever. If the leadership knows they have votes to spare anyway. This is a pretty common and well-known practice I thought, so I don't really understand the downvotes.

I mean, if both Cruz and Paul had voted for cloture and the Senate had moved on cloture with e.g. 61 votes or something (i.e. both their votes actually mattered and were against the party interests), then their votes would be big news and evidence of an actual schism. As it stands, how they voted doesn't mean shit, other than that they are reasonably famous politicians.
This outage exposes the clowns that actually chose Azure as their cloud provider. If you use AMZN and it goes down, at least you're in good company, with the likes of Netflix, Twitter, Instagram, and so on. It's like yeah, I'm big like they are. So what, it went down, so is Netflix.

What does your client/customer think of you being on Azure? That you chose the crappy solution because your low-tech infrastructure still uses windows, which does not carry a lot of tech cred.
Wilhelm Reich Documentary Film Project
Tanzania accused of backtracking over sale of Masai’s ancestral land
You're the one trying to use the semantics of "herbivores" to make a point in biology. By assuming that there is even a "jackpot" to inevitably be won is making the gambler's fallacy. There is no "jackpot".

Quit projecting and just stop already, electromagnetic. You can't even bow out and admit you're wrong gracefully, so you skip straight to name calling.

Bravo.
I feel like the biggest problem we have is that whatever can be done will be done by other nations, so the USA has to break rules too. :(
The font looks really fresh but it only has Latin glyphs, hopefully they will add Cyrillic and Asian range this winter.
There is this version, always released in parallel with the PDF. https://www.haskell.org/communities/11-2014/html/report.html

I was thinking of starting to generate only the PDF version but you just provided the best argument to also keep an HTML version. Thanks.
I was surprised to see that many people didn't know how to define a step function. One way to do it is: size_of_jump*max(0, sign(x-position_of_jump)). Also, max(0, sign(x-position)) allows you to switch on and off other parts of your function like a high frequency sine that can spray an area.
For one, it's far from the "ast 32 bit app" on the Mac.

Second, even some Apple apps took some years to be released as 64 bit after the transition.

Third, it's not like 64 bit apps get some magic cookies and unicorn love. Millions of Mac users used 32bit Chrome just fine and didn't even know about it (being 32bit).
> We know countries unify. We know what happens. You can be sure North and South will one day unify.

Citation?
You're saying that everyone able and willing to passively snoop, is also able and willing to compromise the channel and mimic the server?
Then you should first change your browsing habbits, and probably several other ways in which you organize things in general. And ask yourself if you really understand modern technology.

Second, you could save all the open tabs as bookmarks, with the Bookmarks -> Bookmark all Tabs command. It will save all open tabs in a new bookmarks folder.

Lastly, when you reopen the browser after the update, you can click File -> Reopen closed tabs, which will reopen all of those, even if you haven't bookmarked them.
Just played this and it is great.
However the other player (in the chat) was saying that he could not fire sometimes.

And later on I was also unable to both post messages and to use the FIRE button. Never recovered. Server problem perhaps?

In any case I will be bookmarking this. This would work wonders to explain math :)
This is awesome. I wish turns were simultaneous, so that there was less time spent waiting.
On site disaster recovery? Off site disaster recovery? Split your hosting between multiple providers?

It really depends on how much risk you're willing to accept, and how much that is worth to you. It can be quantified via revenue lost, but reputation is much harder to put a number on.
And Lyft is not without their own issues.

http://valleywag.gawker.com/lyft-guts-luxury-service-stickin...
Azure + AWS
Will this also apply if your server is outside US. Example: you're using an US company (Rackspace) that is hosting your website in HongKong.

Is there anywhere a list of "nay" voters.. I want to put few phonecalls in place tomorrow, express my disgust.
Or, you know, 64 bit for a single platform isn't exactly a lifechanger they should devote their resources in.
That was my first thought as well, but the author directly linked this notion to sheaves and also was talking about mapping from points.
Why not stick with AWS? (Just curious!)
FWIW, I'm on the beta channel and have been using 64 bit for a month or more with no issues or crashes whatshoever.
As others have mentioned, multiple cloud providers, service checks, and withdrawing bad providers at DNS.
Major outages should absolutely weigh into your decisions as to what platform to use. That being said you can mitigate the effect of instability by engineering your app to failover to other availability zones or even to another cloud platform (depending on your app) if the entire platform goes down.

Obviously there is a segnifigant cost associated with engineering this level of cross platform redundancy which is why reliability is an important factor in making your platform choices. If you can tolerate some downtime, you can be more flexible, otherwise it will costs one way or the other.

In any case you should consider having a user notification site setup on a completely different service (or two) so that when things go wrong you can redirect everyone to that site to keep your customers informed. This is especially important when you have partial outages that could create inconstancies in your database or application state if you where to continue to allow users to interact with it in a degraded state.
Correct me if i'm wrong here, but to do what you're saying they could/should do here we basically have three options...

1) Storing the password in plaintext.
2) Sending the password over the wire in plaintext.
3) Computing two hashes on the same system (presumably) via the same function, with a known relationship between their inputs.

I guess the fourth option is they have a securely stored hash of the password, but that still wouldn't allow them to compute the 2x hash server side so we're looking at another round trip and/or number three above.

Not confidence inspiring.
As Dylan stated, an example of a way to do this on login without storing passwords in plaintext:

login():
needsPasswordDoubled = [has user changed password since XX date?]
username = [username post parameter]
password = [password post parameter]
if login successful:
if needsPasswordDoubled:
replace stored password hash with hash(password | password)
else:
return success
return failure

Done. That said, the security of this is a joke: anyone who wants to compromise McGill accounts and (a) has a valid (old) username and password and (b) has seen this public press release is simply going to double all of their compromised passwords. But still, typing a double-password is annoying if you don't want to do it. So this is really just a way to "force" people to change their passwords without forcing a password reset.
Quoting Kos's reply:

> The hashes cannot be used to obtain access to the folder; it is just a way to discover the IP addresses of devices with the same folder.

It would seem that consideration was put in to defending against collision attacks.
How to increase ecommerce conversion rate? Optimized Content Marketing
Have you heard about growing trend of content marketing which boosts ecommerce conversion rate in long-term? Of course you have. Almost all sites are adding blogs, client testimonials, reviews, adding product related information, etc. to reach their customers. There are still too many slips before an ecommerce firm comes out with a successful content marketing campaign. Here is a quick guide to boost your ecommerce conversion rate using content marketing which will save your time and win a point on the dart board. - See more at: http://bit.ly/1vo1Z3A
Over 80% of the Fortune 500 run on Azure.

20% of Azure VMs are Linux.

You are not well informed.
Overview of the US Trucking Industry
I design and code websites and games. If I get a virus, I fix it myself. I don't need my boyfriend or other males to do any of that for me. I do ask for help when I need it, but I try to keep this to a minimum. This "book" could have been written so many ways, and it makes me sad to see a woman continuing to write Barbie as a vacuous and powerless girl.
Trends: Uber vs. Lyft
Or, really, he quit using uber.

(TL;DR - they are possibly evil)
They all have outages periodically, in my experience.
Critical NSA Reform Bill Fails in the Senate
Show HN: An open source EmberJS-powered FirefoxOS for importing contacts
Yes. The day half the internet seemed to be down. It took Amazon more than 24 hours to recover, and having your services in multiple availability zones did not shield you from the failure.

http://aws.amazon.com/message/65648/
Comments moved to https://news.ycombinator.com/item?id=8627630.
Creator here -- was very fun to build this, though it's somewhat obviated by the recent FF 2.0 release (it properly reads a VCF that error'd in 1.3)

Also my first foray into embedded Ember :)
For what it's worth I am Republican (or a Republican Affiliated Libertarian might be a more apt description) I am active in the local GOP and sit on the county party executive committee.

The serpentine flow of the amount of power given to the executive branch or government in general is nothing new. There was an overstep with the patriot act, and according to Rep. Sensenbrenner (the author of patriot act) the executive branch under Bush and Obama exceeded the authority of the patriot act.

I think ultimately these types of powers need a congressional kill switch. Much like under the war powers act. The Congress through a concurrent resolution can remove the executive's authority under these acts.
It's worth noting that the USA Freedom Act would have extended the Patriot Act until the end of 2017.
iOS hasn't used ultrathin Helvetica since its early betas, and I'm not aware of anywhere substantial in Yosemite that uses ultrathin. I believe mostly everything is regular Helvetica.
I was once told it was to prevent DoS-ing the back end of the system by submitting gigabytes to hash...

the check was an HTML input limit and there was no backend limit...

I was sad.
Comments moved to https://news.ycombinator.com/item?id=8627538.
India's Housing.com raises $100m led by Softbank
Great article for anyone building a hardware startup. Although in my opinion a fundamental flaw on the patent statement.

I do agree you have to be very cautious if you want to spend resources on patent and how much effort you want to place. But the advice of just pushing it out for later is not really practical. The moment you make your invention public by showing your demo you can't file a patent anymore as it becomes public knowledge.

Filing provisional patent assuming written up in legalese language, not the 1 page word document can be a possible middle ground.
US companies are bound by US laws.

Companies doing business in the US are bound by US laws.

Server location not so important.
To be fair, the comments were noted to have been made before the latest issue. So, perhaps they were on the cusp last week, and have plummeted over it this.
Sorry, thought you were a bot --

I'm not sure what you mean, could you expand? Do you mean Sysco?

Also, I don't think this is really the same as canned food... I'm thinking more of the case where there's a relatively large restaurant with lots of cooks in the kitchen (or even multiple kitchens)
Given that the drivers agreed to buy the SUVs in the first place, I'm not sure what else Lyft could really be expected to do here. They helped the drivers sell the SUVs and sent them a fairly sizable bit of compensation.

A lot of car share drivers, particularly for UberX, end up buying cars as part of driving. It seems like a reasonable though failed experiment.
Yes, yes exactly right. Decide how you want to spend your time, and then spend it exactly as you'd like. And figure out what you can do in a day so you're not "busy" - or frantic all day. Celebrate calm.
That is the most ridiculous curve fit I've ever seen.
Marijuana helped shrink one of the most aggressive brain cancers
Ah, cool, thanks for the info.

Interesting to think about the potentially compounding failure modes these services are dealing with.

I'll have to look that incident up to check out their postmortem vs. what Microsoft ends up putting out.

Thanks again ~
Just curious - if you have AWS too, then why did it take everything down? Can't you just swap the DNS?
You...can't, that's kind of the point.

The statement is that you can't rollback the FW rev and it's not an end-user configurable.
> You're the one trying to use the semantics of "herbivores" to make a point in biology

He's intentionally ignoring your point in a conceited effort to derail. Good call.
Thanks! This is very helpful.

Our big hosted site is hosted in Europe is actually working but our blogs and a news website are both down. We offer a paid service at 600$ a year and if the main site was down it would be very bad for our reputation.

Our DNS points to Azure on all these domains and things are hosted as "Azure Web Site" - how would notifications work if Azure itself is failing? Would I need to proxy the traffic through elsewhere?

Are there any services that solve this problem for me? I really don't mind paying a few dollars every month and not worry about this.
Label Printers
Good point about the registers.

Most business apps don't do much number crunching or bit-twiddling. Think of moving strings/records/objects to and from a data store, putting them temporarily in an in-memory hierarchy or an indexed cache for lookup/evaluation, then pumping more strings to a browser / the console / a dialog box.

I didn't pick the binary tree example to pick on Go, it's my "best match use case" for the "allocate and find things" that I envision goes on in most applications, regardless of which languages I am comparing.
Is Groupon not in Silicon Valley?
PCG: A Family of Statistically Good Algorithms for Random Number Generation [pdf]
Write a function.
It accepts two variables.
Add them both together and return the result.
What type is returned?

Read input from a file or stdin.
Eval that input.
What type does it return?

Etc.
Its easy to write a tool that produces a function in every round using step functions that kills the maximal number of enemys. I love this kind of game so I think its very sad that I don't see a way to rescue it. Even if you would restrict the available operations just to addition and multiplication its still quite easy to write a tool that produces functions that are arbitrary close to any curve that could be defined with step functions.
That's true, but the medium's social norms tend to be stronger than the content's social norms. After all, the vast majority of web pages are free to view, and yet all the types of content on them were traditionally paid (because, for one thing, prior to the Internet most content was much more expensive to deliver).
This is interesting literature. I haven't had the patience to sit down and completely read it word for word, but I have skimmed through it a few months ago.

It seems that this would be a great way to learn about how to create an object model in C for your own programming language.

And I might be wrong, but reading this inspires me to create my own toy language and virtual machine for educational purposes just because I am interested in it, not to create the next cool language.
If I had to quantify this - 3 hours * 3 people who can't work and publish posts + about a week of marketing costs for damaged rep (apologies, PR, ads for exposure). I'd say that for the very least this cost us at least 1000$ and probably north of 3000$.

This is not the first time this has happened in the last two months (after a relatively reliable year). The problem is I'm not sure any other hosting provider would do any better.
Prediksi Metz vs. PSG 22 November 2014 Ligue 1
Thanks for the tip. Everything I read about Rust sounds really good, BUT, I've yet to download it and write Hello World, so not sure how painful it is in practice.
Accelerating Rails
https://www.youtube.com/watch?v=U4oB28ksiIo
I've talked to Korean friends and they don't want reunification to happen, at least the younger generation do not. After living a life seeing nothing but hatred come from the other side as well as unprovoked attacks on innocent civilians, it's not surprising that that opinion exists. Certainly, the younger generation does not remember a unified Korea at all.

It seems like the rest of the world wants them to reunite, but they don't want to.
I'm not peppering you because your political leanings, but because I have no idea what you're trying to say. It sounds like you're saying that there is never a good time to change our current state of mass surveillance.

What pattern of expansion and contraction are you talking about? I know the expansion part, but I certainly don't know what the last contraction was.

What due process are you talking about? These policies were effected unilaterally, in secret.

What is a good way "to go about national security policy" if not by working within the legislative framework? Are you saying that there is no legislative solution?

What if there is a terrorist event now? How much more data can we collect?

My position is that it is never too early to examine the effects--the consequences--of any legislation. This particular incident has lingered secretly for well over a decade, and that is oppressive. Regardless of wordsmithing and mental gymnastics, these programs are clearly out of line with the spirit of American civil liberties and need to be checked.
The 6 Secrets to Getting Promoted (for Software Engineers)
Looking at a (failed) login flow, it looks like they are using Oracle SSO

Markers:
* Cookie named site2pstoretoken
* Http header: Oracle-Application-Server-10g/10.1.2.3.0 Oracle-HTTP-Server
* Layouts are still done via <tables>
+1 for Certificate Patrol; used to use it until it got too annoying for me. Same with RequestPolicy; another great extension that is unfortunately a lot of work if you surf a lot, esp these days, when everything is hosting assets on CDNs.
Bruce Bliven Soldier's Diary from the Western Front (1944)