skysight-inc/HackerNews huggingface dataset:
We maybe digressing a tad, but that link isn't proving much in relation to necessities of accepting TARP.

If one takes into consideration that 4 days after that email was written Goldman announced a $5 billion investment into GS from Warren Buffet. A $5 billion deal does not get conjured overnight, takes days if not weeks of work prior to public announcements.

Regardless, that was over a full month prior to them receiving the TARP funds.

Also if one absolutely must, they could take into consideration that 4 days prior to that email GS, mid-crisis had beat prior earning and profit estimates by a tad over 10%.

Also, GS had not had a single losing quarter since 1999. They did however report a loss mid-December 2008, mostly stemming from being required to mark the value of various assets at currently distressed prices, mostly because their status was recently changed to a regulated bank.
Can anyone shed some light on what the following does and why it's necessary?

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 36A1D7869245C8950F966E92D8576A8BA88D21E9

"All we’re doing is installing the latest stable version of Docker, direct from Docker’s own apt repository, configuring it to listen for both TCP and socket connections, updating the rest of the system, and installing avahi for multicast DNS resolution."

Installing avahi for multicast DNS resolution? Why does he need avahi? Why does he need multicast DNS resolution?

[Update: I don't know why the person that replied deleted their comment, because it was useful info. Here it is, for posterity:

1) Add's the docker key from the Ubuntu keyserver, which is already trusted, so the docker packages can be installed.

2) Avahi lets him name his docker containers and then discover them on the local mac os host and the linux VM, eg wossname.nginx, rather than some dynamically assigned IP.]
In this case, no. They merely obtained massive tax breaks and lots of free land/roads.

However, even if you completely support local governance in the abstract, is there a limit past which you feel uncomfortable in terms of concessions to draw in jobs? For example, Ireland has structured its tax laws exactly in the way foreign corporations demand so EU based corps can avoid paying taxes. Should this be allowed?
Wow. You've managed to generalize across 300 million people in one go. Congratulations, that has to be a record.

If you're aware that your stereotypes are just stereotypes could you try a little harder next time? Nothing worse than being aware of the failings of your arguments but using them anyway.
Due to using a moderately obscure browser, I've had problems with ASP.NET sites just plain refusing to include any version of the JavaScript they required for form submissions to work.
Travel Back and Forward in Git History
I am not the target audience. Mozilla/Firefox it is for me and while I hate useless Javascript (Hey, blogger.. Great to see a spinner!) I wouldn't want to disable it by default.

But maybe this is a good idea and maybe there is a need for a secure by default browser.

What I don't quite like is the 'low level languages are dangerous' paragraph and then implementing the thing in Java/on the JVM. As far as I'm aware the security record of that platform isn't exactly stellar as well and especially older versions are widely reported to be vulnerable to exploits (admittedly usually using applets as a vector here).

Is the JVM really a great (or decent) choice, if security is the main concern? I truely don't know, so .. honest question here.
Nerd Snipe! - Pick a website that uses consistent shadows. Assume that the website is a 3 dimensional object that could cast those shadows. Also assume that the object is positioned sitting on the ground, with the length of the page normal to the surface of the earth. Provide a location, rotation, time of day and day of year in which the shadows are accurate.
Frameworks are making the whole JS thing much easier now, and since you have JS in the browser, on every device on the planet, it makes a lot of sense to use node.js on the backend as well for certain tasks.

In 2014~2015, I can't imagine creating a web based backend system (or even a mobile app for that matter) in anything other than JS. The costs of hiring a C++/Java/Ruby engineer are not so easy to justify. Beyond the monthly costs, it's also the amount of time it takes to create a powerful, reactive web interface.
It would be nice if it supported Netflix. There's some difficulties with this, but a discussion about it here: https://github.com/rg3/youtube-dl/issues/1564
You are right, and I considered adding that question as well. JavaScript has so many quirks that it's very tempting to use a transpiler. However I do not have any experience with transpilers myself. I also don't see any of them getting a lot of traction, not even CoffeeScript. And then there are people moving towards vanilla JavaScript. It is definitely an important question.
What are those circle shapes?
Thanks ! This is nice to know. I'm sure this will be useful.
You mean like this: https://news.ycombinator.com/item?id=3651482 ?
If you're worried about a major hull breach there aren't that many ways to go about it. Aside from that, you could pretty much make the same argument about any city on Earth, but I don't think many of us are in favor of ubiquitous surveillance on that account.
The Rarest Plants in the World
AMD cpu bug update – AMD confirms (2012)
Bowser Ghost Pepper Challenge
Regin: Top-tier espionage tool enables stealthy surveillance
Anecdote, my father has had blood pressure trouble due to both high sodium and low sodium in the past. In the first episode of low sodium, he kept reducing his salt intake thinking that would help. A visit to ER helped fix that notion.
Your free design work will end up in the trash
Starting data analysis with R: Things I wish I'd been told
I pictured looking top-down at the object, for which the shadow seemed quite natural?
The chronology I remember is a bit different (GNOME needed a replacement for CORBA and came up with DBUS; KDE already had DCOP; then Freedesktop happened, with big players pushing to reduce mismatches so that they could ship both environments with less hassle; and KDE scored some and GNOME scored some (more), with DBUS being one of them), but I was just a random observer so I might have got it wrong.

Still, it's a fact that DCOP back then felt much nicer and more humane (I wouldn't know about speed). I haven't used Linux in a while so I honestly don't know now.
It's nobody's fault but their own if they faced the possibility of bankruptcy.
I've done the logo dance more than a few times as the lead marketer at a startup, suggested it to the CEO or done so myself for a business. A few things I don't see in this article which are reality when dealing with a massively large contract (say with one of the top 5 internet companies at the time).

* Preferential payment terms - a large co will say, "If you offer better pricing than you offer to us, you'll automatically reduce our rate to the new low rate offered." This ensures you can't price gouge them, but it also ensures that if you price correctly, telling other businesses that's your lowest rate will potentially make them more likely to close.

* Large customers that are household names instills a trust with a firm that helps them close deals with companies that are smaller in the B2B space in particular (5+ years in sales doing professional services, friends who run similar firms, etc).

* It's not only sociopaths (per the first comment above, lol) who can close deals with name brand firms. I fully agree it's probable some who raise money are sociopaths.

The phrase, "Manage your own psychology," has really stuck with me after I heard from Sam Altman in that Stanford class - knowing more than a few people who've been under a lot of stress in their role over my life has really helped me understand that we all crack in our own unique ways when the pressure cooker starts to heat up.
(edit, spelling).
> He briefly removed his subdomain and rethought his security systems. It was a really fun week.

Sorry, it is not fun for your friend unless he had an absolute trust in you, and knew you'd help him remove every backdoor/keylogger/etc.

He may have spent a lot of time securing his machine, time he'd rather have invested in different things.

Seriously, don't do that. Just tell him about the obvious weakness - send a proof of concept if needed.

But a friend is more precious that some cracker creds.
Somehow, attempts to bolt message passing onto Linux never seem to be very good. Probably because the primitives underneath are a poor match.

QNX, which is a real-time microkernel, got message passing more or less right. You connect to a port of another process. Then you send with MsgSend, which sends a message of N bytes, and waits for a reply. So it's like a procedure call.

The receiving end (considered the server) does MsgReceive, which blocks waiting for work, gets the bytes, and returns a reply with MsgReply. That's QNX messaging.

Everything goes through this, including all I/O. It's very fast, and integrated with the CPU scheduler, so most message passes just transfer control to the other end without scheduling delay. This allows rapid tossing of control back and forth between processes without going to the end of the line for CPU time.

Because QNX is a real-time OS, there are some additional features. Messages are ordered by thread priority, so real-time requests are serviced ahead of non-real time. (This works well enough that running a compile or a browser doesn't impact hard deadline real-time work.) Any request can have a timeout, in case the other end has a problem. Finally, when a MsgSend from a high priority process goes to a lower-priority process, the receiving process gets the higher priority until the MsgReply, to avoid priority inversion.

Linux messaging almost always goes through unidirectional byte pipes of some sort. So you need a protocol just to figure out where the message boundaries are. D-Bus seems to be struggling with that. Building a call-like mechanism on top of unidirectional pipes means that callers do a write followed by a read. For a moment, between the write and the read, both sender and receiver are ready to run. This means a trip through the scheduler, or worse, starting the receiving process on a different CPU and suffering cache misses.

It's one of those things where the wrong primitives at the bottom cascade into layers of complexity above.
Teach them to be better than you. That may seem counterproductive. I have a type A personality, and I have decent coding skills. I've been in your situation a number of times. I also know there's these mythical expert developers out there that I can't seem to find (or afford). So, what to do? A few years ago I realized that if I continue down this path, I'll end up with some serious health issues due to the stresses that come along with having a reputation for being a really good developer.

So, I decided that instead of searching for developers better than me, I would teach developers I work with how to BE better. It's taken a lot of patience. And it's taken me quite a bit to LET GO of my way of doing things. I had to take my ego out of the picture. (VERY hard to do.)

Nowadays, I realize that developers don't have to BE better than me. I simply have to ALLOW them to do what they do without being so obsessive about it. Turns out, even junior developers really CAN do good work. They just need a little guidance that only comes with experience, and then they need me to get out of their way.
Behind the Writing on the Stalls
Why, oh why, don't people use datagram sockets for this stuff!?!
This is basically the same effect you see with shimmering above a hot road surface.
Tesla and Musk masterfully executed this deal. They used competition, timing, threats, promises, misdirection, PR, and showmanship to unbalance state governments and bend them to their will. Companies that can execute on this level have a huge advantage in the market.
This just isn't true. Seems like the kind of thing someone who's good at math would want to believe, though.

I know many people who are incredibly quick at many kinds of study, but they're generally in the humanities. One of my friends taught himself 4 languages in high school, but he can't do math to save his life.

Several of my friends are MDs and also can't really do math, but they're very well-respected. One is the youngest person ever to hold his position at the Cleveland Clinic.

There are many types of intelligence, and it's very hard to place an absolute value on any one field. I find quotes like this to be elitist nonsense that devalue people with types of intelligence that differ from our own.
Wow, that's seriously messed up if (which I didn't grok in the article) the person did not know that you were trying to help them with their security. The verbiage seems incredibly antagonistic (started to get nasty, etc)...implying a poor friendship at best.

Agreed with the first comment - no fun at all for your friend indeed. The links are good at the end, I've read about a few of those tools even being relatively non-technical. I think more people should have a basic understanding of how to maintain security, but, this doesn't strike me as the best way to teach folks.
I applaud them and wish they didn't have to jump through some of the syntactic hoops which C makes them to.
Surprising the Snobs- Big Names That Use WordPress
I personally haven't used httpretty, because of the way it had been implemented, I thought it would be impossible for it not to cause bugs in my tests. (Monkey patching socket seems way more complex than patching urllib, or requests)

I am using responses in the CMS Scanner I am building

https://github.com/droope/droopescan

https://github.com/droope/droopescan/blob/master/tests/base_...

I did have to create some helper functions in order to make responses easier to apply to a broad range of tests, those are here:

This one allows you to mock several requests in a more tidy way:
https://github.com/droope/droopescan/blob/2cf3f9fd076124e874...

This one is useful for adding responses.activate to all methods in a class:
https://github.com/droope/droopescan/blob/2cf3f9fd076124e874...

Overall, it works perfectly (and I've been developing with it for at least half a year), and supports python 3.
Cached: http://webcache.googleusercontent.com/search?q=cache:2zAAkXU...
I think Bob unfairly discounts the work that IBM did here. It's clear that there was synchronicity between the wants of the Plan 9 team and what IBM was doing. The need was clearly 'in the air' back then.

Upon reading this, it doesn't appear to me that Bob watched Ken design this system on the back of a placemat one fine day. Instead, they got a complete design with working code from a team at IBM. Being the seasoned bit twiddlers that they were, they realized that they could do it better. Their design is clearly an improvement, and their code is more elegant. In addition to getting the conceptual head start, they also appear to have received the full support of the IBM team in promoting and promulgating the RFC as a standard. To me, it's also story of humility vs. hubris.

As an aside, Windows NT shipped in 93, and wasn't able to benefit from this new encoding format. As a result, UTF-16 is baked-in and Windows developers have been living with it ever since (even if file formats are largely UTF-8 now, the API is still solidly UTF-16).
If anyone is curious, my colleagues and I have a study published on this sort of stuff, which has a nice background section.

Open-Access:

http://journal.frontiersin.org/Journal/10.3389/fpsyg.2013.00...

Our finding is that these effects can actually stick around for a bit if you adapt to one condition (say causing something to occur with a motor act) and then change it up (having something occur without a motor act).
As mentioned in the article, Vagrant actually comes with built-in support [1] to run Docker containers. Ideally it would obviate the need to do some of the manual work done here to get this type of environment up and running.

The Vagrant support for Docker uses boot2docker, which only supports VirtualBox, so I’m left high and dry.

You can use a proxy Vagrantfile to configure the type of machine that is used as the Docker host [2]. Unfortunately there is a bug [3] that make this not quite usable yet.

1. https://docs.vagrantup.com/v2/docker/index.html

2. https://github.com/maspwr/vagrant-docker-dev

3. https://github.com/mitchellh/vagrant/issues/4856
Fast HTTP parser for application layer DDoS mitigation
There have been some security flaws related to compressing data before encrypting it - I don't know if those apply here. But if they do, well, compression is actually optional in the ZIP standard. This would need to be checked carefully if this moves beyond the discussion stage.

The purpose of using an archive was primarily to have a standard container for transmitting filenames and metadata, which recipients won't need to install extra tools to work with.
The problem is that functions, in C, are neither prefix nor postfix. A postfix function would look like:

int (int argc, char*[] argv)main

prefix is:

main(argc int, argv []*char) int

The C version:

int main(int argc, char *argv[])

Is a horrible jumbling of both styles, with some confusion around type and name thrown in for fun.

The main benefit of the Go approach, beyond whether prefix or postfix works better, is consistency. Compare to Go's:

main(argc int, argv []*char) int

Once you learn to read it, it's much better, though perhaps not like English. In English, we preface the noun with the adjective, "the red car," whereas other languages say the equivalent of, "the car red." When people object to the Go syntax, they're almost always native English speakers.
There are so many people drooling over Musk - his brilliance, his determination to make the world better and more interesting. Not to downplay him as very few people could accomplish what he has, but it is a bit bizarre to me that all these things in which so many people seem to think are great, can't get done unless some billionaire takes them on. Is capitol really the biggest barrier to moving the world forward at this point? It seems that we the only way to move and shake things is to have an individual with a ton of capitol so that people can't get in the way, which is rather stark.
Not mentioned in the article is the typedef problem in C.

Early C didn't have typedef, just struct. The grammar was LALR(1), and context-independent - knowing the syntax and the reserved words, you could parse C.

Then came typedef. Now, to parse C/C++, you must know the names of types. So, to parse a C/C++ file, you must read and interpret all the #include files first. This makes it hard to write tools that work on C/C++ source.

This isn't a problem with the declaration syntax of the Pascal/Modula/Ada/Go line of languages, where declarations have the order "x int" instead of "int x". So "go fmt" doesn't have to have all the dependencies just to clean up the indentation.
Ask HN: What is bioinformatics?
Well then it shouldn't have happened at all.
Is the deal over? Amazon lists it for $499 now.
That looks more tedious than using a tracker
Can Blender Cycles use this? Looks like there was talk about it in 2012/3, but nothing recently.
Is it really that naive to assume that banks have higher security standards than, say, shopping list apps? ;-)
I would probably hate you for not writing plain “!=-1” instead.
The DNS issue is worth in systemd's resolver because it is NOT merely a "stub resolver" - it implements a cache. From the same thread:

"The DNS specification does not require rewriting of upstream responses to filter out parts for which the queried server is not authoritative. This means that a downstream caching resolver will tend to poison its cache if it adds data from such responses that are not directly in response to the QNAME."

http://seclists.org/oss-sec/2014/q4/602

Adding entries (including additional records, which are common in DNS) without validation is just asking for a DNS poisoning attack.
Sounds like you've got a "grass-is-greener" thing going on. Everything is good where you're at, but you feel you're missing something. I've felt that way.

Go take a few interviews, and spend a few days in the Valley. Be sure to drive...at rush hour... price a few houses/apartments...

If you're anything like me - who is also in a medium-large (well, a college town just outside of) midwestern city that's highly rated for being a great place to live, with kids, wife with amazing job, etc. - interviewing and spending a little time there quickly clears up the grass-is-greener syndrome.
Everyone in this thread keeps railing on its floating point perf, which is about on par with parts like nVidia's Tesla and similarly priced... but its integer performance is why people are really buying these cards up. All GPUs are floating point monsters but integer pansies because that's what their graphics workload heritage turned them into. Xeon Phi is a Computing Monster, with crazy Integer and Floating Point perf, because its heritage was "Let's try to make a graphics card out of CPUs" and not visa versa. It's similar to buying a whole stack of x86 chips just to get to the SSE/AVX units. Only, now you don't need a whole stack of computers, you need a handful of host computers and a stack of add-on cards.

And if you think $2000 is expensive for 60 x86 cores (~$35/core) when all you care about is the SSE/AVX unit and how many vector ops you can cram through it, you're definitely not Intel's target.
"I needed to stand out, and what better way than hacking into his network?"

The fact that this crosses peoples minds really concerns me. Have we so degraded our respect for things that belong to other people that we're willing to do this as part of a publicity stunt?
> Who took care of the homeless person before?

That implies that the current "inefficient" infrastructure will still be needed after BI. That doesn't seem like a good use of resources; it just adds a massive tax burden on top of the current system.

BTW: I'm not arguing from philosophy, but from actually seeing homeless people on the streets every day. Each and every one of them seems to have mental and physical problems, and every one of them seems addicted to various substances (and incapable of taking care of their own finances).
There was a yellow version shown on Time Warp.
I did help him remove the keylogger and explained him what I did. We've known each other since kindergarden. Plus, it was a mutual challenge, a capture the flag situation.
0hh1 Solver, in Swift
> The short answer would be that the Phi might be the best choice in cases where you need to perform billions of energy efficient floating point operations on a working set small enough to fit in the cards RAM

I'm confused by this. You previously stated that memory bandwidth on the Phi is 10x as high as on the FX-9590. Based on this, I would say that the Phi would be better suited at jobs which require lots of data that doesn't fit in main memory.
Profanity-Laced Academic Paper Exposes Scam Journal
Consider, for example, the case of the woman who was arrested for leaving her 2 kids in a hot car while she went in for an interview. There was a huge outpouring of support for her, and people collected $114K for her, to help her out. What did she do with the money? Read here: http://ktla.com/2014/11/19/mom-who-received-114k-in-donation...
Nowhere in the article do you ever talk about any kind of agreed-upon challenge where anybody gave you permission to try this kind of exploitation.
And it's kindof accessible for hobbyists, here is the website of one individual who made his own setup: http://www.ian.org/Schlieren/

The most expensive component (except the camera) is the mirror. According to that website, it costs about $100 from an optics company.