skysight-inc/HackerNews huggingface dataset:
> fail to decode the document entirely [...] in no case should it crash

Note that I was using the Erlang sense of "crash"—a crash from a pattern-matching failure is the default clause of most case statements, and you want those to be bubbled up by crashing linked and supervising processes until they hit something that has generic "something went wrong; I'm going to report this to the user" code in it (like e.g. Rack does in Ruby.) You don't want to specifically be throwing, immediately catching, and then converting exceptions into 500 errors in every part of your code.

Also, I was assuming in this example that you're using a modern web framework, where the JSON decoding is handled by the framework—not by you—so the framework likely doesn't expose any configuration for something like its JSON deserialization library, which it wants you to just consider an implementation detail. So you won't get to specify anything like "maximum data size". Instead, the JSON library needs to "just work" in all cases, returning its best-effort interpretation of the wire message to you. (The parallel for HTML parsing would be libraries like Beautiful Soup.)
I've seen no indication that men would be blocked from attending this conference.
Visual Studio is affected by this; Microsoft has released patches for Visual Studio 2013, Visual Studio 2013 Update 4 and an updated Git Provider for Visual Studio 2012. Users of Visual Studio are urged to apply an update.

Brian Harry's blog has more information and links to download URLs for the updates: http://blogs.msdn.com/b/bharry/archive/2014/12/18/git-vulner...
In a more recent example, the F35 Jet is having delay and cost overrun problems. I hear that one of the reasons is that there is 3 different version of the same jet and it may have been cheaper to design 3 completely different planes oriented toward each niche.

The 3 configurations are:

A) Conventional takeoff and landing (CTOL). A normal fighter jet, intended to replace the F16.

B) Short takeoff and vertical landing (STOVL). This model essentially has a big fan in it to allow it to hover and land on aircraft carriers.

C) Similar to A, but with larger, foldable wings and a stronger tailhook for landing with a carrier arrestor cable.

Model B is intended for the Marine Corp, and C is intended for the Navy.

Now I admit that I am fairly uninformed about military hardware and design, but I think something can be concluded from the F35 program issues.
Rand Fishkin and Jerry Colonna Discuss Depression and Entrepreneurship
I think you're referring to something different.

The "request key" is what you request from Freenet, but it transformed into a "store key" (not official Freenet terminology) before the request is sent out over the network. If you have the encrypted content you only see the "store key", but the "request key" is required if you actually want to decrypt it.

This means that, to see what content you're actually storing, you'd need to go to a lot of trouble (basically a dictionary attack on the store key). Not impossible, but enough for plausible deniability.
They have videos of previous such conferences here http://blog.ycombinator.com/female-founders-conference-video.... There was a lot to learn from them. I particularly remember Diane Green's talk about communication.

Lots of high energy stuff going on there.
Should programs periodically check for critical security fixes, and then refuse to run if the current version is affected?

It seems like there are a lot of people who don't really pay attention to social media or other security alert channels, who won't have a clue about the extent of this vulnerability. I'm sure they'd update if they knew "if I clone a malicious repo, I'm toast," but there's no way to inform them except by HN/Twitter/Reddit/mailing lists.

One could argue that they get what they deserve for being uninformed, but it seems like the ethical obligation might actually be on us to develop tools that ping home and ask whether it needs to stop working until it's updated.

Actually, I'm not sure it's ethical to embed such shutdown behavior into a tool that needs to be reliable. Maybe just a scary warning message like "This version is critically vulnerable, update immediately" every time the program runs would suffice.
This is a really good idea. Too bad I seriously suck at writing fiction or I'd pick this up.
> As for the xlib stuff, I can't really write tests for that.

I do that by wrapping the C APIs into traits. I have some macros that generate both the proper implementations with ffi calls and mock implementations. Then I can write extensive tests for the high level binding's low level behavior using properly set up mocks.
Wal-Mart has B&M locations that you travel to (and if you've seen a sitcom in the last 30 years you know that "just go to New Jersey" isn't a popular solution for New Yorkers). Amazon ships the stuff to you. Now they do it in an hour, if you're in New York. That's as long as it would take to get to Walmart and back, except you can continue living your normal life instead of driving to New Jersey.

(Also, New Yorkers don't drive. So that Wal-Mart in New Jersey is closer to an hour away by transit.)
You don't even need to alias a typo - if the vulnerability allows to overwrite arbitrary files in the .git-directory, which is what it sounds like, you can just add a book that will be executed on each commit/fetch/push/etc...

So yes, this is dangerous.
http://in.relation.to/Bloggers/FirstHibernateOGMReleaseAka41...
There are ways to start companies with quite a lot less than $2,500.00.

Consider that Bank of America was at first San Francisco's Bank of Italy. A fishmonger of Italian heritage - I don't recall if he was an actual immigrant - would use what cash he could spare to lend very small amounts of money, in return for interest.

Among my own more-significant expenses are technical books, however I _could_ borrow them from colleagues, sometimes I can find them at the library. I prefer to purchase them when I can, but in principle I don't really have to pay, I could borrow the books.

Consider: would you lend me forty bucks to buy a book, or would you lend me a book?

Most people are reluctant to lend money, even to close friends or family, but have no problem lending things like books.

Web hosting is quite cheap. In my own case, I get it for free because I helped out the founder of the hosting company with his marketing when he was just starting out.

To start an online business, you don't need a whole lot more than a cheap webhost, a cheap computer, and a few books - but you do need quite a lot of labor.
The announcement includes several links to binaries. Is there one you need that's missing?
Agreed, which is why I'm interested in this service. In the past I've only used Amazon for large orders when I know I'll be around for 2 days to receive packages during the day.
> just 30 minutes away

That's 30 minutes (each way) of my time, though. No such problem with delivery.
A few years ago I was working for a west coast tech company (not bay area) and was regularly wearing long-sleeve button-down shirts (without a tie) with khaki pants.

A few coworkers said something to me, but I didn't think anything of it because (from my perspective) they didn't care about their own appearance. Then my boss told me that the company actually didn't have a dress code and I didn't need to dress like that; I assured him that I was dressed that way because I liked dressing that way. Then HR talked with me. That's when I finally took the hint.

The dress codes that most people are familiar with place a lower-bound on how you can dress. "No shoes, no shirt, no service", or "You're a groomsman, you can't show up to the wedding in a t-shirt you lunatic". The tech industry has a dress code, but it places an upper-bound on how you can dress.

My humble conspiracy theory? Upper-bound dress codes encourage social stratification. This is desired by people who are in power, but are surrounded by very clever and moderately well paid people (developers). Imagine if software developers stopped thinking of themselves as "others" and started assuming the role of respected professionals with all the social standing a respected professional typically gets.
EDIT: Op was referring to a specific song:
https://www.youtube.com/watch?v=gC4__dehkSM

I found that in ~10 seconds.
New York launches home Wi-Fi program as Internet prices soar
Glad to hear that you're a user, love the product and liked the post :)
Most decade-specific words in Billboard popular songs titles
Visual Studio: Git vulnerability with .git config
I agree food will be a problem anywhere.

I think the advice to get out of the cities stems from the fact that there are about to be tens of thousands of starving people going from house to house looking for food.

And their leaders will have guns, and it will be violent.

In the country, that can be avoided for a time - so you can at least starve in peace.
> One reason: fiscal conservatism doesn't offer anyone any advantage...

I disagree. Fiscal conservatism means that I get to keep more of my money, instead of having the government take it. That's certainly an advantage to me.

But I think you meant "it's not an advantage of one person over another", which is true. And by extension, I think you meant "therefore it doesn't help one candidate get elected over another", which I think is false. Telling people that you're going to let them keep more of their money shouldn't be a very hard sell. (Now, true, most conservative candidates don't seem to be able to articulate such a message, but I think that's because most "conservative" candidates aren't fiscal conservatives at all.)
I wish I could.

It's not just that I am still bound by my NDA, but telling anyone what the application actually did, would result in bad things happening to completely innocent people.
I keep getting

fatal: unable to access 'https://github.com/Homebrew/homebrew/': The requested URL returned error: 503
Error: Failure while executing: git pull -q origin refs/heads/master:refs/remotes/origin/master

Weird, it's the first time it's ever happened.

edit: wait, it worked after a couple of tries; maybe it's due to panicked people updating brew\git?
brew update will use `git clone`, so yeah...
I have stored 100+ megabyte files as tests and it works fine. It takes a long time to insert though. Thankfully you can queue them up using the download manager as you mention.

A pirate bay like site on freenet could provide magnet links for those that want to torrent externally and also provide files for those that want to retrieve from freenet itself.
It's been my personal observation that "flyover country" includes upstate NY, which doesn't feel materially different from my corner of SW Missouri.

But of course what really counts is where those relatives or friends are in comparison to you, and if you're alert and decisive enough to not miss "the last train out", assuming that's a possibility.
Reproducing the message is not a collision. In a collision attack, you find a message that produces the same hash as another message. You can't take the exact same message and call it a collision. ROT13 is immune to collision attacks by its nature, and the humor is in the fact that its "immunity" comes from not being a one-way hash. It's immune...but it's also practically useless for obfuscating the message, thus it doesn't protect your message at all. Thanks for taking great pains to make sure the joke got ruined.
Those animated flag gifs don't do much to contribute to their credibility.
I came across that issue and might contribute info in the way of reproducing bugs, but my setup is pretty simple: near fresh Yosemite install, one Chrome window, one Finder window, and two Emacs.app frames (one fullscreen).
https://news.ycombinator.com/item?id=8766738
The blog post on Github.com only includes links to Github for Mac binaries, not git proper. The link in the blog post to kernel.org has tarballs of source, not binaries.

Did I miss something?
The "real" reason for a policy is always more exciting. Watch:

The real reason you have to turn your phone off on a plane is so that you can't record the takeoff and landing. That way, if there's a crash, there's no evidence to dispute the airline's black box version of the story.

Pretty sick, no?
Link to the patch that fixed it: https://github.com/git/git/commit/cc2fc7c
Probably chronological - the quote comes from the Soviet Union page section on Stalin, who died in 1953. http://en.wikipedia.org/wiki/Soviet_Union#Stalin_era
The important thing when giving people primitives to work with is that they come with time and space guarantees. People are writing low-level code basically in order to be able to explicitly make that choice, rather than having the compiler make it for them.

So, #2 is just a few extra guarantees about the intrinsics of regular machine-words, with minimal overhead for the fast path (even on the slower path of e.g. a 30-bit ring on 32-bit storage, there's still an O(1) set of barrel-shifts and masks that can be used to implement that.)

A fully-general ringed arithmetic value, on the other hand, is more of an ADT. It could certainly be implemented in the same language and act like a number, but it wouldn't be useful as backing storage for other types in the way #1, #2, and #3 are. (Note that #2 is a better backing store than #1 for many use-cases, e.g. encoding IP addresses and subnet masks.)
You're right, I was confusing keep-alive with pipelining, which browsers typically don't support.
Is ‘whom you know’ the wrong way to get hired?
Please point to git binaries within the Github.com blog post. There are binaries for Github for Mac/Win, not git proper. I only found source code tarballs on Kernel.org, not binaries.
> [...]such events might be useful for women, but still would be interesting for me as a man to attend.

I think you're being petty here.

Its like when a boy owns an arsenal of toys and he can't possibly play with all of them so he inevitably casts some out, and his baby brother comes and picks one up from that pile, and suddenly THAT toy was the boys FAVOURITE toy and the boy cries and screams to his mother, and mom is like yeah, technically it’s your toy, but you have so many and look little jimmy doesn’t have any why dont you let him play with that one, but the kid keeps crying over the injustice of having his best toy taken away and so mom reasons with little jimmy, and jimmy is a kind-hearted boy so he relents the toy and the spoiled brother gets the toy back and makes a show of lathering it with the adoration befitting its special status but even though he wont admit it he never gave a shit about that toy anyway and is secretly relieved when mom and little jimmy finally go to the next room because he can now put down the toy and return to his iPad games without losing face.
Thanks for posting that.

I quite commonly experience the phenomenon that when others don't agree with me, they make up reasons that I must be wrong, completely out of the blue.

For example, I'm working on a Conway's Game of Life implementation for iOS. It's taking a long time, so some joker published a web page that lists all the other members of our site, who have already shipped Conway's Life implementations.

So I pointed out that I shipped my own Life game for the Classic Mac OS in 1997, and that it was particularly fast because it set the bit-depth of the screen to 1 (black and white, no color, no greyscale), then drew directly into the video card memory. My old website where I published its source has been available in the wayback machine this whole time.

The response? Two other people pointed out that they knew how to draw directly to the screen decades ago.

No one is willing to acknowledge that I shipped my own Life implementation fourteen years ago, long before that site even existed.
Mixpanel getting this money at this valuation has more to do with the market conditions than anything else.
“Mastering Emacs” ebook announced
I'm saying that women are much more likely to have anything said behind their backs, and of what is said being taken seriously by others. I never said you should "just take it", you're assuming stuff I didn't write.

And just because I'm a man that doesn't mean I "roll" in a certain way.
That sounds harder than the ryhme, which we were forced to learn early on.

The knuckle method seems to me to be the "simple" way to count cows--just count the legs and divide by four.
There is no VAT in the US.

Even if you mean sales tax, that's set on a state-by-state basis, and you only have to collect sales tax in a state if you have a physical presence there:

https://www.sba.gov/content/collecting-sales-tax-over-intern...
"If you are thinking about starting a startup or are in the midst of running one, we hope hearing stories from other women will inspire you to take the leap (or keep going!)."

This wording would seem to imply that the conference attendance, or at least the expected audience is restricted to women. The invitation request (https://news.ycombinator.com/ffc) doesn't explicitly state it one way or the other, but does have a field for "Gender".
This is verging on "Turner Diaries" level of prepper pandering.
How to Manage Large JMeter Scripts with JMeter Test Fragments
And that attitude is why they have much more money than you.
This quote addresses what would now be called "crony capitalism". That is, those in power or with resources using government for their own ends. For example, making it a requirement for people to buy your product, or erecting barriers to entry for your competitors. It warns of when in society it is easier and more profitable to use the system to be a parasite than it is to produce something of value.
To put it in perspective, my team in IBM Watson has already published better numbers (10.4% WER vs 13.1% WER for Baidu) on the SWB dataset. We haven't run our model on the CH part so we can't compare on the full test set. Paper here: http://www.mirlab.org/conference_papers/International_Confer....
Just so you aren't confused, there is no VAT in the US, and sales tax is set by states, not cities.

More information:

https://www.sba.gov/content/collecting-sales-tax-over-intern...
He was not talking about speed, but about up to date features and treatment of customers.
Many eBook readers will phone home about what you're reading.

It's bad enough that Amazon would know what ebooks I've purchased. The Kindle will tell Amazon what pages I've read and when I read them.

There is a damn good reason I don't even own an ebook reader.
For some extra clarification: this is the official list, as released by the General Services Administration, the part of the government that runs the registry.

Some of these -- the domains for the federal government's executive branch -- were already public. This includes the rest of the federal government (e.g. Congress, the courts), as well as all the .gov's in states, territories, counties, cities, and native tribes.

There's about 5,300 of them.
Reminds me of the time, 2 or 3 years ago, when Google announced that every page which would take more than 300ms to load and render would be downranked in the search.

Seems like we’re going backwards...
Presumably you already trust homebrew to run arbitrary code on your machine.
Yeah, I can't decide whether it's just simple escalation - if we all have bats, it's not significantly different if we all have guns - but then again, guns do amplify power much more, so attacking someone who only has a bat when you've only got bats seems much safer than attacking someone with a gun when you've also got guns.
"Statecharts in User Interfaces: Warding Off Complexity", Erik Mogensen, RESTFest 2014. https://vimeo.com/109808288
This is personal experience and speculation, but here goes any way:

I've known a few people (in the USA) who were tied to their jobs because of health issues, so they were very reluctant to switch jobs or do anything else. I can see how having medical care done through the state, instead of your employer, would make it easier for people to take some risks and to (maybe eventually) end up in a better place.

Also, people who's health takes them out of the job market generally have a hell of a time getting effective care and getting back in to the work force. I'd bet that a good public plan would get a lot of people back to work sooner and in better shape than the current US system.
The only interesting thing here is the new attack at the radio level that allows call monitoring. It sounds like it might be easier than setting up a fake tower. It still sounds like it required an active attack though so in practice the difference might be all that important.
I'm fairly confident Homebrew isn't exploiting this
I agree with this as well. But, let's take the fishmonger for example: He didn't quit his fishmonger job, and try to live off the interest from the money did he?

I believe you can absolutely start a company for cheap (you can definitely work a low-wage job and afford a startup). But that is very different from trying to live off your savings and start a company at the same time. Sure, you might get lucky and have instant-revenue that can support you, but I think you (and the business) will have a better chance of success if you're not trying to live off the profits (and can reinvest them in the company).
"Otherwise, an unsuspecting user can run git pull from an innocuous-looking-but-malicious repository and have the meta-information in her repository overwritten, or executable hooks installed by the owner of that repository she pulled from (i.e. an attacker)." [1]

You could pull down git hooks that root your box, pretty intense hack, update now!

1. http://git-blame.blogspot.com.es/2014/12/git-1856-195-205-21...
"or executable hooks installed by the owner of that repository she pulled from (i.e. an attacker)."

You could pull down git hooks that root your box, pretty intense hack, update now!
> Tech is generally a meritocracy. People can just migrate
to whatever software they life.

That and the test of the last paragraph of your comment is
proof that you're a paid shrill.

This is an unwarranted attack on the person.

I may agree with you on the content -- the ideal of the meritocratic technological society has not been achieved yet, and the field is not level. But personal attacks are not needed here, they are not useful for the discussion.
Also case insensitive file systems has other problems with git, if your team has a sensitive one. Mac comes with defaulted to insensitive and that is not good.
Make sure to get a permit for that. :'(
I wasn't clear, that was supposed to be a purely mechanical calculation of amortizing the time costs of preparing for screens and onsites over how much you want the gig, which for me always includes tailoring a resume for each company and other stuff which is basically a waste of time.

You reminded me of the 4th, newest hurdle to getting hired at a lot of places, a decent grounding in linear algebra, prob/statistics, calculus, with the odd category theory curveball question.

I was taught physics the other way, BTW, my Dad decided around 8th grade was the right time to start developing intuitions for ODE's and linear algebra, with illustrations from real life. Made absolutely no sense to me.
Apple, HTC and QualComm say you're blowing smoke:

https://news.ycombinator.com/item?id=8769816
The word "link" is used throughout the article, and its message seems to essentially be Yet, the research is unable to conclusively say that pollution causes autism as there could be other factors that were not accounted for in the study.
There does not appear to be an updated version of git for cygwin just yet.
Odd title editorializing. I would think a "Master Spy" wouldn't get caught relatively early on in his intelligence career.