skysight-inc/HackerNews huggingface dataset:
The Misfortune Cookie Vulnerability
Thanks, I should have made the connection to encoding immediately. I've found more info in <a href="http://www.theguardian.com/technology/2014/dec/02/north-kore... following Guardian article</a>:

“In the file we had a line with broken characters. Those characters didn’t render right under any encoding, except EUC-CN [Chinese] and EUC-KR [Korean] … In this case, the readme.txt file could be read fine under either EUC-CN and EUC-KR, which means the file was most likely generated from a computer set in either Chinese or Korean – or the hacker deliberately converted the file (which seems unlikely),” Karpeles said.

I should add that EUC-KR is a South Korean legacy character encoding, but the corresponding North Korean encoding (EUC-KP?) is hardly ever supported so in practice North Koreans would be likely to use EUC-KR.
And how much did he make from touring and merchandise resulting from people hearing his songs on Pandora?
What to Eat After the Apocalypse
DevOps, Mobile, and Back end engineers – Swiftype is hiring in SF
So which browser can we use instead when they start this dumb idea?
If you're in Canada, it's worth noting that when you do trade with other people's money you really need to be certified with the relevant authorities in addition to having the skills.

I interned with a hedge fund for a year early on in my career building algo trading models (circa 2002). Since then the fund has gone under and I was contacted by an investigator from the OSC (more or less our SEC) about the exact nature of my work. Thankfully no charges came of it but I learned that I did expose myself to personal liability due to the fact that I had never gained regulatory certification.

In short, don't overlook the laws in this space. They can really bite!
You are talking about the days when Apple was about to close its doors after the Copland failed experiment and NT was picking up steam against UNIX based workstations.

In 1996 it appeared NT was going to conquer the IT workstation desktops.

NeXT was also going multi-platform with OpenStep.
"It is not clear how the United States determined that Mr. Kim’s government had played a central role in the Sony attacks. "

I really don't think North Korea has the sophistication to do this.

This is perfect explanation:

http://marcrogers.org/2014/12/18/why-the-sony-hack-is-unlike...
In the long term, a company's value is usually considered to be the discounted future cash flows.

Yes, theoretically it is. However, the value (price) of something is not decided by some formula, it's decided by the market.

Think back to the real estate crash of 2007. Value was dictated by what people would pay, not by some calculation of value.
EFF in Court to Argue NSA Collection from Internet Backbone Is Unconstitutional
Show HN: TractionVC – Weekly Growth Challenges for Product-Focused-Entrepreneurs
After a couple of iterations the v1.0 of Traction.vc is now live.

Check it out here -> http://www.traction.vc

Traction.VC helps product-focused-entrepreneurs make a habit of working on growth. Many entrepreneurs randomly read something about marketing but fail at experimenting on different tactics to see which will help their startup grow.

It's very satisfying to work on a new feature, a nicer logo, a new website. Because you get immediate results. But it doesn't necessarily help your business grow.

Solution: Work on growth weekly. Traction.VC is all about forming the habit of working on growth. There are no silver bullets. However, a disciplined approach to growth will help you stumble upon the right channels that will push your business forward.

would love to have feedback/thoughts
This all seems too political to me. I suspect the blame on North Korea is really a fishing line to upset the real person's ego to hopefully get some sort of lead.

While I don't doubt North Korea's technical ability I sincerely doubt this is a real motive to attack Sony. Something screams ex-contractor to me and planting evidence to come from NK seems like a plausible avenue to avoid being caught.
Discussion: https://news.ycombinator.com/item?id=8766301
The only sane default is to return an arbitrary precision arithmetic type with an optional mode for truncation to double for performance.
Built-In Backdoor Found in Popular Chinese Android Smartphones
Currency Cloud – Transforming the Global Payments Landscape
New Startup Up&Sell.me – Fastest Way to Sell Any Downloadable Product
No, not the same person.
I'm just curious why does everyone (a lot of westerners) not like Russia?
3 tricks for adding texture to your text with CSS and SVG
I just want to point you out to a book. It is a good read, I promise.

http://www.amazon.com/Social-Engineering-The-Human-Hacking/d...

It looks like you genuinely believe that two people talking face to face would not be subjected to exploitation.

The book exactly talks about how exploitation in this context had been thriving even before Computer and Network Security became a thing.

In computer setting, an adversary still needs to do factorization to crack keys or priming the victim's computing machinery, both of which require advanced knowledge in science and technologies mind you, to do the exploits.

But for people, they come with beliefs, cultural and social biases, personal habits, and ignorance which are not too hard to discern, making human factor in systems a larger risk.
Or perhaps just a more mature Javascript?
The short answer: luck. Yes, they have created a great product and yes they did some marketing - the same things that their competitors did. Once the prerequisite hard work has been expended, there are innumerable factors that are completely beyond anyone's control that determine which products succeed or fail.
71, Carl Alsing is still working in Scotts Valley building high performance control systems.
A key part of the "product" I'm envisioning will be education (video, documents, workbooks, webinars). With our current students, we have been educating them about the financial issues in the US (macro issues like the federal debt, shift from employers bearing the risk of funding retirement to employees, taxes, rising cost of college, social security running...) and personal financial issues (credit card debt, budgeting, improving credit score).

And then we take a completely different approach to building wealth and that is to invest in rental properties. The appeal here is you leverage your money through mortgages. And investment is securitized with the physical asset.

Essentially we've set up a timeline showing our students how to get on track financially (pay off bad debt, live within their means, increase their income, increase savings, and acquire properties). We show them how to take cash flow from property 1 and add that to their savings to get property 2 and so on. And then there is a date in the future when cash flow = monthly expenses. It's a shockingly short timeframe that inspires them to implement the plan.

It's working and it's really inspirational. My challenge and frustration is scaling this. btw, i have some info on my site at www.FiRevolution.com.

So, to answer your other questions. Very different approach than other personal finance sites. And right now flying solo with a few advisors. All self funded to date.
Mostly for propaganda reasons. Russia is Designated Enemy #1, outside of the Axis of Evil.
> Tell me, what does it bring to the table compared to other window managers ?

This kind of window managers are often coupled to a programming language and the end user is expected to modify the source to their liking. For example, dwm is written in C, Xmonad in Haskell, awesome in Lua and there's even ones written in Scheme and Common Lisp. In all of these, the idea is that the source code is the configuration, and you're expected to hack on it.

Of course there's some appeal in just doing it in another programming language, even if it has been done before. A tiling window manager is a few thousand lines of code, so it's a neatly sized practice project.
4 Steps for Stadium Managers to Achieve Effective Communication
I've always found the whole prospect of algorithmic trading morally dubious. Is algorithmic trading overall a good thing? Is it something we should be encouraging? Can I do good in the world by working in algorithmic trading? Would people become algorithmic traders out of a belief that they're improving the world, and would gladly do it even if the pay was slightly lower than other software developer jobs?

I really don't know. The only reasons I've ever been marginally enticed to do it is that it looks like a fun problem and people make a lot of money off it. But it's hard to beat the job satisfaction at my current workplace. Right now I can release free software, which helps diagnosing and treating neurological diseases.
So much was got right the first time round, that I would assume we would fail whale if we tried to redo it - in the end the internet was amenable to evolution - and that is how it should proceed, from where it is now.

I know it's now in the spirit of your question - but everyone else seems to have answered those well (DNS, https, routing at AN)
If you like that kind of sci-fi I'd recommend Hōsuke Nojiri's books (the two Rocket Girls and Usurper of the Sun).
Unfortunately, companies don't create more LNG fields and fewer refineries because people on the internet understand that it's a cleaner solution. It's about supply and demand. Our choice in the cars we drive has more of a vote.
Cool.

but why no jquery?

Just asking.

As someone who ported a embedded website away from jquery, it was painful, and I've come to really appreciate it
I don't find that Westerners don't like Russia in general -- at least not the circles I run in. But the Ukraine invasion/liberation/annexation was perceived widely in the West as an aggressive and unnecessary move. So I think it is mostly Russia's recent actions that have caused the negative perception.

Here is some polling numbers that show that Russia has gained a lot of negative perception:

http://downloads.bbc.co.uk/mediacentre/country-rating-poll.p...

EDIT: I do think that Russia is viewed as having a corruption/mobster issue in the West, even before the Ukraine issue.
Phantom – The sound of the future: 3000W, zero distortion, zero noise
Rails Fundamentals: Introducing Strong Parameters
“I’m in the US – what if I just ignore the EU VAT changes?”
Honestly we should talk about “The Security Cost of No Overflow Checking” first.
Yes and it was a pain.

I learned never ever again to use interpreted languages for anything else other than shell scripting.
It's interesting reading some of the form letters in opposition. Here's an excerpt.

Regulating the Internet would be a job killer. All those who are employed as tech support, companies that make and deploy servers, routers, coax and fiber-optic cable will suffer job losses if the FCC chases billions of dollars of investments away by regulating Internet services as if they were a public utility. Every time Washington bureaucrats have grabbed massive new powers for themselves, they have created economic and human wreckage in their wake. Obamacare regulations on the healthcare system have cost millions of Americans their health insurance, and raised the cost of insurance and deductibles to millions more.

That's just an outright lie. Here's a rhetorical question. If a DDoS is classified as an attack because the client consuming server resources doesn't actually care about the resource, then what is flooding a comment board with identically wrong and manipulative letters?
Boycott all theater chains for not showing the INTERVIEW.
Three act structure with each act divided into quarters.

Though, to be honest, three acts is kinda misleading since most second acts have a big turning point in the middle. So while yeah, there's a beginning, middle, and end, that middle is really two acts.
so timid

Try out their beautiful working app: http://voog.com
Writing a window manager in Rust is interesting precisely because it's written in Rust.

I wouldn't be surprised if this homebrewed WM didn't hold up in features or performance to alternatives like xmonad, dwm, Awesome, i3, etc.

However, the linked repo is an interesting way to showcase both a relatively new technology (Rust) and the innards of WMs, which most people don't look at very often. It gives non-Rust-users a glimpse into Rust's features and capabilities, and a glimpse at how simple (150 loc + 125 lines of config) a window manager can be.

I found it insightful.
If I could pick just one of the three - great product, luck and marketing - I'd say great product trumps luck. Because without a product all that luck can get you is a winning lottery ticket. And hustling and marketing increases the probability of "luck".
Boycott all theaters chain
Personally I see them as a bullying classmate that you must face everyday and you never entirely sure how it will end.
Russia likes to be seen as aggressor and not many likes that.
As you said, NSA may have infiltrated NK computer networks, which means NSA and other organizations which had infiltrated NK computer networks can use compromised computers in NK as tools for hacking activities, hiding their real identities. Considering many other possibilities like this, it is hard to trace the real origin of the attacks.
I'm hoping that with the ballot screen gone I'll see fewer computers from technically illiterate people with with every browser choice installed and unused.
No, it's just a third world country, with limited means.

The military budget of North Korea is estimated to be around $10 billion USD. It has a million active troops, 6,600 tanks, 700 MLRS, 460 fighters, and so on.

The country is perilously poor. Many people starve. But the means are there for an operation like this, especially if sponsoring foreign groups, if the motivations allow.

And to counter the growing narrative that the NK thing came out of nowhere as a convenient excuse -- the country was very offended by this movie six months+ ago, long before the hack, to the point of threatening military retaliation if it was released. Engaging in or hiring hacking groups to put the pain to Sony seems entirely within the realm of the possible, though threatening actual terrorism is a bridge too far, and overplayed their hands if they were involved with that.

http://www.bbc.com/news/world-asia-28014069
Before Crimea did he blame outside forces for economic joy?
With some places (DE Shaw & similar), having gone to MIT or an Ivy is just about the only way to get your foot in the door if you're new to the industry.

Also, having a Ph.D. helps, and if somebody wants to go this route I would steer them towards Two Sigma over the competition.
It would be helpful to keep in mind that whatever "evidence" has been made public is probably not the full picture that the officials have.
North Korea doesn't need amazing elite hackers to pull this off. That debate precludes a simpler explanation that maybe they just paid an insider $500k to install some software and dump some files. If the FBI has found such an insider then maybe that is the evidence of NK involvement.
I think I misread you. It's certainly reasonable to say that memory safety will reduce the harm, on average, of integer overflows and that this should affect any cost/benefit calculation for implementing overflow checking. What would have been unreasonable is to imply that the safety implications of integer overflow can't matter much or are somehow out of scope because of Rust memory-safety. No matter how nice and precisely-defined the memory-safety criteria are, they're only part (an important one ofc) of what people reasonably expect in terms of safety improvements from a language which aims to be a better, saner successor to C/C++ and is evangelised as such. "Not a deathtrap like C" may be a much fuzzier standard than "memory safe per the Saraswat definition", but that doesn't change the fact that the latter is just a partial means to the former.

> This is not something we just made up.

I deliberately did not say 'made up' or 'created', but rather 'picked' meaning 'selected'. The fact that the map is pre-existing and commonly-used (and rightly so) does not alter the fact that it is not the terrain.
voting against their better interests in the name of conviction

Yes, that's called having principles.
This article itself reads like a piece of marketing to me.
Seems like a nifty service.

The github link seems to be only 2 documents, no JS file?
https://github.com/quaderno/quaderno.js

PS: Also found this "NO LOG TERM CONTRACTS", guess it's supposed to be "NO LONG TERM CONTRACTS".
Redfin Identifies the Hottest Homes of 2014
I wasn't familiar with the term, but that looks terrifying from a net neutrality standpoint. Deep packet inspection wouldn't even be needed to sort traffic, no?

Also, making the network content-aware to a greater degree gives me nightmares of bloated XML / WS-I style schemas making their way into core specs.

That said, your points are a definite need with the size of the modern network (and the order of magnitude difference in traffic spikes). Imho, it'd be great to have a more formalized caching system, whereby the server could tag content as recommended-cache (core page content) or not (comment threads) & invalidate asynchronously if it became necessary.

I'd be interested to see what we could do with SSDs / future technology with feasible latencies to assemble such a system.

Hypothetically, there's no reason it couldn't be incentivized via a peering-style agreement: e.g. I cached and served X amount of traffic that you didn't have to, therefore you'll pay me Y% of the cost of you serving that traffic yourself (where Y < 100% & it still makes sense for both parties).
To be honest Putin is correct, it are outside factors that are contributing to the decline. For example the US has drastically increased oil production the last few years[1] in order to drop oil prices. Around the end of 2011 oil production really went up, and tensions began to form between the countries. My guess is the US saw the approaching re-election[2] of Putin as a bad move and decided to take action.

Of course I'm not pointing fingers or blaming any side, it's just strange to see history is repeating itself all over again. The news about the NASA budget increase was no surprise for me anyway...

[1] http://www.eia.gov/dnav/pet/hist/LeafHandler.ashx?n=PET&s=MC...
[2] http://en.wikipedia.org/wiki/Russia–United_States_relations#...
That was the 1995 Cringley interview. About 54 minutes in. "You don't really want to hear about NeXT, do you?" was the exact statement. And he claims that innovation in the computer industry is in software within seconds.

I think Jobs' response was more about disarming the perceived courtesy. While polite to ask Jobs about what he was doing with NeXT in 1995, the highlight of his career (and general interest) would be with Apple and to a lesser degree, Pixar.

Kind of like talking to a rock legend about their latest album, when most people care about their breakout period.
Firstly jQuery would not help a lot here, as wysiwygs are largely about fixing browser inconsistencies and bugs. You'd like to fix those as close to the source as possible. The other quite big argument is that events triggered in jQuery cannot be seen by other modules correctly. Even not by another jQuery instance. In CMS-es on the other hand you can easily be dealing with many jQuery instances. One on the site itself and another for administration components. Vanilla.js makes things on this scale smaller too.
Why Most VCs Will Fund ‘The Next Snapchat’ Before They Fund ‘The Next Google’
Google Drive now supports ODF
Wow, that all sounds like an absolute nightmare!

Have you taken a look at broccoli[1]? We ran across it after going the Fileset route, but were refreshed to see that it also does a kind of Fileset thing (they call them "trees")[2]. I don't know much more about it other than that it's what's underneath ember-cli, and the Ember people do a lot of good work in tools realm. Anyway, it could be a way for you to realize some of the niceties of the boot approach over in JS-land.

1. https://github.com/broccolijs/broccoli

2. http://www.solitr.com/blog/2014/02/broccoli-first-release/
- the URL notation <proto>://<bla> should loose the //

- changing the IP address or having other temporary interruptions (e.g. train in tunnel) should not force me to re-open all my SSH sessions

I have no idea what that means from a technical POV though.
A four year old's accepted Linux kernel patch
I can see close to 10x productivity gains depending on my work environment. If I have three meetings spaced throughout the day, a ton of quick interruptions, and I am trying to learn something new, forget it. If I get to focus on that one thing, then I can be pretty productive.

I also think that the 10x thing is more to do over the longer term (rather than "look at what I bashed out in 2 hours"). I probably don't code as quickly as I used to, but I am a lot more thorough, and having made plenty of crappy mistakes designing my code in the past, I am in a far better position to know what will make my code robust, and maintainable time a month or two down the line.
The audiobook was fantastic. Great reader.
The problem is that she is not a founder but behaves like one.
My issue with tiling WMs is that there just isn't enough room. I use vim splits in a full-screen terminal but can only fit 2 columns comfortably. I can pull off 3 but then I can't see the full 80 characters in each.
IMO the greatest change would not be in tcp/ip and below, but in http and up. If you had no knowledge of the current web, and I would pitch you html, css and js, you'd probably think it was a bad idea. Why would you use interpreted scripts over binaries if speed is mission critical. First you encapsulate your data in a markup language only to be parsed/converted back by the receiver, ridiculous. It also lacks semantics to make dynamic web applications readable for machines, not to mention the XSS vulnerability in the markup language that would make server side application unnecessarily complex. What a weak proposal, would never work.
Note that you can also force the admin password for any System Preferences GUI changes with a single click. I'm not sure whether the default for non-admin accounts is this, though.
The aim was to share what has worked for Pipedrive. Of course, I hoped to show myself and Pipedrive in good light in the process - sorry if the balance wasn't right for you there.
Ask HN: How Can I Improve the Mobile View of My Website?
!) Sessionless web
2) BaseN (quantum)
3) <>Internet
Splitting the address space into "client" and "server" addresses, supposedly for some security benefit? Come on, you can't be serious about that?!

I have only skimmed the paper, but it seems to me to be a collection of bad ideas, and I can't really be bothered to read all 8 pages. If you think there is actually something useful in there, would you mind condensing that into one paragraph?
ssh should handle temporary interruptions today but for changing ip addresses, check out mosh! https://mosh.mit.edu/
Well, depending on the type of NAT, isn't the end effect for certain variants that non-communicating services on local ports are rendered unaddressable from the other side?

I believe that's what GP was referring to.

(Disclaimer: can't remember which variant of cone/full this is categorized as -- I thought there was a really useful "Current state of NAT in practice" blog post that was linked a few months ago)
Bingo - propaganda. I'm sure it's propaganda inside Russia that westerners, especially Americans, don't like Russia.
What I learned about freelancing by getting a haircut
Show HN: Dynamic graph connectivity data structure