skysight-inc/HackerNews huggingface dataset:
Sorry man. Obviously you don't understand how canaries are supposed to work, otherwise you wouldn't have posted in this thread to begin with.

I used NSL as a generic term. I'm not american either, doesn't change anything.

But seriously please stop posting. You're doing more harm than you help.
You can't know IF something happened. Posting a public statement that nothing happened just puts the people that might know under more pressure. There is a good reason you can't update the canary yourself. Because if you could, it wouldn' work.

I cannot take your company serious that way.

Next time send the SMS without any public statement please.
Not missing the canary when you were served an NSL.
Online, Games, silkroad, sbot, mbot, phbot, mod
Just recently I had a chance to visit the Computer History Museum out in Santa Clara. It was amazing to me to see so much of my childhood and so many areas of the technology I grew up with sitting behind glass. I really didn't get very heavy into computing till early 90s, but when you step back and realize the progress from even that period until now, it is unimaginable. I truly think those of us who grew up during the computing explosions of the 80s/90s owe a great deal to that time period as it really seemed to breed a huge hacker/tinkerer type of culture where nothing was unexploreable or off limits. It feels nowadays so much is spoonfed, there just isn't that same opportunity. Or maybe I'm just getting old and crotchety like the PDP/mainframe folks who walked before us??
Actually, it's quite different. Pacemakers are vital to minute by minute survival. Insulin pumps are convenient for long-term survival. If an insulin pump quits working, it's inconvenient, but you notice it in a few hours after a blood test and compensate. If an insulin pump mistakenly gives too much insulin, you die within an hour.
It depends on a person. For me, the weird effect you had for the first 5 minutes never subsided, and I disliked it all the way till the very end. I felt like it should be out of sync with sound, because everyone moved in such an unnatural way,but it never was, no matter how hard I looked.
Yeah, I was expecting some secret magic and it was just a basic linked-list like was used to weed out incoming freshman at my university who couldn't understand pointers.
What you have to think about is the force of the hit, the friction and inertia of the block and the material properties of wood and metal. This would let you calculate the impulse of the hit, which should let you work out if the block will slide out before expanding much vertically as the bullet trashes it.
Show HN: Cvesync – Synchronizing new CVEs to issue management system
That was also my impression. One of my first thoughts was "They may as well have just called it Libel".

Personally, I think it is a pretty stupid name given either interpretation. Slur does not denote reliability of information.
Ask HN: Optimising conversion rates in ecommerce?
Hi guys, I'm in the process of launching a small, niche ecommerce website. I'm currently finalising the content and design.

What 'quick and dirty' tips do you know about (1) ecommerce design and (2) website content to optimise your conversion rate?

Alternatively, you might know a particular good website or physical book?
Just a fast hobby project for the holidays. The motivation being following:

Accidentally disregarding known information-security vulnerabilities and exposures may lead to dire consequences. Tracking CVEs reliably requires great amount of work. Cvesync assists in previous by synchronizing new CVEs to an issue management system. After that the workflow included within issue management system can assist in the analysis, mitigation, and patching.
Watsi! - https://watsi.org/
I have lost count of how many articles like this that I have read.
Indeed, it is the medallion holders -- who miss their extremely safe investment that used to return 7%+ (NYC medallions did significantly better than the 7% average) for years on end... it was a great place to sink a lot of money, very safely, protected by a government monopoly.

For a few decades medallion holders won, taxi drivers and taxi riders lost. Competition in a market that has been free of it for a long time will always be extremely disruptive.
I like that story. There's something of a koan about it.
I'm pretty tired of sensationalist NSA stories here on HN, as well, but I think you're really wrong here.

First of all, it is a factual post, nothing sensationalist.

Second, it is obviously on topic (warrant canaries and their failure modes have been discussed here several times, and usually very civilly).

Third, just because "some guy" tells you "hey, everything is fine" doesn't make it true. You just declared that you're satisfied with the explanation, which I can understand, but demoting the story means that you don't believe that someone can rationally think otherwise. That's unfair, IMO.

Fourth, if you're posting a warrant canary and fail to update it, you deserve the suspicion and discussion. That's kind of the whole point. So: working as designed. :-)
so it's a preallocation technique, a little like an object pool
With so much skepticism in this thread I am inclined to bet on their success :) I am also very skeptical...but ideas like this rarely get any love until it's actively disrupting.

For what it's worth, the potential for the internet to even out the knowledge gap in the business world has barely grazed the surface of where it's headed.

I am not talking about getting cokes recipe but knowing the cost basis of vendors so they can't rip you off. Every industry will eventually have a winner that decided to be completely upfront and transparent accept smaller but healthy margins and eliminate the fear consumers have of looking foolish by getting a worse deal than their brother in law.
I have goosebumps reading this. Thank you so much for sharing. This is meaning.
I've actually witnessed what the parent refers to, here in silicon valley.
When you read this sort of document, keep a few things in mind that don't normally come across well from non technical authors. There is no such thing as "blockchain technology", that is, you can't separate the block chain from Bitcoin without making it hopelessly vulnerable to attack. The functionality and security of the system relies on the premise that miners are only mining due to the financial reward. If you don't a reward you don't have miners, you have a highly inefficient way of storing transactional data. As such, concepts that claim to take Bitcoin and turn it into Uber, Craigslist, eBay, messaging, twitter, video distribution, file storage are all complete nonsense spewed out by an author with little or no concept of the functioning of the network.

If anybody is claiming to take "block chain technology" and cram it into another system to make it decentralised, you ought to be showing them the door.

> Ripple disputes that they are affected, stating “All is fine and well with the Ripple protocol.

What Ripple/Stellar (same thing, different name) is a system which absolutely can not come to consensus under normal operational conditions. To solve this they have made the system entirely centralised, which isn't a problem for them but is for anybody who believes it to be decentralised. When you read things about Ripple know that there's two flavours: "Ripple", which is the original concept, and OpenCoin's "Ripple", which has a different technical underpinning. A lot of the early praise you'll see for Ripple was for the pre-OpenCoin version, which wasn't so heavily flawed as the one known today is.

I don't quite get why it's even mentioned in the parent article, it doesn't even have a block chain to begin with.
Right. He has no clue on how the warrant canary setup works normally.

http://en.wikipedia.org/wiki/Warrant_canary

"A warrant canary may be posted by the provider to inform users of dates that they have not been served a secret subpoena. If the canary has not been updated in the time period specified by the host, users are to assume that the host has been served with such a subpoena."
They're only going to get GCed if there aren't any references to them (like everything else) - so the comparison you're talking about is impossible. If you can still compare the symbol to something, it hasn't been GCed...
One of the most exciting things about Imogen Heap's music is that her songs tend to be repetitive enough to allow our brains to grasp the pattern, and just as we had done so, they take a left toin at Albacoikey and do something completely different.

Imogen Heap is a fucking genius.
A system configuration tool needs to parse configuration files in a modern format? Shocking.

The Only True Unix way is to invent an ad hoc configuration format with arbitrary rules about line breaks, tabulators and separator characters, incomplete Unicode support and confusing issues around whitespace escaping.
Most of the time when an author uses an analogy to help explain something to do with computers, the analogy wastes more time and causes more confusion IMHO than it is worth.
Generating shell scripts from Haskell using a shell monad
Yes - dang, plesae put that discussion back up where it belongs.
6 Unique Methods to Become the Happiest Person on Earth
Previously, on HN: https://news.ycombinator.com/item?id=8712261
Bon Nadal!
Happy Holidays! Here to the many more successful years to come!
Engage Spark - http://www.engagespark.com/

Started by a serial entrepreneur from Boston, right now they're building tools to help NGOs reach people in abject poverty, and they have some really big ideas for the future.

They're based in the Philippines and actually are currently looking for developers to come over on 6-12 month fellowships to experience life there and contribute to the core product. If anyone is interested, I can link you to the relevant posting.

(not affiliated, just think what they're doing is awesome)
Sometimes, a wall is a good thing. Here in Ukraine we are looking forward for a wall to be erected between us and Russia. The sooner the better, the stronger the better. Some day democratic transformations will reach Russia too and that wall will be gladly torn down, but I seriously doubt that it will happen within the next 50 years.
I didn't realize she had a book on the subject (although of course now I see that it's mentioned in her byline). Thanks for calling my attention to it.
Don't forget that the config format should also evolve until it is Turing complete, creating a crappy scripting language, instead of:

a) separating configuration values from code

b) embedding an established interpreter
happy xmas and new year !
It's funny how this technique looks like something coming from a newbie programmer. This reminds me parallel areas. Looks like done by a profane, but hey, it's actually cache-efficient these days.
Or as a list comprehension if that's your thing:

"".join([chr(x + 32) for x in [45,69,82,82,89,0,35,72,82,73,83,84,77,65,83,1]])
I think this excerpt is representative of the content that woah (reasonably, in my estimation) found xenophobic:

"The author from Ukraine of all places probably wants soviet like discipline and work-ethic for USSR salaries? Yeah, ain't gonna happen comrade."
No, it's not. Repetition has been with music since the cavemen.

Stutter edit is just a particular technique in working with samples, and not even that important in itself.
Your contribution would be very welcome here and upvoted, if you kept it factual (your points #1 and #2 are interesting and fine; your speculation that the author heard this elsewhere is almost okay, if you had elaborated.)

But in your last two paragraphs you switch to using the language of trolls ('disgusting example', 'stupid', 'you deserve each other'). no need - you went from being an obvious upvote to an obvious downvote and probably risk being hellbanned. (Where you see your contributions but nobody else does - then nobody can see you no matter how good your points are.)

see commenting guidelines: https://news.ycombinator.com/newsguidelines.html

I hope you will read that and be a positively contributing part of this community.
It's generally considered unsound because it relies on the labour theory of value -- that "true" value comes from the labour expended during creation of a good.

That was the state-of-the-art in classical economics when Marx branched from it. And his argument flows from it.

But the LTV breeds paradoxes. That's why, when the concept of subjective value was introduced, economics left LTV behind.

A thing is only valued according to what it is exchanged for.

So a single good actually has different values, at different points in time and space. The value of the labourer's efforts are a distinct exchange from the value of the good to the manufacturer, which is distinct again from the value when sold to the wholesaler, distinct from the value at the retailer, distinct from the retailer to the consumer, distinct again the value between the buyer and the buyer's son who inherited it, distinct again to the value at a lawn sale, distinct again to the value at a swap meet, distinct again to the value at a recycling centre ...

There was no "real" or "true" value to be expropriated here, so the Marxist critique basically falls to pieces. It continues to be attractive because it makes sense to people who are unaware of more modern economics, because it predicts cyclical behaviour in capitalist economies and because it finishes with some hand-wavy eschatological futurism that sounds really pleasant.
You're right, but I suspect that "culture fit" is a lot easier to find than "professionalism", especially if you're ignoring older candidates.
Bitcoin in it current form will (most likely) never replace traditional currencies because it is either to easy to attack or prohibitively expensive. Right now the Bitcoin network consists of mining hardware worth 100 million Dollars and consumes electricity worth 219 million Dollars per year [1]. While 100 million Dollars is not nothing it would still be affordable by most states and even large companies or rich individuals to effectively shut down the Bitcoin network by gaining a large share or even the majority of the network hash rate.

If Bitcoin would gain widespread adoption and see transaction worth billions of Dollars every day, it could easily become a worthwhile attack target even at the mentioned attack costs. The only protection would be to use a lot more mining hardware worth billions of Dollars to make an attack to expensive but this in turn would also raise the energy consumption proportionally and in the end the costs per transaction. I think that in this regard Bitcoin is fundamentally flawed because - up to some limit - you want the transaction volume protected by a proportional amount of mining hardware causing proportional energy and transaction costs which then imposes a lower bound on the costs per transaction.

[1] https://news.ycombinator.com/item?id=8782877
Seek well?
❏Graphic Showing Visual Difference Between Affiliate Links
Hmmm, just browsing the diff and spotted something odd to me : is that pretty typical code style to write: for (;;) ?
Why not while (true)?
OkHI is funded, has a great team and is rolling in Kenya:

http://www.okhi.com/

Their mission is to give everybody in the world an address. Something that people in the West take for granted, but isn't available for most of the globe's citizens. This is also a major opportunity business-wise of course and if I could invest, I would.
Merry Xmas to all of you! It's been a pleasure to read and be influenced by great people and minds. Love to Computer Science!
Santa Claus occupies a strange place in Christian belief
Is a warrant canary even legal? If it isn't, what's the point of having them?

From http://en.wikipedia.org/wiki/Warrant_canary

The US security researcher Moxie Marlinspike states that "every lawyer we've spoken to has confirmed that [a warrant canary] would not work" for the TextSecure server.

Direct link: https://github.com/WhisperSystems/whispersystems.org/issues/...
Now would be a good time to read up on canaries or quit your job. Thanks!
I was at microsoft from 2008-2011 and definitely saw some C++ in the kernel, even one driver using operator new for its allocations which I thought was a little nuts at the time. I also personally introduced some user mode .c files, it was just my preference. I don't think there's much rhyme or reason to which is used, although MS does lean very heavily towards C++ over C, seems like more and more as time goes on.

As for this directory tree... I found it creepy, like maybe source was leaked. The only inaccuracies I found relative to my memory of parts that I worked on was (1) I don't think they have done well tracking files that are part of static libraries and (2) what I presume are new files introduced by folks who came after me.
I have no doubt that the author has experienced these issues and also agree with him on some points. However here's where the error lies - drawing conclusion from your personal experience and extrapolating it to the entire sector worth perhaps 100 billion dollars and predicting it's impending doom. That's just not how reality works. There will be dozens if not hundreds of examples contrary to your experience.

There may be declines, there will changes, restructuring, recalibration, pains, growth etc. Life and business will go on albeit with changes. A broad vision always helps keeping things in perspective in drawing such conclusions.
If there was a genocidal nightmare in America, the German version was much more explicitly ... distilled. Various Midwestern doctor-phrenologists wrote treatises on whether or not freed blacks-former slaves-were human; Der Paperhanger and others read this tripe. Science!

The American version was also very slow-motion and not all that universal. If you take the tack of "We Shall Remain", that part of Manifest Destiny looks cast around the time of King Phillip's War. Throw in Jackson's denial of Worcester v. Georgia...

Various figures treated the Amerind at least as distinctly human, just ... unfortunately placed. General George Crook seems to be one of the more sympathetic. I'm also biased by Daniel Goldhagen's work in what he calls "eliminationism" and it's not clear that the... management of the Amerind qualifies, by his own words. IMO, Goldhagen clarifies many of the touchy rough edges of "genocide" in an attempt to make it distinct from plain old warfare.
Matternet - drone delivery network for small packages like medicine in the developing world where travel infrastructure may not exist.

http://matternet.us
Well, I wouldn't say that Heroku does that out of generosity, but their free tier is pure gold.
Bitcoin is a nice tech, but all I see is libertarians and other fed haters using its hype to bolster a political agenda, like the internet could change the economy or something like that.

The blockchain could be used for many other things though that could be game changing, like a publicly distributed database with trusted data. but I don't think many really are able to understand how it really works, and I don't users would really trust it.
HOW INFOR DATASTREAM WORKS
Alex Ionescu works for Microsoft ^H^H^H^H^H edit: actually my memory might be wrong, seems he was only there for an internship. Here's his linked in.
https://www.linkedin.com/in/aionescu

This is not a file dump, but a file directory listing where he reproduces something Mark Russinovich did a while ago.

See also his tweet here:

https://twitter.com/aionescu/status/547322576947523586

quote:
I've built an entire mapping of the Windows 10 Source Tree, similar to what @markrussinovich did back in the days
The cost of securing the network doesn't really mirror the transaction volume. The effort is the same irrespective of the number of transactions in a block.

It's actually a lot cheaper to attack the network than you are stating, almost all mining uses Stratum which has been successfully redirected using BGP route hijacking in the past. It has no methods of authentication and does no way of integrity checking what it is mining against. A simple "mistake" in routing could have all of a countries hash power redirected to a malicious actor. You don't need power, datacenter or miners, a $5 wrench applied to the right head would do the trick just fine.
As some people here have already commented, the trick to effective outsourcing is building solid personal relationships. I have worked with people in India, Vietnam, Russia, China, Ukraine, and Hungary. In most cases I keep track of people and share life events long after work is over (or between projects).
First off I have no standing here, and I am nobody. I am a customer of Silent Circle though. (or so I claim)

I am sure that StavrosK is well known by the community and it is my fault that I dont know his connection with SilentCircle. His profile points to stavros at stochastic dot io.

But more importantly HackerNews is not a very secure platform.

We have no real way of knowing StavrosK is StavrosK, or if ThinkBeat is the same ThinkBeat as last week. Using Hackernews or any social media as a platform to "override" a warrant canary is ill advised. In fact I think it makes matters worse.

Properly signed messages through the announced channel is the way to go.
C++ code in kernel typically wouldn't fly for the new stuff, but I bet there were some legacy pieces, sure. But even then nothrow would be forced on new and prefast/prefix warnings around failed allocations would have to be handled.
If not innovate, at least keep up. Frameworks like Marionette don't instill much more confidence since they're based off a stagnated library.
> the potentially extraordinary Ethereum project, built to "decentralize the web" with its blockchain, which recently raised $15 million (in bitcoin, of course) by pre-selling its cryptocurrency prior to next year’s launch

I've still not met anybody who can tell me what Ethereum is without using the words "turing complete" (which it's not due the halting problem, just like Bitcoin). Most of the information you can get from secondary sources seems to just mirror Bitcoin (you can do this awesome thing, but you'll need an oracle to do it..).
No, you have no clue on what I'm talking about. How many people's data will get compromised if someone forgets to update a canary? Zero. The only way for a canary to fail catastrophically is for the owner to update it after the servers have been compromised, thus revealing sensitive data.

I'm not talking about trust in a company or how this makes one look. I'm talking about protecting people's data, and failing to update a canary doesn't compromise that.
You're right, I was being kind of an asshole. However, I think the OP's frustrations may have more to do with his high opinion of himself than he thinks.
It is (for plain C). For while (true) you'd need <stdbool.h>. As for “for (;;)” vs “while (1)” I'd say the former is still more common.
There was hype about another language out of MIT some years before those.

Not saying it's not possible, just that there's a lot of hype...
Richard Branson Is a Mean Old Man (Top 2015 LinkedIn Revelations)
I think you meant to say the computer history Museum in Mountain View.
Some technology and Internet souls, I want to see on Quora