skysight-inc/HackerNews huggingface dataset:
We use Zendesk at work, and when I saw articles with Zenpayroll in it, I honestly thought it was associated with Zendesk. I'm not sure if that's enough of a bar to allow a lawsuit though, but it is a bit confusing, especially since they both deal with back office SaaS.
Actually, NTP has (limited) support for authentication and encryption. I would agree it's pretty lame though.
You drag the world into one tiny little war based on an entirely fictitious pretense just to satisfy a family grudge and all of a sudden people no longer trust your judgement as a nation...
Rails 4.2 does NOT work with JRuby.

There are pending issues on activerecord-jdbc: https://github.com/jruby/activerecord-jdbc-adapter/issues/59...
Emit a single photon at a piece of glass angled at 45 degrees with two detectors, one behind the glass, the other at 90 degrees to the emitter. Which detector is the photon going to trigger?
Really? Articles from early 2014 say 4 plants are banned, while Ranbaxy's website boasts 21 manufacturing locations.

Sun Pharma, which is buying (or bought?) Ranbaxy, recently got a plant ban for the same types of issues. (They delete test info if it isn't in their favour, and have terrible hygiene at the labs.) It's obviously endemic. And Sun quickly noted that the ban only affects 1% of their revenue.

It seems unbelievable that this deep level of corruption is exposed, and the FDA does limited bans and recalls. Instead of, say, completely banning the company and high-level individuals involved, until a complete end-to-end audit is completed. It's simply counterfactual to think these limited bans are accomplishing anything, or that a company is going to utterly and completely change the way they conduct themselves from individual techs all the way up to the board.

The Fortune article says none of the FDA inspectors would ever personally buy drugs from Ranbaxy, ban or not.
Congrats!! I'd like to upgrade Rails 4.2 from 4.2.0.rc3, thanks!
Because any cryptographic implementation worth its salt wouldn't be using even second resolution time, so what your watch says is irrelevant. Also, if I cracked an NTP feed, I'd not use it to know what the server's clock is set to so much as to manipulate the server's clock to all kinds of wonderful effect.
This article is freaking awesome. I do a bit of front end engineering and I just had to print it out. Looking forward to seeing the second part!
Many of these are probably running the Linux kernel, which recently had some security updates so the restarts might be related to that.
> From a legal perspective I will say this is a first

Its not. The US has responded to economic attacks against private US interest in many ways, including, e.g., CIA-backed paramilitary invasions to topple the regime (Guatemala 1954.)

I suspect that any "proportionate response" by the Obama administration to the SPE hack will be minor by comparison.
The distance between Chicago and STL or Chicago and Indy is lower than the distance between SF and LA, which is about the same as the distance between Chicago and MSP. Lines of blue? The route between Chicago and MSP would be fed by MKE and Madison. I literally have no idea what this map has to say about rail or how it supports your argument.

Even though you have declared the preceding comment your last on the thread, I will do you the courtesy of replying if you choose to reply to this comment.
I think ActiveJob is a great thing, a real step forward to have a Rails-endorsed API for this others can hook into on both sides. Awesome.

But am I the only one who gets a sort of pit in their stomach every time they hear about a new Rails version? So many things to upgrade, so many dependencies that might break, and then Rails 5 coming in less than 12 months when I get to do it again, I have to admit the Rails treadmill is exhausting me.
Oh yeah, I forgot about VT. Reminds me of TVPaint, but NewTek rebranding of it wasn't for Amiga (its original platform). Fun times.
> The much bigger issue is with hardware that doesn't have a local clock/battery.

Ummm, no. NTP normally runs on machines that have a local clock/battery, but which need an established network clock anyway.

> Critical initialization code should probably compare uptime with current epoch time if it needs a random seed for a long-use token.

Using time as a random seed is probably a mistake in the first place. You could perhaps try to add entropy from a clock, but you'd want another source of entropy. Generally crypto code needs network clocks for other things (think of Kerberos ticket expiration).
thanks for a thoughtful response. your analysis is correct. but, given that the article convinced me of nothing, further posing the question "does gender really matter" seems fair as well.

i thought my intent was clear when i explained "i'm not saying their conclusion is incorrect, i'm just confused by how they got there." i didn't intend to disagree with their conclusion- i was simply drawing another conclusion from their data.
Agree that Rust is not a magical fix-all solution. Rust ensures memory safety and prevents data-races but there are still a whole universe of programming-error-induced vulnerabilities that Rust will happily compile and run.

Don't get me wrong, using a more restrictive language will help but it's not a fully-baked solution. We need more third-party tools to help us automatically verify the correctness of our programs. It shouldn't stop at compilers.
Synchronized network clocks are pretty important for a lot of secure distributed computing. If you aren't doing that, maybe you can get away without it.
Ah, didn't see this comment before I commented above.

Agree that the "other"-other choice should be "come to whatever conclusion but not publish findings."
LuaJIT Language Toolkit
Sony is a private business. This is their problem, not the US government's.

However, an initiative to improve our network and utility infrastructure would be a good idea.
I thought it was interesting how much the FBI wanted to paint this as a natural and normal part of their job. If I'm dumb enough to leave my computer vulnerable to the world and someone steals my credit card data, is the FBI going to come help me investigate too?
"Because Elon Musk" isn't a real argument, but as this thread shows, it is routinely mistaken for one.
> "Actually I've never heard of a hidden service that has enormous social value"

You make it sound like you've actually looked. Perhaps you've spoken to some Ukrainians, or protesters in Turkey or Honk Kong, and they've assured you they have little use for "hidden services"?
- Finished a software engineer in product security internship at Twitter.

- Ran a security class [0] in Greece.

- Presented my master thesis on decentralized transaction identity and trust [1] for my Electrical and Computer Engineering degree, but didn't complete the degree yet.

- Talked about BREACH [2] at the SFHMMY [3] and FOSSCOMM [4] conferences.

- Did a talk about computer security at a local community high school.

- Attended FOSDEM [5]

- Invented an anonymous decentralized marketplace system [6] and joined the OpenBazaar [7] team as a core developer.

- Traveled to the Turkey (Istanbul), Greece (Alexandroupolis, Ioannina, Athens, Ikaria, Thessaloniki, Lamia, Corfu, Drama, Komotini), Austria (Salzburg, Vienna), UK (London), Belgium (Brussels).

- Hiked through the Vikos Gorge, the Astraka Refuge and Drakolimni in Greece. Sailed in Preveza and in the Saronic Gulf in Greece [8]. Snowboarded in Zell am See in Austria.

- Tried two different interesting mind-altering chemical substances.

- Spent quite a long and nice time with friends, family, and lovers often doing nothing at all with them.

- Bungee jumped for the second time in my life, this time in Corinth and double the height (78m) of my previous jump.

- Got hired as a full-time software engineer at Google.

- Moved from San Francisco, US to Zurich, Switzerland.

- Started my private pilot license.

- Taught math, physics, programming, algorithms, web
development, and security to many students privately for free.

- Donated more money than any other year in my life to charity.

- Started learning guitar.

- Lived in a share-house for the first time.

- Learned many things about security and software engineering, realized I'm a noob in so many things and fields and I want to improve a lot!

[0] http://security-class.gr/

[1] https://gist.github.com/dionyziz/e3b296861175e0ebea4b

[2] http://breachattack.com/

[3] http://www.sfhmmy.gr/

[4] http://lamia.fosscomm.gr/

[5] https://fosdem.org/2014/

[6] https://mailman.stanford.edu/pipermail/liberationtech/2014-M...

[7] https://openbazaar.org/

[8] https://mapsengine.google.com/map/viewer?hl=en&authuser=0&mi...
Regular employment.
I agree that they are vastly inflating the utility of Tor for people in repressive regimes given how easy it is to block Tor at an ISP level (e.g. Tor is completely blocked in China).
Nixon may be up for a re-assessment... but not because of Watergate. If anything, what (partially) redeems Nixon is his foreign policy accomplishments. He wound down the Vietnam War and he successfully pursued a rapprochement with China that served to split the PRC/Soviet Union alliance. Both were important things that needed to be done, and arguably, Nixon was one of the few American politicians who could do those things without instantly being accused of being a communist sympathizer.

But in terms of domestic policy, Nixon was a disaster. He served over the worst of the economic "malaise" that would be later characterized as "stagflation". He started the "war on drugs", and for that reason he is in no small part responsible for the deaths and incarceration of millions of poor, minority men. His attitudes on civil liberties and legitimate dissent continue to infect the military and intelligence agencies, who, to this day, see their job as protecting the American state from the American people. It was under Nixon that the Executive branch began to see itself as superior to the Legislative and Judicial branches. This is what people were referring to when they said that Nixon began the tradition of the "imperial" presidency. While blame can be laid at the feet of Nixon's successors for not reversing the harms that Nixon did, the blame for setting a bad precedent rests squarely on Nixon's shoulders. No amount of historical revision can or should erase that.
Usually if I have a production project I avoid to step out through major releases.

As you have seen they do bug fixes for previous stable releases, which is awesome and IIRC the security one go even deeper to the tree.

No one force us to upgrade, but I do love upgrades, usually (if well done like this one) are full of things that may help our coding life and speed performances? Are always well welcome!
In order for the attack to succeed Eve needs to be able to MITM every configured ntp server association and do so before the daemon starts up.

FYI Stephen Röttger is also the same guy who is a co-author of the two IETF proposals for the successor to autokey; Network Time Security[1] and Crypto Message Syntax for NTS[2].

[1]: https://tools.ietf.org/html/draft-ietf-ntp-network-time-secu...

[2]: https://tools.ietf.org/html/draft-ietf-ntp-cms-for-nts-messa...
Ask HN: How many of you are remote workers?
and If so, what companies do you work for? Why do you do it and how should I structure my resume to be attractive as a remote worker.
I'm just waiting on Delayed Job at this point :)
No, conservatives simply don't like their agenda. Obama and the Democrats are taking the country in a direction we don't like, and therefore we oppose them. Is it that hard to understand?
ah, point taken. i didn't think too hard about this apparently. if they had a host serving a list of trusted DAs, that host would be just as valuable a target.
For winter use, I have a somewhat unusual take but that might give you a product that's clearly distinct from competition:

I don't wear knickers or long tights with chamois built in; I almost always use chamois-less tights over regular shorts. (That lets me mix & match rather than having pricy gear that I only use a few months of the year.)

Lately I've been using the liners from MTB shorts which have thinner fabric so the combo is less bulky, but they rarely have very good chamois.

So my suggestion would be to make liner shorts with a very-high-quality chamois that go well under tights or paired with MTB "baggy" outer shorts. Great for epic MTB rides too!
Especially considering how complex some of the history is with these topics, particularly the Samurai's role in Japanese society, both good and bad, throughout history.

The other really basic, self-centred business concern here is do you ever want to expand into China? Apart from the dis-respect, turning up with a heavy Japanese influence all over your product isn't going to win you any hearts in a lot of regions in China. "Zen at War" and a few other books are a good insight into things like the Nanking Massacre and Buddhism's role in training the more extreme Japanese forces (Kamikaze pilots and etc.).

At a fundamental level, it just all feels a bit racist. We've evolved past drawing buck toothed cartoons in Sanpan hats, these days people would be genuinely horrified at that. But we can still pillage the religions of the regions without a second thought?

Apart from all that, calling someone a "Code Ninja" or "Samurai Developer", or doing programming "Kata" is laughable. We write software, some of it is borderline ok in terms of quality. A lot of us dedicate lots and lots of our waking hours to doing this. It doesn't mean we're some kind of elite. It's another hobby, another job, it earns some money. It's not like any of us are making actual, material sacrifice to achieve these lukewarm heights. Most of it boils down to white collar fantasy rather than anything resembling the intent of these kind of names.
Well, multiprocessing (the modules) is problematic because not everything can be pickled. If you are working with simple functions this can be fine, but often we use third party libraries that use lambdas (that can't be pickled). Often you don't know why something can't be pickled.

What STM (as I understand from blog posts from the pypy team) is that it provides real threading without having to worry about pickling.

And yes, it only helps if you have multithreaded programs. However, multithreaded and parallel programs are very relevant today.
I doubt it purely based on the fact that the movie was supposed to be released at the movie-profit climax of the year. If they really wanted to make money from it, they would have done it at any other point in the year and released it on the christmas date it just had cancelled
Former Bitcoin Foundation Vice Chairman Receives 2 Year Prison Sentence
That post by Behnel is a good find. FWIW, I was at the talk, and my memory was that I also agree that the speaker didn't know what he was talking about regarding optimizations and took incredibly too long to talk about it.

There are previous projects, like Michael Salib's "Starkiller: a static type inferencer and compiler for Python" ( http://dspace.mit.edu/handle/1721.1/16688 ), and John Aycock's "Converting Python Virtual Machine Code to C" (http://legacy.python.org/workshops/1998-11/proceedings/paper...) which explored that optimization space, and no doubt others.

So when the talk is titled "for the first time, there is a consequently executed approach to statically translate the full language extent of Python, with all its special cases, without introducing a new or reduced version of Python", a listener would expect that it be more advanced than previous work. To be fair, neither Aycok's nor Salib's work was complete, but they did enough groundwork to show that static analysis of the type that Nuitka was exploring would not be able to achieve its stated goals.

But all of this pointing to a discussion from 2012 is pretty pointless, as people do use it for distribution - something which wasn't touched on during the talk, as I recall - while the author did talk about aiming for type inference at compile time, when all evidence is that the speaker had little idea of the actual issues, as previous reported in multiple previous attempts.

I honestly don't know what to do when someone presents a talk as a pure hobbyist, puttering around on a project with little interest in what others have done, and who doesn't understand the audience enough to gauge which details are of interest and which aren't. There's a culture mismatch, certainly, but that's what makes it harder to assign fault.

Should Hayen have realized that the project wasn't at the right level for EuroPython, or that the future project goals were overstated? Did EuroPython get more advanced over time? Did van Rossum not allow that weekend hobbyists don't have the experience to judge things? Should van Rossum never say anything negative in public about a project (and if so, at what level of fame does one need to bear that in mind)? I certainly have no answers to those.
Why is needing more significant digits than the hardware can provide doing something wrong? At the end of day the tools should be subordinate to the problem at hand and not the other way around. You're arguing for the primacy of tools over the actual problem being solved. That sounds backwards.
Yes. I saw this when it was released and the data that was collected and compiled is quite high quality compared to most related research efforts. Science needs more research on human development and change over time. Even something as simple as a photo of a person per day. Actually computers should technically be able to unobtrusively measure our heart rate and breathing via the cameras in laptops with the algorithm that amplifies subtle changes in videos such as the redness color shift denoting heart rate and the rise/fall of the abdomen to indicate the breathing rate.
>bizarre compound words (Pinterest) have proliferated.

I actually think Pinterest is one of the greater names of recent. You can easily discern that the site is about "interests" and then when you learn about "pinning" items, the name becomes obvious.
Spy Drones Over North Carolina Factory Farms Reveal ‘Lagoons of Filth,’
I am a software engineer, and a I live on a small hobby farm where we trying to sustainably raise our own food.

My concern with the startup world getting into agriculture is that unless small-scale agriculture becomes pervasive, then we are also dependent on the transportation infrastructure to ship food around the world. Suddenly we live in a more complex system with more moving parts (literally). It has more potential for failure.

I disagree 100% with the people who say that only large scale operations have the potential to feed the world. It just isn't true, as any of us who produce tons of food on small plots of land can show you.

But getting millions or billions of people to start growing food instead of lawns. That is a challenge.

I hope there are some startups thinking about efficient small-scale operations. I just haven't heard of/from them.
I don't really understand the first proposal, can you expand on that? How would it do away with qualified immunity etc?
I get excited about every stable release and try to switch as soon as possible. When you keep up with the incremental updates then the upgrade process isn't too bad IMO.
> ...some monkey dialects can be just as sophisticated as human language.

These kinds of throw-away claims are a form of perennial nonsense. Nothing in the article suggests anything close to this being true. He looks at the shades of meaning of three sounds and yet asserts a similar sophistication to human speech.

It's a regular meme in animal articles that this group (monkeys here, other times dolphins or whales) have language skills that rival humans. It's a kind of warm fuzzy feel-good claim asserted regularly despite supporting evidence.
Batteries are far closer to being practical than fuel cells. Particularly hydrogen fuel cells which would require new infrastructure.
Do doctors have any incentive to connect with these communities? Is it ethical or reasonable to monitor and attempt to intervene in cases of Morgellons or anorexia that present themselves?
For me under Mavericks, the Networks control panel always requires a click on the lock + then authentication to make DNS changes.
Congrats on shipping!

I wrote a software like this, tried to ship it but I failed. Now it's open-source for everyone.

If you're interested, grab it.

https://github.com/rafaqueque/responsly
I haven't heard anyone suggest the bonding idea, and it seems very sensible. Is this discussed/criticized anywhere?
They recently created uniforms for the Seattle Police department here. Its nebulous what they hope to accomplish with the added surveillance and personally it freaks me out.

I'm not saying were an Orwellian police state but at least we are headed that way.
i don't want to speak for roger, but my general understanding over the past few years was that roger typically appeared to run fresher alpha code on a sister relay named moriatoo (https://atlas.torproject.org/#details/5C91CC4554CA2EE1904BA6...) before upgrading moria1.

but at the moment, moriatoo is running 0.2.6.0-alpha-dev and moria1 is running 0.2.6.1-alpha-dev
If anyone was could publish a Golang crypto library I'd be inclined to trust, it'd be Square, but I think you should probably avoid JOSE.
What do you mean? Is DJ supposed to become a Rails built-in library?
Imagine a society not dominated by main stream media. That is much more important. Control the ideas and dialogue, control the people.
I believe it! Been meaning to get back in touch with Christer, in fact. I miss Ludum Dare. :)
possibly--but it also wouldn't surprise me if these servers were running something like ksplice to avoid having to restart
I'm suddenly very curious about the universality of the similar "uh-huh".
The Disappeared: the day 43 Mexican students went missing
I think you are confused. Gasoline drive is perhaps 30% efficient. Electric drive is perhaps 80%. Charging batteries I don't remember, but let's call it 80%.

So what you've proposed is:

Burn gasoline (30%) * Charge batteries (80%) * Drive e-car (80%) = 19% efficient

It works better if you have a very high efficiency gasoline-powered generator (a 60% efficient generator gets you 38% efficient) but that can't really be done at the homeowner scale.
percent of acquisition emails that I click through: zero
I'm really enjoying looking through the source, this is some nice javascript - thanks!
Seasons greetings Rails team; thanks for the gifts.
yes. brilliant.
KeyBox – Web-based SSH console for OpenShift
Do you understand how the internet works? Probably not.
Can some please do a similar list for machine learning and also for maths relevant to ML?
Not at all, I disagree with his agenda as well (probably for the opposite reasons - I don't think he's nearly left wing enough) but it also seems to be the case that the Republican party has been stirring up their base over a bit more than Obama's agenda, for the sake of opportunistic pandering. The entire "birther" controversy wouldn't even have happened if his name had been John Smith.
so you can see Ubuntu so it is 03:14 UTC on 19 January 2038? That might be bad, how big is their time_t?
> I often joke that if Buddhism had more extremist members we'd have a lot more holy wars than anyone else.

Burma's got a few.
Others can disagree, but I find this a lot less bad. Mostly it's because these are essentially fictional tropes at this point, that have been exported as fiction to the west. Zen is clearly different.
Says you.

Exhibit A: Mexico. A country with vast potential being held back by their corrupt politicians.