skysight-inc/HackerNews huggingface dataset:
I feel certain if this vulnerability had a higher impact (like remote execution) then it would have been over-ridden - or at least responded to quicker.
Why can't it be both? Mind-share AND money.
Sorry for the weird URL. There's no blog post yet, just an E-Mail it got:

´´´
Microsoft Joins the Student Developer Pack
Hi there @zeusly,

Happy New Year from the folks at GitHub Education.

To help you get your semester underway, we have some exciting announcements about the Student Developer Pack, events that are on our radar, an opportunity to get an hour of programming mentorship for free, and ways to shine a light on how GitHub is being used in your classes.

backpack illustration
New to the Pack: Microsoft DreamSpark with Visual Studio

Today we’re making the first addition to the Student Developer Pack since launch: Microsoft DreamSpark with Visual Studio. You can download Visual Studio now and sign up for access to Microsoft’s own student developer program, DreamSpark.

With DreamSpark, students have access to a suite of great Microsoft resources including software like Microsoft SQL Server, the ability to publish apps and games for Windows and Xbox with a Windows Store Developer account, and online training materials, all for free.

To download Visual Studio and get access to DreamSpark, head on over to your Student Developer Pack.

A Free Hour of Code Mentoring

Brought to you by the folks who created hack.summit(), hack.pledge() is a network of 4,000 developers offering an hour of free online coding mentorship to students like you.

Sign up for your hour of support at hackpledge.org.

We want to hear from your teachers

We love hearing all the ways GitHub is being used in education. Be it teams of high school students competing in the FIRST Robotics Competition, a professor teaching computer science at UC Berkeley, or researchers working on open source.

We’re on the lookout for interesting ways GitHub is being used for teaching, and could use your help getting in touch with teachers. If any of your courses are using GitHub, tell your teachers that we want to hear from them. Heck, we might even feature your story on the GitHub Education website.

Teachers: tell us your story

Upcoming GitHub Education Events
Visiting Dev Academy
Mon Feb 16, 2015, Wellington, New Zealand
@johndbritton will be there.
Special Interest Group on Computer Science Education (SIGCSE)
Wed Mar 4, 2015 to Sat Mar 7, 2015, Kansas City, MO
@johndbritton, @davideg, @jordanmccullough will be there.
Taiwan Campus Tour
Fri Mar 13, 2015 to Tue Mar 31, 2015, Taiwan
@johndbritton, @muan will be there.

See more upcoming events at education.github.com/events.
Cheers,
John Britton
Education Liaison, GitHub
education@github.com
´´´
Graham Cluley isn't a vulnerability researcher; he's a blogger and former antivirus author. Old school antivirus people are like the opposite of vulnerability researchers.
My point is merely that the benefits of are gained using essentially nothing more than real ADTs and yet are almost always bundled with harmful other things in practice. FP can include these core ideas nicely, much like how monads include imperative ideas nicely, by focusing on what composes well.
In the times of Google Translate, it would be easier for him to translate what he's saying and post it here rather than the thousands of English speakers here having to translate it.

Anyone is free to respond any way they want, but the point remains it is an English-language forum and complaining that someone is not posting in English is a perfectly valid criticism.
And Google gave them a 90 day deadline. Doesn't seem right not to extend it by only two days, especially if there was a holiday period in between.
Bristol-Myers aces a lung cancer trial with its blockbuster in waiting
This reminds of when (then widely respected) Lou Dobbs left CNN to head up space.com

No bubble here, though.
I mostly use Firefox with two profiles, it has better memory footprint, more robust add-ons, the UI is customizable, tabs load on demand, and for me the mission is important too. Also, it doesn't spreads itself like a malware.
My secondary browser is Opera 12, but seeing how it does not get any kind of update, it is high time I ditch it for something else.
To whoever downvoted me, am I wrong? Please explain.
Wow, didn't realize that. That regulation is a bit of a joke then. There's even a NYTimes article from 2009 about it: http://www.nytimes.com/2009/08/04/nyregion/04taxi.html

We were in New Orleans last week, and took a dozen cabs, and not a single driver talked on their phone. Shows the importance of enforcing regulations.
If Uber drivers haven't figured out yet that the company's goals are to create a huge workforce of barely-employed "contractors" who each earn just barely enough to survive (probably have negative earnings in the long run, when car depreciation is factored in - Uber knows that humans undervalue the car depreciation and don't take it into account when figuring their profits and losses), then I don't know what to tell them. They should figure that out.
I don't think it has to do with ethnicity as it does with the experience of every regular cab I've ever gotten into.
There's no question that the hard 90-day deadline of Google's Project Zero is undermined by collisions with holidays and other calendar events, but Patch Tuesday is a restriction that Microsoft imposes on itself and its users. They had advanced warning and an opportunity to work within the limits of their own policy or roll out an unscheduled update.

Even so, this is a clash of two policies and Google needs to reevaluate its deadline (is 120 days better for everyone, including users?).
I would be interested in learning who that friend was, and how he got to the proof.
Google Search Engine Optimization Starter Guide [pdf]
But one of the biggest complaints about taxis is the artificial scarcity of medallions driving up prices. How would Uber creating an artificial scarcity of drivers (to drive up prices) be any different?
Even if we can, HN users are likely familiar with Genius. Should we really stick to the original headline so closely in cases like this when the title editorializes more than the clearer alternative "... for Genius"?
It seems reasonable for Google to release the details of the bug. If they make an exception for one company they'd have to start making exceptions for all companies. Microsoft is at fault here for not fixing this on time.
Personalization at Spotify using Cassandra
or, Google asked for 90 and Microsoft refused. Who's the asshole?

(neither, or both)
…and in the end there will be the command line
It's typical to not receive compensation till the company is profitable and or funded.

Typically a 50/50 split is recommended between the technical and marketing/idea guy co-founder straight away.

You'll both have to do lots of work to make this a success.

It's risky for both of you to end up putting in a lot of work and end up with a cofounder not holding up their end of the bargain.

I'd recommend setting up the 50/50 split up front and then have a clause that if either of you are not actively working on building the company they surrender 50% of your share to use that equity to plug in a new marketing/dev person to pick up the slack.

It's all in the execution, hard work to make this a success. If you and your co-founder don't trust each other at this point it might be a sign he'll be hard to work with. Typically this early it's all roses and excitement. Maybe you are just getting to know each other though. The ventures I've set off on I typically go with a 50/50 or 51/49 split from the start.

As far as family goes. I expect you're keeping your good full time job and doing this on nights and weekends. Make sure you document that all development is done on your free time and that there aren't any clauses in your contract that would lead your company to believe they own any development you do on your own time. You don't have to alert them to what you are doing but it might be a good time to read anything you've signed.

Remember Ideas are the easy part and make sure this is a good idea that you want to spend a few months seeing your family less to invest your time in.

Remember keep your MVP simple, just develop the minimum amount possible so it's providing 'value' to signups. If the two of you can manually do steps/processes behind the scenes initially do that, automate processes later once you're growing and scaling.

Check out StartUpsForTheRestOfUs.com lots of great information relating to your situation and startups in general.

Good luck in 2015.
For a somewhat dated read for an introductory/high-level survey of the state of CPU design up to 2001, I find [1] to be quite informative. Of course, having been written in the frequency scaling era some of the 'predictions' are way off the mark. Nevertheless, I find it a good resource for someone looking to get a bird's eye view of the 30+ years development in the field.

[1] http://www.ece.cmu.edu/~ece447/s13/lib/exe/fetch.php?media=0...
Mourning the Parisian Journalists yet Noticing the Hypocrisy
Musk at least is transparent about it. He readily gives credit to NASA for instigated and funding much of Space X.
This might seem trivial but to me it raises questions about the quality of engineering and testing that goes in to in-vehicle software systems. If a subtle off-by-one error like this slipped through to release, what about a subtle off-by-one error in the system that handles the brakes? In these systems a "crash" can be a literal one.

Even if the other systems are engineered to much more stringent standards, I'd argue that the user-facing part should meet the same standards, so the driver has confidence they're driving a safe vehicle and not a buggy pile of hacks.
If you want to see how Google ranks your site speed and user friendliness check out google page speed insights. Very handy tool for guidance on what's slowing down your site.

A constantly updated and properly marked up site map is also good to have.
Google gave them 90 days (by Google's policy). Microsoft had the fix, but asked for another 2 days in order to fit within their patching cycle. Google decided to take action outside of Microsoft's (well established) patch cycle.

Then again what does Google care, they don't use or support anything Microsoft, so it doesn't affect them.
This is all basic stuff, but won't affect your rankings that much. Yes, everyone should have it in place, but doesn't represent the state of SEO.

What you should know about SEO, is that it's all about getting organic links to your content, and having content that has a semantic connection to the keywords being searched for.
The parent did not ask for it, he simply states the obvious: no barrier to competition means difficult business, no more.
Are Analysts Primitive Homo Analyticus?
Interesting that nobody has tried giving away blanks. That would save quite a few lives at a low overall cost.
I used to be very annoyed by this start/stop thing and the pain from needing to press one whole button, once, after starting the engine to shut it off was enormous. Really spoiled my whole day, I'll tell ya.

But then I moved from Canada to Europe and it suddenly made perfect sense. In a stop-and-go urban traffic with lots of street lights, the start/stop feature effectively cuts down your car emissions by a non-trivial percentage. There are still cases when it interferes with driving (when entering roundabouts, for example), but then you go through all these cases in a matter of days and learn to recognize them automatically. If you can drive manual, adding an extra button press to the routine adds up to ... nothing.

Finally, there is an option in VCDS that allows you to turn this off, so I'm not sure what you are ranting about to begin with.
I think that if you say: dependency treebank, most computational linguists will expect syntactic dependencies. I agree that the notion is blurred sometimes, e.g. by including word senses or preferring semantic attachments in some cases over semantic attachment. There may also be treebanks of the semantic-y kind, but I haven't seen or used them often.
No issue with 1.3 GHz, Chrome 39, OS X 10.10.
Highlights from the First Web Design Hackathon in the Baltics
Do your homework for cheap
Interesting viewpoint. I always thought of the Amiga as catching up when they threw away the funny custom chips and went full PowerPC! - part of the problem with the later models being the chip bandwidth bottleneck (as was related to me by an Amiga programmer) and of course the dreadful expense for Commodore of keeping everything up to date. But you're right about the ARM CPUs everywhere these days. I suppose we're back there again today.

So, now we're back where we were, I wonder if the cycle will repeat. After all, even if we didn't get Larrabee, we did get the Intel HD3000.
3 Graphs That Help Show Why Ebola Goes Viral or Dies Out
> By now the world really knows about Microsoft's second-tuesday-of-the-month policy for patches.

Which is a dumb policy for security patches. When its fixed it should be released.

> If Google isn't willing to wait the two additional days such that the patch can be deployed within the regular update window, this means that Google effectively gives MS only 60 days to react and fix issues (because once they missed the second patch day, the vulnerability will be disclosed before the third).

Google doesn't dictate Microsoft's patch releasing policy. 90 days are 90 days. Microsoft doesn't have "only 60 days", they have 90 days like anyone else, and they chose to miss it by adhering to a policy of their own choosing that makes security patches less timely.

The whole purpose of a fixed 90-day window is to give reasonable time to fix a security vulnerability but also to create pressure to do so timely. Making exceptions for vendors to accommodate existing policies that make security fixes less timely would both increase the effort for Google (as a fixed time window is always easier to implement than one that varies with each vendors policies) and undermine the whole purpose of the 90-day timeline.
2015: A Plan
I lived in a 3 bedroom apartment (90 sqm) (in Göteborg) from 13 minutes tram to city center and I used to pay 6500 SEK till 2013. Now the same cost 6800 (rent increased due the inflation, landlord demand etc.).

The quality of apartments are better in Sweden than in Copenhagen. You can open blocket and book a visit to any Malmö apartment for that matter and you'll see the difference easily.

The same quality of life (living, rental etc.) is expensive in Copenhagen.
DuckDuckGo utilizes Bing, Yandex and other sources
Depends on the sector.

Companies like Spotify are unlikely to require Swedish but something like more traditional consultancies usually want Swedish.

In the multinationals you can manage without Swedish but it tends to be harder to get a job if you do not speak Swedish.
That's the tricky bit with the formal language hierarchy: it collapses when you add restrictions to finite quantities. For example, a context-free language with productions limited to a finite recursion depth is a regular language.
Given that Microsoft had excellent reason to ask for an extra 2 days, I guess the real question is that for a data-driven organization, why Google think 90 days is such a good number in the first place, and why they insisted on sticking to it despite the asinine alternative (forcing tens of thousands of IT departments to coordinate an out of band change for a low severity bug).
Am I the only guy who would rather focus on his code?

These days I stash my source in zip files.
let x = 0;
function typeof_wrapper(y) { return typeof y; }

(function() {
typeof_wrapper(x); // throws an error
let x = 1;
})();

(function() {
typeof_wrapper(x); // returns "undefined"
var x = 1;
})();

Again, typeof isn't throwing the error, the runtime is, because a variable declared with "let" is being referenced before the declaration. It's not inconsistent, it's one of the main points of "let".

You're essentially arguing that a feature added because the old behaviour was undesirable is inconsistent because it's not exhibiting the old undesirable behaviour.
Interesting concept. However, is it really a proof? If I removed piece #7 I'd have 24 boxes (12 white, 12 black) with which I could theoretically build a 6x4 rectangle, but I don't see how this would be actually possible with those pieces.

Maybe it only proves the negative, but not that there must be a solution.

Edit: there seems to be a solution for a 4x6 rectangle.
Draft of Think DSP: a Python-based introduction to digital signal processing
For JavaScript-heavy sites, I still recommend following Google's AJAX-crawling guidelines, and supporting the pre-rendered view request variable _escaped_fragment_

https://developers.google.com/webmasters/ajax-crawling/docs/...

You can do a good enough job by sending such requests to a PhantomJS instance, waiting for the page to load, outputting the PhantomJS-rendered HTML to the browser, and saving the HTML to a cache for faster access next time.[1]

There are also plenty of SaaS apps that will handle the pre-rendering for you.

An additional bonus of doing this is that you can intercept requests from engines and services that don't support _escaped_fragment (e.g. Facebook external hit), and always ensure that you serve pre-rendered HTML to them. (e.g. by matching on the user-agent string).

[1a] One potential hitch is knowing when a page has finished rendering. You could potentially set a variable in your code and have PhantomJS wait for that.

[1b] One other hitch is that it's possible for PhantomJS to time out e.g. waiting for an external JS library to load. It's sensible to check that your HTML output looks vaguely sane before sending to the browser (e.g. for Angular, make sure there are no {{ }} blocks in the HTML), and sending a temporary error code if something looks odd.
World’s Largest Indoor Farm Is 100 Times More Productive
A "90 days no matter what" policy has the advantage that it takes any thought out of the disclosure process. It also has the disadvantage that it takes any thought out of the disclosure process.

Perhaps responsible disclosure occasionally requires considering the unique circumstances of each security flaw?
It's not quite like writing assembly because these intrinsics are meant to translate to the "best" instructions for the particular ISA that the code is targeted for. You are able to compile the same chunk of code for two different architectures, for example. If you were to write inline assembly, you would be forced to have a separate chunk of code for each architecture and surround them with #ifdefs.
The run tests over every single supported version of Windows, on every platform and with every combination of patches installed. Or so I read in an article by a MS employee who deals with security reports, someone sent in a nonsense 'vulnerability' with some C# POC involving MessageBox.Show and returning from main. It was obviously not in any way a issue, but he still ran it across all versions and patch-levels of windows to be sure. It doesn't say how long this took but I expect it wasn't fast.
SpaceX ship delivers groceries and Christmas gifts to astronauts
You're mistaken, kinda. The syntax wasn't originally "using static", it's just "using" but with a qualified class name instead of a namespace name. The example includes:

using System.Math;

System.Math is a static class, not a namespace. It doesn't import a single static method, it imports the entire class.

However, in the italicized note, you can see they changed their minds after releasing the preview. It's going to be "using static", but they didn't update the example. It will still operate on the entire class and not an individual method though.
My whole point is that this isn't C any longer, it is Assembly.
To be clear, "closures" are merely an implementation of lamdbas which were invented in the 30s. I wouldn't mention it except you're trying to shame someone for not "knowing" that Smalltalk beat Haskell to the punch despite both of them borrowing from a much richer history.

To drive the point home, you can implement lamdbas (and thus Haskell) without using closures. In fact, this is easy in a pure language since bindings are static. One way to do this is to compile the language into a basis of combinators like SKI. These no longer have any notion of binding so we don't need closures. Likewise, you could compile it into a categorical semantics and maybe implement this on FPGAs—again, no need for closures.

Lamdbas are merely a syntax and theory. Closures are merely one interpretation given a Von Neumann machine.
I think calling it a 'goal' overstates it. It's a pure consequence of the model and I don't think it's possible to change because there is an Uber/Lyft duopoly now. Because they are in competition with each other, either can profit if the other incurs the cost of being more driver-friendly.

Yes, there is competition for drivers and drivers influence quality. Honestly, I think that the only way these two players survive is to stratify their services: high end with good drivers vs. the college kid with a junker full of empty pizza boxes.
I think people just want a decent car, not a luxury car. A $20k car from the last five years is perfectly sufficient. Uber Black is overkill for them, and the price is around 2.5x of UberX.
> There's no telling who else knew about this bug and was actively exploiting it (probably lots of people).

You have no reason to believe it was a "lot of people." In fact we have no reports of people exploiting it in the wild at all, unless you have some information we don't.

edit: Downmod me all you wish, but substantiate your claims. Where is this being exploited in the wild before Google released it?
The Benefit of Listening to Your Customers Before Your Launch
> AFAIK LINQ pretty much is a library since its just extension methods

No, that's flat-out wrong. LINQ's main feature is turning code into data: Put code in, get an expression tree out.
Some additional info...

1. Don't let the new HTML5 tags distract or confuse you. Google knows how to deal with traditional DIVs so only use the new tags (example: SECTION, ASIDE) if you know how to properly implement.

2. Maintainability is a big one for page speed optimizations. You can easily get 95% there but that remaining 5% often comes at the expense of maintenance, and the ability to see/make changes easily.

3. Can't agree more with the section on redirects. 301's are often forgotten and can cause issues down the road with SEO and site functions.

4. The last tip I would add would be to monitor 404/access logs. Often times they will reveal SEO problems.
This must depend on the city or your typical usage. I'm not a daily Uber user here in NYC (I commute by subway as most sane people do), but I'm not an infrequent user either (particularly on weekends or evenings with my family). I haven't paid surge since February 2014 (apparently on Valentine's Day), and I can't remember the last time I saw surge pricing, although it looks like twice I paid more and used regular Uber instead of UberX because there weren't enough UberXs available and I was in a hurry for appointments.

I don't see any reason to see surge pricing as "bait and switch," although I'd be open to seeing some actual data that backs this up.