skysight-inc/HackerNews huggingface dataset:
I don't see the relevance here, but that article was actually really interesting. Thanks for the link.
Performance + Brand Marketing All at Once via YouTube Remarketing
I don't think so.

Between Heartbleed and Shellshock, and now this, a PR firm marketing vulnerabilities like this seems... crass.
From Flo-rida to MHacks, but I’m not a rapper
From what I can gather, it wasn't originally thought to be a security vulnerability so it was thought to be acceptable to leave it be on older systems. Now somebody has figured out how to exploit it.
Here's the bibliography of the author of this piece, for context:

http://www.nafeezahmed.com/p/books.html

He's certainly got his own axes to grind and his own political ideology to sell, but that doesn't have any bearing on the truth or falsehood of the facts he reports.

25 points and no other comments? Anyone? Bueller? Bueller?
Apple supplier Foxconn to shrink workforce as sales growth stalls
Spiegel might have done better to call it a GCHQ tool used by the NSA.

You are suggesting that a tool that has been around for 10 years was picked up and used by NSA/GHCQ. Even if we grant that, the sophistication level is a bit more than "simply modified". When is a fork no longer a fork because the code base has been modified/improved?

With your argument, one could go back as far as they wished - NSA takes an idea from academia and implements it, then we just say 'oh well, it was the univeristy who came up with it, not NSA as they only used it'
I agree and this is what I was hinting at with the last point. I think in the end there is no way to update our understanding to a world filled with acts of conflict that are difficult to attribute. We've lived in an attribution luxury until now. So this Hippocratic of attribution will probably continue. I do think in the end the public will just learn to take attribution with a grain of salt.

This is why I think cyberwarfare represents one of the most fascinating areas of exploration for political science students. In addition to the collective psychological affect from attribution complexity (further discussion if interested https://medium.com/@cyphunk/the-nature-of-conflict-is-changi...) there is also the breaking down of the 2 state/coalition actor assumption. The actor could be from a known state enemy, an unclear enemy just disturbed by your trade/sanctions policies, some activists with a cause or a bunch of people from b/chan doing it for the lulz. The absurdity of the US response and attempt to protect some lousy hollywood comedy only illustrates this change of environment all too clearly.
The funny thing is that an outlier such as instagram will not actually change the averages all that much.

But feel free to totally ignore that part of the post if you feel that that serves you best. And more power to you if you get to actually make bank that way.

But for the people that are capable of making their own way I strongly believe that their best interest lies in doing what they love best and charting their own path, eventually possibly founding their own company where they have a direct say in the success or failure rather than an indirect one and where their chances of getting screwed over are far lower.
When I was at EA, there was an explicit mandate to not create org charts. I mean, there definitely was an org structure ... they just didn't want it visible. I never really understood why, I mean all the data was sitting there from the HR systems (I was in IT). So one day I made an org chart visualization based on said data ... just out of curiosity. My manager quickly asked me to make sure no one saw that project to avoid raising someone's ire :P
The Art of Reading, Remembering, and Retaining More Books
"in years to come scientists will replace politicians in governments"

Not an especially new idea, especially in a Greek context. Plato, in Republic:

"The society we have described can never grow into a reality or see the light of day, and there will be no end to the troubles of states, or indeed, my dear Glaucon, of humanity itself, till philosophers become rulers in this world, or till those we now call kings and rulers really and truly become philosophers, and political power and philosophy thus come into the same hands."
Much more Godley/Minsky/Lerner.
with a hard right colation partner I doubt that Greece spends more per head than teh USA does - Acoring to Charlie Stoss its to keep the Gernerals happy so they don't stage another Coup
Would you care to post/link to how you're tracking the voting trends? I didn't realize that data was available.
Even with key match, this is a fundamentally different product.

With the original Lockitron, a renter could just install it wherever they were currently staying. With the Bolt, the renter has to get permission to install a new deadbolt and has to get a new key pattern each time.
My recruiter was quite open with me.

The company he worked for charged 15% of my salary. He himself took a percentage of that which increased at stepped intervals when hitting monthly targets reaching almost a third of the fee.

Surprisingly advertising jobs seemed to be one of the biggest costs accounting for about £1-2k per placement. Office, transport and other costs obviously had to come out of the fee too.

Overall he had about a £20K base rate and was aiming for £20-40k in commission each year.
Is boekweit een gezond alternatief voor granen? – Leef Nu Gezonder
Fluentmail.js: Send emails by chaining methods
Most importantly, it contains a test program at the beginning of section 4.
This Is Why Apple Will Reject Your App Preview
Swyp Card
I am from South Europe but I agree with most of stuff you say. Nobody complained when we were receiving more than we were giving back. And worse, we got used to it.

Everybody is guilt here. Man up.
No, the announcement [1] says the affected versions are:

> In particular, we discovered that it was fixed on May 21, 2013 (between the releases of glibc-2.17 and glibc-2.18)

Gentoo is listing glibc version 2.19-r1 as the latest stable version [2] and is using that per default.

[1] http://www.openwall.com/lists/oss-security/2015/01/27/9

[2] http://packages.gentoo.org/package/sys-libs/glibc
As the owner of the content doesn't SO reserve the right to also release in whatever other license they deem useful? Is there some source stating they didn't give Google express use to use the content in the exact way it's currently being used?

Edit: My thanks to the people who spelled out in the terms. It appears it is CC licensed.
Twitter Bolsters Private Messaging with Group Chats
You have been able to for a long time. Buy Steam games with a credit card, then don't pay it back. There may be consequences, but you can do it.
From 0 to $1B – Slack's Founder Shares Their Launch Strategy
Ironically, Valve also operates "by the means of some non-price [...] mechanism".

I wonder how an even more radically free-market organization would look like - where people are literally trading services for money within a company. I think that several industries already operate in a similar manner, where you have "rain-makers" who bring in the money, and "support staff" (everybody else). For example, traders/portfolio managers in hedge funds, and partners (who bring in new clients) in law and private equity firms. But there still is a lot of hierarchy and no transparent market within the company.
The user agrees to a terms of service when they sign up, which I'm sure includes a section detailing that riot can do whatever they want with user data and the in game environment.

Don't like that Riot is experimenting? Don't play the game.
Pascal? Maybe. Object Pascal, Modula-2/2+/3, Ada, Mesa/Cedar? Definitely.
The End of Religion Technology and the Future
This has been what I've been worried about during all of this. I'm not entirely sure why Germany has to be "damned if they do and damned if they don't". It's as if people forget that the country has had to learn how to recover from total catastrophe and might be offering realistic and practical solutions to the problem.
Universal Access: 5 steps to building a sustainable accessibility program
> Tangentially, what is the main reason for all the protest against the EU

Austerity measures hit workers the hardest -- the people most responsible for creating economic wealth. To them, the EU is trying to take wealth and opportunity from the already-suffering average person to balance for mistakes and losses made by leaders and other nations. And the punishments have been pretty severe. I'm confident the level of austerity measures, if they faced the American people, would not go over peacefully (assuming we had much of a social net left to give up at this point).
Oops, Tweetbot is kill. Something something API limits developer love walled garden.
The 27 Metrics in Pinterest’s Internal Growth Dashboard
Heh. Is that so. http://www.intel.com/content/dam/www/public/us/en/documents/...
I do work on this. Your last point is correct (and probably the biggest issue). Others include weather and general vision problems.
I'm a big fan of pfSense - heavy home remote worker user, it stays up and connects to multiple OpenVPN servers, routing their spaces for my network, runs a remote access server inbound, an IPv6 tunnel via Tunnelbroker, multiple static IPs, including straightforward outbound NAT for my Apple TV to access NBA League Pass games (since the NBA in its wisdom has decided that the Puget Sound should be blacked out for Portland games and that I can just "tune into CSN Portland").
You definitely made an incorrect assumption. I have been at various levels of management and also continued to be very hands on in the code bases. This included start up's and very large (Fortune 50, on the lower end of the digits) companies.

I believe I was a very successful Director and VP level manager. However, I realized a few things that made me switch back.

1) Engineers, particularly me, don't like to manage. Most of us get into it for the money or because it's some sort of natural career progression. But generally it means more of the things we don't like doing. Meetings, personnel issues, hiring, firing, and not coding. Some say that management at that level get more say in the product direction or in other business matters and I have not found that to be true. Engineers get just the same amount, if not more, say in product than any manager. If you happen to be a "hands-on" VP, you get to do all of those things you don't enjoy doing from 10-4 and then code on the product all night. That can be quite unpleasant.

2) "Natural Career Progression" is a myth. If we're talking about purely financial benchmarks, as an engineer and a consultant I make more than just about every manager I know. And certainly quite a bit more than I made as a VP, including equity. If we are talking about career "prestige" or "respect", as an engineer I get asked to speak at more conferences, write more articles, and get on the phone with more CEO's than I ever did as a manager.

3) Quality of life and happiness. I have spent the better part of my entire life learning how to make computers do what a company needs them to in order to make money on their product idea. I think a lot of VP's and Director's absolutely love their job, but I felt unproductive and constantly inefficient. I wasn't making a computer do what the company needed it to do to make money on a product. I was trying to get engineers to work, I was settling disputes between engineers and other engineers, engineers and other managers, managers and product schedules, product schedules and financing, upper management and partners, the list goes on and on. This did not make me happy. I didn't sign up in this business to be the referee. I want to be the best engineer, so I strive to become the very best at that.

Now to answer your specific questions. I was a director or VP level for 7 years. I walked out of my last job as a VP and walked into a consulting role the following day making 20% more. The transition was absolutely seamless and I did not play catch up. However, this may be more of a testament to my own learning and retention. Others may take longer.
Sounds a lot like China's internet censorship. People still know about the censored topics, but they just want to push people into talking about safer subjects. Keep the org chart hard enough to find/understand and people will discuss other things.
No we're not. At the moment we're focussing more on non-devs who already have the data in a csv. It looks like a cool project though.
So going modern means breaking in PhantomJS, that is a bummer.
You're testing what happens when you delete a file for which an open file descriptor exists. On Linux, a shared library will normally be memory-mapped but will not have a corresponding file descriptor. So lsof will show DEL, not (deleted).

I wouldn't normally nitpick about something like this, but if people follow your advice they might incorrectly think they don't need to reboot.
Oh yeah, that was obvious, not sure how I missed it. Thanks.
You can see that the removed file gets a (deleted) in the 'NAME' column but not DEL in the 'TYPE'.

Maybe you have a cut-and-paste error? The before and after look the same to me, no "(deleted)" to be seen.
I wonder if the name is an anagram of "snail"? Quite funny, if a bit far-fetched. :)

Edit: nope, they actually explained it themselves:

The word ‘nilas’ actually means “young sea ice” that will grow into icebergs.
I have the exact same setup. Works great.
This is probably one of my favorite books, but I'm not much of a reader. It's just really cool to see two really enthusiastic guys doing what they loved back in the wild west era of game development and becoming extremely successful at it. It's amazing that one guy (Carmack) single-handedly created the technology needed to have such a revolutionary experience on PCs. It's doubly cool that he's about to do the same thing twice in one lifetime (with Oculus).
So remove the ability to use pointers to directly access memory. Then you're only left with all of the other security vulnerabilities found in every such language.
Automated Affection: Robot ‘Handprints’ Personal Letters
Questions aren't assertions, and one of the requirements for straw man is asserting you hold a position.

I'm done with this discussion at this point. I don't think you really have a concrete claim regarding the topic and you are avoiding creating one by derailing the conversation by arguing my question is fallacious.
Not sure there's enough drama to really make this a good movie. There is some drama and bickering and Romero leaving when he got bored but that's about it.
Holy crap, yes, I agree, proxcards are the same as physical keys and are no more or less secure or insecure. Everything its benefits and weakness. However, its worth taking 5 minutes to consult your laws to see if what you're doing is legal even if it "should" be. Laws can be (and are all the time) written by people who don't understand the issues at hand. An ounce of prevention is worth a pound of cure, and all that. You don't want to (potentially) have issues down the line that are very very easily preventable.

I deal with extremely detailed regulations and policy on a regular basis (I work in a very regulated field) and we MUST do things that are very specific all the time. We need to follow the letter of the law (not just the intention). Looking up "hey, can I do this?" is part of my job, so I'm ALWAYS thinking that way. Policy is usually one step back from new technology. You may have laws and regulation that details specific technologies that may be used in different applications.
This is pretty much what you'd want.

http://en.wikipedia.org/wiki/Hackers_%28film%29
Show HN: Chattur. Wherever you are
I used Turbo Pascal on CP/M-80. It wasn't just a little bit better than everything else out there, it was a real revolution. For I think $99 you got a solid integrated editor/IDE and a very fast compiler for a real language (not a toy like Tiny-C or whatever) that produced executables you could share. And it ran great in about 48KB (not GB...not MB) on a processor running between 1-4MHz. Good times.
If you are looking for date-based checking[1], August 2013 is when glibc 2.18 was released.[2]

[1] I wouldn't.

[2] http://ftp.gnu.org/gnu/glibc/
Loved this book, Id Soft was one of the companies who showed that a small team can do huge job. I am going to read this book again someday.
Do you think lack of explicit hierarchy has had an effect on the quality of EA's games?
This is on the money, and you might be interested in this essay, "the tyranny of structurelessness": http://www.jofreeman.com/joreen/tyranny.htm
Without trolling, it is true that string manipulation has been a fertile source of major bugs. I don't really see the benefit of having to manipulate arrays of characters manually instead of a string datatype. An unmanaged language doesn't really gain anything from this, apart from this sort of embarrassment.
Ask HN: Trouble Remembering a Computing Theory
So I recently had a discussion with some colleagues about our product's internal messaging system. It reminded me of some theory or something of the sort that states that all platforms eventually create their own email system.

Does anybody know what I'm talking about? Maybe I just imagined it.
The post title is misleading. 'Masters of Doom' is not a book on John Carmack's adolescent years alone, but a book focusing on the lives of both Carmack and John Romero, with a few other 'minor' characters, who were the main people behind idSoftware. It is a fascinating read.
I think it would be more reasonable to monitor your child's search history and talk to them about pornography than to try and hide it from them and treat sex like its dirty and gross.
Privately-funded Solar Sail Prepared for Launch
OK, if you believe that there is actually such a thing as "Cyberwar" then this means that the USA has attacked Belgium. Does this give Belgium the right to physically blow up some important American infrastructure? ... or is Cyberwar a type of cold war which would limit the response to some sort of hacking of important American infrastructure?
Maybe I am missing something in the article, but how do they identify the "founders" of these Y-chromosome lineages? What distinguishes the founder from their father's Y-chromosome lineage? Are they just trying to attribute the common lineage back to a historically powerful man who likely was involved in its spread and therefore calling them the "founder"?
Debian was updated, but their website does not show it.

It's version 2.13-38+deb7u7

A standard update command should get it, but if not you can find it here:

http://security.debian.org/pool/updates/main/e/eglibc/
Everytime I see something about Slack i immediately think of SlackWare.
Not to mention that SO's content is released under a Creative Commons license, and for exactly this reason. Google doesn't really even need their permission to do something like this.
Awesome post man. People often overcomplicate simple concepts wayyyy too much.
http://en.wikipedia.org/wiki/Hostname#Restrictions_on_valid_...

the entire hostname (including the delimiting dots but not a trailing dot) has a maximum of 253 ASCII characters

In general that is a good guideline, but when the standard (RFC1035) says there is an absolute limit, there is little value in going above that as it is likely that other systems won't be able to handle it. The added complexity of dynamic allocation is also an opportunity for bugs, like this one.
Here is the test program, from http://www.openwall.com/lists/oss-security/2015/01/27/9

https://gist.github.com/koelling/ef9b2b9d0be6d6dbab63

To test your system, simply run this (but obviously only after making sure gistfile1.c is clean ;))

wget https://gist.githubusercontent.com/koelling/ef9b2b9d0be6d6dbab63/raw/de1730049198c64eaf8f8ab015a3c8b23b63fd34/gistfile1.c
gcc gistfile1.c -o CVE-2015-0235
./CVE-2015-0235
That one makes a little more sense. Some user agent detectors will look for Trident and assume it's an old version of IE and therefore not compatible.

The more things you put in your UA string, the harder it'll be to fall into the "this is IE" bucket.
It just kills it for me that it's basically Chrome with a face-wash...
Throw my hat in the ring for Fastmail too. I was looking for a GMail alternative for a particular and settled on Fastmail. (I still use Inbox for other accounts)

I've found their technical team helpful, their instructions with screenshots (although not on the most current version, but a close enough version) helpful, and the web interface smooth (though I typically use native mail clients)
So what I figured out so far: This is a quite nasty bug that may or may not affect everything that links against glibc (or eglibc). However the bug was fixed in glibc 2.18 and the advisory [1] includes a test program at the start of section 4. From this Ubuntu 10.04 LTS and 12.04 LTS are affected, but not 14.04 LTS. ( Can someone confirm this?)

[1] http://www.openwall.com/lists/oss-security/2015/01/27/9
Yes, that is absolutely a factor. But apparently my wife doesn't believe in cleaning up after herself. Only after me.
The difference is restraining yourself vs being restrained. A brutish response to the latter is the civil response.
Thanks! I had fun writing it and learning flux. :)
I think he's making fun of that glibc principle.

Again, this is especially silly if (as it appears to first glance) the bug is in a hostname validation function, and so flexible allocation could only ever be useful in the case of a hostname that must fail validation anyways.
There is an actual difference even for the fast segment. Because for the fast 3.5GB segment the performance is still 7/8 of the GTX980.

http://dl5.guru3d.com/gtx-970vs-980.png See this

So the peak performance of GTX970 is 196GB/s
The Qualys link (elsewhere on this page) contains sample code to test if you are vulnerable.

Also, you can check your glibc version with this tiny code:

#include <stdio.h>
#include <gnu/libc-version.h>
int main (void) { puts (gnu_get_libc_version ()); return 0; }

(taken from a forum that I've since closed the page on, sorry for lack of attribution)

<= 2.17 is unsafe, >= 2.18 is safe.

ldd --version might also do the trick.
Although, it is an anagram of snail, just not intentionally so... I can't believe I didn't notice that until you pointed it out.
Stats Show the New England Patriots Became Nearly Fumble-Proof After 2006
As the owner of the content doesn't SO reserve the right

SO isn't the copyright holder of the content; the users are.

http://stackexchange.com/legal/terms-of-service#3SubscriberC...
Show HN: A gem to log when code gets run
> Through history people were able to eventually overthrow much more brutal oppressors.

They were more brutal because they substituted brutality in lieu of these sorts of technological innovations. They couldn't spy on everyone, so they had to crucify the few opponents they could definitively catch (or some sacrificial lambs, when they couldn't.)

Not to mention, it's much easier to overthrow a brutal dictator. Your government is killing your friends, drafting your family into the military, and sending your coworkers to work camps? Hell yeah, we won't stand for that! But if your government is just quietly watching, while your family is sitting at home, with food in their fridge - will you pick up a weapon to fight against that regime? Will your friends, family, neighbors?
> We can't have our citizens' tax records getting out of the IRS.

Yeah it's a huge mess here in Sweden. /sarcasm
Use contrl-F to search, it got clipped off the right-hand side by HN's raw-mode display.
This is awesome, if you work in that environment. I'd love to be able to work in a career where I could schedule my day instead of being thrown into indeterminable madness.
What's the advantage of this over PeerJS? What is your guys' pricing going to look like? Can I deploy this to something with thousands of users already?
5 Easy Shingle Roofing Maintenance Tips That Will Extend the Life of Your Roof
Lift me higher: Building the world's tallest lift