skysight-inc/HackerNews huggingface dataset:
To follow the reading/writing literacy analogy: If we were talking about reading/writing literacy, you'd be looking at people's ability to write novels as a measure of their literacy. That's a pretty high standard, one by which I doubt either one of us could be considered literate (I've tried to write novels--haven't finished one yet). There are some real masterpieces of code: I'd point to the Lua or SQLite codebases as examples. But the majority of novels are not at that level and the majority of code is not at that level. I certainly have no respect for, say Stephanie Meyer (the author of Twilight) as an author, but I'm not going to look at her writing and say she's illiterate. In some sense, one could argue that it's more important a measure of code literacy for people to be able to read code than to write it.

One area where this is very important is in management of software development. A core problem I'm trying to solve right now is that I'm essentially self-managed: my managers aren't code literate, so they can't actually tell whether I'm doing a good job or not. I've written reams of shitty code in a short time because of time pressure and gotten better reviews than when I spent the time to do things right, even though from my perspective I could see that the bugs that came out of doing things quick and dirty cost us more time in the long run (or even in the next few days). It's something I believed in theory before, but now I'm in a much higher-pressure environment and I've actually made the mistake a few times. If my managers were code literate, they could read my check-ins and sign off on them. And since they're not, they're essentially glorified middle-men, and I'm not sure what function they actually serve.

The above problem would be solved if they were like your ex-colleagues. They don't have to know how to model, they just have to be able to understand how I modeled something.
Back-End Data Engineer in Snowy Boston
We're having some scaling problems that will be resolved very soon. The benefit of signing up is getting the API key so that you can start using Icecomm.

Thank you everyone!
MalDrone: First Ever Malware for Drone
>"but the overall goal is clarity, not short functions."

I've never seen this discussion play out where the "short function" side is saying that the only goal of short functions is...short functions.

Obviously "clarity" vs "short-functions" is a no-brainer discussion. But fails to acknowledge the complexities and nuances being discussed.
It's not a wedge issue. It's the first building blocks of a Great Firewall of Great Britain.
Think about what you know about computer access models (usernames, passwords, OAuth tokens, etc.)

If you were to design a new access system today from scratch, would you set it up so that A) you give everyone the same 2 character password B) you don't give anyone a username and C) anyone can give anyone else admin credentials with no authentication?

Probably not, but this is the way regular house keys work. Lockitron represents a step in fixing that. Keys worked fine in the 20th century when matter was difficult to work with. This won't be the case for the 21st century.
I use it for the speed, despite its lack of features & ugliness. A lot of my devices are getting old chug when loading up new Gmail. Speed is why I use the HTML version.
CVE-2015-0235 glibc gethostbyname Overflow writeup
What I'm driving at is a product level change. I think some of the product changes like the addition of "Show HN" did come from grassroots requests from the users.

I could be mistaken but I see that given a certain product the quality of writing form the users is going to be relatively constant. There could be some influx of users (from some marketing, PR or viral effect) that changes the landscape but I don't expect anything like this to occur in HN in the near future. Therefore, I think to change the quality of comments the product needs some level of change. The product change would either have to change the motivations for the current users or attract other users who write higher quality comments.

I also thing you undersell the "internet points". Without some sort of karma system you would likely have something like 4Chan or the comments in Youtube. Further, reducing my statements down to a squabble about "internet points" is reductionist and inaccurate. The larger effect is that down-votes can literally remove a comment.

All in all, I think the current mechanics support passive aggressive interactions between users and penalize overt disagreements. I think most people would agree that the former isn't a good thing but the latter is where I would imagine there are widely differing viewpoints.
Use Case: Spark Performance Monitoring
Watch  One Night Stud (2015) Chinese Full Movies Online
Yeah, its all design, but they list a usability consultant on their staff page. Usability is a part of the design and if a usability constant can't pick up such glaring problems with how the design affects usability, I'm not sure what they are supposed to do.
You're missing the digital part. And I don't mean editing typos, I mean real editing. And things like being able to turn it into a blog post, for example.
Want more social shares? (The power of awesome images)
Battling SELinux
Funnily enough, if the entire world was recorded every second of every day it would literally be impossible to be falsely accused of a crime. This is why many states are passing laws for cops to have cameras on their glasses: it's impossible to lie if there's an uninterrupted live stream of the truth.
He talks about "Juniors learning bad habbits," but fails to meantion what any of those habbits are. It sounds like he thinks its over engineered.
Qualys Security Advisory: http://www.openwall.com/lists/oss-security/2015/01/27/9

Lots of info about their discovery. Apparently they developed a PoC exploit. They've also included a pretty short test program to determine if a system is vulnerable or not.

Here's a gist of the test (copied from their advisory):
https://gist.github.com/amlweems/6e78d03810548b4867d6
This is someone who moved up the ranks in the CIA to a very high level. They are very adept politically.
Here is the full Qualys report with an in-depth analysis:

http://www.openwall.com/lists/oss-security/2015/01/27/9

Also contains a writeup about a remote Exim exploit (which is the default mail server on at least Debian).
WatchKit Delegates and Contexts
Snapchat Introduces Snapchat Discover: The Future of Media Consumption
By conflating the "state of computing" with the "state of the Valley," the author just spreads Valley-centrism.

This comment needs to be supported. Particularly since the author lives in Europe.
It's much faster and takes less memory, which is especially improtant for slow laptops. Calling using proprietary online services is no good...
> Then you have a very limited view of history.

Pro tip: when disagreeing with someone on a philosophical point, it's good form to leave "you" statements out of the debate.

Good day, sir.
Is there a specific reason stun.services.mozilla.com cannot be pinged successfully? Is this by design?

Edit: Apparently it is by design; ICMP ECHOs are blocked by default on AWS instances, on which stun.services.mozilla.com [54.172.47.69] is running. http://aws.amazon.com/articles/1145?_encoding=UTF8&jiveRedir...
The customers aren't actually going to exercise the refund; the point of offering it is just to prevent backlash.

http://www.joelonsoftware.com/articles/customerservice.html (scroll down to #7)
Immigration!

Apart from that, not too many wedge issues. Certainly not train ticket costs or anything like that (where are the people who want it to go up?).
What does the other side of the lock look like? That's not clear from the website.

Also, what happens if your phone is dead? This is a serious issue that's not mentioned anywhere on the website. It would be nice if there was a physical key backup.
built for chrome, still building for firefox.. lol

The 2 browsers still have not agreed completely on implementations for WebRTC, but we are definitely working on it.

Thank you
Is Ubuntu 12.04 vulnerable to this?

>> this vulnerability affects many systems from Linux glibc-2.2 version published on 10 November 2000.

>> a fixed was pushed to glibc-2.17 et glibc-2.18

Ran dpkg -l libc6 on 12.04.5 shows it's 2.15. So anything before 2.17?

/lib/x86_64-linux-gnu/libc.so.6 GNU C Library (Ubuntu EGLIBC 2.15-0ubuntu10.7) stable release version 2.15, by Roland McGrath et al.
"Saying: "Use the same thing you worked on last quarter" dooms everyone who made wrong foundational choices with their old project to spend most of their time "fighting the last war"."

Not unless you told them before they started the previous year's project that it'll be used further along the line.

I'd just make it one really long subject that spans 3/4 years.
Smart form for embedding scripts in HTML
Show HN: Marakalle - A booking reminder app for Indian travellers
They both did it yo
Auschwitz 70th anniversary: Survivors warn of new crimes
With such a good track record with all of that, I would absolutely trust a device these people made to secure my home! /s
From this, the vulnerability was fixed in May 2013 so any systems from there or later (e.g. Ubuntu 14.04) are fine. Older systems obviously now need to wait for the patches to come through.
According to Canonical it is:
http://www.ubuntu.com/usn/usn-2485-1/
The problem with that argument is that sexism is subjective and it is up to those being discriminated against to decide what is a discriminatory act, not the perpetrators.

There is no deliberate misinterpretation. The fact that there are so many women who find our default use of male gender in English discriminatory is proof of discrimination - whether deliberate or not. You can't just wave it away as "nonsense".

It is such a simple thing to change - and it hurts no-one to do it. Why wouldn't we just do it if only to make those people happy?
General's remarks in full are here (paywall if you're not a first-time visitor):
http://foreignpolicy.com/2015/01/27/the-text-of-general-flyn...
> If it affects gethostbyaddr

The release at
http://www.frsag.org/pipermail/frsag/2015-January/005722.htm... says that it affects both gethostbyname() and gethostbyaddr().
That's a great writeup. It will be really interesting to see how they achieve remote code execution under those limitations.

Also surprising to note that we've been vulnerable since November 2000.
20 kids!?,the man is a serial rapist.please listen to the wrath of the khan podcast by Dan Carlin

http://podbay.fm/show/173001861/e/1343775512?autostart=1
Contact me on twitter @gopcruise
A second way within the system is that people start to vote for politicians who are serious about privacy.
>And you're wrong about how the UK public feels about surveillance. The UK has more CCTVs than most countries and we didn't get here by most of the public hating cctv.

It helps that CCTV is pretty fucking useless. It's hardly the same thing to take a grainy video of you walking down the high street as it is to slurp up every email you've ever written.
Splitting the Atom: Forking Atom to create a mail client
I have thought the same thing about these types of products but the other day I realized that I pass through several of these electronic deadbolt type door locks at work every day. So maybe the mechanical stability aspect of this is already pretty well proven out?
I've been grousing about how much I really want something like this for cars specifically for key-sharing.

My driveway is four cars deep and two wide, so my various housemates all have to make a copy of their key available so we can move any cars blocking us in. If we could just generate a sub-key, that'd be much more convenient.

Similarly, how about the ability to easily give a temporary house key to your visiting friends/family without having to have n spare keys sitting around? (Right now we have a re-programmable keypad, but if we could generate temporary subkeys without either giving out the master code or programming in a subcode, that'd be ideal.)
The part about it possibly being caused by anaesthesia was kinda glossed over, no?
Having a shorthand makes it a lot easier for people to freak out and panic unnecessarily, too. "Heartbleed" was big enough to warrant a world-wide freakout, but this is a remote buffer overflow with many requirements for success.

From http://www.openwall.com/lists/oss-security/2015/01/27/9 :

--[ 3 - Mitigating factors ]--------------------------------------------------

The impact of this bug is reduced significantly by the following reasons:

- A patch already exists (since May 21, 2013), and has been applied and
tested since glibc-2.18, released on August 12, 2013:

- The gethostbyname*() functions are obsolete; with the advent of IPv6,
recent applications use getaddrinfo() instead.

- Many programs, especially SUID binaries reachable locally, use
gethostbyname() if, and only if, a preliminary call to inet_aton()
fails. However, a subsequent call must also succeed (the "inet-aton"
requirement) in order to reach the overflow: this is impossible, and
such programs are therefore safe.

- Most of the other programs, especially servers reachable remotely, use
gethostbyname() to perform forward-confirmed reverse DNS (FCrDNS, also
known as full-circle reverse DNS) checks. These programs are generally
safe, because the hostname passed to gethostbyname() has normally been
pre-validated by DNS software:

. "a string of labels each containing up to 63 8-bit octets, separated
by dots, and with a maximum total of 255 octets." This makes it
impossible to satisfy the "1-KB" requirement.

. Actually, glibc's DNS resolver can produce hostnames of up to
(almost) 1025 characters (in case of bit-string labels, and special
or non-printable characters). But this introduces backslashes ('\\')
and makes it impossible to satisfy the "digits-and-dots"
requirement.

You would effectively have to control the DNS server, or spoof its responses, to get the software to accept a suitable exploit.
No offense but what's the evidentiary basis for these statements? Are you in the insurance business, or in the lock business?

I work for a company that makes many types of locks and currently is developing NFC and BLE solutions.

The fact is, any kind of lock is vulnerable to a determined and skillful attacker. There are BLE locks that "phone home" to check a password before they'll open; there are NFC locks that are actuated by RF-powered NFC chips that are almost un-crackable except by the Chinese Army or similar organizations.

Then there are conventional badges, key cards and physical keys in universal use, that are rather easily cracked or copied.

Vulnerabilities are already factored into insurance rates. The advantage of a connected BLE or NFC entry system is that it can require a remote login before the door will open. For example, enter the BLE region, the app pops up and prompts you for a PIN, then actuates the unlocking mechanism using an encrypted protocol. No technology is perfectly secure, but these technologies do present great possibilities for improving on current approaches to access control.
The issue isn't the quantity of memory - there is physically 4GB of GDDR5 memory soldered to the board, yes.

The issue is the number of ROPs. If the board had 64 ROPs - as advertised - then there wouldn't be a fast segment and a slow segment of memory. All 4GB would perform equally, there wouldn't be access contention between the fast segment and slow segment, etc.

There's no cute marketing spin you can put on the board being advertised one way and quietly showing up with 1/8th of its memory subsystem disabled. NVIDIA isn't some fly-by-night hardware company like Butterfly Labs or something.
Then sue Alexander and Clapper for their roles, and lay the case that their actions were not in the scope of the office they held.

Then the government says nothing, and bad people get prosecuted.
I stick to equities and food commodities for trading. Trading oil at my scale (<$10MM/year volume) is like walking into a Mos Eisley cantina inebriated and with cash hanging out of your wallet. I'll make you a Long Bet [1] though if you're interested (a beer of your choice if you're right).

[1] http://longbets.org/
I remember something similar that enabled you to embed machine code in VB6 programs, which involved a magic constant that was sort of an entry point into a string containing opcodes. I don't remember the specifics, it's been a while, but nowadays it's very likely a horrible no-go anyway because you're executing data.

Still, was a nifty trick that allowed you to get more performance out of a language that wasn't very fast to begin with.
Here is a diff removing the vulnerability: https://sourceware.org/git/?p=glibc.git;a=blobdiff;f=nss/dig...
The upstream patch is dated "Mon, 21 Jan 2013". Does this affect Redhat and Debian because they use older glibc versions and didn't backport this fix?
Assuming they're equally effective, your solutions all sound like more work. Especially if you're talking about some combination of the above.

If I actually wanted a solution, I'd probably go ahead with the government one, given your alternative.
I didn't have anything related to this on my Github account, but I just uploaded the data files in case that is useful to anyone.

https://github.com/andychu/debian-wheezy-metadata

(NOTE: The repo takes up 300+ MB on my local disk)

I chatted on #debian IRC about this a little. It seemed like one person thought doing all the archs would take up too much space. So far doing it daily for over a year for two archs has been manageable. I think you simply have one repo per arch, instead of having multiple archs in one repo like I have here.

I will try to get the code up... if you think you will use it you can ping me on github. I think this should be in Debian itself, and actually supported by debootstrap, but so far I am just wrapping it rather than patching it. (I started off trying to patch it.)
Glancing over the patch, this appears to be the crucial part:

size_needed = (sizeof (*host_addr)
- + sizeof (*h_addr_ptrs) + strlen (name) + 1);
+ + sizeof (*h_addr_ptrs)
+ + sizeof (*h_alias_ptr) + strlen (name) + 1);

Doesn't it seem disappointing that some programmers, for whatever reason, just can't seem to count correctly?
I'm sad to see that HN has no sense of humor. So sorry to disturb everyone's reverent news browsing.
If you feel attacked by this post, then you are not in the target audience that Jacques is trying to talk to. It may make sense for you to be in technology, but you're not in technology for the reasons that he was.

If so, then that's fine. He's not trying to change your mind, and his career advice isn't appropriate for you you. Move along. Find something addressed to you.

I'm not in his target audience either. I enjoy interacting with people and ideas more than getting a computer to do what I want. This is why in my teens I spent more time reading math books than playing with computers.

But I know and respect a lot of people who are like him. I get where he is coming from. And I've seen enough of them burn out of their dream profession that I think he has a point.
That Didn’t Need to Take an Hour
Oh, this makes sense. I understand how an emperor or an otherwise important figure would be able to have a huge dynasty while being able to have the offsprings stay alive to keep the bloodline alive.

However, in this exemple (Charlemagne), I doubt it unless he had a lot of bastard children.

In the example of my grandmother, she had up to 20 children (excluding those that didn't even make it to birth), but only 17 of them lived. The poor still had a lot of children, albeit with more issues, so I doubt the social capital would help here.

I have no idea, really. But this in an interesting conversation.
I don't confuse Greeks with their representatives.

However, and leaving out the current bailout, the reason for Greece to be in the situation it is is because successive governments have provided lavish benefits that they couldn't pay for.
Looks like it (about:config?filter=loop.CSP)

default-src 'self' about: file: chrome:;

img-src 'self' data: http://www.gravatar.com/ about: file: chrome:;

font-src 'none';

connect-src wss://.tokbox.com https://*.opentok.com https://*.tokbox.com wss://.mozilla.com https://*.mozilla.org wss://*.mozaws.net;

media-src blob:
I'll grant that breaking into a house is really easy, but it stops both the honest and the lazy, and most of us are usually pretty lazy.
I wonder if he can actually make it as a modern developer instead of an aged consultant. He bemoans things like logos and holds up his ugly page as perfection, but in the modern ecosystem there will often be four or five apps that do the same thing as you and design and looking good actually makes people happy and lets you get more users, the only thing that counts.

He started in a time where if you just made something work people thought you were awesome. Now you have to make it work, make it look good, have a better user experience than everyone else, charge less money (often meaning funded startups instead of bootstrapping), not eat up battery or data plans, etc.. His dislike of design doesn't really make me think he has much of a chance any more.
15 Bitcoin Predictions for 2015
Reading over the comments it seems to me that there's some misunderstanding of introversion. There's a large difference between being introverted and being socially isolated. A healthy introvert rarely goes over a day without speaking to someone.
Keep in mind introversion does not mean that someone is against seeing people at all.
Kevin Shares 7 Little-Known Factors That Could Affect Your Conversion Rates
Indeed, and this is something common in startups/tech companies.

When someone tells you there's no hierarchy in their company, there is, you're just not high up on it and no one's bothered writing the hierarchy down for a number of reasons - most commonly for Cool Startup Culture Points or because if the hierarchy was drawn out on paper it would scare the bejeezus out of anyone watching.

Unspoken or undefined hierarchies don't mean you don't have one, it just means there's a covert one that isn't subject to scrutiny or accountability.

Which isn't an endorsement for documenting every minutiae of rank and hierarchy, but rather an acknowledgment that hierarchy exists regardless of how badly you want it to not exist.
thanks for this suggestion! I will check out buysellads.
There is a price difference for people who switch from the previous crowdfunded Lockitron to the Bluetooth only Lock with no Bridge. The difference will be refunded when we start shipping. More details in the Bolt FAQ: http://help.lockitron.com/article/95-whats-bolt-and-how-will...
The Qualys security advisory says that it was fixed independently in 2013, so RHEL6 and 7 might already have the fix.

http://www.openwall.com/lists/oss-security/2015/01/27/9
That's one way of doing it.

I, however, do it differently. I start from a high-level of abstraction, and work my way down. At the top level I might have a function called "ImportData". I write that call down, then move to the next line where I write "RunDataAnalysis". At that point, if I decide to move down and implement the second function, I forget about what ImportData does, how it does it, or whether or not I've implemented it.

All I know is that the data structures are populated with the "Imported" data, and proceed to code along with that assumption. Obviously if I test, it won't work, but that's for unit-tests. You do unit-tests, right? Can't do that meaningfully with giant functions, but I digress.

To me, functions are a form of "interface". It delineates responsibility and expectations between different bits of code. I'm not a chaotic and/or artistic programmer and I'm definitely not a genius wunder-programmer that can hold the entire functioning of the program I'm writing in my head at any time. What I can do is systematically break-down a problem into component pieces, negotiate their interaction, and make it solve a problem.