skysight-inc/HackerNews huggingface dataset:
I got notified by anthem.

subject line:

Important Update from Anthem, Inc.

And the first paragraph is:

Safeguarding your personal, financial and medical information is one of our
top priorities, and because of that, we have state-of-the-art information
security systems to protect your data. However, despite our efforts, Anthem
Blue Cross was the target of a very sophisticated external cyber attack.
These attackers gained unauthorized access to Anthem’s IT system and have
obtained personal information from our current and former members such as
their names, birthdays, medical IDs/social security numbers, street
addresses, email addresses and employment information, including income
data. Based on what we know now, there is no evidence that credit card or
medical information (such as claims, test results or diagnostic codes) were
targeted or compromised.

So yeah, safeguarding is apparently not that much of a priority.

This from a fucking company that uses an online payment system that limits your password to 8 characters.
"When you start using a seemingly mature HTML5 api, and find that it doesn't work as expected in all browsers, what recourse does one have?"

File bugs. Chromium and Firefox are not black boxes.
GitLab reduced merge conflicts by 90% with changelog placeholders
for i worked in several similar companies, indeed, its extremely rare that such data is well protected.
it works under the assumption that if its not been broken into until now then its safe enough.

obviously that's broken logic since..

- you're not compromised by default/when the business starts

- when you're compromised, you probably don't even know it. you might find out in a few years if lucky.
The survey was about retail apps, which Facebook is not.
> libmscordaccore is that. I’ve heard that it “helps debugging”, but at 4KB, I have my doubts. No, this is just an ugly wart growing off an otherwise prefectly packaged piece of software. Best ignore it.

If it's anything like MSCORDACWKS (which "mscordac" alludes to), it's an absolutely crucial piece of code. Basically it's an abstraction layer over the way .Net lays things out in memory. It's aware of the .Net heap structure, threads, stacks, object headers, you name it: it knows how to abstract it and read it.

This means that if there is a production issue at a customer, you can grab a memory dump from them and this one tiny DLL - and then you can start digging into things (Microsoft actually now provides differing versions on their public symbol servers: so you only need the memory dump nowadays). I'm pretty sure it's also how Visual Studio interacts with .Net memory.

Unlike other environments where you have to have the same version as the customer, or at least a compatible one.

Microsoft ships it with the .Net installation package and you [Mac users] should always keep it next to coreclr, too. Literally, deploy it with alongside coreclr and mscordac. Never let them be apart, ever. Don't just ignore it, having the correct version will save your bacon one day. 4KB that will wrangle gigabytes of dumped memory for you.
RapidShare bids goodbye
ctrl+f "rust"

No? Too bad.

Okay, I'm in with the rest. I'm spoiled, used to seeing the year in the titles of HN posts when it's old. My bad.
As in you missed out on good restaurants due to "too high" of a rating that you didn't trust but should have? All rating systems (IMHO) can be gamed and I've yet to find a good way to prevent this other than Amazon's "Verified purchase" which I love. Maybe yelp would be better if you had to somehow prove you ate there? At that point restaurant owners could produce fake "proof of purchases" for the fake (good) reviewers to use.
Precisely: identity management is a house of cards. It actually seems, at this point, completely indefensible for the credit system to rely on name, SSN and address as identifiers, since there's really no guarantee that the person who ran out on a loan over here who claimed to have that name/SSN is the same as the person over here who is applying for a mortgage who supplies the same name/SSN.

If a bank got screwed on a loan deal by someone, and all they have to claim it was youis that the person told them your name and SSN? Really, at this point, with so many SSNs leaked, how can they justify blacklisting you with a credit check bureau?

I think you're right. Publish them all. Force banks to come up with a better solution.
Its basically one of these:

http://en.wikipedia.org/wiki/Zinc%E2%80%93carbon_battery

The carbon rod never corrodes. If you want to be picky its more of a zinc-manganese battery with a carbon rod as a non-corrosive wire but whatever.
RMS is becoming ever more irrelevant with time.

In the same way BSD software has been ever more present, free software is still going strong, not in the way he likes, though.
Go and Rust may be alternatives theoretically, but can you create rich cross platform GUI applications that utilize OpenGL or other fast drawing libraries with either?

That is one of the primary domains of C++ - e.g. photoshop and similar tools.

Go seemed more oriented towards server programming.
The Moon Like You Have Never Seen It Before
There is also overplaying your hand and making the other person leave the room.
How Facepunch Studios Uses Sentry to Build Rust
To be fair, Delphi was pretty hard to get down to that kind of compactness because of dragging in the VCL as a baseline.

You could technically program without it in standard event loop, but then the code would have been unfamiliar enough to other Delphi developers to perpetuate some of the same issues.
Sounds awesome, do you have any performance stats?
Plain ol' LAMP stack here (with some extra goodies thrown in - memcache, varnish, redis). You should use what you're most productive with, not the new, shiny thing of the day.
They offer a TLS client and server interface, so you can have your own host act as a proxy.

Try this:

$ mkfifo /tmp/tlspipe
$ nc -l -p 40001 </tmp/tlspipe | tee /tmp/tlsconvo | nc ownme.ipredator.se 10000 > /tmp/tlspipe

Then visit http://ownme.ipredator.se:10001 from that same host (curl or firefox or whatever). Now look at /tmp/tlspipe.

Disclaimer: I'm completely unfamiliar with named pipes or tls, but I think this is what they mean.

EDIT: This should also work:

$ mkfifo /tmp/tlspipe
$ nc ownme.ipredator.se 10002 </tmp/tlspipe | tee /tmp/tlsconvo2 | nc ownme.ipredator.se 10000 >/tmp/tlspipe

EDIT2: Just realized that the above only captures one part of the convo. Try this:

$ nc ownme.ipredator.se 10002 </tmp/tlspipe | tee /tmp/client-to-server | nc ownme.ipredator.se 10000 | tee /tmp/server-to-client >/tmp/tlspipe

Now you have the full back and forth. E.g.:

$ strings /tmp/server-to-client
sYcdI*
Cambridge1
BTC Pinata Team1 0
ocaml-tls@h3q.com0
150207183718Z
150329183718Z0$1
tls services0

...
What? You haven't heard of Firefox OS? You totally should! Check out this blog post for a small sample of the amazing power of Firefox OS: http://binary-choice.blogspot.com.br/2014/08/firefox-os-is-d...

Seriously, if you want more mobile OSes, but you're not even considering Firefox OS you should probably shut up and start writing your super-powerful-mega-winner OS yourself and stop complaining.
If there is a problem, then file a bug! It's an open source browser!
I found that stat crazy! We are so caught up in the SV echo chamber that it almost doesn't seem believable. However, just strengthens Apple's position given their breakthrough year.
> This same lamp could simply have a wire between the carbon and zinc, with an on-off switch

Seems unlikely that there's no trade off to this, can anyone confirm? Also, it has an on-off switch.
For the "some kinds" of applications implicitly under discussion, the ones where even in 2009 you'd be looking at C or C++ because, say, Python simply would not do at all, no. It IMHO has a really compelling bang-for-the-buck on the ease-of-use vs. performance, but it is not 100% tilted towards the performance or control side, which makes it unsuitable when you really need those thing. I think it's taking off because it has substance and not just hype, but look at all the "we switched to Go and we love it" posts and you'll see a pattern; they're mostly right in the domain that Go was basically written for, scalable network servers.

The thing that may replace C and C++ right in the niches that are keeping those now-ancient languages current is probably Rust. If successful, Rust will grow beyond that, but it's the only thing squarely pointed at C and C++ right now that seems to have the momentum behind it. Though if you want something right now, you can also try D.
Most Go apps can get better than advanced Java GC level allocation-memory performance simply by applying "sync.Pool" (http://golang.org/pkg/sync/#Pool) on applicable pain points.

Its also worth mentioning using a custom allocator + mmap is possible in Go if you really needed it.

Go is also better than Java about using stack allocation for objects.
This seems like it could be ripe for abuse... Want to obfuscate your competition? Wipe them off Google maps street view. I wonder if they have various safeguards.
Is that really the case? There seem to be an awful lot where it's not: Bardot, Paris, Nantes, Flaubert, Monet, Camus, Dumas, Rimbaud, Truffaut, Roux, Lacroix, Godard, Foucault, Bordeaux, Versailles, Calais, Maginot....
This may be a blessing in disguise as it seems that a deluge of phishing attacks ensued, obviously, after this announcement. Whether or not the attacks are directly attributed to leaked information or the attributed party. Be vary wary of any emails that anyone does or has received.
There is a great amount of precedent here. Total war was waged in Europe, attempts by all sides were made to disable or degrade the enemies grid, to varying levels of success, but it was never completely suppressed. The same with rail, which I bring up because if you had one of these on a train with electrified track, it would be a pretty significant threat. I mean you could devastate London from Marquise(or from a train rolling down the coast of France.)
> meaningful

With time as the x axis, I see a downward slope in this metric.

In some relatively small number of years, you'll have a drone the size of a mosquito which can fly to the home and take incredible high-resolution 3D-captures, all while either evading the hypothetical security or, more likely, blending in with existing drone noise.

At that time, how meaningful will be the difference between gleaning information about the appearance of a publicly viewable object by direct optical intake or by some 'virtual' mechanism?
wikipedia is a little wishy washy about "may leak". Much more realistic to write "will leak".

http://en.wikipedia.org/wiki/Zinc%E2%80%93carbon_battery#Lea...

Kept dry, it should store infinitely?

The greenwashing and poverty-washing or whatever is pretty awful. But an eternally storable battery is kinda interesting.
But oddly not http://www.cryptopals.com/
I'll keep saying it: give me a modern language that is cross platform, results in reasonably sized code footprints, is fast, and that can be used to ship code on all the major OSes, and I'll switch. Until then C/C++ is the only way to achieve that.

It's analogous to the situation with JavaScript on the web. JavaScript is the language of the web because JavaScript is the language of the web. C/C++ is the language of systems because C/C++ is the language of systems.
Thanks. I want to be clear here that I'm not disparaging work in rate-based artificial neural network models or deep learning. I just wanted to dispel the idea that the so-called 'large deep neural networks' that this article talks about are as powerful neuron-for-neuron as biological networks. They're not.

But that's not to say they're not powerful. They're an interesting area of research and you can certainly do some interesting work with them.
I think it's a combination of video games and fake corporate videos from movies. This seems like something that would be playing on a TV in a near-future sci-fi movie. Something out of RoboCop or those cut bits of Terminator 2 with the guy who invented the things. Hell, short-circuit for a more lighthearted take on it. We've been bombarded with these sorts of videos being a precursor to bloodshed since at least the 80s.

Maybe the protagonists of a movie are in a research lab that's mysteriously gone silent, everyone seemingly having disappeared without a trace, and they watch this video, trying to figure out what's gone wrong. They flip through a couple more before finding the one where these things start killing everyone. Other 'bots drag off the bodies, and cleaning robots spin across the floor, wiping up the blood. While the characters' eyes are glued to the screen, the viewer sees the "dead" half-disassembled dog-robot on the workbench behind them start to silently shift, then slowly stand up.

See:

http://tvtropes.org/pmwiki/pmwiki.php/Main/ApocalypticLog
It's not just Anthem, it's potentially anyone in the BlueCross network.
Two Approaches to Calculating Bonuses (2014)
1. Do you think the people who will be using this are actually going to read this marketing copy? (hint: it's not in their language, assuming they are literate)

2. Their current systems involve constantly buying and rationing kerosene, candles, and batteries. Do you think 'rechargeability' is their primary concern?
Isn't RMS' main issue with LLVM that people can create proprietary plugins and those plugins benefit when LLVM benefits? How exactly is this different than if a company were to make proprietary extensions to Emacs and sell them? Does the Emacs license forbid against non-free extensions? Ultimately, it's not LLVM's problem if people create non-free extensions. You could argue all of Gnu/Linux is bad because some proprietary software runs on it. I don't think that's a route we want to take.
Show HN: CodeCast – Realtime Code Editor for Online Instructors (& Students)
GitLab B.V. CEO here, happy to answer any questions and comments about how to reduce merge conflicts.
Don’t Have Good Leads to Sell To? Then Get Off Your Ass
It's almost like refusing to be connected to the internet and consequently being an entire day behind important conversations-in-progress could have some sort of downside.
Certainly not in every case but there are a lot of times when disarming is not an option. I don't know if you have had any kind of defence training but I have and disarming an armed opponent is one of the hardest things to train for. More often than any one would like the police really have no choice.
I would surely make time for KnockoutJS. But currently I have been following flux which is quite easy to implement althgh I am still not sure how it works with routing, 3rd party libs like some charts etc.
Why all the negativity for Node? Seriously, lots of good developers have spent their time developing this project and all these comments are just about how io.js is so great or node failed at x. As far as I can see this looks like good news:

"... to establish the Node.js Foundation, which will be committed to the continued growth and evolution of Node.js, while maintaining a collaborative environment to benefit all users."

An open source project is getting a stable backbone. Come on people, this is great news for developers.
Anthem said they wouldn't be sending emails, so that may have been a scam:

"Members who may have been impacted by the cyber attack against Anthem, should be aware of scam email campaigns targeting current and former Anthem members. These scams, designed to capture personal information (known as "phishing") are designed to appear as if they are from Anthem and the emails include a "click here" link for credit monitoring. These emails are NOT from Anthem."
Ask HN: Developer bootcamps in Portland, Or
One of my wife's friends is looking to move in to web development, and is looking for a developer bootcamp in the Portland area. He has no previous programming or web development experience, and is not able to move or attend a school outside of that area. Any recommendations, particularly from people who hired from the program or former participants, would be greatly appreciated.
That's also a misleading way of framing the issue. Brown wasn't charged with "criminal linking" (an offense that does not exist). He was charged with deliberately and knowingly assisting in the breach of Stratfor, and subsequent maximization of the damage from that breach. And remember, he was convicted of doing that; they just pursued a different vector for it than the link. Keep in mind also, they didn't just work back from people who posted links. Hector Monsegur ratted Brown out.

Most criminal statutes look insane if you ignore the mens rea component and consider only the actus reus.

Probably the right way to address your comment is to acknowledge the sentiment behind it. It would be ominous if prosecutors trawled the Internet looking for the wrong kinds of links --- people RT'ing updates from Anonymous, for instance, or relaying already-public newsworthy facts from breaches --- and fit accessory liability cases around those innocuous acts. It is worth being wary about prosecutors doing that, because computer crime laws are poorly rigged and set up terrible incentive systems for prosecutors.

It's just that those concerns are not yet vindicated by the Brown case.
True. Agree about the size. There is work in progress that will allow a Go executable to be used with shared libraries.
> how can they justify blacklisting you with a credit check bureau

On the last Anthem story, someone linked this Mitchell & Webb audio clip: https://www.youtube.com/watch?v=CS9ptA3Ya9E which completely nails it.
About 2 months ago only the house was blurred. Now the whole street is gone.
+1 because the existence of fdroid had not penetrated the rock under which I live before now.
That book kind of begs for the performance.
This is one of the greatest attributes of open source; the ability to fork. Both io.js and Node.js can succeed independently of each other. The server side javascript community is as vibrant as ever -- with adoption ramping up exponentially among big enterprises and startups alike.

The foundation itself is a great step forward for Node.js, and will result in much needed enterprise investment in the runtime.
The Entire Incredible Machine Game CD Audio Soundtrack on One Page
Looks interesting.

Although at it's current stage I feel it doesn't do nearly a good enough job at "looking native", which is one of the best things about the Ionic Framework.

I do remember hearing that Ionic is looking to eventually move towards a framework agnostic approach with its components. In fact, a lot of the library code is already somewhat separated from Angular itself by layers of abstractions.

I personally can't wait for the day when I can use React + Om + ClojureScript with Ionic components. =D
The problem is that no matter how clever you make your algorithms in the end dating is about people. And if the person isn't interesting then nothing else matters.

There are other things worth optimizing in ones life besides technical sophistication. Interpersonal skills are a big one.
* MongosDB
It follows that the question is then next to useless on the form.
Nonsense. People are writing things in PHP all the time. You just don't hear about it because it's not the cool, new, shiny thing of the week.

Over 34,000 repos created on Github since Jan 1 that have PHP as the main language: https://github.com/search?utf8=✓&q=created%3A%3E2015-01-01+l...
The Emergence of Polymorphic Cyber Defense
I don't see a single factual statement here.

io.js spent part of December in a rapid incubation, and released in early January.

It's stable for me on several production applications, but what does 'stable' actually mean, vs 'beta'.

Their community started open, and remains open, and has a larger contributing base than node by more than triple. They have an open technical committee, with meetings that anyone can attending (and I have).

Here's the spade: You're wrong. Actually do your research, have facts that you can back up, and try again. Your tune will be very different when you have the facts.
Just reading Bing West's A Million Steps, so that obviously is affecting me, but the first thing I thought was this would be great for saving soldiers from getting blown up by IEDs.
I think for quite a lot of time Node wasn't doing much. The rebellion formed IO.Js. But what they forgot is still IO.JS is fork of Node. Only people like us who follow Node closely aware of IO.js thgh. Node is still preferred everywhere. It can still catch up with all the new features like ES6/7.
This is extremely dumb. We already have units powered by a Zinc-Oxide reactions in a conductive medium. They're called "bad batteries". They got replaced by things called "better batteries". Any distribution challenge of shipping new anodes every 6 months is going to be equal or greater than the challenge of shipping a 24pk of new batteries.

It's neither sustainable nor cost effective.
About a year ago I posted "node.js needs a new home" on the mailing list. It started a minor s### storm and a couple of local IBM guys went down to talk to Joyent, which eventually led to the whole advisory board / foundation initiative. Mostly it was all back-room discussions between companies taking place in private from the wider community. They're great people, but that isn't really what I had in mind.

IBM's cloud offering runs on the PowerPC architecture, and older versions of V8 won't run on it, so they can't offer Node hosting. They ported a private build of Node to run on PowerPC using a new version of V8, but Joyent has so far refused to upgrade V8 despite having a pull request with all the work done. It looks a lot like Joyent has been dragging their heels on V8 updates just to fend off an IBM cloud service for node.

The first five words of the announcement are: "Joyent, IBM, Microsoft, PayPal, Fidelity". That says a lot right there. StrongLoop, NPM and a bunch of others are excluded, the whole thing seems to have been baked up in private by people who aren't core contributors, and then sprung on the community like it's some great thing.

Maybe it's a step in the right direction, but as it stands I'd expect this foundation to be about as useful as another hole in the head. I've seen enough corporate bad behaviour from some of them to not care about their special little club right now, and I don't think it will win too many people over.

[Update: Fedor posted about it here https://medium.com/@iojs/io-js-and-a-node-js-foundation-4e14... ]
Heroku supports io.js
There's a problem with metrics over UDP: an overloaded server will not be sending its metrics, so it will appear as if it's doing ok.
You're entirely missing the point if you think this is just about ES6 or even a better v8.

There are a number of core contributors to Node.js that are unhappy with Joyent's stewardship of node.js. The core contributors want to work on the node.js core and provide new features. Joyent has not enabled these core contributors to make these improvements, and have seemingly alienated some great developers like Ben Noordhuis for political reasons.

Hence the io.js fork.

It's been clear from the beginning that the io.js folks are willing to work with Joyent and node.js, if Joyent is willing to give up its iron fisted control of the project.
This assumes, though, that he would have been put through everything you describe even if he had only shared a link. But, as described in detail above, this was only a small piece of the government's case. I seriously doubt the government would ever have brought charges if all it had was the posting of a link.

We should also think a little bit harder, I think, about whether posting a link is never criminal. It seems to me that if someone posts a link to intentionally further a criminal conspiracy, it seems like it could plainly, and unproblematically be criminal. Accomplice liability in particular makes lots of other things, that would otherwise be innocent, into crimes when they are done with the wrong sort of intent.
The Juicer: Phone-To-Phone Charging Cable