skysight-inc/HackerNews huggingface dataset:
> Google’s Chrome browser is not vulnerable to the FREAK bug, but the browser that comes built into most Android devices is vulnerable.

Is this true? Both Chrome on my mobile device and on my laptop show as vulnerable on freakattack.com. Both have outstanding updates[1]; however, if only mean the latest version is not vulnerable, I feel like the message that we need to send the layman is "update, now (and really, always)" not "is not vulnerable"

[1] which Chrome wasn't able to actually download earlier, but all seems good now.
Hmm. Agree on that Elon is like the creator in Matrix Movie :)
Most people think child molesters are everywhere and no place is safe. That's why this dude was busted.
C Questions and Answers
TIME_WAIT: http://vincent.bernat.im/en/blog/2014-tcp-time-wait-state-li...

"to prevent delayed segments from one connection being accepted by a later connection relying on the same quadruplet (source address, source port, destination address, destination port). The sequence number also needs to be in a certain range to be accepted. This narrows a bit the problem but it still exists, especially on fast connections with large receive windows."
reinterpret_cast<>?! that's implementation-defined. not to mention type-aliasing which is undefined behavior. what you want is:

template<typename T>
typename std::enable_if<std::is_trivial<T>::value, T>::type
getValue(std::array<char, sizeof(T)> bytes) {
T toret;
std::memcpy(&toret, bytes.data(), sizeof(toret));
return toret;
}

there is no-performance hit compared to your function. this is a type-safe and well-defined version of the function above.

btw, was your usage of trivial a pun? if so, that's amazing. we need more type traits puns.
True that for people work in night shift will have fun with it. Also countries like Denmark where they hardly see sun will be glad to have this technology.
Ouch. Steam box stuff and VR not that interesting? Though I'd really love for them to FINALLY announce a Half Life sequel.
If you need someone in Seattle, hit me up.
FastMail Refuses to Fix Security Issue Allowing Customers to Send Malicious Code
Maybe. I was warned off against talking about my incident to anyone. You really want to piss off the prosecutors and cops?
It might be a matter of local experience, but in junior high school (late 80's), if your parents weren't divorced or both parents didn't work, you were the odd man out. Like there was something weird going on with you. The divorced kids were definitely the "cool kids" that year by a long stretch.
Or, as Thomas Jefferson did, you overwhelm them with excessive preparation, so that they are reduced to making minor suggestions and your vision goes through.

http://www.johndcook.com/blog/2011/03/03/thomas-jefferson-me...
Well they are 99.9% garbage anyway.
Pivot. I believe the next step is to try to acquire a second round of funding.
They've begun to realize that owning a platform is at least as valuable as owning an engine and game development shop.
nVidia has had a service superior to OnLive called Grid which is going to be made publicly available in the near future. They claim ~150ms of lag.
This reminds me of tests I took in earlier CS classes. Knowing those things are utterly useless in practice.
Demystifying the meaning of 'static'
What about accidental cheaters?
> But I'm not scared of being prosecuted in one of these cases

So you have a lot of free time and money to spend on lawyers?
> Apple lambasts everyone else's designs until they adopt them.

Everyone does this.

It wasn't long ago that Samsung was laughing at Apple for moving the headphone socket to the bottom. Guess where it is on the new S6.

The real question is: does a company adopt a competitor's design because experience in the real world ultimately proved it to be the better design -- or are they adopting it superficially to defensively diminish perceptual marketing differences?
From a purely mechanical point of view, writing is fairly hard. You have to do more than bring a pen into a position, you have to apply some pressure, as well.

I'm currently building a whiteboard plotter (as opposed to a pen) and it is a PITA.
Have you even used Dropbox before? Or TortoiseGit? Doesn't sound like it.
All About Kamagra Polo
I really like the Sync UI, the functionality and the speed.

But the last time I looked at the forum there were several unanswered posts about serious bugs where files were deleted on both sync peers.

This scared me away from using it.

Now, I'm not sure if it being out of beta means that these showstoppers have been fixed or just ignored.

The stated primary goal of sync is that your files will always stay private. I wish the primary goal was that my files were not deleted.

Since it's closed source perhaps they could do better by documenting their testing strategy and coverage to convince potential users of the quality of their software.

It also scares me that bug reports are managed on a forum rather than through a bugtracker: http://forum.bittorrent.com/forum/108-sync-troubleshooting/
>Mostly they send a ton of email.

I wish they would allow sending a weekly or monthly digest. I don't find a lot of relevance to the neighborhood content available to me (certainly not enough to be justified by a daily email) but wouldn't mind getting some content occasionally to get a rough feel for what is going on with my neighbors.
Are there alternative proposals at this point anyway?
Thank you. Goes to show that even technical people can misunderstand how tech works and assumes the worst. We definitely live in a post-Snowden world.
Java Interview Bootcamp: EBook for People Preparing for Java Interviews
Not to mention the ethical implications of supporting them as a customer.
It's not a problem for consumers, but for indie game developers it may be. It's already hard enough making your money back with a 'good' game, the break even point could rise to 'great', with only 'amazing' games making decent money. Again, definitely not a problem for consumers but personally I don't want the video game industry to share the fate of the music industry.
I think you all are being too nice to Apple.

I had a similar experience as the blog post author. I spent many hours battling generics and the huge forest of (undocumented) protocols to do something seemingly trivial. I just gave up rather than try to pin down exactly what was wrong in a long and detailed blog post.

The prevailing answer to everything seem to be: Write a bug report to Apple and use Objective-C (or Swift's UnsafePointer and related).

This ignores what I think really is the issue here: Swift has an overly complex type system. This picture:

http://swiftdoc.org/type/Int/hierarchy/

Tells a lot. And this is from unofficial documentation that has been generated from Swift libraries. When you read the documentation Apple provides there is little explanation of this huge protocol hierarchy and the rationale behind it.

It seems to me that: Swift has been released in a rush with bugs even in the core language and compiler. Lacking documentation. And of course even a larger number of bugs in the IDE support, debugging etc.

Secondly: Swift battles the problem of easy-to-understand typesafe generics like so many other languages only it has it much worse: It carries a lot of stuff from Objective-C and it has to support easy interoperability. Plus it has ideas like not allowing implicit conversion of number types (requiring an integer added to a double to be explicitly converted to a double) causing the big type system to show it's messy head again and again.

I really want to love Swift but it will take years for Swift to be as clean and productive as Objective-C.

I my opinion what Apple should have done was to create the "CoffeeScript" of Objective-C. A language that essentially was Objective-C in terms of language features but with a concise syntax.
Yes, gun laws and freedom of speech is usually cited when comparing personal freedoms in the US and Europe - and I agree, it's one aspect of personal freedom (and Switzerland is somewhere in between there btw.). In my opinion however, the differences in these two areas are rather marginal when it comes to how life plays out. To me it comes down to this: Let's say I'm an Alien from outer space who tries to integrate into human society. How free am I to do whatever I'd like. Let's mount Maslow's pyramid.

* changing the atmosphere with the gas I like to breath didn't go over too well - got imprisoned for a while, will not repeat.

* eating a human was even worse! After decades of imprisonment and therapy in Europe they actually let me free again, my friend in Texas wasn't that lucky. Wouldn't recommend.

* Alright, I've learned that human life is sacred and that I shouldn't try to change the environment too much that humans like. Next I had to get was some food source. After searching through what humans throw away (tasty!), some humans came and brought me to a place with a roof. I talked to some other human with a suit who hooked me up with some idea of theirs, I think it's called a 'bank account'. I learned that I can use that to go to a 'store' and exchange that thing using some electrons with fresh food. Pretty neat!

* Good news! That suit guy even organized a home for me! Well, the thing is, other humans there didn't quite like my morning roaring rituals, so I had to give them up. Noise is not such a good idea here, especially when silly humans are 'sleeping' - whatever that is, noone could explain so far. Some guy even called in other humans that came in a dress with the word 'police' on it. Was a bit scared at first, but they just explained a bit and went away.

* Wanted to paint the outside a bit nicer in traditional Qrkzsu Green. Something strange happened, was sent to a guy that tried to teach me how to integrate. Alright, I got most of it now I think.

* It's 40 years later now, nothing much happened. Except I wanted to visit another place that's always in those moving pictures they show using many more electrons. Tried to drink human's version of Grigrog on my way to their own garbage facility. That wasn't a good idea, took a few days to get free again. Wanted to sleep on something they call a 'bench', but apparently it's only for sitting.

Ok maybe I've gone a bit far off there ... ;).
Yeah. It only really works if it's not the norm, i.e. it stands out. If every donation thank you letter over $20 starts being sent out this way, then it becomes worthless in a hurry. The other downside is that it encourages outsourcing the personal touch. If you're a charity, you should individually reach out to your large donors, not outsource that to a faux handwritten form letter. (Though as others have noted, politicians use robo-signers a lot.)
OK, I got curious enough I wrote a small console game to test reaction times.

It turns out I'm not nearly as good as I thought. I can nail a delay of 100,200,...,900ms exactly only about 40% of the time, and within +-100ms about 80% of the time.

If anyone else feels like trying, you can do "go get github.com/erinok/howlonghowlong". Hit space to see a flash, and then type 1-9 for how long you think the flash was.

It's surprisingly fun. (At least if you're incredibly weird like me.)

I find I'll have periods of concentration where I can just nail it, and then it'll leave me, and I'll be sloppy.
thanks for the straight answer to that! hope it works out.
... or, for that matter, "What computers still can't do" by Hubert Dreyfus.

> There is no path, no one has a path

This seems like a very difficult statement to support, a claim that is consequently far less rational than, say, "deep belief networks' ability to automatically extract meaning from real-world data will increase in scope to encompass broader and broader domains, eventually including natural language."

We have billions of examples of human-level intelligence walking around. Humans aren't magical, and our ability to create computer simulations of real world phenomena is steadily increasing.

Furthermore, the past decade has seen multiple machine learning triumphs that many AI researchers thought were 25+ years away: self-driving cars, machine translation, high accuracy speech recognition, visual image content extraction. We have been continuously surprised, and these surprises are unlikely to stop. There's no reason to believe that human-level intelligence is particularly special or difficult to achieve -- those asserting otherwise have the higher burden of proof.
It is just a way of thinking :)
Chronicons – 110 icons designed for the Apple Watch
Most hours of the day, I wish I hadn't upgraded my iPhone 5S to a 6 -- but I understand the superficial "pull" of the bigger screen is almost impossible to avoid, which is why I still use the 6.

Believe me, there will be a iPhone 7 Mini. The 4 inch size is just too sensible to abandon.
It is real i guess.
If you're using AWS Elastic Load Balancer, then the quick fix is:

1) Select the load balancer you want to edit
2) Click the "Listeners" tab
3) Click "change" under the "Cipher" column for the HTTPS row
4) Select the most recent pre-defined security policy, from 2015-02.

This should get you an A on SSL Lab's test[1]

https://www.ssllabs.com/ssltest/
What an awesome read. Thanks for linking.
The most frugal approach might be to consider a trackball, followed by a full computer drawing table (e.g., http://goo.gl/qlHnlz or equivalent). Depends on the nature of her tremor or shake. Alternatively, get her a gaming mouse and turn the dpi sensitivity all the way up such that any movement is translated into minute screen movements.

There are dedicated hardware vendors, found on rehab sites such as http://www.rehabmart.com/product/adapted-wireless-computer-m... that you might consider browsing. I had a link to a product that seems to have gone out of business - it was an adapter that autoaveraged input coordinates to tone down tremors.

Finally, keeping all the keyboard shortcuts handy - http://community.linuxmint.com/tutorial/view/45 or https://support.google.com/chromebook/answer/183101?hl=en might help her.

Best of luck!
A few reasons why concatenating CSS and JS might be harmful under HTTP2. Firstly, it means that the code must be downloaded serially. Given that the per-request overhead is minimal for HTTP2, it's more efficient to download the files separately in parallel. Second, in most cases you don't actually depend on all the CSS/JS for the user to start interacting with the page so keeping things separate can mean that the perceived response time is shorter. Finally, separate resources can result in less cache invalidation when assets are changed which could make a big difference for repeat visitors.
From a Ruby monolith to microservices in Go
Aside from the other responses to this comments, this goes towards making HTTP2 requests cheap which enables a lot of other optimizations that were antipatterns under HTTP/1.1
I am signed up with this, but will probably unsubscribe soon, since it is getting really annoying. Between spam and people who just post unrelated google queries.
Artisanal spam. Why not?

It's not a new idea, though. The direct mail industry already does this. See

http://www.getitopened.com/

"NEW! Use our proprietary technology to hand-address your envelopes! We specialize in production methods for high volume mailers that will incorporate realistic hand addressing at a fraction of what it would cost to contract a workroom to do the job. Simulated fonts made from real handwriting samples are also available."

They can also put stamps on slightly crooked so it looks hand-mailed, have hand-written sticky notes attached to the contents, or include a hand-written letter on yellow lined paper.
The tin foil hat is strong with this thread. People should read up on Windows Explorer shell extensions before making comments. It's like saying regexing email addresses to check for valid input is the same as stealing emails addresses.
Hi, how would it work for something like Dragon Naturally Speaking?
Hackers steal roughly $1B from banks
I'm reposting a comment from `suckystartup` below that got tor-killed because I think it illustrates your point well. From the 42Floors blog posts that pop up so often on HN, they sometimes give the impression that they care more about "startup culture" than about their industry or product.

---

From http://web.archive.org/web/20140618142018/http://blog.42floo...

> Another quick story before I really dive into this blog post. We had a gentleman over to interview for one of our account executive positions at 42Floors. He had strong experience leasing SF office space: great resume, great cover letter, did well in our initial phone screen.
> When he walked in the door, we could hear the clacking of his shoes on our hardwood floor. He was dressed impeccably in a suit that probably cost more than my first car and was carrying one of those leathery-thingys that seemed to exist only for the purpose of being carried during interviews.
> I stole a glance to a few of the people from my team who had looked up when he walked in. I could sense the disappointment.
> We’re all happily wearing blue jeans and sneakers. It’s not that we’re so petty or strict about the dress code that we are going to disqualify him for not following an unwritten rule, but we know empirically that people who come in dressed in suits rarely work out well for our team.
> He was failing the go-out-for-a-beer test and he didn’t even know it.

I don't know where the $17 mil has gone but anyone working at a startup that displays this kind of head-up-your-arse arrogance should expect layoffs. Maybe if this company hired for skill and not for beer buddies it would have been able to close deals.
Interesting, I don't think that this has a big place in the consumer market, but I do think this could be valuable to companies wishing to make a statement in some select letters. Maybe just as that top tier "because we could" category. When you need to stand out, they could provide that opportunity.
the 10MM prize pool dota2 championship isn't interesting?...
They sold the company, and now Carmack at Oculus. It makes sense that the values of the company have changed.
C++ templates do have "protocols," they just aren't necessary. The result is that the perpetrator of a template error is ambiguous.

check out type traits: http://en.cppreference.com/w/cpp/types
and std::enable_if: http://en.cppreference.com/w/cpp/types/enable_if

"concepts lite" is a proposal to add syntactic sugar for type traits as well as enhance them a bit.

in general this is how C++ does things now: first add library-level solutions as far as possible, then add language-level syntactic sugar once the usage and implementation is fully understood.
Zyppos, crowdsourcing for cheap flights
Zyppos relaunched after a complete redesign:
www.zyppos.com

The easiest way to find the best flights and lowest fares. Use experts to make sure you get the perfect itinerary, as they compete to fulfil your needs.
Third plausible option for the Steve Jobs story: he knew his colleagues very well and just guessed what they did through their body-language. If I was going to pull off something like that on my boss I'm pretty sure I'd act differently than usual, and marketing/business-type people tend to be socially hyper-aware.
You are completely missing the point. I have better chances of being struck by lightning than ever having to deal with this or for that matter knowing someone who has to deal with this. I don't need free time or lawyers because it is, to a fairly high degree of certainty, never going to happen to me.
FL Studio 11 Crack Full Key Producer Edition Free Download
Does it work everywhere? Or does it have a regional/country focus?

Will test out today
Especially in higher-level languages, I've wished language designers would move toward using variable-size/bignum integers instead of fixed size integers (Python does this, for example). It eliminates overflow, and the need to analyze each int to see if it will overflow the type you're sticking it into.

I wouldn't mind being able to have a "RangedInt<min, max>" type either, in addition. If the bounds are tight enough, the compiler could just use the next-bigger machine integer type (and do bounds-checking, please!). I think a integral type that was always modulo the max would be useful in many applications as well (i.e., unsigned, and overflow is well-defined to wrap, but you explicitly opt-in to this behavior.) You can imagine,

int: signed, bounded only by memory
ranged_int<min, max>: integer type capable of holding anything in [min, max].
Over/underflow is an error (exception? panic? [1])
modulo_int<min, max>: unsigned, overflow wraps.
(Mathematicians probably have a better name here… "ring"?)
"usize" or "size_t": capable of holding any memory address, so useful for indexes.
native::uint8, native::uint16, etc: whatever your hardware gives you, if you really need it.

The default type a new coder would grab for (int) won't overflow on them, although there are questions about what does some_array[int_index] do, esp. if it overflows the index type.

[1] Rust has some interesting thoughts here, and I thought they did a good job of detailing the consequences and their reasoning; see https://github.com/rust-lang/rfcs/blob/master/text/0560-inte....
I have to agree with you here.

One problem with introducing it the way the article does is that it's hard to see why the variance is never negative, and is zero exactly when the R.V. is constant.

This is a very important property, to say the least.

It would be better to say you measure the "energy" with

E x^2

but that this is not immune to level shifts, so you need to subtract some constant off first. And it so happens that the optimal constant to subtract off is our friend E x.

Edited to add: The notion of introducing the ideas of a sample space and a random variable (in the technical sense), as is done in the article, and at the same time being shy about calculus, is rather contradictory. That is, the intersection of

{ people who want measure-theoretic probability concepts }

and

{ people who don't know calculus }

may be empty.
Chipotle Adds Another Pizzeria to Its Empire
Just out of curiosity what do you think Kinderheitstrauma is?
The last point means that while Netflix trusts these recommendations to be good for them today, if you are looking at this in the future, you should verify that the performance gains are still there for those changes. Perhaps you are running in a system where one or more of these no longer gives a performance gain, or is even detrimental to your overall system health.

Trust, but verify.
And to top that, not exactly an engine - but a level editor used by several Sony Studios, it also uses a framework that Sony released months ago:

https://github.com/SonyWWS/LevelEditor

https://github.com/SonyWWS/ATF (the framework)

https://github.com/SonyWWS/SLED (Debugger? for lua?)
We focus globally! We tend to find much better fares on longer flights or more complicated itineraries using our flight hackers' tricks, but we can find low fares on local flights too! Give it a go and let us know what you think.
This is true although if you're not doing domain sharding and just have your static assets on a single domain, I don't think this is a concern. Certainly the performance benefit of having your assets served by a CDN on a different domain will outweigh the cost of the extra connection. (Assuming your CDN supports HTTP2.)
I've been doing this with a simple alias and a src directory for quite some time:

alias go='GOPATH=`pwd`:$GOPATH go'
Have any of you ever seen "Rejected" by Don Hertzfeld? This reminds me of that one scene with the happy clouds.
Tangentially: (yet somehow related), you could write [1]:

> The process of converting a string template into a fully compiled HTMLbars template function that emits DOM nodes is somewhat involved. The purpose of this document is to shed some light on the process and describe where in the HTMLbars codebase these steps take place.

or you could just write:

> OVERVIEW

If the parallel is not obvious, it feels like many JavaScript frameworks are written in this overly verbose style.

1: https://github.com/tildeio/htmlbars/blob/master/ARCHITECTURE...