skysight-inc/HackerNews huggingface dataset:
> Notifying impacted sites ahead of public disclosure would have been a better move

Notifying that many effected websites is practically the same as making it public, and could've resulted in letting attackers know about this before the public (and any effected websites that aren't on your list) knows about it and is able to fix that.
Oh, I don't mind if they would price all their apples either by unit or by kg. It's just the mix and match that's designed to confuse you.

> Although Tesco will no doubt try to game the system, it is in their interest to show you understandable unit prices because they want to flog their stuff cheaper than the brands.

I'm not sure Tesco makes more money on the cheaper stuff. People who care about price and quality go to Lidl and Aldi anyway (if available in the vicinity).
No disagreement at all... I just wanted to let those know that this (at least, thus far) wasn't his fault, for those who might not have known.

I"m sure there will be plenty to hold him accountable for in the future, though there is indeed a genuine opportunity here for him to right a potential wrong.
It depends. You can digitally invite someone as well and they don't require the post card because someone else is vouching for them.
How to Get Started with Android Studio on Ubuntu
Could be more convenient in the fridge?

Though I guess it's just a ploy by the retailer. Perhaps they are trying to hit certain magic price points. (Like 0.99 of local currency.)
> higher precision than IEEE, doesn't have rounding errors, and uses fewer bits.

It certainly won't provide higher precision using less bits (precision is lg(b^(l - 1)), where b is the base and l is the number of mantissa bits). For any given base, there are numbers that have no exact representation in that base (for base 10, consider 1/3 = 0.33333…, for base 2, consider 1/10), so it certainly will have rounding errors.

According to [0], the basic idea is to store the number of exponent bits, the number of mantissa bits, and the inexact bit (indicating that underflow has occured) alongside the number itself, automatically promoting/demoting mantissa and exponent as needed, and treating inexact numbers as an interval of width 1 ulp. Thus, the number of used bits depends on the number stored (which might well be less than an IEEE format would use for certain (or even the average) workload, but may very well be more due to the overhead of the tag).

[0] http://sites.ieee.org/scv-cs/files/2013/03/Right-SizingPreci...
Europe is absolutely concerned with safety... but actual safety. Look at the Netherlands/Sweden "vision zero" initiative - the goal is to get highway/traffic fatalities down to zero.

Compare vs. the USA where over 30,000 Americans die on the road every year. That's like if 9/11 happened 10 times per year, instead of once per century.

My kids don't walk to school alone... and it's not because of my worries about paedophiles lurking around every corner, it's the very real risk that they could be hit by a car - the leading cause of death for their age-bracket.
Hmm. Mechanical engineer without a dishwasher here. I might take a crack at this.

What about your dishwasher doesn't work for you?
While the app is kinda poor the idea and network is fantastic. We had a spree of burglaries in our neighborhood that caused about 95% of our residents to join and we coordinated, setup cameras and even got a photo of the guy used by the police in his capture.

It's really helpful. I just wish the mobile app worked better.
I used to use a 6502 emulator on a 6502.

Why you would do that is that you could develop and debug code in a way that gives you a lot of visibility into the processor and control: stop anywhere in a non-intrusive way and look at the state of anything.

The only other way to get that would be a hardware debugger requiring a second computer.
Offer HN: Anonymous Marketing Feedback for Your Product
In the past, I used to be a huge dev, I just liked to build products/push code. However, I decided to study marketing as a degree and I now see myself as both a marketer + coder. I would love to share everything I’ve learned with other coders.

Although I haven’t had any crazy breakthrough hits yet, I have:

- made websites for paying clients ... I'm no longer in the agency business, but did learn a few of the ropes along the way even from my little setup

- wrote press releases, been featured in 3 gaming blogs

- worked in a marketing/growth position for a series b startup

Marketing techniques I have experience with/some buzz words:

- SEO Keyword research, SEM/SEO Landing Pages, Content marketing

- SaaS business models (mainly cold calling, selling)

- Email marketing, ad campaigns

- Press Releases, Blogger Outreach

- Designing Marketing Collateral, writing copy

- AngularJS, HTML/CSS, PHP, Github, Heroku

I don’t want to talk about some BS growth hacks you could use. The best growth hack will always be having a great product that customers want. However, I would love to chat as a developer to other developers about interesting projects they might be working on.

It goes without saying, there are NO STRINGS ATTACHED. I am not selling anything or have any ulterior motive. I simply want to give back to the HN community by listening and offering whatever advice I can, as I owe the community a great deal in return for the value it provides me everyday.

TL;DR free, anonymous marketing feedback by a dev for other devs. No promises though, other than that I’m a good listener. Absolutely no strings - I’m not selling or trying to get anything in return.

Just fill out the form below, I will contact you via email, and we can schedule a time to talk over the phone in the next few days:
https://docs.google.com/forms/d/1e1vzmcnSC_9vC04XwsGDYFIRG9BiNPhBOS4xnU3IyJI/viewform?usp=send_form
I think I'm missing something here. By "markup" do you mean the content of text/html response bodies? By "optimized HTTP1 markup" do you mean minified HTML?
I had the same experience as you. The Alameda, CA neighborhood I'm in was huge on ND. What I really didn't enjoy was all the forum complaining being directly delivered to my email box. NextDoor has a very large job in balancing the personal and personality that makes up neighborhoods and the impersonality of online discussions.
AWS and the Bonfire of Amazon's Vanities
So this isn't just a thing where I update openssl? I have to learn about configuring cyphers on short notice?
If, like most programmers, you deal with units on a daily basis, then it should be pretty obvious to you that there's something between Monolith and microservices.

It feels like 1/2 the stuff being written about microservice is stuff that people have been saying for over a decade under a different name (SOA).
Getting a handwritten note is cool, I guess, but as soon as this type of thing becomes mainstream it's just as meaningful as an email yet far less efficient. I'm not seeing the big secret play behind the scenes that would make this really valuable.

What am I missing?
What is noninterference, and how do we enforce it?
Help Internet Troll Get RV Back
If you're looking at self-hosting, check out Phabricator. I've tried GitLab several times before, and maybe it's improved, but I was blown away by phabricator's features.

The install could use a bit of work, and setting up the repo hosting was somewhat tricky to understand the documents (various users and sudo lines to create). But overall it's pretty fantastic.

http://phabricator.org/
That's actually harmful for cache performance. Ideally you want many small, granular caches that only expire when the specific content changes to get the highest cache hit rates: if you concatenate everything together, making changes to a single file requires redownloading the entire bundle.

(It's still faster under HTTP/1.1 to concatenate because of the overhead of making multiple HTTP requests and the parallelization limit, but one of the perf gains of HTTP2 is that since extra requests are cheap caches can be targeted and granular. Changes to a single script won't necessitate redownloading a giant concatenated bundle — you only need to download the single script that got updated.)
Bourne shell syntax is inspired by Algol 68¹, of which Bourne was a fan — the shell itself² was written in a highly idiosyncratic dialect of C, using the preprocessor to provide an Algol68ish syntax for control structures:

WHILE i--
DO t=trapcom[i];
IF t==0 ORF *t
THEN clrsig(i);
FI
trapflg[i]=0;
OD

The parser³ is straightforward recursive-descent in 400 lines including comments & blanks (the whole shell is about 4000 lines of code).

¹ http://en.wikipedia.org/wiki/ALGOL_68

² http://minnie.tuhs.org/cgi-bin/utree.pl?file=V7/usr/src/cmd/...

³ http://minnie.tuhs.org/cgi-bin/utree.pl?file=V7/usr/src/cmd/...
Frankly, as a new parent who lives in the US I am worried that my family would be punished for an action such as what is described in the article. I think that the climate of irrational fear combined with exuberant supervision lead to an environment where decisions which would seem rational to a European could be construed to be dangerous to children in the US. Like walking home unattended. I don't think this fear of coming to live in the United States is unjustified if your values don't entirely match those of the local population.
-- edit --
I also don't think that this kind of enforcement action is a rare event, and that this is why it is being covered in the media. In my opinion, it is being covered in the media because it is a significant example of an event which illustrates the divide in the US between what the majority believes (letting children walk home unsupervised is dangerous) and what a smaller number of parents challenging this establishment believe.
If I give a lot more money, can I paint my name on the side of the RV?
Sounds like a nicer way of saying: You break laws all the time, but we won't penalize you. At least we won't if you behave the way we deem good ... you will do that, will you? No more of your silly opposition against your betters? Good boy/girl.

You either break a law or you don't. The alternative is the begin of tyranny.
Snowden ready to go to US if he gets fair trial
At the arrows work...
Slow adoption, niche service. Companies who adopt it think they'll look ahead of the curve, and to anyone who pays attention to paper mail and doesn't automatically treat it as spam, they might.
> I'd be interesting in hearing more Japanese/Swiss parents feedback on whether their country really is more liberal than the United States when it comes to letting their younger children walk to school in the presence of only another child, not older than 12 years old.

Here's an interesting discussion by English speaking parents in Switzerland [1]. The same for Japan can be found here [2]. These are largely the same as my observations.

[1] http://www.englishforum.ch/education/207982-kindergarten.htm...

[2] http://www.japan-guide.com/forum/quereadisplay.html?0+77744

Edit: See, even that you had to specify this stance as "independent/free-ranging" tells me that there's a cultural clash at work here. Where I and my wife come from, we dont' need to apply such adjectives to what we consider 'normal parenting'.
An AngularJS exam with questions from beginner to expert
>Not sure what it has to do with a smart watch though.

Having something on your wrist made by a company that has hundred-million dollar deals providing surveillance technology to the largest surveillance state in the world seems as if it would have significant security implications.
Really enjoyed this read, specifically the 'killing things'section. What are some of your favorite PM blogs/bloggers?
They're listing sites out of the top alexa rankings.

Anyone can do this scan themselves in minutes.

It's not a mile, it's a tiny hop and enough simpler than writing exploit code that it's negligible.
What company is it that offered?
That's what I mean though, is the cure for email handwritten notes? Maybe there will be in person couriers for all important communication now. /s
> How the hell did you people let it come that far? I.e. how do people keep voting for these moron politician with their war on XYZ narrative.

My generation (I'm 30) is incredibly paranoid when it comes to parenting, which is really saying something because my frame of reference is my own parents (over-protective asian immigrant boomers). When I was that age, not only would I walk home from school unsupervised, but they had 4-6th graders as "patrols" along the walking routes to keep an eye on the 1-3d graders. My parents thought nothing of letting me walk my brother home when we were about the same age as the kids in the article, and neither did anyone else.

That being said, it should be noted that the place in the article is a D.C. suburb, which means it's full of paranoid, uptight people to begin with. On top of that, like many D.C. suburbs, it has seen a heavy migration of hispanic immigrants in recent years, which has resulted in a lot of tensions. I wouldn't call it representative of the whole U.S.
Not sure you really answered the question, which I found to be a very interesting one. The OP starts with these two assumptions, which it sounds like you agree with:

1) SMI is likely to occur at some point in the future.
2) SMI is likely to pose a significant threat to humanity.

Given those, it follows that we should be worried and plan for how to deal with SMI at some point in the future, ideally before it is developed. So the question is, what does the world need to look like before we worry/plan for it? And why isn't now a good time to start?
In my view, America is much safer now than when I was a kid. But that safety comes at a cost - loss of things like freedom, risk-tolerance, independence, trust, self-confidence.

I would have preferred to raise my kids in a free-range culture. For sure, there are many great things about growing up here. But this cultural question would weigh heavily on my decision to bring kids to America.

If you and your spouse are united in your views about child rearing, I'm sure you could pull it off and have a great experience.

Actually I'd bet foreign parents could pull it off much better than native born. Because you'll already face so many cultural changes and can discuss which one's you'd like to adopt or reject.

Also note: culture in different parts of the country can differ wildly. But as a tech worker, you're probably going to land in a region filled with helicopter parents.
I just searched for my address and no neighborhood is defined yet. It's asking me to set up a new neighborhood and asking for me to define the boundaries.
In addition to the business model, another key question: source available or not?

For reference: the Half-Life (GoldSrc) and Source Engine SDKs, long free to download for modders, are on GitHub these days, but don't contain the complete engine source code.

Note: The above space previously claimed the full GoldSrc code was available, because that is what I read somewhere and is repeated at least at [1], but this appears to be incorrect. Sorry :|

[1] https://developer.valvesoftware.com/wiki/Goldsource
How exactly would you write a child endangerment statute that didn't require any discretion in administration?
If you don't know who Jaime Cochran is, the cliffnotes version of her story is: Incredibly smart, talented, and hilarious trans woman.
An interesting article about it: http://www.g-truc.net/post-0714.html

I wonder in general will Apple and MS support SPIR-V or they'll play nasty and not support it just to make life harder for everyone?

Also, will Apple push Metal to OS X, or they'll support Vulkan going forward? Their support for OpenGL was very much lagging behind.
Make a Bonfire of Your Reputations (2000)
> Look at the Netherlands/Sweden "vision zero" initiative - the goal is to get highway/traffic fatalities down to zero.

> Compare vs. the USA where over 30,000 Americans die on the road every year.

That's a lot more complicated than you're making it sound. For starters, the US has over 320 million people—Netherlands has less than 20 million, and Sweden half of that.

In addition, the US has a lot of heavily used, very long distance roads. It's a lot bigger than both countries, and so a lot more driving is required to get around.

The number of driving deaths in the US is depressing, but trying to compare it to what's happening in countries a fraction of its size is not useful.
> support unauthorized vulnerability attempts

That was probably just a random student who learned some fun stuff in Security class and slept through the Ethics lesson. I can't speak for UMich, but security research at my university (NC State) has a very strict "don't attack civilians" policy.

> hosting a .com commercial site

First off, .com sites are not necessarily commercial. Second, this isn't a commercial site, it's an informational page about a recently discovered TLS vulnerability.
Do you have a link to the GoldSrc engine on GitHub?
Yes and yes. I hate it when I find a product that's perfect for my needs and then it gets discontinued. The Logitech trackball was one of them. It's one of those tools that (after you get used to it) just becomes an extension of your hand.

The wireless (which is what I'm using at the moment) is okay, but it's not the same.

I've got some dead ones in the junk pile. When I get some time I'm going to see if I can cobble together a working unit from them.
I was using this early on and it's fantastic. We have 85/100 homes. We also have the police connected in so they can share specific updates or even text us during emergencies. In fact, we had a shooting, and NextDoor's emergency texting system got me info 10 min before I saw cops. VERY much a fan.
Yep, I used it and I have no idea whatsoever whether my server is vulnerable or not. Similar for the ssllabs.com test.
I can't think of any instances of them vehemently condemning anything as a company. Some executive making snarky comments at a press event doesn't count, even if it spawns a gazillion outraged Reddit comments, and even if those snarky comments come from a co-founder of the company who was not known for his tact. In any event, just because an executive makes an abrasive comment about something doesn't mean that the other tens of thousands of people who work for that company shares those views.

Heck, I can't remember the last time they had an ad or even a press release attacking a competitor. I guess the "I'm a Mac" ads were a type of attack ad, but even those were intentionally not mean-spirited, and that was years ago anyway. Their competitors are frequently much more confrontational in their ads.

You seem to be basing your view of them on a particular narrative which relies on assumptions about their motivation and character, i.e. "OK, maybe everybody does that stuff, but they do it for reasons that make them bad people!"
How does Source and Steam fit together? Would it make sense to lower a potential fee for Steam exclusive games built on Source? Would it be "risky" trusting the same company with both the game engine and distribution?

It's really great seeing Source 2, Unreal Engine and Unity lowering the bar for game developers to deliver their products.
I think it's here, as part of the HalfLife source: https://github.com/ValveSoftware/halflife
Is there any evidence there are more predators now?

It's increasingly hard to commit crimes and avoid detection, given cameras & forensic advances, so I'd guess less borderline predators act on their desires than in the past.

I wouldn't guess the number per capita has changed very much, at least of "real-life" predators (non-digital).
Correction: I presuppose there'll always be a GUI for the cases where the average Joe has a show-stopping problem frequent enough to warrant someone else to build a GUI solution. Literacy is needed because (a) people need it on a daily-basis at least and (b) it's a meta-skill since it's impractical for people to learn other subjects without it.

Contrast literacy with programming. I don't expect that programming will be as frequent or spontaneous except in a future where either (a) brain emulations exist or (b) citizens interface with reality exclusively through emacs. Nor do I consider programming a meta-skill in the sense that refusing to learn it will impede you from accessing every other area of human knowledge.

(But I'm glad you're enjoying L.A.)
The article is not necessarily scientific in that I'm not sure how you'd test or falsify the ideas, but at the same time it's a very interesting and perhaps very useful philosophical piece.

Often, ideas for science come from logically robust philosophical reasoning. I mean, sometimes they come from freak accidents also. But there's definitely validity in the simple (and awesome) exploration of cool ideas, as long as it's logically consistent.

The multiple agents idea gave me a weird momentary spell of depersonalisation, which was interesting. It's certainly compelling and not really incompatible with modern scientific understanding - it seems a plausible abstraction/description considering the way the brain is known to be wired together.
Unreal, Unity and now Source within just a few days from each other... It looks like the game engine market is commoditizing rapidly.
Not P, but comparing GP's claim that the US is "instilling independence in its citizens" with the fact that American children have to repeat this every day, does strike me as a contradiction.
Does this open a new venue of attack?
> HTTP1 supports pipelining requests.

Head-of-line blocking makes the HTTP/1.1 pipelining perform poorly. Multiplexing is a more performant solution than pipelining.

Here's some worthwhile reading on the subject:
http://http2.github.io/faq/#why-is-http2-multiplexed

> 'significantly'? How much is that?

Depends. In HTTP/1.1 request headers weren't compressed, and you generally have a ~1500 byte limit for a request to fit in a single packet. If you crossed that threshold, and if compression brings you back under (it certainly might), you could see 2x or better perf gains on time-to-first-byte depending on how many packets your initial request was being broken into.

> If that one connection stalls, multiple things won't be transferred.

While true, it's still often easier to optimize a single saturated connection than multiple ones for a variety of reasons (slow start, congestion, etc). More reading on the subject: http://http2.github.io/faq/#why-just-one-tcp-connection

Personally I'm really excited about HTTP2 being deployed. It makes the web fast by default — no need to concatenate or domain shard once it's widely deployed — and adds extra opportunities for performance (e.g. server push) that we haven't seen yet.
This code is converting a bunch of bytes into an integer by bit shifting. So it's specific to the binary representation of ints in your language, and how types of various sizes and signedness interact.

Note that this doesn't depend on your CPU, but rather on how integers and their byte representations are specified in the language.

I think it's quite reasonable to expect the programmer to know what that means assuming they are writing bitfiddling code like this.
I have both, and I prefer the wireless. No cords, the battery lasts a long time, and I can program it on my Mac so that, when using Chrome, the extra buttons click on a link, open the link in a new tab, and switch to that tab.

When will Chrome offer the option of switching to a new tab when its link is clicked on? Firefox has had it forever.
I mean DHE keys.
There are too many names on that list - not to contact, but to trust. To everyone that you give secret advance notice, you're potentially handing a zero-day.
I'm also in Alameda and recently setup a email group and directory for our neighborhood that also has block parties and neighborhood watch meetings. Shoot me an email if you want to compare notes.
That's just the HL1 SDK--there isn't any engine source in there worth mentioning AFAIK.