skysight-inc/HackerNews huggingface dataset:
Not that MITM'ing is okay (the library should simply block 25/TCP outbound instead), but he really should be using 587/TCP (cf. RFC6409).

$10 says the library has a Cisco ASA firewall (probably installed by some young tech at a local I.T. company) inspecting SMTP traffic (which it does by default). If he would have issued "HELO/EHLO" (instead of "STARTTLS") we would have been able to tell from the return response.

Anyways, if his mail client was configured to use 587/TCP and require STARTTLS, the worst that would happen is that his client would refuse to authenticate to the server (my SMTP servers, for example, do not advertise the "AUTH" verb on 587/TCP until the connection is encrypted) and his credentials wouldn't be compromised.
Pirch lets you test your home appliances before you buy them
Note that Rust doesn't eliminate aliasing, it merely tracks it very precisely. Taking a reference is a trivial way to create an alias, though obviously while the alias is alive you are restricted in what you can do to the referent.
That's good! You guys probably have tons of personal data from students who didn't choose to use your service anyway, but their school made that choice for them. Be careful with it!
What we really want is some way to be able to check the fingerprints to make sure that the cert that's being used is the expected one. This unfortunately doesn't seem possible without some out-of-band communications system.

Here in Thailand the junta promises to MITM all TLS traffic. I doubt it can be stopped, but it would be good to at least be able to see when they do it. I don't see sites publish their certificate fingerprints anywhere which would at least allow some form of manual check.

It might be enough to be able to get the browser to tell us when a certificate changes -- this would need to be opt in of course.
Why do so many middle-aged men feel so lost?
Pure open source doesn't seem to exist in this decade; all large enough projects seem to die without corporate sponsorship.
I worked on the Ask Toolbar back in 2009. I did an AMA about it on reddit way back when[1]. I was hired to work on Bloglines, a Google Reader competitor that was shut down and I moved to the toolbar to work on the Firefox version.

I just wanted to make a good toolbar that people liked using. I worked on a Facebook version of the toolbar. A lot of the ugly things about the toolbar, the way it gets installed and what it changes for users are options the company (Nero, Oracle etc) that adopts the toolbar pick. It was a really good team with great people, but despite this I didn't feel good about working on the toolbar because of how it was used. Everyone on my team just wanted to make a really good toolbar. I am not proud of the work but not because of anything our team did. I don't plan to do any kind of work like that again.

[1] http://www.reddit.com/r/IAmA/comments/bqvme/i_am_an_ask_tool...
Just like they all need a dedicated network engineer, or a dedicated storage engineer, or a dedicated "whatever" engineer? Losing data is unacceptable too right? I'm not saying security people are not necessary, but there are a lot of not dedicated "whatevers" that can handle "whatever" sufficiently. Coupled with security audits, which in my experience leave a LOT to be desired speaking as a not dedicated "security" engineer(I know of a few areas where I'd like to shore up but they never come up on security audits, hmmm), this is often sufficient. Besides, don't you figure Target, Home Depo, EA, and Sony had dedicated security people?

Again, this is not arguing against security guys.. It's just this post reads a bit like "Well, if they were only hiring people like me maybe this wouldn't have happened".
Yeah. TPG are gods. http://nypost.com/2015/01/01/tpgs-2015-ipo-plans-hit-fundrai...
Never regretted quitting. Every time regretted not quitting sooner.
> every time they play nice it doesn't go well for them.

When have they ever tried playing nice?
It's amazing to me that otherwise seemingly intelligent people, who would recoil in horror if you suggested that the federal government should regulate software development, actually think that applying government regulations to the Internet that were originally written in the 30's for analog telephone service -- based on regulations written in the 1890's for railroads, will result in anything other than a complete clusterfuck. B-b-but John Oliver said it would protect consumers! I guess this is what happens when you have a generation too young to remember Ma Bell, who get their public policy guidance from comedians.
Anthem had security guys.
In addition to needing a break, you may also have a mineral or vitamin deficiency (for example, B12). Most are easy to find if you head over and get a bunch of blood tests from your doc which will help turn up anything missing.
It all depends on how the court sees it.

See "Carmack's Reverse" - where John Carmack independently developed an acceleration for robust stencil shadows, documented his discovery and then had to capitulate to Creative Labs who owned a patent on the algorithm from a few months earlier.
We've seen amazing digital art already, but that doesn't make the submitted article any good.
TPP is not about free trade, it's about helping bigger players getting a deeper dip in the trough. Pretty much the opposite of freedom to trade.

(As usual, "free trade" or "free markets" is a euphemism for "trade policy that will help the guy using the term 'free trade'". Truly free markets would entail lots of bad things like freedom of children to work and the freedom to create Bohpal disasters. This is no exception)
shouldn't we be talking about scientists to global pop. and not just nominal number of scientists?
I didn't find this video helpful at all. You have to skip 10 minutes ahead to get to the actual talk. The talk is stunted and, as always with Rust documentation, dwells only on the basics. Audio isn't clear, but neither is the speaking.

I don't know of a succinct overview of Rust for experienced system programmers, and this video certainly isn't that.
Everyone interested in this needs to read the thread carefully. This is not an actual JIT, and the synthetic benchmark is even more misleading than normal benchmarks.
For example, the changes can be other molecules aside from DNA. Like something that attaches to DNA and prevents a gene from being expressed.

What makes such a thing interesting is if it persists through cell divisions, and especially interesting if it is passed down to the next generation. And it turns out that, surprisingly, such things exist.
Nothing incorrect about using cat. It makes almost zero practical difference except saving a couple keystrokes. There are some scenarios where it actually matters, but this isn't one of them.
I believe the possibility that a developer capable of understanding and creating this local MITM not being aware of the wider security implications is near zero. That would be like a scientist understanding nuclear fission and bomb making not knowing that detonating it in the middle of a city would cause a lot of deaths...
Using XSScrapy to Scan for XSS Vulnerabilities
Right. Like the sophisticated institutional investors of the S&L days? Or the Recession of six years ago, or the Depression...
Free trade is not a euphemism when it means eliminating tariffs.

It allows a lot of good things like Chinese workers being able to earn $2 an hour instead of $0.20 an hour.

EDIT: $2 an hour is from about 5 years ago when Chinese manufacturing was more controversial. Now it's more like $3.50 (http://finance.yahoo.com/news/china-manufacturing-wages-rise...)
I think it's safe to say "thank you" on behalf of the students and teachers who won't ever know that you went the extra mile.
Additionally, a potentially bigger risk is if there is a massive methane release event, it could drastically accelerate global warming.

Methane traps up to 100x more heat in the atmosphere than an equivalent amount of CO2 (over a 5 year period) and 72x more heat over a 20 year period

Source:
http://www.onegreenplanet.org/animalsandnature/methane-vs-ca...
How about "eliminating problems caused by aliasing", which I suppose is a subset of memory safety.
Related smbc comic:
http://www.smbc-comics.com/?id=2881
Emerging Trends of Web Designing in 2015
I'm really excited about the interactive widgets. I've been curious about the idea of creating a spreadsheet widget to provide excel-like functionality in Jypyter.
Go to try.jupyter.org to give it a spin.
Ok this may sound stupid but I think there are a lack of words you can satisfactorarily substitute in for swear words.
I know this as I gave them up for lent.

Also many people (example A: PG) with good vocabs still choose to use them.
Further, how could so many TPP/TTIP countries choose (vote?) multiple panels of "international judges" that could override the decisions of "national judges"? That seems even harder than picking judges for a nation's Supreme Court, a process which has been through decades to centuries of constitutional law debate and debugging.
Google Cloud Platform Status Dashboard
I believe they've tried that in Portland and a few other cities. It hasn't gone particularly well for them. Also, there are cautionary tales like Night School, where the industry being disrupted gets the new entrant shut down.
> Uber is already hamstrung by their inexperienced drivers's reliance on Google Maps for navigation. It is in no way equivalent to actually knowing your way around.

I don't know about you, but my experience is that Google Maps is far more reliable than a cabbie who purports to know their way around.
So at this point, you're basically ready to pirate M:tG and Netrunner ;)
I know what you mean, but in America free trade means NAFTA and TPP so it basically is a euphemism.
Love what you are doing. I wanted this to exist for so long, too bad did'nt have the time to take it on. I love the fact that you do not have any trace of sender information on the email screen so it is immune to screen capture. How about video screen capture? Have you thought of that?
Here's a sample of the notification that went to affected "driver partners": http://oag.ca.gov/ecrime/databreach/reports/sb24-48540
I'm guessing you don't exercise and are in terrible shape and over 25? As you age, the body loses muscle and muscle plays an important part in making you feel right by regulating hormones like insulin etc.

If you spend your life indoors you most certainly have vitamin-D deficiency, which leads to testosterone deficiency, which quickens muscle loss.

Sedentary work without other activities is a recipe for feeling terrible, don't be surprised.
It can be logistically inconvenient when traveling internationally, a few thousand miles and a few days of shipment delay away from your bank.
Harry Potter and the Diagon(alization) Alley
Meet Cates Holderness, the BuzzFeed Employee Behind #TheDress
I have no experience in this area so could someone explain how Uber noticed there was a data breach ~4 months after it occurred.
I had read the post, thinking that there is a good new direction in wp. At the end, the only valuable thing for me, is rendering templates using the wp-api instead of the big mess of files and code that actually is. Also this way, you don't expose your wordpress install xD
Roast fillet of beef with roasted garlic and mustard cream
Yeah, that's pretty easy now, I suppose. Totally not the goal, nor a behavior we'd encourage!
How would such legislation ensure companies are able to detect such breaches in the first place? For every Target/PSN/Anthem/Uber how many companies aren't even aware they've been breached?
Which, as the link mentions, it is— just because their (intentional?) misspelling happens to coincide with an earlier form, doesn't mean it isn't a misspelling.
So I was super excited when IPython started rolling widgets into itself - I thought I would be using them a lot. But turns out that I just ended up using one pattern (slider + matplotlib to cycle through dataset visualizations). What I've found is that googling for IPython widget documentation or tutorials is just... really difficult. There's stuff from a lot of eras, and it's often quite tricky to figure out exactly what the

I'm pretty certain its just my poor google-fu in this case, but does anyone have a particularly good/authoritative 2.x (or 3.x if those even exist yet) tutorial or guide to follow?
Yes! That's what's fun, now you can easily imagine a re-skin of all kinds of simple games, just go find some fun graphics on the web and click "print".

I want to get an interface going on mobile so you can just snap pictures with your phone to add card art on the fly.
Under California law, data breach notifications "shall be made in the most expedient time possible and without unreasonable delay".

Civil Code § 1798.82(a):
http://leginfo.legislature.ca.gov/faces/codes_displaySection...

I find it hard to square that requirement with Uber waiting 5 months from when it found out.
Manufacturing is out of scope for this product, at current. It is firmly a prototyping tool, not a production tool. The idea is to make it trivial for designers to iterate so they will do more of it. More iterations means better games, faster, and we all win.
Sinkholes: Can we forecast a catastrophic collapse?
A user-supported search engine has promise. A telco, a handset maker, or a country could do an ad-free search engine. Cuil had about 30 people, and eventually got a half-decent search engine. It's surprising that Apple doesn't have their own search engine. Their negative experience with the map business may have scared them.

The economics of search are strange. Search has negative market value - Google paid about $100M/year to be the default on Firefox, and Google still pays to be on iPhones. It's like the ad channels on cable. The Jewelry Channel pays to be carried; the NFL gets paid to be carried. Google is in the Jewelry Channel position.

As compute power increases, the cost of doing search goes down. But that hasn't been reflected in the "selling price" of search, which is expressed as ad density. Google is a high-margin business because of that. That makes them vulnerable.

DuckDuckGo and Blekko, although tiny, are quite profitable. Even InfoSeek and Ask apparently still make money. There's room at the bottom.
Pair programming works pretty well...just not full-time. I think the optimal situation would be half-days or maybe less depending on the pairs and the situation. Also, some more mundane tasks (bug-fixing) aren't going to be handled as productively when pair-programming.

The ideal situation seems to be at the beginning of a big story. Then there seems to be a natural time into a story(stories) where it makes sense to split up and work alone.
Of course, most good opensource have a corporate arm behind them, which helps fund development.
I'm getting better at avoiding toxic situations now.

Sounds like a toxic environment:

>If my boss yells at me all I can do is apologize.

Your boss should not normally be yelling at you.

So the problem is not with all jobs, but that job was pretty awful.

Take 3-6 months off and try something else. I hope the OP has savings.
I think GP may be referring to the "unnecessary use of cat"
Is this somehow different to Xen Live Migration/VMware Vmotion/etc?
> In our industry a lot of young IT professionals use the term “burnout” as a badge of honor.

That's me, but I feel the burnout at the same time. On one hand it is me who is addicted to working, and on the other hand I just can't start thinking that doing more would allow me to work on something more interesting, like a mad scientist trying to solve some mystery. But half of what I do are break-fixes, and can't even start working on real devops, gaming changing practice. The culture - devops, building practice is part of my job, but often I don't see me doing that...my responsibility exceeds my title, my role right now, which is great for career growth. I don't know man...

I'm 23.
I'd answer this, but I haven't used Rust for three weeks, and the language changed again. None of my programs will compile any more. (Sorry, I'm in a cranky mood about Rust right now. I just had to file an issue on the Hyper HTTP library because some names were just changed in the I/O library, making the HTTP library uncompilable.)
How a bored student invented the electronic spreadsheet
I haven't seen this link posted in this discussion about this dress.

http://news.yahoo.com/debates-rage-over-color-dress-photogra...

The reason it's interesting is it shows a storefront window with the dress. I think it really helps put the original image into context. Especially check out the contrast between the blue dress and the very white mannequin. Nobody who sees that picture will ever think the dress itself is white.
"Exactly. I at least view this phenomena as more likely signaling a peak than a downfall." - You do realize that a "peak" inherently implies a decline, yes?
> Good luck selling a phone running "Android" if it doesn't support the Google Play Store and their other proprietary apps.

This is exactly what Amazon does though.
Researchers break Internet speed record, hit 1Tbps
Premier League and Capital One Cup Predictions: Lawro V George Ford
Really hope Warren beats out Hillary in the Dem primaries. If it's another Clinton vs Bush election it will really feel like this country is done for.
Is HN depressed? Two ragequit posts on the front page at the same time?

Folks, the software industry is cyclical, and we are currently in the "good times" phase. Non-software people in other industries are seeing their occupations become obsolete while we we are getting increasingly higher wages, shuttle busses, and microkitchens.

If you are not happy working in software now, you probably won't ever be.
> bad things like freedom of children to work and the freedom to create Bohpal disasters

Children working is better than a family starving to death no? Child labor laws are a first world problem, and could have disastrous consequences for the third world. Union Carbide was a corporation, a legal fiction in which ownership is divorced from responsibility, that cannot exist without privileges given to it by a state. State capitalism has little to do with actual free markets i.e. voluntary trade in a free society.

Agree with you about the TPP, though, and the way that the term "free market" is often used in the vulgar sense.
We are planning to bring some experimental JSON-based transport for 3.3 which will allow us to eventually start transitioning to considering IRC events in an intermediate representation. The key thing is going to be getting the client authors to understand the benefits of this approach, as well as providing implementation of both the extended RFC1459 payload format and the JSON format.

The eventual end game is to have a flag day and deprecate the legacy format, but this will probably take a few years to do.
Matasano security is almost always hiring. Here's their post from this month: https://news.ycombinator.com/item?id=8980464
So what's your point here? Rather than hire a security guy/gal, we should all do... what?
He has a fulltime job? AFAIK, he's independently wealthy these days.
This is going to sound callous and compassion-free.

The average worker at Target is benefiting by continuing to get paid at all. They're also benefiting from the continued level of funding to city services from the tax revenue of tech.

The tech industry is one of the big reasons that SF didn't suffer economically as badly as many other big cities did.
I don't get why they just don't suggest using weak_ptr<>() for the backwards reference.
Why the rise of fascism is again the issue
It sends some channel messages after the JOIN. The new IRCv3.2 specification (being formally ratified across vendors soon!) adds a BURST type to make the protocol transactional which will allow displaying the messages in the right order with a little bit of work on the client side.
Why Netanyahu Is Confronting the White House
Which app? I am interested to know. I could run it on my tablet.
In Portugal no.

We also don't distinguish between CS and Software Engineering degree.
Companies are asking Congress to do this because already states are doing it, and it's totally haphazard. If Congresscritters were to get doxxed maybe it'd go faster.
The spy in your pocket
Or just drop variable completely and use just "bindings"? Perhaps with a note that this is similar to variables in other languages.
Is there a way to check if any non-standard root CAs have been added to my browser, without going through them one by one and comparing them to a fresh install? If not, is there at least a button to reset the list to a blessed-by-Mozilla default?

Because it's not just Superfish we need to be worried about. It's too easy for arbitrary programs to add root CAs to browsers, even if they aren't pre-installed by the hardware manufacturer. A while ago, I installed Avast! Antivirus on a Windows PC and found that it did exactly the same thing: injecting its own root CA into every browser (including Firefox) so that it could MITM all https connections.

Corporate IT with their own root CA is a special case that has nothing to do with the vast majority of Firefox users. For the rest of us, it would be very helpful if Firefox shipped with an independent certificate verification feature by default. Corporate IT can feel free to disable it at their own risk.
From that Wikipedia article: "Gator's end user license agreement attempts to disallow its manual removal by prohibiting "unauthorized means" of uninstallation."

Reading the word Gator really took me back in time. Never worked on that stuff, but it brought back the visceral pain of sitting down at a friend or inlaw's computer to find Gator or one of its peers installed. Each time the internal debate: to simply remove it, to try and explain why it is bad or simply to ignore...
https://en.wikipedia.org/wiki/Aramchol seems promising
My POV is kind of limited, but I believe there's a strong argument to be made that security consulting is not an adequate substitute for in-house security. The largest problem that comes to mind is that hiring consultants can lead executives to think they've outsourced security and can not worry about it.
Jonathan Frederic just updated the example notebooks for widgets before the release: http://nbviewer.ipython.org/github/ipython/ipython/tree/mast.... We've also listed a few examples of cool widgets at https://github.com/ipython/ipython/wiki/widgets (though some of these may not have been updated to run on IPython 3.x). You're welcome to ask questions on the IPython mailing list or the gitter chat: https://gitter.im/ipython/ipython/help.
> You highlight lines four three six.

I guess there is a typo and should be "four through six" instead.
Regarding the first point, about scope, I'd guess he's referring to lifetimes and how you can explicitly annotate that something can live as long as another thing, like a parameter. Not scope exactly.
Oh god, this, 100000000x this! My main frustration is the lack of canonical implementations - there never seems to be a good way to do anything - everything has nasty tradeoffs, so you have to pick the best for each situation - which results in a lot of different paradigms across a codebase. Yuck.
You first point is a good point but...

> I heart Airbnb but the idea that it doubled in value in less than a year and is worth almost as much as say Marriott, which owns real estate, generated almost $2 billion in EBITDA in the past 12 months and returns cash to shareholders in the form of a dividend, is absurd.

Apple, a mega-cap company, has doubled in value in the last 3 years. That's somewhat "scary".

On the other hand, it is completely normal for a startup to double in value in 1 year.

Arguably, pretty much all moderately successful, venture-backed startups will reach that growth rate at some point.
A conservative example: startup gets seed funded at a (say) 200k valuation then, 8 years later, gets acquired for 50M. That's an annualized 99% per year.

Of course, homeruns like Google, Facebook, etc, had years with growth much higher than 100%.
... more like "offering" than "selling", given the massive writedown on Fire Phones.