skysight-inc/HackerNews huggingface dataset:
Like other OpenBSD projects, it is developped against the OpenBSD tree and the 'portability goo' is added later on. It is the same case with libressl. There is GitHub repository: https://github.com/libressl-portable/ and release tarballs: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/

Keep in mind that LibreSSL is not a rewrite but a fork. Assuming your software uses the sane parts of the OpenSSL API, there shouldn't be any problems. If they use some interface that was deemed unsafe, well then I'd say it's time to fix the software (if the source is available). As far as ubuntu/debian are concerned, I'd say it's only a matter of time before it is available in the main repositories.
Map: The strange things people Google in every state
> A lot of customers may not want to fly on a used rocket though (no one knows the risks)

I am certain the insurers will be happy to take a crack at figuring out the risk.

That matters a lot. Whether or not you "want to fly on a used rocket," if your company can purchase a flight and insurance on a used rocket for a lot less than it can purchase a flight and insurance on a new rocket, you might be obligated to try it because of the decreased costs.

(I'm ignorant as to who actually buys the insurance for these flights, the customer or SpaceX or what, but I'm sure the point still stands)
Where's the Generic Insulin?
That's a tough proposition to defend. The nations that act with the most autonomy have no foreign military bases inside their borders.
Re-read their paper about mOPE. Very similar indeed. The difference is that in our case the server doesn't know the tree structure, with cryptdb it does.
I've seen Ethereum mentioned before, but it's really really hard to figure out whether it's a proposal or a thing that actually exists.

Are there any applications actually using Ethereum yet? Almost everything linked to from the home page consists of "roadmaps" or "coming soon" pages. Is there a public network that's up and running? How many nodes does it have?
The progressive faction of the Democratic party is pretty close to what you're looking for. Check out Elizabeth Warren.

Young people could have a lot of say, but they don't vote. The national dialog would shift a lot (IMO) if young people educated themselves on issues, got their peers to engage in discussion, and participated in the political process especially by voting. Right now politicians that pander to the majority do so to the people that show up to vote, which is older people.

https://upload.wikimedia.org/wikipedia/commons/b/b9/Voter_Tu...
> All that the people must do to overthrow the tyrant is to just sit down on the ground and give up helping him, because the tyrant has no true power of his own.

I think the fear here is that at some point the relevant servants of the tyrant will all be technological constructs unable of sitting down. If we're really careful about making sure our robot army doesn't revolt then what happens when a tyrant controls them?
Why airports are named what they are
How is InboxSDK coming along? I'd love to follow along with development if you guys have any sort of open source repo.
Want to Help Close the Gender Gap? Mentor an Engineer
Why I Still Play Football
Business Model Innovation Needs to Be More of a (Data) Science
A lot of CloudFlare IPs are blocked by the chinese firewall, for a site that's primarily aimed at chinese users probably not an option.

Edit: I don't actually know if this is still true and on what scale, I just know that's it's true for a website I use according to chinese users.
"An attack is just a special case of building a computer system." ~insightful
Haven't sites been DDoS'd that were using Cloudflare? Its good, but not a magic bullet.
Contact Akamai who recently bought the DDOS mitigation service Prolexic. They may be able to mitigate the attack and save you bandwidth costs.

Alternatively, call CloudFlare.

Don't just absorb this through Amazon.
First a 2.6bn request/hour DDoS and then making the front page of HN... talk about getting flooded with requests.

Hopefully making the front page will at least get them the attention of Amazon or enough donations to cover the temporarily (absurdly) high operating cost.
This is the correct answer. Given that this website is part of the 'civil society' sphere, it likely already gets taxpayer money from the State Department. They should go to their funders - be they public or private - and ask for help with their mission - I'm not sure it's appropriate to ask individuals for help.
Because that's wrong derivation?

pro-woman -> woman in Latin is femina -> feminism

pro-man -> man in Latin is vir -> virilism (sounds stupid).

That's why.
What would you do if they didn't play and just waited for the 4 minutes?
Of course but stealing a whole car tends to result in actual police scrutiny.

The last couple of times someone I know had a phone stolen the result was indifference.
Microsoft actually predates the free software movement. And proprietary software predates Microsoft. And free software 'culture' still exists, in as much as it ever did.
With a mission such as yours, I would think Cloudflare (or similar) protection is a must.
hggv
How do you know that the pull the server made & hashed is actually the running code?

Again, this requires a root of trust on the server, otherwise, anything returned from the server including any information you would need to verify code the server is running could be spoofed.
I hate that this is happening, but isn't this something you have to expect/prepare for when your business involves controversy?

Not to mention when the people who don't like you have the resources of nation states.
hfnm
The term makes me flinch too. We're working on the best way to describe it, but mostly we're working on code, so we'll need some slack.
Would you fly in a used plane? Eventually no one will care. These rockets will be able to go through hundreds of flights before being retired.
No CodeJam victories or at the top of the TopCoder leaderboard? Extensive Coursera certificates? No-hire. Plus I'm beginning to doubt that you've even solved several Project Euler problems in a variety of functional programming languages.
You probably ought to direct that concern to The New Scientist, who reached out to Patrick out of the blue. We're not soliciting press coverage. It's just a slow news week, I guess.
Move to OVH -- they offer free DDoS protection as standard, and unlimited bandwidth. I just moved to OVH after getting DDoSed. I'm paying $109/month for a quad core 3.7Ghz Xeon, 64GB RAM, dual 2TB software RAID. It's a pretty sweet deal, and I haven't had any problems so far.
Thanks for your post btw, I did not know about this tool `shuf`. My equivalent involves `sort -r | head -1`
see https://en.wikipedia.org/wiki/Georgism and https://en.wikipedia.org/wiki/Single_tax
Sitting down and writing a blog-post seems a pretty laid back reaction to $30k/day in Amazon bills...

First thing I'd have done is take the site offline and call the various DDoS mitigation services (Incapsula, Cloudflare, etc.).

Pretty surely most of them would gladly pick up the slack here, given the free PR (possibly even in mainstream press) they get in return.
Wildly off-topic, but I wonder if people like Sutter get tired of saying "c plus plus". It's a very wordy name, and words that start with "p" has got a certain punching quality that I don't know what is called.

If I was a daily C++ programmer, I'd rather call it "c p p".
It would be interesting to see which IP space the bulk of the traffic is coming from. Seems like it would be trivial for the Chinese government to spoof traffic from any IP within China...
>My sci-fi scale projection/evolution of this concept: because the things we do at work aren't intrinsically unenjoyable to begin with, but the way we think about them has the potential to make them feel that way—slow fusion of games that resemble work and work itself produces games that do work, and the distinction between the two is forgotten, a relic from a cruder era.

There was an episode of Black Mirror that hinted at this.
Serving a captcha page is more work than serving a static page.
A not-so-obvious excerpt I took away is this...

>Before joining YC, I had been working on my startup for 6 months and a few of my customers were YC companies.

I think most people are aware that the startup market is quickly growing, and it is not what the author suggested by any means, but I think entire startups can be created to cater to the startup market...in fact YC is probably so large that a startup could probably succeed by catering solely to YC startups. For example, I applied to YC once with an incorporation/legal service idea, with the thought that even serving as a Delaware Registered Agent (~$100/year) and filing the Delaware annual compliance documents (~$100) on behalf of the YC companies - a captured market - would generate ~$100k/year, which is probably peanuts from a investors point of view, but a solid life style business that has the potential to cater to ever Delaware C-Corp startup.

Its kind of like the 49er days and the old saying: "In a gold rush, some entrepreneurs dig for gold, and some sell shovels."
> As though formal training will help you make the hard decisions you face as a founder.

Formal training means a way to structure your thoughts and assess risks. Don't dismiss it out of hand.
I'm with you. There's no way I'd play a game where my every move was fair game for employers to scrutinize. That's too much stress and it would suck the fun out of everything. The thought of a game like that irritates me to no end.

This is one reason I pay for a private github. I hate that if I'm learning a new technology, have "too many" commits on something simple, or am generally messing around it looks "bad" to employers.
Anarkik evolution in digital 3D modelling for designer makers and applied artists
This isn't a normal day... 2.6 Billion requests per hour is a LOT of traffic and that isn't free.
The early versions of UNIX was not in C. C appeared a bit later. If you would take time to read the history, you would see that C jumped on just with v4.
> Europe is heavily subsidized by American security blanket.

There are three countries in Europe that, by themselves, have a larger GDP than Russia. The Soviet Union and Red Army are gone. As bellicose as Putin is, he is militarily bogged down in Ukraine. Europe has no need of a US "security blanket."
http://en.wikipedia.org/wiki/Coral_Content_Distribution_Netw...
I think they need to use something similar to this ...

http://en.wikipedia.org/wiki/Coral_Content_Distribution_Netw...
I agree with the author about the problem with rents; unfortunately this argument is almost always framed politically (including, probably not intentionally, this article).

The arguments he is making are logical, but the premises he is using are only true in the academic economics echo chamber. For instance, he doesn't even mention the fact that government is, almost by definition, either the largest or second largest rentier in modern America (their main competitor being "to-big-to-fail" financial institutions). This is probably unintentional on his part but not on the economists he mentions such as Tom Piketty and Paul Krugman, because of their personal politics. To exclude government from this discussion is probably not correct.

It is not hard to see evidence of this by the way... take healthcare.gov for instance. If your company had $500 million CASH to build a website, what level of quality could you produce? Government also encourages rent seeking by other actors in the economy, even leads to rent seeking becoming the main game in town. Real entrepreneurs end up getting hurt by this because it steals away resources from their customers. Also economists like Piketty and Krugman then paint all companies with a broad brush and advocate that their legitimately earned profits be redistributed, which thankfully the author of the article seems to be defending against.
Call of Duty Advanced Warfare Key Generator
Ripple – Realtime, Reactive Web Architecture
On the surface, this seems really silly. What happens on a cloudy day? Don't the utilities need to deal with power output drops all the time?
Here's the mod: http://steamcommunity.com/sharedfiles/filedetails/?id=410151...

Transparency and minimize/maximize buttons coming in an update tonight.
You've never heard the story about how they won their Pwnie award?
Don't call Akamai. Never call Akamai. They are horrible.

Try Incapsula, GigENet, Blacklotus, Cloudflare first.
There will always be a need for skilled labor to maintain and update robots.

Why? Surely we will come up with maintenance robots that will maintain the other ones, including other instances of the maintenance robot.

In my experience automation tends to have very mechanical edges, so the very act of automating something brings about a system that is easier to automate further.
>qualitative and inherently unmeasurable.

Qualitative doesn't imply unmeasurable.

If something is unmeasurable, there is no way to tell if it's changed.

If you can tell if something has changed, and you have no feelings about it, you can measure it, but not optimize it, because you can't force it towards your preference.

If you can tell if something has changed, and you know how you feel about it, you can always just say "I feel better about this since last time" or "I feel worse about this since last time." There you go, you can graph how you think of the thing over time, and steadily increase how much you like it.
Can you clarify on the difference? Also, right now I stick the loose leaves into a tea sack and let that steep in my mug--would that accomplish the same function as the gourd? My gut says there would be no material difference in taste between my current method and the gourd, and it would be an unnecessary expense, but if there's something I'm missing as to what it does to change the flavor/experience I'd love to know more.
> No party besides the democrat or republican party will be successful in the US because first past the post is a fundamentally broken model of democracy that always reduces into a base case of two parties. Combine that with the power of money in politics and gerrymandering and there is no way to fathom competition at the federal level.

It's interesting, the UK has a similar sort of system, but the vote share of the major two parties has been consistently declining for fifty years. After WWII, almost everybody voted Labour or Conservative, now their combined share is about 65%. Soon, FPTP is going to start delivering some extremely odd results.
How to decrease your DevOps alert noise by 93%: a case study
Not sure that turning the light off is the first thing you want to do when you're bullied.

And pretty certain that there's zero PR value in those stories.
European attitudes like this are why they cannot be trusted with their own defense.
I doesn't necessarily need to be GitHub itself, any hosting with a reputation could host your software and verify which git commit it is pointing to.
Interesting way of putting it.

So if we look at the problem as an infinite-pixel screen with backwards compatibility, then each pixel is a finite node with subnodes for increased resolution.

If we look at the problem as an infinite-pixel screen that has a more pure layout without overlapping addressing, then each pixel can only be reached with an infinite path.

I for one prefer the backwards compatibility, and think it makes more sense in the context of HD->4k->8k.

But that's pretty hilarious if the API for the pixels changes how many you have.
Currently I use T-sac's for my mate/guayusa. Can you comment on whether there is a noticeable difference between using a tea bag vs. the traditional gourd/bombilla?
Funny enough, there's a YC-funded company that does exactly that: https://www.clerky.com

The list of customers on their homepage is mostly YC companies.
Also once you've narrowed the list of dealers. Make sure that the dealer actually has the car in question. Ask for the vin number. I've had the unfortunate experience of them trying a bait and switch once.
I think I picked this up off Hacker News originally, but there's apparently new Intel stuff (aka SGX) coming out to help with this.
http://theinvisiblethings.blogspot.com/2013/08/thoughts-on-i...

Unfortunately, I think the reason most open source people have a knee-jerk aversion to trusted platforms are that they've historically been designed to only serve the interests with the most money (read: the government and/or content industry).

There's nothing inherently anti-open source about the schemes, and they would provide innumerable benefits to increasing security confidence in a networked world.

However, when you can rattle off enough failed or botched encryption initiatives involving a hardware component to fill one hand just from the top of one's head (CSS, AACSS, HDCP, UEFI/SecureBoot, FairPlay), confidence is not inspired...
This is interesting. Though Hacker News appears to not be blocked, it has been flagged as "Contradictory" on certain days. Is the Chinese government blocking certain news items?

Take a look here: https://en.greatfire.org/news.ycombinator.com
I assume you mean 64GB of RAM.
That'S good Project.
I support the project.^^
But you still have to come up with a name for it every time, and, more importantly, you can't do it inside an expression.
The software runs on your server so you could spoof the checker.
Blocking user agent strings efficiently
> 64MB RAM

Oh really? :-)
Yes, thanks. That's what I meant to write.
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-ch...

"Amazon EBS measures each I/O operation per second (that is 256 KB or smaller) as one IOPS"
A Day on the London Underground
Unrelated to the story at hand. Have you been recently DDoSed on OVH? I know that (at least some time ago) they just null-route/deactivate your account on spot with no notification on anything that looks like a DDoS.
Author here. That's a great point bhahn, I just updated my gist to properly handle the case that you just outlined:

https://gist.github.com/aanari/349c7d97ed50c6f69930#file-bat...

By creating a separate function for the locking and updating of rows, we ensure that the `BEGIN/END` transaction is handled per iteration rather than at the very end, so we only lock rows while they are being processed. Since Postgres does not support nested transaction blocks, calling a defined function from within an anonymous function block seemed to be the easiest and clearest path to achieve this.
Yeah, but my understanding is that it helps a lot. CloudFlare masks the actual IP address of the web site, and distributes the load through the CloudFlare platform.

It's still possible to overload that capacity, but it's a lot more than what any standalone web server can take. Furthermore, the web server itself will stay online, as it isn't actually getting hit by the flood of requests.
They claim they're able to handle the 2.5bn req/hour right now, and if thats true, the HN traffic wouldn't even be noticable
Except that there are reports (http://forum.arduino.cc/index.php?topic=307397.0) that the boards from official distributors are shipping with Arduino Srl's USB Vendor ID, indicating that purchasing any "official" Arduino is likely funding the attack on Arduino LLC.

Hence the GP's observation that buying a 'no-name' clone seems to currently be the least-harmful option available.
Man I love the fact that you guys continuously contribute to this community. I hope whatever you are doing spread to other parts of the government. I really enjoy seeing the government engage the community in this way.
> My only gripe is that he thinks that entrepreneurship and investment are struggling.

Entrepreneurship is extremely hyped right now, despite being at a relative low historically (Figure 1 of [1]). More companies are failing in their first year (Figure 4, 5, D1, D3 of [2]) and an increasing percentage of employment is at firms 16+ years old (Figure 2, A2, C2 of [2]).

Less people starting companies, more companies failing in the first year, more people employed at well-established companies. That sounds like entrepreneurship is struggling to me.

[1] http://www.kauffman.org/~/media/kauffman_org/resources/2015/...
[2] http://www.brookings.edu/~/media/research/files/papers/2014/...
Making it more insane is that the price you quoted could very well be for a not-so-nice home east of Central that has quite a bit of section 1 to address, not great schools, etc. Anything further west that is big enough for 3br in Mountain View will quite likely be north of $1.3.

FML.
Most of the C++ devs I interact with say "c p p", and our local C++ meetup is actually named CPP.
Amazon Launches One-Hour Delivery in Miami and Baltimore
> Is the Chinese government blocking certain news items?

That would certainly be my guess.
I like both Python and anonymous functions, but how would you suggest anonymous functions should work in Python if done "correctly", given the indentation-based syntax?
3 months. The fix was implemented in January. Its severity was simply upgraded.
>stability and cost

If this were truly the case, they wouldn't be using Windows. It's mostly inertia in large organizations and for the general public.
Explore the four-step level design philosophy of some of the best Mario games
You think this: https://www.youtube.com/watch?v=4GPpYseUZck is more exciting than a TED talk?

I guess it's subjective...

The point of TED talks isn't that they're supposed to have a stand-up comedian's level of presentation skill. It's about captains of industry talking about their slice of the world.
Russian traditnl gigantic pancakes that are cooked and served with shovels(pics)
Inside the CERN Control Centre
Now Asm.js Is Available for JXcore Applications
Or, dare I say it, night?
That's correct, as jpitz mentioned if the code is run inside a transaction block, then we don't have to worry about the failing DELETE causing the INSERTs to fail.
Company under attack turns to this service to recover!
The Illusion of Stock-Picking Skill – Daniel Kahneman
Ask HN: Are bubbles caused by inaccurate data?
Faux Valuation
A click is worth x
An application is worth n clicks * x

What happens when value is mis-attributed?

What I am really getting at; are there data indices out there? Like the stock market, but with data

1 Medical Record is worth ....
1 Verified Facebook user is worth...
1 minute of engaged use is worth...

etc etc

Call to action!
Relevant VC's: please liberate and collaborate on this data to increase startup valuation transparency and benefit all beings
Design and loading "speed" - well, should be optimized! Regarding the idea itself: Where do you see a difference between SendFlare and i.e. paywithatweet.com or any other sort of those tools? I gave some of them a try during the last years and none of them had this "Wow!" effect - was more like a nice to have, but nothing I wanted to use every single day.

Still: I believe that our social "statistics" will become part of payments 3.0 but none of the tools I know consider my exact data i.e. # of followers on Twitter or friends on Facebook just to name the most obvious ones.
Turning off the light is a great first step when wasted money is flying out of your wallet.
Can you elaborate on why you think Akamai is horrible?
It's not a straightforward insurance matter since many many applications are time critical. If a rocket blows up they may need many more years until a replacement cargo can be manufactured, fitted into the launch schedule, etc. The coverage for that (specially opportunity costs, which are hard to measure anyway) might be too high, making the insurance premium larger than the gain provided by reusability.

I'd believe most companies could prefer [more certain] safety -- which just means SpaceX will have to work on increasing reused rocket numbers by whatever means.