skysight-inc/HackerNews huggingface dataset:
Stallman is just recommending a way to have scripts self identify as free software. There's nothing that'll help there.

Implementing as an API doesn't help much, and in fact might just make it easier to fake. This is because you have a reduced surface area that you need to check and modify.

It's theoretically impossible if you assume full control of hardware. But most people are not capable of controlling hardware, so secure enclaves and remote attestation are likely to be a legitimate win if feasible.
So an odd counting vector and and even counting vector, both in the positive direction would be equivalent to the approach I suggested. That makes sense. Thanks for the clarification.
Remember Tesla App for Apple Watch? This time we made one for Android Wear
The name is the valuable thing, though; the hardware design is old and heavily cloned already.
I slapped this together recently using Chartbeat's realtime data (so the sources are major sites – nytimes.com, foxnews.com, espn, etc): http://percentoftheinternet.com

http://percentoftheinternet.com/windows
http://percentoftheinternet.com/chrome
http://percentoftheinternet.com/ie

...etc...

Raw data is here: https://api.chartbeat.com/cbtotal/?v=2
Nothing is "wrong" with it, I'm just surrounded by people who obsess about tech all day and go after whatever is newest and shiniest - if you're not running chromium on your 15" retina macbook pro then you're obviously incompetent.

Turns out for most people stability and cost are much more important than having something incrementally better.

Not passing judgment on one or the other, just thought it an interesting realization.

For what it's worth, I run Windows on a virtual machine to do some stuff and I use 7.
3,000 marketing pros reveal the best conversion optimization tools
It's not well known but this is exactly what the unabomber was so worried about that he decided he needed to maim people to get everyone's attention.
This will really depend on you and your home life to be honest.

I've been working from home for more than a year (with some half year stints before) and I can't imagine going back to an office. I have my kid to play with and my wife to talk with if I need to. I also chat with co-workers online but if I really want to talk to people, I can always pick my laptop and go to a cafe, gym, mall even. I wake up at around the same time everyday (well, kid is my alarm clock), do the normal morning chores with the family, then start working. I can (and do) stop every so often and do some exercise or sometimes just stop and read a bit of a book if the weather is nice outside. I'm always on time for dinner since I'm the one that cooks it, and I put my kid to bed everyday. The fact I work from home could have been an excuse to not care about schedules, slack of on the personal hygiene/appearance, but I didn't and as I said, I would probably take a large payout over going to an office again.

I think, and to be fully honest, whenever I worked in an office, I would say I actually enjoyed the company of 2-3 people and the rest were a bother (to me) and I couldn't really go: "John, no you can't come for coffee because people don't like talking to you" so having my family, some friends (have a few that also work from home living nearby) and ability to talk to random strangers gives me all the socialising I need.
Weathering is caused by cars, especially heavy trucks. They crack the pavement, which then invites damage from freeze-thaw cycles. If nothing but bikes use a road, it will be good for the next seventy-five years.

Anyway, I'm completely in favor.

I think cyclists should be licensed in order to be allowed to use roads, and the fees could be collected through the licensing system. The police should be able to impound bikes that are driven on roads by unlicensed riders, or bikes that are not road-worthy, such as no lights at night or nonworking brakes.
What is kill to bite ratio?
The crux of what USG is saying 'Helping a person who exposed our spying programs shows that you must not want the benefits of them'. Please detach yourself and look at it from their perspective - does this really seem unreasonable?

The vice chancellor's statement is phrased to be as incendiary as possible, to throw USG under the bus and make it sound like the German government and USG are two separate entities with some high level information sharing. But given the USG military/listening outputs in Germany, how could anyone possibly think this is the case? The people in both sides' intelligence services are trying to protect against similar "threats" and their perspectives are more alike than different. We've seen specifics with FVEY, and it's prudent to assume that all USG allies are in similar conspiracies, with the countries' relative power just determining how many bargaining chips they have. Make no mistake - The German government is benefiting greatly from this information exchange and would never want to lose access.

Now, please don't peg me as defending this state of affairs. I'd love to see justice be served through political means, and I'd really love to see USG get taken down a few pegs to prevent the otherwise inevitable catastrophic collapse of the US. But justice isn't the driving force here - power is. And power tends to coalesce. If you find yourself thinking of a distinction between strategic information (wouldn't be shared with Russia) and protecting against terrorists threats (should be shared freely), you've entered their operating paradigm wherein governments protect each other by monitoring all individuals for threats.

NSA isn't the only entity doing full takes; it's just a (now prominent) nucleation point. Even if they disbanded tomorrow, many others will still be tapping those cables. The only way to protect against black hats, especially well coordinated global ones, is to secure the communications themselves.
Shouldn't feel guilty. It's OSHW, anyone can build their own and resell.
Analyzing Vim by PVS-Studio in GNU/Linux
I'd love to see the stats for HN for browser use.
GoDaddy accounts vulnerable to social engineering and Photoshop
Please give a reliable source for your claims.

We have peace now since more than a few decades. It doesn't need a signed peace treaty to have peace in a country.

The 2+4 contract has explicitly stopped the allied control.
Jaehyun Park's Stanford ACM-ICPC resources:

http://web.stanford.edu/~liszt90/acm/
I still have a trapped nerve from lifting one of these.
Unemployment: Friend or Foe?
Great reply - could I ask you to elaborate on those pros/cons? Very interesting post as this is similar to what I'm doing now.
Hmm, I was expecting to see what sites government employees were visiting the most. Probably not for a few years at least :)
>I've seen very detailed plots of the free return trajectories that the Apollo missions followed, too.

Free return trajectories can be calculated with patched conics. 3 Body problem was solved, but actually doing all the math involved dynamically was far to complex for mission computers.

You forget that at the time NASA was using IBM System/360's which were struggling to maintain 5 megaFLOPs
cmd is deprecated, and has been replaced by Powershell (in 2009, six years ago!).

What file system layout would you want? UNIX? Does anybody think the current way the UNIX FS is used makes any rational sense? It is a giant disjointed mess, with a great deal of misusage by developers and users alike.

Microsoft could dispose of e.g. Program Files, Program Files (x86), Common Files, and also re-organise %AppData% and %windir% a decent amount. Remounting on / wouldn't provide much benefit (and technically Windows NT actually is mounted at \ they just use the root context for object storage, not files).

They have been trying some re-organisation with the Windows 8 "app" system. But since that has not been very successful neither has the project seen many results. Essentially they're siloing apps in the same way mobile devices do e.g. iOS apps/Android apps, etc.

SVC already is completely driven from the command line already (there is no UI).
College coaches are the highest paid public employees in 40 states
Could be. You can have a look at the headline data here: https://gist.github.com/matslina/64601f39ef12bd653be6
We're probably one of the few games where exploiting a security vulnerability in the game gets you Achievement Unlocked.
A Cluster of Tuleap with Docker Swarm
I do attend UBC, but I live in the city, so I do not suffer from the poor transit out in Coquitlam or Surrey. Building the UBC subway would certainly help the usage in the suburbs though. It would completely replace the 99, and reduce demand on some of the other east-west routes, likely freeing up more than 100 articulated buses and their drivers.

Go Transit has a good system but it's comes at a cost. For example - Langley to UBC is the same distance as Hamilton to Toronto. If you're a student, doing that roundtrip on Translink is $35 a month (U-Pass), whereas the Go Bus is $300 (PRESTO card). (If you're not a student it's $200 / $400).
The net effect here is that each client must lock the database on insert.

A client can batch multiple inserts but the server cannot batch inserts from multiple clients.
Interesting, but woefully incomplete since it doesn't include a single turnstile-based statement. I'm still looking for the cheat sheet that includes an explanation for how to read and comprehend anything written by Simon Peyton-Jones.
'What percentage of a launch vehicle (rocket to space) do you think is the cost of labour? It's about 80-90%! It's labour!' Peter Diamandis, X-Prize
A macroexpression
If it's an exaggeration then this industry's labor pool is in even worse shape than I suspected.

To put this in context: I'd consider myself average, maybe slightly above in some contexts, below in (many more) others, and my current salary (full-time, all-in) is closer to $200k than $150k. The majority (about 80%) of that is base salary, not "bonus", stocks/options, or benefits. If I can get a ("senior developer" level, not management) job with that compensation, the people in this valley who are much better than me (and that would be most, or at least many, many others) ought to be able to command significantly more.
So, I am pretty proficient in these things, but I don't consider myself competent to declare it ready by code audit. I like the Google support, and I like the OpenBSD adoption. But since I am not running OpenBSD, I'd really like to see it make it into my distro's upstream by some community process. Endless ink and bits have gone into talking about 'cruft' in code that provokes big refactorings, when the what was considered cruft ends up being quite meaningful to correct and/or stability. To summarize - I'm with the gp post, I'm not convinced it's ready for primetime, either: it's stepping into giant shoes and has a very short track record.
I like it, A LOT! Great job
This is the natural progression of driving, dunno why people are getting so offended.
I like the idea, although personally I wouldn't be excited about being "interviewed" like this. I am supportive of its existence however because it has definite upsides (i'm sure there are more, just enumerating a few):

1) eliminates some cultural/gender/language/fashion/appearance/disability biases

2) its not subjective

3) no difference between local and out-of-town candidates

I'm glad that the toolbox for candidate search is expanding. I hope one day employers might be able to ask candidates which form of "interview" they prefer to have so that candidates can best demonstrate what they excel at in a way that is most suitable to them.
The growing size of firms may help to explain rising inequality
New Vulnerability Found in Facebook, Can Expose Your Private Photos
Not exactly the same, but if anyone is interested we just launched Bugfender a few days ago, a platform for remote logging/remote debugging on mobile devices (and later also desktop and JS web applications). It's still in a very early stage and so far we only have an iOS SDK available, but any kind of feedback is appreciated.

The beta is now open to the public you can simply create an account here: http://bugfender.com/
With plus lens therapy, you only wear the plus lens while doing close work. If you were wearing the plus lenses while looking more than a few feet away, you wouldn't be doing plus lens therapy.
Dear TechCrunch
TechCrunch, please stop having auto-popup images and auto-playing videos on your site when you scroll over something or when the page loads. Makes your site the most annoying one I visit.

Vote for this and maybe they'll stop.
"Don't trust the server with anything other than availability."

You probably shouldn't even be trusting any one server even with that!
I haven't really run into this issue myself. Maybe I'm younger than others, but the two cars I've purchased from dealerships have been done mostly online. The only part that could be nerve-wracking is turning down all the up-selling when finalizing the purchase (warranty for wheels, dents, etc).
How to teach yourself iOS app development with Swift properly
The first statement is untrue: Stallman is also advocating measures to replace obfuscated JavaScript web apps with free versions:

"Browser users also need a convenient facility to specify JavaScript code to use instead of the JavaScript in a certain page. (The specified code might be total replacement, or a modified version of the free JavaScript program in that page.) Greasemonkey comes close to being able to do this, but not quite, since it doesn't guarantee to modify the JavaScript code in a page before that program starts to execute."

As for the second claim, actually implementing as an API does indeed help, because most of the code is then running in the browser and can be audited.

As for the third, the are no known ways to implement secure enclaves and remote attestation, that is what the questioner is asking. If you know of any, do share them.
you can get the same effect with whatever is a plus lens for you, though. So if your normal rx is -1.5, do close work without glasses.
What Is an IT Security Compliance Audit?
I'd probably suggest that if a direct-from-manufacturer store would open in NJ the people most likely to be able to find employment at such an establishment would be those who used to work at a dealership.
Down the VR rabbit hole: Fixing judder (2013)
The non-Safari visits from Mac + iOS are actually 5.4% of all visits, or about about 21% of Mac + iOS visits.

(5.4% / 25.8% = 20.9%)
Cisco Helps Customers Avoid NSA Interception:Ships Equipment to Vacant Address
i'm similarly baffled... but this is what elon says 'I think it's worth noting that when somebody has a breakthrough innovation it is rarely one little thing. Very rarely is it one little thing. It's usually a whole bunch of things that collectively amount to a huge innovation. But the problem is because it's hard to convey a complicated thing to people the innovator or the innovator's PR department will say such and such is the reason why it's better. This little catch phrase. Like what was it with ebay, Pam wants to do Beanie Babies or something. I mean really, that's not the basis of ebay. Oh right, yeah pes dispenser. It's like something the PR department made up. So really innovation is a collection of complex things which are usually difficult to convey so there is some soundbite that's given. You know why's South-West Airlines the most popular Airline in the whole business. It's not just because they use 737s. I mean if it was that easy everybody could do it.' https://www.youtube.com/watch?v=Xohhz9Hn8p0
Database encryption doesn't make a whole lot of sense to me. Proper row and column security, and using real database user authentication (not one single, pooled web server user) is real security. A db on its own box, in its own network zone, physically controller by the data owner.

What's the threat here?

SQL Injection? Encryption won't help. Use parameterized queries and least privilege.

Evil admin? They can just monitor the web server instead of the db.
I think there's value in being able to say: here's the code I am claiming to use on this service, and the only way it isn't is if I have deliberately and actively lied.

That means that if someone hot-edits the files on the server, the resulting edits should be visible, and/or the site is clearly unverified. If you deploy from a branch someone doesn't know about, it should be clear. If you just don't document that you made a deployment, someone should be able to figure that out.

Of course that can be spoofed, but spoofing a solid claim on what is running is very different than not making any claim about the code that is running, so you've made yourself accountable.
Author here. I'll try to watch this and answer questions.
The biggest misconception we've managed to foster about what we're doing is that Starfighter is a form of interview. It isn't. At all. A better way to think about it is that it's a sort of Venn intersection between "Github resume", "Coursera course", "Dwarf Fortress", and "recruiting firm".

Our crusade against the tech job interview is roughly analogous to Google's "organizing all of the world's information". It's a mission statement, but it isn't a description of our first offering.

That said: the technology we're working on ports beautifully to actual interview processes (it came from a successful process I built at Matasano). We're also very happy to talk to companies building hiring processes and evangelize and help. Companies with smart, modern hiring processes are especially fertile ground for what we're doing, so we'd like to help more of them come into being!
I have only one complain about the issue tracker. When you create a pull request there should be a dropdown-autocomplete kind of thing so that I don't have to write down in a piece of paper which issues (i.e 'fixes #30 #120') are fixed in the branch I am about to merge.

The rest of it actually fits my needs although I am a one man army so YMMV.
How Weird Twitter's fart became a DevOps idol
Is it known how exploit prevention is done in a remote trusted computing scenario? It is well known that TCM implementations on behalf of Microsoft are being circumvented left and right.
Because IT worker shortage, right?
(Now with more flaming hoops!!)
Used car dealerships run scams, too. I've bought a lot of cars, though, and never from a dealer. Some folks act as if they're OBLIGATED to buy a new car every couple of years, and obligated to put up with these people.
You're simultaneously claiming that open source code is great because large groups of people can look at it to spot vulnerabilities and that it's not great because large groups of people can look at it to spot vulnerabilities.

There are people on both sides of that fence, but you do need to be on one side or the other.
Yeah, the fact the DDL statements are transactionable in Postgres is a HUGE win IMHO.
No, the vulnerabilities are in the ASN.1 code, in places like libssl/src/crypto/asn1/a_set.c, tasn_dec.c. There's also stuff in the PKCS 7 and X.509 code, but that code is still very much ASN.1 code, since it contains handwritten coders and decoders for PKCS 7 and X.509 (the asn1 directory contains the code for the generic types, like INT, SET, STRING, etc.). There's also some weird stuff, like an X509 time comparison functions in x509_vfy.c that is like the ones in asn1/a_XXXtime.c.
AI Quid Raises $39M
Oops accidentally upvoted you. As somebody else mentioned above, Best Buy competes just fine with Apple while buying their products. So it's not impossible/unfair.
So obvious right?

Well, we already have laws that make the possession of heroin illegal. They are broken all the time. With regards to the original point about silly laws that prevent us from spending our money and free time in ways that don't harm others, if person A is walking down the street and person B illegally uses heroin on the same street, person A is not likely to be harmed. You can't really say the same about person B and his/her machine gun.
CMake supports VS2012-2015 natively in the latest releases.
Logs for Drupal: Why You Need Them and How to Do It
Why did Scala never reach the critical mass of Docker?
> It's a double edged sword. The manufacturer will be happy if he sell a car. The dealer needs to first buy the car from the manufacturer and then sell it for a profit. Thus the manufacturer have a competetive advantage, that they could use to remove all competition, and then charge whatever the fuck they want.

I don't think that's it... having dealerships does nothing to stop the manufacturer from changing prices to whatever they want.
Http2 Service offers http2 speeds for http 1.1 servers. CloudFlare is a great service and can be used concurrently with with H2S.
We built Http2 Service for high traffic services that can see an immediate impact on the bottom line from reduced latencies. Our focus is on performance. In the future will evaluate whether supporting lower tiers makes sense.
Will Starfighter be focusing mostly on security? That seems to be most of the examples that I find, and it's not a field I'm terribly interested in. I love the idea though, and would like to see it applied to other areas.
Dramatic increase in Bitcoin-bars in Copenhagen prior to pub crawl friday
Why on earth are you buying the ticket books if you take public transport nearly every day? If that's really the case, a monthly pass is cheaper, and the monthly pass will still be available after Compass is introduced.
Wow this is great and thanks for sharing. I had the same feeling that if I let them know too early, it might not work out in my favor; however, I won't know until I try.

As for moving and sticking to it, that's definitely my plan. This move is actually out of my control, so at least when I let them know I'm moving, there's nothing that'll change my mind and I'll make sure they know that.

Thanks again, this really helped.
Hi Michael, if you go opensource way, I would be happy to integrate this into my apache licensed project (see my desc). That would give you head start on Java and Java Collections.
I was so hoping this was a JIT compiler for BASIC...
The Psychology of Native Ads
A Porsche Panamera vs Tesla comparison is a poor one at best, knowing both the public perception of these brands and the products they have produced.
It definitely does make you more fit for government.

If I support opinion X and want it to succeed, I should work hard to ensure that those who support X but don't know when to shut up get ignored, ostracised and removed from any public speaking positions in "my party"; so that in the public discourse the supporters of opinion X are represented by people who know when to shut up - because they will help X, but the cranks (with good motivation) will only hurt the cause.

Similarly, if two parties both support X but one doesn't know when to shut up, then you should vote and support only the other party and weaken the too-radical one.
Apple's Missed Opportunity with Its TV Streaming Service