skysight-inc/HackerNews huggingface dataset:
It's a good question, but I guess the answer is - people just don't work that way. You can't separate the form (community) from the content (space ships). These are not substitute goods, you can't just replace Eve with World of Warcraft or with helping Red Cross.

And the reasons people choose games instead of life? I guess it's complicated. I am guilty of that too; I could be building real rockets and learning real aeronautics instead of wasting 400 hours in Kerbal Space Program and I'd be probably much more qualified than I am now. But I know that I wouldn't find the strength and willpower to pursue "the real deal" instead of a fun game that approximates it.

I sometimes am sad too, just like I am sad about the world's focus in general. Most people waste even more time on even more useless things that Eve players do on Eve. It took 12 years from first artificial satellite to putting a man on the Moon. If people could maintain that kind of focus and channel it to the right goals - ending poverty, illness and death itself, we'd live in a paradise before the end of this century.

(IMO it's actually a huge mistake that a lot of people in the field of educational games make - they try to make education apps pretending to be games, instead of making games that educate as a side effect)
You can be a citizen (or national) of the United Kindom (of GB and NI) but not simply of Great Britain though.

It also makes it a pain to find, I spent a good amount of time looking through different entries (UK, United Kingdom, British, England, Great Britain etc.).
No. http://www.pixeljoint.com/forum/forum_posts.asp?TID=11299&PI...
ASW_JSPs
sdsdsdsds
I think it's on by default. I could be wrong, it's worth checking now you mention it!

And I know they didn't implement it for group chats, only 1-1 so far.

And yes, you're correct, they could rip it out at any moment, in fact they could already have done so, and as a facebook subsidiary I'm not huge on the idea of trusting them.

OTOH getting the whisper systems folks in was positive and from reading what they wrote about it, it didn't seem they were just being used for a PR exercise.
Except Intel is significantly cheaper. I do like the other answers stated so far, but lets be frank... the typical Linux cluster of 2S Xeons is going to be much cheaper and scalable than massive 4S 144-Thread beasts.
I have to wonder how they're going to market these things to people without breaking any consumer laws. It seems like you'd almost have to trick people into using them for any extended period of time (like after they get their first electric bill), which will make them a prime target for lawsuits, Attorneys General of every state, the FTC, Congress, etc.
It would be great if there was a link to explore without logging in, because I don't feel particularly compelled to give my details to this site.
> I'm becoming more and more convinced that it's impossible to profitably mine bitcoins

I suspect that's been the case for a few years - at each time I investigated, in the pre-ASIC days starting from 2011, the electricity cost was roughly the same as the Bitcoin value, and the only people who seemed to be able to mine profitably were ones with "free" electricity (e.g. students in halls of residence).
Adrian Lamo: Hackers Wanted
"For many of the affected virtualization products, a virtual floppy drive is added to new virtual machines by default. And on Xen and QEMU, even if the administrator explicitly disables the virtual floppy drive, an unrelated bug causes the vulnerable FDC code to remain active and exploitable by attackers."
SpyHunter 4 Email and Password 2015 Crack Free Downlaod
TextSecure doesn't work more than 50% of the time for me. Messages I send never get delivered, or they get delivered and replies disappear. Or they send and show up 2 days later. Or the client cannot cope with key changes and just fails to do anything whatsoever
So you won't bother reading what other people are saying, and instead will resort to spewing retorts based on your preconceived notions of what other people are stating? You must be a fun person to discuss with.

I'd say actually reading may be a better approach rather than to use an heuristic.
Get 10 BareMetal SSD servers in the cloud for free
How to pip install NumPy in two seconds flat
>It only has paragraphs, but no sections, summary, or anything like that.

Almost like a book. I pity the "tl;dr"/buzzfeed generation.
WhatsApp only uses encryption if both people are using Android and if the server approves it. There's also no way to know whether you're using it or not.

I feel that Silent Text is omitted from these lists too frequently, unfortunately, as it's one of the most secure texting apps currently on the market (I would know, I work for SC).
Sweden have imported so many males from middle east that it's now more men than women in Sweden for the first time in 300 years.

"More boys are born in Sweden, the average life expectancy of males has gone up and it's mostly men who move here from other countries."
http://sverigesradio.se/sida/artikel.aspx?programid=2054&art...
The exploit affects VM's whether or not they have a floppy controller or disk attached.
I agree with your conclusion, but this is an example of the "worst argument in the world": http://lesswrong.com/lw/e95/the_noncentral_fallacy_the_worst...
800 million users:

http://blogs.wsj.com/digits/2015/04/17/whatsapp-hits-800000-...

I haven't heard the final word on that. For all we know Facebook could pull the plug on the "in-development E2E encryption" in the next few months and act like nothing changed. Whatsapp has never made a public statement about it so you can't trust that it uses "decent security under the hood" right now.

When they make a public statement about rolling out E2E encryption to all of its clients and change their Privacy Policy to reflect that change (since they aren't supposed to "get your data" with E2E encryption anymore - therefore if the Privacy Policy doesn't reflect it, that means they aren't using E2E encryption) then we can at least have a reasonable expectation of them committing to it (even if in theory they could still bypass it and we would never know, because it's a closed source app, but at least if we do find out about it, we can hold them to it - right now we can't hold them to anything because they've never said anything about the E2E encryption themselves).
The disclosure states that due to another bug, even floppy less hosts were vulnerable...
well it'd be hard to make twitter without having handlers, etc., but you can put a random email address :) we're not doing this to collect emails
A simpler, less breathless description from the Red Hat BZ[1]

An out-of-bounds memory access flaw was found in the way QEMU's virtual Floppy Disk Controller (FDC) handled FIFO buffer access while processing certain FDC commands. A privileged guest user could use this flaw to crash the guest or, potentially, execute arbitrary code on the host with the privileges of the hosting QEMU process.

If you're using RHEL, then SELinux further confines the qemu process so although you can run arbitrary code in there (which is very bad) you cannot access any files on the host filesystem except ones which qemu has open. Also libvirt runs qemu as a separate user, and further confines it with some cgroups rules. Depending on the version of RHEL, seccomp may be involved too, which limits the type of syscalls that qemu can make.

Applying the qemu fix is still highly recommended of course.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1218611
One of the first exercises in The Art of Computer Programming is Fermat's last theorem. Don Knuth rates it as 95/100 in terms of difficulty.
Are you misreading psychiatric as psychedelic?

Even then, I vehemently disagree with you, but I at least can follow the logic.

Arguing that clozapine, diazepam, fluoxetine, etc., are gateway drugs for heroine is an argument I've never heard before. It sounds ridiculous to me, but if you have evidence to support the claim, please post.
As far as I can tell, the login doesn't actually do anything...I think all this kid is claiming is that he made the login page I guess
I did read the article. Power-per-dollar are the smaller 2S Xeons btw. Not the massive 36-core Xeons.

However, the memory-bandwidth argument makes sense to me. So I'll accept that as a good reason to go Power8.
For feature film, CPU still largely rules the roost, thanks to insane memory requirements and the fact that properly SSE'd/AVX'd code isn't THAT much slower than GPUs for highly parallel stuff like raytracing when you've got multiple CPU sockets.
> if we ever for some reason have to close down shop, we will release the Bubble source code under an open-source license so that you can set up your own Bubble server and keep your app running

That's quite a nice thing to read. I hope more people start committing to this.
In open source, communication is the key to herding cats
Or to quote Beyer's Grace Hopper and the invention of the information age:

>Common sense would dictate that the most experienced programmers should have been assigned to these difficult tasks, but, as Hopper glibly explained, young people did not know that they were supposed to fail.
The thing that set Mortal Kombat apart back in the day -- besides blood and gore -- was its use of digitized video of live actors as its character sprites. This couldn't be done in the 3D era, and up Through Mortal Kombat (2011) the 3D character models looked hella goofy when compared with real people.
So this is your site? That you submitted? Maybe should have been a Show HN?
It is a necessary evil, no need for the rhetoric.

Profit and PR are hardly the goal here -- community awareness and public safety are paramount. Vulnerabilities need to be obviated to the general populace at large.
My dad is still an "avid" Blackberry user (as much as anyone who uses a blackberry these days is avid) and I note Telegram does not have a Blackberry client. Until that changes, we're still on whatsapp.

EDIT: I want a polished official product, not something put together in a hackathon: https://telegram.org/blog/bb-results
From the FAQ:

> For many of the affected virtualization products, a virtual floppy drive is added to new virtual machines by default. And on Xen and QEMU, even if the administrator explicitly disables the virtual floppy drive, an unrelated bug causes the vulnerable FDC code to remain active and exploitable by attackers.

So I guess for KVM you're safe if you don't have a virtual floppy drive, unclear whether it's KVM default though. For the others, you're still vulnerable by an unrelated bug.
The T20 incident was massive but I would like to make make some points.

T20 never gave bob the t2s he keep them in RKK yes RKK was in bob and one of the original 4(5) depending on how you look at it.

Originally he just rented them to bob for a cut via his corp (which was very common in bob to share Tech). Yes Bob got access to some T2s they might not have otherwise but in no way is it the reason that bob got where they were in the EvE world. In the upper levels of bob (I cannot say 100% as I only spoke to those in my corp) people were not aware until the incident broke. A few people in his corp knew based on the originally leaked emails. I think CCP did mess up by not removing the T2 BPOs and being slow to deal with the issue but that is not what we talking about now

That being said you say "abused their GM powers to threaten other alliances." I have never seen this claimed or proven, I would be very interested if you can show me anything on this. T20 was never fired from CPP, the idea he was threatening alliances based on his job(GM powers) would have been instance dismissal

On a side note, the T2 lottery had meant that it was very possible he did have these BPOs. I had one friend have 3 alts, 15 research agents and he himself got 2-3 T2 ship BPOs and 10+ items. I got 2 from 1 research agent

The worst out of all of it from my point of view was that this derailed BoB and made us look like cheaters. Bottom line is we did not need those T2s to achieve what we did, they did not give us the edge. What gave us the edge was the trust between us all (Band of Brothers) which started to erode with this incendent and was smashed when bob was disbanded over night a few years later.

All Hail BoB and SirMolly. the true creators of the political/military structure we see today in eve.
Not sure I want to apply for an identity document via a form that says "Oh snap!" to report errors...
Telegram is great. I've got all of my friends upgraded from WhatsApp (and SMS) and we haven't looked back.
This will be perfect for IOT devices
A lot of people are signing up though. Doens't work for you?
I think you have left out an important detail: She did so on Twitter. Because it was on Twitter, at least one was (at least temporarily) let go from their job (and has 3 kids).

Neither were given any opportunity to apologize, or to explain the perceived offense. In that moment, she acted foolishly and irresponsibly and most importantly publicly, without any regard for the lives of the people she was acting against.

[1] https://twitter.com/adriarichards/status/313417655879102464

[2]
https://news.ycombinator.com/item?id=5398681
[...] security vulnerability in the virtual floppy drive code [...] For many of the affected virtualization products, a virtual floppy drive is added to new virtual machines by default.

That is a pretty simple mitigation. Make sure there are no (unnecessary) virtual floppy devices defined in your VMs.

I checked my VMs (Ubuntu/KVM) and, as expected, none of them have a virtual floppy - they are not added by default on that platform.
Ditto. We have been hearing so many negative things about the US that it really scares even to think going there, being it as a tourist, on business, whatever.
This article mentions England a lot. You can get detailed statistics from our Office for National Statistics.

If you want to know suicide rates in different regions you want the (unfortunately named) NUTS3 document: http://www.ons.gov.uk/ons/about-ons/business-transparency/fr...

If you want deaths registered in 2013 (note the registered there. Somone could die in 2012 but have a death registered in 2013) you want this page: http://www.ons.gov.uk/ons/rel/subnational-health4/suicides-i... which links to a spreadsheet with the data.

They use a clear definition of what they count as suicide.
I was traumatized by my undergraduate calculus courses. And that was without the profs (who were all excellent) slipping in any "Unsolved Research problems." This entire thread has been like Trauma Trigger [http://en.wikipedia.org/wiki/Trauma_trigger]

I just want to make sure the undergraduate instructors reading this thread realize that doing this on the sly in a standard problem set would be a very, very bad idea. Not cool.
GPU's still only have a quite small amounts of memory, that greatly limits the type of work they can do.
In the first batch of comments on WaPo there is a link to the petition: https://petitions.whitehouse.gov/petition/abolish-civil-forf...

With close to zero interest at this point
People are generally prescribed opiates, which are not considered psychiatric but a pain reliever, and can become addicted that way. Perhaps you're thinking about benzos, like Valium or xanax, that are both psychiatric, addictive, and whose abuse/withdrawal can be extremely lethal (especially with alcohol for an overdose combination). They are similar but have different problems. Benzos are more deadly but less life-destroying. Opiates are probably prescribed too much/for too long without patient monitoring.
From the same article:

> Theo de Raadt's problem is that he views security the way cryptography experts view cyphers: as an absolute. But security isn't like math. It's not absolute. There are right and wrong ways of doing security.

Not an absolute but there is a right and wrong way to "do security?"

To be fair Boender is attacking the naive maxim that "virtualization is secure." It's just another layer if you isolate processes inside of virtualized run-time environments. Makes sense... it's not snake oil.

However there is no need for "right" and "wrong" in these discussions. The security of any given system exists in a continuum and it will only be a matter of time before the next vulnerability is discovered. I get the sense that all we can do is limit the damage that can be done by any particular system.

It seems that virtualization is just one path towards providing those limits just as chroot and other attempts have been.

I'm most interested in seeing how jitsu and unikernels can turn the tables... not only can a process be wrapped in a virtualization layer but it is short lived and only runs when it is requested. It puts the onus on us to set up the summoner properly and provide safe-guards... but it's just another layer of complexity for attackers to manage.
I'm building a small system to control the development solicitations, changelog and database scripts.
Also I'm planning to build a HR system with my brother and a friend.
TextSecure = no web, windows, linux, or OS X client. Automatic fail for my uses.
Because for Swiss people like you, Welsh people like us don't like doing business with Bavarians who call us English. Maybe if you weren't Austrian, you'd understand.
Let me qualify, this isn't really my area, so I'm a bit out of my element.

If we are talking rasterization, isn't an OpenCL/CUDA version pretty much always going to stomp an x86 implementation? While on the ray tracing side, there's little difference?

I'm just curious because my first reaction was that "sure the dev cost is initially much higher, but how much time is saved on rendering in the long run?".
it's one of our users.

Could have been a SHOW HN indeed, even though it's more about the idea that you can do that without code than showing twitter
A lot of the time yes, but a lot of the high-end renderers used in production are still CPU based (anything from Dreamworks, ILM, Disney or Pixar are all using CPU-based renders for the most part.)

It is a lot of work to convert some of the global illumination calculations that are high quality (not special case) to run on GPUs fast. That is the main issue.

We support real-time high-end GPU-based rendering as well:

https://clara.io/view/b43f3215-c9ef-488f-a55f-1bf2a7d74f3f/w...
https://clara.io/view/193070f2-e8af-4afc-a531-9d82338b5288/w...
https://clara.io/view/a558dca2-8c2f-432c-ab34-9135c3066010/w...
I don't like this trend of "marketing vulnerabilities" with a cute name and a startup-looking landing page. That entire page says nothing about the actual issue, the nice looking graphic just shows how this exploit (and really any exploit like this?) can give attackers access to things outside of a VM. Duh.
Ah, you should specify that you need to make an account. For some reason I was thinking this might somehow attempt to do SSO and grab your actual twitter data
Building a Slack Clone in Meteor.js: Getting Started
Oh wow, I didn't think of that when I saw this, but you're right. With this, I could place devices everywhere, in my car, my summer house, my garden, wherever, and they could all communicate with a central server.

I should probably work faster on that secure messaging protocol for embedded devices I wanted to design.
Why Facebook Instant Articles Are the Future of the Web
The level of detail in this makes me doubt the claim (0 lines of code), but assuming it is true: really well done.

For those who are wondering if its just a login page: you can register an account (login is automatic on registration, and email verification is not required). The entire UI is almost exactly same as twitter.

Link to the framework used: https://bubble.is/
GPU is maturing as we speak. It isn't yet used on the high end though because CPU-based render machines often have +32GB of ram to store the scenes, where as high end GPUs may have 12GB of ram.

But you are correct that GPUs is the future of rendering. :)
Wow thanks for the taking the time for the comprehensive reply! :) Really, my comment turned into a half-rant, and I wasn't expecting such a response!

Well honestly, if it does become "hackable" (i.e. ui, addons), then that invalidates all of what I said. But yes it is still experimental as you say of course, so I understand.

This is a bit off topic, but one thing that's really deterring me from firefox lately is the signed extensions thing. [1] To cut to the point, I'm not sure how credible random tweets are, but just as a light example, I got someone (from mozilla security) to admit it's a mistake [2]. (Sort of, I'm twisting the words I think, english actually not my native language, so I still have trouble expressing myself sometimes.)

My comment is just that I hope that servo/browser.html doesn't make the same "mistake". I.e. implement proper addon security, sandboxing etc. Because, if you guys do plan for an addons api, and if you give it the power ("except they would be for the whole browser chrome"), then you should also plan ahead on the security implications of that too, if any. I guess I should watch the servo project for any addon plans and bring it up there! But other than that, I'm not a security guy, so I cannot say what exactly to do.

If you're wondering why... yes extension signing is great of course, just not when only Mozilla has the power to do so imo: [3] (Not my blog, but iirc I think I agree with most of the post.)

And funny that you mentioned servo-shell by glennw, I actually remembered that when writing my previous comment and had a tab open on it! See my screenshot, top left! :p

Also, thanks for the irc hint!

[1]: https://blog.mozilla.org/addons/2015/02/10/extension-signing...

[2]: https://twitter.com/dveditz/status/591996675100545024

[3]: http://blog.rubbingalcoholic.com/post/110743007958/mozillas-...
I definitely think it should be taught. If taught correctly, I believe it could really excite children about school. Plus it just offers so many benefits even to kids that won't become programmers like problem solving, critical thinking, planning, etc.
We're already working on a distribution version and we'll open an API soon so that people can add things that are missing.
> The reporting is often disgusting - "hot teachers fuck their students".

I have never seen that sort of wording in mainstream news outlets. Tabloids like the Daily Mail -- possibly. But one thing in common is that they almost never call it rape when the perpetrator is female, which it is in the case I linked (look up CA law on the subject). On the other hand, even when it is an unproven accusation against a male, they freely use the word without even bothering to add "alleged".

> A small part of the problem is that rape is defined as penetration by a penis.

Apart from the fact that your linked laws are UK ones, and the case I was referring to was CA in the US -- how is this a "small part of the problem"? It is a huge problem if laws literally say that only men can rape.

I think some part of this disconnect might be due to the differences between US and UK reporting. I'm guessing UK tabloids sensationalize stuff more but are also more careful about actual allegations due to stricter libel laws, whereas US media is more directly anti-male in its reporting.
So to me a 'cryptosystem' is the way the elements are combined.

Block ciphers are used in a selection of modes and when combined into a protocol with integrity and authentication catered for, we have a cryptosystem.

Constructing these is hard, even with well-known algorithms, and is the source of many sneaky attack vectors. The fact that they have effectively invented their own mode is suspect, and the cryptosystem as a whole is not really well-validated either.

Their "$300,000 if you break it" contest is seen as a trust-gimmick as it provides no cryptographical or mathematical guarantees, it simply shows that nobody has yet broken it for whom 300k is more important than access to the data.
Color Guessing Game