skysight-inc/HackerNews huggingface dataset:
Firewalls are just some stupid crap industry made up and went with. We've known since the Orange Book days that security had to be done holistically involving every endpoint and network. Their standard for security was a strong TCB on endpoint with trusted path (see EROS or Dresden's Nitpicker); a network card with onboard security kernel, firewall, and crypto (see GNTP + GEMSOS); connections between networks through high assurance guards (see Boeing SNS or BAE's SAGE); proxies + guard software for risky protocols such as email (see mail guards like SMG or Nexor). All of this collectively working together was what it took to enforce a fairly-simple, security policy (MLS). More flexible attempts happened in capability model with KeyKOS + KeySAFE, E programming language, CapDesk desktop, and so on.

So, the above was the minimum that NSA et al would consider secure against adversaries on their level. Every security-critical component was carefully spec'd, implementation mapped against spec 1-to-1, analyzed for covert channels, pen-tested, and even generated on-site. Commercial industry, aiming at max profit and time to market, just shipped stuff with security features but not assurance. Broke every rule in the field. Came up with firewalls (knockoff of guards), AV, and so on to counter minor tactics. Of course that didn't work as it doesn't solve the central security problem: making sure all states or flows in the system correspond to a security policy.

The best route is to put security in the end-point along with E-like tools for distributed applications and hardware acceleration of difficult parts. Within your trust domain, you just check data types and use that for information flow control (aka security). Outside trust domain, you do input validation and checks before assigning types. The hardware will be like crash-safe.org or CHERI processor in that it handles the rest. A security-aware, I/O offload engine will help too. Fixing the root problem along with a unified model (capability-based, distributed) will make most security problems go away. At that point, firewalls will be about keeping out the riff raff and preventing DOS attacks.
This is wonderful. Does it remind anyone else of Danger 5?[0]

[0] https://www.youtube.com/watch?v=xYXHzOqnMpk
Snapchat recieves huge funding
The app isn't signed for OSX. You have to adjust security settings to install. :/
I had similar experiences in Hungary: I grew up in a very religious community (mostly Catholic) and went to a Catholic high school. Many of our teachers (including biology, geology and physics) were Catholic priests, yet I never heard anybody arguing against evolution.

I was 17 years old when I first met a young-earth creationist: he was an American missionary... I am still Christian and I know lots of people in various religious groups, but 14 years later I have only met one person who believes in Intelligent Design, and I know about 2 other people from mailing lists / blogs who are creationists.

The sad part is, young-earth creationists are such a vocal group that whenever somebody learns that I am a Christian, I am usually asked how I can believe in such nonsense as a 6000-year old Earth :)
If you work four jobs like that you might be able to live in Fresno and commute on the back of a pick up truck to San Jose.
>>>Contractors will also receive...a $4,000 new child benefit for parents who do not receive parental leave

Contractors definitely did not receive that before...So that's another key point
Cutting through the bullshit, the real issue behind US embargos against Cuba was whether Cuba was involved in any kind of warfare conducted against the US. The Moncada Barracks was one thing, the missile crisis was another, the Mariel boatlift another, and FARC yet another - just to name a few. But Cuba was never under an embargo because of Mandela and implying that is the purest propaganda.
The Supercomputer In Your Pocket: Metal and Swift
I won't argue either... It seems I misunderstood your first comment. Sorry.
Just for the sake of clarification, regarding ETA I'm aware there several versions of the story, but those 2010-ish US terrorism reports are not understandable when the very Spanish government was stating the contrary [+]. About the Colombian conflict, I've heard of the Cuban support to National Liberation Army (ELN) but never of any military support to Revolutionary Armed Forces of Colombia (FARC).

[+] (Spanish) http://www.lavozlibre.com/noticias/ampliar/1041341/moratinos...
Why would you need this over Akka or Futures?
> I think has been needed for many years now

Mail-in-a-box has been around since 2013. So it's been a few years now :)
Looks like it, but it's weird since it's released for free on Youtube anyway. So why should they prevent you from downloading it especially when you paid for it?
84.3% of all statistics are pulled from the nether regions.
That's a totally out of context. You omitted the rest of what was said which was "It should be here in a secure place so that it can be used for ballistics."

The whole context of what was said was the weapon was in police custody as part of evidence for unsolved crime. The evidence was moved from police custody to a museum and the evidence wasn't there anymore when the crimes were reopened. The family of the victims believe the police aren't interested in solving the murders and disposed of the evidence of the murders.

>The rifle has also been linked to the unsolved murders of two other men in 1988.

>The weapon was originally recovered by the police in 1992, but officers from the Historical Enquiries Team (HET) were unable to locate the gun when they reopened the unsolved murder cases.

>The museum is now working with the police ombudsman to try to work out whether there are any other weapons from unsolved murders in its collection.

> What does that say about their treatment of the case? They just don't care."
I really dislike the comparisons of TLAB to stack allocation. Stack, by its nature, is going to be hot in cache. TLAB, once filled up, will be retired and possibly assigned to a different thread. But even if it's not assigned, it's constantly moving forwards, and not revisiting the same space. You'd need prefetch to be perfect, and then on top of that, you'd need to make sure that by the time you go to allocate again, the prefetched cachelines have not been evicted.

Languages/platforms with a GC should still use, support, and encourage stack allocation for temporary memory -- this is your TLAB!

There is a cost to traversing references; card marking and generational collectors just reduce the amount of references you need to visit, but it doesn't mean reference chasing isn't requiring extra instructions. Finally, don't forget that card marking requires write barriers, which is extra instructions (and possible cache misses) on each reference store (modulo trivial ones, such as new allocations, where JIT knows it's not required).
> Every scene is just genius

I question your definition of "genius". It's a fun parody for sure. But don't make it look bigger than it really it.
Fair point. I reworded my reply.

It's not that I can't explain it. It's that I don't believe he or should would understand the explanation.

I couldn't explain the sound of a hiss to a person who was born deaf; not because I don't know what a hiss sounds like but because that deaf person doesn't have a frame of reference to understand my explanation.
I updated my original post, but the case was never about that expense or about the level of access historically provided. It was about a court order that required a change to the level of access and support in comparison to what had been provided by him and all previous owners.
Dominant IM companies are a thing?

I know this is serious, but maybe I misread your intention. The thing that makes Slack greater than all of the dominant IMs is that IM is their whole business.

Everyone else is busy "improving" gmail if you're Google, or monetizing voip/video chat, or (whatever it is that SalesForce does besides Chattr), meanwhile Slack is just chat, and whatever else you expected chat to encompass.
Surprisingly similar.
"You can’t use firewalls to secure East/West data flows in the network."

What does that mean?
> People should be allowed to make mistakes and when the parents realise that their kids are at a disadvantage then the parents should learn to gather together and fix it themselves.

Fix it themselves, perhaps by electing government officials who represent their views on what should be taught in schools and can outlaw obvious lies from curriculum? I really don't see the problem here.
You're probably overthinking this. The dev may not have been particularly invested in your hiring process. You also unloaded your whole spiel at once, thus there wasn't really anywhere else he could take the conversation. You're one candidate out of many, and he might be thinking "well, that was a bust, guess I'll go for my coffee break". Your phone call could be a distraction from his regular routine and he just wants to get it over with.

Just to add on to that, when you get to thanking people for the opportunity, that it was nice to meet them, etc, you're basically giving a social signal that you're ready to disengage. He simply obliged.
Spyin' NSA – Cryptographers Sing Surfin' USA Parody
> A lot of this centers around what proficiency means.

This is very true and this is what bothers me when reading about these supposed polyglots/hyperglots. As a Portuguese speaker, I get Spanish "for free" as in I'm able to read Spanish, follow a Mexican soap opera on TV, and stumble through an order at a Mexican restaurant. Does that mean I can add Spanish to the list of languages that I speak?

> IMO, basic proficiency is simply the ability to communicate unaided with effort on both parties. Which really only takes the language skills of ~5-7 year old native child.

A 5-7 year old child with normal language development will be fluent, as in mastery of the grammar. There's no comparison between an adult who can get by in a language and a native speaker. For example, a child who is a native speaker of a language with grammatical gender will never mess up gender agreement whereas an adult learner might struggle mightily with that.
Lets not use it at all. Lets call them enemies. ISIS are an enemy, that's unambiguous. They would not dispute it.

I'm not saying lets not apply moral judgement. Call them assholes, brutes, whatever.
You can sign up for the mailing list instead: https://percy.io/#updates

And yes it's a GitHub limitation, we request some limited readonly access and no code access (we don't need it).
Thus proving the point about market cap...
I'm concerned that there are often going to be weird little issues about particles and stuff. For example, a lot of people have a tidy notion about Romance language grammar -- subject-verb-object, conjugate the verb to show person, number, tense, and mood. But the different Romance languages have rather different tricks about what happens when the object of a verb is a pronoun. In some languages it then gets squashed onto the end of the verb (possibly changing the form of the verb), even into the middle of the verb before the endings (Portuguese mesoclisis), or placed before the verb. And the different languages have different preferences and possibilities about this.
On Linux, http://recoll.org can provide the full-text search function, but you'll need other programs to consolidate the email and import/export between cloud services.

http://alternativeto.net/software/mailstore-home/
There's another tool out there that does something similar called Screenbeacon (https://www.screenbeacon.com/).
Shutting Down a Service with 500M Requests per Month
$15/hr is a $30k a year FT job. Sure it's not going to make anybody wealthy. But I don't think there are many people making $120k a year commuting on the back of a pickup.
This is great! I tend to avoid abstractions for SQL, but Slick < 3.0 made type marshalling really annoying for pure SQL queries...so much so that I ended up using the DSL and its boilerplate table definitions. I'm looking forward to using the tsql functionality.

On another note, I've never heard of Doobie, and that is as someone who has spent at least a few hours in the past few months researching better Scala-oriented database access libraries. Seems to have come out of nowhere.
Crypto flaws in Blockchain Android app sent Bitcoins to the wrong address
Check this trailer out too: https://www.youtube.com/watch?v=ZTidn2dBYbY
Elixir Reducees
Let's face it, studios liked sex scenes because they were low-cost and (for many people) compelling. Often the most boring and irrelevant part of the movie, though.

Conversely, I am struck by how much really unpleasant violence there is today.
They're more interested building their own little walled gardens. If they spent as much effort improving their products as they did breaking integrations then there wouldn't be a Slack.
Unlucky. We used Slack at the last three companies I worked for.
it's not a satire at all, it's a parody,i'd even say a tribute. To understand the difference, an obvious example: Robocop is a satire.
What part of their home-brew license does not allow commercial use?

MAME was not free because they explicitly said "Redistributions may not be sold, nor may they be used in a commercial product or activity."
Most VCs could be safely ignored as toxic (if not useless) if they were restricted to investing their own money. The fact that they're allowed to gamble with retirement pension funds (which are sometimes insured by the state) is troublesome.
Sundar’s Google: a look at the future of Google’s most important products
It's very good for a crowdfunded film however. You don't often get those.
I need to go more in-depth on the proposal. But the first thing that strikes me, is if you're going to use the Blockchain (with a capital "B") as storage of usernames and such. Why not use namecoin? It has the process for name consensus down. Also it won't pollute the main Bitcoin blockchain.
In that it told him he could ONLY charge $2 for parking vs the presumably free (EDIT: incorrect assumption on my part, as previous owners also charged a fee, but I can't find any indication that he was being limited to a lower fee than they charged) parking on the road people had been getting with previous owners....

Effectively the court was allowing him to recoup some of his cost with parking, just not at the rate he wanted.

Edit: Oh your original post referred to one up several more levels, when I wrote this response I thought it referred to the post I replied to, but noticed no significant modifications.
I think the first thing is to ensure that you understand how trade can produce net value increases for all involved parties: http://en.wikipedia.org/wiki/Comparative_advantage. It's not a big jump to see how at least some financial instruments can be wealth-building.
My first thought :)
This type of thing is why I have been saying for a few years that AGI researchers should really be trying to emulate the true capabilities of simple animals first rather than humans.
A card in the card table covers more than one object, so the entire dirty card needs to be scanned. Card marks only help with old->young references, and stack based roots still need to be visited each time, irrespective of what happened in the last collection.
> and the earned income tax credit is already hated by the GOP

They hate writing checks just to write checks.

You can get it passed if you sell it as a progressive subsistence voucher that will replace the minimum wage, medicaid (we still have an insurance mandate), food stamps, etc.

In fact, use the word voucher. The GOP loves those.

...and the GOP is more complex than people understand. I voted for Romney and McCain and I'd go for an EITC if it came with the right reform package. All this "if it weren't for those guys..." is really counterproductive.
> It used to be a political tool for furthering potentially legitimate political or ideological interests.

By "it," I assume you mean terrorism, as a tactic.

> These days it has been corrupted to further illegitimate, religious interests. That's out of bounds.

Why? What's specifically out of bounds about religiously inspired terrorism, but acceptable about purely political and/or ideological terrorism? And where does the boundary get drawn - Northern Ireland, for example, has had no small amount of trouble with terrorism where the political and religious motives are inextricably linked.

> So let's make a rule to only use it in cases where it applies to illegitimate political and ideological interests. Otherwise, let's call them potential freedom fighters, depending on outcome.

Or perhaps your post was merely sarcasm.
My last job, at a CAD company, we had a competition to see who could create the coolest models programmatically using the new Javascript based scripting language we were creating. My entry was a library that could generate Lego pieces, which I used to build a Lego truck. I can't find a pic of the full truck, but here are some samples:

https://www.dropbox.com/s/fu7xc4cjda2kyx4/lego7.png?dl=0

https://www.dropbox.com/s/33dws1ug5vzyfe6/lego6.png?dl=0

https://www.dropbox.com/s/7z85257nidmpkdz/lego5.png?dl=0

https://www.dropbox.com/s/ks8ctcfcbxan3dq/lego1.png?dl=0

Anyway, as much as I enjoyed creating the truck, the reality is that a decent mechanical engineer, experienced in SolidWorks, CATIA, or other parametric CAD, could have built the truck in a fraction of the time that it took me. Furthermore, I'm pretty sure that even I would have been faster in a parametric modeler, and I'm a software engineer.

EDIT: I should also mention that the Javascript binding was primarily for developers to test out the modelling kernel's API, rather than creating actual parts.
Bitcoin Price Hitting the Resistance
The best satire is the one that doesn't rely on slinging obvious jokes in your face, but rather on presenting nonchalant absurdity. The more anarchic and loud styles can also be brilliant (Marx Brothers), but they're quite difficult to pull off and frequently end up being forced and stupid.
A couple of "mistakes" that I caught while watching, thought HN might find them interesting:

- There's a reference to Viagra (6:20) but it hadn't been invented yet.

- The "hacking time" sequence around 10:30 contains Java [1] which obviously came from the future.

There are a few others, perhaps intentional. I won't spoil them here :)

[1] https://www.dropbox.com/s/7478u4gkvnmjg6p/Screenshot%202015-...
Maybe, two days ago:
https://twitter.com/MerchiseMeetup/status/603658720913010688
> If you're comparing creationism to the tooth fairy, it's fair to point out that the alternate scientific theory is that we magically appeared out of nothing, like Dr. Who's telephone box.

If that's your understanding of evolution, it's fair to point out that maybe if you hadn't been taught creationist lies, that time could have been spent teaching you evolution, which you clearly needed more time learning, since you don't understand it.
No. Reddit's user base is extremely liberal and hostile to conservative candidates and values as evident by the echo-chamber that is /r/politics, which fails to meaningfully support pro-conservative news. There are literally no pro-conservative and no anti-liberal top posts from the past month[1], only libertarian, liberal and anti-conservative. The paradigm or technology platform dramatically favors a very specific demographic, and is ultimately a disservice to democracy by disproportionately favoring that demographic's POV. If you fall into that demographic, I imagine it would be very difficult to resist the potential power play to further your own views.

[1] http://www.reddit.com/r/politics/top/

EDIT #1: Okay, /r/politics is a US-only forum. Supporting facts updated.

EDIT #2: As a final point, being global in nature, Reddit will always encourage an english-speaking non-US-centric world-oriented political-view. This is precisely, as a nation, what we don't want, to provide a global avenue for anti-US political subversion masquerading as populace rhetoric.
Here is an ultra short story I read somewhere.

He woke up to the sound of screams "Daddy!! Daddy!!". Fearing the worst he ran to his son's bedroom. He saw his son crying in the light from the open door. He rushed over to soothe him. The boy said "Daddy there's a ghost under by bed.". "There are no such things as ghosts", he said standing up."Here I'll show you", he said bending down to peek under the bed. He saw his son under the bed and the boy said "Daddy there's a ghost on my bed."
It loads now. However, can't login as it demands an email. For something like a demo, this seems a little overkill.

For something I might host for my employees or people I intend on collaborating with I guess it makes sense.
The great thing about stack unwinding and constructor/destructor semantics is that they are automatic. Except they are done at compile time instead of runtime.

Write the performance critical system that needs to do the bookkeepping. Then write the easy stuff on top of that.
While I'm not in the "'curl | sh' is evil" camp, it's certainly not as secure as installing a cryptographically-signed package (assuming you verify the signatures). HTTPS helps, but doesn't protect against a compromised server.
Was instantly reminded of Far Cry 3 Blood Dragon:
https://www.youtube.com/watch?v=0dofacvjRkc
I'm curious given these kinds of deals, what the point of an IPO is anymore? For some of these companies the valuations are so high, and private capital so available that it seems incredibly unlikely that they'd get a better deal on the public markets. Who wants to abide by public market standards if you can avoid it?

I wonder if there's a new model, kind of like large privately held companies such as Mars or Cargill, but with multiple investors. Granted, many of the tech companies getting these valuations have unclear economics, but what if they had real revenues, profits and paid a dividend?

Honest question, why go public at all these days?
Satire is a genre, which uses parody (literary approach to the story). So it is both - satire and a parody.
I like that one :-)
If you can't form meaningful connections when you're speaking your native tongue and they aren't, why could you when they are and you aren't?
Hi, author here.

I have a mild bias against altcoins, and have heard bad things about Namecoin in particular: that the anti-spam incentives aren't good, leading to illegal files stored in the blockchain itself, and that there's no compact representation (like Bitcoin's Simplified Payment Verification) for determining whether a claimed name is valid without consulting a full history.

As I understand it, these two design flaws combine to mean that you have to store some very illegal files to use a namecoin resolver, which doesn't sound good to me. (I may be mistaken, since the bad things I heard about Namecoin came from Bitcoin people..)
Lots of enterprise companies demand full control over all things. Its not uncommon at all.
Vinod had bought services of a "public-relation management company" to address the issue of this negative PR that he had in regards with the Martin's Beach. That's where 500k number might have came from. Taken out of the air, just like 70% number?

And I wouldn't be surprised that this PR company would try to make a "hero" out of Vinod. And present him as a "hero, who is spending his own private money to support local surfers".

If you want to check facts, don't read blogs/potentially paid articles. Just go to the facts that a non-profit public foundation, created to protect our beaches provides. This foundation is generally spends its efforts on organizing beach cleanups. These are unambiguously good guys. In that case they've had to spend efforts on a lawsuit :(. Anyway, as a public non-profit they just don't have the ability to misrepresent facts or tell fat lies (unlike privately hired PR companies, layers or bloggers). So I'd just trust the facts as they put them:

http://www.surfrider.org/campaigns/entry/open-martins-beach#...

http://martinsbeach.blogspot.com/p/get-involved.html

http://martinsbeach.blogspot.com/