skysight-inc/HackerNews huggingface dataset:
I can perceive men as victims. But here he is not a victim. He thoughtlessly did something bad in front of the whole world. People told him that he did something bad. Lots of people, many of them angry. This upset him and he apologized. Forgiven and forgotten, end of story. Except, apparently, for bitter anti-feminists who can't help bringing this up every time Rosetta is in the news.

I too have said and done dumb, hurtful things, been called out, and tearfully apologized. That's not victimhood. It's being a vaguely responsible human.

> the benefit of the doubt

What doubt did he fail to benefit from? The accusation is that he wore an inappropriate shirt on an international stage while representing an important scientific effort. I am not seeing a lot of room to doubt that was true. The general assumption I saw was that it was something he did thoughtlessly, with no understanding of the impact. So to the extent that his motivation was unknown, I'd say he got plenty of benefit of the doubt.

> I'm not convinced.

You say that like I might worry, but I don't. Quite a lot of views change in a progressive direction not because any given individual learns anything, but because those defending old errors die off. Note the rate of change here is pretty close to the rate of death:

http://content.gallup.com/origin/gallupinc/GallupSpaces/Prod...

We've been moving toward gradually less sexism for the last couple hundred years. I figure it's going to be at least a century more. If you have sincere questions (as opposed to argumentation in question form) I'm glad to answer. But otherwise, feel free to remain unconvinced. Your participation in bettering the world would be useful, but history suggests it's far from necessary.

> Since you're calling people out for being anonymous in this conversation just remember you get to have your name attached to your arguments without risking your social life and career.

Sure, but this is mainly true because I'm an older white guy. Just based on that status, I can get away with almost anything and still be employable.

I agree that things have changed such that for the first time older white guys can no longer be guaranteed total impunity for being openly and vocally bigoted while occupying high leadership roles. I agree that this sucks mildly for people like me. Now I have to do the slightly difficult work of actually caring how my words might impact other people, and the actually hard work of learning how to apologize well when I fuck that up.

But as far as I'm concerned, that is good news. Certainly for everybody who isn't an old white guy, as they can throw off some of their burden of fear of unpleasant consequences for saying things that might upset older white guys. I think it's good even for we old white guys. Privilege stunts people. I'm glad to live in an age where decreasing power imbalances mean a decrease in distorted communication.
Easiest+way+to+Predict+Your+Risk+for+Heart+Disease+
Nice. For those wondering what Reed-Solomon codes are all about: they are extra data that allows certain types of corruption to be detected and fixed.

I believe RS codes are used on optical media such as CDs and DVDs which allows perfect playback with a few scratches here and there. They're also used in QR codes, so even if the scan is imperfect, the data can be reconstructed correctly. In the case of QR codes, the standard allows the QR code creator to set the level of error correction, providing a wide range of of data size vs resilience to corruption choices.
I guess I'm misunderstanding, but as a result it sounds to me as though you're misunderstanding. Aren't they talking about running docker from editors, rather than running editors in docker?
Nope, still wrong. There is nothing detrimental about eating less than you need within reason.
The ONI (Office of Naval Intelligence) is the US's OLDEST Intelligence agency, so yes.. :)
Senate bill proposes centralizing Weather Service forecasting 6 regional offices
>I was just looking at the site linked from the howto and couldn't see what they were giving me that using companies house directly didn't

Worse they give you usually less as many formation companies keep the "webfiling auth code" for themselves and you will have to do all Companies House related administrative tasks through them (most likely for a fee).

Retrieving your webfiling code in that case is just hassle you wouldn't have had if you incorporated yourself in the first place.
Banks also lock the accounts after 3 failed attempts though. The short passwords are to avoid having to deal with phone calls that go something like, "Hello, I forgot my password."
So cool, thanks for sharing!
Confidentiality is my only concern in the case of malicious modification. Remember, that availability and integrity of your database can be broken without an attacker, just due to hardware problem, for example. So it is up to you to have a cold backup for such a critical asset.
The Center for Science in the Public Interest sounds more like a group of people using science as a flag of convenience to steer public policy.

As such I wouldn't say they are doing unadultered, capital S, Science. They are, after all, politicians by the sheer circumstance of their own name.
Danger of unencrypted civilian GPS
More and more self operating devices like cars and drones are coming to market and many use civilian GPS to navigate. Since GPS signals are not encrypted can this pose a threat? Can someone try to spoof GPS to control these devices to do malicious activities? Like stealing a car?
I suppose that using a random Android Keypass app is just asking for trouble.
Password Safe is supposed to be the strongest. I like KeePass 2's user interface a _lot_ better, which is why I'd originally migrated away from Password Safe. However, due to KDBX4's inability to detect data corruption, I plan to migrate back to Password Safe in the very near future.
The ABI would be compatible between similar architectures: Apple has somewhat encouraged developers to provide binaries for all of armv6, armv7, and armv7s in the past, all of which are 32-bit ARM architectures. While some new features might be difficult to take advantage of without high-level information, I imagine a difference as drastic as ARM vs Thumb would be easy to pull off starting from bitcode.
Before the iPhone, the cellular carrier 3 actually tried to sell internet content.

No phones had wifi and most content needed to be reformatted for your 3G flip phones, so they sold subscriptions for Youtube, their own programming and music services. I even think they had a Facebook option.

In a way it was kind of cool, for $5 a month you got all you could stream Youtube videos - in a time when people where often billed a dollar for 10 megabytes!
sad to see no web2py here :|
I find it interesting that there's a spike for the search term "iPod" every Sunday. Why on earth would that be?
He simply applied the logic of your proposition to its extreme, he does not actually hold that position himself.
This is good stuff. There is also a SaaS offering to do this for mobile apps. It's called AppSheet [1] and they let you create iOS and Android apps from spreadsheets -- Google Sheets or Excel.

Disclaimer: I don't work for them but I do happen to know the founder and the team.

[1] https://www.appsheet.com/
I'm old enough to remember it. I saw the news reports. I heard about it on the radio.

No researchers were necessary to access my memory.
There were also a few other Rails CVEs announced today as well:

CSRF Vulnerability in jquery-ujs / jquery-rails: https://groups.google.com/forum/#!topic/rubyonrails-security...

XSS in ActiveSupport::JSON.encode: https://groups.google.com/forum/#!topic/rubyonrails-security...

IP Whitelist Bypass in Web Console:
https://groups.google.com/forum/#!topic/rubyonrails-security...
StartSSL's business model: making things free that don't cost them measurable money, and charging for transactions that cost them money.

An exception from that rule in the wake of Heartbleed would arguably have been appropriate, but the business model as such is in no way bad. If the whole SSL industry worked in a way that put price and cost in proportion, there would be no need for Let's Encrypt.
You have to use the bottom of the left-hand sidebar to navigate the contents of each TNW paper, not very user-friendly imo, would've been better of the section navigation were within the body of the paper in the HTML version. I'm not sure how you're supposed to do it in the PDF versions, I didn't see any links within the PDF itself but the sections of each paper are predictably named:

https://www.nsa.gov/research/tnw/tnw194/articles/pdfs/TNW194...

https://www.nsa.gov/research/tnw/tnw194/articles/pdfs/TNW194...

They also miss about 1 in 3 publications each year on average since 2008: https://www.nsa.gov/research/tnw/archive.shtml

I wonder if it's due to a change in classification for something originally intended to be public, a matter of other priorities or just human inconsistency.
Context independent, having a store of usernames/ids/emails and plaintext passwords is Bad because it can be cross referenced with a store that actually matters.
I agree that it is expensive. However, I went through their Product Tour and blogs and it looks like they are taking a very novel approach as far as APM is concerned. Apart from the price, how's the actual experience? Does their AI actually identify the root cause of a problem? Does the no-configuration approach actually work?
Wow! I never knew the needle move side-to-side! I always assumed phonograph needles moved up and down.

Edit: Ben explains this in the video; there are actually two axes of movement, sort of diagonal to the plane of the disk, each of which encodes one channel of a two-channel stereo recording. I'm sure many LP fans already know this, but it's a revelation to me.

BTW, Ben Krasnow is a heck of a guy. A true polymath and a generous teacher.
You're welcome at gun.io any time. :)
I looked at the earliest published paper available[1]. They couldn't have chosen a better title. :-)

There is also the sliding shortest path algorithm[2].

[1] https://www.nsa.gov/research/_files/publications/inevitabili...

[2] https://www.nsa.gov/research/_files/publications/sliding_sho...
5 Rails CVEs
You are surprised the government wants to ban something?

I am only wondering which lobbyists have payed for this.
That's quite harsh. I guess you verified that there are actually different threads able to access this code before making such a statement? For instance, if I make a single-threaded application in the first place then I don't care about thread-safety at all. Because I am not going to need it.
I work for a global campaigning/petitioning organization and one of our focuses is climate change.

I'm wondering who the key players are, what is currently being done, whether there's opportunity for public pressure to influence any of the actors, etc.
I can't see http://www.lindenlab.com/ anywhere on it, which seems a little odd.
Got any other sites on the sustainability of foods? (or a website of your company?)
Deep Learning with h2o.ai
>It's a moral/ethical stance, I guess - tax funds social infrastructure and I think we need more of that.

Then donate that "optimized" tax money to a charity where it does more good than being pumped in some governmental megaproject that burns most of its funding just on overhead.
having never used node, could you point me to a good tutorial/guide on using the two in tandem?
Free invites for Promote Base
Adblock Plus Update with Large Scale Deployment Option
It's not about the public's perception of wavering, it's about the scientific outlets wanting to say "Yolk is bad!!" instead of "we now think egg yolk is bad because we found that the foo in the quux frobs the narl in a human's stomach lining". Not to mention the lack of apologies and retractions by those same outlets.
Also, care to explain some of the DISadvantages of using node for APIs?
That is a great call! Obviously going to be/is a huge player in the space. Looking forward to seeing what Ebbe and team come out with
Rebol 2 isn't open source, and, AFAIK, is only available in binary distributions.

R3 is open source (Apache License), but Rebol 2 is proprietary.
Exactly. Thanks for adding that. They're also used in nearly all large storage systems from Amazon S3 to RAID6.
Uber Hackathon Winners
Step-1: open the above PDF.
Step-2: search for "HMAC".
Step-3: note which application uses HMAC.
Step-4: you should prefer (3) to all others.
Dont forget Fabrice Bellard!
> It's a parameter passed to the kernel.

Just like "quiet", which is totally meant to affect userspace programs.

> It's a ridiculous clunky hack that stinks of large company coding practice: what they actually needed was a way to pass arguments to systemd itself.

Having a global "debug" knob would have been useful when one does not know if the problme lies in the ramdisk, plymouth, systemd, udev, lvm, whatever. Having a systemd-specific flag defeats that purpose.

> The logical way to do that in an OS that has to be portable and flexible is to implement a mechanism for the kernel to pass some of the arguments it receives to init. Because there's no reason to assume that init is going to be systemd, that there's going to be a procfs ready for it so as to be able to read the kernel's parameters, or that the init process can read it for that matter.

The kernel command line, readable from procfs, has been used for this purpose (see the "quiet" flag) for a very long time now.

> what do you mean "this can have unwanted side-effects", it works perfectly fine on my system.

It worked perfectly on every system until the kernel bug triggered the feedback loop.

> The fact that the developers (again, it's a known pattern) decided to play the PR game and call it "expected behaviour" doesn't make it less of a bug.

It was "expected behaviour" in the presence of a kernel bug, which is why it was obviously not generally "expected behaviour" as you seem to imply.
>> neither was willing to back up, and so the passengers would often get out and fight each other over it.

Hahahaha..
I must admit, I can't immediately see the problem with leaking timing data.

The client (that decrypts the password database) runs on your local computer, and typically places clear-text-passwords into the clipboard during normal use. So if your local computer is compromised you have way bigger problems than timing attacks.
I'm a Honeybadger user and love it! Extremely useful.
Adding it to my reading list. Thank you!
As an aside, how does Linus come across as a grouch? Like any other normal human being that expresses a range of emotions, he might have exhibited an imperfect control on his temper/tone. People are way too judgemental / thin skinned these days.
Maybe exactly not to give possible bombers good ideas...
I have the same model keyboard as in the video! Just thought I would share.
I agree with the dislike for these types of reversals, and I also agree that fields prone to these types of 'discoveries' might be better classified as something else. Although I think the reality is that (at least with dietary 'science') the reason we get these jumps to conclusions is that these fields affect peoples lives a lot more directly. This results in people wanting information on these fields sooner, the public can wait 20 years while we look for all the particles in the standard model, but they wanna know now if they're eating stuff that will kill them. Not to mention it's probably quite difficult to avoid with just about any public journal or magazine willing to profit off proudly trumpeting results that could drastically help their audience.
> it's about the scientific outlets wanting to say "Yolk is bad!!"

The outlets that want to say that aren't scientific outlets, they are popular media outlets and the marketing arms of entities selling diet fads and/or substituted products.
Thanks.

It seems Red is not comtaible with Rebol3 (or I did something wrong).
Only because that's not a job that the BLS collects data on. Later on in the article it's mentioned that being in active duty military is slightly less dangerous than logging, though more dangerous than any of the other jobs.
The formation companies are a left over from when it was quite hard
It may not be as polished as some of the other options out there, but it is what I use. I am mostly happy with it.

I just wish there was a built in way to encrypt the folder structure to hide what sites I have credentials for.
FDA tells industry to phase out trans fats in processed foods
Oh, you mean the account recovery page, not one that requires the old password to change to a new one. I see.
Misleading title. I'd say click bait. It talks about Linus and Linux but not about the "future without him" part.
Hey, I run AngelList's jobs platform. If you could give me details on the recruiters that spammed you, I'd really appreciate it (dave@angel.co). Either way, thanks for the mention.
previous thread https://news.ycombinator.com/item?id=6574087
You should absolutely not have your business bank with the same bank you use personally.

If your business account ever gets frozen (for litigation, tax investigation, etc.) many banks will also freeze any personal accounts you hold with them.

IMO many of the services he recommends also suck. I've used Crunch before and wouldn't recommend it and Barclays Business banking has a terrible reputation. £50 cashback isn't a good basis on which to chose a bank account. Get a proper accountant that specialises in contractors (Nixon Williams and SJD have decent reputations).

It also doesn't address withdrawing money out of the company (taxes, NI, pension, etc) which is a fairly important part of being a contractor.
Windows implements SNTP. The goal is to keep the clock within tolerance for Kerberos (5 minutes). It's embarrassingly bad but they don't seem to have any real reason to fix it. Also the w32tm code is ... bad.
I don't know about AEAD, but my copy of KeePassX 2.0 alpha 6 seems to work just fine with .kdbx files.

Edit: it is available as a Mac binary on the KeePassX site.
Single master bottleneck. Try Mencius, ePaxos, etc.
They are sandboxed "machine independent" binary blobs that chrome translates into the local architecture, see https://developer.chrome.com/native-client for details.

Javascript isn't far off binary in terms of readability nowadays with the level of packing/minification, so legibility isn't a deciding factor. Therefore if you can't trust the native client sandbox, why trust javascript, or even HTML from third parties? Native client is part of Chromium, you can audit the source code just as much as for any other language your browser speaks, so why make this distinction?
Full Circle ( Startup Weekend, Startup Week and TechStars)
Extensive prior discussion: https://news.ycombinator.com/item?id=9722537
Atom is still a hog on my main programing machine. It makes it unusable for me still.

It is an OLD i3 Dell from 6 years ago desktop.
The reason Junglee doesn't list FK/SD products is that they are not permitted to. A little while back, Junglee accidentally added a few listings from Flipkart, and Flipkart’s response was to take them down:

>Nah! Sorry to spoil the gossip, but it isn’t us. We’ll be talking to the Junglee team to take down the listings, and hopefully finding the culprit :)

Source: http://qr.ae/7r7R4B

The truth is that sites like Flipkart and Myntra are actively trying to avoid price comparison (Myntra is now app-only), so as to discourage customers from looking for cheapest prices, and settle on brand loyalty instead.
This really sounds like more of a "Astros suck at employee off-boarding" problem. They failed to lock out users of the previous system long after they left the company.

Regardless of their weak password storage scheme (which must be fixed), a simple set of changes (like disabling public access to their system, disabling VPN for terminated users, and changing passwords) would have stopped this from ever occurring.
Replace "Linux" with "Windows", and "BSD" with "Linux".

Obviously it provides nothing extra, and certainly nothing better, when it comes to a server role. Other than support contracts. And support for 3rd-party apps. And hardware drivers/compatibility. And users that know how to operate it. And brand name recognition. And size of software development community, libraries, tools. And industry reliance on non-portable software (Docker).

Answer to your question: technical superiority is dwarfed by a more popular product.
Show HN: Veneer, a Tool to modify the CSS of any webpage
Vegans couldn't eat McDonald's french fries anyway. When they switched their fryer oil, they added natural beef flavoring to compensate. I know some vegetarians that were pissed about this when they found out, but McDonald's quite rightly pointed out that they have never, ever attempted to certify any of their menu items as vegetarian or vegan, not even the salads. They leave that up to third parties, and state that they do not strictly enforce efforts to prevent cross contamination from kitchen equipment also used for meat products.

It is likely that the only markets in which McDonald's would make more than a token effort to serve vegetarians would be India and select parts of California.

Aside from that, I wonder why a vegan would be considering fast food anyway. If you take more than a cursory glance at how such restaurants get their vegetable ingredients, you would see quite a lot of animal cruelty in the form of the institutional working environment for agricultural laborers. The 2001 Yum! Brands boycott, precipitated by tomato pickers in Florida, comes to mind.

I pity the vegans because they voluntarily choose a form of asceticism, and are not likely to get any compensatory benefit for doing so. They choose to make their own lives more difficult, just like people who play games with unofficial voluntary conduct challenges. I'm not going to fault them for doing it, but I'm also not going to change my personal opinion that they are at some level just spoiling their own fun just for a few extra millimeters of e-peen.
Later on in the class I notice they have this:

public ulong GeneratedBytesCount
{
get
{
ulong u;
lock(m_oSyncRoot) { u = m_uGeneratedBytesCount; }
return u;
}
}

...so if you care about thread safety at some point in your class, then you should care about it during it's initialisation.
Google’s App Engine for PHP Hits General Availability
May I emphasize this sentence?

Over time, the database will be composed of both
correct and corrupted entries, making it difficult
to reconstruct the damaged records from a backup.

I don't know enough about cryptography to be able to say whether it's possible to break a particular cryptographic protocol by blindly altering the ciphertext, but I do know plenty about human nature and backups. It's _highly_ unlikely that normal people keep more than a handful of backups. My own personal backup retention limit is on the order of 30 days, and that's with careful planning. Silent, on-going data corruption happening to a password database seems like a very reasonable thing to concern oneself with, especially if one's expectation was that the password manager would throw some kind of data integrity error whenever said database was accessed.
for this specific use case? Node.js using LoopBack.io. I/O platform with a framework that was specifically designed for this use case, built on top of Express to save you time.
[CVE-2015-3226] XSS Vulnerability in ActiveSupport::JSON.encode