skysight-inc/HackerNews huggingface dataset:
"It would be surprising to me for anyone to conclude that Windows code has not been totally, and publicly, reverse engineered."

The subject we were talking about was massively debated by IT people. Nobody showed up with the code to say, "Here's the reverse engineered code. We know exactly what it does." If he was right, that should've happened. Instead, all references I found to the subject by INFOSEC professionals are trying to guess what it did. So, I think it's fair to ask for a reference to slam-dunk evidence supported by reverse engineering if none is to be found with Google & nobody involved acted like it exists. Only source so far is tptacek's word.

"While this is a wonderful idea, and a small handful of folks have actually done this, modern business doesn't seem to want to stand still for Category 5 maturity."

I agree. It's why I don't work in high assurance security any more outside consulting, R&D, and free advice on the Internet. I'll add to your comment that this is not just for heavy-weight processes. Cleanroom & Fagan Inspections, which I used, drove the defect rate close to zero while often reducing the labor due to less time debugging & with little impact on time-to-market. The Cleanroom stuff, when apps were similar, even had statistically certifiable bug rates we used to issue warranties on code. Despite no extra time or cost, virtually no company we presented those processes to were interested in using them. Demand in IT and INFOSEC space is so against quality you can't even sell it to majority even if it makes money rather than costs it. It's that bad.

"he perfectly-specified requirements (implement compression in HTTPS) could have been backed up by code proved correct, and still exhibited the flaw. Similarly for BEAST."

Totally true. It's why I mention getting requirements and specs right. Even CompCert, an amazing piece of engineering, eventually had flaws during a test because the specs on very front and back ends were wrong. Other side of the coin: implementation of of all specs flawlessly implemented them with middle end having zero defects. Every other compiler, from proprietary to FOSS, had bugs throughout. So, the existence of protocol errors doesn't argue against verified software processes in any way. Just means your protocol better be as good.

And if it wasn't clear, my gripes on OpenSSL were based on the commit logs of LibreSSL team commenting on each piece of code as they went through it. I'm not talking the protocol at all: just terrible coders making garbage that got widespread adoption without hardly any review. Unsurprising given my above comments on how IT market works.
"News outlets keep picking up the story"

If a story is in syndication and "evergreen" in nature it could run on it's own for quite some time. [1]

Doing a google search for this particular article it's clear what has happened (although the results are mainly it appears around May 2015)

[1] I was featured in a story in the late 90's and could tell every time it hit a new town newspaper because orders would predictably come in from the new area. It all started with a story from the local paper and that was then distributed (Knight Ridder iirc) for any paper anywhere in the US to pick up. In this particular case it did translate into real dollars as well as many years of repeat business.
As a contractor of many years standing (I started contracting when the internet appeared in 1994) I started reading the article hoping it was correct and finished it with my fingers covering my eyes in fear. Sadly I don't have time to correct many of the misconceptions and total inaccuracies it contains.

Its a shame really as good articles are hard to find and I'm sure many americans would find the differences between the UK and US markets very interesting...

However if you really want to be a contractor
https://www.ipse.co.uk/advice/articles/starting-out has a lot of advice on starting out.

http://www.contractoruk.com/first_timers/ also has a lot of advice although as a new starter I would avoid the general part of their forum...

And there is a reason why people use limited companies. You can work as a self employed person but many clients stop when HMRC come knocking while agencies have been legally barred from employing people as self employed since the 1970s...
Agree, after all it's just a way to keep expenses and earnings separated from your everyday transactions.

They are not required by law (here in UK) but they're suggested by pretty much every accountant out there.
I don't use a business account when working for myself, but I do use one for a company I've founded with other people.

I'd say it's more useful when it's not a one-man ltd.
There is something about nutrition that always sparks a 500 comment thread on HN. I am not sure why.
Comparing your first sentence and that of the author, you're missing what I see as the key word: "skill". I use command line everyday. Probably most developers do as well. But I definitely don't have "skill" in it. I think the point is that most developers can get by with nothing more than the basics (whatever "basics" are in the context of their work). The command line isn't archaic, but command line as a fluency might be.
Does it bother anyone else when a company that does not need a kick starter uses it? That's not really what it was meant for you know :s
I don't remember. Is there some evidence?

I ask because it's popular to claim that the results of scientific research are unreliable, but usually, IMHO, upon investigation those claims are wrong. Either they are conflating the results of one study with settled science, or conflating some popular unscientific rumor with real science.

Also, why focus on the Center for Science in The Public Interest? Who are they?
I comment OP for trying this, but there are so many glaring omissions which could bite the ignorance of a minnow.

- Let's start with Crunch IT. Affiliated with the OP. They (like the rest) are surrounded by low paid interns and similar - they don't know the answer to your questions. Their accountants are rare as gold and have no time for you. That is fair enough given the price they charge (which has increased and become more 'diverse' each year)

- This isn't a game. The HMRC don't have an army of people, but they are gaining a machine of features who can see when you expense a TV.

- The HMRC are entirely ignorant to our work. They want a nice clean line between your work and life. What they don't appreciate is it is entirely a waste of resources. I buy two laptops - great. Fucked the HMRC and the environment - nice work :/

Lets start with this... total bullshit

Here's my favourite one:

- If you’ve spent more than 40% working at a client site
- You’ve been there over 2 years
- You ‘intent’ to work there for more than 2 years
Hmm.. could you be the overly confident person the OP is talking about? Nice to meet you.
Obviously, at least the player DB was open to the internet. [EDIT: TFA talks about "networks", but not specifically enough to be sure the DB was even on a LAN.] These people weren't hackers. They didn't even use a public hotspot, let alone Tor or one of these no-log VPNs.

This perhaps is another indictment of the Astros' security policies. It certainly should be on the FBI checklist for "should we help these clowns figure out how they got hacked?"
It's because there are no advertisement/cross site cookies that you need to wait to load. I've been working directly with the web since 2000, pages loaded faster back then over 56K modems.
What? Every enterprise shop I worked at, devs could pick Eclipse or Idea. I am pretty sure I would be a day 1 walkout if I was told it was an eclipse only shop.
Does the video refer to the evidence for cosmic inflation theory that was proven to measure just interstellar dust instead?

http://www.space.com/28423-cosmic-inflation-signal-space-dus...
The reason is dust.
Everybody eats? Not everybody uses Go/Haskell/Lisp/JS/etc?
Big Accounting Firm or Small Accounting Firm – Which Is Better?
Selfie Soldiers: Russia Checks in to Ukraine
https://www.jetbrains.com/idea/buy/

A commercial new license is $500.

Not sure where you get the big price drop from ;) And yes, it is easily worth $500.
Which groups? I'd be interested in someone substantiating these accusations.

EDIT: I appreciate the responses, but does anyone have a credible source? Amid criticism that what people have read has turned out untrue, let's be careful not to perpetuate the problem with more rumors.
Your explanation makes sense, but I was going to go with "we're fine flipping a switch, but actually pushing a person is taboo".
An excellent point! I've added a 2nd screenshot and a slightly better description.
Seems like an interesting concept, but I still find crowdsourced tutorial websites far better and up-to-date. Example: http://hackr.io/tutorials/javascript
That Time the U.S. Coast Guard Had a Pigeon-Powered Sensor
because writing in those classes dragged you down so much for the rest of the day you didn't read the slides again!
It's not a legal requirement and they're certainly not free AFAIK.

It is a requirement for partecipating in certain contests (eg: Microsoft had a program for investing in indie games company and they required to use a business account entitled to the company) but I still haven't heard such requirement from a client.
For anyone who liked the "Kid's Story" and "A Detective's Story" segments, those were done by Watanabe Shinichirō who directed Cowboy Bebop and Samurai Champloo, two amazing anime series.
I have been lucky and is doing fairly well with Ghostnote on the mac app store. My product is also lucky to be the only one of it's kind as far as I am aware, which means no competitor and plenty of room to grow it.

However I learned the hard way how dysfunctional the Mac App Store is mainly because Apple ignore it compared to the iOs app store and because their Sandboxing is so opaque it's hindering a lot of good innovation resulting in a lot of apps fighting for the same space.

I was top 10 in paid apps for a while and top 5 in productivity apps. On iOS it would normally be pretty good but that meant nothing for my mac sales as such.

I realized that the mac app store is purely a distribution channel. It's my product but it's their store and so I am now thinking about them as a Wall Mart with no specific importance as such.

I found Google ranking to be much more important plus the ability to sell your product a lot of other places.

And so this week we are going to start selling directly from the website with a 14 day trial. We are using paddle.com for that an amazingly good service.

I am planning to do a writeup about all this as soon as I have some more numbers.

Also as a side note. I would like to see Apple undergo the same scrutiny that we treat our politicians with. When you say you create so and so many jobs you really need to be talking actual jobs that people can live off for that to have any meaning.
I'll be darned. Yes, hiring innovators is a great innovation tactic. ;)
Show HN: Tortuga – Nomadic Work Lifestyle on Seychelles and Mauritius
Haskell's new packaging tool, “Stack”
What's fascinating is the lengths some people will go to investigate a mystery.

What's tragic is the lengths some people have to go for a better life.
> Rate - Daily is good, hourly can also work. My current client will pre-authorise overpayment of a few hours a week if I work them. A little income boost if I want it.

How do you manage your hours with a day rate? Is a work day 8 hours, or is it any day you worked for the company more than X hours?

I've been trying to move to logging time and equating 1 day to 8 hours work.

I find it fiddly to bill per day when perhaps I only needed to work 5 hours to complete one job and 3 on another day.
What does it do exactly?

Displays a Hacker News icon on your browser that changes color when the top story changes.

How does it do it?

The extension opens a websocket connection to the Hacker News Firebase (https://hacker-news.firebaseio.com/) so it can detect new top stories in real time.

Source code at https://github.com/robbiewain/hack-the-news

I really just made it for myself but others have found it useful so I'm posting here. Enjoy!
They're cross-signed by DST Root CA X3 which is in the list.
If the default is to allow those arbitrary pieces of code to obtain audio input from the microphone, then that is a major issue. I very much doubt it allows that by default.

The problem here is not mainly that it downloads and executes code via NaCl, though it's iffy that it does so with no simple way to disable it.

The problem is if it does so and grants that code access to API's' that should be privileged and something the user ought to be aware of.
"We got both kinds of video: QuickTime AND Flash!"

(For those who don't get the reference: https://www.youtube.com/watch?v=cSZfUnCK5qk)
Waiting in lines.
Yikes, I had to stop when the author mentioned MapReduce for computing shortest distance. That's one of the problems for which MapReduce approach is extraordinarily bad.
It was guidance from my accountant and other contractors have said the same. Receipted lunch and travel expenses are reclaimable when I am on a client site. Which I am most days, as I prefer to work closely with the client's team, though reserve the right to work from wherever I want. Most notably, last year, I did a few days work from a rented office in Australia where I was on holiday at the time! I claimed the office rental too...

Best I can find on VAT in a ten-second search is this -

https://www.gov.uk/government/publications/vat-notice-733-fl...

Sections 15.1 and 15.2 are where you'll want to look.

Oh, and the overview section from this much simpler guide :)

https://www.gov.uk/vat-flat-rate-scheme

--edit--

This £2K thing probably does only apply to companies on flat-rate schemes.

The idea is that for a small business, the overheads of processing all the VAT refund stuff are just too large, so you give relief on large purchases only, and the income boost I mentioned in the other post is probably supposed to make up for it. Or something. I don't claim to fully understand!
Hm? Though I am confident about a choice few of my political beliefs I don't often act as such, and experience tells me it is also not received that way.
Check out Transifex: https://www.transifex.com/. We built it for developers. There's an API and command-line client to make pushing/pulling content easy. A lot of people also integrate Transifex with Jenkins or some other CI tool.

Disclosure: I work there.
What do you need to do to be able to comment on those threads?
This Former NFL Player's $8B Mortgage Lender Started with a Google Search
Professional working day = fine if you client is nice can result in being expected to work stupid hours for no benefit..

IR35 equipment is an utterly irrelevant point. The real factors are:-

Right of Substitution (I can replace myself with Fred and the client can't complain)
Mutuality of Obligation which means that the client doesn't need to pay if they have no work for you to do regardless of the length of the contract
Where you were last. you can't be a permanent member of staff on Friday and start back in the same desk as a contractor on Monday morning.

Lots of stuff regarding IR35 can be found at http://www.contractoruk.com/ir35/ and http://www.ipse.co.uk as IR35 is why the latter exists...
Matrix: What if we are all living in a simulation and don't know it? What does this mean for the human existence and how we perceive it?

Animatrix: What if we get so smart we build machines that are so advanced that we can discriminate against them? What happens when humans create life and expect that life to remain servile?

The Matrix Reloaded: What if we fleshed out this world to show multiple societies co-existing, although not entirely peacefully? What if we throw a bunch of rehashed dialog from other science fiction films? What if we change the style to be slicker? Can we pull it off if we inject just enough substance to make people want to watch a third movie?

The Matrix Revolutions: Take the wheel, I have no idea how to end things but there should be some massive fight scenes. Ka-CHING, baby.
I gather they're not launching with ECDSA certificates (and obviously not with EdDSA or whatever comes out of CFRG, because that's still being discussed by the IETF/IRTF), but they're going to add it later. Any idea when?

What's the hold up; HSMs that'll do secp256r1?

Because of the huge performance improvement ECDSA brings over RSA, I know I'm not going to be deploying Let's Encrypt certs until I can get ECDSA ones (as well as RSA ones, presumably).
Wow: is this factually accurate? Hence the term 'lecturer'? From[1]:

"You wonder how on earth such a system ever arose because you know very well that nobody in his right mind would invent a system like this today. What I've heard, and I imagine that this is correct, is that it started a very long time ago, when books were rare and very expensive, and the only way to transmit information was for the teacher, who knew, to tell the students, who did not yet know. And they would write it all down and take it away with them, like a bunch of scribes. Remember, scribes were very big in the Middle Ages."

[1] http://entropysite.oxy.edu/morrison.html
>> It's not a legal requirement

I'd be surprised if it wasn't a requirement with many clients though, it shows a level of professionalism.

>> and they're certainly not free AFAIK.

You haven't looked very hard then...
Yes, of course it is. Why would it be a thing in the open source version but not the almost-identical closed source version with extra Google goodies. Unless one of those goodies was "remove one of the key aspects of NaCl", which I can assure you, is not.
Ok, looking at the recent activity (or the lack thereof) in the github repo lets me be somewhat less enthused... but what's your objection to "KMSCON"?
LinkedIn is creating a revolution in university rankings
I think a lot of tech workers are used to being the smartest person in class. When they come to SV and work with lots of other smartest people in class, it can cause egos to clash.
Same experience here. Absolute HELL. Long term antibiotics work. The IDSA is DEAD WRONG.
They could start by putting a % value next to it, like they do with other nutrients.
Would agree. I usually try to introduce doubt. Asking questions is the best way. You can do it in a way that makes you sound curious about their approach and forces them to answer(defend) their stance. Question. Question. Then. So if this happens like you say, then this will happen to? Is that the desired outcome?

Edit, just to add. Try to lead them thorough it like its a critical thinking exercise. If you find yourself struggling with the "path" of questions to ask. Just say something like, I'm not convinced that will work. What makes you think it is the best solution? Key is to make them defend their stance and help them see when there is something they haven't considered
So get your IT guys to install it for you? Seems like a reasonable request...
Dick Costolo Dances Around the Question of Who Will Lead Twitter Next
Hulu Officially Drops the “Plus,” but Service Remains the Same
The flaw in what you're saying is that lagging behind web standards does not increase the value of iOS. It may be in Apple's short term best monetary interest, but I'm more skeptical that it is in their long term best interest.

There's a reason why so many people hated Microsoft back in the 1990s, and it led many people to get away from Microsoft wherever possible. Apple doesn't want to end up there...
Reading this article reminded me of the "Nate Tate" art hoax (https://en.wikipedia.org/wiki/Nat_Tate:_An_American_Artist_1...)
Tools. Compatibility. Resembles systems already in place (i.e., back when BSD failed to get SMP support "soon" there wasn't an option if your workspace was CPU bound). Numbers (it's popular in HPC/HFT because it's popular).

We're not consuming/using the built in network stacks anyway, we're using the OS as a content delivery system. Get us something we can get to the cores on, we're going to pin our applications directly to those cores keeping the kernel relegated to scheduling tasks on whichever NUMA core is further away from the PCIe bus running into the CPU. We'll have the CPU's we're using pegged in a constant spinlock anyway which would make the scheduler think really, really hard about running tasks there. We don't use realtime kernels as it's better for us to pay the price on the occasional spike outlier than to raise the baseline latency up.

Due to my own unfamiliarity, I don't know what BSD's equivalent to isolcpus is. I don't know how to taskset on a BSD. I don't know if the infinibad/ethernet controller's firmware/bypass software works. I don't know how BSD's scheduler works (not that we usually care, but there are times when one can't avoid work needing to be scheduled, things like rpc calls to shut down an app, ssh if you can spare the clock cycles for key verification, etc).

Would dtrace come in handy? Most definitely. Is that enough for us to abandon what we know works? Not yet.
Fix it, how exactly? I've learned plenty of languages. That I can't get a job using since I have no work experience with them. What exactly do you mean by fix. If I could fix it.... it would be fixed. I've always been expected to learn everything on my own. I've worked on all my projects alone. I thought there would be other people who would want to work with me and who could teach me things.
That's a bit of a goalpost move, isn't it?
Christian Schafmeister here - thanks! You make some very good points that I can address:
(1) Things made with "Molecular Lego" still move, but they keep their shape just enough to organize atoms/groups to do things like speed up reactions and bind other molecules. We've explored dynamics in several of our papers. They aren't too constrained - they are constrained "just enough"; and we can build in flexibility and hinges where ever we want.
(2) We don't know how to make mechanical molecular machines with them yet; we need to start making a lot of them and explore their properties to figure that out. The first folks who smelted iron didn't know how to build motors with it - it took a lot of people playing around with iron for a long time to figure that out. I think we can get there in less time but it will take work.
(3) Re: toxicity/pollution - this is the first non-natural molecular technology that contains the solution to any problems that it generates. We need to learn how to make catalysts well and then we can build catalysts that break these molecules down. Conceivably, we could build materials that contain the catalysts that break them down and are activated by an external signal. Or we make materials out of bigger bricks (built from Molecular Lego) and we fish them out of the environment, tear them apart from each other, check them for defects and build new materials with the good ones and recycle the broken ones. We can also build catalysts that break down every other indestructable material that we've been dumping into the environment for 100 years. Regarding toxicity, these molecules are made out of carbon, nitrogen, oxygen and hydrogen - the same atoms you are made out of. They are inherently non-toxic (there are qualifiers on this).
Lost much of my memory in an accident where I took severe head injury. What my brain kept it kept. What it didn't it didn't. Most stuff I hadn't used in forever went poof. Web of trust model was one of those. Some things I'd just have to straight up relearn and I'm not bothering unless I have a need given only so much memory to spare.

Hope that makes sense.
https://mathoverflow.net/questions/26267/where-to-buy-premiu...
0-sec is a terrible name if you're working in sec...
Especially since it would have been easy for the browser to derive an all-black mask from any image. Then sites only have to do extra work in order to support the new functionality, as opposed to what we see here where they have to do extra work in order not to break.