skysight-inc/HackerNews huggingface dataset:
That's not really the essence of ROP because other attack techniques often also need to manipulate the stack. The key novel idea in ROP is to use data in unintended ways. This is based on the insight that the memory often contains short sequences of bytes (e.g. a .jpg image) that can be interpreted as machine instructions. For example an mp3 file might contain the sequence 99 19933, 16 which translates to

increment register 16
return

in the ambient machine language. Call that "dual use data".
ROP searches the memory for sufficient "dual use data" and then builds an ac-hoc compiler with "dual use data" as target language. Then the attack software compiles to "dual use data" and then runs the compiled code.

Of course one may ask: can we always find enough "dual use data" to build a Turing-complete set of instructions as a compilation target. Turns out that with high probability that is the case.
> Can you trust a 3rd party to handle your insecure connections?

It's totally possible to setup websites where you, as the user, don't have to worry about this at all. Even sslstriping can be mitigated if the operators of the website know what they're doing.

Passive monitoring? Use https.

Upgrades to https getting prevented? Submit your site to the hsts preload list[0]

[0]: http://hstspreload.appspot.com/
Reminds me of a trick question my late father used to ask us as kids: "would you rather be nearly saved or nearly drowned?"
To be fair, at least the Tor Project itself makes a rather serious effort to be upfront with its own limitations, etc.

For example, when you use the (recommended) Tor Browser Bundle the start page contains a window containing the following headsup

"Tor is NOT all you need to browse anonymously! You may need to change some of your browsing habits to ensure your identity stays safe."

As well as a link to https://www.torproject.org/download/download.html.en#warning.

That same warning is also present on the main download page: https://www.torproject.org/download/download-easy.html.en
I think you meant line 634, not 63. Also, pro-tip, always link to a specific file version when you're referencing a line because master will change:

https://github.com/espadrine/aulx/blob/b745723680f541353ad50...
There has to a point where there's nothing else worth adding to most commonly used software.

Microsoft Word effectively reached this point many years ago. They keep making new versions, people keep buying new versions. It's by no means the only example.
I wouldn't mind living in a world were all news stories are like this - "Something bad almost happened, but it didn't, because the algorithms took care of it".

Back to the story, the article doesn't mention if the human drivers had to interfere to avoid collision. It would be quite pointless to have a self-driving car which you cannot trust and be always on the lookout to take over if it does something stupid.
> The closest in the US is the company you work for can match up to 4%.

Is there actual regulation that limits how much a company can match? This [1] refers to 6% as a common practice, not a limit imposed on employers.

At two universities where I've worked, the university's contribution to a 403b (401k for non-profits) didn't require any contribution by the employee. At one the university's contribution was 6.25%, at the other it was 5% for employees under 40 and 10% for those 40 and older.

[1] https://en.wikipedia.org/wiki/Employer_Matching_Program
>To be fair, I don't think our government is dipping into anything. They're just using the funds to pay out current pensions because there isn't enough money in the system.

That's what I meant by dipping in: they're using the funds. In the Australian system each person's funds are in their own account and the government can't use it for anything else, nor can the super fund, so it's impossible for someone to be paid out of someone else's account.
I have been wanting a tool like this for a few years. I can see a bazillion uses for it. Home-run!
When you come into direct contact with something that cold, it causes a sensation that feels very nearly identical to being burned.
None of that should be marked executable, though. The real risk in ROP is using little bits of legitimate functions to bypass DEP.
Ex Machina – VFX Q&A with Andrew Whitehurst
What is tick?
So that’s why Google’s cars get rear-ended so often
According with the dictionary.reference.com:

assets. items of ownership convertible into cash

So buying a house is indeed an asset since you can convert it to cash. Renting is actually pure cost
Lot's of people, including several major open source communities and FOSS proponents. That was the goal of projects like KDE and GNOME, and smaller ones like Gnumeric, Evolution, GIMP, etc.

If not as a fully explicitly stated belief (which some did that too), the idea was nethertheless very prevalent that the endgames is: "we just replicate those programs and we take over the desktop with FOSS".
Targeting CVs is already a good idea as a job candidate.
How Bet365 is tackling the mobile UI challenge
I don't know about code contracts, but IntelliJ does have an equivilent, if less advanced version of these as well, using Java annotations. Although it's mostly used for nullability/taint detection ATM.
A gun manufacturer handing out protective vests to school kids.

Instead of this stunt, maybe they should focus on building cars and particularly trucks that are not unsafe by default. All this talk of blind angle obscures the basic fact that this is first and foremost an engineering problem, and most importantly, you can not turn the defects of your vehicle into the responsibility of other road users.

If your vehicle isn't safe, it can not be driven. The solution is certainly not to tell everyone else to just watch out because you can't see shit left and right and man is this thing large and heavy.
Apple is making its apps LLVM-based now? Doesn't that mean they could soon push for ARM CPUs in Mac OS, too?
A lot of data is already in spreadsheets. And using an existing spreadsheet in AirTable is not quick and easy because its only possible with csv import:
https://support.airtable.com/hc/en-us/articles/203423579-Imp...

Strange they do not offer a more direct import. It would help the transition.
5 Adet Arkaplan #background #freebie |
> "Cycle safety is the cyclist's responsibility"

Woah there. Hold up right there.

The safety of ALL road users is on the backs of ALL road users.

It's not uncommon in London to see reporting of one of the one-a-month on average deaths of a cyclist to see such comments as "the cyclist was wearing a helmet".

Yet the helmet didn't save the cyclist, because the cyclist was crushed by a fully loaded construction HGV tipper truck.

This idea that cyclist safety is 100% their responsibility is part of the root cause of the problem.

Cyclists are one of the most (if not the most) vulnerable demographics of road users there is, and it should be the responsibility of other road users to help protect them.

Failing that, it should be the responsibility of those who provide roads to ensure that the infrastructure itself protects them (segregated cycleways).

But creating an idea in which "Cycle safety is the cyclist's responsibility" is plain disgusting when every damn month another cyclist is in a morgue, regardless of whether or not the cyclist wore high visibility clothing, had lights, wore a helmet, etc, etc.

And there is my issue with Volvo's "Life paint"... it shifts the blame for the continued stream of fatalities onto the cyclist.

Do you want to know where the real problem is? Try this, of the 8 fatalities on London roads this year, 7 were caused by HGV construction vehicles even though such vehicles take up less than 5% of all London vehicular traffic.

Here's one from Monday... this week! http://www.standard.co.uk/news/london/cyclist-26-killed-in-b...

Being covered in reflective spray paint will do nothing against a system that pays HGV drivers by the job count and doesn't enforce the many existing rules about vehicle safety, driver training... and in the recent case where a driver was convicted, the company that hired him didn't even check that he had a valid licence.

Perhaps if Volvo really wanted to make a big difference to the safety of cyclists, they'd get heavily behind the proposed designs for safer HGVs for cities: http://lcc.org.uk/articles/lcc-challenges-construction-indus...
You cannot always sell the house. The market may have fallen, or rates may have risen in a way that makes your home less affordable. Also, prematurely paying off your mortgage might have punishing penalties, and also there are frictional costs to selling.

You cannot always necessarily rent to others. You may have strata / HOA rules that prevent renting.

Buying with cash has an opportunity cost on your money. A mortgage is renting money. Whether you rent a home or you rent money, either way you're paying rent. You also have other "lost money" costs as an owner: maintenance costs (and labour), property taxes, possibly condo fees, etc. So when you consider the "losing money" aspect of owning, you're losing the interest payments, and you're losing some other fees... but the part of your mortgage payment that is excess of interest is not lost money (it's savings).

On other other hand, there are advantages to owning. In particular, if you want to make a highly leveraged wager (5x being common), you can do that in real estate. If you win at the wager, you can win a lot of money. (Of course a casino lets you win a lot of money too, with extreme leverage, but the housing market has no "house" extracting a vig, pun not intended). Also, many countries have tax incentives for ownership. For example, US effective interest rates are somewhat lower than the contractual rate, because the government gives you some of it back at tax time (I think.... I'm not an ardent student of the US housing rules).

In short, a statement like "you've always got options as an owner" or "renting is losing while buying is an investment" is so oversimplified as to be incredibly damaging.

The math is tractable for a modestly smart person, but it does take some dedication.
What, all of them? You mean like all the motor users who break speed limits?
Small things like this is what starts bothering me about Windows (they add up). The 'Found New Hardware' wizard will also come up each time you plug it in a different USB port (along with the annoyances that comes with).
No need to apologise - it's a perfectly justified way of putting it. Could be considered a cynical view, but justified still.
The man who sleeps in Hitler’s bed
Not defending them, as i find the whole systemd concept a massive train wreck. Just speculating what their justification is likely to be.
This idea is usually promoted as a pretext for privatizing the public pension system. Ironically, that really will ensure that your pension gets raided.

The idea is ridiculous of course. People are not going to stop existing when you retire, and judging by the last hundred years of progress, they'll be richer and more productive, if less numerous.
>Why should there be an end game? The history of human civilization is one of constant progress

Only in technology.

Germany, for example, was a much better state ethically in 19th century than in 1914-1945 (or numerous other 20th century examples).

And it makes no sense to say that 2015 music is necesarrily better than 18th century music or 1960 music, or 1970 music, or that a composer, just because of being born later, is better than Bach or Mozart.
The industry isn't going to just hand Google a monopoly. Of course they are going to develop their own as well.

Even if Google's software was the absolute bees knees, what if Google deprioritized it? Left the industry? Made unreasonable licensing demands, or made exclusivity deals with competitor automotive manufactures? What if they used it as leverage to push manufactures around?

Even if you do decide to work with Google for now, not having a backup plan is just poor strategic planning. Having a backup plan means developing these sort of systems yourself.
I second this question, also, why would you expect it to work? I'd far rather they (or anyone) spent their time on clients (browsers) that support features than address issues which could be resolved by someone using a modern browser.
Animated History of the Atlantic Slave Trade
I think the fact that a suggestion that maybe, for some companies, being profitable is OK needs to be couched with "I don’t want to come off as a positive cash flow freak" is really demonstrative of just how extreme the focus on growth to the exception of all else is.

For most people unfamiliar with the VC world, the statement "Companies should try to be profitable" is nearly a tautology. In tech VC world, it's practically heresy.
The inverse also applies. Take Chrome/Chromium where the extensions are generally powerless against core components, making the whole browser useless for decent customization.
Even in the US, the equation varies by region. It also varies by the type and size of living space you want. Suburban homes with a pool and two garages are completely different from urban condos.

But I was thinking more in terms of increased mobility -> better bargaining position -> better chance of finding a job that pays $12K more than your current job -> other things being equal, $1K extra disposable income per month.
Ha, I forgot about that. It was a hundred (thousand?) little things like that that ran me into Mac's loving arms seven years ago.
Show HN: I'm working on a new release of my Google Analytics widget. Thoughts?
Plus the existing version is on sale (https://itunes.apple.com/us/app/ga.today-widget-for-google/id936871747?mt=8) until the new one is approved!
Algorithms preventing bad things? That was the whole premise of Minority Report, wasn't it?
This is so silly. Many things that do not put cash in your pocket are assets. Gold is an asset.

A home is an asset if it can be sold for money, or used productively. If it turns out that your property is so worthless that no one will buy it at any price, and it's also useless to you as means of production, then it's not an asset. That combination of circumstances pretty much never happens.

The asset value of a home is presumably offset by some debt you owe on it.... and if not, you're paying opportunity cost on the money you paid for the home.

Whether or not real estate is a good investment is much thornier. But real estate is unequivocally an asset.
Cyclists in London are crazy: they swerve in and out of cars, onto the pavements and then back onto the roads. They cross using pedestrian crossings and they cycle through red lights like they don't apply to them.

Being able to see them better is great but even if you know exactly where they are you still don't know what they're going to do because they don't follow the same rules of the road.
It's not because it's public addressable that it would be public accessible.
Of course this isn't the only way it could have been done. Settings could have optimistically traveled from port to port until the system saw two at once of the same device with either no serial number or the same serial number.
That is true, I should have been more clear about this but you don't use the "legitimate function"'s intended functionality, you only use the fact that it can be execute (and the byte-string that is it's code).

I used mp3s and jpgs as extreme examples of data that was never intended to be executed, but still can be interpreted as code. In ROP, you don't care about the intended meaning of the bytes that make up "legitimate functions" (or any other data you may use) for it's unlikely to have the sought functionality. Instead you use you search for "dual use code" too, and piece together the functionality you need.
*Correction: This article previously stated that the entire domain and IP address for the Internet Archive were added to the banned websites registry. In fact, only the webpage with alleged extremist content was added.
The fact there were almost hundred reports before the third you mention tells us a lot about how little we know about that specific module.
Cyclists are one of the most (if not the most) vulnerable demographics of road users there is, and it should be the responsibility of other road users to help protect them.

I fall squarely in the camp that says they are just not suitable vehicles to share the road with other occupants. Frankly they make motorbikes look safe. Of course no government is willing to give up the money or the space to dedicated infrastructure.

So as you say, once a month or more a cyclist dies when a lorry turns left. I've watched a cyclist literally crawl from underneath a bus that knocked her off - and it's a contributory factor to my never cycling in London.
This will explain things for you: https://www.youtube.com/watch?v=0_QrIapiNOw
I believe Volvo's are some of the nicest cars you can collide with as a pedestrian/cyclist. Yes, a car is an insane concept, but I'm not sure you're barking up the right tree here.
> NAT and other related tech is a mess.

FTFY
Assets do not need to have zero-length payback period.

If you buy a house for a cash, it will take years, until you break-even. And that's fine, businesses depreciate assets like this for decades, too.

If you buy a house with a mortgage, there are costs related to it too. You need to take it into account in your payback period.

However, you will eventually reach break-even point and since that point, you own an fully paid-for asset, that your kids can inherit, for example. With renting, you will pay indefinitely, and own nothing. You are just paying for the service of accommodation.
Small previous discussion: https://news.ycombinator.com/item?id=9755489
So the safety tech worked as expected. That is a great news. There are way more "near misses" everyday from human drivers.

Also seeing the "near miss" in the editorialized title - this Carlin quote is mandatory

“Here's a phrase that apparently the airlines simply made up: near miss. They say that if 2 planes almost collide, it's a near miss. Bullshit, my friend. It's a near hit! A collision is a near miss.
[WHAM! CRUNCH!]
"Look, they nearly missed!"
"Yes, but not quite.”
I really like the screen displaying multiple domains. I am assuming that it is the number of unique users that accessed the domain today.
Fancy clothes, booze and gadgets is consumption, not investment. You will never have positive cash flow out of it.
It looks great. Too bad it's Windows only.

The preview of excel 2016 for mac is pretty good and some of our marketing staff are contemplating the idea of migrating to mac.

Congrats on the launch, I'm not an excel user myself but I've sent the link to some of my coworkers and they look excited :D
re - saftey is "on the backs of ALL road users"

Indeed but I feel slight guilt as a bus using techie that one of us has not made an inexpensive camera and vision recognition system to fit to HGVs and set off a buzzer / the brakes when they are about to go over a cyclist. Something like that seems the most likely way to stop the death a month in London. Or maybe a skirt around the vehicle so they are more like busses saftey wise?
Wow, I wonder if that still is a thing?
Oh really?

http://www.euractiv.com/sections/transport/eu-truck-safety-a...

Volvo, for instance, began rolling out new designs in 2012, so it could be at a disadvantage if competitors introduce more up-to-date models in the near future.

Wait guys, we just brought out these shitty unsafe trucks recently, we can't be making safe ones already! We'll take 10 years, thank you very much.

Seriously, fuck them. They delay improved safety designs for trucks (with extremely mild changes, nonetheless) and then tell people to spray themselves with reflective plastic.

In retrospect, the gun analogy was way too tame. Gun manufacturers don't want kids killed, but Volvo is pushing for more of them to be run over.
J is also amazingly active on Rosetta Code. Right now at place 4 with 789 implemented challenges. Only Tcl, Racket, and Python are ahead.
UK perspective: how come "NSA" is censored but "GCHQ" isn't?
and just one question: who the hell are the "econ" people?
I once was told that any compiler warning message act as static analysis.

I think static analysis is a complex subject, because it can touch some sensitive subject like programming style and other more expert subjects like compiler back end and how the language defines such and such code behavior.

Static analysis should be made more mainstream, it would be such a great way to teach everybody how to write better code, including and especially students.
Sure is. Just plugged in my USB sound card again yesterday, different port I suppose, and the settings reset.
I agree, that should really be fixed in the core.

In the meantime however I recommend using this package https://atom.io/packages/keyboard-localization which has worked really well for me (german keyboard).
That, and Windows also seems to create a different network connection profile for the same wireless adapter, every time I plug it into a different USB port. I always end up with something like "Local Area Connection 4" just because that's the fourth different port I've connected it to.

Other operating systems do not seem to suffer from these problems as badly, and this MSDN post is from 2004 (three major Windows versions, soon four, will have been released since then), so does anyone know what are the current roadblocks to getting this behavior changed? As someone else said, these kinds of annoyances add up (you really notice them better if you frequently use other OS).
Show HN: Under the UITableView, learn UITableView for iOS with this picture book
This is an MS site? Honestly, I'm liking this no-bullshit thing MS has been doing lately.
I have not only this issue with windows, but on my gaming machine, unless I unplug my Microsoft-made keyboard when booting, the OS blue screens [1]. Of course if I then don't plug it back into the same USB port as before, it will reinstall the drivers...

(I also find it amusing that this happens with devices made by Microsoft themselves; you'd think they would make sure it worked, wouldn't you)

[1]: http://www.hanselman.com/blog/FIXEDBlueScreenOfDeathBSOD7EIn...
and (until recentest version of windows) you will get a copy of the same printer according to each usb port, with all the others showing up as disconnected.
The sad thing is, that they probably paid enough, when considering purchase-power-parity over the decades. It is just the inflation that destroyed the savings. It does not matter, whether the government is running the fund or whether it is privately owned, the result will be the same.
The thread is from 2004, it should go into the title.

I've been using Windows XP until January 2009, then I reformatted my laptop with Ubuntu. One of the first things I noticed was that it instantaneously recognized pen drives without going through all that found new device dance. OS X is also fast at mounting USB drives. I just can't understand the technical reasons that make Windows annoy people with that. Is it still the same with Windows 8?
No, Minority Report had psychics (the title comes from having 3 of them, so when one of them sees something different than the other 2, there is a "Minority Report").
The post is from 2004. This no-bullshit thing isn't exactly new. :)
Mainly because most of the tool reports freely mix critical issues with stuff that is just opinionated bullshit (e.g. 80 character length lines).

When the output is as long as your arm and you have pick through it with a fine toothcomb to find the things that matter (and even they aren't necessarily causes of bugs), the whole idea becomes substantially less appealing.
I'm on Chrome (on a macbook) and the mouse isn't working... Click works to shoot, but I can't look around using the mouse. Any ideas?

(I'm playing with just the keyboard so far... but I can see the end coming soon.)
This guy just found out how to bypass adblocker