skysight-inc/HackerNews huggingface dataset:
With the current system, if you're using an exploit(especially for gain), you're a criminal.Not so when using pinata.

Also , pinata exposes all hacks in public, unlike today.
i have to look into sshuttle, i heard it's good
I completely understand your point.

But at the end it's about people ...your example with PHPUnit can be abused like this
https://thejh.net/misc/website-terminal-copy-paste
How many people do you think will bother to paste the script to a text editor and check for evil parts ?
I wonder how they deal with spoofing? Do they use the proper verification methods?
Whoever mentions the numbers on how few applications were rejected as an argument seemingly can't be talking about point two. And that was what prompted this particular discussion, so I don't think you can claim the people involved are talking about point two.
Welcome to Earth View
I installed the Amazon Linux Installation Image (AMI) with docker and Python 3.4 for a recent project. I know ElasticBeanstalk fairly well, but configuring this was a big headache. WASTED LOT OF TIME.

Instead of making life easy, it just added unnecessary burden of learning Docker for the future project members. Documentation is poor, had to hunt for hours for solutions to simple queries.

On AWS, I would suggest you stick with the basic Linux flavour that you know. Use their Docker build only IF you know docker very well.
> Sinks like a tanker when you try to actually use it

Can you name some examples of this besides the CPU authentication bug? Honest question, I'm considering adding InfluxDB to our stack so I'm genuinely curious.
Mark Zuckerberg: The Future of Facebook Is Sharing Thoughts
Flow based visual programming languages, like Pure Data[1], are good examples of programming languages that really differ from the rest.

Interestingly, Pure Data is not all a fad (but neither a growing trend!).
In the art community, I have friends that are very proficient with Pure Data, using it for creating various visual and audio programs. A lot of them are still using it more than a decade after they first started.

[1] https://en.wikipedia.org/wiki/Pure_Data
The Naughty Dog team made a lisp (GOAL) for some of their games.
iptables can be scary (for beginners), ufw makes it easy but is still better to know how to handle routes with iptables imho
I'm not sure if this comment is a joke, shill or some serious fucking crack smoking.

The chain of trust is broken. It doesn't matter where or who does it.
You mean, am I misrepresenting my real life beliefs for the purpose of online entertainment? Certainly not.

Moreover, this isn't a throwaway account; you can deduce my identity without much effort.

People who disagree with your views on crime and punishment, or anything else, aren't necessarily trolls.
Ask HN: How often do you convert code from one language to another?
Related to interconnected human minds: https://news.ycombinator.com/item?id=9610525
(http://aeon.co/magazine/psychology/do-we-really-want-to-fuse...)
“Snowden” Movie Official Trailer
compounding on the other responses, the increased emissions of CO2 in the atmosphere are also changing the ocean's chemical properties (acidification).. and this has a huge impact on the environmental equilibrium.
https://en.wikipedia.org/wiki/Ocean_acidification
Hundreds of MIPS is interesting, for a certain class of application, but it would be interesting to see the results for sub MIP applications. The microcontroller in a microwave oven.
Setting Go variables from the outside
The Night Intern Team 6 Took Down the App
I do this all the time:(
Resurrecting the SuperH architecture
>> Wow, my niece had DDR music playing last night. It got me thinking about how fun it was to play that game and the keyboard equivalent of it.

You should check out Stepmania:

http://stepmaniaonline.net/index.php?page=downloads

It's a free, multiplatform DDR work-alike that has keyboard song packs as well as pad song packs (you can map keys for the non-keyboard song packs too).
Very interesting. It's a fault injection attack causing content from the highest layers to be misinterpreted as coming from the lowest layers, with the "fault injection" part being done by the noisy wireless medium itself!

This reminds me of the classic "+++ATH0" attack, where sending that string in for instance an IRC message caused some modems to hang up.

One solution is to scramble the data, so parts of it cannot be misinterpreted as lower-level framing, even if a few bits are corrupted. One good way to scramble the data is encryption, so even a trivially encrypted network (for instance, the password being the same as the SSID) would be immune to this attack.
A lot of the advances of the 1880s involve the "variations on a theme" of the widespread adoption of electric motors, which became reliable and commercially viable in the 1870s. But electrification is quite a consequential theme!

The safety bicycle is a great advance: people had been experimenting with human-powered vehicles for decades before, and the safety bicycle is just a perfect expression of the human-powered vehicle. The design exploded in the 1890s and has remained essentially unchanged for more than a century. The safety bicycle will probably be around in recognizable form for centuries to come.
And the Clojure example makes me say "aaah the ambiguity!" The key/value pairs makes much more sense to me when they are delimited as such. It's a minor point, anyhow. Clojure is just fine. I just don't think that it is significantly less verbose than Scheme. Let's just keep hacking with Lisps and be happy. :)
on the day everybody was scrambling to get their christmas shopping done.

i still remember the chaos (I also had to get some presents...)

edit: it was actually in 2000: http://www.boerse-express.com/mobile#/mobile/pages/96409 (german)
dude's alleging secret future-tech developed by some modern covert bletchley park, and you're gonna refute it with a fine point about what algorithms can currently do? I don't think you two are playing tennis on the same court.
Ah right. I had heard that and forgot about it.
Anybody who runs unverified code, through any medium, when the option to run trusted code is available, deserves to get pwned.

https://github.com/paragonie/password_lock/blob/master/run-t...

^- For the record, I keep scripts like this in my Git repositories.
>>EDIT: downvote count = a number of people who got no clue what meta language is.

No, people simply don't like "language fanboy-isms" here.

The reality is that no language is "superior by definition." Some languages are better at certain things than others depending on the task at hand, and many other factors.
> But there isn't a one programming paradigm that's universally better than others.

Maybe that's why Racket supports functional, imperative, declarative, and object oriented programming. I'm sure I'm even missing a few.
Pretty often, from Java to Scala.
I can't find a good reference now, but supposedly the i7 has a set of transistors that calculates if its workload would execute faster on multiple cores, or fewer cores, and can park cores to save heat, and let the electricity be focused into the unparked cores.

Intel's marketing material in 2008 mentioned the number of transistors doing the load calculations was about equal to the number of transistors in a 486. So you have a 486 constantly determining thread scheduling load, they claimed.
Libtlssep: A TLS library with built-in privilege separation protections
Didn't find the "Download All" option... but this should do:

import json
import os
import re
import requests

url = 'https://earthview.withgoogle.com/%s'

def get_data(slug=None):
if not slug:
html = read_url(url % '')
slug = re.search('href="/(.*?)">Explore</a>', html).group(1)
html = read_url(url % slug)
data = json.loads(
re.search('data-photo="(.*?)"', html).group(1).replace('&#34;', '"')
)
write_json('../json/%s.json' % slug, data)
jpg = read_url(data['photoUrl'], binary=True)
write_image('../jpg/%s.jpg' % slug, jpg)
get_data(data['nextUrl'][1:])

def read_url(url, binary=False):
print('reading', url)
r = requests.get(url)
return r.content if binary else r.text

def write_image(path, data):
if not os.path.exists(path):
print('writing', path)
with open(path, 'wb') as f:
f.write(data)

def write_json(path, data):
if not os.path.exists(path):
print('writing', path)
with open(path, 'w') as f:
f.write(json.dumps(data, indent=4, sort_keys=True))

if __name__ == '__main__':
get_data()
http://www.tabbedout.com/

When I was looking at this awhile ago, these guys had gotten pretty far with the concept. I think they had a blog article detailing why POS companies were a pain to work with and in some cases very expensive (they charge partner companies for access to their "APIs")

A business plan might be a good idea. Who is going to pay for the service, are you going to charge the bars or the consumer or both?

OpenTable is also doing this now for restaurants they have the added advantage of having a dedicated PC with their software in each restaurant already.
People are downvoting this and being too much of a coward to state why they are.
I wish but the CPP is going to introduce yet another internet censorship thingie :/. It's up to you people to do something about it. Easily said harder to to do I know.

Also yes learning is always full of challenge. But i just wish the writing system for chinese would adapt something like hangul.

Well another thing would be for China to dominate the world..then we would be forced to learn it anyway :P
Good point! Here's two OpenGL animations across multiple 1-dimensional vertices:

Perlin- https://i.imgur.com/ROww6bw.gif
Random- https://i.imgur.com/EurTdaZ.gif
> but they are not being reported

A consequence of

> public protests almost any day of the week

surely?
My naive reasoning of why is that a lot of people start by learning c-like languages and don't see the need to learn something as different as lisp. As lisp and it's descendants were never really the dominant language, it was never the first type of language most people learned. Now that many mainstream languages have progress to incorporate more and more lisp features, it's becoming less foreign to many devs and the popularity is increasing and is now higher than I think it ever was.
I thought they just pushed that part of the project back. Didn't they announce that "the Machine" is still coming, just that first iterations will have a more traditional architecture?
Id love for title/escrow companies to go away. They charge a few thousand dollars and provide very little in return. The problem is, the seller picks the title company, but the buyer pays.
> LuaJIT is, by far, the best option for scripting in games/RT

Much as we want to like it, we've been frustrated by Lua for a single reason: no preemptive threading library. Its lack of true prototype-style OO is more than a bit annoying too.
It’s Too Soon to Call This the Anthropocene Era
Why has everyone forgotten the pub? Many revolutions and grand discoveries started in pubs.

I'm starting to think that Simon and Garfunkel's Sound of Silence was a warning about now.
but it doesn't provide infrastructure

...How does it not? That's the point of systemd: provide a GNU/Linux middleware with lots of policy decisions on the structure of distros to supposedly bring integration and uniformity benefits.

The fact that it's core infrastructure but heavily delves outside of mechanism is what makes it so controversial.
Adding to weavejester comment, back-pressure is to be handled with core.async channels [1]. I guess in Rich's terms, RX/FRP "complects" the communication of messages with flow of control [2]. Although this last statement may not be true anymore given that RX now has many functions to control the scheduler (eg. observeOn/buffer/delay, etc).

[1] http://clojure.com/blog/2013/06/28/clojure-core-async-channe...
[2] http://stackoverflow.com/questions/20632512/comparing-core-a...
> No, people simply don't like "language fanboy-isms" here.

I said specifically that any metalanguage would do. And there's a lot of them. I do not care which one to use.

> The reality is that no language is "superior by definition."

Then you do not understand what "superior" means.

> Some languages are better at certain things than others depending on the task at hand, and many other factors.

A language A which contains all the features of a language B, plus a bit more, is superior by definition, because it can seamlessly replace language B without anyone noticing.
What is seemingly correct about code that causes a signed integer overflow?
Autotools for these pretty simple things is an okay approach, but then people tend to go overboard, and that's when it gets horrible (or autoconf itself breaks libxnet detection cause it gets some quoting or who knows what wrong in some release). My personal pet peeve is people detecting endian in obtuse ways that totally fails during cross-compiling when there's the perfectly fine ntoh family.
The Truth About Work/Life Balance at Startups
Deploy a Meteor Application in Under 1 Minute
It's now... The Machine! http://www.technologyreview.com/featuredstory/536786/machine...

The good news is they don't even need to build memristors. Even simulated memristors are faster than than memory.

"The off-the-shelf, high-powered HP server completed the task in about two seconds. The simulated Machine needed only 50 milliseconds."
> using some sort of optical system is prone to exploitation

I would disagree with this statement. If you encode the time stamp (and or geo coordinates) as part of the video, it would be nearly impossible to ship it off remotely.
What do you want them to do? The obvious solution is to change it from "curl|sh" to "curl|{something about whetehr PGP says this is properly signed by the private key belonging to public key blahblahblahblahbalhMETEOR.COMkey. If yes:}|sh"

But the problem is anyone compromising the site can just change the line from "blahblahblahblahbalhMETEOR.COMkey" to "attackerchangedblahblahblahblahbalhMETEOR.COMkey" right on the web page, and people will copy the one verified against the wrong key. So that doesn't work.

Nor do clients have caches of PGP signatures, nor is there some totally obvious third-party that you can verify it with. You can't just go:

curl|{check_if_signed_with_www.this-site.com}|sh (which would pass visual inspection - the attacker would have to change www.this-site.com to something else) because there is no obvious mechanism to do that. Who will tell you whether https://install.meteor.com/ has signed it?

Well, HTTPS will kind of tell you. So "https://install.meteor.com/" is a lot better than nothing...

If you're going to entertain the idea of the HTTPS site being compromised to serve whatever they want, well, there is precious little you can do about it.
The Internet just persuaded Sprint not to slow online videos to a crawl
> There is a lot of corporate crap that makes the front page, I expect that reddit receives remuneration for this.

That's almost certainly false. Even if you believe the people running Reddit have no morals, the money from promoting Taco Bell can't possibly be close to enough to the legal and business risk to getting caught.
Bugs We Found in Apple Music
No Internet? No Problem. Inside Cuba's Tech Revolution
> Did I talk about Racket anywhere?

This is a thread about Racket, if you did not notice.

> Are you really arguing that implementing some other language is the way to go?

This is exactly what Lisps are about. You've got a nearly raw AST at the bottom (S-expressions) and then you build up a hierarchy of languages on top of it.
Can languages with other syntax have the same properties?
That can't possibly work correctly with runsv, given the way in which Unicorn performs configuration reloads. Eventually the original process that runsv forked will die, and runsv will try to restart it and fail (because the original process launched a new generation that continues to listen to the socket). Then 'sv stop' will fail to work because the new generation of master and workers isn't under runsv's supervision anymore.
Notification overload and studies
The defaults on my installation are *.debian.pool.ntp.org. Can you give me an example of an installation with less sensible defaults?

edit: Ah, I think I now know where the misunderstanding lies. My "if you don't" refers to "if you don't build it from source", not to "if you don't ./configure it".
Well it would reduce the security factor of AES-128 to as low as 64bits which is somewhat tractable.
Private entities (individuals, companies, clubs, etc.) can refuse to participate in things they find objectionable (gay marriage, straight marriage, death penalty, life, whatever). There may be legal repercussions if, for instance, what they're refusing to do is to pay taxes, a legal obligation.

But gay marriage is now legal in all states, so representatives of the states are obligated to perform those services. The clergy aren't representatives of those states and so they can refuse, without legal consequence, to perform services they object to.

The death penalty is legal in most states, so some one within that state is obligated to execute people, though they could potentially refuse (at the likely cost of their job, perhaps more). But a pharmacist, as a private party, is not obligated to sell the tools of execution to the state. It's their own choice.
Equity is not worth anything until it's real money in your bank account. Until then it's just an excuse for not paying a higher salary.
"Improved performance: PHP 7 is up to twice as fast as PHP 5.6". As a Ruby developer there are two ways I could go about this if I wanted to be a living cliché:

1) Meh, it's still PHP

2) Easy to go twice as fast when the language is so slow to begin with

But really I'm not kidding myself, I'm envious. I don't know if the work on PHP-related tools by Facebook somehow helped, but I'm glad for all PHP developers to see their language maturing and getting more consistency and speed, good on them.
Biggest fan of working on paper, to the extent of carrying a clipboard in my laptop bag all the time. Along with other gadgets.

I wouldn't pay for something like that either. I was suggesting it be offered for free, like gravtaar.
What do you think about this solution: introduce a layer on top of SSL that just verifies whether the private key of a certain explicitly stated site has signed a file?

In other words, compromising the server wouldn't be enough, because that doesn't give you the SSL key, so it would still fail "curl|is_signed_by site.com|sh", which they can only pass if they compromise the private key?

Better than the current system?
HMailServer – Free open source email server for Microsoft Windows
Yes, the biosphere can rapidly remove carbon.

However, the total amount it can remove and store on geologic timescales is very small.

The total amount of biomass on the planet is not that large compared to what we're talking about. Furthermore, most organic matter decomposes and releases the carbon back into the atmosphere. On geologic timescales, the biosphere is not a major player in the carbon cycle.

I don't understand how politcs factors into this. This is basic science.
Kiba: ETL Done Right
I think your view of horrible British food is a bit out of date. British restaurants are among the top in the world and to be honest, even Pub Food beats most casual eateries in may other places in the world by now.
Glenn Goodrich pens a tutorial on using Kiba, a lightweight ETL framework written in Ruby. Move and process your data like a boss.
> You forgot the part about executing innocent people.

Parent covers this essentially in this point:

"the penalty is quite final. there is no appealing afterwards"

The reason we have an appeal process is because an initial sentence can be wrong or inappropriate.
Let's say I write a function that looks like:

int ComputeStuff(int value) {
if(value < 27) {
long and complex computation specialized for values under 27
return result
} else {
long and complex computation specialized for values 27 or more
return result
}
}

Then I call it from somewhere else like so:

int x = ComputeStuff(12);

Let's say the compiler decides this is a good candidate for inlining. Since the programmer wrote code with the intention of it running, are you saying that the compiler should not take advantage of the fact that it knows the exact value being passed into the function in this case and can delete half the code knowing it will never run?
Labour are bound by the same immortal desire to control lives. Don't pretend they are a contrast.
Two more releases after this and PHP will be an OK language.
> So even if they aren't actually going to do it, they clearly want people (voters) to think that they are.

This is a good point. They are probably testing the ground. Regardless of what is practically possible, it is very important for Cameron to find out how far he can go in this direction with the public supporting him, or without the public caring (most importantly, before his party risks losing votes). Then he will know his political limitations, not just the technical or economical ones that his advisors know already.
The main problem I find with these smaller email providers is the uncertainty of their future - they can easily disappear the next day, because they ran out of money or simply lost interest, and then you're f.cked. With Google, Yahoo! and Microsoft you can be at least sure they'll provide their email service as long as possible.
Zuckerberg Reveals Facebook's AI, VR and Internet.org Plans
I'd be really interested by something for Clash Of Clan.
I wish there was something like Innerspace for Android.
If you supply drugs (or facilities) to be used in an abortion, you are part of a chain of actions that ends with the intentional taking of a life. Same with assisted suicide.

But even the magnitude cutoff is arbitrary. At which point is the result "bad enough" that ethical reservations start to apply?
Scientists Build Artificial Neurons Able to Communicate with Organic Neurons
Quite a beautiful addition to sexps. I've seen implicit rules about top-level expression being implicitely wrapped in parens you one can write

defun fact (n)
(cond
..
..)

which makes lisp so much more bearable to parensophobic people.
> What do you want them to do?

I want them to not use a one-liner. Step-by-step:

1. Download the files

2. Download the public key

2a. verify the public key if you've never seen it before (publish in the blockchain, have lots of high profile technologists sign it, etc)

3. If the verification matches, then proceed.

Teaching developers to value "clever one-liner hack" over "secure, dependable solution" will lead to bad habits.
Show HN: A tiny Ruby wrapper around Email Hunter API (https://emailhunter.co/)
I'm surprised the article doesn't mention Ultimate Online's private servers (though I guess their legality is probably a gray area at best). Most of the people still playing UO are on those servers where they're running an older version of the game without many of the later expansions, some even add significant amounts of custom content. Last I checked there were servers that have hundreds, or even thousands of active players.
In a way it's similar to frameworks. Frameworks which are more popular try to make choices for the user (like Rails). As an end-user I clearly wanna focus on my tasks, rather than choosing a toolset or perhaps building one myself.

Lisp is minimal and abstract. That's appealing to a different set of people, who aren't satisfied with off-the-shelf abstraction levels. It's also fun and challenging to work at that level, though IMO it's not always going to translate to better productivity.

For me, learning assembly and going through the 80386 reference manuals were more rewarding in terms of understanding how programs work. Sorry I have no specific insight to offer on the question you asked.
No, I'm telling you that once optional things have a way of becoming less optional.
Yeah! I knew it wasn't just my gut feeling when I went ALL THE WAY with Meteor :)