skysight-inc/HackerNews huggingface dataset:
Same for Chrome on Android and on an old-ish netbook. Doesn't anyone test their websites with hardware below $2K?!
That doesn't explain why it's zeroed everywhere except for a few spots, though.
The original paper appears in Personality and Social Psychology Bulletin 2015, Vol 4(6) 805-821.
Hello again • Joshua Topolsky
> Isn't it possible that employee and employer can have a non-antagonistic relationship?

I'm skeptical, given the vastly divergent goals of employer and employee. I'm borderline-dismissive at Google scale, where there's no meaningful employer/employee relationship to be found at most levels of the hierarchy (and a relationship with a manager isn't the same thing). Of course, there are models of organization (co-ops and the like) where one can have a mutualistic relationship with the other stakeholders, but--these aren't that.

> What if the "discussion" was intended entirely in the interest of the employee?

The interest of the employee just happens to involve not rocking the boat, not ensuring that everybody's got an accurate picture of the market, and depressing workers' negotiation position so that the company can profit? To me the possibility of this what-if is so remote as to be laughable.
Planning restrictions are very popular with the local public. So much so that some places in the US invent their own weird private contract law versions (HOAs).
thanks for the detailed review - you're tweaked video was really good! gainers were sick. for readers, this will be a pretty common reaction w/ first time use: the first version will not be that great, but with a few tweaks can make it a lot better.

any thoughts on what we could do to make the videos better post-tweaking?
Disagree about DB tests. If you want to test queries, then it's bad idea to mock DB. If you don't want to test queries, don't call your tests coverage full.
Looks promising. Can't find any reviews/blog posts of using it.

Do you have any example apps that were made using neonto?
I remember requesting a stripe reader when I first saw something about them just spitting out the info, and by the time I got it they were already encrypted.
For anyone else who wasn't thinking very quickly today, these commenters are using "niche" as a euphemism for "erotic".
How to hide yourself away from Google Analytics radars?
Conquistadors no more: Spaniards are flocking to Latin America in need of jobs
2015 Mobile Developer Survey
People can misread or misinterpret almost anything. However, the article had some real points.

tl;dr version: There is an opportunity cost for the time you spend in decisions. If the decision is really the most valuable use of that time, take the time to make the decision. If not, make the best decision you can in the next 10 minutes, and move on.
It's also much too narrowly scoped. Even if it were a random sampling across a variety of XBox Live games, it would still only be representative of XBox Live gamers, which is its own demographic.
Being shot at (intentionally or otherwise) is entirely different than a car in front of you slowing to a stop.
That happens with every Framework.
That's why we migrated from Django to Playframework.
Django is great, except for the thing we do / the expertise I / we have. Play framework is way more "raw" than the most of the framework's I've seen. Also I use Slick but only the SQL part of it and the Codegen. It's so great to write RAW Sql while persisting objects easily and type safe without a big layer in between.
Hi everyone, Co-founder of Cloudron here. We are just getting started and in closed beta for developers. I am happy to answer any questions.
A PHPUnit test suite passing and being stable under high load are two entirely unrelated things.
Try to add fuzz-testing into your unit tests.
Sure, well, I wrote that in the context of, if any GPL software developers want their software to be used more in a non-copyleft setting and are willing to negotiate a difference license.

It very well could work both ways; some proprietary software developer would likely be willing to release their software as GPL if paid enough money, since, ostensibly, the proprietary license was chosen to help make money in the first place. I can imagine that some proprietary software developers choose proprietary licensing for some other reason, but I suspect it's mostly the default for anyone looking to charge for copies.
Life is hard. Sometimes people don't pay attention. Pulling irresponsible stunts isn't an appropriate response "to make people pay the proper amount of attention."

If someone had died from this stunt, the total number of deaths from remote hacking of cars would be 1.

NB: I highly favor a bounty system where someone who can demonstrate the ability to take over a car without touching it gets paid lots of money, and if the company fails to fix it they get fined even more money. But "someone else is doing something bad, too" is never a good justification.
Paying with Bitcoin
If you increase the danger of a situation to increase it's exposure, you can't be surprised when that causes repercussions. I doubt they will go to jail, but I do think alerting the authorities was the right call.

In fact, they may have been counting on that. If they really want to increase the exposure of a story, start a public debate. The easiest way to do that? Get some public outrage going. They called this all out, they'll need to deal with the consequences.
Seriously, though. The trend that annoys me the most is touchscreens in cars. A touchscreen is the last thing I want on a car. I want physical buttons that I can find and operate by touch alone without having to take my eyes off the road. Maybe voice control if it can be made sufficiently reliable, but that's about it.

It's like car manufacturers nowadays want people to crash their cars so that they can sell more of them.
It's not just a figure of speech, it's a useful abstraction. The protons don't move, but the holes seem to do that. Not only that, if you pretend the holes have a certain amount of mass you can predict how they move, and they move similarly to how a positibly-charged particle would move in the same circumstances.
See http://integratedleader.com/articles/40-70rule.pdf for another take on this. (At least, I think it's the same thing - we want certainty, and that causes us to take far too long to make decisions.)
I guess I see 'Speed as a Habit' and take the article as culture setting and a negative. It seems like you see the article as a way to avoid poor decision making and planning habits and a positive. The truth probably lies somewhere in between.
I'm a 5 minute bike ride away from Facebook. Gotta choose your suburbs wisely!
Radigast – Go slack bot with configurable plugins
Campaign Manager
Please apply to: https://hire.jobvite.com/j?aj=oWSsZfwZ&s=Hackernews
Drawbridge is the leading cross-device identity company building technology that fundamentally changes the way brands connect with people. Drawbridge enables brands to have seamless conversations with consumers across their computers, smartphones, tablets, and connected TVs. Backed by Sequoia Capital, Kleiner Perkins Caufield.
What You'll Be Doing
Manage and monitor pacing and performance of campaigns in portfolio
Translate data sets into findings and actionable optimizations
Become an expert on Drawbridge technology and how it affects campaign performance
Lead performance analysis and long-term strategic road-map for high level campaigns
Aggregate and manage daily reporting using 3rd party & 1st party reports and identify opportunities for reporting efficiency improvement
Work with the team to provide superior customer service and improve core platform performance
Must have strong analytical skills with excellent attention to detail
Extremely proficient with Excel (VBA skills is a plus)
Innate curiosity, leading to understanding of how things work
Self-starter who thrives in an environment that is fast-paced, demanding, fun, and entrepreneurial
Strong interest in and comfort with technology
Effective time management skills with an ability to prioritize and meet deadlines
Experience managing performance campaigns on desktop or mobile advertising space
Bachelor’s Degree and/or related work experience
1-5 years of experience in a highly analytical role
Media experience preferred
What's In It For You
Learn a ton about the hottest area of growth in Internet advertising - Mobile!
Thrive in an exciting, evolving environment which will constantly challenge you
Work with a lot of fun, smart people, in a cool work environment
Competitive pay, equity ++
Fun company outings, kegerator, fully stocked kitchen++
Free onsite gym
> Access control and integration with authentication platforms, logging / auditing, various layers of site-wide policies on all configurable features. Preferred platforms (i.e.: Windows servers and MS SQL these days, Solaris and/or Oracle 10-15 years ago.) Lots of reporting features and professional service to support all of that.

From the sounds of it, you're running into how hard it is to balance security and usability. Personally, I prefer security, but I'm sure I'd say otherwise if someone was blocking me due to an old, outdated, policy.

As for antiquated web browsers, yeah, that's annoying. And it amazes me that there are companies out there who don't update their products, even when they're paid millions of dollars... Then there are the users who don't want to update....

> Another real annoyance is very slow deployment cycles. Getting client change control approval for even bug fix releases, let alone major upgrades is a real pain, doubly so if any hardware / resource requirements go up and now it's a capex line item that needs CFO approval. I envy the cloud folks.

That's not something I have had experience with. Sounds painful. Makes me glad to work in a smaller community college where I get to do mostly whatever I need to.
Not saying JPEG hasn't had its share of exploits, but that the format itself isn't an example (like DOC, and PSD) of a format that can be described as "direct to memory" in the same sense. DOC and PSD are in many ways just the in-memory data structures of the apps that create them, written to disk.

http://www.joelonsoftware.com/items/2008/02/19.html

"These are binary formats, so loading a record is usually a matter of just copying (blitting) a range of bytes from disk to memory, where you end up with a C data structure you can use. There’s no lexing or parsing involved in loading a file. Lexing and parsing are orders of magnitude slower than blitting."

PSD is much the same - it's why interop with PSDs is such a challenge.

JPEG has to be parsed and decompressed - another source of problems, but not remotely in the same category.
>unlike the typical TPMs that only allow vendor software to be authenticated, these TPMs would allow the user to directly authenticate the firmware. If you know the firmware is good, then each layer can validate the next layer up all the way to the OS.

nothing novel there in terms of having to have some "new" TPM. Just OEMs choose to lock down their boot chain. Probably most secure boots are minimally implemented to only support the use case of secure/trusted boot (device/chip/OEM key) xor untrusted boot (no key).

If both are supported, whatever functionality that relies on OEM firmware or chain of trust would be disabled if it is an untrusted boot (like fastboot oem unlock for some android devices) situation.

May be tricky to enable certain desirable/required features if user wants to run their own firmware.

>I have yet to hear of a system that allows the user to directly authenticate software/firmware at the hardware level. Is anybody working on research of this nature? Or are there insurmountable problems with this approach?

I think chromebooks/chromeOS folks have been looking at this. Not sure of the current state of things.

p.s. TPMs kind of suck if they are not able to be updated OTA.
The core issue is that Rubygems adds the `lib` directory of every gem to your path, so you end up calling stat a zillion times.

I am admittedly a bit out of the Ruby loop these days, so it's possible that this has been improved. The fastest way of course is to not load a zillion gems...
> What about all those wives and kids that would have been endangered if the flaw had continued to go unfixed and exploited in a more malicious manner?

Because, he said anything like that right? What a gratuitous use of a strawman.

It's not appealing to emotions, it's pretty rational to think this experiment could have easily caused an accident and hurt people. We all rationally know that driving is one of the most dangerous forms of travel. Seriously, a car is a dangerous, fast, multi-ton piece of metal, it's not a toy to experiment on when other people's safety is at stake. Respect the vehicle and the damage it could cause.

The exploits can and will be published and reported on quite easily without these reckless theatrics.
> Having seen the way the law enforcement + prosecution machine works in cases like Aaron Schwartz, I would be surprised if these researchers did not spend time in jail, and didn't at least face charges of some Serious Nature.

Having considered how dangerous their little stunt was, I'd almost expect them to be sentenced to some gaol time. What they did was pretty darn Serious!
I just about choked on my coffee. If you're serious, is the issue just the size of the test suite, or are the tests themselves just woefully inefficient? By the time you're done, you've forgotten whatever it was that you modified.
I don't disagree with you on that. The researchers (and WiReD) should certainly be aware of the risks here, and be prepared to accept the repercussions thereof.

On the other hand, while two wrongs don't make a right, I'm glad that the researchers made that choice, so long as said choice results in manufacturers actually taking car security seriously for once.
The thing is, they're not bad corporate policies. Our legal department is trying to stay within the law, that's a good thing.

The fact that you're technically allowed to use GPL code in a proprietary SaaS is a loophole, not something to be used in defense of the GPL. What you're basically saying is "GPL is great because you can get around it", which isn't really a case for the GPL but against it.

The legal departments in big corporations are aware of this, and they don't really like the idea of allowing loopholes in licenses to decide what software to use, so they discourage using the GPL.

If you're a software developer who's choosing an OSS license to use for their library, this is a huge factor. If you really do want companies to use your library even for proprietary SaaS applications (like in my example), choose a license that's explicitly ok with it, don't choose one that relies on a loophole to permit people to use it.

And if you don't want companies using your software in proprietary services, by all means use the GPL! That's great! But don't blame my legal department or corporate policies for me not using your library, it was your decision to choose the GPL, and I don't want to go against your decision.
It might be a lot or production number/date.
Reminds me of Esio Trot: https://en.wikipedia.org/wiki/Esio_Trot
Our Responsibility as Analytics Providers: Building Trust in Your Product
> Without such event present in the footage, car manufacturers can just say "Meh - no big deal". And continue recklessly risking lives by manufacturing unsafe cars without air gap between CAN bus and Internet.

Oh really, can you point to the responsible tests that were done in the past that proved inconsequential necessitating this reckless alternative? Or are you just inventing that the car manufacturers would ignore this and somehow the story would just go away?
> So what should researchers do? Do nothing

There is a big world between "do nothing" and "put third-parties at risk by stalling a car on a three-lane highway with concrete barriers."

Doing the right thing is often boring and takes lots of work. That's why it's called "doing the right thing" and not "doing the splashy thing" or "doing the easy thing."

They already had the attention of the media. Keep on working with the media to get more and more attention. Is it hard? Then do it some more.
When he pulled the ShooTag out I thought he was totally going to write the card data to it. Nonetheless, interesting article.
Gigaom's founder Om Malik shares the real story
Thanks for the suggestion, that would definitely be an improvement :)
AGPL closes the "running on a public server isn't distribution" loophole in the GPL. AGPL is better for freedom.

Google et al want that loophole, so are ardently anti-AGPL
They are famous for going for COTS in order to save money.

On the contrary, SpaceX is famous for vertical integration. COTS may have been the idea back in the Falcon 1 days, but those days are long gone.
What you forgot is that it's not only easy to get started, you could also start REALLY REALLY small which doesn't work with ALL the other solutions. Kubernetes Master could run on a node with 512mb memory and it still works great. Your cluster doesn't die if the master dies it won't reschedule etc but thats ok mostly. the only thing what you need is enough etcd nodes to keep it up and running.
Nice, I never had heard of this thing.

But Crash Course is awesome I am happy they are 4th.

Their space course is just great.
The team also seemed worth to check. Why don't they change their website design?
Personally, the only things I had to do to prerender full pages with React were:

- prepend '<!DOCTYPE html>' to the resulting HTML

- attribute "prefix" in head tag "<title>" wasn't outputted, so until it's fixed in the library, I just use a data attribute "data-replace-prefix" and removed the extra "data-replace-" from the resulting HTML

-------

Also, he could include inline scripts (like Google Analytics) this way:

return <script dangerouslySetInnerHTML={{__html: "THE_JS_CODE"}}></script>;
Bad Bitches in Cars (Bbc) by Abuvv
I think you misunderstand me.

If you e.g. can't read it because the text is too small, the design is not perfect (for that user at that time), and zoom should not be disabled.

My point was that the moment a user is trying to zoom, for whatever reason, they have already decided that the design is not perfect for them in the present circumstances on the device they're currently using.

And so the only thing disabling zoom is going to achieve is annoying the user by artificially preventing them from trying to improve a situation they've already deemed is suboptimal.
Sustainable homes are a joke in poor taste. Cities are vastly better for the environment than the same number of people in so called ‘green’ homes in low density areas.
Because the author is a poorly performing writer more likely to harass gamers, thus continuing the cycle.
Buying a smaller company gives the owners control over a resource.

Merging with a similar sized company means relinquishing control for no immediate return.
Type systems gives you things you can theoretically prove. Unit testing gives you fewer defects (at the price of some effort) in practice, but it's not the kind of thing you can theorize about (except that "it ought to reduce defects").

The best you could get is probably "in our study, with our participants, writing unit tests led to an X% drop in defects, at the price of Y% more effort".
Wonder if we should create an FAQ for drone questions? It's only been two days since the last HN discussion:

https://h4labs.wordpress.com/2015/07/19/dangerous-drones-dai...
You are missing the point by a mile.

These people did the exact opposite. They put others in potentially mortal danger.

They could have killed someone's daughter, son, mom or dad.

Stop and think about that for 10 minutes before you continue posting with this unreasonable point of view. Would your mom, dad or siblings life be worth this test? Imagine they collided with this car and died. Close your eyes and imagine that for a moment. Imagine receiving that call. Going to the hospital. Seeing the, all torn-up and suffering befor they die due to the injuries.

And then you find out it was due to two fuckers who thought it'd be funny/interesting/whatever to disable a car remotely.

Imagine that.
News flash: the same concept can be demonstrated in real-life.
The social(ist) revolution coming for insurance
Definitely friendlier than Cron :D

Excellent work, @bretcope.
> If someone had died from this stunt, the total number of deaths from remote hacking of cars would be 1.

If this stunt had never happened, we'd be in a position where some less-scrupulous actor would demonstrate such exploits on a much bigger scale. I can guarantee you that the total number of deaths from remote hacking of cars would be far greater than 1.

If we're going to play the "OH NO THINK OF THE CHILDREN^H^H^H^H^H^H^H^HHYPOTHETICAL DEATHS" game, then let's put this into some goddamn perspective, eh? 1 v. hundreds of thousands (if not millions) that are currently vulnerable to remote hacking right this very instant.

In all actuality, of course, that "1" death was highly unlikely; at most, we'd probably see a few dented bumbers and a couple grand in car repairs. Maybe somebody with whiplash.
The Mandelbrot set (the image on the right) is a famous example of a fractal, a mathematical shape that gets more detailed the more you zoom in.

The code on the left is SQL, normally used to query databases, but in this case is being used to create the image on the right.

This is impressive because SQL isn't generally thought of as a language for arbitrary computation.
I can't say that I completely disagree with you but I do lack your faith in the authorities' ability to respond appropriately. I wouldn't mind if Beavis and Butthead recalibrated their ideas about how to conduct a demonstration. I also hope that they've edited the video for maximum effect, and that the reality was a little less exciting; but the fact is that a stalled automobile is an everyday occurrence that is about as mundane as mundane gets. Minor events such as this cannot be prevented in all cases, and therefore drivers absolutely must watch and be prepared for such an event. It wasn't the safest thing to do, but it isn't outside the normal range of "dangerous" events that one will experience on their commute daily, often more than once daily. IMO it doesn't increase the danger nearly as much as traffic patrol conducting a routine traffic stop on the freeway. If we're prepared to accept traffic patrol on busy freeways, then I don't think it's justified to treat a rare, even if foolish demonstration such as this one as anything more than a nuisance.
The distribution of when bugs are caught, and what bugs are caught, by different kinds of tests is very different. Units tests catch bugs while they are being written and when the units they test are being refactored. The bugs they catch are trivial, silly, 'would have been caught anyway'. Outside of those activities, they rarely catch bugs. On the other hand, integration tests more consistently catch bugs and catch bugs you didn't foresee, have to investigate before understanding.

You don't remember the last time a unit test caught a bug, because on average it is much longer ago and if it was a test for a unit you wrote this morning, you usually blame it on 'work in progress' and think you would have caught that trivial bug anyway.

I think the nature of units tests make it easy to underappreciate them.
Like him or not, Elon Musk has an uncanny ability to figure things out. Of course he's wrong on some things, but for the most part, I wouldn't discount anything he says.
AGPL is perfectly clear: if you make source available under AGPL, you are in compliance. There's nothing to worry about. Plus, nobody ever sues you initially over (A)GPL compliance, they just ask you to come into compliance and only sue you if you refuse. Just release the source initially, and you're all set. Why is this hard?