skysight-inc/HackerNews huggingface dataset:
Unfortunately, I think people are interpreting this in the context of the reply (slavery), not your original point (advantages vs disadvantages of genders).
I remember it in Borland C++ 3.1. If I remember correctly, it was one of the samples using BGI.
If it's not on the homepage then it would not consider it using flash. The analysis was run on the homepages, not on all the pages in those websites. (And that would require a lot more work on my part and likely would not change the results all that much).

I believe overall flash usage on the web is now about 10%, but larger sites are generally much better at keeping their sites up-to-date and to follow trends.

Advertising is another good indicator. The typical trick nowadays is to check if flash is installed using some javascript or header inspection and only to serve it up if support has been detected.

Websites that categorically include flash are the ones that were detected.

That's a good point though, I should update the text to that effect.

edit: ok, updated the text to be much more precise about flash usage and the conditions of the crawl which will lead to under-representation of flash.
Perhaps a small proxy application that is fully vetted and tested code. This doesn't seem too dissimilar from the "I need a small suid root app to do $root_thing for an unprivileged user". As you said, unrestricted access is the problem. This just is typical "principle of least privilege" kind of stuff.

Totally doable, but it is unbelievable to me the lack of forethought in things like this.
Right, and this is why people say that the JVM is slow to start. It actually starts up pretty fast (a hello world program starts the JVM, reads the class file from a JAR archive, runs it and terminates in under 80ms), but it takes a while to achieve max performance.

This is hardly a problem for server apps, and a potentially serious issue for client code like JavaScript on a web page.

HotSpot has recently moved to a tiered-compilation scheme, where a fast compiler produces unoptimized code quickly, which continues to collect metrics for the profile-guided optimization, and the optimizing compiler kicks in later, once enough profiling information has been collected.
So I can make my Mama proud.

She and Dad were heavily into that I did some of the work on the Mac I gave them for Christmas back in the day.
When you're signing a binary blob, protecting the private key is actually pretty easy since it can be air-gapped/offline. Or heck you can buy appliances where they'll perform specific functions using the private key but won't expose it themselves without physical intervention.
In the case of a truly bad idea, it is the duty of the CTO/VP Eng/Team lead to give the employee the time to explore the idea/discuss it and realize why it's a bad idea. The employee should grow as a result of the experience, and become more valuable in the future.

On the off chance they don't learn, and the situation repeats itself, it may be prudent to refuse such requests.

That having been said, the worst situation is when the boss agrees that it needs to get done, but can't find where to sneak it into the schedule. It's effectively saying that you don't value the happiness of your employees and can't schedule/push hard enough.
The map is very hard to see; there is almost no contrast. The color of rivers and roads are almost identical. Maybe it looks different on your monitor?
Let There Be Light Bulbs: How Incandescents Became the Icons of Innovation
TIL that Philip K. Dick had a touch of the Apophenia.
See http://meyerweb.com/eric/comment/chech.html from 28 December 2002, titled: “Considered Harmful” Essays Considered Harmful .
It's a great idea. I built a whole reporting package that basically rendered to Excel and it was a real time-saver vs developers creating one-off Excel books and writing custom code to fill them in.

Rendering to Excel isn't the difficult part though (unless you're trying to do it equally well on all platforms I guess). Creating a new language/DSL and all of the other features you mentioned are the riskiest parts of this venture.

So, can you do it? If so, do it quickly and then sell it to Microsoft for a couple hundred million :)
maybe a random page of content would have been a better indicator
You can also define a separate externs file with a list of symbols that shouldn't get mangled; this is useful if eg. you're using a third-party library that you don't want to modify.
Interesting, can you point me to a news article or link? Shouldn't that have been rejected as an improperly signed file as (update+payload) should have a different signature than (update)? I'm want to know whether I'm misinterpreting something, misunderstanding something, or the signatures were misimplemented.
Amusing (and mostly incorrect) history of programming languages by James Iry
The examples given were just examples, I can see a lot more possibilities beyond the ones mentioned in the article but to be honest I had not thought about the ISP caches.
Show HN: Product Kitty, a Product Hunt Browser Built in React Native
This is an impossible question to answer correctly.

https://github.com/hybridgroup/cylon-sphero because you can use it to control robots?
I requested my data when I commented first on this thread and just got the notification that it was ready. So it was 21h for me. Still way too much, but it's less than three days...
That's an extremely rare vector for exploitation. I can think of one specific case where a vendor completely forgot to check the result of a signature check, but aside from that signature checking is well understood and rarely goes wrong.

But to be honest people are taking their specification and dooms-day-ism to stupid extremes. Soon we'll be talking about "it is only as secure as the CPU, what if you find a CPU bug and bypass all security?!"
I second this. Clearlooks-Phenix is great.
some relatively serious questions on the methodology:

- how did you define third party assets vs domain-managed assets? Is anything not hosted under example.com automatically third party? What about Twitter.com and t.co? I know this one is picky but would like a feel for the figures.

- how deep did you scrape the (million!) sites? If it's front page or similar Inwould not be surprised to see figures revised upwards significantly - once off the beaten track of even major sites the number of "let this one slide" decisions spikes a lot.

- how long did polling a million sites take?! What was the setup you used - very interested even if it has nothing to do with methodology :-)

Thank you - you have at least made me rethink my lack of blockers
When do robocars become cheaper than standard cars?
which is exactly the problem.
There should be push back against the idea it's inherently a crime to either R&D the operation of your own property, or modify it. There is a long standing tradition of car modification in the U.S. especially, I think it's unacceptable for this to be proscribed by making it a crime or even subject to civil action. Obviously any modification I make, is my liability, but that's a totally different thing that saying it's disallowed.
The Schilling paper is mostly a re-rendering of the original paper

Dynamo: A Transparent Dynamic Optimization System [1]

by Bala et al, which invented (or better reinvented and popularised) tracing JIT compilation. It might be worth reading the original. In addition, Haskell is not such a great target for JITing, as it's statically typed, leaving less scope for optimisation at run-time.

[1] https://www.cs.virginia.edu/kim/courses/cs771/papers/bala00d...
Educational benefits of deworming questioned by re-analysis of flagship study
It doesn't even make sense! The units don't match up. Kilowatts are a measure of power, energy over time, and an acre-foot is a measure of volume, not flow (volume over time).

It's like saying how many horsepower it takes to drive from SF to LA. Makes no sense.
... Thanks for that enlightening, well thought out data point. You really added to this discussion.

Man I wish I could downvote...
By that logic there's no security on the internet at all. Everything "shares a wire" after all.

Security is about degrees and nuances. These kind of black & white statements are unhelpful and unrealistic.
> Let me assure you that these considerations actually come from experience rather than speculation.

Good to know. The article did not make this clear.
Titles like these are so tedious and exhausting. You get the feeling that the Internet is full of nerds finding piddling little problems with everything and therefore everything that seems to be working is officially now to be known as utter crap.

This can be solved by writing a more detailed headline. How about instead of "Why I'm dumping Google Chrome", you write something like "Google won't let you download old copies of Chrome?"

Currently there's another example of this allthethings-arefucked title: "What’s Wrong with the Internet and How We Can Fix It: John Day Interview." I looked at that title and was like, "I thought it was working well enough. Relax, dude." These poorly-titled articles contribute to this rabid notion that everything has to change all the time, and holy poopballs you're behind the curve, and you're getting old and decrepit, and wow the author is so awesome and just found a new way to do everything. It's really unpleasant to read this stuff.
Web Performance Metrics You Should Know About
> They talk about FreeBSD in the original article and the guy tests that on other OS and say it's not a serious vuln?

Mr Hansteen is saying it is not a serious OpenSSH vuln, like the tech media is claiming it is.

> This is a serious vuln for FreeBSD. Period.

That's why the original disclosure and subsequent news articles clearly stated it was a FreeBSD and/or PAM vulnerability, and didn't run with headlines such as "OpenSSH keyboard-interactive authentication brute force vulnerability"[0] or "Bug in widely used OpenSSH opens servers to password cracking"[1].

[0] https://kingcope.wordpress.com/2015/07/16/openssh-keyboard-i...

[1] http://arstechnica.com/security/2015/07/bug-in-widely-used-o...
Built this really fun React Native application recently. It lets you:

+ View the latest featured products on Product Hunt (and goes back to previous days as you scroll down)

+ View the latest 50 featured collections as well as collections that are created by users

+ View similar products to the one you're currently viewing

+ View user profiles, including their list of upvoted products, submissions, collections, and any products they've been tagged as makers of.

Hoping to get write access to the API so I can allow users to comment and post through the application.

It's also live on the App Store: https://itunes.apple.com/us/app/product-kitty/id1018558174?l... (it may take a few minutes to actually show up):
I see your point. We were mostly focused on dealing with the permit normalization / mapping problems. We'll tweak the colors. Thanks for the feedback!
You're forgetting that there's much more in the cost of exercise than just the stock price. There's taxes as well.

And even just thinking about the stock price, $20,000 can be a lot of money to spend on something you can't sell.
It's an avoidable risk - there's no reason it has to be possible to remotely affect a vehicle like this from over the internet. It's also a risk that can grow exponentially once discovered in ways physical threats can't. How long after shellshock was announced did everyone start seeing exploits in their server logs? Not very long.

So maybe instead of using this to kill people, someone decides to cause small accidents for the insurance money. Or there's a way to use it to listen to people through the voice recognition software and people spy on their exes or employees with it. Or just load a trojan onto people's smartphones when they dock it into the onboard charger that gives them root access to the thing they use to check their bank statements, or who knows what? Don't think of it as just a car, rather think of it as an exploitable network with the added benefit of potential collision damage.
I would truly, honestly treat that equity as I would a portion of my compensation being paid with lottery tickets. Unless there's a liquid secondary market for it, it's not worth anything to me.
I wasn't offering a prescription with my comment, just observing that the evidence suggests the gender wage gap is a Real Thing. But:

Are we supposed to just unfairly give people the same salaries when one worked part time instead for 4 years?

Let's dig into that a bit.

Suppose Bob and Agatha are both working full-time at the same company as, for the sake of example, sales engineers, and they're both making $100K. Agatha goes on maternity leave, and afterward the company agrees to keep her on as a part-time sales engineer, working 25 hours a week at $62.5K.

If, after four years, she and Bob both apply for full-time senior sales positions, is it "unfair" for Agatha to be offered the same salary as Bob?
> We were subject to laws in several countries, the minimum of which had 40 shareholders trigger these problems.

They couldn't have more than 40 shareholders, and they quite clearly were affected by this.
Acre feet is how water is sold and talked about in agriculture.
It doesn't. But that's not what the parent comment was suggesting.

If you have anything compute-intensive enough to affect battery life in an Android app, you really ought to use the NDK, and Go will probably be officially supported: https://docs.google.com/document/d/1N3XyVkAP8nmWjASz8L_Ojjnj...

Or if you want Android/iOS portability, find a common API for SQLite and implement in C.
"It just is"? Seriously? You can't explain anything with "it just is", let alone a controversial subject.

I don't know what other kinds of vapid reasons the parent was referring to, but many are just as bad as "female". There's the obvious ones: racist, homophobic and transphobic justification for example, but also less common, also harmful vapid justifications. Dismissing someone's idea because theyre an ex-convict is a good example. Or on the basis of their age.

These are all quite bad, even if not completely equally so. I'd humor an argument that "female" is the worst of these simply because there are a lot more women than ex-convicts and members of a gender or sexuality minority, and therefore more people who could potentially be hurt.

But not "it just is".
With dependency resolution and node_modules folders dozens of levels deep, it's pretty difficult to verify untrusted code hasn't been injected somewhere.
If your threat model has someone stealing your private key and breaking/obtaining the password to it, none of the other measures are going to mean anything as they have root on your box. With root they can bypass the access restrictions, knocking, whatever else. 2FA with an external device would probably make more sense than any of them and be significantly less irritating.
Ads, sponsorships, in-app purchases, membership, suscription, pro features, sell the data, premium features, etc, etc, etc.
Posting on a throwaway because I like lurking but this topic hits close to home.

Recently I decided to stop drinking in solidarity with a family member who has been struggling with alcohol
dependency along with mental health issues.
Alcohol withdrawal is particularly brutal due to tremors which can result in death alongside a plethora of other issue.
It's been a very difficult time because he has refused to seek help and has lashed out against us.
I worry that he is going to end up isolating himself and end up on the streets.

If you or a family member has difficulty with drugs or alcohol remember that there are many ways to get help and there is more to life than the bottom of the bottle.
Wow. Do you have any more info on this?
VUPEN Founder Launches New Zero-Day Acquisition Firm Zerodium
Selfie App Front-Back Shutting Down
The JVM is not a tracing JIT compiler. Tracing is a very slow operation. Hence the warmup problem is substantially worse for tracing JITs.

I saw figures for warmup in tracing JITs that were so hillariously bad, that I thought they must be a typo.

People I know are currently writing a paper on this subject. I hope it will come out in the next 2 or 3 months. That should put our discussion, and the warmup performance of tracing JITs, on a firmer basis.
That doesn't sound like the same vulnerability at all. Cutting brake lines no longer results in someone's death [1], and they'd know at the time they first try to brake, when they'll probably be at low speed anyway.

The Chrysler exploit, by contrast, allows you to silently take control of the vehicle in ways that don't reveal your position until much later (if at all), due to the sound system not being firewalled from the brakes.

That seems fundamentally different from "hey, gangbangers might shoot at you while driving".

[1] http://www.quora.com/Is-cutting-someones-brake-line-prior-to...
> This article should be read as ranty research, not practical advice. It'd be fine to fix these issues, but not at the website developer level.

That's fine, it's only your users after all.

> No, you shouldn't. You should focus on stuff that matters to users, not existential internet security holes.

If you can fix a hole until that hole is plugged in a more permanent fashion then I think that you should.

> FTFY "A safe, but impractical and productivity-destroying aproach..."

Entirely practical and with minimal impact on your productivity. If you can find the time and expend the effort to build a product to begin with then you can certainly find the time and expend the effort to make a conscious decision about things like this.

It matters enough to me that it affects my choices with respect to which parties I deal with on the internet and I sure hope I'm not the only person that thinks like that.

And every time some user gets their day ruined by some formerly javascript widget hosting domain that got transfered to a new and malicious owner there is a bit more evidence to support that that approach is the right one.

From the end users point of view as long as it works the two solutions are identical and if you're serving up megabytes of content anyway what's the big deal about serving up some scripts directly as well?
If someone disagrees with the statement "programming is a fundamentally different career from everything else in terms of ability and knowledge required" then they almost certainly don't know how to write good software.
I absolutely agree. My first experience was with QuickBASIC in the late 90s. I don't remember how I got my hands on it, but it was remarkably easy to pick up for a 10 year old with no programming experience and no one else in the house to answer questions. It was clearly designed with a quick feedback loop and small barriers to entry in mind.
NASA Hosts ‘Quest for Quakes’ Data Challenge
Interestingly enough, when my car is moving I cannot reconfigure the car. Those functions are disabled. However, I fully expect if that if my car was hacked, they could easily by-pass that restriction.
It's not always that easy. People are not totally rational. Loss aversion is powerful. I've been in that situation. I'm actively avoiding putting myself in it again.
Users assume the sites are safe and not malicious or open to attack.

There are an enormous number of implicit contracts between us as developers and our users that are not written down but are still "stuff that matters to users".

Ask a bank auditor if they think security holes does not count as "stuff that matters". Then try selling your services to said banks. It matters
The Delta in-flight entertainment systems also (at least as of a couple years ago) seem to be Linux-based. I had one crash and reboot spontaneously while I was using it, and was greeted by a couple Tux logos and a verbose Linux 2.4 boot process when it came back up.
Go back 10 years, front end only wasn't really a thing. This is new and a lot of folks haven't adapted (and maybe they won't).

Someone in a non technical role once suggested to me that we should all be able to do each others role, and that is now entirely unfeasible. The front end has evolved so far away from the back end as to be ridiculous.

I think your problem is who your talking to and working with. Keep shopping around and sharpening your skills, you will find a place that respects what you do, what it takes, and the talent involved.
Twitter is foundational communications. The first time I saw Snapchat's ephemeral messaging I thought it was brilliant and a huge and important differentiator in messaging.

There's some sort of selfie-ish value in Frontback but otherwise looks fadish and tiring.
I think it's due to the heating issue on the boards themselves. HBM promises to make that issue a bit better since the memory chips are closer to the GPU which makes it easier to cool off than before. But there's a limit due to HBM growing vertically. So, I doubt we'll see massive memory chips on consumer graphics cards in the near future.
> All told, it takes about 3460 kilowatts per acre-foot to pump water from Northern California to San Diego;

Does the author mean 3,460 kilowatt-hours?

> Lambert showed me a series of pumps at the Carlsbad plant that collectively exert seven thousand horsepower of energy (eleven hundred pounds per square inch of pressure)

Holy hell, how am I supposed to reason about any of these numbers? The mix of units and ignorance of power/energy differences makes the numbers completely useless to the reader. Near the beginning of the article, the daily volumes are discussed in terms of millions of gallons, but later on, acre-feet is used.

Sorry if this comment is too ranty...
The article notes that:

> All information is permanently archived on GetScale’s servers, which saves workers from being held responsible for mix-ups that aren’t their fault.

This is presumably meant as a way to try and fix the issue referenced in the article's title and hook:

> He realized that many line workers have very few legal protections, and if something goes wrong while an order is being produced, they often end up absorbing their employer’s losses by taking wage cuts or deductions even if they aren’t at fault.

Is there any actual evidence that in legal regimes with inadequate worker protections, increasing transparency of the workers' labor efforts improves fairness or pay for the workers?
Chrome, Firefox, and Opera all support it, as do Google, Twitter, Akamai, Jetty, Apache, and several others:

https://github.com/http2/http2-spec/wiki/Implementations

https://en.wikipedia.org/wiki/HTTP/2

That's a big chunk of the Internet right there. IE 11 and Safari 9 both support it, so once their respective betas go public that's the rest of the client-side support. Nginx is supposed to support it by the end of the year; once that happens most sites will get it just by tweaking a config file:

https://www.nginx.com/blog/how-nginx-plans-to-support-http2/
Want a job? :)
And potentially the same plumbing for incoming water could be used to cool the reactor. In fact now that I think about it, all of the waste heat of the reactor could go toward evaporating the water.
RCSAndroid – Advanced Android Hacking Tool