skysight-inc/HackerNews huggingface dataset:
It's sad to see them (Varoufakis/Tsipras) being crucified for this. Ironically, it was the Eurozone "leadership" that used threat of Grexit in negotiations, by not accepting any compromise. It only shows they have the "punish someone" mentality, at the cost of Eurozone's future.

I guess that's politics, damned if you do, damned if you don't. Couple days ago, Tsipras was criticized for not having plan B.
not having your voice stored on Google's servers is one of the reasons people are still keen on properly open phones.
Performing HTTP Requests, Parsing HTML, and Traversing the DOM in Common Lisp
Here's my caution to this. If low level processes can do "ps aux", and they see something like:

DB_USER=scott DB_PASSWORD=b3withm3pl3aze /usr/bin/python webapp.py

That could be troublesome if an attacker figured out a way to run remote commands on your server even as an unprivileged user.
> Writing that binding would cost a php-c dev 20 minutes.

Most PHP devs are not C devs.
In Australia it's a little different as they don't do a cheek swab. You register via a Red Cross blood service donor centre. It involves taking a small sample of blood - if you're donating blood at the same time then they just take it at the start of the donation (no additional needle required).

Good luck. I really hope a match is found for you.
Why was it a pain?
Recent resurgence of the "national pride" thing. The forced reinterpretation of the Constitution. Unreasonable hatred towards neighboring countries (China and Korea in particular). And worst of all, we aren't taught anything about these Japanese atrocities at school. Japan is still enjoying willful ignorance.
> Ardunino Uno (ATmega CPU): 2KB RAM, 32KB ROM - Too small.

To be fair, that system really doesn't run anything dynamic well.

However, your point stands. Requiring 64K of RAM puts this above most ARM Cortex M0 chips.

Picobit (https://github.com/stamourv/picobit) sits comfortably in 16K ROM/4K RAM. There's no good reason why Javascript vouldn't do the same.
Frankly: this EAL7 stuff has basically no applicability to the real world. People get EAL6-EAL7-EAL6+ certification for things where they're (a) willing to spend 2x the implementation dollars just for the privilege of selling a product (or part) to a tiny subset of all GSA buyers and (b) things that are actually straightforward to specify fully.

Look at the list of EAL6+ products. They're all things like smartcard chips: things with very limited interactions and very well-defined functionality. Real-world software simply isn't like that. Nobody is going to EAL6+ a web browser, or a PDF reader, or even a desktop or server OS kernel (the fact that the best known example of a formally verified OS kernel is L4 should tell you something).

You bring Common Criteria certification up on a lot of different threads about security. The industry has literally nothing to learn about security from Common Criteria.

Regardless of what you may think about that sentiment: this has very little at all to do with the market for zero-day vulnerabilities.
I was a PFY working for a dot-com shop in the mid-'90s. I (in large part) invented an internal, web-based system that we used to track employee time against external (billable) and internal (non-billable) projects and tasks. Our salespeople would use the system as a common directory of customer contacts, share notes on business development, and generate estimates. Our accounting department would use the system to generate invoices with different payment terms and forecast receivables.

I left the place right before Y2K, a flaming wreck of burnout, dead set on going to college for a CS degree. My friends and coworkers at the time were emphatic that I should take the system I had designed, reimplement it, and sell it. Of course, this was way before cloud and SaaS and all that stuff. I thought it was the stupidest idea I'd ever heard; I couldn't imagine any other company needing and using the same (or a similar) system. And regardless, I was so burned out from it that I couldn't bear the thought of turning around and doing it all again. What can I say... I was young. :-)

Niku was founded in '97, which CA renamed Clarity in '05 after purchasing the company for $350M. Salesforce.com launched in late '99 and currently has a market cap of about $50B. If I were a little smarter (or more hardworking), or if I had met a few different people along the way... who knows? Or maybe I wasn't so unique in creating something like this, and the Niku, Salesforce.com, and others were the ones who simply saw the opportunity for what it was.
It does work now, thanks.

But it's very slow to respond to clicks. Please consider just putting in some img tags and linking in images…
Don't forget Picobit which is Scheme:
https://github.com/stamourv/picobit
> then either you're an independent freelancer, or else are working for the absolute tiniest of unprofitable companies

No it just means your Startup has <$1M Revenue - there are a number of early Startups that comfortably fit within that threshold.
It's not under public_html. It's under /srv/www/domain.com. It is one level higher.
It's not that they had a Plan B, but what that plan was. Their Plan B was essentially a coup, instrumented through the financial system.
Bad analogy. It's like saying "let's see if the new hull design works by deliberately running it into things in a test laboratory setting". Because, y'know, if you deploy an application to production using a particular network configuration (that is, using an ELB) without testing it in a development/staging environment first, you're doing a poor job.

This disconnect behavior is just a property of the system. Either you design your application to handle it, or you use a different system. (Not that you can get away with not handling disconnects even without ELBs.)
I've thought about this often and the only solution I can come up with is to disallow myself to think quickly when solving problems, even when I believe that I should reliably be able to do so[0].

I've noticed that when I take the time to think slowly through problems, although the initial activation energy is higher, that I end up saving time in the long run. Also, I tend to end up with a higher percentage of correct answers. This trend tends to increase with the complexity of the problem.

Yes, you probably lose some time on the easy problems, but I look at it as a method of gaining net time over days, weeks, etc.

This, unfortunately, is tough to stick with. It's tempting to skip the easy steps along the way (and let our System 1 do all the work, leaving System 2 to collect dust).

[0] - This is still a working hypothesis that I will undoubtedly go back and forth on for the years to come.
This is the asymmetric nature of security in general.

You only need to make a single mistake and you are hosed. Your attacker can fail an arbitrary number of times and only needs to succeed once.

If you are 99.9% likely to make the right call on anything that could have a security impact then you only need to make 1000 decisions before you probably screwed one up and have a hole.

Some would say this means true security is impossible.
For me it's based on interest and pleasure.

If a topic is interesting, I find it's a pleasure to read.

That same book may not be interesting to me a month down the road. A case is my amazon wishlist. Books I wished to read may not get the same priority to read later on.

A lot of times, I'll buy the books on impulse and start reading them asap so that I stay interested.

Reading should be a joy. If you approach it as a "knowledge gathering exercise", you will soon realize how much time there is to read vs how much there is left to read.

If you approach reading as a pleasurable activity, I find the rest takes care of itself.

I have bookmarks of long articles I wish to read but never get around to it. As Leo from ZenHabits.com says, it's okay. Let it go.
Read what you can in time you have to read.
Read with purpose.
That was my first thought as well. It's a bit preposterous that a) there's an "unbreak this software" option at all, and b) you have to pay for the privilege to enable it.
Understanding Employee Equity
IIRC, I believe the Tessel guys are abandoning the transpiler approach in favor of slightly more powerful hardware for the next generation that can just run node directly... We're really at a point where for the types of projects people want to run for under $100 of hardware, it's fast enough to do a lot more.

Power is a bit of a concern, and it all depends on the environment... being able to get every web monkey coding in more environments is a big win for enthusiasts and commercial applications for limited scope projects... Hell, without a screen or antenna powered on all the time, you can get a lot of processing done on even a smart phone from two generations ago.
I would expect that to be the way the Nginx Plus implementation works, but I have never had a chance to try it out.
Jurassic World: une suite pour le film aux dinosaures en 2018
I have been closely involved in a few discussions related to an offer to someone to become an early employee of the company.

Despite this article offers some initial view of the value of stock options, and their potential increase in value over time, I still can't find a web page that clearly explains every single trick of the game.

Just talk about restricted stocks, NSOs, ISOs, RSUs, and I guess most people would give up trying to understand it properly.
Alpha Release of 2ndQuadrant Unified Data Analytics (2UDA) – Axle Project
Neat! I want to get started on some Lua scripting as well, probably first to just get a bunch of metrics out of Nginx via StatsD. There's access to a whole bunch of numbers via Lua that you otherwise can't get out from the stub_status page.
Until recently Steam handled password resets through the client. The new web-based reset interface was introduced less than a month ago: http://steamcommunity.com/groups/SteamClientBeta#announcemen...

I'd assume that this bug was added then.
Josh Menke presents Blizzard's matchmaking and ranking system
I'm not gp but the tl;dr is: Japanese government has been pushing for a stronger military.

https://en.wikipedia.org/wiki/Article_9_of_the_Japanese_Cons...

Article 9 in Japan's Constitution, added after WWII, essentially forbids Japan to maintain armed forces for the purpose of waging war.

In practice Japan does some armed forces, called Self-Defence Forces, but they're for self-defence only. For example, they cannot join US forces for combat in Iraq, Afghanistan, etc, as other US allies do.

Recently, the Japanese government has been pushing for a change in the laws (or in the interpretation thereof) so that Japan can help its allies under the guise of "collective self-defense".

http://www.bbc.com/news/world-asia-33532557
> Can you elaborate on why it shouldn't be exposed?

Because for a non-trivial number of websites their codebase is their IP and product and not something they want to be public.

I'm all for open sourcing as much as possible, but Google doesn't publish their search algorithms for a reason.
Lua has a significant strike against it in being 1-based when everything embedded you'd want to put Lua on is 0-based.

In addition, the point of having Javascript is so that I can get my junior software folks (proxy for any inexperienced programmer) to write things for my embedded hardware instead of having to haul out my senior staff engineers who have 20 years of experience writing C for embedded devices.

Look at Arduino vs. Raspberry Pi/BeagleBone. Arduino has way more developers because it was orders of magnitude easier to program. Ecosystem is important.
Here's FT's (much better) reporting:

http://www.ft.com/intl/cms/s/0/2a0a1d94-3201-11e5-8873-775ba...

(The headline is "Syriza’s covert plot during crisis talks to return to drachma" if you want to Google it because of the registration wall).
While your comment doesn't add much to this discussion, I won't turn down a chance to educate.

Conventional microwave ovens only have two states: on and off. (I won't rule out the possibility of some exotic build having multiple powers, but the ones you interact with on a normal basis don't.) So, power levels cannot change the output level of the magnetron. Instead, the power levels control what percentage of time the magnetron is on. A power level of 50% means the magnetron is on for roughly 50% of the indicated time. These off periods will typically result in more even heating at the cost of time. The off periods give the heat a chance to conduct through the food and balance, reducing the lava-and-ice problems seen when heating frozen things in microwaves.

HIGH just means 100% power level.
No, you can't. You can instead create your own EC2 server, give it a static IP (well, "Elastic IP") and then hope your own server doesn't go down. This is the reason why I prefer to use an ELB since I never seen stability issues with it.
Steam on Windows has some odd behaviour too [1].

Warning:
The uninstallation process deletes the folder Steam was
installed to to ensure it is fully uninstalled. If you accidentally
installed Steam to a folder containing other data, for example
C:\Program Files\ instead of C:\Program Files\Steam\, STOP!

[1] https://support.steampowered.com/kb_article.php?ref=9609-OBM...
The comments here are amazing!
Actually, the repo isn't intended to store data whatsoever. It's for publishing tools (scripts mostly) anybody can use to peek into their own data (provided by uBiome).
Ah ok that makes sense, I knew I was probably missing some context :)
Nice article. Common Lisp shows its age a little, but when I see niceties like setf multiple return values I smile :-)
Can anyone explain electromagnetic momentum? I thought that em waves (photons) are massless. How can they have momentum (mass * velocity)?
Help save Paul and offer hope
I just wish we'd learn to appreciate this in the software/startup world and stop expecting people to come up with code/answers as quickly as possible. This is exactly why whiteboard coding is so bad of an interview metric.
We are getting close and the donations have given hope to an otherwise bleak outlook on life for him and his wife. If not donating, please at least help spread the word and maybe help them understand the treatments for Chordoma.
This is just insane how crazy this is easy to exploit. What did the developers think?? Also for how long was this exploitable? If it was a long time, this could show that we tend to over estimate the security of our websites... (a huge amount of people took a long time to find a super easy bug)
Crystal radio
What are some examples of ways you've seen people screw them up?
This is why the bigger you are, the more important it is to log almost everything that you can... It sucks from one side, because it is a security risk to log potentially sensitive information, on the other hand it's critical to be able to diagnose problems in the wild.

In this case, if requests for password resets are logging the codes sent (even if the error is present), they would be able to determine which accounts were affected, and return them to the appropriate registered email address (if they were changed).

On the one hand, the storage and compute costs for these kinds of things suck.. but this is exactly what big table solutions are for, be they C*, ElasticSearch, Google, Azure or AWS table storage solutions. If you have more than 10K users on your system, and logging everything possible isn't routine, it should be.

Access to read that log data is another issue entirely.
A comment mentions this deep below, but I think this deserves a bit more attention:

If you're using a modern framework with url routing, you don't need to worry about hiding .git or .hg in your webserver config file.
I wish there was a really good source for analysis on the Greek situation that ignored value judgements of what "should" happen.

To me it appears that Varoufakis is the Bobby Fischer of economics at the moment[1]. Of course he had a plan to keep the Greek economy (somewhat) alive if Grexit occurred. It would astonish me if some details of the plan hadn't been leaked to the EU - the Greeks would want them to know about it.

Varoufakis's resignation/sacking was beautifully timed to setup the idea that the Greeks would make some concessions, but couldn't be pushed much further.

And the purpose of this latest thing isn't to protect Varoufakis against treason charges, it it to drive a bigger wedge between Germany and France before August 20.

(As an aside, Varoufakis used to be Valve's staff economist, and he's a published game theorist. He's pretty good a playing slight differences in motivations against each other)

[1] http://genius.com/3889915
The Chinese test used kilowatts rather than watts of power:

http://www.you-tech.it/index.php/content/download/12369/1124...
So they "build up" momentum out of nowhere? I think that just moves the breaking of conservation of momentum to a different place.

I'm glad they're testing this until it's proven one way or the other but if it somehow works I doubt that'll be the explanation.
Glad I don't work at your shop then. Environment variables are a terrible way to give your app secure information. There's well over a dozen reasons why you shouldn't do this in your apps, but one super obvious one is there's way to many frameworks that expose environment variables in their debug output if not properly configured. Think you'll never misconfigure a server? Guess again, pretty much every major site (Google, FB, Twitter, Yahoo, EBay, Microsoft, etc) have all done it at some point.
Fair enough, although I think you are trying to have your cake and eat it too. And as an engineer I share your desire to have people make precise statements. But they don't.

When I tell you that the lottery ticket I'm giving you is a winner, you probably understand that it is only a winner if the numbers are drawn at the correct time. You might ask, has the draw already occurred? (knowing that to be the critical feature) and I would either say "Yes" and you would know that I was literally accurate in my statement, and if I said "No" you would know that I was probabilistically accurate in my statement. You would then act in your own self interest based on your understanding.

So if I'm a founder and tell you that the company I'm trying to hire you to come work for is going to be a huge success. You might ask "What are your current success metrics?" or "How much revenue do you have?" And based on those answers you could tell if I were speaking literally or probabilistically.

The "interesting" (from the philosophy point of view) is the statement "This lottery ticket is a loser" is just as much as accurate as "This lottery ticket is a winner" because the operation is binary.

For every startup (or company) I've ever been in, or recruited people to come work for, I've been very clear about what is the upside and what is the downside. And generally people understand that. And I have heard people (and people have pitched me) with outrageous "sure bet" sort of things. Which I have politely, and respectfully, picked apart at the places where I have concerns. The most recent was last week when I listened to a pitch for a new product idea to connect people and jobs. I idea is really clever, if you have a critical mass of people who are looking for jobs and people with jobs participating. But there is a huge gap between the world of today, and the world where all those people are participating. If that person wanted me to believe that there was any chance it was going to be a huge success, I would have to believe they could get a critical number of people on board. They don't yet have a way to do that, so I don't yet believe they will be successful. They are completely honest and forthright about the potential success, once they have critical mass, so I don't consider them to be lying to me when they say it will be a huge success. I just know that they don't yet know how they are going to get there.

The original article was a sort of 'wake up sheeple' sort of call to action but I felt that was completely unwarranted. Sure there are some new folks who, in their first job, might feel like the possibility to suddenly be a billionaire is just around the corner. Just at one point they may have believed that all college courses are trivial. But experience teaches us to think, and when we think about startups we have to think critically about the likelyhood of various scenarios coming true or not.
HipChat Secret Menu
Except to complete the analogy, add 5+ years of great depression with no end in sight (huge foreign debt, GDP in the dumps, 25% unemployment, etc.), the previous political leadership completely discredited after going back on their campaign promises and driving the country into the ground, and undemocratic foreign institutions dictating policy demanding we keep the country in permanent misery.

In such circumstances, I can well imagine a radical politician getting elected and taking drastic measures.

FDR winning election and taking the country off the gold standard is a not incomparable situation from American history.
It's not "a" bank, it was the (government controlled) Bank of Greece. Varoufakis - as finance minster - had responsibility for that, which arguably makes what he ordered not actually illegal (because the records would have been transferred between two areas under his control within the government).
Why has South Korea been stuck with ActiveX?
I think the most interesting part was this:

The payments would be 'IOUs' based on an experiment by California after the Lehman crisis.

Indicating that precedents set in the US are being used for entire economies - pretty interesting.
And that's a great case for actually allowing copyrights to expire at some point.
Redexes are elided for 2 reasons:

1. Redundant calculation: the result of the redex isn't used. Get rid of it.

2. The same redex occurs elsewhere. Reuse the result of that instead. Stay DRY.

Oleg has no problems with 1. Oleg has a beef with 2 because in HPC, the time-space tradeoff runs counter to ordinary intuition.
> But I read it as them just lamenting that nobody even seems to be trying.

No, I'm pretty sure it's an actual thing that they actually want Apple and Google to do. Like for real.
Disclaimer: I currently make my living thanks to valve software

Hah, maybe if you're lucky enough to actually hit a human. Valve has ludicrously terrible support. There have been tons of reports of 1-2 week wait times after submitting a ticket, only to receive an automated response with nothing to do with the actual ticket (even experienced this myself a few times, not fun).

People are quick to praise valve but I don't think it's truly deserved anymore. Sadly the days of them caring about their products and communities are long gone..
>the recent but on Steam Linux that erased your hard drive...

Link to said bug: https://github.com/ValveSoftware/steam-for-linux/issues/3671