skysight-inc/HackerNews huggingface dataset:
I would, yes - it's a form of scratching my own itch.

I don't know about you, but I find myself writing boilerplate code very often. Converting between timezones, reading config files, making HTTP requests (+error handling), UI idioms (click & disable), etc.

Often the code handling such things is spread over a bigger function, like open a file on line 5, loop over lines and read into array on lines 24, 25, 26, close file in finally {} clause.

What I want is a tool telling me "hey, you can replace these lines by function X in open-source package Y." Maybe I overestimate its universal usefulness though :)
> But Adrian Ludwig, the lead engineer for Android Security, told NPR the flaw ranks as "high" in their hierarchy of severity; and they've notified partners and already sent a fix to the smartphone makers who use Android.

It sounds like the fix can't be (or isn't being) made in the hangouts app.
Perhaps in USA is popular, in Spain and Italy it is not very popular because it is expensive and other messaging solutions are used, like Whatsapp
Cool. This is still unusual for a consumer microwave, at least for the current moment. But I'm glad to see some manufacturers including it. Hopefully my post will be antiquated in the near future!

And, as mentioned by others, you really won't see a difference on the higher power settings, because there really isn't much of a difference. 10 seconds of almost-high output or 9 seconds of high output... On lower power, you should notice much bigger differences though.
If I had 6 months and no obligations, I'd learn to draw and to storytell, and I'd make and publish (for free if I can afford it) a graphic novel adaptation of Asimov's Foundation.

Current item 1 on my "to do once we exit" list.

It's a brilliant set of books by one of the most brilliant authors ever, and IMHO has a philosophy and structure that is rarely found in contemporary books or graphic novels. It would be a challenge to bring that vision to the paper well.
nonviolent communication (cnvc.org)
I half agree with the article. Speed is definitely a good thing when you're behind. If you launch later than competitors and you go faster than them you can catch up. If someone else launches a feature that's popular you can copy it quickly. But if you're already ahead then speed only has one practical advantage - being in a leading position means you'll be the company taking on the cost and risk of testing new features, so being fast means you can correct quickly if they prove not to work. Depending on the market you're in it's often better to go slower and test things in smaller, less costly ways instead.
On the radio they mentioned that a phone's standard messaging app would be vulnerable the moment it downloaded the poisoned video file (prior to the user watching it).
Assigning a catch phrase to a certain activity doesn't make it any more or less of a good idea, but if you're buying "because it went down" you are probably just gambling.
this is the best case you could make for installing Gentoo. Dependency Hell is no longer an issue. :)
> Either the whole thing is interpreted or the memory access is trivially inlined.

In the context of a discussion about the extent of optimization which can be done, if it is inlined, then we're back to square one and do have to worry about optimization. Your argument is circular.
Don't they all still use Qualcomm comm chips?
Nope.

The real answer is, the NSA is all about communications -- which isn't just electronics: it includes a huge element of linguistics.

The Bible angle: when a new tribe or culture is contacted, the very first thing that happens is that Christian missionaries get all excited and do their best to go there to spread the gospel. To do this, they have to learn the language sufficiently well to translate the Bible. So you've got this one text (with a quantifiably-variant or de-facto invariant baseline) that gets translated into every language on the planet as fast as is humanly possible after that language is discovered. It's a Rosetta stone.

I forget the number that was given for how many different-language Bibles the NSA has in their library, but it was impressive -- something over 900 languages.
Commercial consumption of this idea is around verifying licensing. My employer runs a tool against our internal repositories looking for code it's aware of on the internet. When it flags a match, a human looks at our use of the publicly available code and verifies our compliance with the license that came with the code.

I, a software developer, wouldn't buy such a thing, but there's certainly enterprise/corporate demand for it.
This does not work, for a very simple reason. The same argument the article states can be construed for literally every single topic, from tech to AI to agricolture to fishing to engineering to medical science and so on. So either every single human being is taught the whole of human knowledge, or one should simply realize there are things one should not have an opinion about and avoid spreading misinformation, which is far simpler.
From the short description in the article we know that the bug is somewhere in the default video codec paths. (Triggerable by embedded and automatically processed video file.) Of course that doesn't tell much, since the potential attack surface is a big one.

I wouldn't rule out browser as attack vector but I do think the heavy sandboxing at least limits damage and scope. As the article points out, messaging apps are in a different class.

Will be interesting to see how this develops. And because the vulnerability is in the system libraries, any app that can deliver video content may be used as an attack vector.
That's not "spin", that's just fact.
I didn't realise there was rating going on at all at first - the number is quite subtle. I assumed "won't fly" was required to give me another excuse (I hadn't thought as far as what "hell yeah" would actually do in that case).
Then you didn't read the article; it's a video handling bug; the article notes a difference between Hangouts and other messaging apps in video handling which makss it worse with Hangouts, but the fundamental problem is with video handling, not the messaging app.
It is really hard to convert RMB, so that is probably not a big problem. The RMB's non-convertibility helps a bit in that regard.
In Korea they do this, and no one so much as blinks. Sick days also don't exist in that country. If you're not literally in the hospital, you're expected to show up for work.
So google doesn't like me after doing that search.

I suddenly started getting a captcha for searches right after using that search. o_O
Many of the plagiarism detection tools don't work on a semantic level. There are some, I haven't found an easy, it-just-works online solution.

Could you share links to the IP detection ML tools?

And to answer your question, please read my answer here [1].

[1] https://news.ycombinator.com/item?id=9954879
Not really (at least for the US -- I don't know about the UK). The unemployment rate is only low because so many people have given up on looking for work. The labor participation rate is at its lowest level since 1977. Here is a nice chart:

http://www.tradingeconomics.com/united-states/labor-force-pa...
The vulnerabilities are in Android's "stagefright" media internals. Patches are floating around, for example: http://review.cyanogenmod.org/#/c/103270/1
I would expect it to make a bigger difference at low power settings, so I don't think it's confirmation bias at all. 10 seconds of almost-high output compared to 9 seconds of high output won't see much difference. However, 10 seconds of low output vs 2 seconds of high will see a big difference. Same amount of energy, but delivered over a 5x longer time period.
Hosted at Bluehost.com. Like other hosts (charging only I see now "$3.95/month") they promise you "unlimited bandwidth". The TOS then defines "unlimited" in a way that let's them do things like this. Meanwhile the more honest webhost is at a disadvantage in trying to compete with this scheme.
Postcron.com – die günstige Buffer Alternative
Technically, if you are buying for short term gain without insider information, you are probably gambling (unless you see something others have missed, but does that count as outside information?). Otherwise, you want market growth over the long term, or are just hedging.
It's not an ISP of infinity.

You're forgetting mass-energy equivalence. <x> energy / <y> thrust is a specific impulse, once you work in the factor of c^2 (that being the minimum amount of mass you need to burn to get the energy to produce the thrust.)

In this case, for instance, they are saying they think it produced 20 uN with an input of 700w. That works out to an effective specific impulse of 2.5x10^9m/s as an upper limit (yes, this is tachyonic. One of the problems with this drive is that it throws conservation of energy and momentum out the window...), assuming we could convert mass to energy directly. (If you're using D-T fusion, it's a specific impulse of ~9.7x10^6m/s instead as an upper limit, assuming 339.72 TJ/kg. Other reactions are lower.)

If you're assuming solar panels or some other external power source, then the only real difference between this and a laser is that this produces a constant factor more thrust per energy input. Sure, it's reactionless - but, effectively, so is a neutrino source, for instance. All that means is that you don't need to be as careful as to which direction you burn in.
Sales, marketing, and JavaScript. In that order. Then you'll be unstoppable in anything you decide to do.
Hitch Test: new, high level Django integration testing framework
And, on most devices, there's no UI distinction between the two in use, MMS vs SMS is just a distinction the phone makes for messages by content.
Collinearity in multiple regression
"The GUNMAN project had a major impact on the intelligence community as a whole. It brought about a greater understanding of the thinking and operations in a totalitarian society. The community became more aware of the hostile electronic threat against the U.S. As <redacted> explained, "If any other agency such as CIA or the State Department had discovered the bug, this change would not have occurred because they would not have publicized the incident." NSA, however, briefed all levels of government to warn them of the danger. NSA was not out to assess blame; it took the problem-solving approach." (p. 17)
Quote: "A good plan violently executed now is better than a perfect plan next week.

General George Patton said that, and I definitely subscribe to it. Do you remember the last time you were in a meeting and someone said, “We’re going to make this decision before we leave the room”? How great did that feel? Didn’t you just want to hug that person?"

I, actually, wanted to severely beat that person for depriving me precious silent time alone to think about the decision.
It isn't an Hangouts app issue, that is just a one attack vector.

It is/was an issue in Stagefright.

Details of CVE-2015-1538, CVE-2015-1539, CVE-2015-3824, CVE-2015-3826, CVE-2015-3827, CVE-2015-3828, CVE-2015-3829 probably available soon?
how to help people --- you learn to do that and a lot of other stuff will fall in place.
I'm not aware of any large scale projects that were attempted using Agile. Are you? FWIW, I don't think Agile is the answer - there's a continuum between (and beyond) waterfall and agile, and it's not one-method-fits-all anyway.

For that matter, I can hardly think of large scale software projects that succeeded in the sense that they were on time, on budget, and satisfied the requirements a-posteriori, regardless of methodology.

Regardless, how many projects that people here are involved in are really large scale ?
I appreciate the skills the Center For Applied rationality instilled in me most every day.

>Ever made a mistake? Missed an opportunity? Of course; but what’s interesting is how cognitive scientists have found even highly educated and successful people to make predictable errors in judgement, and just knowing about these experiments often isn’t enough to prevent these mistakes. It actually takes practice to form new mental habits. At our workshops, you can learn about newly discovered failure patterns in human decision-making, and begin training to overcome them…

Think of it as martial arts for rationality. You know about things like the sunk cost fallacy, but they do workshops to make sure you recognize it when it's happening to you.

A great bunch of very skilled people. The personal advice helped me get over some hangups about procrastination.

I think it's a great foundation to help learn other skills, and asses what information will be valuable to you.
Hack Brief: Android text attack
They own a lot of homes in the US and Canada but they usually pay cash.
"However what many have been able to do, is work in technology for 15 - 20 years and get enough money to cover a comfortable existence, save for their kids college, and buy some property. "

If you're frugal, and invest wisely, you can do the same thing with a plain corporate job. And while it may not be as "cool," at least they don't ask you to work excruciatingly long hours like a startup (well, some do).
I both heard the story this morning and read the article, and the intent didn't sound to me (admittedly, and obviously from participation here, as someone in the tech industry) like it was open vs closed, but more Apple's ability to immediately address issues that arise like this are a result of their closed nature, but with Android's open policy, everyone from Google to HTC|Samsung|LG to Verizon|Sprint|AT&T get to touch the code, and because of all these modifications, it will be a while for a fix if one even comes. If anything, the lack of financial incentive to fix anything was more the culprit over openness. The worst part is none of it was opinion - that's all completely true. How many phones get maybe one update after being released to the wild?
How is that 'weasel wording'? That's an accurate statement of fact. The article never calls Android 'open' and doesn't blame the issue on the openness of the ecosystem.

The issue is described fairly accurately.

It would however be nice if the article brought up the point that the issue could be mitigated if users were allowed to actually control the software that runs on their phone (without hacking around restrictions). Instead most users are reliant on the device manufacturing seeing the financial incentive to provide updates.
What biased tripe
DraftKings Raises $300M, Promises to Spend Much of It with Fox Sports
Q3 financials showed iPhone revenue up 60% from the same 9 month period last year, with 80% overall revenue growth in China, 17% in EU, 19% in US. Chinese market is contributing $46bn in revenue compared to $72bn in the US, $40bn in Europe, and $11bn in Japan.
I love it when people call this a correction, as if unsophisticated Chinese investors are unlike the rest of humanity and will behave perfectly rational when they see all the value the gained disappear in a couple of months.

Here's what will actually happen in the coming months, China will keep on intervening in the stock market causing it to stop falling (because selling will be impossible). Investors will see their money become valueless because it's held up in worthless Chinese stocks killing whatever trust they had in the Chinese government. Then China will reach a period of 10 to 30 years where its market will not grow (because of lack of trust in the Chinese government).

If Chinese investors can get hyped enough to drive up valuations to 3000 p/e then they can also have a market panic.
Perhaps I'm just begging to be flamed, but I've noticed this quite a bit with TDD. It's easy to write a test case, jiggle around the code until it works, and then call it "ready".

In an ideal world, the jiggling around would be followed by a review of the relevant codebase and a good refactoring, but this step is pretty universally missed in my experience. Additionally, the thinking should be occurring in the "build the tests" phase, but it's not. Or rather, only the "happy path" tests are built; the corner cases and error cases are missed or outright skipped.

I noticed this in myself first, and slowing down has definitely helped. As has spelling out the test cases before touching any code.
Referenced CVE-2015-1538, CVE-2015-1539, CVE-2015-3824, CVE-2015-3826, CVE-2015-3827, CVE-2015-3828, CVE-2015-3829 issues seem to still be in reserved status.
I disabled hangouts on a device I couldn't build from source, then got a constant alert it was trying to start again (Hangouts has unexpectedly stopped notice) so blacklisted it in startup scripts. Google gives you no option to remove it.
Sounds like a good idea...I fear though it may be technically impossible.

Say you write/fork/create a browser that can do this, in order to really work, you have to disable (by default) all ads.

To do this, technically, that means you have to break all third party site interaction. No third party scripts, no jquery includes, etc. etc.

I could see it maybe as a value-added service which competes with traditional ad-based marketing, i.e. aimed at folks who have very strict anti-ad systems put into place. Only issue being is those same folks may also not wish to use said browser...

So I don't think this is possible, even if its a nice idea. You'd basically have to rebuild the web to do this. The only way it could flourish would be as an independent network of its own.
This is definitely a huge problem, but I only see it being a doomsday scenario if you're using the default SMS app that ships with your phone (and hence cannot be updated with a patch pushed by your OEM). Assuming you're using Hangouts or Messenger[0] (which is sorta like Hangouts without Gmail), however, as your default SMS app, you should be fine as soon as they patch it. And both of those apps are freely available to download, meaning you could always grab them once they're patched and start using them as your default SMS app if you're worried about it.

[0] https://play.google.com/store/apps/details?id=com.google.and...
MMS as in telecom operator carried multimedia messages?

I thought phones didn't even support this anymore. I've never seen anybody using it, and I wouldn't know how to send one.

All the multimedia messages I see people using are transmitted through the Internet.
Ask HN: Polymer or React?
I like the entire material design thing behind polymer. I was thinking of using it as a replacement for Bootstrap. But then it comes with all these other things that basically make it a competitor to React. If the primary purpose is to build a cards style interface, which is a better choice as of today?
A simplified variant of Tetris in fewer than 140 bytes of JavaScript
I always did this, but maybe I’m unusual? I started with SQL by having a real project to do and by reading the PostgreSQL manual – I made extensive use of keys, triggers, functions, etc. Later I took some university classes in database design, which was interesting as the knowledge about normal forms, etc. complemented my existing experience.

I guess that if you instead started by using something like MySQL or SQLite then you would have a wholly different view of what an SQL database is for, and would have a hard time viewing SQL as something other than a data container with optional sorting.
That's a good question. Presumably if your phone doesn't have network access for MMS it can't download the message in the first place?
Marketing yourself.
http://talsraviv.com/2012/07/26/being-a-developer-makes-you-...
Multi Factor authentication for hackerNews
I'm working in a MFA company that secures websites & applications with MFA tech we created.
Not trying to sell us, i won't mention our name,
But we would like to know if people find it important?
Also would any developers or business owners / bloggers be interested in using our API & Plugins?
We also created 'Reverse login' feature, that can let you login a site without typing username and password.
It is relevant: Apple's system is closed against meddling by lazy middlevendors as well as against the likes of us. If Apple decides that you should upgrade (or not) there's little Deutsche Telekom or Verizon or any other middlevendor can do about it.

That it's closed against us is not nice at all, but being closed against Deutsche Telekom and Verizon and such is a feature, not a bug.
It didn't add much perceivable value to the artist's own page anyway, other than not being a tumblr site. http://1041uuu.tumblr.com/
The price drop is a price drop. I don't think we can add too much useful commentary to it.

The politics of it, well that is interesting. The Chinese government is acting a little panicky. Suspending trading, banning "malicious" selling, state supported margin loans.

It makes me think that they may have taken on the pundits' belief that the chinese public will support the CPC regime only as long as rapid economic growth is part of the package, that any economic troubles will result in regime change.

IMO, that's the storyline to watch.
Performance Testing Results of Adaptive Media Streaming Over HTTP/2
>you can't even count on tcsh or env being installed at the same path

This is what tools like Autoconf and pkg-config take care of. Lots of people use them to discover executables and libraries and generate files with the right machine-specific variables in them. You should never assume that binaries are in /usr/bin or that libraries are in /usr/lib. A lot of packaging issues are caused by such assumptions.

If you use the right tools, you don't have to bundle your dependencies. Bundling introduces a serious maintenance burden onto the developers and the packagers. It's easy to avoid bundling for C libraries and things, but with the prevalence of language-specific package managers, it's become a harder problem because everyone just assumes that you will fetch dependencies through it and never use the system package manager. It's a sad state.
FossHub, from a technological POV is no way different than Dropbox or any other service. FossHub relies on multiple sources to store the content and distribute this via multiple, separated locations. As for the most sharing services, I share your opinion and would like to assure you that FossHub is different. Disclosure: I am a member of FossHub team.
10+ PHOTOS DESCRIBES THINGS THAT ESCALATED TOO QUICKLY
Ask HN: UI/UX Feedback on Our Localization Solution Please?
Better documentation link which shows how to set it all up: http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/...
Facebook to scale up free mobile Internet service to boost usage
Very beautiful pieces of art.
*Hacking a digital picture frame to make it daily cycling through them is now #9 on your todowhenyouhaveafewhourslist
Try to avoid huge upgrades but update regularly. Create an automated process that checks at least daily if there are updates and integrate them as fast as possible. Keeping your frameworks up-to-date is important security wise.

If you use maven take a look at http://www.mojohaus.org/versions-maven-plugin . This can be integrated into a maven build and it checks if there are any new versions to your dependencies.
And then your compiler will optimize it to this:

int token_length = strlen(token);

// Just get this out of the way now; no need to dawdle
// (because the length of a token is generally known)
if (token_length != strlen(input)) {
return false;
}

// No need to worry about mismatched buffer lengths at this point
for(int i=0; i<token_length; i++) {
if (token[i] != input[i]) {
return false;
}
}
return true;

And all of a sudden the timing attack is back.

You cannot write a constant-time function in portable C / C++, and trying to do so is a fool's game.
Get free and discounted Ebooks of your print or paper books
Startup rival upstages Uber with 10-minute champagne delivery service
The commotion is about people who have died or been injured in Jeep fires.

I don't know why the Volve 240 doesn't suffer from this (I assume it doesn't). Maybe there's more car behind the axle.