someone13

From someone who just joined - if you're looking for real discussion, don't bother. It's mostly insults and memes.

Part of the reason is also that Mike Pall is actually a hyper-advanced cyborg from the future.

In case you're not sure what I'm talking about, read through the LuaJIT source code at some point. It's a thing of beauty - he's handcrafted assembly to make everything run as fast as possible, on all of x86, x64, PowerPC and now ARM.

I would warn everyone that reads this to be very careful. When a domain is stolen, it's usually not used for "legit" purposes. Be very careful when visiting this site - use a patched browser, Java + Flash + Acrobat, etc., in case the new "owners" decide to stick an exploit kit here.

Since the page seems to be down/loading slowly for me, here's the changelog:

    General
    
    - i386-softmmu is no longer named qemu but instead referred to as qemu-system-i386 for better consistency with other targets. A new tool is likely to be introduced that uses the qemu name so distributions are advised to not undo this change.
    - QEMU now uses a separate thread for VCPU execution. This merges the biggest difference between the qemu-kvm tree and upstream QEMU.
    - A new memory dispatch API has been added internally. A new monitor command "info mtree" can show the hierarchy of memory regions in the guest.
    - QEMU now has a build dependency on glib and makes extensive use of glib.
    - QEMU now can run on more hosts. Hosts without a native code generator can use the TCG interpreter (TCI). See Features/TCI for more information.
    
    Block devices (disks)
    
    - QEMU now supports I/O latency accounting in the monitor command "info blockstats".
    - Errors are now tracked per device and are shown by the monitor command "info block".
    - All image formats now support asynchronous operation. IDE and SCSI emulation will use this feature, while other devices (notably floppy and SD) will not.
    
    IDE/ATAPI
    
    - A large number of bugs were fixed regarding CD media change and tray locking.
    
    SCSI
    
    - Memory management errors could crash QEMU when scsi-disk encountered I/O errors. Many instances of this problem were fixed.
    - The accuracy of error handling for SCSI emulation has been greatly improved.
    - SCSI devices can now be addressed by channel, target (id) and LUN. Not all emulated HBAs will support this feature (in particular, the LSI controller will not).
    - Block device pass through is now supported through a new scsi-block device. The scsi-block device works with block devices (like /dev/sda or /dev/sr0) rather than /dev/sgN devices, and is more efficient because it does not consume arbitrary amounts of memory when the guest does large data transfers.
    - SCSI CD-ROMs now report media changed events.
    - SCSI CD-ROMs now support DVD images.
    - Bugfixes for IDE media change also apply to SCSI.
    - SCSI devices now report a unit attention condition when the system is started or reset. This may cause problems with old firmware versions.
    
    VDI
    
    - Now supports discarded blocks in dynamically-sized images.
    
    User-mode networking (SLIRP)
    
    - SLIRP can process ARP replies and gratuitous ARP requests from the guest.
    
    ARM
    
    - QEMU now supports the new Cortex-A15 instructions in linux-user mode (via "-cpu any"): VFPv4 fused multiply-accumulate (VFMA, VFMS, VFNMA, VFNMS) and also integer division (UDIV, SDIV).
    - The vexpress-a9, versatileab, versatilepb and realview-* boards now have audio support.
    - QEMU is known not to work on ARM hosts in this release. (ARM target emulation is fine.)
    
    pSeries
    
    - sPAPR VIO devices can now be created with -device.
    
    Xtensa
    
    - QEMU now supports DC232b and FSF xtensa CPU cores.
    - QEMU now supports sim (similar to Tensilica ISS) and LX60/LX110/LX200 machines.
    
    Migration
    
    - QEMU now supports live migration using image files like QCOW2 on shared storage

Well, in the interest of keeping the signal/noise ratio high, here's my view on things.

When someone uses a mobile phone, they generally have the assumption that, unless they consent to it, third parties do not have access to their data (the government being a different story I won't go into). When I use GMail, I consent to Google reading my email via automated algorithms, and targeting ads at me through that. If I have anything important, I use email that I host myself or, if it's really top-secret, an anonymous throwaway account through Tor.

However, from what this video demonstrates, CarrierIQ is violating the basic principle of this by capturing and potentially logging your personal data without your knowledge or consent. Furthermore, it's violating the assumption that most people have that their passwords and such are not captured by applications other than the ones that they are entered into.

Now, we don't know for sure whether all this information is sent off to their servers and logged or not. However, in my personal opinion, the fact that this information is CAPTURED AT ALL is a serious problem, when combined with the fact that you are not informed of this!

COMPLETELY unrelated, but I do wonder - is this the most upmodded submission here on HN? I know reddit has the /top/ modifier you can add to links (e.g. http://www.reddit.com/r/askscience/top/), but I was unable to find anything similar here.

Oh, of course - I own one myself! But it's rather hard on the eyes, so I keep the Readability bookmarklet around :-)

Some people may not enjoy the green-on-black text, so this might be of use:

http://www.readability.com/articles/dirqhjff

Unlike a lot of other NoSQL solutions, there's remarkably few "real-world" stories about Riak, so I love hearing about it when I can. It's also interesting to hear about some of the "real-world" problems that they've encountered. I've been looking at Riak for a while now for a project of mine, so these kinds of articles are very welcome!

Is there any other language that implements this? I'll freely admit that I'm no expert on Lisp, so I've tried digging through the code, and I sorta get what the concept is, but I don't really understand it. Any other languages have the same idea?

I think you unfairly characterize a lot of Windows AV. Yeah, they're not perfect - if you're browsing dodgy sites, downloading tons of cracks, and clicking on every link, there's no application on Earth that can stop you from getting infected.

However, an AV is pretty good at detecting stuff that you may get exposed to otherwise - exploits can pwn your Windows computer without you even knowing, and sometimes even run off legit ad networks. NoScript / AdBlock, running Google Chrome, and practicing safe browsing can help, but an AV is a good additional layer.

I guess my point is - an AV is NOT a panacea, but it should be used as an additional layer of defence.

I can still tell when my printer has been left on, though I haven't been a child for a long time. It's actually quite an irritating sound, hence why I leave my printer off most of the time :-P

Really? Maybe I'm just an optimist, but it sounded more like "Every product has its bugs, and there's no point in pointing fingers here when it's not the point of this blog post."

I'm sure that Riak has bugs too - there are very few software products that DON'T (the provably-correct C compiler CompCert[1] being one that shouldn't). But it seemed to me that the post's author was simply trying to avoid getting sidetracked.

[1] http://compcert.inria.fr/compcert-C.html

I don't get anything?

OK, this is pretty cool :-)

If you don't mind my asking, what's the license on this, if I'd like to use this in one of my projects?

So, are there any languages that actually get this right? I'm sure Haskell does, being a strongly-typed, side-effect-free language. Are there any other languages that have this working properly?

Regarding your comment about script kiddies - absolutely. So many of them have no legitimate outlet for their curiosity and skill that they end up "learning to hack" because they think it's cool. It's a really sad thing, and something I wish there was a solution for...

Disclaimer - I'm a relatively new user.

Disclaimer aside, I think it'd be interesting to try - perhaps as an experiment, similar to the /classic you posted.

As for how to implement? Well, I'd imagine that the actual programming is relatively easy (disclaimer #2 - I'm no expert on Arc, so I could well be wrong), so I'm assuming you mean how to handle it. As I see it, you have two options. Firstly, submit link-bait and other detrimental submissions yourself, with a dummy account. Secondly would be to allow the admins/mods to actually mark something as detrimental, and retroactively modify each user that upvoted it.

After doing some reading about the issue, I'm wondering - what's stopping people from posting the harassment they receive online? Some sort of centralized registry of inappropriate emails - I don't see any reason to NOT publicly shame the kind of people that send these disgusting messages. Even if it's only a pseudonym, or a disposable email, it's better than silently taking it, IMHO.

HN has that too, AFAIK. Check out the "showdead" option in your profile - it lets you see people who've been ninja-banned (aka. hellbanned). It's not the same as delaying replies, though - that seems like something that might be helpful.

Personally, I would rather an ENOENT error. Seems ... fitting, somehow.

Well, either that or the Windows error STATUS_OBJECT_NAME_NOT_FOUND.

I don't get the impression that he was "forced" to back off, but rather that he accidentally posted something that was meant for internal consumption in public. I think it's perfectly within his rights to delete the post - most people don't talk the same way with their co-workers as they do in public, and it's perfectly understandable.

Out of sheer curiosity - how do you tell how many sites (and which ones) are hosted on a shared server?

And in case anyone still doesn't get it, replace "app" with "music", or "song" ;-)

Ok, here's the high-level overview. An antivirus scanner uses the following (basic) types of detection:

1. Hash-based. This isn't as common nowadays, as there's a lot of malware that will generate a unique copy every hour or so.

2. Signature. This can be as simple as a byte sequence (i.e. anything with "C:\Badfile.exe" in it is a virus), to more complicated code using wildcards.

3. Heuristic. This can refer to anything from "files with an invalid digital signature are bad" to "files that have a high entropy and have no publisher are bad".

4. Emulation. The AV runs the file in a CPU emulator, tracks what it does, and attempts to determine if it's bad.

5. Behavioural. The AV lets the file run, tracks what it does, and then might stop it if it does enough "suspicious" actions.

So, in short, with all the various types of detection that modern antiviruses use, false-positives are almost inevitable. The teller is how fast the vendor reacts - and in this case, Microsoft seems to have reacted rather quickly.

Nearly EVERY modern antivirus uses heuristics, and all of them use more complex signatures than simple hashes. It's quite possible that some byte signature that was added to catch some sort of malware is also present in Google Chrome.

For the record - I'm the submitter, but not affiliated with this project in any way - I just saw it on /r/programming over at Reddit and figured that some of the people here might be interested :-)

I disagree with parts of this - Google does release some rather high-quality source code (LevelDB, Protocol Buffers, Chrome/V8), and also provides some well-done research papers.

The entire concept of MapReduce wouldn't exist without Google. And that's inspired a whole host of products. In the same vein, I don't find it unusual that they're NOT sharing the code for MapReduce et al., in that it's proprietary technology. I don't expect Amazon to share the source code behind AWS, and I don't expect Google to share the source code for MapReduce.

Thank you for your clarification :)

The DNS prefetching was exactly what I was thinking of. With GIS, if my site shows up in Google (or elsewhere), I can now track exactly how many people see my site, and from where, without them ever clicking on a link.