szczys writes: It is surprising to learn how broken the JavaScript Random Number Generator has been for the past six years. The problem is compounded by the fact that Node.js uses the same broken Math.random() module. Learning about why this is broken is interesting, but perhaps even more interesting is how the bad code got there in the first place. It seems that a forum thread from way back in 1999 shared two versions of the code. If you read to the end of the thread you got the working version, if you didn't make it that far (perhaps the case with JavaScript devs) you got the bad version of the code whose fix is just now being rolled out.

An anonymous reader writes: Core developers in the Bitcoin project have left and started a new currency called Decred. Developers are citing a lack of transparency and a conflict of interests between the group that funds the actual Bitcoin software development, and the decisions taken inside the project. Jacob Yocom-Piatt, CEO at Company 0, who has funded development of Bitcoin since early 2013: "This is in part due to a lack of mechanisms and pathways for funding development work directly from the community, and as a result Bitcoin development is funded by external entities that create conflicts of interest between the developers and the representative power of the community that uses Bitcoin."

Earlier this month, we noted the Perl 6 advent calendar. Now, an anonymous reader writes to note that, right on schedule, and after 15 years of work, Perl 6 has been released. The top two bullet points in the linked description say that the newest Perl "retains the core values of Perl: expressiveness, getting the job done, taking influences from natural language, and pushing the boundaries of language design," and that is "has clean, modern syntax, rooted in familiar constructs but revisiting and revising the things that needed it." However, while it's nice to see Perl 6 reach official release, the team behind it takes pains to note that work goes on: "We will continue to ship monthly releases, which will continue to improve performance and our user’s experience." Further, "[T]his Rakudo release is not considered the primary deliverable for this Christmas; it is the language specification, known as “roast” (Repository Of All Spec Tests), that is considered the primary deliverable."

An anonymous reader writes: Ruby developers have announced the official release of Ruby 2.3.0. This release introduces a frozen string literal pragma, which is "a new magic comment and command line option to freeze all string literals in the source files." It also adds a safe navigation operator &. similar to what exists in C#, Groovy, and Swift. Ruby 2.3.0 also has many performance improvements. For more details, see the news file and the full changelog.

GrantRobertson writes: For my graduate project, I am considering developing a web engine designed around sharing and organizing actual information in a way that people would actually like to and easily be able to use it. Unlike a wiki, the information will be much more granular with lots more metadata and organization. Unlike a web forum, the information will be be organized rather than dispersed throughout thousands of random posts, with little room for dominant personalities to take over. While I like Stack Overflow, I am planning far more structure. While I enjoy the entertaining tangents on Slashdot, I don't want those to take over sites created using my engine. Naturally, there must be some way to prevent armies of bots or just legions of jerks from derailing web sites created using this engine. Given that, what would you say are some good rules to include in the reputation engine for such a site. What kinds of algorithms have you found to be most beneficial to the propagation and spread of actual knowledge. What would you like to see and what have you found to be dismal failures?

theodp writes: Command the dancers to "point left" in Google's dance-themed Code Boogie learn-to-code tutorial on the Santa Tracker website, and the dancers actually point to their own right. The lesson seems to reinforce a common mistake made by younger children learning to code in LOGO, which is to use their own or the display screen's frame of reference rather than the turtle's frame of reference. "These misconceptions," explained Richard E. Mayer, "may be due to the knowledge that the child brings with him or her to the programming environment. For example, children who possess an egocentric conception of space (Piaget & Inhelder, 1956) would fail to recognize that when the turtle is at a 180-degree orientation, its right corresponds to the child's left." So, it should probably be asked if the learn-to-code tutorials from Lucasfilm, Code.org, and Google that are being used to teach the world's K-12 schoolchildren to code might be making the same mistake as 4-7 year-olds. In this year's flagship flagship Lucasfilm/Code.org Star Wars Hour of Code tutorial, for example, command the droid BB-8 to move left and it could move to either its own left or right depending on what direction it's pointed in. So, did the "Largest Learning Event in History" also get "left" and "right" wrong?

New submitter Pollux writes: In the Fall of 2016, the College Board will begin a new course titled "AP Computer Science Principles," designed to "introduce students to the central ideas of computer science, instilling the ideas and practices of computational thinking and inviting students to understand how computing changes the world." This course will not replace the existing "AP Computer Science A" course, but has been added, "To appeal to a broader audience, including those often underrepresented in computing." A short list of differences between the two courses notes that instructors can choose a language of their choice. The curriculum framework directs the focus of instruction away from programming as a skill and towards programming as an activity, "enabling problem solving, human expression, and creation of knowledge (PDF)."

theodp writes: Two weeks ago, as the nation's schools 'taught kids to program' with an Hour of Code, Microsoft and others celebrated a 6-year lobbying effort that culminated in the passage of legislation that made Computer Science a core K-12 subject, which the software giant said "will advance some of the goals outlined in Microsoft's National Talent Strategy." But on Tuesday, Computerworld reported that the U.S. Bureau of Labor Statistics has put somewhat of a buzzkill on the learn-to-code party, saying IT jobs will grow 12% over the next decade, although computer programmers will see an 8% decline. "Computer programming can be done from anywhere in the world, so companies sometimes hire programmers in countries where wages are lower," explained the government. The silver lining is that software developers, the largest occupational group in IT, will increase by 17% or 186,600, over this period. The nomenclature here is a little muddy, since "programmers" and "software developers" are often used interchangeably. Here's how they're distinguished in this article: "Programmers are focused on coding and implementing requirements, and that’s why they may be more susceptible to offshoring, in contrast to software developers who may be more engaged with the business, analyzing needs and collaborating with multiple parties."

itwbennett writes: Slashdot readers will recall the story posted last week about the misconfiguration of the MongoDB database that powers Hzone, a dating app for the HIV-positive, and the ensuing threat of HIV infection the company hurled at DataBreaches.net, who sent the notification. (Hzone later apologized.) But that's not the end of the story. Among other twists and turns that point to a CEO who was in way over his head, in several emails to Dissent, the admin of DataBreaches.net, Hzone CEO Justin Robert accused Dissent of changing the Hzone user database. But follow-up emails suggest that the company couldn't tell what was accessed or when, as Robert says Hzone doesn't have 'a strong tech team to maintain the site.'

An anonymous reader writes: The FTC and Oracle have come to an agreement regarding Oracle's deceptive Java security updates, which only removed recent versions of vulnerable Java SE, but left behind older, insecure versions. Oracle got away without a fine, but will have to overhaul its Java update process to remove older versions as well.

An anonymous reader writes: Last month 188 entries turned up on GitHub in an event challenging programmers to write computer code to generate 50,000-word novels. "The 'novel' is defined however you want," wrote the organizer for National Novel-Generating Month. "It could be 50,000 repetitions of the word 'meow.' It could literally grab a random novel from Project Gutenberg. It doesn't matter, as long as it's 50k+ words." Novels were submitted as Issues on the event's GitHub repository, and this year saw intriguing titles like "The Hero with Arbitrarily-Many Faces," "THE CYBERWHALE – a cyberpunk version of Moby Dick," and "Terms and Conditions – a Legal Thriller."

Nerval's Lobster writes: New data from research firm Nielsen shows that — surprise, surprise — Facebook, Google, and Apple dominated the list of most-used mobile apps. Facebook's core app took the top spot on Nielsen's list with 126 million unique users per month, followed by YouTube with 97 million, Facebook Messenger with 96 million, and Google Search with 95 million. This is partially a consequence of the mobile world essentially becoming a duopoly between Google Android and Apple's iOS, meaning that the core apps produced by those companies are always front-and-center (and thus always in use) for the majority of mobile users. But not every app launched by these companies succeeds: While Facebook dominates, for example, the company is notable for some app misfires, including Paper and Facebook Home. That might be cold consolation to indie app developers trying to build up a significant audience.

jones_supa writes: For four years, Garth Braithwaite has been working at Adobe on open source projects as a design and code contributor. In addition to his work at the company, he also speaks at conferences about the power of design, improving designer-developer collaboration, and the benefits of open source. Still, he argues that the user experience is weak in many open source projects. One of the largest contributing factors is the lack of professional designers contributing to open source projects. Secondary to that, there are open source project owners who are unaware of the value of design or are unsure where to start with the design process. In an interview to Opensource.com, Braithwaite talks about the UX/UI topic, and gives some honorable mentions of projects that get it right.

An anonymous reader writes: Jonas Echterhoff from Unity has posted the latest Unity WebGL benchmark results on the Unity blog. He writes, "A bit over a year ago, we released a blog post with performance benchmarks for Unity WebGL, to compare WebGL performance in different browsers. We figured it was time to revisit those benchmarks to see how the numbers have changed. Microsoft has since released Windows 10 with their new Edge browser (which supports asm.js and is now enabling it by default) – so we were interested to see how that competes. Also, we have an experimental build of Unity using Shared Array Buffers to run multithreaded code, and we wanted to see what kind of performance gains to expect. So we tested this in a nightly build of Firefox with Shared Array Buffer support." The benchmark concludes that Firefox 42 64-bit is the fastest, Edge takes second, and Chrome and Safari share third place.

itwbennett writes: A scan performed over the past few days by John Matherly, the creator of the Shodan search engine, has found that there are at least 35,000 publicly accessible and insecure MongoDB databases on the Internet, and their number appears to be growing. Combined they expose 684.8 terabytes of data to potential theft. Matherly originally sounded the alarm about this issue back in July, when he found nearly 30,000 unauthenticated MongoDB instances. He decided to revisit the issue after a security researcher named Chris Vickery recently found information exposed in such databases that was associated with 25 million user accounts from various apps and services, including 13 million users of the controversial OS X optimization program MacKeeper, as reported on Slashdot on Wednesday.

theodp writes: Microsoft is boasting that UK Prime Minister David Cameron learned to code during this year's Hour of Code thanks to its Minecraft-themed tutorial, much like US President Barack Obama learned to code during 2014's Hour of Code thanks to Disney's Frozen Princess-themed tutorial. Interestingly, according to a recent Quora post by Code.org CEO Hadi Partovi, plans to have President Obama 'learn to code' a year earlier were torpedoed by the Healthcare.gov debacle. "We launched the first Hour of Code campaign, in 2013," explains Partovi. "We launched the first Hour of Code on the home page of Google, in every Apple Store, and we had convinced the President to issue a speech about computer science. But it was impossible to get the president to actually write any code that year — the administration had just launched its Healthcare.gov website, and after the infamous technical failures, nobody wanted the visual of website failing while the President is learning to code."

An anonymous reader writes: A day after Philips announced that it would drop support for third-party Hue bulbs the company has reversed its decision. An announcement reads is part: "We recently upgraded the software for Philips Hue to ensure the best seamless connected lighting experience for our customers. This change was made in good faith. However, we under estimated the impact this would have on a small number of customers who use lights from other brands which could not be controlled by the Philips Hue software. In view of the sentiment expressed by our customers, we have decided to reverse the software upgrade so that lights from other brands continue to work as they did before with the Philips Hue system."

MojoKid writes: AMD announced today that the company is releasing a slew of open-source software and tools to give game developers, heterogeneous applications, and HPC applications deeper access to the GPU and GPU resources. AMD and their Radeon Technologies Group (RTG) are looking for ways to ease game development, so developers can more easily re-use code and port their games from consoles over to the PC. With GPUOpen, game developers will have direct access to GPU hardware, as well as access to a large collection of open source effects, tools, libraries and SDKs, which are being made available on GitHub under an MIT open-source license. As part of the effort, the company is also releasing a new HCC C++ compiler which will be a tool in enabling developers to more easily leverage the resources of discrete GPU hardware in heterogeneous systems. The HCC complier also allows developers to convert CUDA code to portable C++. According to AMD, internal testing shows that in many cases 90 percent or more of CUDA code can be automatically converted into C++ with the final 10 percent converted manually in the widely popular C++ language. An early access program for the "Boltzmann Initiative" tools is planned for Q1 2016.

colinneagle sends word that a developer has claimed to have achieved a jailbreak of the PlayStation 4. Networkworld reports: "If you have a PS4 and want to run homebrew content, then you might be happy to know developer CTurt claimed, "PS4 is now officially jailbroken." Over the weekend, CTurt took to Twitter to make the announcement. He did not use a jail vulnerability, he explained in a tweet. Instead, he used a FreeBSD kernel exploit.

Besides posting "an open source PlayStation 4 SDK" on GitHub, CTurt analyzed PS4's security twice and explained PS4 hacking. CTurt updated the open source PS4 SDK yesterday; he previously explained that Sony's proprietary Orbis OS is based on FREEBSD. In the past he released the PS4-playground, which included PS4 tools and experiments using the Webkit exploit for PS4 firmware version 1.76. To put that in context, Sony released version 3.0 in September. However, CTurt claimed the hack could be made to work on newer firmware versions.

Other PS4 hackers are reportedly also working on a kernel exploit, yet as Wololo pointed out, it is unlikely there might be more than proof-of-concept videos as the developers continue to tweak the exploit. Otherwise, Sony will do as it has in the past and release a new firmware version. In October 2014, developers nas and Proxima studied the PSVita Webkit exploit, applied it to the PS4, and then released the PS4 proof-of-concept. Shortly thereafter. Sony pushed out new firmware as a patch."

theodp writes: To commemorate the 200th birthday of Ada Lovelace, Google's CS Education in Media Program partnered with YouTube Kids on Happy Birthday Ada! for Computer Science Education Week. For those seeking (much!) more information on The Enchantress of Numbers, Stephen Wolfram has penned a pretty epic blog post, Untangling the Tale of Ada Lovelace. "Ada Lovelace was born 200 years ago today," Wolfram begins. "To some she is a great hero in the history of computing; to others an overestimated minor figure. I've been curious for a long time what the real story is. And in preparation for her bicentennial, I decided to try to solve what for me has always been the 'mystery of Ada'." If you're not up for the full 12,000+ word read, skip to "The Final Story" for the TL;DR summary.