skysight-inc/HackerNews huggingface dataset:
Improve+Performance+By+Caching+In+MVC
In the presentation it was two if's, not an if and an elif. Someone up-thread misrepresented it.

I didn't read it carefully here, as I had already seen the presentation and it wasn't until your disagreement I realized the code was different.
Was access to stored photos also compromised? The linked message from CVS doesn't say one way or the other.
Not at all. If they tried to physically stop you from leaving, that is what would get them fired.
The online material is a virtual lab where you can test out the things you learn in the book by breaking actual web applications. Technical books on niche subjects rarely leave the authors rolling in money, so it would be pretty silly to expect the labs to be free.

If you are too cheap to spend $7 an hour, you can set up a vulnerable VM and accomplish the same thing for free.
The claim about HTTPS not being sufficient for downloading Chrome (or anything else) is incorrect. The page cites https://cryptostorm.org/viewtopic.php?f=67&t=8713 for this, but that's a long page of nonsense.

Most likely what's happening is that HTTP resource loads are being manipulated; thus it appears to affect all browsers. Also possible is that the end-machine has been compromised some other way and the malware is attacking local programs.

As far as a user is concerned, the difference is irrelevant, but we'll never get a grip on problems if even technical pages are fear mongering.
Probably "m.", with 623,000,000 results. Likely more with https considered.

https://www.google.com/search?num=100&newwindow=1&espv=2&q=i....
The Art of Eating, by MFK Fisher: http://www.amazon.com/The-Art-Eating-Anniversary-Edition/dp/...

I love food, and I love the anthropology of food. The writing here is engaging and entertaining, but the content is quite interesting if you are at all curious about mid-century French cuisine from the perspective of an American ex-pat chef.
This is amazing and innovative. even for me being web developer its difficult to understand, how dns actually works ;)
It's easy to tunnel-vision into the security of your own code and forget that everything you depend on must also be secure. This could span from your framework's cookie signing to the version of OpenSSL you're using on the server to the access controls of your VPS.

Unattended upgrades are a good start for your OS-managed dependencies, but make sure to keep up with your app-managed dependencies. You could setup a continuous-integration thing that runs your tests against the latest minor versions of all of your dependencies and upgrades when deemed safe, though you need excellent test coverage to get away with it.

Anyone know of great resources for managing your deployments and dependencies? Something other than "here's how we use docker."

Related plug: There is https://appcanary.com/ which is a dependency vulnerability alerting service (disclaimer: I'm friends with the founders, swell folks who genuinely care about improving the safety of code everywhere). Many vulnerability databases are public, but keeping track of things—especially across platforms and database providers—is really painful.
What do you mean by "speed", and what is your primary working language?
The Most Important Question of Your Life
I tend to largely agree with this, although if there was a store that stocked what Sparkfun or Adafruit have in their online store that I could go into and browse, I'd probably spend $100 a week in there.
I'll be curious to see if this has any impact on phone pricing. Without the subsidy, I doubt as many people will upgrade as often, which will slow phone sales.
Beside the point, but why in the world is he collecting SSN numbers? That in itself is more concerning to me than not having SSL. But that's just me. I have had my identity stolen and know first hand how difficult, to almost impossible, it is to clean up.

With that said, I do know that many states have strict laws regarding the collection/use of SSN numbers via websites and/or for the sale of goods.

As for the credit card info, I believe most processors have in their terms that SSL is required for live transactions. I was also going to point to PCI compliance, but I am not sure how aggressive they are at going after the "little guy". Although with credit card theft in the US being a hot topic right now, I am sure anyone that is non-compliant will be a target for violations.

EDIT: To add link, starting at Page 12 talks about various state laws regarding SSN collection: http://www.gao.gov/new.items/d051016t.pdf
Fungi – the recyclers
I agree there should be little more description.
Yeah, except it's also possible, and not unusual, to compromise the cfo or someone's email/computer and then send signed emails all day.
My sarcasm detector is admittedly permanently broken thanks to years on IRC and forums, but just in case:

It's useful because the steps a reader would need to take before being secure clicking through to a site identified in the submission title as "hacked" (I notice the title has been clarified since then) are non-trivial. I figured since I'd done them once, I might as well save additional folks the steps if they were just looking for the page contents.
Five Years of Being a Full-Time Indie Game Developer
Some thoughts:

Lots of people think nothing of a bounce from an HTTPS download link to an HTTP-only download link, and will happily ignore even flagrant warnings...

Root CA's have been compromised in the past, and will be again. I expect 0-day root CAs are up for sale somewhere as I type. It's not like the so-called "good guys" can't physically demand access to private keys, or big businesses can't out-right buy root trust (ex, "We need to do this on our private network - we'll never put it on the Internet, really. Here's a lot of money."). The root system is only as strong as it's weakest policies, and it's about as leaky as a steamer basket.

Even if an attacker can't get a directly useful signature, she can take control of a server already in possession of a valid cert, merely for hosting purposes (if Ubiquiti can be scammed, so can Google, as can you or I). This can be an inside job, or a one-off breach - all it takes is one click or breach of trust. (The DNS MITM tricks that work for the download can also be used to get between 2 parties higher up the trust heirarchy.)

And, of course, it is also always possible to buy a fresh, perfectly valid cert for a domain that looks close enough to pass the user test, or - quite alarmingly - one with UTF characters that combine to display in the address bar identically - or close enough - to the domain being impersonated.

That's just what comes to my mind immediately.

It's amazing any of it works at all, and arguably it doesn't. If you haven't be breached, it's probably because you haven't been targeted,
I think if you're really looking to get a sense of how the world works, the best stuff to read are journalistic accounts and histories. Just pick a subject your interested in, do a bit of googling on well regarded accounts of that subject, than go to town.

The reason I think these are more valuable than the pop psychology/business airport books is they don't operate under the pretense that the world's great truths can be boiled down to 240 pages. Rather, learning about people's experiences and stories on there own terms helps you develop a much more nuanced worldview.

For example, I'm reading The Battle Cry of Freedom, an overview of the Civil War, and it's astounding how much more insight a book about something 150 years ago offers into today's society than just about any of the Gladwell genre stuff.
On Writing Well by William Zinsser
http://www.amazon.com/Writing-Well-30th-Anniversary-Edition/...

It's absolutely the best book for anybody who keeps a blog or writes any sort of non-fiction. I try and re-read it once a year.
I am trying to confirm that cox does this with google. The cert is funky and doesn't match what I see from other connections. All hosts from nslookup are cox hosts, etc.
Simplicity - by Edward de Bono - http://www.amazon.co.uk/gp/product/0141033096/ref=as_li_tl?i...

It is literally one idea per page. Virtually noise free - but does demand some thinking on behalf of the reader.
I started reading this book and am half way through and, although I'm not finished, I would have to disagree with you. This book is mostly pop-psychology with overstated implications and reliance on low-stake experiments that can not always be replicated. Also, the book glosses over actual results by saying "the participants were more likely to x than y". How much more likely?

A typical example of psychological discovery discussed in the book:
1. Ask someone to give 3 or 10 examples of when they were assertive
2. Ask someone to grade themselves on how assertive they are

And the study shows that people who were asked for 3 examples of how assertive they are were more likely to grade themselves as more assertive that those who were asked for 10 examples due to recollection bias.

I mean, I could see how this is sort of interesting but it's such low stakes. How would anyone be able to grade themselves from 1 - 10 on how assertive they are? What does that even mean? What implications does this have on anything?

I don't know. Psych experiments that are so glorified in the book seem to me to be too convenient and a form of story telling, which is fine except for the troubling implications that our cognitive biases and inefficiencies somehow trump our free will and freedom. But then again, I have my own biases.
And bad financial advice at that, as the price is quite predictably half that at this moment and probably going much lower. There has to be a shakeout period in the price, no matter what.

But as far as Ethereum itself being a scam... They raised money to produce a product and they've produced it. It's real. It exists. They've done what they said they would do. Whether it was worth the amount raised or not is fairly irrelevant at this point. They've delivered on what they promised.
This article should replace the current article link (to cvsphoto.com)
No, those are comments from plane spotters. People who track planes for fun. Looks like airliners.net
Ask HN: I have a startup idea, I don't how to move forward?
I am a noob in this field, I started learning how to code in Python, been a few days. I do have this idea and I want to try and give a pilot run to it. But all I have is and idea, help me what should be my next step
Has+a+co-worker+tried+to+make+you+look+bad+on+the+job?
Hackers gather for desert shoot ahead of Def Con
Can you please explain where exactly you got the idea that BLAKE2 was length-extendable?

Can you also please explain some of these other attacks you're talking about it sharing with MD5 and SHA1? The commonality between MD5, SHA1, and SHA2 is the Merkle Damgard structure. BLAKE2 isn't an MD hash. Are these MD attacks that you're asserting apply to BLAKE2?

I'd like to know where the certitude you're projecting is coming from.
Hey, I'm actually the creator of the plugin. I'm amazed to see a picture of it on HN. Thanks for using it and let me know if you have any questions. If anyone else wants to use it, it's called Plain Text Offenders Alert and available in the chrome web store.
Unless he is a government, insurance, credit card, bank, real estate organization he should not be asking for a SSN online or storing it unless they are for his employees or the transactions being conducted requires notification to the IRS or the transaction is subject to the customer identification program rules. Either way PII like this should be securely stored offline.

For Credit Card information it has to all be transmitted and stored in an securely in accordance to the credit card merchant agreement he has agreed too.

The HTTP protocol is not secure, when your family member is hacked or audited they may be liable for many civil and criminal charges.

Have them read all the information for PCI DSS compliance - https://www.pcisecuritystandards.org/merchants/

You have done your part by advising him about the risks, privacy concerns and how bad it really is. Either way it is ultimately a risk he is accepting for himself and the business which he will have to deal with the consequences when something bad occurs in the future.

If he needs proof of how bad the decisions he has made can be, point him to many of the recent credit card and government organization breaches.
Along the same lines is Moral Tribes by Joshua Greene. I learned a huge amount about the human condition from that book.
We told Matasano candidates to do this, and how to do it and what to run, and it seemed to work pretty well for people.
The best book I've read in the last 5 years is David Simon's, "Homicide: A Year on the Killing Streets"...if you've watched The Wire, half of its material is derived from this real life account of being embedded in Baltimore's homicide unit: https://books.google.com/books/about/Homicide.html?id=N8LS0b...

All of Atul Gawande's books, notably:

The Checklist Manifesto [1]: http://atulgawande.com/book/the-checklist-manifesto/

Better: A Surgeon's Notes on Performance: http://atulgawande.com/book/better/

[1] You can read the essay that this book is based on in the New Yorker: http://www.newyorker.com/magazine/2007/12/10/the-checklist
This is awesome! Thanks for sharing!
Typestring: Using C++ compile-time strings as types in template parameter lists
Now, that's what one calls high classics :)
Here are 3 that I particularly liked in the last few years:

The Information, James Gleick

A Universe from Nothing, Lawrence Krauss

Abundance, Peter Diamandis
Oh and on the topic of silently discarding portions of passwords, another outlook.com password deficiency (circa 2011, doubt it still exists):

When setting the password, max length was only enforced by a text input with a max length attribute. You could happily type more characters and everything would work as expected....until you went to log in. The max length on the password field on the login form was greater so those characters that were silently dropped when setting the password suddenly weren't.
Great book! I learned a lot from that (already was a huge 747 fan). In particular, compare the Boeing SST project at the time to the 747. It's obvious in hindsight why an efficient high capacity plane beat an inefficient low capacity plane- people want cheap tickets more than they want to get the destination in the least amount of time (hell, you can spend as much time in car traffic at the destination as you did in the air!).
Wow, this is awesome!
Buy a $5 virtual service instance at DigitalOcean (https://www.digitalocean.com/) and get to coding.
Most useful book I've ever read, period. Changed the way I think about decisions and influenced how I think about building products.
Professional Bitcoin Trolls Exist
I heard a rumor once that the SP in 747SP really means South Pacific, and that it was built to carry enough gas for flights from LAX to New Zealand and Australia.

I think the newer more fuel efficient airplanes from Boeing and Airbus have taken over that market.
Lately I've been playing around with static dimensional analysis in Rust. The overall idea is similar: Use PhantomData to add a type parameter and define an empty struct for each unit. So you might end up with, say, Scalar<Newtons> or Vec3<Meters>.

Dividing and multiplying units statically is where I've had trouble so far. I think I've found a way, but it would depend on negative trait bounds, as discussed here:

https://github.com/rust-lang/rfcs/issues/1053

Ideally, I'd like to be able to do something like this:

let a: Scalar<Joules> = Scalar::new(2.0);
let b: Scalar<Seconds> = Scalar::new(3.0);
let c: Scalar<Watts> = a / b;
// Watts is a type synonym for Over<Joules, Seconds>.
// Other derived units would use Times<U, V>. E.g.:
type Pascals = Times<Newton, Times<Meter, Meter>>.
...Or a spur to the West Anglia mainline at Liverpool St/Thameslink at Farringdon. With those in place there'd be the possibility of direct rail connectivity between all of Heathrow, Gatwick, Stansted & Luton airports. The link should already be possible to Southend via Stratford.
If history is of any interest, try Asimov's Chronology of the World, by Isaac Asimov (duh). It's ordered chronologically, and describes in concise and fact-rich passages what was happening during a given span of time in each region of the world.

Asimov was also a master at nonfiction writing for laypeople. Most of his books were nonfiction (they were easier for him to write).
Reminds me of a great movie about two competing free divers: The Big Blue (Le Grand Bleu) http://www.imdb.com/title/tt0095250/

It also has a sad ending...
God, yes. I still can't get over "the no asshole rule". The entire book makes literally two points: "Don't be an asshole and don't tolerate assholes". It's stuffed with so many factoids and fallacies to belabour those points that I'm still mad at the author for wasting 6 hours of my day.
Even those with no musical training will probably disregard your mistakes if the overall performance is good.

Example: My favorite Irish traditional duo is Peter Horan and Fred Finn (both RIP, alas). They were legendary for the tightness of their unison playing. There is a great video [1] of them from 1982, when they had been playing together for 25 years. At the 1:05 mark, Peter (the flute player) switches to the next reel, and Fred doesn't. The result is complete musical chaos ... and then, at 1:07, Fred finds the tune, and they suddenly are both in perfect sync again.

Now, this sort of screw-up is almost the worst mistake a competent Irish duo could make. But hell, for me if anything it makes this video stand out in a positive way. Seeing the fumble and recovery is endearing.

[1] https://www.youtube.com/watch?v=_0CTHmQ2Jus
More of an obituary really. A really amazing woman with what seemed to me to be an inhuman ability to go without breathing.

I have never had the courage to be this kind of athlete, whether it is free diving or base jumping or any other sport where dying is only slightly less likely than not dying. And have always wondered about what they are thinking when they start out on their next "event", do they make their peace with God each time? Will fully disbelieve their chances of dying? Recheck their will and other documents? I like to believe she died doing something she loved doing, I really hope that is true.
Do they not wear surgical masks anymore?
No. Those are real problems. But their solution has nothing to do with copyright law.

In both cases, the problems you're talking about are collusive relationships between academic institutions and publishers. Collusion is its own problem, and yours are just two examples out of many.

Schools shouldn't require textbooks that cost $120/copy, and they shouldn't pressure associate professors to publish in journals that charge exorbitant fees or refuse authors the right to re-post their own papers.

What we should not do is root-and-branch transform copyright law in the hopes that among all the disruption that creates, maybe something good will come out of it in academia.
Hate when they say "We take security of our members' data seriously".

How do I know the hack was due to their incompetence? PR people need to come up with a better approach.
Deep Simplicity: Bringing Order to Chaos and Complexity
Functional programming in Scala by Paul Chiusano and Rúnar Bjarnason. Programming Erlang: Software for a Concurrent World by Joe Armstrong. Even if you have no desire to learn Scala, Erlang, or functional programming, I still think most people would enjoy these books. Every page of these books contain a golden nugget.
And every major implementation supports them.

Well, I trudged through the RFCs in ~2010, so it's possible that it's been updated since then.
What is it? I have no idea how to use it. Apologies for that
It shouldn't, since they're introducing installment plans instead. So your monthly bill won't really go up.
Gödel, Escher, Bach, by Douglas Hofstadter.
So I take it you're against crowdfunding in general?
The Amazonization of Everything
It will just become installment payments.
Sorry about that, thanks for making the changes.
Great. And the only real multi-network highstreet competition, Phones4U, went under (relatively) recently.

That's my parents and my remaining grandparent's details breached then. Fan-fucking-tastic.
Very good comparison!! I just pulled my gf's attention away from her ipad to read this to her. My only fear is that rather than loosen up the practice of dentistry, the government will begin tighter licensing on hand tool usage.
GitHub ? Looks like TODO group are more companies than just GitHub [1].

[1] http://todogroup.org/members/
Your first step should be: get out of the building[1].

Go meet in person and talk to 5 to 10 people in your target market. E.g. pay them a cup of coffee, or set up a 15-minute meeting at their business place. Ask them what their major pain points are, and validate that your solution would be valuable to them. You'll know that if they (at least informally) agree to pay you $x/month for such solution.

You'll either learn a lot about what's really important to solve, or find out early that there's not a market for it.

[1] http://www.inc.com/steve-blank/key-to-success-getting-out-of...
I second this. I have read every page of MFK Fisher that I can find. I have never regretted a single page. Not just a food writer; she possesses a poet's eye for the human condition, and genius-level writing skills.
I'm pointing out that your "neutral perspective" really isn't in a way you couldn't miss. That's all. I don't find you an idiot but I do find that you are strongly biased. Please refrain from that in the future and provide arguments and sources instead.
For me it was

Guns, Germs, and Steel: The Fates of Human Societies by Jared Diamond.

It blew my mind on almost every section! I loved it I suppose coz it answered a lot of questions I'd growing up and a bit more. I've recommended it to everyone in my family.

One critique I received was that there is repetition of ideas but I think its because primarily humans carry past successes anf failures so most of the changes are evolutionary to what worked previously and second this book is akin to a thesis and every chapter is essential to building up the case.

By far the best non-fiction I've read.
Blinkist provides pretty good summaries of hundreds of books. They are using a freemium model. (I am not involved with the company.)
I was surprised to see a recommdation for The Information. Gleick seems the epitome of a rambling author who says almost nothing. I made it through Chaos, but could not get through Feynman or The Information. This kind of InfoJunk is what the OP is trying to avoid, I think.
It's an inexpensive cloud hosting service that would allow you to get your idea up and online.

These might help:

https://www.digitalocean.com/community/tutorials/?q=python
From the page: "We apologize for the inconvenience and are working diligently to resume service as soon as possible. Your images are saved and you will have access to them once service to CVSPhoto.com is restored."

That being said, my understanding as somebody with 15 years of working history in the online photo space is that PNI is the host and all of their major customers shut off so I can't imagine that PNI is very healthy right now. If I am mistaken and the individual sites (Rite Aid, Costco, Sam's Club, Tesco, CVS and Walmart Canada) actually store and manage the photos then the data is likely to be fine.

That also being said, never trust your photo storage to an online service even if you are paying for it. Photos generally don't take up that much space. You should have at least two copies on devices that you own if you don't want to lose them.
You can read about HAIFA here: http://csrc.nist.gov/groups/ST/hash/documents/DUNKELMAN_NIST...
Gödel, Escher, Bach by Douglas Hofstadter?