skysight-inc/HackerNews huggingface dataset:
So are you saying countries should retreat from Syria and let things fall where they may, or are you saying we should get more involved?

Of course countries act selfishly. It's crazy to think otherwise. Everyone will act selfishly. Europe the ME, etc. want stability in Syria selfishly, but coincidentally it's a good thing.
The title and first paragraph are somewhat at odds with each other. Copy-pasting a bit leads to this:

> Mozilla’s newest app perfectly captures the ethical dilemma of blocking
> the parts of the web that slow down your Internet, spy on your online
> activities and generally make Web-surfing a tedious experience.

There is an ethical dilemma, but it is not on the user side.
If you can reimplement GA in a few weeks, you need to do this over December, then enjoy your FU money.

GA is rather deep, with tons of integration and ways to slice and segment data.

Yeah, maybe in a few weeks you can get _something_ that'll give you something that'll make some manager not too unhappy. Seems like a terrible value prop for almost all companies since, unfortunately, approximately no one cares (or they run adblock anyways).
This is a solved problem.

http://security.stackexchange.com/a/31439/43688

https://www.reddit.com/r/PHP/comments/3lwxlw/hash_and_verify...
Definitely looks like it to me. Took me a good month to back up my (video) files with CrashPlan, as it was using some 10% of my upload.

I think it would be a good selling point for a service like this to allow higher upload speeds.
Edit: This comment comes off as overly critical. I really do love these diagrams, I've just had this argument so many times with people I find it frustrating.

I completely disagree with this part of the diagram:

https://imgur.com/HZS3cVy

If the resource is secret then the entire guessable path should return a 401 or a 403, not a 404. Knowing whether something exists is a privilege that a user needs to authenticate in order to gain. This isn't just an academic distinction. Github does 404s for unauthenticated requests and python's default http client (at least for python 2) doesn't send credentials unless it hits a 403 or a 401. Since github sends a 404 you have to hack around the language.

404 means Not Found. But that isn't true. The real status code is Forbidden and it should be used on all possible urls that follow a guessable pattern.
it's worth noting that various large vc firms lost their shirts around this period last year betting big on solar...this article may have been part of the pr push for all that
Laziness is a fine quality to have in a developer: http://threevirtues.com/
Safari and anything using the Safari View Controller. Which is, admittedly, a bit limited to use for a full custom browser.

The faster JS engine was also limited to Safari for a few iOS versions before it was extended to third-party applications, so perhaps they're taking the same approach here.

It's worth noting that they could also integrate their own ad blocking into their custom browser, which other third-party iOS browsers have been doing for years.
Great idea, I even went to the store and purchased it (I'm that guy, the one that never buys apps).

Alas, the app won't open, it keeps crashing upon startup (6s+) so I can't even play with it.
Are there any iOS browsers available that can be installed via sideloading that do not use the Safari engine?
>A $3,000 computer purchased today will depreciate to zero in 3~4 years, leaving you with hopefully some happy memories and a paperweight.

My desktop contains many parts manufactured more than four years ago and it is still useful. In fact, it no longer matters how many dollars of value you think it is worth, it is still effective, consuming only electricity and my time.

Your thesis is incorrect.
Especially considering ESPN is tied into cable TV, which is a huge bundle of channels, 99% of which are garbage.
I believe their point was that they want to track their traffic, but when they use a third party like Google, Google provides tracking services for SpiderOak, Google also tracks you as well, which SpiderOak has no control over.
I've long wondered if, in addition to opening up the NICS system to private individuals for private transactions, the blockchain could be used to demonstrate that a background check was performed without the hassles of dealing with an FFL or the negatives of storing 4473's. Could we eliminate 4473's altogether? Of course, if we're actually serious about background checks, we need to fix reporting into NICS system while we're at it, among other things.

As to the linked proposal, it doesn't strike me as very informed… I still fundamentally don't understand the infatuation with insurance (other than as a backdoor way to limit ownership). Insurance may cover acts of negligence, but doesn't it exclude suicide/suicide attempts and criminal acts, right? What events are being insured, and who is paying out?
I wanted to stay away from the discussion weather ads are effective or not business model. My question was what would happen to the smaller sites who still monetize through ads.
There's a difference between sports and sports entertainment. ESPN (and many others) sell sports entertainment. What you have described as having "negative value" is sports entertainment.
There are other ways to promote a business outside of search engines. The point is you can't say you have "ditched Google" while still being part of their systems that collect user data.
A low value target maybe, but having a critical security ticket open for seven years is unforgivable. If they don't want to break compatibility it's pretty simple: use something like PHPass and upgrade the hash when the user next logs in. i.e. what every halfway sensible web app did at least five years ago.
There's a $555 bounty if you can demonstrate a security vulnerability in Piwik because of that.
Clearly there would be a significant IQ difference between the average sports fan and the an average D&D player.

If you are comparing fans of esports vs. D&D players, that gap would probably be narrow to non-existent.
vu0tran, I'm almost sold. It looks great, and I love the private part (which was the one thing I could barely live with in Mailbox).

If you do snooze[1], I'll throw all my money at you :)

[1]: which of course either requires server side (e.g. Mailbox) or (preferably) client side logic. I'd be fine with the latter, but I agree it's a non-trivial problem.
Maybe that's hopefulness that Apple reverses its decision.

"Why doesn't Focus by Firefox work on Firefox?" is an amusing and fair question for Apple.
Outlook for iPhone seems to have all the features of Mailbox:

https://itunes.apple.com/us/app/microsoft-outlook/id95193759...
While the interaction between advertisers and consumers is somewhat poisoned now because of bad actors, I still think there is potential in online advertising.

In the end, I want to know about things that would interest me (and which I'd like to pay for), and those selling those things want me to know about them too. If we do it right, it's in both our interests.

The problem is that it's also in the interest of the guy selling to show me things I'm not interested in. But if an ad service targets me sufficiently well, filtering out the nonsense, my life is actually better than otherwise.
While I do not want to name names, I have worked for a very large retailer that everyone in the US would know that stored credit card information for quite a long time. They are large enough to do large chunks of their credit card processing themselves, instead of having a third party processor. They even have their own set of cards that they process themselves. It might have changed in the last few years though.

Either way, they did take PCI DSS seriously, and passed audits: dual control requirements for keys and all that. Still, accounting could print reports with many credit card numbers, although it was all logged and relatively well tracked.

I have not worked in a lot of big retailers though, but I have seen others that featured searching for a missing receipt by credit cards number, or refunds to the original CC way past the window where a processor can just reverse a charge. There's also online retailers, that definitely remember your credit card number. So I suspect there are plenty of retailers that at least have historically kept CC numbers, whether being PCI compliant or not is another matter entirely.
Well there's the obvious fact that he is a top-notch businessman who, after negotiating that deal, was a key player in building one of the world's most valuable companies. It was just one of his skills.
It's so frustrating seeing people talk about ad blocking as some ethical issue. If your revenue model depends on the honor system (that a user will load what you send them) then it's inherently flawed and will eventually founder.

It's time to move to a new model and stop trying to cling onto the past by calling users of such tools unethical.
>> my laptop was easily capable of hashing and encrypting the data much faster than the network was capable of handling it

You are assuming that you are the only one using that uplink and that server
See also Airship for Haskell
Whether theft of something no one owns is possible at all is the question.

As for achieving economic security off of making art, that is a reality only for a very lucky and very tiny minority of artists. The overwhelming majority of those who benefit from art are the middle men.

We should carefully consider as a society whether we want to enable the middle men and a handful of lucky artists at the expense of almost all artists and the rest of society, who could well benefit from free and unfettered access to earlier cultural products.
It does not have to break all existing passwords. Just add an envelope for the old passwords.
Splendor v1.1.3 Hile Mod Apk+Data İndir
Automatic Configuration Approach for Virtual Machines at Scale [pdf]
Since art went conceptual the creativity is in the sales pitch rather than the piece but this is also a case of someone who established themseleves long before the internet its maddening to see these baby boomers get to live like this we got these music and art industries closed off because these boomers hate competition lol who wouldnt want to make money so easily lol.
I really love to be called anti-ethical by advertisers. Last time I watched TV I saw ads that told me: to drink unhealthy sugar beverages, that my son would be ashamed if I have an old and cheap car, that I should use a financial service that would give a terrible return on investment, that happiness is the same than buying things, alcohol is to only way to have fun.

Sure, I have no ethics because I want to control what my computer executes and display.
Instead of rolling your own look at Piwik. It works very well and is basically a GA clone. I actually like it better than GA in some ways. It's easy to set up and you can run it on your own site so you're not contributing to a global tracking fabric.
Just a curiosity I have found: why does no ad blocker, Focus included, block ads on 4chan (4chan-ads.org, IMC)?
I never saw the movie as a kid but I was generally aware of the Hollywood concept of "hacking" a computer over a network. We had a Commodore but I was not allowed to use the modem (dad kept it boxed up and hidden somewhere).

Still, one of the first programs I wrote for that Commodore was a way to trick my younger brothers into thinking I'd somehow "hacked" into some generic military computer system. It was just a bunch of text menus where you input the number of the option you wanted and "navigated" this alleged remote computer. I even used some time delay routine in the output so the text wasn't displayed all at once, but rather "typed" out one letter at a time so it looked like info being received over a network connection.

Pretty sure it ended with accidentally triggering nukes or something ridiculous and I doubt I was fooling even my little brothers but it was a fun idea. My concept of the underlying tech and military networks was rudimentary in the 5th grade to say the least.
I'm reminded of the ads that had audio. These were the worst!

Imagine an adblocker that blocks what we know are the worst. Then, implement an upvote/downvote overlay system to the ads and if downvoted, dynamically remove them from the page and future requests on a per user basis. The votes are tallied and if beyond a certain threshold, global block. Then, sell this information back to the advertisement agencies.
I mean implementing a analytics tool that does what you need. If you do it just for yourself, you don't need all those fancy things, so it is often doable in a few weeks.
I've had good experience with Statcounter (http://www.statcounter.com)
The healthy startup founder
Did they add text labels? I used the old version but quickly stopped because they didn't basic text. Like to add labels you had to make something in photoshop and import text as an image.
No.

I am not passing IP. I am not passing a client-id. I am not passing any kind of correlation identifier from which a session can be inferred or created. I am not passing user-agent information. I am not passing a cookie ID.

I am only passing a page view event. "Page /foo/bar?bash has been viewed".

Take a look here: https://code.google.com/p/serversidegoogleanalytics/

Tell me where in that example (mine is similar) you see any client identifying information.

There is none. If GA deduces anything, it will be a property of my origin server and not a client.

I do not agree that using GA in the way I have described allows Google to invade privacy at all. Please explain clearly how it does in your opinion.
An In-Depth Survey of Acceleration Techniques for Hadoop/MapReduce [pdf]
Self-hosted means that it will be served from your own servers, and thereby your own domain. So unless your domain is on a block list, it will be loaded.

EDIT: Sorry, I've been dealing with uBlock Matrix for too long, and forgot how advanced the other blockers pattern matching is. See the many responses to this for better information.
I was always bummed when Loadstar started including GEOS programs I couldn't run because we didn't have the machine for it.
I'm pretty surprised that his work stands up as not infringement after Shepard Fairey and the AP. It seems that his work was much more transformative than what Prince is doing here, and yet he lost. I can't help but feel that the real argument Prince has here is the money to pay better lawyers than the people he "borrows" his work from. I think the result would be different if he was snagging AP photos.

Also, I'm not sure whether this applies specifically to Prince, but this clause in the instagram policy would seem to suggest that Prince is at least violating Instagram's policy:

The Service contains content owned or licensed by Instagram ("Instagram Content"). Instagram Content is protected by copyright, trademark, patent, trade secret and other laws, and, as between you and Instagram, Instagram owns and retains all rights in the Instagram Content and the Service. You will not remove, alter or conceal any copyright, trademark, service mark or other proprietary rights notices incorporated in or accompanying the Instagram Content and you will not reproduce, modify, adapt, prepare derivative works based on, perform, display, publish, distribute, transmit, broadcast, sell, license or otherwise exploit the Instagram Content.
The very incentive of web advertising has incentivized creation of massive knowledge content and created platforms to do so, for example Stackoverflow. To totally disregard it will be a bad decision and it would eventually drive everyone to pay per view/create way.
The Zoo is a wiki that tracks relationships proven to be true among various complexity classes.

The author said computer scientists are among the target audience. Does anyone know if these mathematical models/objects are useful to implement in a program (other than one about complexity classes) or if they are solely useful when doing big-O analysis of your data and programs ?
Pricing is falling rapidly for storage. Consider that S3 - IA is $15/mo for a TB, and backblaze B2 can offer 1 TB for $5/mo. I would assume both are making some profit at those price points, so $12/TB/mo should be workable if the service is doing their own hardware.

Backup services especially have low operational requirements for their hardware and network connection, since once the files are uploaded they only need to be verified periodically.
But isn't that the same question? If ads make enough money, then they're "effective". If they don't, they're not.
You can have local blackouts if they don't sell enough of the seats in the stadium. It doesn't happen a lot, unless you live in the Jacksonville market.
Http://dubaibestoffers.com/ads/wireless-cctv-camera-installation-in-dubai/
Friendly, 100% Trusted, Reliable Wireless CCTV Camera Installation in Dubai. Call any time (24×7) 050 1759666 to fix all IT products at Lowest price. Get IT services at your doorstep.
Opera used to have opt-in content blocking and I used it for years without any trouble. I only blocked annoying ads on sites that I visit more than once. Of course it meant that I disabled whole ad networks sometimes, but that's entirely their fault. In the end, I was shown many ads while browsing.

That being said, Opera had a proper pop-up blocker and didn't implement every junk feature from javascript (prevent closing windows, change clipboard, ...). Disabling js (on per site basis) was two clicks away as well.

With Chrome, you can't really use it without ad blocker. One bad site and you end up with dozens of new windows, unclosable tabs, ... So the browser itself is yet another reason why people turn to ad blocking.
>> Google Analytics thrives on developers' laziness in my opinion.

Every service does. Pingdom, GA, Olark, Github...

It took them a few weeks to write their own analytics. What features did they not implement? How many people worked on it?

Does your 1 or 2 person startup have 4 weeks to write their own analytics package or do you have more important stuff to do? (I'm betting you do. Like launching your product instead of re-inventing the wheel with analytics)
Another dimension here, the millennial sports fans I know don't like ESPN (TMZSPN). I feel like they're digging their own grave especially with stunts like the terrible treatment of one of the Millennial Gods, Bill Simmons and their dismantling of Grantland. You can feel out this ESPN sentiment on various sports subreddits too, like r/nba, a community of 300K users, who from time to time will collectively pile on disdain for ESPN, usually for their often sensationalist (terrible) coverage, dramatizations, politics, and censorship of important issues like ones that make the NFL look bad. Not entirely sad to see ESPN on the wayside.

Maybe a new request for startups could pop up, "Kill ESPN".
The authentication one came right when we were going to shut down our use of bluemix. We reported it directly to IBM here in Norway.

The networking issue in docker happened for a few days. The "fix" from IBM (after a ticket) was for us to add a 30 second sleep to our containers. Needles to say this wasn't a fix we were happy with.

Tickets were also a huge hassle in the beginning. It was a 10 step process just to submit a ticket. It got better after a while.

We didn't file a ticket about the upload speed for images. I just remember sitting in a meeting realizing that the container had crashed, and when I restarted it it had no internet. So I thought, that while I was at it I would just push a new image with some bug fixes. That worked fine and I got a new container with internet, but pushing the image took more time than the meeting lasted without there being large changes to the image.
Komodo IDE has it.

At the text-editor level, SubEthaEdit has it, and the same library is used by Coda (and thus they are compatible)

I vaguely remember there as a company providing plugins for multiple IDE's to accomplish some kind of pair programming - ah i found it: https://floobits.com
...then we'd still have users complaining about app developers taking away their freedoms!
I'm not interesting in further dehumanizing myself with participation in a bug bounty program.

I'll write an exploit for it (the general case, not just Piwik in particular) and drop it on OSS Sec some day, but here's a theoretical attack:

1. Guess a username somehow. Maybe "admin"? Whatever, we're interested in the security of the hash function. Let's assume we have the username for our target.

2. Calculate a bunch of guess passwords, such that we have one hash output for each possible value for the first N hexits.

e.g.

substr(md5($string), 0, 2) === "00"
substr(md5($string), 0, 2) === "01"
substr(md5($string), 0, 2) === "02"
// ...
substr(md5($string), 0, 2) === "ff"

3. Send these guess passwords repeatedly and use timing information to get an educated guess on the first valid MD5 hash.

4. Iterate steps 2 and 3 until you have the first N bytes of the MD5 hash for the password.

5. Use offline methods to generate password guesses against a partial hash.

The end result: A timing attack that consequently allows an optimized offline guess. So even if their entire codebase is immune to SQL injection, you can still launch a semi-blind cracking attempt against them.
Success is subjective, profitability is not. we all have different metrics for success. Though I agree that metric for success for a company is probably profitability but you will find people disagree with you on that as well.
Wow, that sucks. I didn't realize that. Is that supposed to encourage people to go to the stadium? It seems like a good way to just drive away fans.
That has a lot of issues. So don't trust their numbers.

EX: They use 10% for solar cell efficiency when some current systems are over 22%. http://www.sciencealert.com/panasonic-has-produced-the-world... And lab results are even higher.
Toward a Computing Model for Large Astrophysics [pdf]
If your device is jailbroken (not sure if there's a jailbreak for iOS 9), you could add entries for GA to its hosts file. I use these on my desktop PC:

127.0.0.1 www.google-analytics.com
127.0.0.1 google-analytics.com
127.0.0.1 ssl.google-analytics.com

AFAIK ad blockers are only supported on iOS devices with 64 bit CPUs.
Why Do People Uninstall Apps? – [Infographic
KDE Ships Plasma 5.5 Release
I'd be interested to hear from people that were around when expert systems were in vogue the first time around as to why they didn't take off in medicine, and what is new (if anything) in the new wave?
I went to Rescator mentioned in the article and noticed they are using ICQ for contact..

Anyone know why?? Seems like an odd choice.
It wasn't the right tool for Facebook - Python would have been a better alternative, at least once they graduated from shared hosting. It was good enough that migration was never worthwhile, because the technology wasn't the innovative part of Facebook, but that doesn't make it good.
If it's anything like the ones I looked at a while back, it goes through a proxy to strip the ads. So all of your web browsing goes through a 3rd party. I'm no technical wiz on such things, but I can't think of how else it could work without being an Apple-approved Safari extension.
> Isn't a lot of art basically bullshit?

Yes. Murial Gray (scottish broadcaster) has some amazing stuff about this. She had a TV show (Art is Dead, Long Live TV (1991, thus hard to find info about)).

http://www.andrewgrahamdixon.com/archive/readArticle/677

https://en.wikipedia.org/wiki/Muriel_Gray
Malaysia hunts owners of Boeing 747s abandoned at airport
The six types of pull requests you see on GitHub
With the risk of sounding like a broken record, it's not 'ad blocking' - it is 'content blocking'. I wish these articles would just drop the term 'ad blocking'. There may be a small minority of folk that want to block ads. Most people want to block 3rd party content and trackers. If a publication needs ad revenue, they should put the ads in their content - just like a newspaper or magazine.
Inferno-rpi 0.4 released – boot time is now about 1 second
Borrow a device to sign up? Buy one for a few dollars? It's really not hard.