skysight-inc/HackerNews huggingface dataset:
Ah, the notorious Issue 150 in Chrome. The Chromium team think its only use case is "to save a
keystroke before finding" and that including an option to turn it on would be confusing to users:

http://code.google.com/p/chromium/issues/detail?id=150

It was a hot issue before they closed comments, namely due to Peter Kasting's hasty and misguided initial response.

I personally have yet to meet a Firefox user who is confused by the FAYT option, but that's just my experience.
To clarify, by "they have to", are you stating a fact or making a demand? One would have thought that Citigroup would have had some pretty tight security as well.
Something capable of putting enough light to make a "this is a cycle lane" image that's visible in daylight is going to have to be much brighter than a laser pointer.

The illumination level on an overcast day is about 1000 lux, so to be visible in daylight the device will have to light up the bright bits of its image at least about that brightly.

The image in the picture looks to me like the illuminated area is at least about 0.1m^2, probably rather more. So that's a total output of at least about 100 lumens.

Light at the peak of the photopic curve (i.e., wavelength optimized to look as bright as possible per unit power) is 683 lumens per watt.

So the output from this thing is going to have to be at least about 150mW. That would be well into class 3B, meaning that you need a key switch and safety interlock on the device and protective goggles if you're anywhere where it could shine into your eye.

(Doing laser safety calculations properly is complicated. Don't take the above too seriously.)
I think the concern is more about supporting an OS that packages something you disagree with on principle.
But you can tolerate ref counting pauses? (When you release the last reference to the last object keeping a large tree of objects alive and have a lengthy cascade of objects being freed.)
Whenever they're hacking anyone and making headlines, they're increasing political pressures to create a "civilized" internet in the name of safety and security.
I'm not sure that the goal of CSS has ever been to "catch up" with design, or even make it easier! I always saw it as a means to 1) separate content from presentation (I know, i know, just stating the obvious) and 2) enable the web to be a better designed place. And it surely has become just that.

And of course good designers are always going to pushing at the boundaries of what's possible, bless 'em! Long may they continue to keep doing just that!

Btw, how'd you go with that masking out the search box? Playing with masking and motion like that has been on my mind for a while. Any tips/pointers?
Vaguely. Their press releases are funnier, though, and everybody's reactions are hilarious. "Our security flaws wouldn't matter if you didn't go around pointing them out!"
Samsung has been learning a lot from Apple, not only on their smartphones but also on their laptops (with the release of the Macbook Air sort of clone, Samsung Series 9) and on their tablets (even though they have different sizes, they are all under the same name, Galaxy Tab). They are now focusing on having less choices but better ones. I really like this new approach.
It's fairly easy to do in C++ with constructors/destructors and smart pointers.
The sensation of movement seems to be mostly caused by rotation and scale changes, not wobbling. I'd like to see a video that compensated for all effects except wobbling.
Woh. Why did I not know about this? It's brilliant. Why isn't this turned on by default?
Travel in India
Travel to India – we offer India travel agent, char dham yatra, char dham yatra packages, travel agent India, tour packages India with IndianTravelConsultant.com, get travel agency India, trip to India, travel in India and hotels in India.
Newsweek photo essay - http://www.newsweek.com/photo/2010/10/14/toyota-trucks.html
Kudos for reaching out here.

Would you be up for doing a Q&A sometime about how you guys go about business?
Thank you for those links. My take on it is that they're not intentionally squashing anything, it's just that predictions (especially on a topic as stuffy as astrophysics) aren't as news-worthy as actual events?
You don't even have to do that: with Firefox default settings, tapping "/" will start searching for text in the page, while tapping "'" (apostrophe) will start searching for text only in the context of links.

Editing a page is 'edit on the wikis I use most often, for example.
If you want to make such a distinction, Qt is probably what would come close to top-C++. It offers dynamic binding via signals/slots, Java-like iterators, simple multi-threading/parallelization, signal/slot-driven networking, database access, and some automatic memory management (deletion via parent widgets, and auto-pointers). It only misses the proposed compiler warnings to indicate that 'bottom-C++' is used.

Still, for the average programmar 'top-C++' makes a miserable language. Want to write a simple class? You have to make a separate header file and decide what methods to inline/make virtual, etc. Want (binary) compatibility? You'll have to worry about things such as PIMPL and d-pointers.

It's a low-level language, and low-level issues will always leak into higher-level subsets. And why should one go through the effort? The old mantra "write in a higher language, rewrite what is too slow in C/C++" works fine.
There are a huge number of cycle helmet videos over Youtube, in most of them you can see that the driver is out to get the cyclist, probably because of clogging up a fast flowing road.

It's not right but it's happening all the time.
When I started in resesearch back in 2000, every self-respecting theoretical physicist would have some kind of special-purpose workstation sitting around. I learned Unix on the astronomy department's Suns, before switching to a much funkier-looking AlphaStation when I switched departments.

They were the last of a dying breed, though. By circa 2003 when they were up for replacement there was really no point in having one of these over a high-end commodity box running Linux.

Circa 2011, my next "workstation" will probably be a MacBook Air. With the rise of cheap commodity clusters there's really no point in even trying to have signficiant number-crunching power on your own desk.

I don't miss the Suns though. They were a bastard to use.
It's hard to believe he really means Chrome and not Chromium, would Canonical really go with a closed source build of the browser in a default install? Don't they have a non-free process where the user has to explicitly authorize any installs that weren't built by the Ubuntu team?
I've only been hit in the eye with a laser a couple of times, but I'd say yes.
Good insights Vic-nyc.

Tim Wu's book is excellent and was one of the many books that have influenced me in the writing of this doc. He's on our list of future interviewees.

His explanation of the "Separations Principle" is essential reading for any one that wants to protect the integrity of the Internet as we know it.

Have you read Evgeny Morozov's book, "The Net Delusion"...?
Interesting book -- He looks at the future of the Internet and of democratic government from an interesting perspective. His central premise is that totalitarian governments in the 21st century will look increasingly more like Huxley's, "Brave New World" than Orwell's "1984"...

We plan on interviewing him as well...
Both the "peace" and "V for victory" signs have the palm facing forwards. That's a "fuck you" sign, at least where I'm from.

I'm not from Libya though.
Nations unfortunately engage in a lot of belligerant actions that can easily spiral out of control. The long term risk with the USA conducting operations in international waters around China - which they are perfectly entitled to do so - is that areas of contested territory such as the Spratly islands in the South China Sea could easily become flashpoints for needless conflict.
Performance is a cross-cutting concern, you should factor it into the design of the application and not remember it when doing field tests and noticing that the software is too slow.

This doesn't mean that you must use C or C++, but assuming that you can always rewrite the slow parts in C or C++ is inviting disaster.
Terms of Fisker Automotive's $150 million financing
Ironically, it's probably best used as a dumb X terminal.
Watch the Lunar Eclipse From Anywhere
C++ already contains "top" and "bottom" C++. You can write boost-style code, with heavy use of smart_ptr and STL algorithms & functors, or you can stay pretty close to the "C with classes" layer.
Where Feeding Cows Matters More Than Feeding Future Economic Refugees
In TNT the goal is memory-efficiency. Maybe I should have said weak-reference assignment instead?
I must say, i'm fully converted from the iPhone club to my Galaxy S2. I can't imagine at the moment what else I could possibly want from a handset, other than slightly better battery life.

I've yet to really find anything I can't do with the handset. It's a light, fast, open, beautiful piece of hardware. I'm already seeing a lot of other people converting over after they see the difference that openness can bring. Want to play a random video file? Just drop it onto the phone and hit play.
Health Service laptop goes missing with over eight million patient records
If speed requirements are so tight you should preallocate the memory. GC is completely out of the question.
I've been a long-time reader of Hacker News but this is only the second link I submit. It's not tech related but I hope that it would gratify folks' intellectual curiosity, here.
About 18 months ago, Tom Callaway, Fedora engineering manager explained why fedora wasn't officially packaging chromium for fedora:

http://spot.livejournal.com/312320.html

I'd be interested to know what of those problems still apply. I imagine there are a number as we still don't see chromium in a major distro AFAIK.
How can a bank this large have such poorly designed security? It's ridiculous. Hopefully, all these latest hacks get everyone else to treat security more seriously. There could be a lot of other banks that do the same thing as Citigroup. So if one gets hacked, at least the others will remember to review their security policies, so it doesn't happen to them, too.
Judge to copyright troll: your lawsuits are shams, give it up
This keeps getting regurgitated on a daily basis, and I don't think the people saying it are even aware of the disruption on a person's daily life that results from this.

I'll agree that as a whole security on the net is lousy, but drastic measures like this are an equally lousy method of dealing with it. No one should be surprised when laws get passed that limit freedoms on the internet in response to these actions. Cause and effect.
Here's the Al Jazeera's video coverage of how the DIY weapons are made: http://english.aljazeera.net/video/africa/2011/06/2011614112...
My personal experience shows that it's best to have no bike paths at all. I typically only use my bicycle as means of transportation here (in Vienna) and the only accidents that I had so far were at locations where the bike path crosses a street. This is also confirmed by statistics.

Compared to this, on streets I almost never have any risky situations - even on busy multilane streets. Cars see you earlier, because you ride on the same street as they do. You don't appear unexpected (for car drivers) because you overtake on the left side like everyone else. The right of way is clear, as there are no exceptions as in the case of bike paths.

In cities such as Copenhagen and Amsterdam bike paths have an advantage, because you are faster (no traffic jams) and because car drivers expect bicycles at crossings due to the high amount of bicycles. In cities such as Vienna where the amount of cyclists is relatively low most car drivers don't expect to encounter them - so even if you have the right of way on a bike path they just ignore it.
How is this even possible? In my very first website I built from scratch using PHP, I paid attention to the possibility of this. I can't say for certain that I fully protected against it, but I tried. That little trick would not have worked.

How is it that a bank, of all places, pays money for a web infrastructure, and manages to employ people who don't even think about the most basic of attacks? I've been changing info in URLs since I started using the internet.
Can Google Search Really Save Me Time?
For those that want to know more about the film... check out our kickstarter page:

http://www.kickstarter.com/projects/akorn/killswitch-a-docum...

(Our 5 minute trailer is posted there - and you can contribute to production if you would like to - we've raised over $14,000 in two weeks thanks friends passing this along)

You can read our treatment on our official website:
www.killswitchthefilm.com

And if you want to see the film projects we've worked on in the past go here:
www.akorn.tv

Thanks everyone for taking interest. We have no advertising budget, so any interest we generate is word of mouth.
Who exactly designed a system which allows a single laptop to store this many records at once? I could see couple of dozen or so at a time, even a hundred, if a doctor wants to download all his patient records for the week. But 8 million on one laptop? I don't even know what to say.
Silly comparison. There is no reason for people to wear a full-face helmet in public. There may be a reason for people to know self defense though, which is why some martial arts clubs go out on the town with the specific goal of beating someone up: to remind that person and everyone else sees it that they need to know how to defend themselves.

Sure, life would be grand if no one ever broke into computers. Security is expensive and not remotely fun. But there will always be someone out there motivated to break in. It's good that these guys are doing it publicly. The more common and nasty ones keep their mouths shut and use our machines to do bad things.

EDIT: Made the text a bit clearer.
In February 18, 2011 HN'ers believe there's a bubble http://news.ycombinator.com/item?id=2231352 Yes, we're in a bubble (628 points) No, we're not in a bubble (246 points) [PG: refutes bubble]

In Feb 11, 2011 Eric Schmidt: "Clear Signs of bubble" http://vator.tv/news/2011-02-11-eric-schmidt-clear-signs-of-...

In Mar 1, 2011 Mike Maples says "Theres a bubble" http://techcrunch.com/2011/03/01/angel-turned-vc-mike-maples...

In May 26, 2011 NPR asked: "In LinkedIn IPO, Hints Of Another Tech Bubble?" http://www.npr.org/2011/05/26/136655334/in-linkedin-ipo-hint...

The bubble doesn't need to Pop for the bubble to exist. Seems like some people will only concede its a bubble until it blows up. Its very similar convos during real-estate bubble. One thing is for sure; theres money to be made now; rather than later.
I think you would be surprised by how many theaters would find this useful and will pay you to have this in their theaters.

It improves the service and gives them Jmp feedback.

Go talk to some movie theaters.

Also don't over engineer it. A simple wa to say that the sound isn't working for a particular movie at a particular movie theater should be a good start.

-vivek
I know that a company called VentraCor was testing pulseless artificial hearts in sheep at least eight years ago.

I just went looking for their website to post here, but apparently they've shut down. On further googling it turns out that they shut down in 2008 when three out of their 188 human test subjects dropped dead due to their hearts accidentally coming unplugged. Whoops.
StormDriver Alpha: Exclusive First Preview
StormDriver is now in the internal alpha stage. It exists, it works and, what's most important, it's a lot of fun - so read on to find out what we've lined up for you!
Or if Americans discovered that the Chinese had interception equipment in critical telecom switching stations throughout the world that allowed them to divert America's commercial and governmental communications to Chinese supercomputers for decryption.

Based on the way the American IC reacts, we already believe they do this quite broadly. It's called Huawei Technologies Co. Ltd. http://www.huawei.com/en/
LulzSec's activities are about as entertaining to me as watching third graders write "poop" on the black board when the teacher isn't watching.

That said, I wish there were a "No" response other than "Hacking into companies and launching DDoS attacks is no laughing matter." The writers of the article seem to be going out of their way to match the stereotype of stodgy old corporate types shaking their fists at the young ones.
From the descriptions on the images, it seems like the rebels captured a lot of ammo from Libyan army warehouses and armories.
Mildly. It would be more amusing if it wasn't the same "joke" we've all been hearing for the last ten years. Remember g00ns? zf0? o&e? myg0t? r3m? ~el8? At least this one isn't in l33tspeak.

I guess the funny part is that it still works...
Or: the gatekeepers are just as vulnerable as anyone else, so maybe we shouldn't give them the key.
A security guy weighs in on it here:

http://idunno.org/archive/2011/06/14/citibank-hacked-ndash-d...

"This was not sophisticated or ingenious, as reported, this was boringly simple. ... OWASP has had Insecure Direct Object references on it’s Top 10 list for years. It’s in the SDL Threat Modeling tool. Any security firm worth its salt checks for this"

Yes, there's a good description of this kind of trivial "hack" in the Open Web Application Security Project Top 10: https://www.owasp.org/index.php/Top_10_2010-A4
"Gawker media blog spam".

Visit http://www.nytimes.com/2011/06/14/technology/14security.html... instead
Nice idea, but people would scream seeing those goto's.
I used to do those in a macro/function like,

#define memalloc(x,y) { x=0;if(x=malloc(y)){}else{printf("error:no mem");} }
WordPress display custom field value of previous and next post
Doesn't that go against all we have learned in CS? Early optimization being the root of all evil. And don't optimize what you think will be slow, but what you have measured to be slow?
Thanks thats exactly what i have been looking for.
That's worse than SQL injection. Didn't they build ACL?
Real Time Startup Financial Forecasting
You'll surely enjoy the quote from the linked article:

=======

The method is seemingly simple, but the fact that the thieves knew to focus on this particular vulnerability marks the Citigroup attack as especially ingenious, security experts said.

=======

Sorry but no, this isn't ingenious - it's really the basics!!!
I really hope that the reporter who wrote the NYT article either misunderstood the facts, or talked to an ignorant "expert".
The French Revolution was rather more ideological than this revolution looks. And besides, the French had been making a regular habit of rampaging through Europe at that point, so the revolution just let them do it more intelligently and enthusiastically.
Generally, that will still be far smaller than copying every object pointed to on the stack.
Diaspora had this problem when they first released their software, and it was written in Rails, a modern framework http://www.kalzumeus.com/2010/09/22/security-lessons-learned...
If you use reference counting for a full tree hierarchy of objects, then you have to expect that.

The point is that sometimes in C or C++ you have a small, flat selection of objects that you want to dynamically create and destroy, whilst everything else falls into fairly stable patterns than can easily be handled manually.

An example from my field; computer games: It's quite common for game engines to use reference counting for resources such as textures. These days, it is very common for textures to be streamed into and out of memory during gameplay, either because it's a large game-world with whole sections being streamed, or simply for LoD (level-of-detail) reasons - objects in the distance have low resolution textures, when they get closer they become higher resolution.

To handle this, it's common to have a pool of textures that use reference counting, and every model/renderable that uses a particular texture increments or decrements the refcount as appropriate. The texture itself is just a flat blob of data, so when a texture is freed, there's no worry of large cascading frees.

This approach is very simple and easy to implement when you only want it on a small selection of the program.
I have done some Hadoop in the past on Amazons EC2.. definitely useful data mining tools, but Im looking more for concepts and approaches
Amusing? Sort of.

Scary? Absolutely.

I knew security was weak out there, but they are hitting WAY too many sites of major companies. I can't believe they were all this vulnerable.

In the end, I think they are using the media to teach the entire world a lesson about security. I'd like to think that's their goal, but I'm pretty sure it really is for the Lulz.
It has been appended to my reading list. thanks
I don't find their DDoS activities against targets like Minecraft and EVE Online amusing at all.
A conversation with my PS3
I work for a telco, and have never seen interest in a prerealease phone like that for the Galaxy S 2, other than for the iPhone obviously. They made an excellent name with the original Galaxy S, and are following it up strongly.
While I love my Galaxy S, I wish things wouldn't change quite so fast. It seems like every time I get a gadget, the new version comes out 3 months later and tempts me to spend more money.

Thankfully, my Galaxy S is still doing everything I want, so it's not -too- tempting.
I've had it more than once that a driver tries to deliberately drive me of the road. In one case where I stopped and wanted to wait until the driver is gone, he stopped, got out of the car, and wanted to start a fight. The reason in that case was that he was angry, as I overtook the waiting cars at a red light.

That's one of the reasons why I typically have a heavy u-lock and a pepper spray with me when cycling.
Well, there's a bit but its not like they're firing 120mm cannons from those things. And really, the US fires missiles from the backs of trucks all the time.

http://en.wikipedia.org/wiki/File:Hmmwv-036.jpg
This is like the first thing you learn in web app security (defender or attacker) and you don't even need to write script a tool such as http://code.google.com/p/fm-fsf/ will scrape the data quickly.

Even though it's insanely easy to spot and exploit it's also easy to miss it while coding. But any decent pen-tester will find it. Regardless, unacceptable for a finance company.
What's worse: every customers ID in the database was stored in the URL or that there was no ACL to test against? If a user is logged in, you have their account ID stored in a session. If they navigate to a page that their account ID can't see (like another person's account), then kick them out. Astoundingly simple.
DoAT: How one company is re-imagining mobile search - w co-founder Ami Ben David
I may be wrong, but I think that this is theoretically possible using LLVM. If you just translate the source into LLVM IR without any optimisation, then all of that can be left until runtime if necessary, which is pretty neat.

Though I'm not sure if languages impose restrictions on the IR that may hinder this, I know that GHC had to implement its own calling convention for LLVM to make it run efficiently. There's also the fact that you need all of the program to be translated into the IR; using GHC as an example again, this is a problem because the runtime system is written in C.

I shall have to do more reading about AS/400 I think, sounds interesting, especially the easy CISC -> RISC transition.
here are also some lecture notes: http://infolab.stanford.edu/~ullman/mining/mining.html
Agile = security
Polls are never very good for capturing nuance. I was looking for the "Some of what they do is amusing, and they highlight the vulnerable nature of the systems we take for granted but they are certainly breaking the law and often overstepping what I would consider appropriate" option.