skysight-inc/HackerNews huggingface dataset:
To be frank your point is bordering on meaningless, you've jumped from anyone can shoot someone to it's all a failure of the computer industry.

I find the first assertion idiotic and the last begging the question.

patio11 made a similar point about armed robbery, I mean seriously, what is wrong with you?

It's fucking stupid. If someone gets shot a lot of cops will turn up within minutes. They'll devote a lot of manpower to it. In some of your states the perpetrator will be executed.

There's a response. There's a massive immediate manhunt. Will people stop idiotically claiming that a serious, sickening crime is anything like hacking someone's server please?

And to get back on topic, if someone gets hacked it's brushed under the carpet if possible if it's even noticed. People aren't even checking if it's happened.

Where's the abnormal activity alert built into windows or linux? Or Apache or IIS?
excatly :) this does not works this way, sorry.
"In hot code" means "in code that comprises a substantial part of your execution". Presumably if you run try-catch or eval in non-hot code, it still runs slow, but not slow enough to make your whole program slow.

I wondered too if they had more to say about the usefulness of some of the trace parameters. I am pretty sure they refer to what the profiler traces (and logs), but I don't know whether they got any usefulness out of them.
I've been kept out of Sony and all this by never consuming from them.

this is the epitome of capitalism. your comment was spot on until the edit.

last sony thing I paid was a cassette walkman. then after betamax, minidisc, memory stick, etc, etc, etc... you have to be a sucker to support them. sad but true.

anyway, by not consuming from a company with low market ethic, I also avoided a company with bad network security ethic. they would be hacked? could be. but if nintendo is hacked, I can at least just change my password not my name and credit card.

for similar reasons I also avoid apple, j&j, and a few others.
Ask HN: Can you forward my resume in your company?
I lost after 3rd round of Google today but thats not the end of the world and I am not giving up on looking for job opportunities. I haven't heard back from few of the other companies that I applied. I am also looking at options in 'who is hiring' thread of HN. I post it here to know if anybody of you is interested to consider me as a potential candidate for interview in your company and could forward my resume may be ?. Currently, I work on a research funded project called VIVO Semantic network, at Cornell University, NY. I have done Masters in ECE( graduated in dec 2009), worked in Java, interested in search engines and topics like IR and Semantic Web. Total experience is around 3 yrs ( 2 yrs before MS on a software maintenance project + 1.5 yrs on VIVO development at Cornell). I would require H1B to work.

email: anupsatishsawant@gmail.com
http://www.iconfinder.com is a good place to start.
Thank you. That really means a lot to me.
> Lulzsec isn't even calling their shots. They're casting around for security issues widely without rhyme or reason. You're supposed to lock your front door, but if you go through a neighborhood and try everyone's front doors you'll always find one that's left open. Now imagine your neighborhood is the world. It's literally impossible that you'll ever run out of victims.

And that is why this stuff is easily avoidable. Much like a lock on your door isn't going to stop a determined thief from breaking in, simple protections won't stop a determined attacker from breaking into your site. But in an age where adding CSRF tokens is simple, SQLi protection is nearly guaranteed by using an ORM and/or parameterized queries, XSS is largely mitigated by filtering on templates, etc, it's not that hard to remove the low-hanging fruit from your site. Even with these, you will still have vulnerabilities, but a drive-by attack like those executed by Lulzsec will not work.

> But taken in aggregate, it's not all their 30,000,000 individual failures, it's a failure of the computer industry that has long pushed speed and ease over safety and continues to sweep the current security environment under the rug.

It's easier than ever to write secure code without even trying. If you follow, say, a basic Django tutorial, you won't be vulnerable to XSS and SQLi unless you color outside the lines. Add in CSRF middleware, and suddenly CSRF attacks (and a large amount of reflected XSS with them) are mitigated. These are not difficult things, and the software industry is getting better and better about making secure coding the rule, not the exception.
Nice idea, but what does this actually do for you? If you translate the first example to straight jQuery, it's shorter, and you don't need to know about 'whenever' to figure out what's going on. And even if you were familiar with 'whenever', you'd have to look at three different places to understand what the code is _actually_ doing.

What's cool, I think, is the chaining of predicates. That's useful in general, and should be a totally different library.
Kids fined $500 for operating lemonade stand without permit
I doubt it has the same capabilities as an MRI.
The solution to networking problems lies in food. Specifically, lunch.
Apple Broadens Claims in Samsung Patent Battle
Interesting.
Hints about how can/should be studied?
Maybe he just wants to move on to new opportunities. It happens, I wouldn't look too hard into it. Maybe he thinks his job there is now "done" and wants tot do something else.

I never attribute to malice what can be just plain simple, "I've done all I set out to do here and more" feelings.
First I have to clarify that nothing I did was single handed. I couldn't possibly have done what I did without the support of the awesomeness that was the rest of team reddit.

As for hipmunk, I think they already have too much talent, since they have the rest of reddit. :)
OP: "Same problem as Indic fonts."
It's worth mentioning that MySQL (iirc) does support sort-merge joins, which aren't mentioned by this article. So it's not a case of (index) nested loops joins or nothing. While hash joins are usually significantly faster than sort-merge, they have a variety of similar characteristics, and don't suffer from the mash-the-b-tree issue that index nested loops do. Overall this makes me doubt that the lack of hash joins is the fundamental reason some people think joins are slow.
What they should do is apply these sort of algorithms to detect sock puppets and "personas" used by powerful interests to astroturf the internet.
Someone please give lulzsec a job...
Personally I think lulz security to be paid by governments to let companies be aware and advise to fix security holes, as online security is a MASSIVE issue of national security. Rather than be arrested and put away.

I would rather they hack for good than bad. After all their are non public hacker groups.

I mean look at the Citi bank hack... I know that is security 101, but COME ON.

Either that, or force the general public to use an openID run by a hack proof source.

Or is this just me?
And quite trivial to make more money preying on the weak than being good.
Exactly. To treat someone who streamed The Hangover 2 with more strict criminal repercussions than someone who committed attempted rape seems really really stupid. Also, an I the only one who wishes that the government would hand out some of the 5 year felony prison sentences to the bankers who have been committing fraud the last couple of years?
Failure and the Liberal Arts
Make a decision
Beornottobe supports decision-making. If you have a dilemma, or you can not take a decision on beornottobe.net ask a question and see what is the answer to your question
It's pretty embarrassing that none of these big corporations (PBS, Sony) can't even take some time to test for security flaws considering that SQL injection like you mentioned is easy to test for.
that's one down. next up: world hunger, then the warrior robot race.
"And he asked a question. And I was like, I’m sorry did you say you were Tom Furness? And he said yes. I said, then I would love to answer your question, but first, will you have lunch with me tomorrow? And there’s a lot in that little moment. There’s a lot of humility, but also asking a person where he can’t possibly say no."

Awful advice. Not only does it not come across as humble, it comes across as cheap flattery and obnoxious insistence on something you don't deserve.

The initial moments after meeting someone are the moments when that person has the least interest in doing anything for you (next to the point before that, when you haven't met them at all). They lose almost nothing by making up some excuse not to do what you ask of them.

It's only after they've gotten to know you a bit, and after you've proven that you're interesting and valuable in some way, that they'll have a bit more incentive to do you a favor.
Can this be made to work in Opera?
This is what I mean when I say that bad conversation drives out good.
When it was released 224 days ago (http://news.ycombinator.com/item?id=1870473), I remember this "mimics your brain" idea but it never bothered me. I did not feel invited to compare it to mind-mapping products. I took Workflowy as a nice dynamic lists software. I like it because of that. It really helps. It was made with the principle that Almost everything you create on Google Docs is a list, so they made Workflowy[1].

I also find mind-mapping studies fascinating. Many times I find myself starting to write in the middle of a sheet of paper and then making connections. I know this is not Workflowy. Can you give some good suggestions on mind-mapping software?

[1] TechCrunch article: http://techcrunch.com/2010/11/04/workflow/
In that case this will provide some good market research for you.
You are being ironic. It actually is possible to communicate securely over an insecure medium, and not all the internet's infrastructure is in the USA. Am I right?
Really? Because the NSA could be doing it right now and you wouldn't have a clue. If someone steals your password though, chances are you'll notice.
OpenID is not a trust system.
thanks aristus.... can u suggest some other definition so that we can make a complete software that can be completed within a 6 month...
And let me tell you how awkward that was knowing that I was going to post this today! And not being able to say anything.
I don't see that analogy working very well. It's not about shooting single people. It's about banks building their vaults using cardboard and paper, instead of concrete and steel. It's just not that smart.
I admit I painted an overly simplified, pre-1990's picture. Even the BBC has famously had to adopt a more "American" model of advertisers allowing more inroads by mega-corporations, and they've partnered with several American corporations.

Sarkozy is notorious for his overt racist statements and policies, so he will be no friend to democracy. I just feel sorry for his beautiful, talented wife, because he really is a narcissist.

Right wing Berlusconi built his media empire on trash, titilating television and is famous for his teenage lovers.

However, being ultra-/ far-right wing in Europe is famously understood to be well to the left of Liberal Democrats. Our actual "moderate" right wing would be illegal in Europe, since they had to deal with fascism, so won't countenance anything that vicious.
Not directly related, but this is a great site to peruse. Great code examples and a great perspective on database performance.
Raw Deal: Because I lost a bet I went raw vegan for a week
Why Search Crawlers Sometimes Ask for URLs That Never Were Part of Your Site
Of course, botnets or LOIC would completely bypass this defense...
I know it isn't a trust system, but some kind of similar solution
That's almost the textbook definition:

a person, as a psychopathic personality, whose behavior is antisocial and who lacks a sense of moral responsibility or social conscience.
Watch,Transformers 3,Online,Megavideo
Watch,Transformers 3,Online,Megavideo
the writing, not as direct proof that the policy statements. No symbolism, allegory. Vaughn movie is strongest when it stays with age, when he becomes her feel almost commonplace.
I don't think this has anything to do with QA or testing. Just another way to write javascript inspired by the cucumber DSL.
Funny, all the stats I've seen show a completely different trend. Example:

http://www.netmarketshare.com/2010/07/01/iOS-vs-Android-in-B...

UPDATE: Ahh, I see the problem. You linked to a OS market share graph, not a browsing market share. I didn't dispute there are more Android devices, I said the iOS devices are used to browse the web much more than the Android devices, even if they are fewer. Also, not including iPad share by StatCounter is silly. The iPad's browsing share is quite large.
"see the latest fear mongering about webgl"

Can't be total BS, John Carmack agrees with them - http://twitter.com/#!/ID_AA_Carmack/status/81732190949486592
There's a political complaint about the lack of semi colons in the script and its subsequent breakage in minification. Otherwise, I like it.

From a QA perspective, it's been my experience that no matter how much you simplify the DSL for the business user, it's always a pain to get them up and running and if you have a TDD point of view, you'll be much more successful, especially when engaging in a project that is very DOM-manipulation heavy.
Given the NSA's charter, I wouldn't be surprised if most of their data interception mechanism are focused on non-US internet traffic.
Conway's Game of Life in SQL
You let cool reverse engineer you.
as in 1 internet wide login
Watching 'Jersey Shore' might make you dumber, study suggests
Jedber will be missed.
Was It Something I Wrote?
> this is the epitome of capitalism

Sure in your case, of an informed technology enthusiast. The average customer, however, is not aware of shoddy security practices endangering his data. Which novadays means his personal finances, too. Also, the average decision maker at the companies in question is not aware of your protest, either; it takes press attention to make him aware.

This is heavy information disparity; the market self-regulation cannot happen in such case. The customers simply cannot make informed (!) choices, nor put pressure on the website operators. Curiously enough, many of the decisionmakers at the companies may also be unaware of seriousness of the risks just as well.

LulzSec steps in. By grabbing headlines they aim to inform the widest audience of what goes on, and force press to take on the hard subject. Let's hope the press does the job well, so capitalism can do its at last.
True, but if this research turns out to be as lucrative as one might imagine then I bet firms like emotiv will come out will compatible models pretty quickly.
In a way, the real question isn't "How do apps written for more powerful devices perform?", but "How will apps written specifically for this device perform?" Is the hardware merely underpower relative to current Android apps, or is the device fundamentally full of large amounts of latency in many subsystems?
People don't start worrying until something actually happens. The general public is deluded when it comes to internet security, and Lulzsec exposed the internet's vulnerability. Yes, they did break the law, but they had the right intentions nonetheless.
Unecessary...
"AOL paid us as “independent contractors,"

AOL is treading a fine, fine line there.

The IRS defines an independent contractor as:

"The general rule is that an individual is an independent contractor if the payer has the right to control or direct only the result of the work and not what will be done and how it will be done."

This is a notoriously ambiguous definition but with AOL's rigorous guidelines, deadlines, and instructions it sure seems like this isn't an "independent" work force.

http://www.irs.gov/businesses/small/article/0,,id=179115,00....
I don't know, it could be cool as a way to put the scripting of the user interface into a language that less technical people could understand and experiment with. Hopefully you aren't writing thousands of pages of this stuff (instead you should find a way to put together abstractions that reduce the amount of code that has to be written at this level) but it would be great to have a lot of the scripting of a UI be 10 or 30 or 100 pages of stuff that reads just like English.

That's my thought, anyway.
Sorry, my bad. I should have explained it better.

What I meant was: The whole 'in hot code' part of the slides didn't make sense to me, because it's something like a list of (unexplained) statements. I know what 'hot code' refers to, I just don't particularly like to accept things as facts without a minimum of explanation. Probably the author is dead on and I'm sure he knows a lot more about the technology than I do, but 'don't use X, use Y' or 'avoid Z' is something that should be qualified.

Probably the talk did that.
The universal status indicator
I agree, also this: http://imgur.com/tTQQ5
He truly is bad ass.
What Tumblr's Success Means For The Future Of Blogs, Twitter
Hmm... 502 Bad Gateway. Can't wait to see this!
But how is this affected by sexual orientation? Now I don't actually know about this mind, but sometimes I drink in a bar that is a local hotspot for lesbians, and there are definitely some that are more masculine and some that are more feminine (clothes, haircut, choice of drink, etc). Whether that's just fashion or carries over to writing too I don't know.
Ask HN: How do you name your (information) stuff?
Specifically, how to you tag or categorize your information?

You can tag/label your email, your bookmarks, your files (by being in a named directory), your papers (drawer labels and folder labels).

Do you bother to categorize at all, or do you just dump stuff in directories and drawers, and don't tag your bookmarks, relying on search?

If you tag/categorize, do you use a few broad categories, or do you use a lot of small, fine categories?

Do you use your own categories, or do you base your categories on some existing categorization?
10,000 years from now, I'm going to remind you that you said that, and we'll both think it was pretty funny.
Great. IMF is warning global governments that "austerity" is needed. Is this surprising that Dominique Strauss-Kahn (a front-runner for the socialist party nomination in France) having resigned from IMF, and now the IMF is tacking to the right on austerity?

The root cause isn't government budgets but the banksters who caused all the problems with shady ratings and shell-games masking bad debts as AAA rated investments.

They got off scot-free and now are shaking down the governments asking for more money... at some point, this is likely to cause a world economic implosion.
When it supports the Webkit Audio APIs, it will work. But it might be too slow on a phone. Even on a laptop it is a serious CPU hog.
From someone that spent years sysadmining very high traffic systems: Well done sir. Well done.

Been using Reddit since launch. Somewhat nervous that the new people running Reddit will get overrun by the corporate overlords now that they see the "hockey stick" traffic charts.

I can see some bean counter doing the math:

Slap 4 teeth whitening ads on every page
= 4 ad impressions
* 1.2 billion page views
= 4.8 billion ad impressions
* $0.30 - $0.50 eCPM
= $17 - $28 million/year.
Maybe this is an idealistic thought, but I think this trend of writing SEO laden garbage is what will finally make quality journalism behind paywalls work. People will eventually be driven to pay for decent content, unable to put up with irrelevant half baked articles churned out at breakneck pace.
There are plenty of books with webkit animations already in the bookstore.
Kinect hackers are changing the future of robotics
I'm setting up a new site and noticed that within seconds of starting the server I was getting hits in the log like:

67.195.112.231 - - [2011-06-17 18:49:37] "GET /SlurpConfirm404/starsong/pro-road.htm HTTP/1.0" 404 18 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)"
67.195.115.174 - - [2011-06-17 16:53:30] "GET /SlurpConfirm404/drugstore.htm HTTP/1.0" 404 18 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)"

My initial thought was that I was getting crawled by a spam bot masquerading as a Yahoo crawler, but after a bit of googling I found a couple of blogs guessing on the nature of the strange requests.

My best guess is that they're using the above test to check if your server is gladly responding even the most obscure request, thus making it look like a spider trap/content farm.
I haven't read the law, but how does it now? You're streaming Lady Gaga's "Born This Way" while your cat is attacking a box, it gets 100 views within six months. Clearly the song is worth more than $5000.
Scvngr's response to "Wine-y" customer
"potentially putting people in jail for embedding YouTube videos or just putting up YouTube lip synching videos. "

Sounds like FUD

If you read the amendment here http://thomas.gov/cgi-bin/query/z?c112:S.978:

It updates this http://www.law.cornell.edu/uscode/718/usc_sec_18_00002319---...

Which references this http://www.law.cornell.edu/uscode/html/uscode17/usc_sec_17_0...

which then says the following

(A) for purposes of commercial advantage or private financial gain;

(B) by the reproduction or distribution, including by electronic means, during any 180–day period, of 1 or more copies or phonorecords of 1 or more copyrighted works, which have a total retail value of more than $1,000; or

(C) by the distribution of a work being prepared for commercial distribution, by making it available on a computer network accessible to members of the public, if such person knew or should have known that the work was intended for commercial distribution.

Basically, if you don't profit from it, you're cool so YouTube is safe.
That's good news for dolphins, they must be willing to read news.ycombinator.com, first thing they can do is
create their own version of fb.
I kind of wonder about the relevance of Spotify in the current market - with locker offerings from Google and Amazon (and forthcoming from Apple), it seems like the need for services like Spotify (for me, at least) is dwindling.

Spotify was a great idea before the emergence of music lockers - if I wanted access to music on the go, I could use a streaming service. But now that I can use a locker service to stream my own music library, I'm far less likely to pay for a Spotify subscription.

Case in point - I would have instantly sprung for a Spotify subscription two or three years ago had it been available in the States, but now that I'm using Google Music (albeit for free for now), there is no incentive for me to switch to Spotify as anything more than a semi-casual user.
Like reverse engineering anything else, it boils down to observation.

Find cool people.
Observe cool people.
Discover patterns.

Then, it's simply a matter of implementing those patterns.

You'll discover in the case of "cool" people, depending on the type of cool the patterns will be vastly different.

In one such instance, conformity is an underlying pattern. In others, its individuality. IE, school cool versus industry cool.
Netflix sued for lack of captions on streaming videos
Maybe some details about things like what and especially where ?

Best of luck !
the gatekeeper has arrived to bring down the hammer of regimes of discipline in the guise of liberal "openness"...

since when is the merging of mega-corporate mergers of media conglomerates "political gossip" and not just "news"? And how regional can it be dismissed as, when US media domination is global in reach and scope? This is super relevant to an open media and a neutral net.

Folks outside the US are not as insular as Americans and don't struggle with centuries of "isolationism" so are far more interested (and frankly far more aware) of issues in American politics and economy, understanding that it will both indirectly and directly affect them...

or perhaps policing the internet is more important.