skysight-inc/HackerNews huggingface dataset:
Yeah. I don't find them funny at all (well, poptart cat on PBS's site was kinda funny) and I don't agree with DDoSing because it's a vulnerability of the Net at large, not a specific failure of practice of the target (normally) - but I do think it's important to highlight the half-assery of a lot of highly paid security professionals.

Didn't care for this poll.
As a consumer, I wouldn't pay to download such an app. This is just my opinion and it may or may not be reflective of your market [1].

It seems like selling the backend tech / service to the movie theaters is the way to, but can you create enough of a value proposition to charge them enough money (assuming a re-occuring basis) each month to stay in business?

Also, I'm not entirely familiar with how movie theaters operate, but it seems like a vast majority are controlled by a relatively low number of chains. If the individual theaters are run on a franchise model, it may be easier to penetrate. But if they're all corporate controlled, selling seems would be a much larger challenge.

[1] I've also never had too bad of an experience at the movies. Aside from some guy who was eating popcorn obnoxiously during "The Dark Knight", I can't think of anytime I've really been annoyed with someone at the theater.
Exactly. It's not intended to be a "street mark" but an attention-getter. Bright green mess on the road? Where's that coming from? Yikes! A flock of bikes! (I did not intend to rhyme ... :-/ )
A reason to hate Pixar
Was it actually just a DDoS attack? I don't consider that a security vulnerability in the slightest. It's a vulnerability, sure. An availability vulnerability I guess.
Of course. If anyone wants to get in contact, share thoughts, feedback on stories, I'm on iain.mackenzie@bbc.co.uk Just like Points of View, I can't promise to reply to everything... but I'll always take a look and happy to do Q&A.
I don't see that that would be an issue. As you say, limited users and fine-tuning the brand should not be deleterious to the user perception. Of course once you get more traction every change to the branding should be validated. Good luck!
Seriously how do people stay in their jobs allowing crap like this to happen? The CIO or CTO at Citi should get the boot. Until companies like this and Sony start making examples of people, this kind of sloppiness that gives our industry a bad name will continue.
Yeah. When that first report said 'experts' said how hard it would be to have predicted and prevented this, I choked. Amazingly lame.
exactly. I know its not hard, its just two commands.
But I just cant trust a os whos browser I cant trust.

That applies somehow to windows. I think ie is bad, so is windows.

maybe we should all switch to ONE browser, which has preferences like "browser-flavor":["google","microsoft","mozilla"]...
I really don't see this happening "soon" as the article puts it.

It won't be in 11.10. Almost certainly they won't put it in 12.04 as it's a LTS release. So the earliest would be 12.10 (Oct 2012).

I also doubt it is Chrome and not Chromium.
Ignore Startup History at Your Peril
Southern Ontario dips down to just north of PA/Ohio and next to Detroit:
http://en.wikipedia.org/wiki/Geography_of_Canada#Extreme_poi...

I'm nitpicking, but unless I'm misunderstanding you, what you're saying about Southern Ontario having weather like DC in July is a little off. Average high July DC is 88F. Average high July Detroit (close to S Ont) is 83F. It's similar, but 5F is definitely a difference. Sharing the facts because I find this stuff interesting!

Opinion: DC often feels hotter than it actually is due to the high humidity, which gets worse the farther down the east coast you go. I've never been to Southern Ontario in July though.

DC:
http://www.weather.com/weather/wxclimatology/monthly/graph/U...

Detroit:
http://www.weather.com/weather/wxclimatology/monthly/graph/U...
Microsoft mostly marketed those to businesses, though -- Apple is marketing towards their base, viz. recreational computer users.
What exactly is Lulzsec protesting?
For a minimal code site, the interface is not very minimal.
This is just scare mongering nonsense. WSJ just keeps getting better and better.
if you want to go to a link called "14 comments", start with typing "14".
Ghostrider Logon Screen For XP
ghost rider spirit of vengeance logon screen, logon screen, logon screen changer, ghost rider, logon studio, logonxp, change xp logon screen, xp logon, fire logon screen, bike logon screen, ghost rider movie logon screen
Delhi University colleges announce 100% cut-off [I aint kidding]
Mathscript: Python-based symbolic computing for Android
Is location really the key piece of data differentiating "pictures from Bob's wedding" from "the universe of pictures", though? I would think some concept of tagging that went beyond mere location would be far more useful.

80% of the time (walking down the street, sitting in my office, etc.), I don't care about pictures that were taken around me. For the 1% of the time that I DO care, I can probably easily name the thing that I want to see pictures of. Location is perhaps a handy filter for "tags that might be important to me", but it's hardly the sole determiner, or even a major factor, in whether any given picture will be one that's interesting to me.
Chromium is in Fedora 15 and Debian.
Yesterday my mother wanted to buy a LED TV, so I looked for the reviews at the consumers organization magazine and found the best ones in all categories to be Samsung.

They also bought liquavista and have very good OLED screens for the future 5 years.

Given that Nokia is years away from launching a phone and they have to start over from scratch, it is going to be hard from them to get market share.
As soon as GS II came out, I bought a Galaxy S, the first version -- that's how I like my phones, kick-ass and cheap.

I'll probably change it anyway in a year or two, so why bother paying more for the newer version. I also have an iPhone 3GS, and as long as the battery doesn't die on me and as long the latest iOS works, I won't upgrade.
I just checked out this Samsung Series 9 ($1618):

http://www.amazon.com/gp/product/B004NF3Z82/ref=as_li_ss_tl?...

This one has 13.3" LED display, 128GB SSD, sandy-bridge dual core 1.4 GHz i5, 4GB ram, WiMax 4G support, and a USB 3.0 port.

It is 2.88 lbs and .62 inches thick.

The MacBook Air 13" model has a 1.86Ghz processor, but a Core 2 Duo, and with 4GB ram and a 128GB SSD, it is $1399.

http://store.apple.com/us/browse/home/shop_mac/family/macboo...

It weighs more at 2.9lbs and is .68 inches thick at the hinge area. The front is only .11 inches thick.

Minus the ability to develop for iOS, the $200 difference seems pretty fair.
There is an analogy: Locksporting. Groups like Toool and individuals across the world pick and design locks as a hobby, and have shown flaws in high-security designs like Medeco that were later corrected.
How to become virtuous and save more
This is totally misleading. All Mark said is that it's possible that Chrome would replace Firefox if the community decides that, but even then it wouldn't happen until 12.10 (more than a year away) at the earliest.

This is no different from the discussions that happen at every single UDS to review the default applications. (Last UDS we also discussed changing from Evolution to Thunderbird and the possibility of dropping LibreOffice from the CD entirely. The Evolution/Thunderbird change is far more likely to happen this cycle than the Firefox/Chrome one, and even it is iffy right now.)

It's irresponsible to characterize this as a done deal when it's emphatically not. And "soon" is certainly relative here anyway -- it's at least three releases away before this would even be considered.
I'm not sure if Windows Live Mesh is their latest cloud offering or the one before that, or whatever, but Windows Live Mesh certainly is marketed towards regular consumers:

http://explore.live.com/windows-live-mesh
Propping Up Old Business Models Is Bad For The Economy And Bad For Innovation
It's kind of like having MATLAB or Mathematica (or Sage, really) on your phone. I'm not yet sure if it has any practical utility for me, but I know I'm going to have some fun with it, and I'm willing to bet that plenty of people will find it to be immensely useful.
I find it amusing that the main press somehow highlights this in the form of DDOS attacks, and SQL injection rather than the more scary security vulns.. for example what happens when you give almost a million security card carrying clearance people access to all US state department cables..

The scariest security vulns are not technical they are human and institution based.
The wallet is a database file with all the private keys of the bitcoin addresses (ECDSA keys) in it. These private keys are needed to spend the coins in the addresses.

The private keys could be encrypted with a password, but I'm not sure how you would use One Time Passwords here, as there is no client/server.
You cant really compare this with a bank like citygroup.
Security is everything the should care about in the first place.
They have to protect your money and nobody really cares about fancy features when they just want to wire some money, everything should just be rock solid.

I would love to get more information about this breach it sounds to simple to be true.
Good thing our politicians are listening and are prepared to clamp down hard on illegal filesharing.
Teach, don't snark. Snarking only teaches that the teacher is a snark.
Giter8 - A Scala command line tool for templates published to github
Just as a side note: we're planning to launch our app: http://www.jobbrew.com soon.

Our aim is to help freelancers collaborate, manage their projects and reach out for help. It will have a Q&A app, a personalized job board + lead management.
The same way Google releases iPhone version of its apps before the Android version? :)
Okay, Okay, Maybe Netflix Is a Problem for Cable After All
Hasn't Dick Cheney had no pulse for a while now?

http://en.wikipedia.org/wiki/Dick_cheney#Health_problems
Developing a Diversified SEO Link Portfolio
When it matters, I'm usually keeping a pool of de-referenced objects around anyway, so I can just reinitialize rather than allocate... memory is explicitly managed, not blindly RCed/GCed.
I don't think it is amusing.

I think it is a shame that it came to this. If these attacks required significant sophistication, that would be one thing. If these sites were mom-and-pop shops with low expectations for security, that would be another. (no offense to those moms and pops who have it together ;) )

How many years have we been blowing the trumpet for some rigor in security practices? I've lost track of how many times I've been overridden in the name of expediency and "no one would do that".

It isn't funny that thousands of innocent people are put at risk just to get past the false claims and denials put out by people who supposedly should know better.
Dolby Sues RIM Over Patent Infringement, Aims To Halt Sales
Haven't BlackBerry device sales already halted? ;)<p>As if RIM isn't having enough problems in the market already. This is just mean.
No, I don't think easy to miss because it shouldn't be possible in the first place. At least for a banking software, the web application layer is not the right place to check for this kind of authentication. This makes me wonder how their code must look like...
Clear explanation of the different forms of libration:

http://www.nmm.ac.uk/gcse-astronomy/sun-and-moon/moon-moveme...
From the article:

"this is a dead simple and common hack and Citi should have seen it and prevented against it. Seriously, this is kindergarten level stuff. Really, really stupid."
In 2000(?) I employed this same 'hack' against Ameritech's online bill viewer, but couldn't get anyone's attention. I called several people at Ameritech, but couldn't get through to anyone who understood anything I was saying.

I tried to get ahold of newsmedia, but realized afterwards that the links I was sending did have a session timeout associated, so by the time a reporter clicked a link, they got nothing.

Finally, I managed to get in touch with someone at 'fuckameritech.net' (IIRC) - a consumer watchdog (I hesitate to say 'group' - I think it was just one guy) who said "I'll take care of it". He made some contacts - I think got it to a reporter in Chicago, and that afternoon Ameritech's online bill view and pay was taken down (a wednesday IIRC) and it wasn't brought up again until Monday.

The 'fix' was not much - they were now hashing the account number in some massively long (128 char?) ID instead of just your account number. But it was all still visible in the URL, which was the bigger problem to start with, because it encouraged 'hackers' like me to change my account number by one digit.

I suspect others had noticed this before, tried to contact citi, and couldn't get in touch with anyone who understood what the caller was saying.

Companies need separate 'web vulnerability' hotlines to call/contact to report issues like this - perhaps just hidden in the 'view source' - if you're good enough to find the info, you know what you're doing enough to report a problem. Too low a bar?
The average people's computer is probably less secure than the average's bank's computer. But I wonder by how much:
http://news.ycombinator.com/item?id=2656837
It's funny that this wasn't discovered sooner. I suppose everyone figured a security flaw like this would never exist, and never bothered to try. Irony...
Well, competition is always very good.

There are so many metrics to measure with concerning product standing (you've got raw volume measurement, usability, trend factor, and on and on). To me both Apple and Samsung have probably honed in on the few metrics that matter (to consumers) which surprise, give both companies a better bottom line! Oh yeah, and consumers benefit too by having good gear that works.

My question is when will it become the data plans which start to limit this 'hand-held device revolution' and when will we do something about it?
There are 2 problems with that strategy. First, its unlikely that the locally produced phone will be at a price advantage. There's not much of a difference between importing components and assembling the phone on-site and importing a pre-assembled phone.

Second, the Chinese phone scene, in terms of innovation, is bigger than the software scene in Silicon Valley. Its unlikely that any African manufacturer would be able to match the Chinese hardware community in terms of innovation.
Except the examples that will be made will not involve the CIO/CTO. And even if it did, the guy almost certainly a golden parachute - what does he care?

As long as it's cheaper to clean up after the debacle than prevent it in the first place, that's what people will opt for.
Here in Cambridge, UK we have a similar issue and an unusually high concentration of cyclists.

There is a significant effort to install so-called "continental-style" cycle lanes along some major routes. These really are lanes of a decent width in their own right, typically a couple of metres, modelled after the kinds of place you mentioned.

However, the opinion of local cyclists is fairly consistently that if you can't have proper facilities like that, you're better off with nothing at all than with a bit of paint on a normal width road that marks a "lane" barely wide enough to contain handlebars even if you're cycling in the gutter. It is now very clear that such lanes just encourage cars to pass far too close, and drivers to complain when cyclists do crazy things like riding in the main traffic lane because the gutter is full of water/broken glass/etc.

There is plenty of evidence now that having no lane at all actually results in drivers being more patient and giving more space when passing cyclists than having a lane too narrow to be sensible but marking it out clearly.
Isn't to bad, keeps security front of mind. If there weren't any groups going around and doing this kind of thing big companies would be even more complacent than they are.
Desligado - simple web application supporting disconnection and deferred updates
It's $1499 if you get the one without WiMax: http://www.amazon.com/Samsung-NP900X3A-A03US-13-3-Inch-Lapto...
Count me in the 40% who has cut their cable bill (I.e. no more premium channels) since buying an Apple TV.
I "was" funny the first or second time. Now it's just old news.
"Security is everything the should care about in the first place."

profits are all they care about.

Honestly, stuff like this burns me up. Large orgs like this lobbied for crap like PCI compliance standards to 'protect' data, but they don't have to follow their own rules. Seriously, if PCI compliance is mandated for anyone who stores CC info, why the hell isn't citi being shut down for this sort of breach? 'too big to fail'?
Well, there's a 10+ year animated series running that's basically about watching third graders right poop on the blackboard. So there's an audience. (disclaimer: I think South Park and lulzsec are funny)
I'd argue that this wasn't even a hack. This is publicly visible information. No security measures were circumvented.
I'm always worried about these sorts of things. If there's enough money in the eventual jobs then people will start choosing to do engineering, because the benefits outweigh the costs.

Part of the cost, though, is that for most people engineering is bloody hard. The problem I see looming is that people will choose to do engineering, find it's hard, complain, threaten to drop out, and the universities and other colleges will lower the standards required to obtain the degree.

Net result - more people who are qualified as "engineers" but who are effectively unemployable.

I worry, I worry.
Example: You are building an editable list. The client insert and delete items from the list, which is then synchronized with the database. Now you need the HTML generating code on both the client and the server.

Being able to reuse content generating code can be especially useful when you don't realise that you will need it on both the client and server when you write it, or you have to move it from one to the other.
I imagine that publicizing a web vulnerability hotline would result in more trouble that it would solve. Normal people really don't understand computers. If you somehow give off the message that your system is not perfectly secure or bug-free they would get scared and run off to competitors who are just as bug-ridden but at least appear to be more secure.
Decline of US Education (re: Waiting for Superman)
That's because bikers (even well behaved ones) are annoying to deal with. Even if you are following all the rules, I still can have a hard time getting around you if the street is busy. Pretty frustrating dealing with a bicyclist climbing a hill at 5mph on a busy main road when you don't have quite enough room to safely get around them.

That's not even counting the bicyclists who blow through stop lights, stop signs, don't stop for pedestrians at crosswalks, ride on busy sidewalks.

In my honest opinion, I don't think bicycles belong on roads (at least in city areas).
I've always wondered what the US would do if China started flying sigint surveillance planes along the edge of US territorial airspace.

Probably about what the United States did for decades when the Soviet Union fly sigint surveillance planes along the edge of US territorial airspace. That is, just fly its own planes in international airspace, which has been its practice for a long time. "National means of verification" are what make arms control treaties and other confidence-building measures between nations work.
So...the first login had to have valid credentials. Someone needed a citibank account to start the scraper-bot. Wonder if the fbi's talked with that guy yet.
Problem  UX  UI
With the exception of DDoS attacks, I think what they're doing is a good thing. Malicious hackers don't just take down sites - they go in, and try to get out undetected. If there is a major vulnerability (especially if it's easy to figure out), they're really doing these sites a favor in pointing it out. Obviously, rendering a free service, it's hard to worry about your client's PR issues... especially if bringing it up in a friendly way would probably take multiple phone calls and countless hours. They may not be doing the companies a favor, but they're definitely doing their clients a favor (Citi for example).
Perfectly possible. Ethical? Different question.

Further, if you annoy hackers and they think you are being unethical, they may choose to take more "direct action".

Why would you do this anyway? If you actually do some work and invest some effort, somehow to increase the value, it would be less objectionable. Perhaps curate, summarise, then point at the original.
I agree that companies need an easy way for people to report potential problems or risks. One company I was with had no idea it was a botnet C&C until months later somebody looked up our WHOIS and sent an abuse e-mail. Some non-hacking-related forums had known for a while.
I just did a search under F15 - no official chromium package that I can see. Do you mean Callaway's unofficial repo or am I missing something? Otherwise, all I can see packaged is a game that happens to share the same name (chromium-bsu-0.9.15-1.fc15).
This animation was produced at the Scientific Visualization Studio at NASA Goddard Space Flight Center. I work in the Studio and the visualizer who created it is in the next office over. All of our work is on the web at http://svs.gsfc.nasa.gov. This animation can be found at http://svs.gsfc.nasa.gov/vis/a000000/a003800/a003810/index.h...

I agree it would be interesting to see an animation that eliminated the rotation and scaling and depicted only the wobbling. Producing that might be harder than you think, the coordinate systems and transformations involved in making an animation like this get complicated pretty quickly.
I might be wrong here, but isn't the open source Chromium software shipped without Google branding and integration? As in, it doesn't contain the stuff which concerns your privacy.

Installing a new browser and setting it as the default browser is pretty trivial in Ubuntu (not so much in other distros), so if they change the default browser, it's hardly a reason to change distros.
Whilst not directly related to #killswitch, if you'd like to see some great documentaries related to the balance of power between business, government and the public then I can highly recommend checking out the work of documentarian Adam Curtis http://en.wikipedia.org/wiki/Adam_Curtis
I think I'm accentuating an assumption - and when I saw the Citigroup story, I had precisely the reaction you just expressed here.

And yet you know that Chase and Citigroup are spending money on security in copious amounts. My heart breaks to think of all those guys getting paid not to know jack. (Or, just as probably, all those guys getting paid not to be able to shove jack through the corporate process.)
How indeed.. How can someone be able to architect the system of accounts, connection info, etc. for a bank but not be aware of such things? And it's not even being lazier either. Sigh... To all you 13 year old kids on the road of learning web dev, this is what you're competing against!