skysight-inc/HackerNews huggingface dataset:
"Schedule a date with Emacs" --- algorithms say the darndest things.

But more seriously, the execution isn't that great. They could at least filter the products that don't produce useful results. At the moment, product search is only advertising its incompetence by telling me it found nothing. Also, given the built-in obviously-fill-in-the-blank screenshots and text, I'm not actually inclined to use their products.

Plus, for what "X" are both "Patents about X" and "Date with X" meaningful statements?
Are there any Social Networks dedicated for people with special needs?
Are there any Social Networks dedicated for people with special needs ?

There are thousands of people who are left blind, dumb and with other disability and the number keeps rising everyday. The rise in the number of disability may rise as a result of war, natural disasters and etc. Present Social Networks Facebook, Twitter, Foursquare (name it) doesn't provide there service to disable people, therefore i sense that there is an urgent need for disables to connect and share day-to-day hardships and triumphs in life.

Please view your thoughts on this matter. Do you think we need an alternative social network that is dedicated for disability ? If so we could build one
You're right -- we're still in stealth mode. The Unbounce page was a quick (and very convenient!) solution to being unexpectedly outed a few weeks ago. We're on the verge of our first release to users in a few weeks, so we'll get more information onto the landing page soon.
How is that spam? You opted-in to receive the e-mails.
Thunderbird seems to struggle with more than 2000 or so messages in the inbox, I've discovered. I've currently got about 2100 and little problems start cropping up - currently it marks all incoming messages as junk even though I have all the junk filters disabled on every account. It would be worth it for me to get the inbox down a bit, at least!
Both founders and VCs deal with a lot of risk, but in doing so, they have the potential for high reward. If the money (the and post-acquisition gameplan) are agreeable to the founders, are they too not "real winners"?

In being acquired, the founders are exchanging a potentially long-term successful business for near-term security and presumably good money. Perhaps the founders wanted to spend more time on their product and less time on their business...Different people have different motivations, and money is by no means the only determining factor of whether one is a "real winner".
OAuth 2.0. The mechanism Facebook is a little screwed up and frankly seems somewhat insecure itself, but it is still going to be hundreds of times better than distributing your /secret key/ in your app.

For more details, scroll down to "Desktop Apps" (which is near the bottom) on Facebook's authentication documentation:

https://developers.facebook.com/docs/authentication/
The report the KDE devs filed ( http://bugs.developers.facebook.net/show_bug.cgi?id=18701 ) addresses this directly:

The way OAuth2 is handled by your platform allows in principle anyone to
impersonate our application, as all that's needed is getting to know our
application ID, which can be easily obtained from the URL of the application
page. If you feel our application has been used to send spam to other users, it
has certainly not been done by our code.
In clear text? Really? How is this even allowed anymore?
It's not like compiling it in would have helped:

satie: /usr/lib/kde4> strings kipiplugin_facebook.so | grep -P "[0-9a-f]{32}"
bf430ad869b88aba5c0c17ea6707022b
0434307e70dd12c414cc6d0928f132d8

I just picked the plugin in question since its keys are already pasted all over the interwebs, but I presume it would be similarly trivial to pull the keys out of most desktop apps.
Double nibble URI decoding XSS Vulnerability on EC Council website
2000 Websites defaced by The 077 ( Hamdi HAcKer ) Tunisian HaCker
Google Testing A Black Navigation Bar With Orange Links
For us the solution was to rent an co-office space in Argentina (a great one btw: urbanstation.co.ar)
In Thailand and South Africa this was less of a problem: in those places we had a small spot to work and we often went to internetcaffees in CapeTown, doing the real work at home, disconnected from the web.
Which is immediately a good trick: disconnect from the internet and you'll get most of your work done: prepare work, mails etc.
Then connect, send everything, get the mails, and disconnect again.
GTD and sticking to it is a large part of making this work, otherwise you're or online on Facebook all the time, or working too much :)
Wikipedia Radial Graph
Hence why I said: "open source or not: doesn't matter". The insecurity here is including your application's authentication credentials in any format that is ending up on an unsecured system.
Plan your Japanese women? Buy Japanese women stuff? C'mon Google, your NL processing can do better than that...
Yeah I guess so. I seems to designed to give results for abstract things like "blue jeans" rather than a specific query like "nokia e65".
How does using the OAuth flow on a desktop app solve any of these issues?

If you have the app binary, you have the secret key. It's simply a matter of attaching a debugger and waiting for the URL handler to be called. Even the trick auth flow on iphone where it opens the Facebook app has the same vulnerability.
For those of you who haven't tried it, ToutApp is absolutely essential for people who send repetitive emails.

When I organize events, it makes emailing press, volunteers, and sponsors so much faster and easier to track.
And indexed by Google. That is terrible.
I moved with my family for 6 months with 3 kids: 7,5 and 2 year old.
Yes we often sticked to the nine to five work template, doing the fun stuff in weekends and vacations. And off course, when you take the moped after work to go and see that sunset, that's also heaven for a few hours :)

Again GTD is a good way to make your way through work.

Also: when you're on the road, you won't need to go and see family and friends. You'll miss them. But a lot of time is free to do other stuff.
Not if those emails are from spammers harvesting the Groupon DB that is now available on Google.
Although I'm not involved with enterprise software, I am worried by the direction Firefox and Chrome are taking: in addition to being a platform for deploying applications, the web is the most important way for readers and writers to share text on the internet, and I worry that rapidly improving the web's ability to deploy applications will make it less suitable for reading and writing. For example, if the web would have been used only for reading and writing, browsers would probably be a lot more stable than they actually are (since an application-delivery platform is a more complicated and consequently less stable thing than a text-delivery platform). And browsers probably wouldn't require half a gig of RAM like Firefox 5 does.

Note that it is not worth a writer's time to use an alternative to the web to deliver text over the net until a sufficiently large fraction of his potential audience is set up to use the alternative. Similarly, a reader cannot use the alternative to download or read a particular text unless a writer (well, owner of the text's copyright, to be more exact) chooses to publish in that alternative. And the existence of the web makes it hard for any such alternative to gain traction. So, readers and writers are stuck with the web for a number of years, until some alternative reaches critical mass.

So when I read about how the pursuit of the HTML 5 vision is causing pain for enterprise users, my first reaction is not to conclude that enterprise users are holding back the web, but rather to see the enterprise as a potential ally in the important project of preventing the HTML 5 program or the enhanced-web-app program from making reading and writing online a lot more difficult than it needs to be.
I stand by my point remains that an effective "don't use C" in a discussion about C is trolling, intentional or not.

And I've got to say, although I avoid Glib like the plague myself (unrelated, severe quality issues with their event loop stuff a few years ago that I still have flashbacks of...) I've never found myself inconvenienced by other people's code using it or the like. It takes what... a minute to grab it?

Shitty error handling capabilities are hardly relevant here, you'll have that with any quantity of C code.
The much worse problem is DNS. For big networks that pushes always the same two IPs (even without round-robin) it is a disaster. There are lags of servers, lags of network, dropped packets, useless overhead with EDNS and different packet sizes (timeouts and retransmitions) and above all, the practice by content providers and CDNs to use hundreds of changing in real time hostnames to implement load balancing and/or geoIP based assets loading. They use near zero TTLs which makes caching useless and dynamic sets.

Indian Airtel's network is a live example of that disaster. It is almost unusable, while they still actively promoting 3G and iPhones. ^_^
I like this idea quite a bit. I sometimes see up to 4-5 movies a months, more like 2 on average. By the time I get the tickets and a bit to eat, I might spend $20 or more. The downside is none of the theaters are the major ones in the city like Metreon or Century.
While this is true, having opted to /not/ use the OAuth 2.0 flow (which at least limits you to having access only to the access_token for that one user) and instead distributing the access/secret key for the app (which is what this developer decided to do instead) is so much less secure that I don't have much sympathy this developer in his complaint that Facebook doesn't really support desktop apps (which is, honestly, a hard problem).
If we are lazy for a second and combine the concepts of art and originality/copyrightability (which I'm guessing from your comments is broadly your position), why would gallery shots of fine art accrue their own copyright, and not this pixelated example?
The best site to find password leaks: Google
I've made a terrible mistake
I thought starting a statup was my route to freedom, to realizing my dreams, to becoming the person I was meant to be, to happiness.

I've made a terrible mistake.

My startup was an ego driven delusion. In hindsight, it is clear. I sought fortune, fame, and success. What I needed was mindfulness, humility and reality.

This will not apply to all of you. Good luck to those it does not apply to. To all else, wake up before you waste more time, resources and good will on ego-driven nonsense.
Exactly what I believe. I tried "haskell" and "epistemology". See epistemology in 3D with sketch?
>>they're still a startup

That sounds very troubling to me. When it comes to user data/privacy, how does being a startup vs a huge corporation make any difference?

Besides, a company with tens of millions of users and billion dollar valuation is not really a startup anyway, if at all that matters.

I love dropbox and use it every single day on so many devices, but I did feel violated by this fiasco.
They've been saying this for as long as I can remember reading the news.

Never actually happens, but they never stop saying it.
Even though I don't like frivolous lawsuits, it's way too early to say there's no legal basis for the claim.
I guess that it's not easy to implement session affinity on the SSL level. You cannot access information like cookies or other HTTP headers (since they are inside the SSL payload that you're trying to handle). So you have to use the little information you have: source IP address and port, and session data.

The idea would be to make sure that a given client is always sent to the same SSL handler.

We could imagine having two layers of load balancers:
- first layer would use source IP address and/or session data to determine to which server of the second layer the connection should be forwarded;
- second layer would receive the connection and to the proper SSL handling.

I believe that this would work, but it seems that it would require a custom "half-implementation" of SSL on the first layer of load balancers. I don't know if there is any provision for that in OpenSSL or GNUTLS. Also, since there are already hooks to do session caching in most SSL-enabled servers, using those hooks to plug in a memcached backend seems to be less "disruptive" (read "easier to understand, implement and debug").
The OAuth 2.0 flow, as far as I can tell, does not require you distributing your secret key, which is what this application was doing. From Facebook's documentation:

"The app secret is available from the Developer App and should not be shared with anyone or embedded in any code that you will distribute (you should use the client-side flow for these scenarios)."
Advantages of Android Application Development Service Provider
Incidents like this make me think that if success is anything to do with talent? Even a mediocre developer wouldn't do such mistake and these people are acquired by Groupon. Then, I think, it's all about who you know ?
Shouldn't someone have to show actual damages in order to sue? The California Unfair Competition Act seems to be about unlawful, unfair or fraudulent business practices - I don't immediately see how that is relevant.

My guess is this is going to just force Dropbox into some kind of settlement because it will be cheaper than fighting it. And the lawyers promoting this get a nice cut, of course.

Does corporate insurance cover this sort of thing? How does a company protect itself from these kind of lawsuits?
Obligatory post I make on these stories: Use PwdHash for Firefox and Chrome. It's very low overhead and provides and extra layer of protection from lazy programmers.
...they're still a startup...

What? Is this an excuse? They charge money for the service and they will pay for their mistakes.
One could then argue that photographs are merely reproduction of reality, and therefore not art. I fail to see why you think photographs introduce unique style but pixel art does not.

Because that photography does not merely reproduce reality. The camera, lens, film type, lighting, everything produced an entirely unique image[1]. Furthermore, if you were sitting there, observing his playing, you would not have seen what came out in that photograph. That's what makes photography something other than mere reproduction. That's where the art comes from.

Regarding pixel art, I don't really consider this piece to even be pixel art. It's just a somewhat blocky rendition of a photograph. Great pixel art is more akin to Picasso's deconstruction of a bull:

http://www.artyfactory.com/art_appreciation/animals_in_art/p...

Great pixel art deconstructs an image into the minimal set of elements necessary to convey the original idea. The 'pixel art' in question really does just looks like a few photoshop filters applied to a very well-known photograph. Or a bad resizing of a thumbnail.

[1] I get the impression that the "photography is reproduction" crowd don't understand technical aspects of photography, like lens selection, aperture, dynamic range, the effect that film selection makes, etc. Yes, a midday, f/16 snapshot of "The Bean" may not entail meaningful artistic qualities, but that sort of distinction tends to be along the fuzzy line we draw between 'snapshots' and 'photography'.
I have two folders - 'archive' and 'inbox'.
Once 'inbox' gets to be a large number (3-4k usually), I'll just move everything into 'archive', if only to make searching on the iphone a little faster.
Otherwise, why organize when you can search?
why would gallery shots of fine art accrue their own copyright

I don't know what this means. Examples?
Dropbox attitude towards users data, privacy and security has been troubling, and their responses have been less than comforting. They really need to do some good PR/branding exercises to make sure they dont continue, on what looks like a slippery slope to me.
I hope everyone on all sides can recognise how absurd the "it's theft if you can recognise the original" argument is. For starters, photographers have a long tradition of claiming copyright in reference photos of fine art, where the whole point is to create an image which is as alike the original as possible.
Yes, they'll pay for this mistake through bad press and lost customers.

A punitive lawsuit isn't going to improve anything in terms of making sure they don't do it again.
If that's the message you got from this, I guess you read it differently than what we meant.
We're not saying this lifestyle is 'walhallah'. It comes with risks, costs, and you have to be 'strong' to do it. Hence the remarks we made in the presentation. But that's what we were willing to 'pay'.

What we meant to say by the presentation is that living the life as it is preached in modern (capitalist) society can be questioned.

For us, travelling is far more important than building that big career and earning a lot of money. Instead of living the life expected and waiting until we're 67 to do this while retired, we decided to do it now.
For someone else their dream might be totally different, and the solution to that too. That's exactly what lifestyledesign is all about: designing your life as you want it.

Check out the Ted video of Stefan Sagmeister on mini-retirements. It might give you a different perspective :)

So I totally respect you view on travelling: I can imagine that many people think 'I don't want to work on a vacation'. But the main thing was: when you like travelling, and you want to do this now, it can be done.

*Saying webdesign or online communication is not 'serious stuff' is in a way hurting a bit. Ouch :) I mean: I've built my experience over the last 11 years. Saying it is not that valuable is, well, cannot really give a good reaction to it.
Indian Parliament goes paperless, provides legislators with tablets
Why is that site registered to:

Domain wdyl.com:
Margaret McLaughlin
76 Ninth Avenue
New York, NY 10013 US

Nameservers:
myns2.fabulous.com:
208.48.81.137
myns1.fabulous.com:
208.48.81.136
Discount Perfume
A huge collection of designer perfumes, colognes and fragrances for men and women at best prices with 100% satisfaction only at http://www.overstockperfume.com
You say it much more eloquently than I could but I wholeheartedly agree. I'm done getting bitten by SVG when Canvas, while more work, never bites.
Though I am not a subscriber, I have received information from some of my friends that they are getting these warning emails.
It might have been good that it was indexed by Google so that the problem was found quicker. Completely agree about how can cleartext be allowed. Harder to regulate overseas, but would it be possible to have an actual law in the USA against storing passwords and other confidential in cleartext? There are various consumer protections such as food, cars, toys, and could similar things be legislated for data?
Does this avoid embedding keys in the application itself?

IMO it's kind of impossible to reliably 'authenticate' a desktop application.
>>A punitive lawsuit isn't going to improve anything in terms of making sure they don't do it again.

What's stopping us to say the exact thing in defense of any xyz alleged offender?
Why would this be an issue?

That is, why is this an issue that's any more important than that Chinese ISP that keeps sending you emails about the .cn version of your domain name? Having yourname.blogspot.com wasn't a priority yesterday, so why is it in any way bad news to find that it's not available today?

There are a million places to register unique names for things. Some (like .com domains) have value, some (like Geocities profiles, square feet of peat at the Lagavulin distillery, and .blogspot.com subdomains) do not.
Curious what you want to do... Maybe extend js-ctypes so that it'll do what you want?
Happens to me always at the Dutch Coast. Somehow I look a bit German.
...over the next 25 years - big whoop. We nee to make changes in our economy but there are long-term shifts in the competitive landscape that suggest the dollar probably shouldn't be the exclusive reserve currency anyway; attempts to maintain it as such may even be inflationary to some extent. The long post-war boom has been over for several decades now, and the future is currency baskets, SDRs, currency blocs, and eventually a universal currency.
All startups should read this. Why do Americans make such great early adopters?
Good question, but the original site itself exists at

http://www.google.com/whatdoyoulove/

I assume it's a Google engineer's side project which has become a bit bigger over time
That's exactly what I thought. It's like comparing a bycicle to a 600cc motorbike and complaining that the first doesn't reach enough speed.
love this book. very little verbal fluff, allows the reader to figure out the material on their own with the exercises and extra credit.
Credit checks
Simplescreening is a national employment screening and tenant screening company providing screening services and criminal background check information. We offer a full spectrum of screening services.
> This is a ridiculous response, and one which seems very ungrounded in the law.

What is the basis of such assertion? Let the courts decide that if the basis is unfounded or not.

> But, they're still a startup.

This is no excuse, if you charge money for your services AND claim to be military grade secure with respect to data. https://www.dropbox.com/security

> There's no SLA. They responded quickly, fixed the bug as soon as they caught it, and have been thorough in investigating any unauthorized access of accounts.

They took 4 hours to know entire dropbox was accessible to everyone, and tried to sweep the incident under the rug by not emailing the issue to users.

> Why sue them? It's just going to disrupt a very good service. It's not going to help them recover (I'm sure they've already learned heavily from the mistake.)

Because they are not entitled to be on the goodside of the user, which unacceptably bad handling of the situation. They, like everyone else, are not entitled to anything, other than what is contracted. You screw users, you get screwed. It is as simple as that.
As you get older, you realize the world isn't a meritocracy. Only the young, poor, and/or foolish will believe that.
And more importantly, if a function has [WifiResult] as the defined return type, you can be absolutely definitely sure that you get a list back.

This is not something inherently unique to Haskell. Any strictly typed language could easily have chosen to not let null be a member of all classes. Or at the very least add some "non-nullable" qualifier to types.
Hi Joeri. From Belgium too I presume.
It indeed helped we're from Belgium, regarding the insurances.
On the other hand: for US citizens this way of living is even cheaper if they are paying health insurance in their home country. Because that's so darn expensive over there.

That's why so many people go to Thailand: health care is inexpensive and very very good when compared to the costs related to it in their own country.
We had to go once: the total costs medicines included: 37 euro. I never took the bill to my health insurance to be reimbursed...

So the insurance thing is nice, but you have to compare it to the real costs.

As far as what you're saying on Belgium: we totally agree:
We came back to Belgium in Feb, when it was rainy and people where still complaining...
And suddenly it was Spring and well, heaven.

I myself have been living for 2.5 years abroad before this one year trip.
Coming back to Belgium, Ghent, is always superb.
We love it.
And we found our home quite a while ago. It's Ghent. One of the most beautiful cities in the world.

But we love travelling too.
And that's why we decided to do this trip: we didn't want to wait until we're retired to do what we love to do.

In our ideal lifestyle we'd do this each year for 3 to 4 months.
Just like grandparents who skip winter in Spain, but our destinations would be a tiny bit different :)
774 Websites hacked by ZCOMPANY HACKING CREW (ZHC)