skysight-inc/HackerNews huggingface dataset:
As I understand it (IANAL), this is a somewhat controversial point of IP law. However, in the interests of playing it safe, a lot of stock photo agencies do require property releases for certain iconic structures such as the Sydney Opera House. This is in the same vein as model releases however. it's not copyright but the use of a likeness for commercial purposes.

I can take a picture of you on the street and use it for any editorial purpose. (Subject to not defaming you in some way.) But if I want to use that picture in an ad, I'd better have a model release.
مسلسل الارض الطيبة 3 الحلقة 59
Correct me if I'm wrong, but it seems that while using the client-side auth flow does not prevent a malicious program from pretending to be another facebook app, it forces the malicious application to be downloaded and executed as it must be able to catch the redirect to a different url with the access token, which a web app cannot do.

Once you are downloading and executing a malicious native app, you're screwed anyways since it can do whatever it wants like read your cookies and hijack running applications... (I'm not considering java or flash applets, depending on how their security works this may still allow drive-by spammage as a legit app).

It does allow a malicious user to easily write something that impersonates a legit application, though it's limited to spamming his own account.
and they were ex-googlers by the way.
So this is just a mashup page using most of their API's, but without any real smartness to what is shown... so it ends up looking and feeling like a mashup from 5 years ago.

Poor execution unfortunately. A better thing to do from the outset would be: If nothing is found close that box and put it at the bottom. That would be something fractionally better than pretending it's meaningful to search for patents or use SketchUp on meaningless things.
We would advise not to do this while staying in hostels. Hostels are way too much fun, packed with people travelling and having fun. One needs a work environment to get work done.

Our trick was: arrive in a city/location and stay in in hostel/hotel for a few days. Meanwhile drive around/ask around/do couchsurfing to get to know places/check the local craigslist. And find yourself an apartment to live in.

Couchsurfing helped us a lot to get to know locals.
A co-office did the trick in Buenos Aires.
It costs money, but sitting in a coffeshops costs a lot of lattés too. :)
Maybe Google should start working with security firm so that once their bots crawled on a leaked database they will notify the website owner immediately.
I have to flag this title as linkbait: this is a testimony from a marketing executive, saying stupid things about open source. It's not in any way the position of the supreme court of any country.
You're somewhat mistaken. Blogger hasn't stayed still. It's actually gotten worse.

They used to be the best game in town because they had a simple tool to spit out a HTML-only version of your blog and FTP it wherever you wanted. The result was a blog that you could host on a cheap VPS and have it actually stand up to five people hitting it at once (unlike everybody's self-hosted Wordpress setup).

It was a really cool feature, and a giant pain point when it went away because there still to this day is not a replacement for it. If you want to static-host your blog in 2011, you need to write code.
Infamous PS3, iPhone hacker hired by Facebook
It appears you're putting the equal sign between developer ability and business success. Being a great developer lands you a good job with a 6-figure yearly salary. Being successful in business requires a different sort of talent.

Business "talent" is primarily about knowing what matters. There are lots of Groupon clones or other startups where founders can't do basic arithmetic on user acquisition costs or lifetime customer value, or they choose to work on scaling the backend prematurely or on solving things that will not matter unless they achieve product/market fit and scale. Recognizing priorities and working on what matters is also talent, or more precisely, a lot of hard work.

Once you have product/market fit, doing risk management is a must and nowadays it seems to be a lacking skill (look at this incident or the Dropbox story from a couple of days ago). But doing risk management is like translating your business in French: if you're big it pays off to do it but otherwise you should be more worried about not dying.

Therefore I'm not surprised when I see that people who are focused on not dying more than risk management have been more successful in reaching... "success" (managing it once you've got it is another business)
That only tackles the master password for every site issue. It does not solve the password being plaintext.

For example, Facebook has a central ID and if they don't protect the password that gets exposed, someone could use the password to withdraw money from another section of the website.
Google V8 ported to iOS
Indeed. Twiddla still gets a dozen hits a day from people typing "twidla.com" into their browser. I'm sure we have users who think that's the correct name.
You are posting this from a place where it is at least 1am right now. Stop being dramatic, get some sleep, and try to remember that period of your life when every day you'd get home at 7pm at the earliest, after working the whole day to make someone else rich, and having no energy at the end of the day to pursue your own interests.
Yes: this flow does not involve putting your secret key into your application. From Facebook's documentation:

"The app secret is available from the Developer App and should not be shared with anyone or embedded in any code that you will distribute (you should use the client-side flow for these scenarios)."
Any company with even a small amount of success will be sued for any public mistake, whether it violates the law or not - especially if you're open and transparent about what happened and why.

Class-action trolls, like patent trolls, are just another business risk.
Enjoy a vibrant and glowing skin
Joico products which are formulated with the Triamine Complex will help nourish and rebuild your hair. The hair products by Joico have amino acids which in turn blend with the protein building blocks and help restore the lost shine and bounce in your hair. For any more information visit on http://www.sleekhair.com
Firefox Adopts Six Weeks Of Release Cycle
Thank you so much for creating SearchYC. I loved it. When I research something, SearchYC is a great resource.
Respect.
In Belgium (and other countries in Europe) there is a gap-year remuneration. It's a bit like the mini-retirements Stefan Sagmeister is talking about. They are meant for this sort of stuff.

Next to that there are several ways to do what you want to do: like studying abroad, volunteering.
We're not saying what we did should be 'copied', we're saying 'figure out what you want, and find a way to do it' A way that fits you.

And that's not the other thing mentioned on the comments.
I am not normally in favor of legislation, but I'd be okay with a fine for US-based companies that leak and expose this kind of data. Specifically a harsher fine for cleartext or anything less than bcrypt.
Of course. Keywords: PCI, MIPSA/HIPAA, etc.

More: https://secure.wikimedia.org/wikipedia/en/wiki/Information_p...
What should Google do in Africa?
Sure they were transparent? They didn't say what the bug was, how it was introduced, what they are doing to stop it happening again. They didn't email all their customers immediately.
I am a young 20 something, right out of college, first time startup founder, developer and with almost zero business knowledge guy. It's hard to accept the truth you are saying, but I am learning.
PwdHash looks great and it would be nicer if it was implemented by all browsers. To take the idea further, what if the HTML5 standard for input type=password automatically did the hashing before forms are submitted? On any form submission, browsers would hash like PwdHash by using the current domain. There would also be no need to use a prefix like PwdHash. Those are some quick thoughts and I think there's better ideas that can be implemented, that don't require work for consumers. Won't protect against things like weak passwords, but even a little contributes to security.
I think Google would rather just not index such data.
Whats the average each co-founder would get in an exit like this? Would the earn out be a large or small percentage of this amount?
How would Google do it with an algorithm to tell whether a database is leaked or not? Get emails from the firm to assess it? Maybe a honeypot email?

In that case, it seems far more easier for developers to put in honeypot emails in the databases and constantly query search engines hourly when those become available.

That is assuming database gets released, let along exposed for indexing.
Lol. We did the roads with a small (expensive) rented car. Airco and everything. And then we did it with the beetle: noisy, difficult to steer, fun.
It doesn't imply good. It implies 'unforgettable' ;)
Sosasta means "so cheap" in Hindi. Maybe they are too cheap to spend any effort on security of their users' data.
Buy a mini and complain when it can't do a 0-60 in 4 seconds like a F60
No, I'm not sure they were all that transparent.

I'm sure that in this situation and legal climate, the only way they could've potentially avoided a lawsuit was to try and keep it quiet (to the detriment of their user base.)

Sadly, doing the right thing just makes you a target.
Basically, a 6-8br+ luxury house ($5-15k/mo to rent) to start (since that seems like the cheapest way to get all the features I want); a commercial space (not class A office space, but a light industrial building or warehouse) could be retrofitted, but the tenant improvement budget would have to be high. I'd rather drop $10k/mo on a 6k sf house with 5 acre grounds vs. $5/ft3/mo for a 1000 sf office.

Parking onsite (behind a gate; outdoor is fine). I guess walking or shuttle to mass transit, but I drive.

Walking distance to restaurants is ideal, otherwise onsite catering, waiter.com, etc.

Bathrooms with showers.

Crash space.

Private offices which have entire walls which can open to common workspace.

Plenty of conference/meeting rooms in various sizes, with the ability to do complex video tasks easily (recording, streaming, teleconferencing, connecting ipads or phones or whatever to big screens)

Customized individual workstations (a base being laptop + desktop and 3 x 24" and 1 x 30", keyboard, mouse, aeron, big desk). No real need for conformity.

802.11n (well set up) and gig-e, with 100M WAN connectivity to colo and Internet. (gig-e better). Ability to put random desktop and lab ethernets on arbitrary VLANs with equipment in the colo.

Package/mail receiving service (for work and personal packages)

Non-stupid IT (basically, Facebook style) -- if you need something, and you can get it faster than the IT process, you buy it (and then IT gets to try to fix their own process); IT is there to speed things up, not save costs.

Stocked kitchen with drinks (I'd do unlimited free drinks no matter what; free food too if budget isn't an issue).

Individually adjustable climate control (multi-zone residential HVAC with louvers per room; spot coolers if you need more control.)

Great security (strong perimeter, and no one walking around unescorted; can leave $10k in cash sitting on your desk without fear if it being stolen, including by cleaning staff)

Fantasy, probably: Permissive carry policy onsite, onsite armory (maybe this is a fantasy...), onsite range (air is ok if residential, otherwise smallbore indoor would be awesome)

Swimming pool.
Apparently, everyone knows that tf-idf stands for "term frequency-inverse document frequency". I had no idea, and the article didn't have time to include a link to http://en.wikipedia.org/wiki/Tf%E2%80%93idf or even type out the acronym.
Hills Prescription Diet
Sometimes medication is designed for people and not specifically designed for your pet. A compounding pharmacy can create a medication convenient for a cat or dog. For more details, please visit our website.
I'm not sure whether even Safari and Mobile Safari comes from the same branch of webkit. Chrome and the Android browser definitely don't ... When I spoke to Apple Engineers about how WebGL is available in iAds ("running html5 in a normal webkit view") they mentioned that "webGL is in mobile webkit, but not in mobile safari". This thing, suggesting there's a "mobile webkit", when PPK has shown that feature-wise, there isn't, made me wonder how the webkit tree really looks...
> Plus, for what "X" are both "Patents about X" and "Date with X" meaningful statements?

robot girlfriend?
Well, you know. A .sql file containing username, password, email is a very high possibility that it's a leaked database.
Real time physics simulations of deformable objects these days tend to be based on fairly accurate physics models. The major issue facing such simulations today is that it's difficult to simulate extremely rigid objects at high frame rates, due to the non-linear aspects of the underlying forces. The challenge is to take shortcuts and find optimizations that gets you decent looking results while not being overly slow or unstable.

Here's a good paper on some of the technical details of a fairly sophisticated system used in a video game, if you are interested: http://graphics.berkeley.edu/papers/Parker-RTD-2009-08/index...
This is an extraordinarily entertaining thing to put rude words into.
Yes, my impression is that passwords are not treated with the same seriousness as say credit card numbers, or health info. That (passwords) was actually what I was curious about, before I generalized my comment.
Medical marijuana regulation practice
"The top federal prosecutor in Northern California has warned Oakland officials that large-scale marijuana farms licensed by the city would violate U.S. law and could lead to a crackdown on growers and their backers."
That website describes their storage security measures. It doesn't cover this type of incident and doesn't guarantee there will never be a bug in a code push.

Fact is: if you don't like their security measures, don't use the service. Suing them is a cheap disgusting money-grab that is far too prevalent in this country (cough cough hot coffee cough).

Stop being such a victim. You have to assume a startup growing as fast as Dropbox is will have its growing pains, just like Facebook did. If that troubles you, store your files some other way.
If you didn't notice, they're actually rendering mocked images of the searches. Which is funny considering the search term I started out with.
I'm thinking of getting a Chromebook for my father, and this is a man whose only been online via a library and who has no internet connection at home (or even a TV for that matter).

The things I'm curious about are:

1) How is the 3g? Is it invisibly always connected like a mobile phone is, or is it more like a laptop where you have to connect and disconnect?

2) How is the Camera? And how easy is it to upload a photo to flickr (or Picasa if it's easier) having taking a photo? My father also doesn't have a digital camera, but is selling a camper van... I want him to be able to take a photo using the Chromebook and to be able to figure out how to upload it to somewhere useful... would this be effortless for someone not deeply familiar with computers?

3) How is the battery life? In real usage, of occasionally accessing the internet, opening and closing it, etc... how does it fare? Also... can you buy spare batteries? Especially batteries that are chargeable off a car socket? i.e. Could he charge the battery whilst driving along, and without needing the laptop to all be wired up which he might consider weird.

4) How are the prompts? So it asked for an update... but did it do that in language that even my father would not find confusing or intimidating? Are the alerts and prompts too numerous so as to dumb him down, or are they are few and far between and phrased in such clear English that anyone could really grasp them even without knowing why or how software updates happen?

5) How are the native apps such as Maps? I realise that the Chromebook is designed to be online all the time, but one of his use-cases will be searching for a place, driving to it, and then referring to the previous search to do the last bit of navigation (he's too old school even for sat-nav). So... is there caching for when signal fails? Is it adequate and useful enough to be helpful?

Basically... the Chromebook for me, is going to help get the last few people in my family and network online. In a way that even the iPad hasn't. I cannot tell you the number of times my father has walked into a computer shop intending to get online, and walked out as soon as what he regards as techno-babble starts.

The Chromebook really could be the thing that works for him... he hated the iPad (couldn't grasp modality of being in apps and not in apps, and was frustrated that things he felt should work together - apps - didn't).

So I'd love it if someone who has a Chromebook does a review either watching someone who has virtually never used a computer use one, or who sits there and really is able to consider how a new user might find one.

That or someone here in the know just answer the questions above ;)
I got the same templates; I typed "gay sex".

... it asked what I loved...
i kind of wanted to share my favorites, but probably best not to.
Well, they _do_ use OAuth. If you keep reading the code, the API key is there for a convenience function to "upgrade" an already-active non-OAuth session through what looks to be a Facebook-sanctioned mechanism.

/**
* upgrade session key to OAuth
*
* This method (or step) can be removed after June 2012 (a year after its
* implementation), since it is only a convenience method for those people
* who just upgraded and have an active session using the old authentication.
*/

Does the secretKey actually work for anything other than swapping out the session type? I don't know.

Edit: Actually, it appears the code was largely unmaintained for a couple years, and the OAuth mechanism was just added to trunk a week ago. So this would still be a problem for the existing deployments
Why would I need to "Find patents about" my favorite soccer team?
At least the founders own the company and they sell if they like the deal, not if their boss does or some corporate decision-maker thousands of miles away. (assuming they didn't raise several rounds of VC funding and got diluted enough to lose control).
Better the Boris bikes? Social Bicycles are heading to the UK
Hand-Woven Text Effect
Continuing on that line of thought - a simple search like 'filetype:sql phpmyadmin' also shows a lot of 'interesting' results.
Try 'fun'. Why? Because Google just invited me to 'scour the Earth for fun'.

No-one give Google nukes, clear?
The first time you start ChromeOS it asks which search engine you would like to use. You are then free to use any web app you want. The OS is open source so you can check for any tracking code. If you don't trust the build that comes with your chromebook, you can install your own chromiumos build on top. You can't do the same with Windows or OSX, you have to trust in Apple and Microsoft that they won't spy on you.

It's hard to get any more transparent than that.
I had to enter "boobs" the result is just hilarious :)
Cloud Computing Migration Guide
If you see the OP, the woman behind the lawsuit seems angry that she had to find out about it in the news rather than with Dropbox informing her. That is a serious mistake and one that Dropbox should take heat for. Bugs happen but not communicating to users was a deliberate move.
you should drink when you're thirsty, not for the sake of it. Beware that what you're doing can cause more harms than goods.
Google Launches WDYL.com – A Single Point Search Across Multiple Google Products
Yes, do not index AND possibly inform the website.
Ikea has some adjustable desks that are within your budget
Popemobile Goes Hybrid - rpmGo.com
A similar quote that I prefer is (something like) "stopping smoking doesn't make you live longer, it only feels longer".
How do you know? (Note that the point of a punitive lawsuit is not only to encourage the culprit not to do it again, but also to encourage other potential culprits not to do it again.)

I guess the answer is "because it was just a mistake", but (1) not informing their customers promptly when they found they'd made a disastrous security screwup wasn't just a mistake, and (2) since they themselves say they're improving their procedures in response to the incident, it seems clear that there are things they could have done that would have either avoided the just-a-mistake or mitigated its consequences.
Passwords are one of the safeguards (perhaps the most important) that protect personal/sensitive data.
looks like sweet.
You've got it exactly backwards. So exactly, in fact, that it looks like trolling, but oh well...

I know nothing about Fanvibe's acquisition, but typically in these cases it's the "dudes" who control the business and they're selling it because they want to, because it's making them a life-changing amount of money.

Meanwhile the investors make a small return but lose the chance of a big return, which is what they really need in order to succeed at startup investing. Good investors support the founders anyway, because they know it's not in their interest to thwart them and also because they are often nice people who are happy to see the "dudes" succeed.
I tried "my wife". God, so creepy..

(I know I know, it asks "what")
She was not mailed because there was no access to her account or did I read it wrong that everyone whose account was accessed was mailed?

What should they have told her? "Someone could have accessed your account in the last few hours due to a bug, but that didn't happen. Nothing to worry about!"
Did anyone manage to get a copy of the sql file? A password analysis of a largely Indian audience could be pretty interesting.
Slightly OT (or is it), but it's an ad for Fluke - probably the best test gear you can get IMHO yet under-advertised. It's good to see a good company getting with the times.
best answer yet ;)
Similar, and interesting in the context of LulzSec releases, is @PastebinLeaks on Twitter. It scans Pastebin for a variety of things (mail address lists, PGP keys, SQL dumps, and router configuration files have all popped up so far). They're not 100% - especially the mail/password dump detection - but it's definitely catching stuff.

http://twitter.com/#!/PastebinLeaks
Also, http://d.pr/wiHc
The issue here is the mixing of new features and security updates. As a sysadmin, I would happily (and do!) roll out periodic security updates without significant testing, for the reasons that you outline.

But when the software is deliberately adding/removing features, I have a number of reasons why I would be wary. You might remove a feature I was using, change the way that your features behave, or change the interface and cause confusion for users.
I've seen cases of all of these, and if I wasn't actively managing the upgrade then we'd have had real-world problems that cost us time and (potentially) money.
Congrats!

And I have to say, I've rarely seen a post about being acquired that sounded so happy about it. Really seems like you'll enjoy working at beRecruited, so best of luck to you!
anybody got that sql?
The lack of errors was annoying and counterintuitive. I like the usual UNIX mantra of blow up noisily if an assumption is made but it just doesn't happen there.
Well, it is the best site to find almost anything, so why not passwords? :)

Honestly though, google shouldn't even have to worry about these things, their mission is to organize data on the web. If it is there, it should be searchable.
I have a hack against sitting: have always a glass of water on your table and drink from it permanently, this way you always need to go to refill the glass and go to rest room to eliminate that water. So you wont be sitting more than 3 hours (usually you'll stand up at least each hour)