skysight-inc/HackerNews huggingface dataset:
I was, and continue to be, under the impression that this kind of attack is not possible when an access point has node isolation (a very common feature that even my MiFi router supports, despite it often being turned off in home and even office environments), yet the aforementioned protocol-level DHCP DoS I described would work on any device that implemented the DHCP specification. I therefore fail to see how ARP spoofing is relevant. Remember: we are discussing whether it is a fair belief that any reasonable implementation of DHCP would have implemented the spec as stated.
That's actually probably going to be easier for a computer to solve than a human.

A computer can do statistical sampling of many CAPTCHAs generated by the same website, and then try to reverse-engineer the image munging algorithm.

Humans, OTOH will probably give up after 2 tries and already struggle to get |O0Il1l right.
I'd love to know how Ruby is one of the two most popular web programming languages. I love ruby but from what I see here in NYC, I'd say python is more popular. Are we trading anecdotes here? Or is that two most popular based on a metric from somewhere?
Agreed, Appbrain has a flexible search for a long time now. It is still much better than the Market.
Thanks for the response, mkjones. I certainly don't think anybody at Facebook is _trying_ to say "screw you, we'll do what we want", and I think the new approach is a very positive step. But the impression it leaves as an app developer is that you made a change that disabled a bunch of apps without thinking about the implications, and then rolled it back when people made enough noise. As somebody else says, Facebook's got a pattern of doing this; so you don't have a reservoir of goodwill.
this is what all russian providers doing for long time
>Google is not 'restricting your freedom'. You can fork android and do whatever you want.

that is a bit of a hobson's choice, sure (some of) the code is available (pre 3.0), but without a device that is open and able to run it, it may as well be closed.

>Intent is irrelevant.

Intent is everything, would you be right to suspect the motivations of a mining company conducting a review of environmental impacts, even if the results appear sound on the surface?

>They do reciprocate. The source for android is yours to hack.

Except for of course, gingerbread.
There is that principle of "conservative in what you send, liberal in what you accept" on which UNIX and half of the internet was built.
Why return thoughts randomly?
Light to the Poor, One liter at a time
Mozilla Open Badges project: recognizing learning online
Place where word willl be invented
The original article talks about how hundreds(?) of photos were taken and only a few were in focus.
Call me a cynic, but I think most managers in medium-to-big companies would never believe that there is something wrong with the structure of the work their handing down, so they would never try to fix it. Developer turnaround of X percent is expected and simply factored into the process by making people replaceable. I think that's the root cause of the problem. Not enough people in change really care that their developers are bored.
Javascript seems a tad more popular than Ruby.
In my hunting for a job, the three most annoying things that some employers do to potential tech talent:
- Instant rejection for missing one of a laundry list of technologies. There's no desire to grow people into positions.
- Long competency tests that are really a test of your ability to recall or search for solutions/trivia.
- Zero feedback. Completely relying on the job-seeker to follow up.
Agreed. I almost questioned whether this post was a parody, instead of a genuine example of the entitled generation.
Shouldn't the default assumption be that there's always a new nexus model in the works?

Android Movies doesn't work with rooted phones for DRM reasons.
I'm going to give the author the benefit of the doubt here, because sarcasm is notoriously hard to transmit through text. I think he's being tongue-in-cheek while complaining that hiring is difficult because Google/Facebook/etc have collectively raised the bar about what sort of compensation is expected to levels that are hard for him to match.
Yes it is very clever, I had forgotten they ensure they only store unique files (I wonder what percentage of files "saved" are unique). I actually went and looked through the TechCrunch articles from April 17th that announced the Dropbox 25m user mark and 200 million file saves but it doesn't distinguish between unique and saved files. I imagine its the latter as it would be the more impressive number.

http://techcrunch.com/2011/04/17/dropbox-hits-25-millions-us...
I think it depends a lot on the relative standing between you and the company.

There are a large number of startups and small businesses where I could get a job simply by saying "Hey, I'm interested", walking in, and having a 15-minute chat with the founder. I would probably not want to work for most of them, though, because it's quite boring being the smartest guy in the room.

However, the number of people who could get hired at Google or Facebook without an interview is probably in the dozens to low hundreds, worldwide. And many of them probably aren't interested, because they've got their F-you money, or they have a nice tenured research position somewhere where they can do whatever they want.
While I was learning how to code (and taking night classes) I worked data entry. Our machines were ubuntu, so they already had python on 'em. In the last few months there, I was spending ~20% of my work time coding. :D

Now my job title actually says "developer" and I'm kept busy. But I kind of miss all the sandbox time I had. I knocked out so many projecteuler.net problems.
Herbal Remedies for Depression and Anxiety
there are a few tips to overcome stress in our daily lives, including our current work. The following tips is:
Meh. Treating developers and the back end gingerly results in no benefit for consumers, in fact by and large it results in in a pretty clear loss.

Characterize it however you wish, as a user I'm going to go with the platform that focuses on pleasing me rather than making the lives of other users or developers easier.
That must have been a tough interview...
My views on MBAs notwithstanding, anyone with a Stanford degree should know the difference between "haven" and "having."
I'm very impressed that the victim's law firm employer gave him the benefit of the doubt, and hired a forensics firm to get to the bottom of it. In this day and age, expectations of loyalty from companies to their employees are very very low.
1) Founders may want to take some money off the table.

2) I do not see why DB couldn't end up being a 100B company. They built a huge business with one fucking product. One. I do not even remember the last time I noticed new features. I want to see them starting to move more into backing up/syncing social data as well. There could be a day when all your social data will be simply poured into your DB, and they will do the job at syncing it via all your devices, and social networks.

Go DB.

Edit: Imagine. I take pictures. Put them on my DB. Set privacies (social, private, family, work, etc...). Then Facebook can now directly grab from my DB, Google, Twitter and new startups as well depending on my settings.
With the revenue of 100M, that valuation is insane.

S3 costs must be eating most of the revenues.

http://www.businessinsider.com/dropbox-revenue-2011-3
It's really not. There is no real world comparable act, frankly. It is what it is, and what it is is not a big deal.
Twitter and Facebook give businesses the opportunity to interact with their customers. Using those channels as yet another way to talk at customers is wasting that opportunity. The best way for local businesses to use Twitter is to actually use Twitter. Log in, respond to messages, join the conversation, act like a real person and connect with your customers.

Polly.IM may be a useful tool if you're already engaged on Twitter, but if you rely on automated responses to drive your "interactive" marketing you're doing it wrong.
Exactly. Given that Dropbox is still on a growth curve and it's time to raise more money, you can bet that Drew is being very shrewd in maximizing his valuation and keeping from needing to raise another round any time soon.
You sure this is a licensing thing? Maybe they are just putting spin on it, but it sounds like they are saying they were taking a loss on the DVD side of things (or just making minimal profit) in anticipation of DVD's going away, and have discovered DVD's aren't going away as fast as they planned.

I mean, really, post is something like $0.40 these days. Unless a postal service gives them a price break, the $2 DVD fee is entirely consumed by the cost of mailing you (and you sending back) 2.5 DVD's per month.
Profiled: Australia's leading female tech entrepreneurs
It sounds like this MBA is angry at the most basic law of economics: when the supply is less than demand, prices go up.
What the hell?

"With Kostolnik’s permission, they installed a packet sniffer on his network to try and get to the bottom of the incidents."

They installed a packet logger but didn't bother changing the encryption to something stronger than WEP!? Crazy.

Edit: They likely already knew who was responsible since it had to be a neighbor but even if they didn't, the Secret Service had to show up investigating death threats to Biden for this log to be looked at.

Hind site is 20/20 and all that but I would likely have handled this differently.
if i were looking, i'd not apply at his company after reading this as he just doesn't seem to be a good problem solver. A successful leader would post a solution (or at least reasonably constructive ways to approach the problem) instead of whining at the problem.
Good points. I guess I'm not as concerned about entrepreneurs pursuing ideas which are inherently doomed, as much as entrepreneurs grasping for straws.

I'd like to think the idea I'm working on now has sufficient potential and charm! :-)
Ask HN: White Label Pricing My iPhone App?
I've had a request to license a white label version of one of my iPhone apps and update it with new artwork that will be provided to me from this client.

Personally, I charge $.99 for the app but for this client it will be part of a marketing campaign and given away for free.

I know the details are a bit vague but what strategies have you used to determine a license fee for white label versions of your apps/software?

Do you use past sales history and factor in premiums for the risk removed for the client (it's already developed and proven)?

Do you use other methods to determine a reasonable cost? Thanks in advance for the advice.
Sometimes the simplest "technology" can make the biggest difference in the lives of millions. Another link about it that has a few more details, including that it generates 55-60W of light, 10 months out of the year.

http://english.ntdtv.com/ntdtv_en/news_asia/2011-07-12/light...
How to Survive an Unemployment Jungle
My blacklist is “tynt.com, intellitxt.com, kontera.com, snap.com”, and that popup doesn’t appear for me, so it must be one of those.
Cyber Kool Tour: Project Tarmeggedon by Anonymous (Operation Green Rights)
they supposedly teach that at business school:

http://en.wikipedia.org/wiki/Supply_and_demand

Have you ever heard a physicist whining at e=mc2?
"If you’re in the U.S., you’ll also be able to download the Videos app, rent movies, and buy books once you receive the new Android Market."

I know that content licensing is an issue but out of the last few "major" products Google has released, a majority have been US only.

When will we get to the point where Google gives enough effort into something that can go more than US-only?

For me it just feels like they are throwing stuff out there and seeing what sticks. Then when it does stick go and find out how to roll it out to a few more countries and do that. Not a lot of effort or confidence in what they release.

Edit: Just to add, I live in Australia. So you can see my real frustration with releases like this.
That's my point. We didn't do much at the beginning, yet succeeded later. In contrast, EA has bought lots of expensive studios lately and they did not succeed (and that's okay, as long as you haven't put much money into it).

Btw, singly.com looks awesome, and telehash seems very interesting!
Don't forget to send it please.
You misread the article. The Kostolnik's filed a report against Ardolf for kissing the Kostolnik's 4-year-old son on the lips.
8. The user may have a slow computer.

I remember suggestions of using computing power to slow down guess-rates. Probably related to bitcoins. However, it doesn't work since some users don't seek better computer performance.
Poka-yoke (ポカヨケ)
This is the kind I do on my whiteboard when I feel like procrastinating a new language.. but I find it terribly cool that you've been forward with this and started implementing it :)

Also, I didn't get how you would make the difference between a closure and a simple boolean?

For instance:

users map(age > 20)

and

users show_age(age < 40) # Because for some reasons, people > 40 don't like to say their ages ;)

Also, I don't know if you know the Arc language, but I'd suggest reading the tutorial written by pg. I particularly like how all functions are shortened.

I.e. keep instead of filter/select, etc.

Also, something cool is that if a literal instead of a lambda is given to keep, it will use the identity function.. (keep 'a '(a b a c)) = '(a a)

Good luck with that :) (And forget about the "Do we need another language crap"; they say that on about any new languages. (Hint: We'd still be using C++))
I imagine they wanted to find out who was doing it.
What would be the point of the packet logger if they attempted to change the encryption? Wasn't the point to try and catch someone?
Ah, right. My bad.
It's from http://apture.com/ .
"I think I also tend to pick off the lower level work because most of my original ideas are usually too weird for a professional setting."

I'd like to see some clarification on this. A lot of the work I do (inside a large organisation) seems to involve inventive approaches to problems. Maybe not like writing new web servers, but certainly the kind of non-routine stuff that keeps a hacker happy. I don't (often) do this just for fun - there's simply not enough time to solve problems the boring way.

"Professionally though, inspiration is for amateurs and I just do my work."

I'd also like to see some clarification on this. Is Zed saying that it's wrong to take a novel approach to one's work? Or that maybe it's better to just do things the way you're told and save the creative juices for personal endeavours? I might just be mis-reading this completely. Any help much appreciated...
> They installed a packet logger but didn't bother changing the encryption to something stronger than WEP!? Crazy.

They likely wanted to find the source of the intrusion and prosecute against it, not block it out completely. Changing to WPA2 w/ AES would have likely stopped the attacks, but it wouldn't have helped them find out who initiated them.
Can't wait to see this revolutionary implementation of social game mechanics that will improve capitalism for the benefit of all.

This person managed to get into the most selective and sought after MBA program on the planet so I want to give him the benefit of the doubt but, jesus...wtf?
I can't imagine he's actually going to hack on the product, right? Is something like this a prestige move?
What does cloudflare DO?
haha thanks man. yeah I agree, the day I stop playing around as a programmer, is the day I'm dead. Every programmer should explore different aspects of CS and have fun doing it.

I'll check out Arc!
Seems more like he just didn't realize how much demand there was, and how little supply.
It should also be je ne sais quoi not je ne sais pas. Actually that entire phrase should be deleted as it is unnecessary.
> One of the manuals had Ardolf’s handwriting on it and
> another had the unique identifying ID for the
> Kostolniks’ router typed into it

So were the manuals physical or digital? If they were physical, then why would he use a typewriter to enter their router MAC?
>“Over months and months, he inflicted unfathomable psychic damage, making the victims feel vulnerable in their own home, while avoiding detection.”

So he's a hacker AND has psychic powers? Man oh man.
I also wonder if they are selling shares because Microsoft is nipping at their heels. Live Mesh is a serious contender and starts with 5G instead of 2G. I switched.
Polly.IM right now requires you to have a Twitter account and so most current users are already engaging with Twitter. From our surveys and discussions with our trial users, they all nonetheless feel like they could use some help in categorizing tweets and helping with very routine stuff like distributing a promotion to new followers. At the end of the day, many local businesses have 1 person running their twitter account and that person generally is the owner who doubles as marketing if not everything else. Compare that situation to American Airlines which can hire 10 or 20 social media managers and you realize quickly why these folks could use some help organizing responses and conversations with customers.
I can't agree with trying to recruit people out of other companies. Instead, go for the technical talent that has been missed by other companies because they their array of technical tests and questionairres and laundry lists of requirements have filtered out good people.
Cracking WEP on neighbors' router with malicious intent does not happen often.

It's better to use more secure technology, but most of the time WEP is ok.

Some people actually run wireless routers without encryption at all (and that was a blessing for me when I just moved into new place and was waiting for few days until cable company's technician showed up).
Ask HN: Best open source python project for beginners?
Ay good suggestions for a person who wants to learn python?
Most things come with WPA/WPA2 as default now. The only reason to be using WEP would be for compatibility with older devices (e.g. at least one previous version of the NintendoDS could only do WEP for Wifi).
Going in Google+ Circles
The Imagine Cup: Student-Built Technology Tackles the World's Pressing Problems
My Windows 95 installation floppies were high density floppies with a special disk format that gave them 1.6MB instead of 1.44MB.
We’ve taken it into consideration. It's designed for terms one is not familiar with, so “didn't” is kind of unnecessary.

As a note here, though (also for others), it doesn’t pop up just from double-clicking text; you only get a small “Learn more” after that, and the popup only shows up if you then click the Learn More button.
Any developer that can't get a job in this market isn't a developer you want to recruit.

The only place for good talent is other companies.

How are you finding technical talent without recruiting people out of other companies?
But do developers really think that the bar has been raised because of that? None of the developers I know expect Google-like compensation from their employers. Sure, it will be harder to get the best talent because he'd have to compete with Google, but there are plenty of developers for whom that isn't the case.
I appreciate the work they have done and have a great respect for the amount of research and effort behind this, but I really wish it was more affordable.

My girlfriend is dyslexic and is struggling (even with reading lessons, etc.) through college because of it. I had her read the example in the video and some of the text on their site and she was able to do so much more efficiently. I'd love to be able to purchase this font for her so she can use it when reading/writing documents for her classes, but the amount they are asking is simply too much for me.

I wonder if we'd be able to convince her health insurance to reimburse us for the cost? I can dream. :)
I try really hard to get things done at work, sometimes that means doing shit work so someone else can have a good time coding something interesting. That's all there is to it. That doesn't mean I don't try to do the shit work in an efficient novel way, it just means what I'm willing to work on isn't necessarily glamorous.

As for the second comment, I'm just saying that if you have to wait around for inspiration before you can do anything then you're just an amateur. I may not be as into what I do without inspiration, but in my day job I can just do what I need without waiting around for a muse to strike me with Thor's hammer. I find people who walk around screaming that they "MUST BE PASSIONATE!" are either deluded, stupid, or just prima donnas who can't sit down and do the damn job. Personally I'd take someone objective and little critical over some passionate Yes-Man.

Now, that's at work, where usually I'm just slinging code for someone else to make money off of and my interest is really only in doing my job well, not in what I'm doing.
Google Employee No. 59 on Google+, Privacy and Why He Left
The Mac's DHCP client is using the router's mac addresses to verify it's on the right network, and it already knows it still holds the lease. What the fuck more do you want? What are you afraid of?

The only conceivable grief you can put forward is that the ARP check isn't good enough. The client already owns the lease. If there's IP contention, it's because either a) it's not on the right network after all (arp check) or b) the server's fucked up and it's the servers fault (dhcp server allocated an IP twice).

Ok, so assuming the DHCP server isn't faulty may be a bit of a stretch. But coding your client to assume the server can do it's job does not deserve an "Ok, seriously?" hurf-burf post.
Notice how he says government loans. That I agree with. The private loan system is another beast altogether, one I am dealing with personally. Fortunately with our profession it is not hard to pay off loans.
I'll add one more thing. People ask me about getting work now that I'm "famous", and I usually just tell them this:

Before I was famous I'd have to scrounge around for shitty jobs. Now they just come to me.

Truth is, I still interview, I still do the stupid coding quizzes, I still send my resume, not because I have to, but because I want to be taken seriously and treated fairly with the understanding that I got hired because I know what I'm doing. Not because of my "fame".

After that, the jobs are pretty uninspiring these days and while the work environment may be pleasant, I rarely find any place that's interested in taking a big risk with my ideas.
Addendum: it’ll also happen after 1.2 seconds if you keep hovering on the Learn More button (and watch the progress bar fill across). I should have added that in my initial comment.
People who think they're making some kind of statement by refusing to state their gender.
The first "haven" tripped me up until I read the rest of the sentence and realized that he meant "having". How do you get that wrong 3 times in a row?
Units of measure is fun little detail :) F# has something similar: http://msdn.microsoft.com/en-us/library/dd233243.aspx
It will also pop-up if you just hover over the "Learn More" box. There's a little 'progress bar' where the background changes to a different hue of gray. When the background has completely changed color, the thing pops up.
Do you know what the actual average uptime has been per operation? I have never seen that number.
http://www.findpeopleonplus.com/profiles/1020130743965167653...

This guy.
I seriously doubt Google is dumb enough to store user passwords in plaintext. There is absolutely no reason to. Passwords get stored as non-reversible hashes.
> However, also for humans.

Which is exactly why they added those. Premium accounts do not require the user to enter a captcha for every download. So every user who was annoyed by the "cats captcha" was a potential customer.