skysight-inc/HackerNews huggingface dataset:
For most journals I have experience with as a (co-)author a signed form is required for every (co-)author on the paper. This way it's pretty hard to deny you have knowledge of the paper.

I agree with you that people that have not contributed should not be on a paper. For most high impact journals thesedays explanation is required of who did what. Of course this is far from 100% secure but it's an interesting step. Lying about the contribution of a certain co-author is something else than just adding a name to the list. Lying is fraud whereas adding a name might not actually be fraud I think.
Has the documentation situation improved much in the last year? I tinkered around with it a few times and it really felt close to being great. But... aside from the 2 or 3 intro tutorials, I found the docs really lacking. I only made actual progress by reading the framework code.

Any suggestions on the best way to come at it?
Choose The Best Among French Country Homes
We have perfect home builder house plans,new European home designs and luxury mountain home | house plans online. Please have a look different styles of residential custom home designs.
See http://lwn.net/Articles/449448/
Online-tshirt-design-tool - T-shirt designer software
t shirt designer software, shirt design software, online t shirt designer, online t shirt design software, graphic design software, free clothing design software, online tshirt design tool
It "attacks back" in this case by redirecting users to various other sites. The fun thing about applications like this one is that they make for a great self-inflicting DoS; all I have to do, as an attacker, is run a script that launches lame attacks with spoofed IPs against a fusker site. With not too much trouble, I could cause your website to redirect a lot of your U.S. customers to goatse, or whatever module you decide to use.

Hate to be a killjoy, but things like this are usually not a good idea. Unfortunately, somebody has to rediscover that every six months or so.

edit: nevermind, I was going off of hilariously out-of-date information. TCP ISNs haven't been easy to predict in -- gulp -- about a decade. Damn, now I feel old.
I made the tests in the "Head JS script loader" section several times and it wasn't faster.
I don't, "Microsoft and Linux" is quite a precise description for many many years.
F5 Friday: The Gap That became a Chasm
大s美白针
假体隆胸
Fair enough, 'attacking back' might be a bit of overkill, but you can't deny the utility of a pluggable module that spots possible attacks (as connectjs middleware, for instance). What I got out of this is a simple way to implement some form of protection on my site.
Easily Acquire Plumbers|Plumbing Contractor|Water Heater|Sewer Cleaning Services
Certainly there might be companies providing plumber and by acquiring there plumbers,plumbing contractor,water heater,sewer cleaning services you might not be happy because of quality of work they do.Here a professional plumbing contractor offers plumbers, water heater,sewer cleaning related services affordably,particular in areas of Columbia, Boonville, Sedalia, Ashland. Now expect even better plumbing repairs by acquiring reliable low cost company. Benjamin Franklin of Columbia, MO? The Punctual Plumber offers the finest plumbing services available anywhere. (573) 303-0753
Certainly there might be companies providing plumber and by acquiring there plumbers,plumbing contractor,water heater,sewer cleaning services you might not be happy because of quality of work they do.Here a professional plumbing contractor offers plumbers, water heater,sewer cleaning related services affordably,particular in areas of Columbia, Boonville, Sedalia, Ashland. Now expect even better plumbing repairs by acquiring reliable low cost company. Benjamin Franklin of Columbia, MO? The Punctual Plumber offers the finest plumbing services available anywhere. (573) 303-0753
You'd have to have a high level of control of the network that the server lives on in order to do this sort of spoofing of tcp connections for arbitrary IP addresses.

And if you had that level of control anyway, you wouldn't need to spoof attacks against the server, you could just redirect all incoming requests to a different server which returns whatever HTTP response headers or bodies that you want.

So your described attack is highly unlikely to ever happen.
> is run a script that launches lame attacks with spoofed IPs against a fusker site

How do you spoof your IP in TCP? If you spoof your source address you shouldn't be able to get past the handshake.
I'm not an expert, but HTTP travels over TCP and, if I remember correctly, TCP uses sequence numbers to prevent IP spoofing.
They should be able to migrate the VMs off to another box, allowing the first one to be upgraded and rebooted. The additional benefit is that this tests a migration path that ought to exist in case of hardware failures.
The CPI (or variants thereof) is also the only way to reasonably define an objective-measure-based "inflation" in a fiat currency system.
The real story is that this problem has been kicked into the weeds. Greece is still fundamentally over spending; it has been spared some momentary pain, but there is far more to come. My gut feel is that it will take the larger part of 30 years for Greece to right itself unless Germany and France find some way to "pay" Greece its "dues" for keeping the Euro "artificially" low and bolstering Northern European exports to the rest of the world.
The Next Generation Of Turbines Go Underwater, And They're Coming Soon
Perhaps the most expensive chess set in the world. But what a neat idea...
The boy should provide load-testing services as a spinoff business.
http://en.wikipedia.org/wiki/TCP_sequence_prediction_attack

You spoof the IP address you are sending from and then predict the TCP sequence number so you can make it look as though you are receiving the replies (even though they are going to another machine since you spoofed the IP address).

Such an attack was proposed by Hacker News' very own rtm: http://tools.ietf.org/html/rfc1948
Good point. Altough a funny tought to see some company redirect it's customers to goatse.

I think, a more realistic approach for example would be a ssh honeypot like kippo (https://code.google.com/p/kippo/).
I love the idea, but I think the fighting-back tricks are a bit disappointing. I expected stuff like "uses its own botnet to ddos the attacker". Yeah yeah, stupid, not realistic. But redirecting to goatse? Come on. That's less exciting than a garfield comic.
FWIW, pretty much every 3rd (penultimate) year engineering student in India knows the xor-swap, I should think (only they might not call it that, because they've just memorised the procedure, and have very little idea why it works... /cynical)

This is one of the most common questions in 'technical interviews' when big IT companies are recruiting fresh grads.

(See http://www.allinterview.com/showanswers/17145.html)
Copywriting for geeks
I agree with most of what you're saying, but why do you write that the debt is a drag on the economy?

I'm not trying to be obtuse here. There are a lot of orthodox claims about how the debt is a drag on the economy, but they're all bogus. There's the group of people who think that the debt makes it harder for private entities to borrow because of crowding out (both theoretically and empirically false) and there's the group of people who think that the debt is a drag on the economy because the government raises taxes in response to increasing interest payments - but they completely ignore the fact that the government doesn't have to raise taxes to pay the interest, and the government could in fact just use monetary policy to avoid paying any interest in the first place.

So in the end, the whole debt-drag thing is just a neoclassic platitude. It's false, but conveniently used to further the conservative agenda.
At the very least it should be using the asyncness of node to hold malicious connections open forever, bogging down any synchronous attack tools. Although, I doubt there are any such attack tools out there these days.
Oops moment in bollywood
Your favourite hollywood,bollywood actress wardrobe malfunction and oops moment like lara dutta , yana gupta without underwear, yana wardrobe malfunction, wardrobe malfunctions, embarrassing moments
Github Meets CPAN: Ranking
Funny how the banks a while back that were to big to fail and got their massive bailout, many times greater in magnitude than this, never once was the word austerity uttered in their direction.
PHP Programming – Most Famous Language for Web Development
If you looking out to learn more about programming Hypertext Preprocessor is nothing but the so-called PHP? Then this article may provide much information experts as well. PHP has become the talk of the town today. It is an open source.
Hyperbole: I've seen worse.[1]

[1] http://venturebeat.com/2011/07/21/apple-declares-war-on-adob...
In my mind there is no reason why just because I work for a bank that the technology part of the bank can't operate a similiar culture to web startups and leading tech companies like Google, Apple etc.

The issue with working in FInancial Services is Corporate governance & compliance. Every single detail in a bank is monitored & regulated to the point where there are unbelievably strict rules covering every element of the business. I appreciate culture can't be controlled by rules & regulations but it does tend to cripple creativity & freedom quite significantly.

Good luck.
> So it's natural to always try to cheat, steal from "the state" and to pass these attitudes to their children

Does this mean that - given the context you describe - Greece will be essentially unable to raise the resources needed to pay off even the extended maturity debts? I am merely being curious - please take no offence at my question - but what do you think are the chances that we see a 'hard default' in the coming years?
A function to get the Google+ share count of a URL
You are right, but then the question is what you do about it.

Imposing austerity measures domestically is going to hurt American citizens long before the trade balance moves sufficiently.

If China is so hell-bent on sending you guys lots of stuff in exchange for numbers in some database, why don't you just sit back and enjoy?

The only way I see to change the trade balance unilaterally from the US point of view would be to impose tariffs and other artificial trade barriers. That would certainly help if your goal is to stop the net imports, but then you have to ask yourself whether you really want that.
In snow leopard there used to be an option that forced Exposé's "Application Windows" shortcut to show only the active windows of an application's on the present desktop.

I can't find this option in Lion, and I desperately miss it.

Say I have two workspaces each with four terminal windows (each set of terminals connecting to a specific server) and a third workspace with one terminal window sitting around. Pressing the "Application windows" shortcut now shows me all nine windows, and just to add to the confusion OS X Lion switches away from the present workspace to the workspace most recently used!

In my view it contradicts the very purpose of "Spaces" since a workspace is used to unclutter all the active apps and windows.
The solution to this is not to launch a counter attack on the attacker, but to automatically launch automated collaborative investigation where evidence is gathered to try to nudge the attacker into doing something that reveals his location/identity.

1. Software notices inappropriate behavior.

2. Launches a honeypot service with lots of holes in it to give attacker opportunity to get root.

3. Root takes them to a locked down part of the computer.

4. Have the system project a computer where the admins are complete fools, making the attackers feel a false sense of security.

5. Send investigation information about the attacker to other servers running this software, ask other servers to "Help me find the bozo using this spoofed IP address". If you see someone transmitting on this IP, help me find its true origin.

The software could recursively trace right back to the ISP that is hosting the computer of the attacker. Don't have it launch a counter attack, the goal here is not to send the attacker to goatse (he probably enjoys it). The counterattack should be in the form of a policeman tapping the attacker on the shoulder and saying: "you have the right to remain silent".

The answer is not fighting back immediately, it's sun tzu's legendary advice, let the enemy think they have gamed your box, so they launch a bolder move, then you catch them with their hand in the cookie jar.
PDF has static contents and a static interface.
CDF has static contents and a dynamic interface.
HTML has dynamic contents and a dynamic interface.
The idea of a firewall of some sort for web applications seems like a good idea, but this particular one seems rather lame. For example, here's the complete code that implements the 'local file inclusion' attack detection:

var url = require('url');

exports.check = function (req, res) {
if (req.url.indexOf('../') > -1) {
fusker.handleAttack('LFI', req, res);
}
};

https://github.com/wearefractal/fusker/blob/master/lib/detec...

That's very simplistic and I wouldn't be surprised if you could get round it with trickery like ..%2F or similar encodings since if you dig in it's being passed the req from the http Node.js module and using the .url parameter. That returns the full URL from the request itself.

And check out how SQL injection is detected: https://github.com/wearefractal/fusker/blob/master/lib/detec... It appears to be completely unimplemented.

Also, the whole 'fight back' idea is a bad one. We've seen from the spam world that fighting back tends to create collateral damage. If someone is attacking your web site then it's best just to silently discard attacks, after all if an attack back is detected that gives the attacker information.

Also, blacklisting IP addresses on the Internet is quite a dangerous thing to do. The IP address being presented to the end web site may well come from a company or from an ISP where there are many, many legitimate users on the same IP. A blacklist needs to be managed carefully to avoid an attacker knocking out a large group of legitimate users.
between 1944 to 1963 US personal income tax rate was 92%
EBay Patents 10-Click Checkout
And to enter in negotiations of this kind is usually to divert most of your energy from actually building your company. You end up with a team only working on this topic, only working on the contract and the visible surface of the project, and after weeks or months of very hard meetings, you sometimes have bet so much that you think you don't have any other choice than sell.
... for databases.

But for other kernel level things, eg drivers, it's great.
> Are there many developed countries where father, son and grand-son, or uncle and nephew ALL become PMs in the past 30 years?

The United States springs to mind: George H.R. Bush, Jeb Bush, George W. Bush.
Just thought you all might find this useful
Autonomous swarms of robots which process lunar soil to build more copies of themselves. The only problem is the prototypes cost <Voice name="DrEvil">100 trillion dollars</Voice>.
Except then you could use your "lame" spoofing attacks to redirect whoever you wanted to whatever site you wanted anyway.
Video Coat goes Psychedelic
Watch Degrassi Season 11 Episode 5 
Watch Degrassi Season 11 Episode 5
I think it's worth keeping in mind that even Microsoft as of Office 2011 has excised all the PowerPC cruft from Office. Adobe has no excuse other than laziness. The fact that people defend them and attack Apple over this floors me. How long would it have taken to get all the PowerPC code out of CS if Apple didn't have such aggressive cut offs?

I also love that people think Apple needs Adobe more than Adobe needs Apple. Take another look at the revenue for each company and the percentage of Photoshop users on OS X and THEN try saying that with a straight face.
Perhaps a more precise way of saying it is:

Either Color has enormous value or it doesn't.
That's not true. In my jurisdiction it is not even possible for a juristic person (i.e. company) to own any copyright whatsoever. Only a physical person can be a copyright owner here. So I do own the copyright of everything I do for my employer and certainly for anything I ever wrote or otherwise created in school.
Old school networking with groups and circles...

You mean Google Circles! Sorry, I've been brainwashed...
Clearing Launchpad and other OS X Lion (10.7) Tips
The corporation sounds like a sociopathic entity by it's very design. No wonder Mussolini said that corporatism was the first step towards fascism, which, rather alarmingly, implies that the world has already taken it's first steps towards it.
How exactly is this "recursive trace" going to work? As soon as you get to a computer the attacker controls he can subvert whatever mechanism you're thinking of.
How To Install OpenERP 6 On Ubuntu 10.04 LTS Server
[edit: i changed my mind]
I am not really optimistic, eventhough the EU will be overseeing the reforms, greece does not have a good record of conformance. In fact it has a very bad record of conformance, and, to be frank, the greek society does not want to change its attitudes. I expect similar renegotiations every 3 or so years. The "hard default" does not really depend on greece, it's a decision of whether the rest of europe allows it. Without EU protection, greece is already bankrupt.
Mac malware 'explosion' missing in action
This is very disappointing. A comment that's advocating theft is voted up to the top of the thread, whereas my comment explaining that this is THEFT is deleted. Shame on you.

And I love how the hivemind has used the opportunity to pile up on me. I just want to clarify: I am a publishing academic (a grad student), and I received none of your tax money to publish. In fact, I'm not even American.

Just to reiterate: please stop making up excuses for what is essentially STEALING.
Unfortunately for my original point, it looks like my info was waaaay out of date, and most OSs started using cryptographically random ISNs years ago.

My bad, sorry for the noise.

edit: I suppose this means it's time for me to finally discard my copy of Inside TCP/IP, third edition. :-(
This gesture is just a PR operation with full benefit to microsoft. Microsoft has been bullying Linux and Open Source communities with big communication and legal budgets. Some of the target where big corporations, but most of the damage hurt physical people that attempted to earn their live under ethics and morales that seemed to bring a better world for everyone.

Imagine if a big nuclear corporation came to greenpeace and tell them "cheers to you" "regardless of politics and history". It just looks the same way to me.

The worst part is to depict Linux and Open Source people has equal bullier that microsoft. I can't see anything else but an attempt to bring the enemy as low as they are in the public mind.
That's weird, leaving Firefox 4 open on Arch Linux with, for example, a YouTube page open for a few hours breaks the player and requires the flash process to be killed and restarted before it works again. IME, it's not a stable piece of software on Linux.
Ask HN: Best solution for a user-customisable site
Hi!

I'm working on a project which will hopefully allow users to customise their site (hosted by me) as much as possible i.e. change the colour scheme etc.

I want to make the options as user friendly as possible for non-techies but also as flexible as possible meaning column width and page layout etc. are editable too.

Any suggestions for great examples of where this has been done successfully? I've looked at a number of site including SquareSpace which I think balance this process relatively neatly.

I'm using rails so if anyone can suggest any project tackling a similar issue that would also be great but not essential, just examples of an effective customisable interface would be really useful.

Cheers!
blame whoever was responsible for accepting Greece into the monetary union in the first place when they downright faked their economic statistics and obviously noone did any due-diligence?

This is a case where blind hope was supposed to triumph over facts (- hey, it's politics, right?): the deficiencies of Greece's economy were known to everybody but if Greece hadn't "tweaked" its statistics, it wouldn't have been possible to let them enter the EU/ euro zone, so everybody looked the other way.
Why admit Greece in the first place then? The economic opportunities for exporting goods to Greece seem to have been realized, so that part of the bargain held up (- until recently). Also, there was a hope that once Greece was a member of the EU, they would clean up their act and get things straightened. Of course, if you don't impose sanctions and set up strong incentives, the underlying faults don't fix themselves. The one person arguing for administrative reforms in Greece must have ended up feeling like Charlie Wilson making a case for schools in Afghanistan...
Lean Development: From Zero to Launch in Six Weeks: Hicks-Wright.net
"Switzerland's ridiculous privacy laws"

You mean those "ridiculous" kind of laws where peoples privacy is protected against media-exploitation during that equally ridiculous "presumption of innocence" bit that is part of due process?

Those silly Swiss, not to allow mere allegations to destroy peoples lives. Way better to humiliate people by parading them in front of the world press, and make sure their careers are destroyed without having to bother with silly stuff like facts and evidence, the way they do things in the US.
Driving Technical Change sounds like an appropriate book. I have not read it, but it has been on my tech books wish-list for a while now:

http://pragprog.com/book/trevan/driving-technical-change
awesome. 17 years of Linux admin work (yes, I started in 94) and I agree with every word.
That's not actually a universal fact. It's not uncommon to have someone publish a work that was initially submitted as an assignment so and there are university's that don't claim the copywrite on the work.
Why are people still dialling the speaking clock?
When I saw this in my RSS feed, I thought it was spam, the text being so strange.
Google+ Is Really, Really Listening
Good luck. This is one of the main reasons why I just left a company with a very similar culture. It wasn't going to change.

Our "achilles heel" was security. Simple deployments were a nightmare, because of approvals and need to wait for someone with top secret credentials to actually execute them.

Collaboration and idea generation only existed, if someone scheduled a meeting to do it. Really?
"as a member of Wall Street"

You mean as an employee of a firm on Wall Street?

What happens to you if you're not in that club?
How To: Export Google+ Contacts, Circles, Stream, +1s and Picasa Albums | Tech18
To be fair Jeb Bush hasn't been president, and there are relatively few dynasties in the US (there's also the Kennedy's, the Gore's, the Paul's, but most don't make it to be President)
What an enormous wank.
佛罗蒙香水
Breload: automatic browser refresh whenever you save your project files [Linux]
Oh he's so good. I hope he's back.
🍆 made me laugh, can't think why...
It's great news for App Engine. However, ever so subtly Google is increasing developer lock-in in App Engine. GO is Google's language to rope in the developers.
Not in Austria (last time I checked this is in Europe). http://www.ris.bka.gv.at/GeltendeFassung.wxe?Abfrage=Bundesn...
Discount designer high heels shoes sale
Chosen: A javascript plug-in that makes long select boxes user-friendly.