skysight-inc/HackerNews huggingface dataset:
FYI, it is a PDF-based exploit, meaning all users have to do is open a malicious PDF.
edit er, where'd the post from the guy running an appstore go?!

-------------

He also linked to a post earlier in July by the Apparatus creator, who complained of more or less the same thing.

Good spot though, it'd be nice to clear this up. It would also mean a nice payday for the dev too, of course.

Unfortunately, this alone wouldn't solve the other (serious) problems with the store though. Of course, it may mean that the devs in question just don't care about the problems anymore...
The correct link: http://whittleidea.com/blog/24-popular-startup-advice-that-m...
What do all these people do? I can't see twitter needing 600+ people.
This is a vulnerability in a third party script often used in Wordpress themes. It's not related to Wordpress.com.
There are also Linux users who don't use x86 CPUs.
Thank you so much for posting this. I have missed Ubiquity.
So it's ok for an "ethical" company to use patent to force a competing product off the market?

Also who decide what is ethical or not? Why is Apple making ungodly amount of money on the backs of poor consumers is ethical while IV making bucks for their investors is not?

My point is it's better to attack the source of the problem - patent system, than focus on the superficial feel-good stuffs.
Exactly what I thought upon reading "The current version of timthumb has this issue. Since it’s already in the wild and I just got hacked by it, I figure it’s ok to release the vulnerability to the general public."
Download Magic Trip Movie
Download Magic Trip movie or Watch Magic Trip online in just few second with HD/DVD/ipod/divX quality. Watch all new release movies trailer and download movies with moviesbunch.com.
How Go Daddy got its name, its logo (and what they mean)
While it's concise and not overly dramatic, lots of people run Wordpress on shared hosting. That generally means they don't have SSH access and the instructions are harder to follow... It needs a "for beginners" section on how to check and accomplish the steps.
> I don't understand why people continue to naively trust these online wallets or even exchanges

A huge proportion of Bitcoin enthusiasts are speculators. It's hard to speculate without using an exchange. Bitcoin is an interesting system in isolation, but in practice users want the convenience of services that undermine the original goals of Bitcoin as decentralized currency.

Honestly, every time a story about Bitcoin comes up, I'm reminded of EVE Online. It seems to be a community entirely made up of speculators and those trying to scam them.
Hire Indian Programmers - Outsource Software Development to India - PHP, Mysql
O Clock Software specializes in web design and development. Hire Indian Programmers, Outsource Software Development to India - PHP, Mysql, Opensource, Coders, MLM Logic Development
Davidoff cool water wave | Davidoff cool water for women 
Launched in 1996 as a floral, oceanic fragrance for women, Cool Water Woman is Fresh, fruity and upbeat, enough to make you throw on your bathers and leap into the surf. Maybe we're exaggerating a little bit, but not much. You try spritzing this on and not feeling full of the joys of summer, impossible.Feeling the energy. Feeling the freshness. Feeling the passion. A fragrance as intense as a moment of FUN.
No, it asks for RECORD_AUDIO which does not allow recording while calls are in progress. There is even an Android bug open about the inability to record calls: http://code.google.com/p/android/issues/detail?id=2117

This malware seems to be using an unknown method to record calls. The blog post is so poorly written and so light on details...
The cross platform thing is huge for me. If I am investing a lot of time in some text editor, I want to be able to migrate that skill set to wherever I go.

In that regard, nothing beats Vim. There are Vim keybindings for every major IDE. I mean, hell, there are Vim keybindings for Emacs, right?

But still, even if I can't integrate my favorite keybindings into some IDE or other, I at least want to be able to use the text editor of my choice on the platform of my employers choice. Sublime does that. JEdit does that. Emacs and Vim do that, too (they even support non-graphical modes). One could argue that E/Textmate sorta does (No Linux though). BBedit, Notepad++, Chocolat, WinEdt, SubEthaEdit and Kod do not.

For me, this is probably the first major decision point for text editors. Sorry, Chocolat, I'm sure many people will love you, but chances are, I might get stranded on some strange OS and then I will only be lovesick.
Umzug nach Österreich
Sorry, I thought I deleted it before anyone had a chance to respond to it (I noticed something inside of it that was sufficiently confusing that I was going to try to follow up on it rather than broadcast it harder, as I was concerned I was just going to add /more/ confusion to the mess).

Regardless, as someone responded, here is the original text:

--------

Can you please make very very certain that you are not going to be paid that $54,805.14? As someone who runs an app store (and therefore am deeply embedded in “the lingo”), I think you are misinterpreting every quote and screenshot you have provided from Amazon. If not, then Amazon is being /incredibly confusing/ and that is a serious issue that should be frowned at.

Starting, Amazon said that the “price” of the placement is a “0% revshare”: I interpret that as meaning that they are going to /take/, for them, 0%, instead of their normal 30% revshare; this is backed up by their later phrasing “Amazon will not receive any sales rev share” and “at no cost to you”.

They then provided you a statement that claims that “sales” were $0, which is correct (the copies were all free), but the /”earnings”/ were $54k. This $54k is in the same column as the other parts of that table for “money the developer earned”, and simply would have no reason to be calculated in the first place if they were intending on giving you $0.
Finally, if we work the math out from that chart, we get that you normally get $1.89 per sale, making your normal sales price $2.70. On that day, however, for the 101,491 free copies, you got $54,805.14, which just so happens to exactly work out to 20% of that normal sales price, which is what everyone seemed to believe is what Amazon normally distributes.

To me, the way this reads is that normally they will give you a crazy placement on their site, but only if you pay them something: maybe if you give them 5% revshare (in addition to their normal 30%) they will elevate your product with “main page placement”. However, as the Free App of the Day, they do this for 0%: something they consider so important that their e-mail makes it bold.

So, really: are you 100% certain that you are not going to be paid that $54k? If so, Amazon really needs to get their wording more clear. Can you please please verify this?
I was interested in which CPUs actually support AES-NI, and found[1] a list (intel only):
http://ark.intel.com/MySearch.aspx?AESTech=true

[1]: https://secure.wikimedia.org/wikipedia/en/wiki/AES_instructi...
辛巴布反骗子
Coach Patchwork
Not exactly, there was one issue on 3.0.7, which made the 3.0.7-pl1 to be release quite soon.

But, I have to say that we are very pleased about phpBB3 security...
It seems to me that if you're producing a new product in as crowded a field as text editors, it's not very persuasive to, as these guys do, list a bunch of features, particularly if these are features that are common to most other text editors. The website needs a hook: what does this text editor do, that my current text editor doesn't? What's the high concept, the couple of sentence explanation of what makes this text editor special?
"The tool isn’t intended for theft or vandalism: It merely lets users install any application they want on their devices. But jailbreaking, as the practice is called, violates Apple’s obsessive control of its gadgets and demonstrates software holes that could be exploited later by less benevolent hackers."

I thought that was pretty clear.
Take this for what it is (anectdotal evidence) but I found that write performance with python+riak was abysmal, while read performance wasn't as bad.

Unfortunately I didn't have time to hack the riak driver to use a non-google protocol buffer implementation before my deadlines, but it should be do-able.
Skype Launches an Official iPad App ~ Insecure Stuff
>In my opinion in a collaborative environment it is immensely
>useful to know about how a feature / bug fix was developed.
>
>Hiding away the development of a feature into one large
>commit makes it harder for people to review.

this is exactly what be pro-rebasers were talking about.

Nobody of us wants to do one big huge commit that contains the whole feature.

Everybody of us wants small, self-contained commits, every commit fixing or adding one specific thing.

What we don't want is a commit adding a thing, quickly followed by another commit "forgot to add this file", because that later commit provides no value to a reviewer.

What we rebasers are talking about is forging the history in a way that a patch reviewer can go over every single commit and, in one glance, decide whether that patch makes sense or not.

Let's assume it's the old days of svn: A whole file is the smallest unit of change you can commit and there's no way to change history.

Let's further assume that you want to add a new feature to a file. While doing so, you also notice that there's a bug in another part of that code in the same file that became apparent while writing your feature.

Your feature only works with the bug fixed, but the bug fix also makes sense independently of the feature.

In the old days, when committing that file, you have two options for commit messages:

1) "adding feature foobar"

leaving out the fact that you also fixed a bug. This is bad if your bugfix contains another bug and I have to dig in the history, wondering why you changed this seemingly unrelated piece of code. If I have to review the code, I will have to ask you, why you also changed a seeminly unrelated piece of code.

2) "adding feature foobar and fixing bug bar"

this is better, but weren't you thought that a commit should only do one thing? This clearly does two.

At that point, you could use diff, patch and an editor to remove the feature but leave the bugfix in. Then you commit that as "fixing bug bar", followed by more diff and patch to get the feature in, which you commit as "adding feature foobar".

Fine, but very cumbersome, so hardly ever done.

Git, on the other hand, with the help of "add -p" and "rebase -i" makes exactly this possible and turns something incredibly painful into something you can do with closed eyes in your sleep.

And this is why there is this vocal pro-rebasing-crowd.

We EXACTLY NOT talking about mushing everything together in a big commit

We are talking about creating MANY, MANY more SMALLER commits that are independent of each other and thus much more maintainable.

Case in point: Since we migrated to git for our product and since everybody learned about rebase and began using it, we made the same amount of commits in one year that we did in tree previous years.

I would be seriously upset if somebody used the power of rebase to create big huge commits and wanted to push them to our main repo. This is not what we are advocating rebase use for. Not at all.
But one has to remember that it's really been two years since it took off. Looking back, I had a grand total of two tweets from 3/07 to 3/09.
Yes, that's the whole problem with "defensive" patents, which larger companies only own to be able to countersue: you cannot countersue a patent troll, because technically, they don't do anything, so they're not using any technology you could possibly patent.
There are a few more places around the web where people said they received no money from Free App of the Day placement:

http://androidandme.com/2011/06/news/dev-asks-is-it-worth-li...
http://www.amazon.com/forum/amazon%20appstore%20deals/ref=cm...
One page websites design 30 most beautiful and hd examples
We have already got a post benefits of single page website designs for your information and inspiration. Today we have gathered some more hq and latest one page websites design to stimulate and aspires your aesthetic senses and help create your own web design, because websites design play most important role to keep your product up to date and hot favorite for your visitors and customers. Designers try their best to make one page websites design more beautiful and attractive. Look below a really very nice list of One page websites design 30 most beautiful and hd examples.
Killer effex
would have been nice if you actually linked to EJs blog.

other than that sounds like you are doing the right thing.
I love twitter, but I think that the problem they are facing is whether they can maintain their position if they turn too far away from being an ecosystem.

The strength of twitter is it's protocol like structure which could potentially be invaluable just like TCP/IP is (I know they are not by any metrics the same)

But whether they can turn it into a business in the long run that is hard to say. I would worry about conflict of interest just as we are seeing with google now betting against it's own customers.
> there are people of many different real-life races among the Dothraki (I counted white, black, and asian people, not to mention Jason Momoa whose race I have no idea about).

I thought most of the non-brown-skinned people traveling with the Dothraki were slaves received as tribute or taken in battle?
Maybe they want to hire a lot of salespeople to sell ads directly? (unlikely, 800 mil buys, what about 1200 senior sales people? they can't need that many). Maybe they are trying to license some technology (unlikely, what licence cost that much?).

Most likely they are trying to get some cash to buy a company they need.
apparently profit is not something we should come to expect of a 5 year old "company"...
Ask HN: what's the tech behind http://www.webpagetest.org?
is there an open source implementation on this?
> This still allows the attacker to host images on your site though.

Well put.

Probably best to remove allowed hosts altogether.
nxn messed up his or her pronouns. The "it" in "its own line with the tabs showing up below it" refers to the the title bar. It's that on Windows, the tabs and button take the place of the traditional title bar. On Linux, drawing in the title bar proved too difficult for a generalized approach that worked across window managers, so the title bar remains intact, and everything is offset by it.
Not as rare as you would think. Knuth, though not formally trained, has been doing the same (from his wikipedia page):

>In addition to his writings on computer science, Knuth, a Lutheran,[10] is also the author of 3:16 Bible Texts Illuminated,[11] in which he examines the Bible by a process of systematic sampling, namely an analysis of chapter 3, verse 16 of each book. Each verse is accompanied by a rendering in calligraphic art, contributed by a group of calligraphers under the leadership of Hermann Zapf.
Why should there necessarily be state-run media?
Are there any other dedicated node.js hosts like Nodejitsu?
Call Center for Small Business
AVAD Virtual Call Center simplifies the set up and installation of your call center. The only hardware your need are computers, headsets and a high speed internet connection. We will do the rest of the set up.
This is somewhat the state-of-the-art in realtime ray-tracing (actually path-tracing): http://www.youtube.com/watch?v=qntMz2QPA_E using the Brigade renderer. It's using both the GPU and CPU.
You had an opportunity I could only dream of.

I've never had access to a mentor of any kind, on the job or otherwise.

I still hope to have one someday.

That he would spend that kind of time with his students (undergrad? grad? I don't know or care.) is impressive and says a lot.
I can see how it can happen. I've worked at some media companies that do a lot less than twitter does and they've hit 120+ employees, just doing ads. Twitter does ads, as far as I can tell via promoted search results, trending topics, and follow suggestions.

There are people who traffic the ads, people who manage accounts, sales staff that get the accounts, marketers, biz dev, product managers, financial analysts, accountants, and engineering + QA who just do ads, optimization, billing, reporting, and trafficking UI. On top of that you have middle management, then senior management on top of that. Add to that support like HR, legal, facilities...it all adds up.

Not saying that it needs to be that way, just that I've seen it be that way.
I'll reply by pointing out that I wrote

> something like an app-within-an-app, or maybe A and B are actually even more closely tied together than that
did early twitter use to analyze the tweets as well ? how is it similar to old twitter?
Strange, it doesn't recognize my Apple ID at all. It knows the one I use for iTunes but when I try to use my developer ID it says the login doesn't even exist. It's a paid account and it works fine in the developer portal.

(I would ask for help in the developer forums but I can't login to those either. It just keeps redirecting me to the splash page.)
Ok, but I am able to select themes in my site on wordpress.com. Maybe it's a stupid question, but I'd rather ask it than wonder.
Disclaimer: I run an online reservation business.

Your reading of the whole situation is very good.
The Airbnb guys right now will probably hope the worst is past, they made a PR mistake, and fixed it.
But I would suggest them to read carefully your words as they are very valuable to them. Really.

> the only real difference is that these landlords charge about 15% more if you book through Airbnb.

How does it actually work? They charge 15% on top of the price set by the landlord + they charge a reservation fee?
This is not very clear to me.

> Now, when I say majority, I don't mean overwhelming majority but certainly more than half of the actual beds per night.

I can't confirm the numbers but I know for sure that many professional landlord signed up and added their properties in Airbnb. There's really nothing wrong with that, and actually it could save Airbnb's ass in case the non-professional landlord model fails: they'd be one of the best (if not the best?) online reservation rentals website out there, with a social touch. Pretty solid.

> Pro landlords know this, they've experienced this and they accept it as an unfortunate but inevitable part of doing business.

I agree. And most of them ask for a cash deposit on check-in. I wonder why this has not been discussed. It really helps to reduce sensibly the damage. Of course not the 50.000 U$ damage but the many small broken/stolen things which just happen in many rentals.
seems to be working now..
Survetement Lacoste pas cher
As someone who has worked with GPUs and software renderers for over a decade:

I am pretty sure that their tech depends on a few types of repeatable data, which they are able to cache effectively based on rotation -- in other words, they have come up with an efficient way of querying the front-facing voxels in a large set of data based on the resulting view matrix. Where this falls flat is if the data is not procedural, or it is not diverse - as you can see in the video, there is a bunch of the same data copied over and over. However you compress it, such detail is not free and I am guessing there is a lot of data that depends on a good deal of memory/storage to work properly.

I am not so worried about animation or dynamic lights or textures as everyone else is. If they can render it to a buffer and get the normals/depth/UV coordinates, the rest of the rendering can be done in screen-space, including SSAO, deferred lighting, and similar rasterization tricks. Animation can also be rendered on top of the scene, and intersected with the former depth buffer. The only thing I am worried about is the size of the data set and ability to create more diverse landscapes.
Don't forget the possibly dubious whois information. It could be real, but that address and generic name say otherwise.
"Readable code" is VERY important when you have to deliver a working product to a customer. Especially when you're working in a team.

To quote Dijkstra: "The competent programmer is fully aware of the limited size of his own skull. He therefore approaches his task with full humility, and avoids clever tricks like the plague."

The longer I work in the industry as a part of a team, the more I appreciate this saying.
Nobody was down voting you to make themselves right. But the remarks that you made about CPAN to be frank didn't make any sense at all to anybody who has worked with CPAN seriously over years.

Both in terms of quantity and quality CPAN beats any other scripting ecosystem by a very great margin. And its really not about the number of the modules. That many number of modules would not have been possible if Perl(syntax, extensions system) was not flexible enough to allow them.

The traditional approach used by languages is to first build a set of semantics define a syntax and standard library for it. Then any other development in that language happens through frameworks and libraries. Perl is special in this case that Perl allows syntax extensions through modules. There fore you will find not just Modules to do your task, but also modules that add and extend to exiting Perl syntax with sugar. Perl 6 extends this concept further through grammars.

How often and how many language are there today(Counting Python and Ruby especially) that can add something like Moose(Moosex extensions) and other syntactical extension to their language, without breaking backwards compatibility?

Python took around 8 years and broke backwards compatibility to make as little changes as context of a for loop and print statement. Now imagine what it would take Python to fix its object system or its scoping problems.
You can charge people to use your product if it solves a real pain point. For example http://clipyourphotos.com/bulkr/ and some other applications by a developer seems to be doing nicely. It may not get you to millions of dollars in revenues, but few thousands every year is a good start nonetheless.
That game looks like it has been filmed with a cheap digital camera with the ISO setting too high.
That ratio, in isolation, is totally useless.
Outside... the US? What do you mean?
We use BugHerd and love it, it's become an essential part of our toolkit.
Interesting how little fact-checking newspaper do these days, before making crazy and false claims such as this.

http://blogs.wsj.com/venturecapital/2011/01/10/has-a-company...

Looks like Twitter did definitely not break the record here. Remember Groupon?
MENS 420 TOP-BLACK MULTICOLOR [MENS 420 TOP] - $68.99
But not to that insignificant blot, Europe. No consumers over there, from what I hear, just a gang of pirates.
It's true that the system was broken before and will remain broken after this reform, but I don't see how that makes the author confused.

One might reasonably hope that a reform bill would contain more reform, after all, and one might legitimately criticize a reform bill for failing at its purpose.
"polygons for everything else" would mean you integrate two completely different rendering methods in one pipeline. I won't say that's impossible, but it sure sounds non-trivial.
That's not really possible. There are well over 1,000 different theme authors in the WordPress theme directory alone.