skysight-inc/HackerNews huggingface dataset:
How is this not "real marketing"? It's on the front page of many websites. I don't see what "real" expensive marketing would do better.
Seems to lay the blame very squarely with The Guardian.

You can read the Guardian's rebuttal here:

http://www.guardian.co.uk/world/2011/sep/01/unredacted-us-em...

Guardian's quote:

"Our book about WikiLeaks was published last February. It contained a password, but no details of the location of the files, and we were told it was a temporary password which would expire and be deleted in a matter of hours.

"It was a meaningless piece of information to anyone except the person(s) who created the database.

"No concerns were expressed when the book was published and if anyone at WikiLeaks had thought this compromised security they have had seven months to remove the files. That they didn't do so clearly shows the problem was not caused by the Guardian's book."
Yes you can:
http://www.google.com/xhtml?q=9999999..999999999999999999999...
I really enjoyed this entry. I can think of some ways this would help me down the line, I wonder why no one has thought of it before.
You are not a normal buyer. However:

1. You'd be surprised how effective some of the approaches are at a subconscious level, and
2. The mass of people don't spend a lot of time comparison shopping.

Try and find an American sitcom, minus laughtrack. You'll be amazed at how painfully unfunny most of them actually are.
Bing doesn't really come to the rescue -- the X..Y format on Google searches for numbers in a range. Bing seems to just try to find that string as plain text.
>P.S. Why are all the comments suggesting that this is not an accidental loss down-voted?

Probably because it's easier to press a button than to write a convincing counter-argument.
>You're recognizing the quality of the content does not really lie in a singular post or link, but with the poster, in a general sense.

Correct me if I am wrong but, isn't that how Digg used to work? I remember there were these few prominent accounts that had a lot of posts "promoted" and made the site worthless when they started posting crap.
China targets Apple Inc for causing environmental pollution
It seems like they're releasing them now - some pages say 143912 / 251287 released, others are already at 251287 / 251287.
See also http://www.imperialviolet.org/2011/03/18/revocation.html
I'll be fair with him: I would also decline because I would not like to be like him.
For me it has nothing to do with being understood. I read his 'who am I' and all I thought was "man, his life is so empty". But I can't say why.

Sometimes people just want a simple life. Making a lot of money or working less hours does not mean your life will be better or more enjoyable.
This is ridiculous. I don’t know how any whistleblower could trust Wikileaks after what has happened during the last few weeks.

There clearly is a need for a competent whistleblower website. Wikileaks has shown itself to be incapable of filling that role. Egos shouldn’t be more important than leaks.
Running WordPress On Nginx (LEMP) on Debian Squeeze/Ubuntu 11.04
this almost cool is ruby as!
My guess would be that rigging it to explode would be illegal (and very hazardous).
Bootstrap, HTML GUI toolkit from Twitter
Installing WP-super-cache or W3 Total Cache takes about 5 minutes and will do the most effective 80%.
I dunno about you, but the last time this happened the only people that were talking about were gadget geeks like us.

The general population just kept living their lives. What got people actually talking was the actual launch and the TV spots.

Now why would you let the cat out of the bag early just to whet the appetite of a small group of hardcore geeks?
Adaptive Images: Automatically adapts HTML image download size for mobile
In those cases, users purely receive recommendations for media/products. In this case, users receive recommendations for other users to follow as well.
HTC user: Damn, Can you get a signal - I can barely get one bar here

iPhone user: Yep, I get to one bar and always lose it too.
[Show HN] Handpick: The most caring way to share links
There are 6 digits in that, which he mentioned was the minimum for getting an error.
If that's the case, they really have a delusional view of their public image.
I'm not sure I agree. Reads also need to be in transactions in order to prevent deadlocks. I think the paper I linked is pretty accessible, so it's worth a read.

I agree that most of your program should be pure, though, but that's just a good practice in general, not something tied to transactional memory.
Tory Burch Sale,Tory Burch Outlet, Cheap Tory Burch Shoes Sale
US Tory Burch Outlet Sales online offers a series of tory burch shoes with top quality and low price. Shop for best tory burch flats, boots and other style shoes now!
How To UNLOCK IDEA NETSETTER E-1550
The real shame is that there are probably people going to be killed because of the irresponsible ego tripping of a couple of journalists, deluded 'transparency advocates' and other mentally unstable individuals.

Also, what was Assange thinking? 'Oh I'll just give these people the material, we can trust them?' And the notion that journalists, many of whom are as technologically illiterate as they come, would store these files on a computer not connected to any network is so naive it's not even funny anymore.
I think it's hard to fit the mind of someone that wants to do both design and code. It's a combination of engineering and creativity that usually don't go well together. There's a reason why being a hybrid is more rare.

Either way, I wish there were more like me and like this article suggests. I try to blog about this sometimes on http://blog.danielfischer.com and it's also the culture we encourage at Hybrid Group.
BROWSER TO BROWSER FILE SHARING
Log out of both accounts, and then login to your gmail/google+ account first, then google apps accounts. This'll set the cookie identifier that google uses in its urls (/u/0/) to be your g+. Then you'll still be able to use all the google+ stuff without switching accounts, as well as remaining logged into google apps (mail.google.com/a/yourdomain.com etc)
ANDOSID FOR Your ANDroid PHONE::SIMULATE A DOS/DDOS ATTACK ON WEB SERVER
The only stereotyping and pigeon-holing here is on your part.
Facebook to Launch its Music Service on September 22
How to inject a malicious commit to a Git repository (or not)
> For many of us, it simply means having the bills paid and being able to do work we love, on our terms.

But not for all of us, and that was the whole point of the essay. He never says you have to buy into his definition of success, and he doesn't seem to begrudge the people in his Japanese suburban diorama their definition of happiness. In fact he's a bit wistful that it's not his definition.
快速减肥方法
How many dozens of your employees walk around with the device every day in the course of their routine non-work-related lives?

Are the devices a ubiquitous, integrated part of daily life that reach the point of barely being thought about?

Are they even something one pulls out and uses in a bar?
I see why it doesn't work, but why doesn't it work with quotes either?
Dermapure - Perfectly smooth glowing skin
Dermapura is a path to give an edge to Dermapura. This is a bit of good useful content bordering on engineering more Dermapura. That won't stand the test of time. Routine citizens requested far too little from something that had to be hard. I have several Dermapura and I'm just keeping it real. If you've tried to use Dermapura, stick around. Under any circumstances, "It's darkest just before the dawn." and I would do it again at the drop of a dime.
Man, you hit the nail on the head. I, too, have been struggling with this for years. I move slowly, and know others who are absolutely paralyzed. That's the part of the article I identified with. The part about being misunderstood doesn't apply. Everyone I know, even in the suburbs, grasps the concept of entrepreneurship as a life choice, even if they don't have the courage to try it.

I used to wonder, What's keeping me from working hard on this? Now, I think the problem is not that there is something slowing me down, it's that I'm not accountable for anything related to my own project. There are no deadlines. My consulting work carries me, so there's an infinite runway. There's no pressure to start. When I finally start, and really ramp up, somebody comes to me with a paying gig. That feels like an annoyance, an interruption, but I succumb, because it offers accountability. And maybe because it's easier than my own project. And rent ain't free.

How do we obtain (or fake) accountability? I think the answer is a cofounder, but where I'm at (SoCal) they're tough to find, and coming to the table with a specific technology stack (Java) and idea makes it even harder.

Still, I'm not giving up yet.
when the permissions say "Your data on all websites" and its connecting to your server, what exactly do you see ? Cause I know with this permission it allows for example to see a banking site if we were on it.
> "No concerns were expressed when the book was published and if anyone at WikiLeaks had thought this compromised security they have had seven months to remove the files. That they didn't do so clearly shows the problem was not caused by the Guardian's book."

That's a pretty bullshit excuse. Wasn't the insurance file on PirateBay? How exactly should they have removed that once it was out there?
Does this apply to ad networks as well?
That only happened because programmers freak out over the timeline.

Tons of artists use Flash using little more than stop(), gotoAndPlay(), & onRelease().
Simple Home Recipes
It should be pointed out here for everyone else that in general, if you want terms of a well-known integer sequence, OEIS (and the links section for longer tables like that) is a good place to check.
Depends how you insert the ad code into your website; but probably, yes.
You guys are brilliant!
I would see this as a move towards 'enterprise' (yes I know people here hate that word), but look at the url...

$9/app/month means that it doesn't really make sense for tiny hobby sites any more: it is comparable in cost to a tiny VPS host, and my VPS currently handles 19 domains.

The place where GAE makes most sense is the 'line of business' app that is basically just a set of forms backed by a database. Those kind of apps don't have any complex things going on that are going to require integration with existing code or custom server configuration: both places where the current crop of PaaS offerings risky right now.

Line of business apps currently require lots of manual labour from DBAs and IS, so paying $9/month to run the HR application is going to be a pretty good deal.
Another related article on flow cytometry
http://newsroom.ucla.edu/portal/ucla/ucla-engineers-create-c...
Wow, this is smart. This I'm writing down.
Learning to Swim By Reading a Book - Teaching CS in Rwanda
Strange. That directly contradicts Against Intellectual Monopoly[1], which claims patents did more harm than good in this very case.

One reason is independent discovery: most innovations tend to be discovered independently and nearly simultaneously. Like, when "science is ready", innovations just pop out of several people's mind relatively quickly. (See also Eben Moglen's folk theory of the internet and innovation: "wrap the internet around a planet, spin the planet, and ideas flow out of the network".)

If we accept that, the only thing that could have significantly slowed the development of the modern separate-condenser steam engine down is money. Like, no single one investor is willing to risk making the first step, by fear of being eaten by copycats. If this is so, then we have a tragedy of the commons.

Risk aversion in this case is indeed a problem. I think it is mitigated however by (i) the first mover advantage, and (ii) variations of risk-aversion among individuals (combined with independent discovery, you get a winner-takes-all scenario).

Ah, before I forget: adopting an individualist point of view tend to favour patents: an inventor is entitled to reward (forgetting other's entitlement for freedom of invention). If I didn't have that patent, then I wouldn't have done this much good (forgetting that others may have done it otherwise). I know you didn't make this error, —Cf your §2—, but others do —for instance by taking your §1 out of context.)

[1]: http://www.dklevine.com/general/intellectual/against.htm
Why academic publishing hasn't been disrupted [2009]
It proves, once again, that extrinsic motivation does not work.

If you help someone achieve a goal, they will owe you some of their success, lessening their own merit.

On the opposite, as this story shows, the intrinsic motivation can make you do stuff that you thought impossible: http://www.maximise.dk/blog/2009/04/moving-boat.html

So maybe to help people achieve their dream, you have to tell them that it can't be done, that it's impossible.

This would be a truly altruistic way to help people, since you can't claim any part of their success in that case. All they will tell you will be "I told you it can be done!".
* Poland exists (but is shifted eastwards), Danzig is Polish. (>1920)

* Bessarabia is part of Romania (<1940)

* Baltic states appear without SSR suffix, but then again, nothing carries an SSR suffix on this globe - though there is a USSR.

* Istria is to Austria (<1919)

* Czechoslovakia is on the map as one state ( >1918 )

* Albania appears to be a state, it has a different color from Italy. (probably < 1939).

Thanks for the hints. It is most likely an interbellum globe, but the Istria thing is bothersome. Maybe I should take a picture.
An older 2009 NYT article
http://www.nytimes.com/2009/11/08/business/08novel.html?_r=1
From what I've read, I've been given the idea that the files transferred to The Guardian were encrypted for them only - that the password they had worked against that file alone.

Presumably (hopefully?) the insurance file uses a different password. I was also under the (perhaps wrong) impression that no-one actually knows what's in the insurance file.
Linus Torvalds and Others on Community Burnout
> anyone else can just come along and beat you to the implementation

Pray tell, how might they do this when you know the method and they do not? Unless you developed the method, then went around telling random people before going about implementing it.
Social Enterprise concept roundup
The idea is that all CA's are effectively fully trustworthy. The public keys for the CA's certs are loaded into browsers. When a specific SSL cert is created the private key is generated by the buyer (and never revealed) then the public key for that is sent to the CA and signed. In this way a link of trust is created between the CA and whoever bought the SSL cert.

Now, when a browser is used to go to a website using SSL it will ask that site for its cert, which contains the public key and the digital signature from the CA. If the cert is signed by a CA that the browser trusts then the browser in turn trusts that specific cert. The browser then uses the public key to encrypt a message to the site containing information for encrypting return transmissions to the browser.

The point being, all CA's are on an equal playing field, and fully trusted. The moment any one CA is no longer fully trustworthy or the moment its private key is no longer secure the whole system fails.
NoPoPo Aqua Battery Upgraded
Interesting - a lot of people are saying that #2 has become more common with time.
Anonymous DoSed WikiLeaks with RefRef
Actually it just confirms that people on HN don't want you spouting moronic shit, regardless of our feelings towards Apple (personally I hate their products, and I felt very good downvoting you twice).
The Tor Projects Response to their Certs being forged
I'm upvoting you because well done for launching something. But what I see is "our service allows you to email your friends, but only with links, and not using your normal email client". Explain why I'm wrong?

And which of my problems are you solving?
How much time do you have left until you die?
Friends with Benefits online
'Occupy Wall Street' 17th Sept protest
>Now why would you let the cat out of the bag early just to whet the appetite of a small group of hardcore geeks?

Because you have everything to gain and nothing to lose?

I think you underestimate the noise geeks make. I'm sure it will be reported by mainstream media. A fitting headline would be:

New iPhone scheduled to be released in October lost at a local restaurant!
How do we even know this story is true? There's been no actual leak yet.
Maybe your company doesn't have competent and determined adversaries who are hell bent on stealing your product designs by targeting your elite staff.

I wont be surprised if the person who lost the prototype was wined & dined by a "new friend".
> Officially I live with a zombie

Not as uncommon as you might think.
Plight of the Living Dead(http://www.time.com/time/world/article/0,8599,2054133,00.htm...)
'Anti-cancer virus' shows promise
Does Google see UK developers as unimportant?
staticmatic deploy amazon_s3

FTW
I can't imagine the insurance file being little more than the full uncensored cable archive. What else could it be? If Wikileaks had a gigabyte of compromising information on the US government or some other powerful entity, surely they would release it? Isn't that their stated mission?
I feel like helping these people. Is ther some kind of public legal fund for these guys?
Well, #2 should be "the code is a mess" which sometimes is a result from too many layers of abstraction, sometimes from improper abstractions, sometimes from lack of abstractions. In my experience novices underengineer, while experienced coders do tend to overengineer.
What if they wanted to modify the source archives of some other project hosted there? Obviously the kernel is a big target, but it seems there are lots of other less-widespread things on there that would be useful to backdoor.
Faux Apple mocks and speculation about the new iPhone are on the front of most gadget websites anyway, so I fail to see how they'd gain anything extra from this.
If this were true, surely it should allow you to use quotes to force it to ignore the "range" operator...

http://www.google.com/search?q=%229999999..99999999999999999...
We don't know that they didn't get a forged certificate for ssl.google-analytics.com.

Diginotar haven't (AFAIK) released even a partial list of affected domains, other than admitting that there were quite a lot of them.
Yep, the very detailed article comes down to one basic fact: "we always have lots of copies on our and other people's machines so we can always track ANY possible modifications."

In that regard, I guess it could be more "likely" to sneak in a very, very well hidden and cryptic exploit in contributed code.
A large portion of people and distributions take the kernel from tarballs, not from the git.

So, this is very annoying for people who took kernels tarballs in the past from kernel.org.

Sure, they can regenerate all the tarballs from the git repositories, but this isn't the point for the past actions.
1) The blame lays squarely with the guardian who think that PGP offers some sort of 'temporary' changeable password.

2) From the whistle-blowers perspective all documents have been released. Sure if Wikileaks hung onto them it would have a greater impact.
I'm not a big fan of handing over the security of my website to third parties by letting them inject arbitrary code into my pages, eg Google Analytics. A lot of people seem to do it without giving it any consideration though.

You have to weigh up the pros and cons I agree. However, do you need that like button which works by including javascript from facebook.com, or can you live without it? Even better, can you do something alternative which allows you to have a like button, but without including third party script?
Acrobat PDF Unlocker
To unlock Adobe Acrobat PDF files easily, get Acrobat PDF Unlocker tool that will help users to unlock PDF files for editing, copying, printing and extracting. Online PDF Unlocker also unlocks multiple PDF files and removes PDF password security easily.
All this SSL spoofing of late coincides nicely with the adoption of "always on https" by facebook/google/twitter/et al.
You can calculate the "weight" of the movie for a given user once. The number of movies is very low, compared to the number of stories on reddit.

Whatever that guy is proposing is an insanely complex dynamic system.

I'm not saying it's not doable, I'm just saying it's very expensive.
Yup. Just unsubscribe from the popular sub reddits like pics, reddit.com and focus on technology, science, askscience and reddit is still as good as ever.
If it started once and watched files for changes, it would only be the compile time (which, if fast, would be great). As it is, the total time is the only one that counts, as it is the one that affects your productivity.

JRuby guys were so aware of this that they actively promoted nailgun[1].

[1] http://www.martiansoftware.com/nailgun/
It kind of depends on your definition of "naive"

For instance one 'perfectly naive' implementation of F(n) would be:
return 1.6 ^ n;

or whatever your language of choice's equivalent is (depending on your syntax)
Top Birthday Experience Gifts
Just by having a forged SSL Certificate for ssl.google-analytics.com how can they supply their javscript ? The request still goes to the google servers and not to any evil-democracy-suppressors.gov.ir

So sure if they could reroute the request to their servers evil things could be done. But they can NOT. Or am i missing something ?
When discussing potential markets, please do calculate money instead of customers.
Maybe 100 million poorest farmers offer just $50 million of potential revenue, making it useless to invest. Maybe the numbers are very good due to the large number of people - but do show them if you are trying to argue for them!
A solution: http://www.convergence.io
Also an important question: "Does your company have anywhere near as many employees as Apple?"
However, you can still set Google Alerts for a search like that.
Can anyone explain to me how I can open up a CA and get my CA certs distributed with browsers and JVMs and what not? Is there some sort of "IANA" that approves and manages this and why would they approve all sort of shady CAs which clearly are a dangerous weak link in the whole SSL construct.
I don't think the Iranian government has any difficulty forcing telecommunications companies to install filtering / interception boxes.
Oh snap. I was going to develop something extremely similar to this over the next couple of months (i've only just started to learn how to develop).

I can relate totally to the problem you are solving here, and its a very real one. Let me know if you want me to send you some of the ideas that i had. You might be able to use them ;-)
As far as I can see this isn't a fundamental problem with SSL, but the fact that most environments come pre-installed with certificates for CAs that aren't really worthy of trust.

[Edit: Certainly looking through the list of Trusted Root CA certs on this machine I have no idea who 95% of these organisations are - I also have a certificate installed by a proxy so it can intercept any SSL traffic and inspect the contents].
I use NoScript. google-analytics is never activated.
The aim is for monitoring traffic from within Iran.

The government almost certainly controls all internet traffic entering or leaving the country at the ISPs, and could intercept and/or redirect it as necessary.
Quite true. If they did get a certificate for ssl.google-analytics.com, I guess the title of my post should have been "We're paying attention to the wrong forged SSL certificate" -- the contents of the post is still valid, though.
Well I suppose the assumption is that the +1 button will eventually be baked into Chrome by default. And Android...
This isn't just an article about their opinion on the DigiNotar debacle. Multiple Tor Project certs were forged, and they've taken several steps to reduce the likelyhood of this being a problem in future.