skysight-inc/HackerNews huggingface dataset:
If you're interested in this topic, my piece on practicing how to make money might interest you: http://www.inc.com/magazine/20110301/making-money-small-busi...
Black Ops has had its share of glitches, but it is updated far more often than MW2 ever was so they are patched out quickly. MW2 was basically abandoned due to the implosion of Infinity Ward/Activision, which is why there was hardly any DLC for it (relative to being such a huge selling title) and very few updates to fix known glitches.

Didn't play WaW, so I can't speak to that one.
For about two minutes I fell in love with this.

And then someone started repeatedly stacking blocks in any game I played to force a loss. And there was nothing I could do. Me and my teammates' beautiful castles of tetra...destroyed.

Find a way to fix that, and you have an amazing game on your hands. <3 it.

---

EDIT:

So after playing a little more, and getting more acquainted with the game, I can add that I love the dynamic that multiplayer adds to it--especially when you have six or seven other players and you're all trying to space yourselves out evenly, and you sometimes have to cross the whole map, putting pieces in and fitting them around with other people--I had some people do some (incredibly good) anticipation of my moves and vice versa--it felt surprisingly cohesive as a team game for something that used to be such an individual effort.

I have a note about the IP of Tetris, because I seem to recall reading that they're: 1) quite strict about the licensing of the game and 2) adamant about the rules and structure of the game when they do give permission for it to be used.

I love Metris, and for a 48 hour project I think it's awesome--I also second the feedback given by Jarred, particularly for ghost blocks where my tetra-block will land, and the movement: holding down keys.
If there are big BGP changes, the world notices. If the BGP for the specific netblock your site is hosted on changes, the world probably does not notice. Your users will see slightly degraded performance (actually, in some cases it will improve), and (presumably) a number in the NSA will be <1% higher for a few minutes, but that's about it.

I've worked on software that literally (intentionally) publishes BGP updates every ~10 seconds. It didn't bother anyone, because it wasn't playing with many addresses.
The Slow Disappearance of the American Working Man
Well, it works 25% of the time you try it. And if it doesn't your modchip can full-reset and start over - statistically it already is "reliable", all it means is a longer (variable-length) boot cycle.
Clicking "link" will also allow it.
Also, I think it's inappropriate to downvote a comment thread before misunderstandings can be sorted out.

I've spent 10 years in the security industry building new technologies, several of which are used widely in large banks and payment services.

Nobody should expect respect but disrespect should not be so readily served IMO.
I'm sorry, but I've already answered this, as a reply to one of your own comments. Please scroll up.
You're right, in order to get the security right, you wouldn't be able to access the decrypted content with javascript. The browser would prevent that from happening.

Yes, potential functionality would be lost, but that's always part of the trade-off for security.

But I don't think the trade-offs would be detrimental, from a usability standpoint.
I'll bet you 100 bitcoins or $1000 (winner chooses) that 12 months from now bitcoins will have at least 75% of their current market value.

The value in a currency is who accepts it. Bitcoin is well-established and valued by many. That can't be said for any of these other schemes.
The difference I guess is that rather than "referer" having only one setup (the way it's specced and the way it's implemented are identical), in this case there are two competing methods: The way browsers do it, and the way every other language library does it (which is, incidentally, the way the spec says it should be done).
That's not what I'm questioning. Its the accusatory tone that's unique to CS professionals.

As if one should be doing something that betters the world, and if you're not then whatever you're doing is a waste.

Outside of CS, people tend to read "betterment" into their current job if they're satisfied with their position. Guys who work at an umbrella plant aim to make the best damn umbrellas you've ever seen, and are happy that due to their work people are less wet and less sick than they would be otherwise.

They don't go home and worry about why they aren't using their machining skills to build things for the poor instead of providing umbrellas for other relatively well off 1st worlders.

It's an odd conceit that CS professionals have to say that you must do good, or else you're no good. It sparks of noble oblige, and frankly I don't think CS (whilst important) is so important that it demands that.
Show HN: Realtime Comment Feed Built in 48hours built with MongoDB + Node
Clearly mountains out of mole hills

Best Comment: @chjj "Is it me, or is this argument over a single colon?"

https://github.com/joyent/node/pull/1580#issuecomment-192688...
Steven Jobs, American Genius: Exit the King
FTA:"THAT ATTACK SOUNDS COMPLICATED! SURELY, YOU'RE BETTER OFF WITH CRYPTO THAN WITHOUT IT?
There are three misconceptions embedded in that common objection, all of them grave..."

I guess I shouldn't lock my car, either, right? After all, someone could simply break my windows and steal whatever I have inside. Or maybe, just maybe, using some protection actually is better than using no protection, provided you don't put more faith in the protection than the protection warrants. Just like I wouldn't store gold bars in my car, I wouldn't use jscrypto to protect things that were too important for that level of protection. I will, however, feel okay about keeping my sunglasses in my car, and I will feel okay about using jscrypto to send my phone number over email.
I like namecoin. It tries to solve the domain name ownership issue without a central authority. The idea being that the FBI and ICE cant seize namecoin domains without shutting down the network.
I play only a small number of games and these were very good:

Mass effect 1 & 2 on xbox360.
Starcraft 2 on mac.
Halo series was alright.

Try playing on a console, it'll be more stable.
From a user perspective, how would you identify "safely" encrypted elements, in a way that can't by spoofed by the page rendering a nonencrypted element with appropriate styling?
If by "has enough code to run crypto inside of it", you mean "the SSL support and the javax.crypto library", sure, it gives you some useful stuff. You can also access all that stuff from JS without ever writing a line of Java code, so that's a wash.

As far as self-contained Java applets go, every attack that can be used against JS can be used against Java. It's a trivial exercise to instrument any method call you like, including calls to any method that attempts any kind of verification. Java bytecode is really quite transparent.
It's a discussion about a programming issue that could be of interest to hackers everywhere who run or participate in OS projects with implications on how to respond to this sort of situation (expected behaviour vs. standards). Seems to me like there's something to see, and that's why I submitted it.
Oh, it's way worse than the late round VC's and the 5000 employees. All those small businesses don't get their share of the groupons immediately. When it implodes, and I think it will, thousands of small businesses will have the unenviable decision of whether or not they honor groupons they weren't paid for.
Show HN: CI for node.js; built in 48 hours for the Node Knockout.
Yeah my analogy certainly isn't a perfect one and that is a good point, but for node.js I'd still argue that being compatible with JavaScript running on browsers (even if that means being 'wrong') is much more important than being compatible with other languages.
Hacker has to compromise the server

Or the connection in between, unless SSL is satisfying that part of our threat model.

then, for each connecting user, serve malware javascript.

No problem there, that's a core function of a server. It's a feature of MitM tools as well.

What's more difficult is an attacker who wants to target only a few specific users.

Meanwhile, external network of monitors, masquerading as real users,

A nice idea, let me know when you get that implemented.

detect that server is compromised and alert the admins who can take appropriate actions.

That's always a fun conversation to have. Be prepared for denial, anger, bargaining, and depression before getting to acceptance.

Monitor network: "We've found sometimes users are receiving the old version of the Javascript, you know, the buggy one? Particularly when certain key words like 'democracy' occur in the text."

Site operator: "Oh, must be an old file on one of the servers."

Monitor network: "We think it might be a targeted attack"

Site operator: "Well, what are the chances of that"

Monitor network: "This is not a random phenomenon like earthquakes"

Site operator: "But, you can't prove it, and not all users are affected, right?"

...and so on

Overall, compromised server can be shut down in minutes during which only a fraction of user base will have been affected.

This scheme should not be confused with actual security.

How does this not add to security?

More moving parts to break and make things worse. Every bit of script and supplemental page content is another weakest link.

And they will break, because they're being developed by those who are ether don't understand or are not willing to admit that they're pushing snake oil, even after the systemic flaws in their scheme have been pointed out repeatedly.
Number of miles driven seems like an important consideration. The following graph is in an interesting (odd?) format, but it looks like the number of miles driven by the average American has dropped every year since 2005:

http://mbostock.github.com/protovis/ex/driving-full.html

On the other hand, the improvements in safety are even more dramatic if you consider the average person is driving about 3000 more miles per year than they were in 1975.

As an aside, the Spark Lines are cute, but if the goal is conveying information it would be nice if they expanded to something more detailed when clicked on, rather than just repeating the same information. I was trying to figure out if reduction in miles driven from 78-80 matched up with the this articles data, but it was hard to tell.
Something might be done to vary the pieces. My first nine pieces were all the same shape, the following 5 were the same and so on.
That would look better with the Y to the left of "Like" instead of on top covering the i and k (and leaving a blank space to the left of the L).
> Bitcoin is well-established and valued by many. That can't be said for any of these other schemes.

That's true right now and is what I said: currently Bitcoin has a rather good marketing power over the masses, and alternatives failed to appear yet.

However, once other systems start to emerge and people realize there's no value in such coins except their advertisement, there will be no moat to protect Bitcoin from its competitors.
Oh, come on now. There's a bit of a difference here.

We can all agree that getting regular exercise and eating well is a good idea, and stuffing your face with junk food every day a bad one, without thinking either should be something enforced by society upon people.
The Double Dip and an Eye to the Future
صبغات شعر 2012
Switzerland looking to ban PowerPoint?
I think it's because SO many startups (at least the one's that get a lot of press) are related to social networking social bullshit. Contrast that with "world-changing" endeavors, and the difference is pretty stark.
Nike indoor total 90
I'm throwing a rock into the ocean here with all these comments. But I feel like the entire assumption of the article ie "SSL is expensive + hard". Is it really?

All the big companies are making the change to SSL. Sure it may seem expensive, but how many engineer hours will you throw away on cutting those costs? Will those hours have cost you even more? Further: what is the cost if your engineers' implementation is poor and easily broken?

You spend money on SSL, SSL tech gets cheaper and faster. Rinse, repeat.

Or am I missing something?
"We regret the events surrounding this title release and that our customers were put in the middle of this issue between GameStop and Square Enix, the publisher of this game."

If they want to win back trust they should start by taking real responsibility for the very stupid thing they did.

Their apology comes off like an "I'm sorry... that you took offense to what I said" style non-apology to me.
> Or the connection in between, unless SSL is satisfying that part of our threat model.

From my original comment: "With HTTPS."

> A nice idea, let me know when you get that implemented.

It's part of a service I'm currently previewing privately.

One of the projects I worked on was a sophisticated fraud-detection framework which was deployed to one of the largest banks and acquired by a top security company. Stuff like this is not easy to implement and work never ends but then that's why we get paid.
All it takes to be considered a "bad neighborhood" is to have a dynamic, ISP-owned IP, as I found out when I tried to send mail from my personal server. And yes, I'm too cheap to pay Comcast even more money for a static IP.
The point behind the line count is that simpler code on the framework side counts, particularly when the documentation is sketchy or unclear. Less code for the same functionality means that you have less reading to do when learning the framework's intricacies.
You also don't see breathless AccountingCrunch articles about accountants getting $41 million to develop accounting for pets and similarly silly things. The call for loftier thinking is in response to the fact that the tech industry seems to actively celebrate shallow crap. It's easy to forget that there are more praiseworthy goals in the world than having a successful social network when that's what everyone actually praises.
for each connecting user, serve malware javascript.

For most web servers, this involves replacing a file. And since your attacker can just go to the page with crypto JS to receive the "clean" version, s/he can prepare the malware JS in advance.

Overall, compromised server can be shut down in minutes during which only a fraction of user base will have been affected.

How does this not add to security?

Oh, it adds to security. For the length of time between compromise and a replaced JS file. As noted above, s/he can easily rewrite your JS appropriately before entry, in which case you've got about a minute or two of extra safety.

If you assume you can detect any compromise of your system within 3 minutes, then yeah, 1 or 2 minutes out of 3 is great. If you miss it, then it's a whole lot of work for barely any benefit. And assuming you can detect any compromise within 3 minutes is highly optimistic.
You make a great point in general, but especially about gaming. It's not hard to imagine a world where "gamification" eventually leads to productive outlets that appear to be "games". In fact, we already have this in crude forms all over the place, e.g., bonuses and promotions in the corporate and military context. That's where the lines get very blurry.

I really like your point about production being useless without consumers, but I suspect that there will never be a shortage of consumers.
Delivering cryptographic software via a network, having it run in a "maleable" runtime and creating a user expectation that it will be secure, is not new.

We've been doing this on the desktop for years.

I'd like to pose a question to the authors:

Don't all the premises you've based "Javascript Cryptography Considered Harmful" on apply equally to downloaded desktop software?

-A chicken egg problem

-A malleable runtime for apps with admin access

-Code verification being defeated by other hostile apps on the system

-Inability to trust the secure keystore because of the chicken-egg problem and other hostile apps installed prior to the crypto app's installation.

-The weakness of pseudo-randomness
It appears, based on the interesting submitted article, that it would be more informative to report about 100 meter dash winners where they trained, and who their coaches were. Much the same could be said about marathon winners, who tend to train in a different part of the world.

After edit: the kind first reply to my comment here mentions a possible study design for looking at what might influence athletic success among athletes from one place or another. A "genetically sensitive" design for such a study would have to consider quite a few other issues, not least actual individual genes, which have been surprisingly neglected in genetic research over the years. (Rather than actually looking at genes of each individual in a study, which continues to be a generally expensive and occasionally error-prone enterprise, most previous genetic studies of human behavioral characteristics have been based on proxy assemblages of genes, by studying closely related family members, or in the best cases monozygotic twins.)

Readers who haven't seen this pair of links before, which I share fairly often here on HN because they are by world famous human behavioral geneticists, may be surprised by what they learn from reading about what twin studies can and cannot say about genetic influences on human behavior.

http://people.virginia.edu/~ent3c/papers2/Articles%20for%20O...

http://people.virginia.edu/~ent3c/papers2/Articles%20for%20O...

Meanwhile other readers have commented, and tying in what I've written (and linked to) above to what several comments here say, a common fallacy comes from assuming that "race" (as socially defined in one place or another) has anything much at all to do with what genes one would find in a particular individual. Serious geneticists are actually some of the leading scientists in suggesting that in medicine, law, and education we should pay less attention to "race" than formerly, to avoid inherent cognitive biases in explaining individual differences.
I work on stuff in used in payment systems too and I agree. (It wasn't me who downvoted you). Back when we could see the scores, it was possible to downvote something that you considered overrated or alternatively refrain from downvoting it if you didn't feel it deserved to go negative.
On a side note, this also shows how ineffective resumes are at connecting employees and employers. If you repeated the same experiment with github accounts, perhaps less bias would show up.
Aquarium leasing houston
If you are a business professional looking to enhance your office with something original and different, our wall aquariums are the perfect way to impress,Aquarium Design Cheshire, Aquarium Maintenance Cheshire, Aquarium Hire Cheshire, Aquarium Rental Cheshire,Custom Fish Tanks Cheshire,Fish Tank Cheshire,To get more information visit our website.
>Fire well-performing CEO Mark Hurd

Based on what?
Not "apparently". A guy showed up wanting to contribute, and based on the response he got, he perceived a "foot-stomp and 'you shall not pass'."

It doesn't matter whether you think you're contribution-hostile, it matters whether the guy who tried to contribute thought you came off as hostile, which he clearly did.
Is anyone else as amused as I am by the juxtaposition of "I was at jwz's club" immediately followed by "perl and regexes seemed like a good idea"?

(now he's got _two_ problems...)
While I don't disagree with what you're saying, I do think that the general culture is a bit more tolerant of differences now than it was when the experiment was run.
Congratulations, you've also just described the U.S. dollar. Not backed by real life assets and scarcity not guaranteed by the federal reserve.
Could be the same way the browser identifies "safely" implemented HTTPS (ie, popup, icon, etc). A nonencrypted element with appropriate styling would not have the same browser-level indications that an encrypted element had.
It's not just airbags, a huge part of it is the greater availability of anti-lock breaks and traction/stability control. My brother-in-law is one of the head guys at GM working in this area and he talks about how life saving these technologies are all the time.

There are lots of studies out there on this, this CNN article mentions a study that says that 1/3 of deaths can be prevented by Electronic Stability Control: http://articles.cnn.com/2006-06-09/business/iihs_esc_1_multi...
Compare it with Bottle's version though and it doesn't look quite so concise any more: http://bottlepy.org/docs/dev/
Downloaded desktop software is generally written in a compiled language like C, and for example can't easily be XSSed to inject JavaScript.
Does GameStop have any real competition in the retail space? I'm not talking about Walmart, Bestbuy, etc. but a retail chain that does exactly what they do but better/worse? Maybe it's not worth it with the rise of download services, but it just seems like there is opportunity here to improve this process and do what GameStop does but better, I only seem to hear negative things about that company.
This game doesn't work for me in Firefox or IE... I see a block but it doesn't move and I can't move it. What now?

EDIT: Aha! It only breaks if I enter a Twitter username.

EDIT2: Nevermind. It stops working after awhile. The score moves, but I see no new pieces.
"Better than Carly".
We've been doing this on the desktop for years.

It didn't hold up well against attack there but there was usually an underlying bit of assumed trustworthiness on the local network that shifted the blame.

But protocols designed for enterprise desktops always turn out to be an unmitigated disaster when run across a hostile internet, particularly from a security perspective.
Yeah but C has its own problems--buffer overflows and the like. Just because it doesn't have exactly CSS doesn't mean it lacks similar problems.
Me care too. But centralization, in the right hands, seems able to produce some genuine advances. I hate that the iPad is closed. But I really think its ease of use, and the ethic of usability it requires for "app" success, and its functionalities, make it a compelling step forward. I really wish, for many reasons, I could better articulate why.

It's very hard to see how a decentralized community could implement such a vision -- it _might_ arrive at a similar or better place through evolution. But look how long Linux has had to hit the desktop target.

I don't think centralization is the inevitable winner. The decentralized can and do follow these innovations, and the centralized seem to struggle to keep up with the pace of innovation. But lately we've seen some advantages for centralization that decentralization hasn't yet met.
Trail Guides, Route Planners & Free Maps
DICE explains why BF3 runs at 30fps on consoles
Usb
http://www.baylar.com/ - Baylar Promosyon, Kirtasiye ve Reklamcilik, PROMOSYON ÜRÜNLERI, Promosyon bellek, Kalem, Masa Setleri, Promosyon Ürünleri
I have to feel that GameStop is utterly doomed in the long run. I think that viewing GameStop as an opportunity to get into the space is like viewing the weakness of Blockbuster to get into brick and mortar DVD rentals.
Eric Schmidt: If You Don’t Want To Use Your Real Name, Don’t Use Google+
Naming of the "Ice IX" trojan
It looks like the developer of newly discovered e-banking malware named "Ice IX" has been watching too many hollywood movies ... the film "The Recruit" (2003) featured a fictional computer virus called "Ice 9" which would propagate itself over unprotected power sources and erase any hard disks it came into contact with. Lets hope the real Ice IX’s M.O. isn’t as advanced as that!