skysight-inc/HackerNews huggingface dataset:
Just because the OS or system (e.g. Siemens) vendors have released patches for the zero-days, doesn't mean they have been applied. In an environment where none of the machines have internet access, applying OS patches takes non-trivial technician time and companies or plants are often lazy.
You seem to be using “carveout” as though it’s a word. I think you meant “caveat”.
IRC channel I founded is an integral part of my life, not Facebook. But I can understand that for some Facebook is like my IRC channel.
New Sean Parker Startup: Airtime.com
What Recession? Top 9 Most Touristy Spots all in US
THINGS THAT YOU NEED TO KNow ABOUT BUSINESS SECURITY
It does not matter how big or small your business is, what is important is that the security of your business is one of your main priorities. Remember that your network gives out access to very important applications about your business security. It also serves as the primary location of data about costumers, financial reports as well as many other sensitive information about your business.
In the scenario outlined in the OP; an XSS on another www.google.com page is hypothesized:

https://accounts.google.com/reallyuglyurl?lotsofvars=true&XSS=here

once that hypothetical XSS is discovered, then the attacker can pushstate the page with the XSS to look like the login page...
Ask HN: Will my idea be the solution to the Divorce problem?
After reading this article (http://www.springwise.com/lifestyle_leisure/china-love-letters-7-year-delay-tackle-divorce-rate/) I started thinking about divorces and wondered what if we as hackers can do something about this. What if there was a service that lets you become more spontaneous?

Spontaneous gifts delivery service for your girlfriend/boyfriend/husband/wife

A site where people can tell us something about their significant other and maybe tell us some of their preferences such as type of things they prefer, their budget,some important dates (birth date, anniversary date, when they first met)

This will help not only those who forgets important dates but also those who want to send some spontaneous gifts to their loved ones without having to do anything. We will automatically send the loved one a gift every once in a while (based on certain preferences of course)

What do you guys think? Would you find this type of service useful?
Almost to a one, every close friend and family member on Facebook called me out the first time either by PM, email or on my wall. Despite even these public posts (which I did not remove), for 4 straight months the same dozen or so distant friends continue to wish a happy birthday. And another 40-50 other distant friends have posted at least once. This coincides pretty well with my previous real birthday stats if you add the close friends/family numbers with the average number per fake month of distant friend well-wishers.
Attacking industrial systems is not something that 'just any' hacker can do. Not necessarily due to the skill involved, but just because getting access to a system or the software that runs on the system may not be trivial (unlike, say, getting a pirated -- or legit -- copy of Windows).

The gist of this guy's argument seems to be that industrial systems aren't being patched fast enough to plug the holes that stuxnet used. Until these systems are all fully patched, anyone looking at stuxnet can exploit those holes without needing to gain access to the software these systems are running (to find new exploits).
Web Scraping with Google Spreadsheets and XPath
Probability is whatever you want it to be if you are allowed to pick the sample space of your choice.
Princess of Light
A better title would have been "Computer consultant will say anything to stay relevant and drum up business".
You are wrong. Groupon's accounting was NOT standard GAAP accounting.

At issue is whether or not Groupon was the principal or the agent in the transaction. To determine whether or not Groupon is the principal (which they would need to be in order to book the entire coupon as revenue) they would have to satisfy ASC 605-45. The following was taking from http://www.pwc.com/en_GX/gx/pharma-life-sciences/pdf/med-tec...:

ASC 605-45-45, Revenue Recognition—Principal Agent
Considerations [formerly contained in EITF 99-19], includes a
number of indicators of gross and net arrangements. Indicators
to evaluate gross treatment include:
•	The seller is the primary obligor in the transaction.
•	The seller has inventory risk (general inventory risk before
customer order is placed or upon customer return or risk of
loss after customer order or during shipping).
•	The seller has latitude in establishing price.
•	The seller changes the product or performs part of the
service.
•	The seller has discretion in supplier selection.
•	The seller is involved in the determination of product or
service specifications.
•	The seller has physical loss inventory risk.
•	The seller has credit risk.

It's obvious they were the agent and not the principal for the transaction. This is why they were forced to change their accounting for their revenues.
we use gitolite with git hooks, and no trouble so far...

and why ask generate private keys instead of asking users to submit public keys? Less work and more secure.
The people I know that get the most utility out of Facebook, are attempting to keep in contact with a large base of friends/family once they've move away from them.
I see (what I imagine to be) both perspectives. If you're a programmer, you think of course suggest is talking to google -- that's pretty much the only way it can work. That doesn't really fall under whatever mysterious third-party bodies collecting your browser history that the OP was trying to FUD up the place with.

On the other hand, most people don't stop to think that search suggest is sending each character to get new suggestions, which is "user information" that is collected (though admittedly the privacy policy does say the logs are anonymized within 24 hours). So it really should be in the list of information that Chrome collects, even if it feels self evident to some.

> As I said on Twitter, I'm not really bothered by these things

Well I hope not, considering if you replaced parts of your comment:

"if you don't opt in to anything and you simply type some things into your [Firefox search bar] which get sent to Google for suggestions, or if you don't opt in to anything and you simply [type a malformed] URL [into the AwesomeBar} and that sends data to Google for [a search page], or if you don't opt in to anything and [Firefox queries of] Google's phishing and malware service collects sites you're visiting"

it still applies. and Mozilla essentially sells that information by selecting a third party default based on some non-transparent bid process :P

Personally, I'm just sick of the FUD, especially in comments on an article asking to stop the insinuations and actually list problems so they can be fixed. There are and probably always will be defaults some people disagree with (and feel are doing users a disservice since users rarely change defaults), but there is a world of difference between that and "I don't need to give evidence, I can just feel it. We all know Chrome is etc etc"
carveout is a real word. In contract law and in financial regulations, it refers to a specific exception to a general rule.

I have seen many organizational bodies, like the IFRS, use carveout as a word rather than carve-out.

Unfortunately I spent way too much time this week dealing with legal issues :/
[TEK-030] Innocent Pure Lady | HotSceneTube - Paradise of the hottest clips
SketchKit - Keynote Wireframing Template for iPhone
This is a fun thought experiment, but I think it over dramatizes the reality.

There's a huge potential set of humans, of which the current population represents one infinitesimally tiny subset of that potential set. But there's a lot of people, and the fact that one of them is you is largely unremarkable. If it hadn't been you, it would've been someone overwhelmingly similar to you.

In other words, we're not unique snowflakes. Humans are more alike than they are different, so don't get so excited about the miracle of your existence.
I wouldn't say that it's seen as a replacement, but I definitely think it's become and integral part of the social life. For example, a lot of the time if someone is hanging out with another person, they will make a status announcing it. There's really no real reason for this, other than to boost social currency by saying "I was with Person X." I don't think its really replacing hanging out and doing stuff with people, but its making it so much more real-time, since all of your friends know what you're doing literally as you're doing it.

However, one thing that Facebook is good for is coordinating groups. I'm in a class council group as well as groups for a few AP classes. Since everyone is always on Facebook, it makes setting up and coordinating things while getting feedback super easy. For example, a couple days ago, someone posted after school in the AP Stats group about getting together for a study session. A few hours later, around seven of us got together at Barnes and Nobles.
This is the tool I use to see SSL traffic:

http://www.tcpcatcher.org/

http://www.tcpcatcher.org/monitoring_SSL.php

It effectively helps you to man-in-the-middle-yourself.
Reading the article I remembered...

For a while I was fascinated and amazed at projects pursuing absurd mega-goals, attempts to get something off the ground so big it was nigh unto stupid. A floating city configuring an independent libertarian utopia nation. A billion-dollar indoor ski resort just outside Atlanta. A bridge from Spain to Africa sporting a 5 mile suspended span. A world-class [fill in the blank, how much ya got?] facility annex to a super-mall in "why would anyone move there" Syracuse NY. And so on, one project after another with big flashing "ain't gonna happen" signs over them.

Then I realized. It wasn't success of the project that was the goal, it was keeping a small team of creatives employed in a perpetual state of promotion and study-funding: find someone with deep enough pockets, and they'll shell out a livable fee to be able to say "hey, look at this..." to other deep pockets. No way that Atlanta ski resort would happen, but the idea was exciting enough to elicit enough funding for studies to pay the bills (at least until the vital-to-snow-making nearby lake almost dried up) for a few people in modest offices. You can make a nice living promoting stupid ideas.

And if the stupid idea actually pans out, takes off, and succeeds, well, the possibility of success is awesome enough to keep trying.
That has certainly been a facet of my experience in 15 years spent working in or adjacent to development departments. Although I think it has less to do with being attractive, or a woman, as being _cultured_ the way women have conventionally been.

We're taught to be polite, warm, and deferential, and to thank someone effusively when they do something for us. I've seen men work the same angle, though.
What you aren't aware of can't be used to describe your victim status.
You're right that sucks. But if you think about it it's probably more of a technical issue than evil policy, just imagine the permission graph for visiting one of your friend's profiles -- FB would have to do a reverse lookup of all of you friend's friends and filter ones with closed photo sharing (or what if you are a friend common to both?). Further, scaling that out to 750M people is non-trivial.

Anyways, I'm not excusing their policy, but I expect they'll fix it whenever it is technically possible to do so.
Except if you find an XSS vulnerability in a site, you already have a serious security vulnerability that can be abused in many different ways to compromise a user. pushState simply makes one of those ways (phishing) more effective.

Personally, I'd rather take actions that don't require user interaction, like stealing the user's session cookie silently in the background or making other requests on their behalf to the website. That can be done via an invisible iframe on an otherwise legitimate website (which, I suppose, you could also consider to be "dangerous").
Israeli Intellectuals Back Palestinian Statehood in Tel Aviv Rally
There is another angle through which you could attempt to determine the probability of you existing. It's by dividing number of people on Earth today, by total number of genetic permutations possible. Of course that would remove cultural factors from the equation... but calculating actual probability of cultural factors are pretty damn hard!
Ask HN: Will my idea be the solution to the Divorce problem?
After reading an article on Springwise about divorce rate doubling in China, I started thinking about divorces and wondered what if we as hackers can do something about this. What if there was a service that lets you become more spontaneous?

Spontaneous gifts delivery service for your girlfriend/boyfriend/husband/wife

A site where people can tell us something about their significant other and maybe tell us some of their preferences such as type of things they prefer, their budget,some important dates (birth date, anniversary date, when they first met)

This will help not only those who forgets important dates but also those who want to send some spontaneous gifts to their loved ones without having to do anything. We will automatically send the loved one a gift every once in a while (based on certain preferences of course)

What do you guys think? Would you find this type of service useful?
Re: she/her

The article was written by Jon Morrow, not Penelope Trunk...

Jon is actually an amazing guy. Here's another sample of his writing:

http://www.copyblogger.com/fight-for-your-ideas/
I actually wonder what that sort of statistic would show then. Would be interesting to see if there's a burn-out based on how much people use it due to work.
LINK - more unedited criticism on the #takewallstreet protest - Thomas Monopoly
Harmonica – Android Application
It's a meaningless "probability" on several counts.

1) It applies to everyone reading it, and it would apply to me if I were different and reading it. It tries to convey a specialness which doesn't seem to exist. If a billion people win a penny each then winning a penny isn't miraculous, even if it is a 1 in 1,000,000,000 chance that you win any particular penny - but the 'particular' part has no significance.

2) I am reading it, so my existence probability is ~1.

3) I wasn't waiting in the wings somewhere with a dice roll choosing whether I would be born or not, I am what was born to and raised by my parents. Birth and youth happened before "I", not the other way around.
Don't log out, because logging out each time and logging back in is inconvenient. Use a tracker blocker instead - like Easy Privacy with Adblock Plus, or Ghostery.
HP and Meg Whitman: signs of a Silicon Valley in transition
绿色征途私服
I'm having some trouble finding the reference right now, but IIRC, there are some real effects from when during the year you were born -- largely due to cutoff dates for school, determining how old you are relative to everyone else in your class. I'll have to go actually dig this up later.
Worth also looking here:
http://www.cs.gmu.edu/cne/pjd/PUBS/Workingsets.html

Had the great pleasure of being one of his students years ago during my undergrad. Hands down the best professor I've ever had.

http://en.wikipedia.org/wiki/Peter_J._Denning
> We operate under the assumption that users will not do what they don't want to do...

This assumption is either totally disingenuous or shows an extraordinary lack of self-awareness on Facebook's part.

Possibly it is true, in sensu stricto, that "users will not do what they don't want to do". But for far longer than the internet has existed, the foundation of the advertising industry (of which Facebook is unquestionably a part) has rested largely in convincing people to "want to do" things that are actually contrary to their greater interests.

In other words, Facebook has the critical mass to spawn an "opt-in" culture when they damn well please. And a network as large as Facebook has the potential to be quite corrosive to civil liberties and the social milieu, merely in how it it structured.
The probabilities used are meaningless.

Let me summarize the content:

Re: fw: re: re: re: fw: fw: fw: CHECK THIS OUT!
GHD Deluxe Midnight Collection
There's some pressure, yes. But she mostly uses facebook to network, and having a very clear and "official" statement about her familial status seems to avoid her a lot of sterile interactions and facilitate first contact.

These are half private/half professional relations, and I expect Google+ to fit a lot more than facebook, but whe're not there yet.
SICP is under some sort of Creative Commons license but I'm pretty sure Intro to Algorithms isn't.
To answer that, ask yourself this. If you somehow got access to the root account on the central control computer of a nuclear power plant, could you cause a meltdown? Most likely, the answer is no, because you don't know how to control a nuclear power plant. You can run any command, but you have no idea which command would cause any real-world damage. If you're just doing it for the lulz, you could go for the ever-popular "rm -rf *" and cross your fingers, but if you want to be sure to cause damage, you're going to need some domain-specific knowledge. Not just knowledge about nuclear power plants in general, but also knowledge about how to manipulate the control systems at your specific target nuclear power plant.

In other words, even if you have an easily-exploited attack vector available to you, you still need to know a lot about your target in order to cause damage. Contrast this to guided missiles, which don't really need to know anything about the building that they are blowing up other than its GPS coordinates.

For this reason, I'm skeptical that "any dumb hacker" will ever be capable of causing something like a nuclear meltdown via virus infection.
OK HN, what's the super power you have? This is like the 10th time you delivered something I wanted in less than 24 hours of just thinking of it.

Thanks a lot.
"Facebook Timeline" To Enable Facebook’s New Profile[How to]
I wish they had chosen a different name. I develop ScribeFire (a blogging client that is compatible with Blogger, among many others), and this is undoubtedly going to increase my workload as confused users email questions to me regarding Scribe.
I just want the system that will do facial recognition based on whom I'm looking at, find them via social media, tell me their name and how I know them.

I suck so bad at remembering names and it so drastically impacts my ability to interact with others, that I think this could be life-changing for me.

Fwiw, I've started looking at the camera/glasses side of the equation; maybe someday soon! :)
Google News will recognize 'featured' stories
Interesting thing is that when people are faced with a very rare poker hand, e.g. a royal flush, they go "OMG, what's the probability of that happening", without thinking about the fact that any hand they are dealt has a similar low probability, e.g. there are 1,302,540 no pair hands (http://en.wikipedia.org/wiki/Poker_probability), so the probability of your uninteresting, stupid hand being dealt is 1 in 1.3 million!

It is us who give meaning to probabilities and deem some events as interesting and others not.
Wk 500 casio review
Sorry, how is HP transitioning to a B2B business? They started in test equipment, and calculators. Later got into computers. THey make some of the largest general purpose systems out there - HP super dome 128cores in a single system. Plus they bought Tandem computer.

They are a corporate behemoth. That happened to sell printers.
Post from six months ago for getting epub version of SICP (with a user's link to another Kindle version and links to ways to convert epub to mobi)
http://news.ycombinator.com/item?id=2419516
Great blog, a very good web site http://www.laptop-dvd-drivers.com for laptop with the favorible price and very high quality,any need http://www.laptop-dvd-drivers.com or others?
We're about to expand on some reasons why buy http://www.laptop-dvd-drivers.com online is beneficial.
Choose the favorable time, and not having to trouble whether the shop is open or closed is one particular benefit. Then of course you'll discover that trying to find http://www.laptop-dvd-drivers.com on the internet is much, much less expensive. Why? Just because a internet site doesn't have to care about costs that call for operating a store. And in conclusion, it is the simple enjoyment of buying http://www.laptop-dvd-drivers.com in the convenience of your own personal home. No congestion, no long waiting, no crowded areas, and no personal discomfort the result of carrying your buys of http://www.laptop-dvd-drivers.com/laptop-graphics-cards-c-35... or http://www.laptop-dvd-drivers.com. It's rapid, simple and much more cost-effective.
Tracking Three Atlantic Tropical Systems
They are tracking three storms now! They say none of them are going to effect land.
I think that such an advertising network would run into problems, since developers who integrated with it would be violating the Facebook Platform Policies:

You will not directly or indirectly transfer any data you receive from us, including user data or Facebook User IDs, to (or use such data in connection with) any ad network, ad exchange, data broker, or other advertising or monetization related toolset, even if a user consents to such transfer or use.
I check it every day, but I spend about 1 minute each day. I just go there to see what my friends are saying, then move on to other things.
If you know your idea sucks this means you need to change it, revise it, pivot or whatever you want to call it.

Every success that started with a lousy idea became a success because they recognized their idea sucks and changed it, not kept perpetuating failure. It is a very dangerous attitude to just dismiss legitimate feedback, hope everything just magically fixes itself and lull yourself in the sense of complacency that "it will just work out". Hope is not a strategy.

Of course it is inspirational to know that even if you start with a lousy idea you could be able fix it. But don't assume the solution will just fall in your lap and do the hard work pivoting your product and business.
Some siemens PLCs have a default superuser password hard coded in to the firmware. Siemens hasn't released an update to remove it.

Control systems should be on separate networks, but even those networks are susceptible to wandering USB keys and contractor laptops.
Is it just me, or was the point of this meandering ditty that "You should introduce adaptations at the same rate that people want to adapt"?

I mean, that's not very helpful. I can figure that out myself.

Even the analogy of Milo is broken, given what we know about strength gains (Olympic weightlifting is my hobby). In particular, strength gains are non-linear. Any developmental curve is the consequence not of some given simple multiplicative factor but of a complex set of feedback loops that govern adaptation.

And so it is with technological advancement. I'd be amazed to see a single number governing adaptation to novelty (which is what we're discussing here).

If anything it's going to depend on who is adapting, what they've seen in the past, what they're adapting to and so on. If it seems like a smooth, linear process, that's because we're looking at it from an overly compressed time frame. Lots of phenomena look smooth if you squish them up.
"force cooling pump off" would probably do the job
That is a good point martey. I wasn't sure if there was a network that has figured out how to properly execute on this. I'm looking for the best way to increase conversion/monetary gain based on user data. Thanks for the comment.
"If someone wants to fund me as a diversity candidate, I will take that shit all the way to the bank."

Ha ha ha ha. Right on.

On the topic of heels and tech events, here's a really cool lightning talk by Pamela Fox about whether feminine can be geeky: http://www.youtube.com/watch?v=MIhPYefRndc