skysight-inc/HackerNews huggingface dataset:
I would second the give your current employer the option if you like it there and would like to stay. Training is a pain and 15k is not that much for having to deal with 3 months of lost productivity while a new employe comes up to speed and that's if you don't have to replace the role several times to find a good candidate. You now know that you are worth 45k so don't let your current employer short change you, tell them you really like it and do not want to leave but that they will have to match. I look at work a little differently than many. I love my job and I love to develop but I work for money, if I did not have to I would be certainly working on my own ideas exclusively so if I have to work and the jobs are fairly similar I go to the highest bidder. Like it or not employment is a business transaction where each party is trying to get the better end of the deal based on the information they have. You just gained information that you are more valuable than you are being compensated for, don't let them convince you of reasons that you are not. With that said, if you have any agreements with your current employer that you will stay with them for any amount of time even if it was just verbal, you need to honor that agreement. If not you are a free agent and you should think of yourself as such.
I'm not fluent in legalese, but clearly this is just an attempt to prohibit or mitigate customers from publicising in a manner that could be seen as endorsement by Google?
Simple versus easy
Farmers do Some physical labor, but their real job is management. Separates the successful (very few) from those that putter around painting fences and tinkering with the equipment, but who never study commodities futures or write a schedule.
Is selling to or partnering with BIG companies of interest? chasminnovations.com
I wasn't sure if "Steve Jacks" was an admirer or some clueless middle manager at a newspaper meeting not wanting to talk about "C" because everyone is running "PCs" these days.

But here's his original letter:
http://articles.chicagotribune.com/2011-10-18/news/chi-11101...
the tunes are amazing
Actually you would worry more about incorrectly implemented padding or a side channel attack or something similarly stupid destroying your cryptosystem. Sad, but true.
Your residence and HQ is on a boat, but you can spend your days on mainland. If you're really into quick coffee meetings you can use one of those co-working spaces silicon valley has plenty of.
Follow the link and there is a published paper. In fact there are two: one showing their experiment with light emitting earbuds and the other showing possible light receptors buried in the brain.

This is not my field (and I assume it is not yours) so I cannot refute their claims. So far they have done an experiment and they have a significant result—in fact it is so significant that it is easily observable (10 out of 13 rather than the expected 6.5). There are three likely reasons for this result 1) Experimental error 2) Placebo effect 3) Brains react to light. The likelihood is probably in that order.

If they, or another team, can repeat this finding in a double-blind test then I will be comfortable in accepting it.

This is not bad science. It may be questionable business practice to move so soon on this (especially before a double-blind test) but it isn't total quackery.
The Best Way To Spell Your Name In Pictures
You can see from the dialog windows, that he could inject javascript.
How Steve Jobs acquired the mouse and GUI (video)
C�mo Disfrutar de Miami
Lux Chiffon Style One Shoulder Bridesmaid Dress
> childish twits fighting in a restaurant ... idiots fighting in public

Wow. You have already decided that these people are twits and idiots without even being there. Why? Because someone twitted about them having an argument in public, at some Burger Kind restaurant somewhere.
Each of the screen shots shows the XSS vulnerability in action. IE: all of the alert/confirm pop-ups you see on the screenshot are not supposed to be there, they've been injected through an XSS vulnerability.

The assumption is if you can cause an alert to display, you can (probably) run AJAX requests and actually get some data/do some damage.
For kanji try this: http://kanji.sljfaq.org/
Leg hair font kicks comic sans’ ass
Spoken like a hacker, not a hack.
I don't think anyone is really talking about 20% wage increases. Unionize Walmart/living wage types are usualy talking somewhere around $15 per hour which would be closer to 100% wage increase. Even if we're talking about moving workers from 8 to 12 thats a 50% increase.

Some back of the envelope math shows that if Walmart gave an across the board 50% raise to every employee it would consume it's entire operating profit.

If they were forced to pay $15 per hour I think they would make a few changes.

1. They would accelerate the deployment of rfid inventory control, vastly reducing the number of stockers, and
completely eliminating cashiers--all those employees would now be unemployed.

2. They would squeeze their suppliers even more, and the suppliers would be forced to cut their employees salaries.
> And "The new interception system would be instant because we would have the email IDs and passwords of suspects and we can track their conversations 24X7,"? WTF does that even mean? How do they plan on getting the passwords?

It means the Delhi Police cyber-crime branch is manned by clueless morons who probably have never heard terms like SSL, TLS....

Your data is indeed safe.
You we will sleep on the boat and commute into work.

Being from the UK you get 90 days in the US, then you need to do a visa run out of the country and can then come back. I think as long as you are being paid by an non US business immigration don't mind.

Perhaps instead of a trip to Mexico or Canada a night on the boat would suffice?
Very interesting, i'd like to see what physics hacks they end up using to patch this.
Sony “four screen” revolution to preempt Apple Siri TV
IAEA reports unexpected I-131 found in Europe
Notwithstanding the foregoing, (a) Customer is permitted to state publicly that it is a customer of the Service, consistent with the Trademark Guidelines...

Sounds to me like you can mention that you use their service as much as you want. But if you attempt to conflate that relationship with something else you need to ask their permission first. Unless I'm missing something that seems fair to me.
It's a stylized '3'. It's the only HTML5 badge I can identify on sight.
If you're interested in getting in touch with the startup scene, send me an email.
Unlike in America, Economic mobility and Social mobility are mutually exclusive in Chindia.
I trusted the damn GitHub desktop app to do the work... and it's still spinning in that window. Damn GUIs. I've now committed it from the console.
Evolution does not optimal development this is a general misunderstanding. Evolution is not 'survival of the fittest' it it 'survival of the just fit enough'.

Darwin was clear about this, sadly the eugenics movement of the late Victorian age were not.
A more realistic direction is up. Or, 3d integration. When the manufacturing gets mature, this gives a large immediate boost, because in two chips of size n/2 that are bonded together, the maximum distance between any two circuit elements is smaller than in a single chip of size n. After that, it will allow scaling by increasing layers.
We can guess about Google's intent, but that's not what it actually says. It's pretty plain that I 'cannot make any public statement' (except that I'm an App Engine customer) without 'prior written consent'.

There's a separate Trademark agreement incorporated by reference to ensure I don't dress up my app to look like a Google property.
They should have talked about "how to": http://mashable.com/2011/11/08/how-to-google-plus-brand-page...
Good advertising for TPB, as long as they don't get sued for using their own trademark and logo.
11 Recommendations for Optimizing Mobile Apps Power Efficiency
OpenFeint - Upgrading to GameFeed
You can say it even louder, but I fear people won't hear.
I heard it almost a half year ago, but the real news that Quantum Cryptography "can" be broken is a lot older.

Adding more randomness doesn't add more security, but just another shadow layer.

We know SSL and TLS are broken as well as the Certificate Authorities have been invaded long time ago, even if most people don't accept the truth yet.

Could happen in your Startup too:

a: Let's use SSL!

b: Why?

a: Because people trust us more then.

b: Isn't that a lie? I mean SSL isn't secure.

a: But it works! People believe it, when we believe it.

"c: Live in your Dreamworld, until it collapses! :( Sad."

RSA/DSA/MD5 and other hashing and encryption algorithms are broken or unreliable. We know that increasing the time needed to crack something doesn't make it more secure, but obscures security and reliance on that technology.

You still see large scale websites getting hacked, just because of stupid code injections or exploits. The experience is even worse in the crypto side, you'd cry, if you knew how bad the situation actually is.

One thought. Develop your own, if you can. But that puts you into the radar of Curious Goverments.
Because your 10 minutes of comfort is probably less important than the fact that a marriage might be falling apparent.

I understand if they were arguing whether to get #1 combo or #2 combo, then probably 10 minutes of your quiet eating comfort is a lot more important. If a marriage is on the verge of collapse, your 10 minutes of quiet comfort @ Burger Kind don't mean much.

You are trying to apply hard rules "yelling in public is always wrong and internet-wide shame and publicity seems to be a decent punishment" to social situations.

What if they just found out their friend was killed in an accident, or the women was pregnant and her water started breaking.

There could be crying, yelling and a lot ruckus probably. It would most definitely prevent you from quietly enjoying your whopper. So the obvious response is to twit _everything_ in hopes of teaching them a lesson?
A Home to The Unknown
A page that lets you run arbitrary JavaScript in your own browser is not automatically vulnerable . For it to be a vulnerability you must be able to run arbitrary JavaScript in someone else's browser. If these pages protect against CSRF, most of them aren't vulnerable, expresslane being one case where I think you could get the JS to someone else without CSRF.
Show HN: Kabutar - It's kinda like reddit for the real world.
This is really about informing the customers of legitimate stores that (unknowingly) sell counterfeit products at full price.
pirate bay probably doesn't care...or already approved this...since I doubt someone would go and use someone else's logo for an actual business without asking first.
An Indication Upon Private Interest Rates Obligation
Before deciding on the sort of payment alternative one would opt for, it can be nevertheless plausible to have the actual quantity that certain needs to pay while Internal revenue service back again tax.
I wonder what % of employees in China are actually earning minimum wages?
Developer: “Losing Control of Our Destiny to Apple”
Moore's law for CPUs may be slowing down, but [someone else's] law for "compute value per unit cost" is probably accelerating faster today than ever before.

Not just because "software is getting better" (although it is), but because the cost to support oddball user sets has dropped to the point where users can demand just about any kind of value they can think of, and someone will take a shot at providing it.
Recycling Toner Cartridges: Save Your Money and the Environment
These days, multinational companies, educational facilities and hospitals, all keep their records and forms in a printed layout.
You could "share" link with your own javascript embedded in it that reads cookies and sends them to your logging server. Or customize the website so that when somebody types their password, it sends it to your logging server. If you can run custom javascript on a page, it's a security problem.
Govt had a big part in making things so that so that subprime loans made money.

The standards for regulated assets, which is what banks really need, are established by govt. Those standards favored Fannie and Freddie. Those standards also rely on govt-chosen rating agencies.

As to the "encouragement", W was the "ownership" president, so he was looking for ways to encourage lending.
Side-channels are just another way to "see" what is going on, whether it is on a keyboard, hard-disk, display, videoboard, CPU, bus, controller, etc.

You've got execution time (latency), sounds, radio frequencies, electromagnetic fields, etc. just to cite the 'accidental' leak channels that act as a side-effect of the intended infrastructure.

we're not secure.
Does anyone see a problem with this from a privacy stand point? If a company said they were going to embed RFID tags in goods people would be up in arms. NFC on the other hand; that is a great idea to protect the consumer. Isn't NFC just RFID by a different name and if you bought one of these products wouldn't you be accepting being tracked whenever you wore it? Seems a bit like a physical manifestation of a Facebook 'Like' button. Innocuous on the surface but designed for a whole different purpose from the get go.
Previous discussion: http://news.ycombinator.com/item?id=3196555
I would have preferred something more like Web3.0 because HTML5 is one of the technologies being included in the broad term "HTML5". It's bound to lead to confusion and in many cases already has.

For example, you could have a Javscript coder always having to explain that he uses "HTML5" technologies but is not well-versed in actual HTML5 markup, which may not be required. I've seen numerous job listings where the person writing the job description is obviously absolutely confused over what they need.
How To Log Bash History to Syslog
Python and AWS O'Reilly Book is 50% Off Today ($6.49 USD)
Ai aparut precum o stea
It would be interesting to find a benchmark operation that is meaningful and comparable across any computing platform, so as to be able to take a rough measurement of performance improvement.
"regarding the relationship contemplated by this Agreement". It's pretty plain that it means talking about your relationship with Google, not about the nature or technical details of App Engine.

Words in legal documents, be they contracts or laws, must be read in their full context.
So is it any JS API that isn't manipulating an HTML(5) element?
I remember the debate in the community that happened when they announced those logos. I'm on the side that it was a mistake to do so.
That's a completely misleading article. They haven't "broken quantum cryptography", nor have they claimed to. Yet again, journalists have mislead the public by claiming overly dramatic things that aren't true in order to sell copy.

Quantum cryptography is completely and fundamentally secure in theory. However, real world devices don't behave quite like their theoretical counterparts, and this can create flaws in real world systems. The idiot journalist did get at least that much right.

A big part of research in quantum crypto these days is finding holes in real-world implementations so that we can build future systems without those holes. Kurtsiefer's group had done just that. He hasn't broken quantum cryptography, he's helped make the real-world implementations of tomorrow more secure. This evolutionary improvement of a technology in its infancy has happened again and again, and idiot journalists insist on reporting that "QUANTUM CRYPTO HAS BEEN BROKEN" every bloody time.

Now, for those of you wondering what good QC is if we can't trust real world implementations, here's the gist of why, even though we'll probably never finish making them better, they're still worth using.

If you send a message via conventional factoring based crypto, like RSA, that message must be viewed as being made public with an undefined delay. Even without quantum computing on the horizon, decryption algorithms are improving at a steady pace and making it possible to crack messages encoded in this way.

For example, look at crypto algorithms like DES that, ten years ago, people thought would take thousands of years to crack given Moore's law growing computational resources. Wide freakin' open now, thanks to improved cracking algorithms. Any message sent via classical channels can be copied without your knowledge, so any message you sent via DES ten years ago could be decrypted and in anyone's hands without your knowledge. The same thing is true of anything you send via public key encryption today. Fortunately for most of us, the information we usually send is only sensitive for a limited period of time. Who cares if your credit card number is decoded in ten years? You'll have a new one.

Anyone with long-term sensitive transmissions to make has to look at other methods of encryption. That's why quantum crypto has early adopters. Now, say a hole is found in one of these early adopters systems. Are they screwed? Is the cat out of the bag? No. Thanks to how quantum cryptography works, there is no possible copy of the transmission that could be cracked with technology developed later in time, as is the case with public key encryption. Attacks on quantum systems have to work at the time the message is sent. If a flaw in the system was not known and an eavesdropper not present and taking advantage of it at the time a message was sent, it will be secure for all time. That's the difference. Public key encryption is secure for a while. Quantum encryption is secure for all time.
That attack fails if the page prevents CSRF: http://en.wikipedia.org/wiki/Cross-site_request_forgery#Prev...
Abstract Wallpapers
It might sound trivial, but on many systems it can lead to serious privilege escalation and expose huge vulnerabilities further up in the chain. Check out the case study below for an example in real world.

http://mobile.eweek.com/c/a/Security/Hackers-Hit-Apacheorg-C...

Also, if you want to learn more about avoiding these issues, OWASP is one of the best sources out there.

https://www.owasp.org/index.php/Main_Page
You're conflating two different things (quantum computers and quantum cryptography) which just happen to share a basis in quantum effects. An attack on quantum cryptography has nothing whatsoever to do with whether a quantum computer could be used to break conventional encryption.
>Pincus at least seems to be acting rationally about the future of Zynga, while the employees (even if they have reason to be annoyed by this) come off as being motivated purely by greed, spite, and short-term considerations.

Talk about spin! If Pincus is so stupid that he accidentally gave away huge percentages of the company to janitors, cooks and cleaning ladies then the rational thing to do is get out before more of his incompetence bankrupts the place. Why give back money to a sinking ship?

Further, it's bizarre that you take his "argument" at face value instead of the more obvious "he's just clawing back stock before the IPO" argument that everyone else sees (it's not like this would be his first unethical action).
I'm sorry, I live in France and that simply isn't true.

French labour laws and the accompanying tax system are the key causes behind France's huge problem with youth unemployment and a cripplingly bloated and inefficient public sector (google Aurélie Boullet).

Add the powerful transport and general workers unions in to the mix (who's members go on strike at least bi-monthly) and you can see that the French labour market has some serious problems.

The above is why the auto-entrepreneur scheme (introduced by Sarkozy) is such a runaway success as it gives individuals a chance to bypass all this bullshit.
Women in Tech, Yes We Do Exist
Leadership Word of the Day: WEALTH
While this study shows that resveratrol does indeed have a measurable impact in decreasing metabolic rate (= thereby slowing some degenerative processes), I find it even more interesting to read about the other effects.

First, and rather obviously, a decreased metabolic rate and less lipolysis of adipose tissue means that this should not be taken by people who are obese (like me) because it makes weight loss even more difficult. While the other effects on the body may paper over the horrid consequences of obesity, the underlying cause will get even worse if you take this stuff.

Second, it's impressive that we now seem to have actual evidence of resveratrol decreasing blood sugar levels, inflammation markers, and blood pressure. The importance of this cannot be overstated.
If the arbitrary JS is specified by a specially crafted URL or form POST, you can make the JS execute in someone else's browser as easily as getting someone to click on a very innocent-looking link.

And as soon as you can get someone to execute arbitrary JS on a particular domain, any CSRF protection will be useless because you practically control their browser. (You can even literally control their browser, if you use BeEF http://www.bindshell.net/tools/beef.html )

You can even completely hide the XSS happening by loading it into an invisible IFRAME, while the main page keeps the victim's attention occupied by playing the promised video of a cute kitten playing with a ball of string.
Learn these Powerful Secrets of the Top MLM Producers
http://www.useit.com/alertbox/reading_pattern.html
"Indian giver" isn't an ethnic slur. It's actually attacking the people who came over, promised the native americans land and then took it back when they found out it was valuable.
Although the US Coast Guard could probably handle pirate ships of the size which could plausibly operate in the waters off the California coast, the US Navy almost certainly has more than adequate assets to address even the most well equipped pirates from a standoff range (e.g. By only using in port assets from San Diego).
Minimum wage laws are literally the most moral laws that exist in this world.
There's an RFID tag in every Kindle. I don't see Amazon bothered by this.
Not if the page simply a normal page that you would type in your URL. CSRF doesn't make sense there. I could send you a link to facebook.com with an embedded script.
IFling: UCSD's Latest Ball-Flinging Robot Is 100% More Flingy
If WebSockets are not part of HTML5 why are they under HTML5 at W3C http://dev.w3.org/html5/websockets/.

I've also attended Google DevFest recently, and they mentioned WebSockets as part of HTML5.
Innovation is obstructed by our personalities.
>Google+ as a competitor to facebook is dead.

That's ridiculous. You're talking about the company that has Chrome, Gmail, Android, and Google.com. Any one of those could potentially spark Google+ in time. And it's not like Facebook is infallible.
When Steve Jobs visited PARC (video)
It's only the olden days until someone goes ahead and takes a swing.

I had the exact same thought about the "fraudster holding the Occupy Boston d/b/a certificate hostage" story. Especially in that kind of ground-up, loosely-couples collective action scenario, how does overt bad acting not result in a Code Red at the food tent?
More importantly, do the people who buy them care? I'd wager that most of the people know they're all fake - my girlfriend certainly did - but the purse I bought her was nice enough to pass for one, and it's a nice purse regardless of whatever logo someone superglued to it in a garage.

People buying these things in the street aren't going to bother checking them.
The problem isn't Microsoft tactics with patents. The problem is software patents.
If this is truly the case then Pincus is so incompetent as to be dangerous. The market has correctly identified it for culling and it should die.

Honestly, with the bizarre position you've taken over this issue one would have to imagine you are one of the people who stands to gain from this. You're lamenting the failing of a company that is on par with ambulance chasers and patents trolls? You're claiming the employees are greedy when a billionaire tries to extort them for the shares he promised them?
yes, it's abit ambiguous