skysight-inc/HackerNews huggingface dataset:
This is what happens when large numbers of websites allow a central authority to run arbitrary code within their sites DOM. The central authority becomes an excellent distribution vector for malware so an extremely lucrative target.

People willing to block all cross-origin requests and manually whitelist only those required (Firefox RequestPolicy addon) are the best protected from these problems. NoScript users also get brilliant protection. Even AdBlock users are considerably safer than your average user from this problem.
We might do it later this year but we have no timeline yet.
Well that is a good question.

The pirate party wants several steps in enabling more citizen participation.

First, they want to make government more transparent so that the people actually have all the information needed to make informed decisions on their hands.
No longer do they want to accept that crucial legislation is often negotiated behind closed doors and only announced once everything is already sewn up.
Also the contracts the government has with the private sector need to be made transparent. We need proper open data portals. There's a lot of things do to in this area alone.

Second,
they want more votes on specific political issues on the regional, state and federal level. Those are currently only possible in very limited form (they are non binding for the government in most cases), and not at all possible at the federal level.

Third,
their longterm vision includes a concept called "Liquid democracy" where basically everyone has the opportunity to have a voice in the political process. This will be facilitated using digital means.
Specifically software called "adhocracy" / "liquid feedback" is being developed for this.
The pirate party in germany already uses this system for their internal decision making.

It's a carefully balanced system comprised of direct voting on issues, and delegating voting power to representatives.

See here for more info on this: http://en.wikipedia.org/wiki/Delegative_Democracy

http://liqd.net/en/

So i don't see the danger of inviting mob rule with the pirate party.
As i see it, they want to open up the political system to more direct participation while keeping it stable enough to guarantee basic democratic freedoms (like minority protections)
I wouldn't sat that C++11 is going to lead to faster code than C++03. However, if like many C++03 experts you were already writing a lot of template code, then 'decltype' and variadic templates in particular make a lot of templated code much easier and cleaner to write. lambda functions neaten up various things.

Other people may have different opinions, but I don't think C++11 will convert anyone, but people who already have a big time, or code, investment in C++ will find much of their lives much easier. Another indirect advantage is that by moving to C++11, it finally allows people to make a clean break from older, less standard C++ compilers. Wether will we end up with a new state, where people end up supporting partial C++11 compilers, we will have to wait and see.

The parallelism is really just standardising existing behaviour in many cases. People who want to write things like lock-free algorithms are very excited by the atomics stuff, but such stuff is beyond me.

I am disappointed that some more practically useful threading algorithms, like thread pools and such like did not end up in the standard. However they now seem to be arriving as 3rd party libraries.

I think what is going on is that before a threadpool library was '2 steps removed' from standard C++ (as first you had to write, or use someone else's, threading/atomics library). Now they are only '1 step removed', they are more useful.
You are missing the point that $10billion in damage in Asia is LOT more than $10 billion (damage) in the US etc.

For example, the damage from Hurricane Katrina was around $82 billion. While damaging, I am sure the 2004 tsunami was a even worse disaster than Katrina.
Hospital Supply Chain Management Solutions for ERP
Implement effective hospital supply chain management solutions that help you better manage processes & use throughout the supply chain with McKesson.
Thinking Async | CSS-Tricks
Looks cool, I redeemed F9HEY6MXP9JX
In the work I've been doing on Mifi hotspots of late I can tell you every SMB-supporting router and network file sharing device from your home ASUS kit to enterprise NASes is exposed, not to mention OSX. This thing is huge.

Some abuse cases:

* On a wireless network if you have SMB file sharing enabled on your Mac and no firewall, this could be easily abused once working code comes out.

* Got a QNAP NAS or other sharing device and thinking of taking it to your local LAN party? Hope you know everyone well enough.

* Using a MiFi hotspot to get access to the Internet when travelling? Hope you changed the default password, and that it's not listening on it's external interface.

* Corporate network using an appliance-based SAN/NAS? What a fantastic place to hide, right where all the files are.

This is an awesome bug, I wish I had the time to look into it properly but am busy until next weekend.
Hey, one of the Meteor authors here. Meteor's architecture makes it super easy to make an API. It's one of the advantages of building your architecture around sending data around rather than HTML.

We couldn't go into everything in the video (it was already too long!), but the piece you're missing is Meteor.methods(). This lets you define methods, which are functions that the client can invoke on the server by calling Meteor.call(). If you choose to also ship the code for these methods to the client (it's optional) then you'll get full latency compensation like we talk about in the video. (This means that Meteor can latency-compensate arbitrarily complex functions, like "read this record, then add 2 to X if this field is false, else create a new record Y.")

In fact, every Meteor app already has an API :) Your Meteor client can connect to any other Meteor server by calling Meteor.connect(), and can then subscribe to any realtime datasets that that server is publishing, or invoke any methods available on that server. This is done with a protocol called DDP, but we could map DDP to REST fairly easily.
I only ever see it when it makes the HN front page ...
As much as definitions are concerned, also US has only socialist parties. The first problem begins when your parties only discuss about further spending and never about expense reductions (as in US too). The other problem begins when the State thinks it has the right to decide on things that should be left to the individual, for example, it makes absolutely no sense that in Germany shops are mandated to be closed on Saturdays (less of this in Us?).

Finally, as there is no pure socialism/capitalism, I believe we should look at few simple things. For example, effective taxation (together with mandatory helthcare and pension) on the individual should not be 50% of his income (and it is in Italy, for example); public spending should not be 50% of GDP either. Let's start from here...
GPL?! I don't even..
Learn shell by example - a tutorial through a very simple shell script hack
When following politics I sometimes secretly wish I didn't move from Germany to Spain, where the political scenery is a tad more... predictable.

That being said, I see absolutely no reason why the Pirates should be part of the government. Germany has had almost 20 years of policy blocking and mindlessly bullying oppositions (from both sides of the political spectrum), but maybe this can actually change with the Pirates - an opposition that has no problem in granting the governing parties their successes.
Constant scrolling feels awful. It if would just jump ahead every few seconds or so it will be less painful.
"Avoided" by, well, reimplementing MongoDB in JavaScript, but it's totally worth it :) And not as many LOC as one might expect.

Anyway, thanks much for the support :)
I was hoping to install Trisquel GNU/Linux recently. It's based on Ubuntu but is recommended by the Free Software Foundation as it uses the Linux-libre kernel and has all proprietary code/firmware and binary blobs removed.

Unfortunately, the only drivers for the wifi on my laptop are non-free, so the wifi works under Ubuntu but not under Trisquel.

It's worth booting up the live image to see if it works for you though. If you care about these things that is.
Next Generation Ruby packages for Ubuntu
I would say that pair programming is primarily about close collaboration between people, code is just an artifact of that.
For the millionth time, FB did not "pay" 1 billion, they gave Instagram an unspecified (and probably very low) amount of money and a quantity of pre-IPO stock. FB paid almost nothing, their risk is trivial, Instagram's investors however have had their bet on Instagram converted into a bet on Facebook.
But the social-media photo sharing space is not exactly deserted.
What a useless parade of hand-waving.

If you actually read the article, you knew that one of the author's point was that PHP's problems are magnitudes of magnitudes worse than other languages in the wild.

That's more or less a matter of fact and that there are still people deny it just shows the sad state of PHP "programming" in general.
Spotify Play Button
Indonesia Aceh quake triggers Indian Ocean tsunami alert
Big horking one missing from the list: run native code.

From here you can pretty much do anything, since the average handset is shipped with an ancient buggy kernel.

The short answer remains: treat software on Play with the same distrustful contempt you would treat random no-name desktop software found in the dark corners of the Internet.
Meteor developer here -- we think it's super important to be able to serve static HTML when the situation calls for it (eg, crawlers.) Our architecture is designed to do this but we haven't had a chance to implement it yet. We have a lot of incentive to get to it soon, because it's no fun to be left out of Google :)

There's a bit more in the FAQ. Our approach is based on rendering the template as a string (it doesn't require building a DOM tree on the server and then serializing it.)

http://meteor.com/faq/can-meteor-serve-static-html
"Second, they want more votes on specific political issues on the regional, state and federal level. Those are currently only possible in very limited form (they are non binding for the government in most cases), and not at all possible at the federal level."

The should really be looking at switzerland for some of this stuff. I think we handle this pretty nicly.
It seems true that mob rule == conservatism, but is that alwasys bad? Remember the SOPA/PIPA spectacle? The conservative mob hated it and fought to keep the internet as it is, and that was a good thing.

Conservative means to not want change for change's sake, and that can be a good thing sometimes.
Congress, wireless industry team up to make stolen phones worthless
I get that now after reading this thread. The problem is my first instinct was "why the hell does this website want my location?" when there was nothing on the page to explain why it was requesting this.
Good picture sharing design
TheKernel is interesting as well http://www.kernelmag.com/
It depends what the Meteor team has in mind.

If they want this to be the next Django/Rails/Express/whatever, where a large and enthusiastic community both uses and develops the product then the answer is fairly clear: No, this is not a suitable license.

If their idea is that it's an nominally open source project where all control and most development takes place inside the originating company, and the community mostly just pays license fees then: Sure, it's a great license.

Longer clarification: Django is licensed under BSD, Rails and Express under MIT. Why? Because these licenses allow me to use these frameworks for my own webapps, without making the entire client/server code base available. I can toss together a Rails-based contacts manager, or a Django-based todo list app, and let people sign up, and even charge a monthly fee, and NOT have to give the code to the entire app out.

Someone else linked to Sencha's discussion of the GPL and JS webapps, and it's highly relevant:
http://www.sencha.com/legal/open-source-faq/

In short, as long as Meteor is under the GPL, I can use the framework for free, but I cannot let anyone use a webapp I create with it without giving away all the source code. Which means that I'm very unlikely to actually install and try Meteor on my next project. My choices are basically "ignore Meteor" and "pay a license fee to the devs". Meteor is awesome, and probably well worth the license fee (whatever it might be), but it's fairly obvious that this is a huge limitation on the frameworks potential for adoption.

(It's worth noting that both Django and Rails were actually developed for a project, and then released under permissive licenses, because the framework wasn't the product, and the dev teams didn't need to try and monetize it. Meteor is the product, and the dev team does need to monetize it. And, again, Meteor looks awesome! So I can fully understand why they chose GPL, and I fully support that choice! But it is worth noting the consequences of that.)
Same here. But I found a decent workaround.

I have following in my .tmux.conf:

set -g history-limit 1000
# See https://wiki.archlinux.org/index.php/Tmux#Scrolling_issues
set -g terminal-overrides 'xterm*:smcup@:rmcup@'

Now I can scroll using "scroll bar" which is acceptable for me. Plus I also get native text-selection.
My first impression of this: wow. If Meteor is all it appears to be, this is nothing short of revolutionary.

My second reaction: what happens when the magic ends? When I was new to Rails, I really loved how easy it was to get started with scaffolding, a nice DSL for specifying relations, nifty form helpers. However, the first time I veered a little off the golden path and wanted to do something a little more complicated (that was not supported by the form helpers at that time), I ran into a huge wall. I found out that I actually had no idea how Rails worked. The magic had hidden all complexity from me before, and now the magic failed me and I didn't know where to start doing it on my own. Rails has matured a lot since then (it also dropped some of the magic in favor of more explicit behavior) and my understanding of the framework has grown with it.

Meteor looks even more magic to me. There is so much stuff happening. What if I plan to do a lot of dynamic updates and I want to defer live-updating because I am doing mass-updates? What if I need a hard division between client/server code? What if I want to share the backend with an iOS app or something? Can I use this to build an API? The documentation does not yet fully answer these questions for me.
Enlighten us :)
Yeah, there still a few places where Mongo is hardcoded (the prototype assumed Mongo everywhere, and we've gradually factored out these assumptions.) Most of these places have to do with the code that automatically starts mongod for you when you type 'meteor' to run your app in development mode. I think all of the database assumptions have been factored out of livedata, but we'll only know for sure once we have a second database packaged :)

And yes a second time: to package a sql database, you would ideally have a 'minisql', a client-side cache with a sql-compatible interface. It's not strictly necessary though. There's no reason a DDP[1] dataset couldn't use a different database API on the client and the server (say, sql on the server, mongo on the client), but if you did this and you wanted latency compensation, you'd have to write all of your methods twice, once against each API.

I am really excited about having sql support, but we tried really hard to defer anything that wasn't absolutely necessary for release :)

[1] DDP is the protocol that livedata speaks between the client and the server. In Meteor, the client and the server mostly keep themselves at arm's length. The client doesn't know that the server is made with Meteor, just that it speaks DDP, and vice versa.
MVC tutorial with MooTools
First part of a tutorial describing how to build an MVC javascript framework with MooTools.
OK there are 2 values you can adjust - the interval (how many ms before it attempts to scroll again) and the increment (how many px's it will jump). You can adjust to your taste if you prefer something else.

I was worried about scrolling on different browsers looking a bit rough - it's something i'll need to tackle soon.
In which ESR proudly defends racism by use of statistical analysis.
Let’s Learn Reading and Writing Together with iPhone or iPad
Phonics and Handwriting is the excellent application for iPhone/iPad owners who have small children. The program represents the practical tool of a so-called phonetic method of teaching children to read and write.
I never actually started reading any of that stuff... Though I will read something if it floats up here on HN or Reddit or whatever.
Airtime - Another way to video chat?
NASA - Open Government at NASA
GEOFON automatic earthquake detection live feed:
http://geofon.gfz-potsdam.de/eqinfo/list.php

Seismograms of 8.6Mww 0838UTC earthquake:
http://rev.seis.sc.edu/earthquakes/2012/04/11/08/38/38

Seismograms of 8.2Mwp 1043UTC earthquake:
http://rev.seis.sc.edu/earthquakes/2012/04/11/10/43/09

Technical data for 8.6Mww 0838UTC earthquake:
http://earthquake.usgs.gov/earthquakes/eventpage/usc000905e#...

Technical data for 8.2Mwp 1043UTC earthquake
http://earthquake.usgs.gov/earthquakes/eventpage/usc00090da#...

Live sea level monitoring at Meulaboh:
http://www.ioc-sealevelmonitoring.org/station.php?code=meul

Live sea level monitoring at Sabang:
http://www.ioc-sealevelmonitoring.org/station.php?code=saba

Live sea level monitoring at Telukdalam:
http://www.ioc-sealevelmonitoring.org/station.php?code=telu

Data collation, analysis, predictions and warnings from the Pacific Tsunami Warning Centre:
http://ptwc.weather.gov/?region=3

Live orbit position for OSTM/Jason-2 (satellite-based high resolution radar altimetry):
http://www.heavens-above.com/orbit.aspx?satid=33105&lat=...

Live orbit position for Jason-1 (older satellite-based radar altimetry):
http://www.heavens-above.com/orbit.aspx?satid=26997&lat=...
Okay.

What if these companies asked to inspect your home before making you an offer?

What if they were asking for your medical records?

Should a company be able to do whatever it wants to current or prospective employees? My lone alternative is to "work someplace else"? Really?
What's the advantage over using the middle mouse button?
Does anybody know enougth about the Swiss and German system that can explain to me why we never here the term "coalition" in swiss politics? If you are in the parlament you are in it. I mean there is stuff to vote on and everybody votes for what he likes what effects does not been in "the coalition" have?

I hope I made myself clear.
Looks interesting, but..

$ curl install.meteor.com | sh
Unable to install. Meteor supports RedHat and Debian.
Installation failed.

However the slow start description in their README works fine. Maybe this should be mentioned in the message above?

https://github.com/meteor/meteor/blob/master/README.md

Looks like an interesting approach. I always thought SocketStream would be the next big thing, but now I am uncertain. Nice that there are a number of frameworks though! :)

http://www.socketstream.org/tour

Oh, a CoffeeScript would be nice.
Can you qualify this? Native code is sandboxed just as managed code is (of course it is). Ancient buggy kernel? Most handsets have very contemporary kernels.

But surely you will provide some compelling citations.
I encourage you to vote next time. Of course no party will ever be fully aligned with your interests. And true, the Pirate Party has only recently started to seriously think about topics outside their main fields. But no party completely pushes through their own positions anyway:

If the Pirate Party would form a coalition e.g. with the Union party, they would have to negotiate a coalition agreement. And each party will make sure that they please their clients (i.e. their voters or other supporters) sufficiently. So the Pirate Party would probably abandon their weaker positions (e.g. economic policy), but hold their ground on their main topics (copyright/patents etc.).
This is why Firefox with Zoom Text Only is the best browser.
I wonder how they plan to recoup royalty losses from this? Is this just a marketing investment?
You are absolutely correct: Google already provides substantial crash details if you opt in, including all system log entries from your own app.
Thought 1.9.3 is not very favorable for Rails deployment or am I wrong?
Press the 'reader' button in safari.
Tuin: onderhoud tuinhuis voor lange levensduur
Some of the guys at the office here in Singapore felt the aftershock, but most people didn't notice.
Building testing tools against REST APIs with node.js and Coffeescript
It seems like a rhetorical question.
Works horribly.

I'm used to:

1. Click "Play"
2. Hear music

Now, I get:

1. Click "Play"
2. Get to a screen that tells me to download Spotify
Can you play songs without a Spotify account?
I'm at risk of sounding offensive, but I don't mean it. I just want to point out that to me many recent accomplishments in the realm of web frameworks sound similar to how Microsoft was making noise back in the day with their frameworks.

The MS frameworks were great in themselves, they even cooperated somewhat. But they ultimately lacked in the ability to support long-term development, you know, when people just drop out of the project and you suddenly need to bring someone in ASAP.

Keeping this in mind will allow the new generation of "web guys" do better than us, the "desktop guys".
Western culture has undergone a value shift. Today's values are superficial in the extreme - we value money, personality[1], and social status. We "want respect"[2], and don't want to be "judged"[3].

Most of all, we crave others' approval.

The old values like integrity, honesty, empathy, conscientiouness and authenticity have been tossed aside.

This is not a new idea. In the year ~ 100 AD the Roman poet Juvenal wrote:

Already long ago, from when we sold our vote to no man, the People have abdicated our duties; for the People who once upon a time handed out military command, high civil office, legions — everything, now restrains itself and anxiously hopes for just two things: bread and circuses

This attitude that "Everyone was great and hard working in the past, but now everyone's superficial" is common enough.
Happy to see Santiago, Chile is #12 on this list of top startup hubs.

I was a participant in Start-Up Chile (http://startupchile.com) and I do not believe it would feature at all without the programme. I think this provides some evidence that you can buy a startup hub. With the same amount of spending but with better execution (independent of government) I think there is potential for a developing world country to make it into the top 5. They really need to get much closer to implementing the model described by PG in Can You Buy a Silicon Valley: http://www.paulgraham.com/maybe.html
And desktop apps can do much more without requiring any permissions at all.

While it would be great to have more secure apps everywhere, panicking about it, as has been so common in the media lately, is pointless.
I agree about SOPA.

It's not so much fear of changes to come, but fear of the last few decades of change, and trying to get back to an idealised past. I'm in England. Tabloid-driven conservatism here tends to be xenophobic, homophobic, europhobic, ... basically panphobic.

Or that may be my liberal bias.
Color me intrigued. Would love to see someone step up and maintain Ruby again. RVM is great, but a native package is always preferable.
1.9.3 is stable and fine for deployment.
The browser hack is not something new. I remember an article from last year, which showed how to get remote shell with a no-permissions app - https://viaforensics.com/security/nopermission-android-app-r...
He is talking about valuations.