skysight-inc/HackerNews huggingface dataset:
Citation please? Seriously, I want to know where the government made these assertions re: deputization.
To put it bluntly, Apple is 10 years behind Microsoft on security because up until now they could afford to be. We had a few trojans and such but for the most part, security updates weren't critical because people just weren't messing with the system. The important part of all of these outbreaks of flashback means that Apple realizes that it's time to get going on security.

Apple doesn't ship the patches that Oracle or other third parties ship as quickly because this is how they work. They want to make sure that everything results in the best experience for the user.

"But wait!" you'll cry. "Getting a virus because of a slow update isn't the best experience!"
Well neither is shipping a patch that causes more issues than it fixes.

Hopefully, the outcry of the users that they are getting viruses will up Apple's security efforts. In the next version they've already signaled that they think security is important because they're shipping Gatekeeper. I'd also like to point out that many, not all, but many of the bugs that are being used as exploits are in third party software (probably with the exception of Safari which has some serious issues).
djcjr: Are you an OCaml user ;p?
> Well, first off, Google has a privacy policy [1] where they commit to not publishing my entire works without my consent.

It doesn't say that anywhere. The Privacy Policy covers "What information we collect and why we collect it.". In other words, the PP is about information they collect about you using the service, not stuff you upload to Drive. Think IP addresses, cookies, log-on times etc.

> Even without that, though -- what do you think would happen if they did what you're suggesting? I think the public punishment would be worse than any legal repercussions.

So your saying that TOS don't matter and we shouldn't read or analyse them because we trust Google wont do anything untoward? So we are we even having this discussion in the first place then?
Good point.

Obviously you'd let them know why you were thankful they voted no :)
I sure hope everyone uses a library. What worries me is that it looks so simple, so someone might just glue together their own encoding and call it "done".

A higher barrier to entry isn't always a bad thing.
This is awesome. Would you like to stay in Austin area, or are you potentially looking to relocate?
We should all switch to Java/C#. It makes programming much much faster and easier. http://techiest.blogspot.com/.
"as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service"

is significantly different, and much less broad than

"threats to national security", or

"theft or misappropriation of private or government information, intellectual property, or personally identifiable information."
> It is, in fact, voluntary: private companies that do not want to share attack data with the government are not required to participate.

A bill that provides incentives (for example, legal immunity without any restrictions) is just as bad as a mandate. So that's a terrible argument, irrespective to the rest of your statements.
> Defending yourself from an attack is almost always easier than being the attacker.

How do you figure that?
I also thought of that actually, that's why I started a blog regarding the advances of technology. Feel free to follow me. http://techiest.blogspot.com/.
Is there a way to make your point without the ad-hominem or the accusations, and with more references? You've accused him of deliberately and repeatedly lying (a pretty serious accusation for one of the top HN contributors); do you have any evidence besides your differing interpretation of his citation?

(And I still do not see how it is at all related to copyright.)
Not only that, but Microsoft tried to develop parts of their OS in C# for Longhorn and gave up. Office doesn't use C#/.NET either.
We're an appsec firm. What part of pentesting applications benefits from "frictionless" sharing of personal information?
>Google's is worse because it takes all rights to use your work however it likes, and then states in its Privacy Ppolicy that it won't use it for anything other than to provide the service.

Please point to the part of the Privacy Policy that deal with "my works" or "works that I create and own". I think if you look closely, the PP only deal with information Google collects about your usage of the service, which is quite different to works you upload to Drive.
I'd like to think the same about Jimmy Wales.
You could test that the logging and parsing are in step, which then reduces the developer time to "Doh, red test" and a simple fix.
Thanks Kris, these are the scenarios that should change. Would love to chat more about your interest/experience with what we're doing - you can reach me at d@hackstaracademy.com
Not really; that would include any WWW browser with a GUI interface (like the original WorldWideWeb on NeXTSTEP).
There are binary-based serialization formats such as MessagePack [1] or BSON [2] that doesn't need escapeing overhead.

You can simply replace JSON with MessagePack since MessagePack is compatible with JSON.

[1] Why Not MessagePack? http://blog.andrewvc.com/why-arent-you-using-messagepack

[2] Performant Entity Serialization: BSON vs MessagePack (vs JSON) http://stackoverflow.com/questions/6355497/performant-entity...
This is actually easily possible because a lot of email clients are web browsers and we could take the html + js and apply it. The problem is this has already been done and lead to a lot of viruses, thanks to holes in IE mainly.

I've been fascinated with this topic since 2000 when I wrote my own SMTP component for .Net because I wanted more from email. I realized over time that it's the large lumbering beast called enterprise that will decide what to adopt and when. There are plenty of rich messaging formats available right now. We just need to use them.
I'm not sure I agree with tptacek about the donations, but one reason might be to keep up the pressure. Blocking SOPA was a big success, so having another battle soon after could be a way to both encourage their supporters as well as show their continued relevance. I'm also not going to argue that it's a bad thing: I love the EFF and donate to them, so if it helps them, I don't really have an issue.
Besides your thinly-veiled insults, how do we know you know what you're talking about any more than tptacek?
though not exactly "automatically" by the native camera app, but this app uploads directly to your db-account: http://itunes.apple.com/us/app/quickshot-with-dropbox/id4051... (and does it well!)
> As someone who works in the IT security industry, I absolutely agree with this statement.

The former claim is impeached by the latter.

> it sometimes take Apple months to merely test it and ship it out.

This is a dishonest characterization. I'd rather Apple continue to ship a robust and secure operating system, than to simply patch it every time someone releases an update that passes its regression tests, with the subsequent breakage of other packages and new security holes, none of which are caught by regression tests.

>OS X was also very late, compared to Windows, in implementing in-depth defense mechanisms

I really don't think 2001-2002 counts as "very late".

>Apple's code review and testing processes must be very immature to let such a glaring vulnerability ship to customers

Please explain to me why there are known security holes in windows that have existed for 15 years?

>But I think Apple is slowly and finally understanding the importance of security in their software ecosystem...

Damning with faint praise. Apple has taken this issue seriously since 1987. Microsoft makes too much money from being vulnerable to take it seriously.

This is just more nonsense from apple bashers based on characterization... Great for clicks but it impeaches you as an engineer.
thanks, we'd love to get more of everyone who's excited about it into software development. if you have any other feedback would love to hear your opinion d@hackstaracademy.com
Ya, logs are soooo much more valuable when they're in a database that you can query. We log to MySQL and then correlate logs with users, events, IPs, pages, etc.

Logs are just as relational as anything else, it took me awhile to realize it though.
Even if a worse intervention is planned (like the one you described above) wouldn't passage of CISPA help to validate it? Probably even make it easier to pass because the Internet's rage has already been depleted?
Samsung's Profit Soars 82% on Smartphone Strength
With the (rather large) caveat, of course, that the academic caliber of a school isn't dictated by the number of entrepreneurs it produces.
Solved it after I read that little hint in the text.

Also, tDCS kits should be soon available at http://flowstateengaged.com/
This is nitpicking but OS X 10.7 already ships with full ARC (and it works on 10.6 too in a somewhat limited manner). However, garbage collection was never enabled on iOS.
Generally, the good reasons you'll see for using C are lack of C++ compiler availability and embedded programming.

The bad reasons tend to be variations of developer inertia and the inability to decide which features of C++ ought to be used -- arguing against the STL isn't a good argument against C++ as a whole.
The Mac had viruses in the late 1980s. I know they existed as early as 1987, and as late as 1989, from first hand experience.

Do you think that the Mac was a major force in the 1980s, but has been safe in obscurity since then?

Apple has been serious about security for 22 years, at least, and measurably better than Microsoft for 18 years.

It is absolutely absurd to ignore that history and pretend that nobody was interested in messing with the mac, when they were interested in messing with it in the 1980s.

But what else can you do when you are an apologist for microsoft? Admit that they make billions from their security holes?
Now pitching.. An asian meetup.com alternative powered by the commmunity.
I don't understand how "threats to national security" could possibly be broader than "incident to rendition of service" or "protection of rights or property of the provider".
I think he may have meant "go down" as in, "go down in flames"
Cheap Jordan Fly Wade 2 Marquette Basketball Shoe for Sale
Over the last 10 years, I've gradually moved from ASCII to Thrift/ProtocolBuffers to JSON. Here are some random thoughts:

1) As others said, you should definitely use a library for JSON reading/writing.

2) JSON is simple and surprisingly fast to read/write. In one large benchmark (http://code.google.com/p/thrift-protobuf-compare/wiki/Benchm...), the Jackson JSON library (for Java) comes in somewhere between Thrift and Protocol Buffers.

3) JSON feels friendlier than protocol buffers and Thrift because it's human readable instead of binary.

4) JSON is more convenient than multi-line formats like XML because you can grep for things easily. For example, if you have {time:015128752, event:"authentication error", user:"bob smith", details: "..."}, then I can take do the following:

cat log.json | grep 'user:"bob smith"'

It's hard to do that with XML because even if you find the right user, the entire log message/object spans multiple lines.

5) JSON is not as compact as binary, but it gets surprisingly close if you gzip it. All of those repeated descriptive attribute names are great for humans, but compression algorithms love them as well.

6) The format is fairly universal, but if you ever come across a language without JSON parsing libraries, the format is not so hard that you couldn't write your own parser (compare that to Thrift, XML, etc)
How about the ECPA? Does this:

> as may be necessarily incident to the rendition of the service or to the protection of the rights or property of the provider of that service

allow a telecom to randomly hand private information over to the government? Because it sounds to me like it's not "necessarily incident" unless it's, you know, necessarily incident. Thankfully our court system has the authority to decide that as well.

In the case of CISPA, there are absolutely NO restrictions, and it's been broadened to apply to even more situations than just the provider's security. You are mischaracterizing the current nature of the privacy laws, unless you have something else to add?
Love it, good luck guys!
Read as "Apple is 10 years behind Microsoft in our revenue growth chart."
http://www.opencongress.org/bill/111-s773/show
Unquestionably, Apple has the top people on their development tools. It is a far superior platform for development, and this goes all the way back to the NeXT days.

Further, its astounding the amount of fear mongering I've seen from security firms and windows "security experts" over the past several decades. Literally they make their money by scaring people into buying tools.

I believe you need those tools if you run Windows, but you don't need them if you run Linux or OS X.
not commenting about the other issues, but CISPA grants legal immunity if

"theft or misappropriation of private or government information, intellectual property, or personally identifiable information." (exact quote from the text of the bill)

is thought to be occurring, and information is shared, it is very much related to copyright.
I've run into these issues again and again throughout my career and personal relationships. My twenties were especially difficult. I may now only be realizing how much my very early years of my parents bickering, stone walling, and passive aggressive behaviors we're the very habits I ended up reproducing.

I think I've made strides. I've started recording the rules I've adopted for my emotional life; I'm calling it my emotional framework. :) Feel free to fork, etc.

https://github.com/aantix/emotional_framework
Spitting out sprintfs means parsing texts. JSON might be slow since it's text, but binary based formats should be faster especially the log includes many integers.
Great product. But do check for broken links on the website.

The download page http://boomerangcalendar.com/beta/download.php link to /beta/features.html and /beta/faq.html.
Mobile learning is the future! Imagine everybody spending their idle time learning new skills (languages or anything else) instead of playing angry birds! Additionally, mobile learning is accessible to a larger percentage of the world population than probably any other kind of learning. It's going to change the world.
Nike Mercurial Vapor Superfly III For Sale
洛阳航空城商务酒店价格
Make SkyDrive.app a true background app in one step
Some will defend liberty, so long as it isn't inconvenient and doesn't disrupt their lifestyle.

Otherwise, they become a good spokesperson for tyranny.
I've seen several articles like this, and there are a number of things to consider.

Logging to ascii means that the standard unix tools work out of the box with your log files. Especially if you use something like a tab delimiter, then you typically don't need to specify the delimiter.

As an upside you are aren't storing the column definition in every single line, which if you are doing large volume traffic definitely matters. For instance we store gigabytes of log files per hour, grossing up that space by a significant margin impacts storage, transit and process times during write (marshallers and custom log formatting). Writes are the hardest to scale, so if I'm going to add scale or extra parsing time, I'd rather handle that in Hadoop where I can throw massive parallel resources at it.

Next you can achieve much of the advantages of json or protocol buffers by having a defined format and a structured release process before someone can change the format. Add fields to the end and don't remove defunct fields. This is the same process you have to use with protocol buffers or conceptually with JSON to have it work.

Overall there are advantages to these other formats, but the articles like this that I've seen gloss over the havoc this creates with a standard linux tool chain. You can process a LOT of data with simple tools like Gawk and bash pipelines. It turns out you can even scale those same processes all the way up to Hadoop streaming.
There is a ton of room between 10% and the typical .1% or .5% (or less) that a new hire would get. Compete on equity by widening the employee pool from the start. They still have to vest, so it's on them to prove themselves.
Remember we're talking about writing to disk. The time it takes to marshal the data is pretty much insignificant to the time it takes to do the actual write.

We use JSON on disk heavily in several places where we generate or receive huge amounts of data. JSON-in-a-file is a pretty good datastore for sequential data processing because it's so convent and you can work with the data using cat, tail or any tool supporting JSON.
Meeting efficiency barometer
背部吸脂减肥专家
I believe in terms of entrepreneurial culture on campus, Stanford is slightly ahead of Cal. However, I don't think there is a difference in academic quality. Lot of Stanford CS professors are Berkeley alums and vice versa for Cal.

Stanford definitely has leg up in terms of Startups. Especially the dot com era. At Cal we don't have equivalent of Google or Yahoo. However, Startups are just one dimension of innovation in technology. Berkeley can easily boast some of the groundbreaking research (not just engineering but overall sciences) during last 100 years.

Disclosure: UC Berkeley Alum here.
It is likely you are working from the first draft of the bill without its amendments. In particular, later amendments narrow "cyber threats" to:

‘(3) CYBER THREAT INFORMATION.—
‘‘(A) IN GENERAL.—The term ‘cyber
threat information’ means information directly
pertaining to—
‘‘(i) a vulnerability of a system or net-
work of a government or private entity;
‘‘(ii) a threat to the integrity, con-
fidentiality, or availability of a system or
network of a government or private entity
or any information stored on, processed on,
or transiting such a system or network;
‘‘(iii) efforts to degrade, disrupt, or
destroy a system or network of a govern-
ment or private entity; or
‘‘(iv) efforts to gain unauthorized ac-
cess to a system or network of a govern-
ment or private entity, including to gain
such unauthorized access for the purpose
of exfiltrating information stored on, proc-
essed on, or transiting a system or network
of a government or private entity

I'm not seeing BitTorrent in there.

(By the way, I don't think you deserve the downvotes for bringing this up. I found the amendments aggravating to track down, too. I'd been working from an earlier draft of CISPA that struck "intellectual property", which turned out not to be the one the House voted on.)
That's a common excuse used to defend bills that erode various constitutional rights. "Everything authorized by this bill was already lawful under other bills. Nothing to worry about, keep moving." This means that you can change things gradually with multiple bills and claim each time that "this bill changes nothing, keep moving".

If this bill changes nothing, then there is no purpose to vote for this bill is there?
You don't have to apologize, those aren't my opinions. I was summing up Google's motion, which has 6 parts.

My particular focus is on API design too, and I know the art that comes into it. But I would say that some APIs DO fall into this. Calling the equals method "equals" and having it take one argument and return a boolean is comparable to a "short phrase". There aren't many other ways to express the concept. When you start to look at a library or component as a whole though, it starts to take on a lot more value and uniqueness. You only have to start comparing mocking or assertion libraries in Java to realize that a huge portion of the differentiation between the libraries (and why people choose one over another) is the way it reads and its expressiveness, not its implementation details. And I think some teams at Google recognize this too, if you look at Guava and Guice.
If all the stuff in CISPA is already legal, then we do not need CISPA, do we?
I don't know. I just wanted to add at least one actual source to the conversation... Social norms change, though, and this is actually an excellent example of a huge shift.
Yes, it does. What is it that you think "incident to rendition of service" means?

(Not that I think this is dispositive, but I had an actual run-in with an ISP over this clause. They suspected me of hacking their service, because they read my home directory [yes, this is shell server Internet access; I'm old] and found SMTP code in it --- so they recorded copies of all my email messages. A friend worked there and ratted them out. I met with a (good) lawyer. The response: too bad, so sad. GO ECPA!)
When speculators (HFTs) trade they either move prices in the right direction or they make a mistake and move prices in the wrong direction. When they move prices in the right direction, they provide a valuable price setting service to the market, and when that happens they also make a profit, in effect the market pays them for this service. When they move prices in the wrong direction they lose money, and they pay the fees of those other speculators who move prices in the right direction or they reduce costs for end producers and consumers. So in both cases the market benefits from the activity of speculators.
> Microsoft makes a lot of money from the security holes its own products, many of which were put there deliberately as "marketing features" that later turned out to be security vulnerabilities that apparently Microsoft finds it unprofitable to close.

[citation needed], please. I'm not being snarky - in fact, if you have a citation, I'd love to be able to use this in my discussions with others.
I agree that there is no purpose for CISPA. It's a dumb bill.
I would be worried about Kaspersky's CEO if this wasn't just off-the-cuff hyperbole. Was he around in the tech industry 10 years ago? Because if he was, he would realize just how ridiculous it is to compare anything from today with the state of Microsoft software in 2002.

For starters, people were still running Windows '95 (or worse). A fresh install of Windows would be infected just by connecting it to the internet - and within 15 minutes depending on where you were. All web browsers had multiple vulnerabilities, and by far the worst was Internet Explorer.

Everyone ran everything as root/administrator.

Yes, today is just like Microsoft from 2002.
This is pretty clever. Well done guys.
Christian Louboutin Trailer 140mm Platform Sandals - Blue
That's only true on the surface. In the US lawyers execute not just statue (laws written by the legislator and signed into law by the executive that have yet to be over turned) but case law. Which acts as a single vary large multidimentional training set that's clear at the extremes but vary vague in the middle. The reason it's vague is people pretend there is far more stability in the system than actually exists so there is case law supporting any vaguely reasonable line of argument. Thus, lawyers are there not to help interpret the law, but create the most reasonable argument supporting their clients goals and providing their clients feedback to how well that argument might stand up in court. Under this interpretation you can clearly see how a talented team of lawyers can help bend the law to their client's point of view and 'distort' the impartiality of the system.
There are supporters of CISPA who believe we need it because private companies manifestly do not share information about attacks, and so one thing the government can do to resolve that is (a) to encourage them to do so, and (b) create a clearinghouse in the government to provide a default place for information to be shared.

I don't agree with those people; I think CISPA is pretty silly. But that's the argument.
another post today just mentioned this:

http://www.dbasellc.com/
Help tame giant herds of data at Optimizely