skysight-inc/HackerNews huggingface dataset:
Oh sure. I was just clarifying how they went about giving Motzart a number without administering a test.
I absolutely love the 'view static version' on the Curbee demo page for those that have JS disabled or have a slow connection. Absolutely fucking love it.
They got it backwards, it should read: In recognition of his creation of a new open source kernel leading to the widely used Linux-based operating systems for computers.
The OP's enemy is not APIs, but rather proprietary software.
http://dummyimage.com is open source. It has a couple new features compared to the code running placehold.it
Lengths should always be unsigned.

Always.

I'd even say they should always be uintmax_t in C.
FYI OpenSSH's sshd is not vulnerable, despite using OpenSSL. Back in 2002 and after a different ASN.1 bug, Markus Friedl observed that RSA verification used the OpenSSL's full ASN.1 parser to parse PKCS#1 RSA signatures despite them having an almost entirely fixed format under the parameters used in the SSH protocol.

He wrote a minimal RSA signature verification implementation that we've used ever since. This is the eighth bug that it has saved us from in the last ten years.

Attack surface reduction works.

Note, other parts of OpenSSH are vulnerable - specifically private key loading. So, if you allow untrusted users to supply private keys to ssh, ssh-add or ssh-keygen running in a privileged context, then you should patch this bug ASAP.
Credit Repair 4 Newbies
HP to certify Ubuntu 12.04 LTS for Proliant servers
Even without this trick it's trivial to clickjack a like button - just place the button on a div with an alpha transparency of 0.01 and trick the user in to clicking it.

Unfortunately it simply isn't possible to provide something like the Like button without being vulnerable to click jacking. I assume Facebook decided that the benefits outweighed the drawbacks. There's probably something clever they can do on the server side to statistically detect and penalize likely clickjacking attempts.
Open vs. proprietary debate heats up the cloud, complete with mudslinging
Maybe it is a little douchy, but open source is definitely much more crucial to the worlds infrastructure than ukulele. It's one of the key aspects of why building your own business in the IT world i cheaper than ever. However, I'm not arguing it's just open source, but open source is special enough to be mentioned.
Playing with HTML5 CSS3 and Javascript - canvas experiments
sic? Not Finnish?
Give Links to Get Links
Competing with Google for Ad Space
Is this likely to have any implications for users of OpenVPN?
I think you missed the point. The job will be performed whether the person is on the soil or not. It's next to completely irrelevant whether you accept someone or not - he'll do the job anyway with modern IT infrastructure.

That's obviously blatantly false, because we're still connecting to other people in real life, however it's a point where we're increasingly heading.
Please explain how a string length would need more than size_t to represent it.
And for those interested, here are Oracle's slides

http://www.oracle.com/us/corporate/features/opening-slides-1...
Huh? Since I switched to using tiling window managers, I actually prefer multi-window interfaces for the first time ever because, to me, when tiled they essentially work like single window interfaces, except I have a lot more control over it.

(I use a manual-tiling WM, not an automatic-tiling one - I wonder if that makes a difference in this case)
I went to Middlebury. There was an AI class, but the 3 semesters were research with my late professor Tim Huang.

The department at Middlebury was small, but I doubt that I could have received a better CS education elsewhere. The opportunity to do one-on-one interesting research so early in my college career was invaluable. All three semesters were Go-related, but I didn't focus on the same thing during each.

The first summer was spent scoping the lay of the land. Reading the papers, implementing naive "improvements", and a lot of testing. Our best result was achieved by implementing someone else's we'd read in a paper. It was a humbling experience.

The second semester started with finding ways to visualize the algorithm in action. Since the improvements were so nonintuitive I felt I had to find a better way to understand how it worked and what my changes were doing. Easier said than done.

The third semester was more varied. I did more testing and playing with parameters. I also ported a version to the iPhone (we wanted to be the first and best on there- this was before ios 2 was released). Then my professor and I started a company that was initially related to Go and iPhones but later pivoted substantially several times.

I'm very thankful for the opportunities I had at Middlebury and the chance to work with Tim Huang.
Why can't basic auth logout be handled by the browser? e.g. display a "logout" button on the navigation bar when you're logged in with basic auth?
Magento development
We are Custom Web Design,web development company.PHP web development,website application development,ERP implementation,Drupal Development,Flash design, Professional web design company.
Shameless plug for http://duosecurity.com

We offer a two-factor cloud service to protect any kind of service that may be remotely accessed: web, ssh, rdp, vpn, ...

Biggest difference from Google Authenticator is the smart phone user experience: one tap to approve a login instead of transcribing a six digit OTP.
BlackBerry gets key endorsement from Colombian sex worker
Ask HN:any IP/law related issue when collecting Twitter messages and redisplay?
suppose i want to collect twitter messages on some topics and then display on my web site, while still stating that these messages comes from that guy on twitter, is there any ip/law issues with my site?
my idea is to do some kind of aggregation or search on some specific topic.
thx
How to build a Billion Dollar Startup
Yes, it does. But you can access GET vars using $this->input->get('variable_name'), which coupled with built in global XSS filtering is much better idea than accessing GET directly.
The whole self-driving car thing seems insane to me. How about, good public transportation? I don't see the point of people sitting in individual metal boxes when buses and the like do the job much more effectively. The real problem is with how we build communities in the US, spread out and car dependent. Walkable communities are a much better way to do things, which means increased density.
That data is also 15 minutes old (or older!) from what I recall. Probably not your best choice for anything remotely "realtime".

As parent said, you're better off getting a real market stream which will probably use FIX: http://en.wikipedia.org/wiki/Financial_Information_eXchange
مسلسل فاطمه غول الحلقه 71 مترجمه عربي علي كوكب الشرق
IMHO, size_t (for in-memory objects) or off_t (for files) makes more sense.

That is not the issue here, though: casting longs to ints would cause trouble even if both are unsigned.
You don't need CSS4 to clickjack, just put the Facebook Like button on top of the link and apply opacity: 0.

http://jsfiddle.net/txbYs/
Seeing how popular personalized songs are on Fiverr, this actually is an excellent idea IMHO.
"Hadrian's wall is still marking the northern extent of the old Roman Empire"

There is another further North - the Antonine wall:

http://en.wikipedia.org/wiki/Antonine_Wall

There is quite a lot of Roman infrastructure North of Hadrian's Wall - indeed I had a wander along part of Dere Street last weekend: http://en.wikipedia.org/wiki/Dere_Street
here in the UK we reject the idea of detention without charge for terrorism suspects

That's not always been the case. Internment without trial was practiced in the UK for terrorism. It tends to be counter-productive, and increases violence. (cf. http://en.wikipedia.org/wiki/Operation_Demetrius )
Checked my last receipt from them, 19% VAT was included in the total amount billed (this was 2011 and it was for Resharper). But the seem to sell it through a German company so I guess it is German VAT.
I think you missed the point. I'm clearly in agreement with both @samfoo and you.
It should be realtime (not delayed 20 minutes), we will find out in 8 minutes if this is true. :)
Agreed, the UI for drawing arrows is a bit confusing.
Criticality, Rejectionists, Risk Tolerance
> A person being a good king is probably a bad predictor of their great grandson being a good king

This is a very interesting point. One of the very best things democracy offers is reasonable hand-offs of power. Has any country tried something like "electable kings"? There would be one monarch who gets voted into power, who then has ultimate control (subject to a Constitution or something). Then, upon death, the country holds an election and a new monarch is voted in?

Or, in between, what's the longest any particular head of state is elected for these days? In the US, the president is in charge for 4 years, which seems like too short of a time horizon to implement any sort of long-term plan. Any countries out there where they are elected, say, 10 years at a time?
Looks like the same game as the "don't click" twitter button (that everyone clicked anyway) from 2009. That was iframes/css.

http://shiflett.org/blog/2009/feb/twitter-dont-click-exploit
I'm missing a simple UML dependency arrow, like the "uses" but without the text (looks cleaner IMHO).
Shrinking Kinect for mobile: Q&A with Bill Buxton of Microsoft Research
I think what the author is calling for is somewhat impractical (if, say, Thailand issues such a stamp, why should Canada or the USA have to respect it)?

On the other hand, I don't really understand why countries like the US, Canada, and Japan don't enter into agreements with EU/EEA countries to allow for visa-free travel, work, and residence agreements.
I used to get DAK catalogs back in the 80s, and this article reads very much like their product ads. "Here is what the audiophiles dont want you to know"

Here is some more background http://en.wikipedia.org/wiki/DAK_Industries
http://ascii.textfiles.com/archives/1984

I
Bristlies game
Sajak - Simple Authenticated JSON API Kit for Node.js
He was born in the Swedish-speaking community of Finland.
http://en.wikipedia.org/wiki/Swedish-speaking_Finns
You didn't understand.

Consistent use of one (unsigned) type for lengths would avoid issues because there'd be no casts.

off_t is signed and doesn't make sense because file length can't be negative.
I found when I first ran pycharm it did some indexing for a few minutes before it settled down. That caused some spinning of fans and higher CPU usage.
But you could just as easily do:

http://example.com/cookiedata/image.gif

With just a few rewriting rules.
You're missing the point. It's actually written into the American Constitution that the president must be born in America.

I don't think the above comment had anything to do with his capabilities. Merely the practical difficulty in becoming president. (It would require a constitutional amendment.)
Well ok, I was just trying to provide some food for politicians
Web Design Firm Services of Graphic Web Site Designs
Because the actual law as written excludes someone not born in America from becoming president.

Obama was born in Hawaii, so he passes. Musk was born in South Africa, so he doesn't.

It would take a constitutional amendment to change the law. Highly unlikely.
Improving Unit Test Iteration Speed with Rails, Spork, and Resque
Have you ever lied at a job interview?
You're right. Just to be clear, I wasn't arguing in favour detention without trial for terrorism suspects or anyone else. I just wanted to illustrate how people's irrational fear of migrants appears to exceed even their irrational fear of terrorism.
> You can see rivers, mountain ranges, coasts, valleys and walls. But you can't see national borders,

Actually, sometimes you can http://blogs.nasa.gov/cm/blog/fragileoasis/posts/post_131543... (definitely worth a read)
Can't help but feel this would produce an epicly poor signal to noise ratio.... No one cares about someone's keystrokes as thats attacking the wrong level in information hierarchy. Overall seems like a self indulgent academic effort (nothing wrong with that per-se but the real world doesn't need it). It's interesting to compare relative interest in this to Light table mentioned a few days ago
Sample emergency bump for Gentoo:

Firstly and most importantly: check http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo-x86/dev-... to see whether the Gentoo developers have already bumped OpenSSL in the official repository. If so, ignore everything below!

wget -O /usr/portage/distfiles/openssl-1.0.0i.tar.gz http://www.openssl.org/source/openssl-1.0.0i.tar.gz
chown portage:portage /usr/portage/distfiles/openssl-1.0.0i.tar.gz
chmod g+w /usr/portage/distfiles/openssl-1.0.0i.tar.gz
mkdir -p /usr/local/portage/dev-libs/openssl
cp /usr/portage/dev-libs/openssl/openssl-1.0.0h.ebuild /usr/local/portage/dev-libs/openssl/openssl-1.0.0i.ebuild
cp -R /usr/portage/dev-libs/openssl/files /usr/local/portage/dev-libs/openssl/
ebuild /usr/local/portage/dev-libs/openssl/openssl-1.0.0i.ebuild digest
emerge -1q =dev-libs/openssl-1.0.0i
shutdown -r -t 0 now

Skip the first 3 commands when mirrors have the latest OpenSSL tarballs.

Preferably skip the last command and manually restart daemons that rely on OpenSSL. I have used the drastic example of restarting the entire server in case someone blindly follows the above commands without thinking it through carefully.

Note that openssl-1.0.1* is currently masked in Gentoo ~amd64. If you have it unmasked, it should be easy to adjust the above commands to use openssl-1.0.1a instead.
Yup. That would be me.

Here's how dummyimage.com evolved http://www.russellheimlich.com/blog/tags/projects/dummyimage...

and here is how placehold.it came to be. (The tweets are in chronological order.)

https://twitter.com/kingkool68/status/10582057668

https://twitter.com/iboughtamac/status/10582115943

https://twitter.com/kingkool68/status/10582270354

https://twitter.com/kingkool68/status/10582407098

https://twitter.com/iboughtamac/status/10582447868

https://twitter.com/kingkool68/status/10582658022

https://twitter.com/iboughtamac/status/10583391789
Exercising Options
What changes after you turn 30?
In fact existence of off64_t proves off_t is not OK.
Exactly. I happen to like ice cream, but if I ate nothing but ice cream everyday, I'd grow sick of it pretty quickly.

I like to program and even do it in my free time. I'll even work longer hours if the problems at work are interesting enough. Still, I have other interests, friends who aren't programmers, family, and if I wasn't able to pursue those things because I was too caught up at work, I'd grow to resent my work, whatever it was.

The programming I do at work I enjoy, but it's also my job so I leave when the working day is done, or a little later if I'm caught up in something particularly interesting or urgent. Then I go home, and maybe I'll work on projects of my own, or I'll do something else that interests me.

It's not about being only into programming because it's a job and it pays well (I've been doing it since I was nine) and it's not about looking down on people who spend their lives doing nothing but. It's also not about not being one of those people who do nothing but and looking down on those who don't. It's about programming, enjoying enjoying what I do, but still having a life outside of work.

515 all the way.
Yeah that might have been an exaggeration. But as I recall, once you have the MT seeded and fired up, getting a new number requires little more than a bit shift. Anyway it was substantially faster than simple alternatives I tried (including other PRNGs). One early theory I had was that using a faster PRNG than MT could lead to a better result even if it wasn't as evenly distributed. I think MT proved to be the best solution though.
Rats, you're right. I should stop commenting 15 minutes after I wake up.
Microsoft Plans Waste-Powered Data Centers
They do: http://www.jetbrains.com/pycharm/buy/buy.jsp#academic
the single-window interface is overrated, i tried it in one early development releases and returned back to multi-windows
Confirmed real-time, just streamed in:

{
"ticker": "AAPL",
"exchange": "NASDAQ",
"price": "598.86",
"change": "-9.48",
"change_percent": "-1.56",
"last_trade_time": "Apr 19, 9:30AM EDT"
}
There are a ton of them out there. Here is a list of them ordered by when the domain name was registered.

http://www.russellheimlich.com/blog/list-of-dummy-image-gene...
A Letter to Every CS Undergrad
I always wanted more dynamic commenting which some of the fisheye/github tools already do. For instance being able to have a discussion about a line of code. Not necessarily a code review, but more like explaining the code with pro/con discussion if necessary. It is a bit troublesome to implement you always get snapshots of code, so how to track lines. Plasticscm seemed interesting, http://www.plasticscm.com/gallery.aspx, but I think they are aiming at the Microsoft crowd, git is pretty firmly entrenched otherwise. Looks like they tried to learn lessons from git and it's success.
that's not what the grandparent poster said, let me quote "what I think GIMP should be doing: ripping off Photoshop wholesale." - that would be a BAD thing
Bad Habits of Insanely Productive People
The UI for arrows was hard to figure out for a few minutes, but once I did I found it to be the right experience. Drag into space, you get an arrow to the same shape; drag to another shape, you get and arrow to that shape. That feels nice.
GPU's have multi gigabit bandwidth and 1.5-6+ GB of on-board ram. The GFLOP performance vary's significantly though.

The Radeon 7970 has 947 GFLOPS Double Precision, but the nvidia cripples it's geforce series to 100GFLOPS to force people to pay for a Quadro 600 that has 515.2GFLOPS Double Precision. Though, if it's a large project paying for some Quadro's are probably worth the cost's for better software support and more RAM IMO.

The problem with FPGA's is they cost about as much but take a lot more effort to anywhere close to those performance numbers. However, they are great if you have some vary odd specific needs and plan on moving to custom chips in the future. AKA, you want to build a custom video encoder and plan on mass producing your own chips, so you already need to develop at really low levels.
Compiling Same Code on Windows Phone 7 and Windows 8 Metro
While having a minimal signature verifier is good, you wouldn't have been hit by this bug in any case. This only affects parsing from a BIO or a FILE, and the OpenSSL RSA code parses the signature from memory.
Many people do not mind the multi-window interface and the reason there wasn't a single-window one isn't some stagnation in progress but probably either opposition by the past maintainers to the idea of switching to a single-window one or not caring about it at all. Those fifteen years are hardly a measure of how Gimp fares in comparison to other image editors.
Textile is a different beast. Unprocessed Markdown is meant to be human consumable, not just human readable. Specifically, you should be able to send a raw Markdown file to someone who doesn't know what Markdown is, and it should still be pleasant to read for that person.

Textile uses easy to read syntax, but line prefixes like 'h1.' leak the HTML intentions to the reader. That's not to say textile doesn't have it's uses though. Textile solves problems that Markdown doesn't even address, even in its extended forms. For example, Textile allows you to apply span tags (with class name) using Textile syntax. Markdown requires you to write actual HTML.
Show HN: Tablify - Make HTML from images, great for emails
Email, text or a call? Finding out if you've been selected for the Games
They do, eventually (unsure of the criteria) it will start showing a second confirmation dialog if they detect something untoward which you have to confirm your like with, although click jacking that too might also be possible.
I think he means for the dynamically rendered parts, like "GitHub Watchers".
The OpenSSL advisory contains details of the problematic functions, which are considerably smaller than the full set of ASN.1 functions:

http://www.openssl.org/news/secadv_20120419.txt
>it simply means that by installing Ubuntu 12.04 LTS on their current (or future) ProLiant hardware that they won’t nullify any kind of hardware warranty.

Would it have before? Warranty claims being denied because a server runs Ubuntu would cause quite a shit storm. Unlike consumers, people purchasing servers are generally sophisticated (whitepapers nonwithstanding), and Ubuntu is a huge slice of the server market. About 45% of all EC2 images are Ubuntu based.

This smells like a non story to me.

Edit: Updated the market share; It's actually 45% now: http://thecloudmarket.com/stats#/totals
It'd be ironic if they were giving the award to a FSF person. Linus has no problem with Tivoization, though.
Show HN: PinView - Your Facebook Feed as a Pinterest View
Click anywhere on that page to start your own feed.

A friend of mine and me have been playing around with some ideas about how to show the Facebook feed differently.

Our first experiment is called PinView and basically takes the Pinterest GUI an apply it to your Facebook feed.

We don't track any personal info. The permissions you are asked to grant are purely to be able to represent your own feed in the app.

Wo do of course monitor traffic.

The entire app is done in JavaScript so everything runs on your own machine. It's no secret that we had to make a lot of hacks to get this working fairly well. FB is definitely not an easy animal to tame.

If you have any kind of data blocker activated that should be deactivated to play with it.

Let us know your thoughts.

You can also give feedback (or like) here: https://www.facebook.com/pages/Pin-View-Community/3301634270...
The publication date was August 4, 1993. Not to say it's irrelevant, but alot has changed since then.

We are all going to disagree about how much tech is too much in education. On the other hand, very few disagree that tech has no place in hospitals, the enterprise, supply chain management, etc. That alone illustrates to me how ridiculous it is to treat education as a space needing a "reset."
seems like it's good, woo!! I will honor thy robots.txt!
I read the current title as Instagram faking a malware spread, not that there are Instagram-lookalikes spreading malware.
Oops! You're absolutely right!

I just 'forgot' about The Beatles, The Rolling Stones and Bob Dylan (amongst others)
Money is a receipt given for value created. I think you mean to say that dollars and pesos should be replaced, which I agree with to a point. However, giving up money, to a government, is like giving up sovereignty. How could a government fund wars or welfare if they couldn't print money.
Adding SIMD Support to Data Parallel Haskell
Although it's unfortunate that some people will not get their Pi, the reality of a lack of supply (just scaling up, like you said) leads the market to do the most efficient thing:

Some customers are willing to pay the higher price. If nobody will buy at that high of a markup, you can be sure the prices will come down.

So for whatever reason, those who feel it's worth the extra money can get theirs first.

Since this is such an inexpensive device, it's certain to become widespread. This price bump will be short lived.
nice, i've been using Flowchart.com which gives me collaboration.
Google's Brin Worries About Open Web, As Google Gets Into More Privacy Messes
> However, the argument fails because human hearing doesn't work that way and the DVD/post-CD industry already decided to use 48/96/192 instead of 44.1/88.2/176.4.

That's quite a strong statement to make in such an off-handed fashion, particularly in reply to such a (at least seemingly) well researched and often linked article. Furthermore, the citing the decision of the industry reeks a bit of appeal to authority.

Maybe you could back up your claims a bit better?
Given that it is "powered by mxGraph," which is a product of jGraph, that would seem to be the company.