skysight-inc/HackerNews huggingface dataset:
While security through obscurity shouldn't be relied upon, obscurity does play a part in security (You don't go around publishing your private keys, for example, and you don't share your passwords). You'd be foolish to think that narrowing down the vector of attack won't help.

Physical security works in a similar manner. You have multiple obscure parts (keys, passcodes, etc), and non-obscure parts (locks, cameras). If I have keys and passcodes, and I know where the locks are and where the cameras are, I can get through. And, it's not incredibly difficult to get a key (I have personal experience with this, hence the specific setup). What saves you is the passcode and camera that aren't known. That, and the fact that the guy was half-drunk as it was.

In the end, you don't rely on obscurity, but you don't go out of your way to tell everyone what you are doing. That's why you pay experts to do it for you.
I hadn't heard of the change with the newer models. I've helped someone do the tape hack with the starter cartridge in a 2170W -- worked just fine.

Can you elaborate a bit on this "gear" hack for the newer models, so that I know what I'm looking for? Thanks.
> With bittorrent you need at least one seeder that is available long enough to feed the swarm (in decent time), during that time a lot of things can go wrong (if anything goes wrong when uploading to a free hosting service you just start over, nothing lost).

Don't most clients support web seeding[1] these days?

[1]: https://en.wikipedia.org/wiki/BitTorrent_(protocol)#Web_seed...
I have spent a few minutes trying to think of an alternative to this. I understand that users getting tricked into installing malware is a big issue. I think we, as developers, are paying a bit of a price for the number of popups we used to put in front of people so they don't read or understand anything that is on them (see: EULAs). Could you maybe comment on other paths you considered when making this change?

Could there be a way to just have the signing cert for an extension be provided/known by google, even for third parties, so that if reports happen the extensions using that certificate could be remotely disabled? I'm seeing both sides of the argument, just seems like this issue goes even beyond extensions.
I like how clean the site is, but (imo) you have to change the name, especially if you want to get some consulting work or build a community out of this.

It's also really hard to tell what the product is (pdf sheets? Physical note cards?) unless you do some digging. If I'm evaluating a product page I've never been to before, I should be able to get a feel for the product within a few seconds.
Well, I'll try to keep my point simple. Our constant need to complain is corrosive. Visionary thinkers shaped our society for the next generation.

I didn't enjoy reading this since it was a large complain fest, and that is the corrosive thing that has made our government do nothing. If you imagine a future in which you have a government that is effective, that "does" things, somehow you are able to accomplish that goal. You need visionary thinkers, not complainers. And you have to offer up some idea of where you see the future of government, instead of complaining about how it does not do anything. The people who shaped our societies future knew the kind of society they wanted to live in. We rarely talk about what we want our society to look like, what we value as a society. Start talking about these things.
and how would you know, if they don't explain what they did?
I am a freelancer developer . 50% of my work come from social networking (twitter, IRC, blog). And the other 50% from referals (the client promote my work with his friends ). So if you want to find a good developer, follow developers on twitter, follow his blogs, ask questions, research github and chat with them. I am sure that you will find very good developers.
That's great, but what's the enterprise supposed to do? You don't want ABC Corp CRM app in the Google store, it only makes sense to people who work for ABC Corp.
"The first principle is that you must not fool yourself--and you are the easiest person to fool. So you have to be very careful about that."

Upon reading this paragraph, I was reminded of his book "What do you care what other people think", which was a homage to Arlene, partly because Feynman made the fatal mistake of trusting the doctor's judgement to disregard the blatantly obvious diagnosis. He wrote about his experience in much more detail here:

Part 1: http://i.imgur.com/CSNop.png

Part 2: http://i.imgur.com/7mDTW.png

---------------------------------------------------------
//Comments below are irrelevant to the thread, I just felt like sharing.

Feynman was depressed for a while but eventually his love for physics helped him recover. Hans Bethe once said, "Feynman depressed is just a little more cheerful then any other person when he is exuberant." Feynman is arguably the most logical and happiest human being that has ever existed.

Feynman's magnificent exuberance and puzzle solving enthusiasm remained up until his last days, where his coworker Christopher Sykes remarked "Look at this man. He faces the abyss. He doesn't know whether he is going to live through this week. But he was consumed by it, and he worked on it all day long...." http://www.youtube.com/watch?v=Fzg1CU8t9nw#t=1h11m33s

A few days before his second operation, Feynman sang a bongos song about orange juice, an amusing take of Linus Pauling's advice to possibly cure his cancer. Just look at his smile at the end of this video: http://www.youtube.com/watch?v=HKTSaezB4p8

I would also like to add that on Feynman's last days at the hospital, his last words to his artist friend Jirayr was "Don't worry about anything, go out and have a good time!" http://www.youtube.com/watch?v=Fzg1CU8t9nw#t=1h32m15s Maximus would be proud. "Death smiles at us all. All a man can do is smile back."
Description of Map:

https://developer.mozilla.org/en/JavaScript/Reference/Global...

Set:

https://developer.mozilla.org/en/JavaScript/Reference/Global...
By that time everyone that wants it has it ;)
Yay, another "lets enforce our products to end users" on the cover of "security".

Can't wait for Google to remove the checkbox on every Android for "allow 3rd party software install", cause you know, it has to come from Google Play else it's OMG dangerous, and all the users are dumb and check the checkbox and install random apks. And look there's a nice illusion of choice, you need a procedure so complex that almost no one will be willing to do it (and thus you're forced into Google Play).

For security. /trustworthy.
The reason is that government has valid things to do, but these have been frozen in place since the mid 70's.

Right now, the big debate appears to be a 5% taxation difference on the top 10% of wage earners.

The only other things that change are fear-based, such as the creation of "Homeland Security".
Every so often, Amazon drops the price of the 2270W to $79.99 -- the model that currently fits your description.

camelcamelcamel will email you when this happens.

http://camelcamelcamel.com/
"-client" has no effect in 64-bit.
It has nothing to do with finding everything interesting. I was speaking about the "if there is ever something interesting, the journalists will investigate/sum it up for me" line of reasoning.

And whats with the "we are free" language, its not a cable news show. When did I ever say that anyone lacked the liberty to do something?
Right with you. This is illegal, plain and simple. Acts like this should not be celebrated. No matter if it's against the 'bad' guys.
Why is the quality of life in SF relatively low?
I noticed something in SF which has puzzled me for a while. Although SF is relatively rich and expensive compared to Austin, Denver or Paris the quality of life is in general relatively low. Besides the crime rate, especially number of murders and gang crime is really disturbing. Maybe am subjective, but would be interested to hear your feedback on the topic.
Well, would that be easier to do than just seed it yourself? (with the added risks mentioned above)

I'm guessing that few hosting companies make that easy to do, since you often have to go through some form of queue to even get the ticket needed to download it.
The problem is that you're thinking of extensions as files, which most users don't understand. They want an extension; they don't care how it's delivered and they have no idea what an auto-update source is.

I have a button on my website that says "Install extension." I don't tell them it's a link to a .CRX file; that's an implementation detail. If you asked any of my users whether they had downloaded a file (let alone what its extension is), most couldn't tell you. Similarly, the Chrome Web Store has buttons that say "Add to Chrome," not "Download Trusted .CRX File."
>>- Eliminated all gold, and replaced it with unredeemable “greenbacks”

They confiscated the gold.
The war on terror is a new phenomenon and it should meet the criteria for a significant undertaking.
In order to get access to your server they need to circumvent the anonymity that tor provides. Hopefully if you go through the trouble to publish via hidden descriptors you know not to include your name/SSN/gps/cell-number in your apache headers;)

This is completely tangential, but can you point me to the Tor investigations? The interaction of tor/law-enforcement is something I am extremely interested in.
http://pic.pwny.biz.nyud.net/x/buchladen_at_scientology.co.a...

This is one strange email...
Not to mention there’s the language barrier…
> (in German, of course)

That's what I would have assumed, but many of them are actually written in (mostly hilariously bad) English for some reason. They also seem to be using quite a lot of jargon, which seems to consist entirely of English words or phrases.
Entrepreneurs, put this on replay and change the world
does anyone really use Microsoft Word or clip art to design their logos?
I had myspace but always felt highly unusable and impractical. I don´t feel facebook is that way, in fact the opposite is true (at least for me), maybe it doesn´t have all the features possible but it is terrible useful to be in contact with your friends (mostly for all the stupid things we like to share).

If they keep facebook centered on the costumer, the young people dont migrate to cooler spaces and don´t get lost too much trying to monetize, I think they will be around for quite some time.
It is also true that right now it is maybe on its peak of popularity and public exposure, and its user numbers will be lower or at least growing more slowly.

Note: I find their mobile app awful, it has so many bugs regarding comments, pics... it is almost unusable. I don´t know why it is that bad..( to be honest I have to upgrade it on my Iphone so maybe all this problems have been solved)
1. There's a huge difference between the Geller and the psychology student, the former does lack the integrity but you can't talk of "abuse of integrity" for the student, because (i) she was doing things in the prescribed way (unless, of course, you're ready to say almost all psychology departments (and most other humanities, too) are guilty of the same sin, and (ii) even if she did want to do a better experiment, in general it's not obvious how to do it in most cases in such disciplines. The point about putting the rat maze in sand is far-fetched (how many of us took such precautions in our PhD experiments). My point is that there's absolutely no comparison between Geller and his ilk and the student. Feynman is beating up on psychology here, I think, because it's not as rigorous as physics.

3. I think you missed my point here, based on your mentions of "same people" , "integrity", etc. Many, many approaches have been used to solve the education problem in the US in the past 40 years, some quite innovative, and not by the same people either. People from outside the field, like Feynman or more recently Bill Gates, think that the problem is just a case of idiots doing the same old thing, once you bring about the better methods, "integrity" (in this case perhaps may refer to teacher's ratings) and money, the problem may be solved relatively easily. As we have seen, that is not the case, because although the above sentiments contain most of the truth, there are other factors affecting the problem, too. The point is, unless you can attack all the factors at once, you won't be able to solve such deep sociological problems, which is why these require scientific++ approaches.

As for your tone, why not try to be a little more humble, rather than "makes no sense", "semi-solid" etc., why not "I didn't understand", even if the argument does suck.
Does Your company pays you correct?
Like anything else, the more you do it the easier it gets. I have two part time developers working for me (one from Nepal and the other from Ukraine. They're both great. Much better than the 80-90k/year developers I worked with when I had a day job.

Initially I start by posting the job, then filtering in stages before asking them (and paying them) to complete a small 1 to 2 hour coding project. The coding exercise can be done many different ways but the purpose is to evaluate problem solving, code quality, knowledge of libraries, code structure, etc. It's amazing how much insight you can gain with something like that.

More importantly, having them work on something real helps me further evaluate communication, responsiveness, and other attributes I look for in a good dev.
Serving the customer does not equal a customer service issue.

Amazon and most online retailers (at least the good ones) fully realize that they're going to have high return rates and account for customers doing exactly what Jason did (my wife does it regularly). This is a cost of doing business. You're competing against brick and mortar stores where people can go in and touch and see the actual product before they walk out with it. Would Amazon prefer it didn't happen? Sure, but Macy's and Barnes and Noble would prefer not to have to pay rent and hire retail employees too.
Biochip That Makes 10,000 Simultaneous Measurements
Ask HN: what are some options for someone with a decade of experiance
Most of my experiance Is with a startup. About a good 7 years. It wast not successfull in the traditional sense(no exit). After that I have been managing a small team of developers as a product development lead. I am looking to make a move and want to do something like produc management. What's the best way to do that. What other options do I have. Thx
What? This is the same as the Android feature. External installs are blocked by default and the user can change that setting and acknowledge the security risk.
I noticed awhile back that user rougefeta used Arc or something strongly resembling it for their webapp they were applying to YC with, have any others also used Arc-based webapps to apply to YC?

rougefeta seems to have taken the site down though.

http://news.ycombinator.com/user?id=rougefeta
A problem I have had with these frameworks is that they all sound great on the surface but when you start using them you run into issues or missing features that are important to you and sometimes there's nothing you can do about it.

Haxe does look great and for this particular case I wonder how Haxe NME's performance compares to the lua frameworks like Corona and Gideros for mobile development specifically.
An object-oriented influence graph
I realize why this seems like a good solution at first glance, but it's actually very impractical. First off, much of the detection you want to do is computationally expensive and just can't be bundled into a standalone application shipped to end users. Consider simulated/sandboxed execution, which is great for identifying malicious code but typically requires a whole supporting environment to work.

Second, even when you can push some subset of detection to the client, the fact is that doing so undermines its own effectiveness. Malicious code detection is an arms race, and once the bad guy knows exactly how your detection works he'll alter his signature accordingly. So, by keeping the detection private you force the bad guy to come to you if he wants to test it. And he needs to keep resubmitting his code until it passes, which is in-and-of-itself a useful collection of data for malicious extension detection.

Finally, malicious code detection is often a rapid-response situation. You're constantly getting more data, and evolving and experimenting with different methods. So, you don't want to be bound to a multi-week release cycle, or risk destabilizing Chrome by forcing more frequent releases.
512 bits, most likely a hash, probably sha-512 for its ubiquity.
"for development convenience"

I wonder what the development convenience is when using protobuf instead of JSON. Could you elaborate?
Google Outsells, but Apple Cultivates Loyalty of App Developers
I doubt you're alone in that, and I don't think you're wrong. I can't help but feel a little glee at this and the dirty laundry that undoubtedly will be uncovered in the next couple of days. But it's a guilty pleasure. Behaviour like this just conflicts with the categorical imperative.

However I might change my tone if something really serious is uncovered here. I think whistle blowing is a good thing, and this seems like the next best equivalent. Of course, that is a ridiculous position to take, essentially giving any random hacker the license to read through random personal email and blow the whistle on demand.[0] So I guess that position isn't tenable, either. But I know it'd be hard to be critical of a hypothetical hack that revealed or delivered proof about illegal activities by certain groups, be it Scientology, large-scale financial stuff or neo-nazis.

A more responsible release would probably only include incriminating or otherwise extraordinary emails, preserving (sort of) the privacy of most people. But arguably that's so difficult and personally dangerous in case of large data hacks or leaks that it's equivalent of saying a responsible release isn't viable.

[0] As determined by them, but that problem applies to all kinds of whistle blowing.
For folks outside of JavaEE, its common to deploy jars though. I have never run the software that takes .wars.
the people who would most benefit from your comment either don't care or are too lazy to think up better ways to assess people outside the grade system.
Can you explain more about this rainbow table function? From what I understand, rainbow tables are simply precomputed hashes of common passwords. What you're saying is that we should use passwords that aren't in a rainbow table, which by definition implies that the passwords are not common.
This is not significantly easier than just using grep -lir keyword directory yourself.

ack[1], however, does improve upon grep. Enter directory and ack keyword. It skips over VCS cruft and backup files (I believe) while presenting a nice file-based view of found lines.

[1]: http://betterthangrep.com/
It doesn't take a genius (or quite so many words) to come to the conclusion that when the economy is growing fast corruption starts and when the economy slows down the poor will get angry about cortuption.

That said - I'm not really for predicting the future in narrative form like this because it is very one eyed. There's plenty of signs pointing in other directions as well.
What should society look like? I'll take a stab at it.

We should value compassion and authentic relationships, rather than talking in the language of power. We should get the f over ourselves, and especially value those that do, as they're more likely to be trusted with positions of power since they have a level of self-knowledge that many do not. We should stop obsessing over meaningless things like money and get on with doing what we, personally, need to do. We should stop accepting the disgustingly low level of national discourse that pervades the mainstream media and move towards talking like adults. We should stop living in a reactionary, fear-based mode, especially with regard to terrorism. We should stop being obsessed with work in a vain attempt to define ourselves.

In short, we should take responsibility for our lives as humans and the impact we have on everyone around us. Currently, there's too much of an incentive to act like an asshole.
I disagree. Take the education reform problem (in the US). A number of solutions have been proposed, which one should we implement, or should we come up with a new one? Are teachers' ratings completely bogus, as some claim, or can they be used to rate them. People want answers, you can't just give up. Not everybody can close shop and work on other, more well-defined problems because these problems need to be solved, or lacking that, addressed. You have to come up with a methodology. Now, you may not want to call it "science" but that doesn't make the results meaningless.

Similar problems that require a combination of statistics, biology, psychology, ethics, and politics:

* Should universities stop affirmative action, should they stop reverse affirmative action for Asians?

* Should we (like Norway) enact laws that require a certain percentage of women on company boards?

* Should there be gender equality (in the sense of numbers) in almost all professions? Are men (or women) more suitable for certain jobs?

etc., I'm sure you can think of many more.
Using an electrical circuit solver to track ad click fraud
You should make sure that the photos pass some sort of test for quality and resolution. I want to see photos that make stuff look truly beautiful.
This is exactly the way the courses at my University (Cambridge, UK) worked. The lectures covered all relevant course material and problem sheets were given out (also available online http://www.damtp.cam.ac.uk/user/examples/).

Each course had a short list of recommended books and usually the lecturer would give a few comments about each book at the start of the course. These were for supplementary reference and were widely available in the libraries. I bought one text book during my course for my favourite area, so I could keep it after University. Otherwise the libraries were completely adequate.

I studied maths, I know that computer science and physics were the same. With arts subjects students used so many books that it wouldn't be reasonable to by them. I am not aware of any courses having required textbooks but I don't know for certain.
Ouch, sorry others are having trouble. Mine happened to work- but I don't know a lot about controlling the build config.

And the formatting didn't survive pasting. Should have been:
./configure --with-gif=no --with-ns;
make;
make install
I had this exact same problem.

In the end, it required networking with real people and real face-to-face meetings. And it required travel to, and throughout, the bay area.

Nontechnical cofounders are far less common than everyone seems to think. Out of the hundreds of people I met that week, only a few nibbles and a couple of bites.

The sad fact is that cofounders in general are quite scarce, and just like most developers aren't comfortable in the startup space, most bizdev people aren't either.

Look hard, have a great value proposition, and a clear and demonstrable niche for the right person to fill. And then, just be lucky. I dare say that a good bizdev cofounder is an order of magnitude scarcer than a good technical cofounder, based on recent personal experience.
Namely:

.overlay-label {
border-radius: 5px;
}
yeah we manually review them all.
Idea for in-app purchase: Sponsor of the week.
League of Legends database hacked.
Someday there will be a version where the new feature will be an actually useful wiki :p
lol you guys seriously hate hard corners, i don't think there is anything wrong with it.
That's because the WebGL version is using your GPU and the Flash version isn't. The Flash version is done through the 2D drawing API which is equivalent to HTML5 canvas (i.e. CPU bound). So, in that respect, the Flash version is actually doing a pretty amazing job.